remoteclaw 0.1.0-next.049f396 → 0.1.0-next.05abcca

package/dist/extensionAPI.js

@@ -13,16 +13,13 @@ import { execFileSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import AjvPkg from "ajv";
 import { z } from "zod";
+import { lookup } from "node:dns";
+import { lookup as lookup$1 } from "node:dns/promises";
+import { Agent } from "undici";
+import ipaddr from "ipaddr.js";
+import { fileTypeFromBuffer } from "file-type";
 import { createInterface } from "node:readline";
 
-//#region src/config/model-input.ts
-function resolveAgentModelPrimaryValue(model) {
-	if (typeof model === "string") return model.trim() || void 0;
-	if (!model || typeof model !== "object") return;
-	return model.primary?.trim() || void 0;
-}
-
-//#endregion
 //#region src/infra/home-dir.ts
 function normalize(value) {
 	const trimmed = value?.trim();
@@ -542,8 +539,8 @@ function pruneOldRollingLogs(dir) {
 
 //#endregion
 //#region src/terminal/palette.ts
-const LOBSTER_PALETTE = {
-	accent: "#FF5A2D",
+const PALETTE = {
+	accent: "#FF5A36",
 	accentBright: "#FF7A3D",
 	accentDim: "#D14A22",
 	info: "#FF8A5B",
@@ -559,17 +556,17 @@ const hasForceColor = typeof process.env.FORCE_COLOR === "string" && process.env
 const baseChalk = process.env.NO_COLOR && !hasForceColor ? new Chalk({ level: 0 }) : chalk;
 const hex = (value) => baseChalk.hex(value);
 const theme = {
-	accent: hex(LOBSTER_PALETTE.accent),
-	accentBright: hex(LOBSTER_PALETTE.accentBright),
-	accentDim: hex(LOBSTER_PALETTE.accentDim),
-	info: hex(LOBSTER_PALETTE.info),
-	success: hex(LOBSTER_PALETTE.success),
-	warn: hex(LOBSTER_PALETTE.warn),
-	error: hex(LOBSTER_PALETTE.error),
-	muted: hex(LOBSTER_PALETTE.muted),
-	heading: baseChalk.bold.hex(LOBSTER_PALETTE.accent),
-	command: hex(LOBSTER_PALETTE.accentBright),
-	option: hex(LOBSTER_PALETTE.warn)
+	accent: hex(PALETTE.accent),
+	accentBright: hex(PALETTE.accentBright),
+	accentDim: hex(PALETTE.accentDim),
+	info: hex(PALETTE.info),
+	success: hex(PALETTE.success),
+	warn: hex(PALETTE.warn),
+	error: hex(PALETTE.error),
+	muted: hex(PALETTE.muted),
+	heading: baseChalk.bold.hex(PALETTE.accent),
+	command: hex(PALETTE.accentBright),
+	option: hex(PALETTE.warn)
 };
 
 //#endregion
@@ -578,6 +575,10 @@ let globalVerbose = false;
 function isVerbose() {
 	return globalVerbose;
 }
+function logVerboseConsole(message) {
+	if (!globalVerbose) return;
+	console.log(theme.muted(message));
+}
 const success = theme.success;
 const warn = theme.warn;
 const info = theme.info;
@@ -636,6 +637,8 @@ function createEmptyPluginRegistry() {
 		typedHooks: [],
 		channels: [],
 		providers: [],
+		sttProviders: [],
+		ttsProviders: [],
 		gatewayHandlers: {},
 		httpHandlers: [],
 		httpRoutes: [],
@@ -1087,7 +1090,8 @@ function resolveAgentConfig(cfg, agentId) {
 		groupChat: entry.groupChat,
 		subagents: typeof entry.subagents === "object" && entry.subagents ? entry.subagents : void 0,
 		sandbox: entry.sandbox,
-		tools: entry.tools
+		tools: entry.tools,
+		auth: entry.auth
 	};
 }
 function resolveAgentWorkspaceDir(cfg, agentId) {
@@ -1096,6 +1100,11 @@ function resolveAgentWorkspaceDir(cfg, agentId) {
 	if (configured) return stripNullBytes(resolveUserPath(configured));
 	throw new Error(`agent '${id}' has no workspace configured — set agents.list[].workspace in remoteclaw.json`);
 }
+function resolveAgentWorkspaceDirOrNull(cfg, agentId) {
+	const configured = resolveAgentConfig(cfg, normalizeAgentId(agentId))?.workspace?.trim();
+	if (configured) return stripNullBytes(resolveUserPath(configured));
+	return null;
+}
 function resolveAgentDir(cfg, agentId) {
 	const id = normalizeAgentId(agentId);
 	const configured = resolveAgentConfig(cfg, id)?.agentDir?.trim();
@@ -1104,11 +1113,6 @@ function resolveAgentDir(cfg, agentId) {
 	return path.join(root, "agents", id, "agent");
 }
 
-//#endregion
-//#region src/agents/defaults.ts
-const DEFAULT_PROVIDER = "anthropic";
-const DEFAULT_MODEL = "claude-opus-4-6";
-
 //#endregion
 //#region src/agents/identity.ts
 function resolveAgentIdentity(cfg, agentId) {
@@ -1716,13 +1720,12 @@ function findDuplicateAgentDirs(cfg, deps) {
 function formatDuplicateAgentDirError(dups) {
 	return [
 		"Duplicate agentDir detected (multi-agent config).",
-		"Each agent must have a unique agentDir; sharing it causes auth/session state collisions and token invalidation.",
+		"Each agent must have a unique agentDir; sharing it causes session state collisions.",
 		"",
 		"Conflicts:",
 		...dups.map((d) => `- ${d.agentDir}: ${d.agentIds.map((id) => `"${id}"`).join(", ")}`),
 		"",
-		"Fix: remove the shared agents.list[].agentDir override (or give each agent its own directory).",
-		"If you want to share credentials, copy auth-profiles.json instead of sharing the entire agentDir."
+		"Fix: remove the shared agents.list[].agentDir override (or give each agent its own directory)."
 	].join("\n");
 }
 
@@ -2168,7 +2171,9 @@ function applyContextPruningDefaults(cfg) {
 			};
 			modelsMutated = true;
 		}
-		const primary = resolvePrimaryModelRef(resolveAgentModelPrimaryValue(defaults.model) ?? void 0);
+		const rawModel = defaults.model;
+		const rawPrimary = typeof rawModel === "string" ? rawModel : rawModel?.primary;
+		const primary = resolvePrimaryModelRef(typeof rawPrimary === "string" ? rawPrimary : void 0);
 		if (primary) {
 			const parsedPrimary = parseModelRef(primary, "anthropic");
 			if (isAnthropicCacheRetentionTarget(parsedPrimary)) {
@@ -2201,25 +2206,6 @@ function applyContextPruningDefaults(cfg) {
 		}
 	};
 }
-function applyCompactionDefaults(cfg) {
-	const defaults = cfg.agents?.defaults;
-	if (!defaults) return cfg;
-	const compaction = defaults?.compaction;
-	if (compaction?.mode) return cfg;
-	return {
-		...cfg,
-		agents: {
-			...cfg.agents,
-			defaults: {
-				...defaults,
-				compaction: {
-					...compaction,
-					mode: "safeguard"
-				}
-			}
-		}
-	};
-}
 
 //#endregion
 //#region src/config/env-preserve.ts
@@ -2648,1142 +2634,189 @@ function resolveConfigIncludes(obj, configPath, resolver = defaultResolver) {
 }
 
 //#endregion
-//#region src/config/discord-preview-streaming.ts
-function normalizeStreamingMode(value) {
-	if (typeof value !== "string") return null;
-	return value.trim().toLowerCase() || null;
-}
-function parseStreamingMode(value) {
-	const normalized = normalizeStreamingMode(value);
-	if (normalized === "off" || normalized === "partial" || normalized === "block" || normalized === "progress") return normalized;
-	return null;
-}
-function parseDiscordPreviewStreamMode(value) {
-	const parsed = parseStreamingMode(value);
-	if (!parsed) return null;
-	return parsed === "progress" ? "partial" : parsed;
+//#region src/config/legacy.rules.ts
+const LEGACY_CONFIG_RULES = [];
+
+//#endregion
+//#region src/config/legacy.ts
+function findLegacyConfigIssues(raw) {
+	if (!raw || typeof raw !== "object") return [];
+	const root = raw;
+	const issues = [];
+	for (const rule of LEGACY_CONFIG_RULES) {
+		let cursor = root;
+		for (const key of rule.path) {
+			if (!cursor || typeof cursor !== "object") {
+				cursor = void 0;
+				break;
+			}
+			cursor = cursor[key];
+		}
+		if (cursor !== void 0 && (!rule.match || rule.match(cursor, root))) issues.push({
+			path: rule.path.join("."),
+			message: rule.message
+		});
+	}
+	return issues;
 }
-function parseSlackLegacyDraftStreamMode(value) {
-	const normalized = normalizeStreamingMode(value);
-	if (normalized === "replace" || normalized === "status_final" || normalized === "append") return normalized;
-	return null;
+
+//#endregion
+//#region src/config/merge-patch.ts
+function isObjectWithStringId(value) {
+	if (!isPlainObject$2(value)) return false;
+	return typeof value.id === "string" && value.id.length > 0;
 }
-function mapSlackLegacyDraftStreamModeToStreaming(mode) {
-	if (mode === "append") return "block";
-	if (mode === "status_final") return "progress";
-	return "partial";
+/**
+* Merge arrays of object-like entries keyed by `id`.
+*
+* Contract:
+* - Base array must be fully id-keyed; otherwise return undefined (caller should replace).
+* - Patch entries with valid id merge by id (or append when the id is new).
+* - Patch entries without valid id append as-is, avoiding destructive full-array replacement.
+*/
+function mergeObjectArraysById(base, patch, options) {
+	if (!base.every(isObjectWithStringId)) return;
+	const merged = [...base];
+	const indexById = /* @__PURE__ */ new Map();
+	for (const [index, entry] of merged.entries()) {
+		if (!isObjectWithStringId(entry)) return;
+		indexById.set(entry.id, index);
+	}
+	for (const patchEntry of patch) {
+		if (!isObjectWithStringId(patchEntry)) {
+			merged.push(structuredClone(patchEntry));
+			continue;
+		}
+		const existingIndex = indexById.get(patchEntry.id);
+		if (existingIndex === void 0) {
+			merged.push(structuredClone(patchEntry));
+			indexById.set(patchEntry.id, merged.length - 1);
+			continue;
+		}
+		merged[existingIndex] = applyMergePatch(merged[existingIndex], patchEntry, options);
+	}
+	return merged;
 }
-function resolveTelegramPreviewStreamMode(params = {}) {
-	const parsedStreaming = parseStreamingMode(params.streaming);
-	if (parsedStreaming) {
-		if (parsedStreaming === "progress") return "partial";
-		return parsedStreaming;
+function applyMergePatch(base, patch, options = {}) {
+	if (!isPlainObject$2(patch)) return patch;
+	const result = isPlainObject$2(base) ? { ...base } : {};
+	for (const [key, value] of Object.entries(patch)) {
+		if (isBlockedObjectKey(key)) continue;
+		if (value === null) {
+			delete result[key];
+			continue;
+		}
+		if (options.mergeObjectArraysById && Array.isArray(result[key]) && Array.isArray(value)) {
+			const mergedArray = mergeObjectArraysById(result[key], value, options);
+			if (mergedArray) {
+				result[key] = mergedArray;
+				continue;
+			}
+		}
+		if (isPlainObject$2(value)) {
+			const baseValue = result[key];
+			result[key] = applyMergePatch(isPlainObject$2(baseValue) ? baseValue : {}, value, options);
+			continue;
+		}
+		result[key] = value;
 	}
-	const legacy = parseDiscordPreviewStreamMode(params.streamMode);
-	if (legacy) return legacy;
-	if (typeof params.streaming === "boolean") return params.streaming ? "partial" : "off";
-	return "off";
+	return result;
 }
-function resolveDiscordPreviewStreamMode(params = {}) {
-	const parsedStreaming = parseDiscordPreviewStreamMode(params.streaming);
-	if (parsedStreaming) return parsedStreaming;
-	const legacy = parseDiscordPreviewStreamMode(params.streamMode);
-	if (legacy) return legacy;
-	if (typeof params.streaming === "boolean") return params.streaming ? "partial" : "off";
-	return "off";
+
+//#endregion
+//#region src/config/normalize-paths.ts
+const PATH_VALUE_RE = /^~(?=$|[\\/])/;
+const PATH_KEY_RE = /(dir|path|paths|file|root|workspace)$/i;
+const PATH_LIST_KEYS = new Set(["paths", "pathPrepend"]);
+function normalizeStringValue(key, value) {
+	if (!PATH_VALUE_RE.test(value.trim())) return value;
+	if (!key) return value;
+	if (PATH_KEY_RE.test(key) || PATH_LIST_KEYS.has(key)) return resolveUserPath(value);
+	return value;
 }
-function resolveSlackStreamingMode(params = {}) {
-	const parsedStreaming = parseStreamingMode(params.streaming);
-	if (parsedStreaming) return parsedStreaming;
-	const legacyStreamMode = parseSlackLegacyDraftStreamMode(params.streamMode);
-	if (legacyStreamMode) return mapSlackLegacyDraftStreamModeToStreaming(legacyStreamMode);
-	if (typeof params.streaming === "boolean") return "partial";
-	return "partial";
+function normalizeAny(key, value) {
+	if (typeof value === "string") return normalizeStringValue(key, value);
+	if (Array.isArray(value)) {
+		const normalizeChildren = Boolean(key && PATH_LIST_KEYS.has(key));
+		return value.map((entry) => {
+			if (typeof entry === "string") return normalizeChildren ? normalizeStringValue(key, entry) : entry;
+			if (Array.isArray(entry)) return normalizeAny(void 0, entry);
+			if (isPlainObject$2(entry)) return normalizeAny(void 0, entry);
+			return entry;
+		});
+	}
+	if (!isPlainObject$2(value)) return value;
+	for (const [childKey, childValue] of Object.entries(value)) {
+		const next = normalizeAny(childKey, childValue);
+		if (next !== childValue) value[childKey] = next;
+	}
+	return value;
 }
-function resolveSlackNativeStreaming(params = {}) {
-	if (typeof params.nativeStreaming === "boolean") return params.nativeStreaming;
-	if (typeof params.streaming === "boolean") return params.streaming;
-	return true;
+/**
+* Normalize "~" paths in path-ish config fields.
+*
+* Goal: accept `~/...` consistently across config file + env overrides, while
+* keeping the surface area small and predictable.
+*/
+function normalizeConfigPaths(cfg) {
+	if (!cfg || typeof cfg !== "object") return cfg;
+	normalizeAny(void 0, cfg);
+	return cfg;
 }
 
 //#endregion
-//#region src/infra/safe-executable-value.ts
-const SHELL_METACHARS = /[;&|`$<>]/;
-const CONTROL_CHARS = /[\r\n]/;
-const QUOTE_CHARS = /["']/;
-const BARE_NAME_PATTERN = /^[A-Za-z0-9._+-]+$/;
-function isLikelyPath(value) {
-	if (value.startsWith(".") || value.startsWith("~")) return true;
-	if (value.includes("/") || value.includes("\\")) return true;
-	return /^[A-Za-z]:[\\/]/.test(value);
+//#region src/config/runtime-overrides.ts
+let overrides = {};
+function mergeOverrides(base, override) {
+	if (!isPlainObject$2(base) || !isPlainObject$2(override)) return override;
+	const next = { ...base };
+	for (const [key, value] of Object.entries(override)) {
+		if (value === void 0 || isBlockedObjectKey(key)) continue;
+		next[key] = mergeOverrides(base[key], value);
+	}
+	return next;
 }
-function isSafeExecutableValue(value) {
-	if (!value) return false;
-	const trimmed = value.trim();
-	if (!trimmed) return false;
-	if (trimmed.includes("\0")) return false;
-	if (CONTROL_CHARS.test(trimmed)) return false;
-	if (SHELL_METACHARS.test(trimmed)) return false;
-	if (QUOTE_CHARS.test(trimmed)) return false;
-	if (isLikelyPath(trimmed)) return true;
-	if (trimmed.startsWith("-")) return false;
-	return BARE_NAME_PATTERN.test(trimmed);
+function applyConfigOverrides(cfg) {
+	if (!overrides || Object.keys(overrides).length === 0) return cfg;
+	return mergeOverrides(cfg, overrides);
 }
 
 //#endregion
-//#region src/config/legacy.shared.ts
-const getRecord = (value) => isRecord(value) ? value : null;
-const ensureRecord = (root, key) => {
-	const existing = root[key];
-	if (isRecord(existing)) return existing;
-	const next = {};
-	root[key] = next;
-	return next;
+//#region src/plugins/config-state.ts
+const BUNDLED_ENABLED_BY_DEFAULT = new Set([
+	"device-pair",
+	"phone-control",
+	"talk-voice"
+]);
+const normalizeList = (value) => {
+	if (!Array.isArray(value)) return [];
+	return value.map((entry) => typeof entry === "string" ? entry.trim() : "").filter(Boolean);
 };
-const mergeMissing = (target, source) => {
-	for (const [key, value] of Object.entries(source)) {
-		if (value === void 0 || isBlockedObjectKey(key)) continue;
-		const existing = target[key];
-		if (existing === void 0) {
-			target[key] = value;
+const normalizePluginEntries = (entries) => {
+	if (!entries || typeof entries !== "object" || Array.isArray(entries)) return {};
+	const normalized = {};
+	for (const [key, value] of Object.entries(entries)) {
+		if (!key.trim()) continue;
+		if (!value || typeof value !== "object" || Array.isArray(value)) {
+			normalized[key] = {};
 			continue;
 		}
-		if (isRecord(existing) && isRecord(value)) mergeMissing(existing, value);
+		const entry = value;
+		normalized[key] = {
+			enabled: typeof entry.enabled === "boolean" ? entry.enabled : void 0,
+			config: "config" in entry ? entry.config : void 0
+		};
 	}
+	return normalized;
 };
-const mapLegacyAudioTranscription = (value) => {
-	const transcriber = getRecord(value);
-	const command = Array.isArray(transcriber?.command) ? transcriber?.command : null;
-	if (!command || command.length === 0) return null;
-	if (typeof command[0] !== "string") return null;
-	if (!command.every((part) => typeof part === "string")) return null;
-	const rawExecutable = command[0].trim();
-	if (!rawExecutable) return null;
-	if (!isSafeExecutableValue(rawExecutable)) return null;
-	const args = command.slice(1);
-	const timeoutSeconds = typeof transcriber?.timeoutSeconds === "number" ? transcriber?.timeoutSeconds : void 0;
-	const result = {
-		command: rawExecutable,
-		type: "cli"
-	};
-	if (args.length > 0) result.args = args;
-	if (timeoutSeconds !== void 0) result.timeoutSeconds = timeoutSeconds;
-	return result;
-};
-const getAgentsList = (agents) => {
-	const list = agents?.list;
-	return Array.isArray(list) ? list : [];
-};
-const resolveDefaultAgentIdFromRaw = (raw) => {
-	const list = getAgentsList(getRecord(raw.agents));
-	const defaultEntry = list.find((entry) => isRecord(entry) && entry.default === true && typeof entry.id === "string" && entry.id.trim() !== "");
-	if (defaultEntry) return defaultEntry.id.trim();
-	const routing = getRecord(raw.routing);
-	const routingDefault = typeof routing?.defaultAgentId === "string" ? routing.defaultAgentId.trim() : "";
-	if (routingDefault) return routingDefault;
-	const firstEntry = list.find((entry) => isRecord(entry) && typeof entry.id === "string" && entry.id.trim() !== "");
-	if (firstEntry) return firstEntry.id.trim();
-	return "main";
-};
-const ensureAgentEntry = (list, id) => {
-	const normalized = id.trim();
-	const existing = list.find((entry) => isRecord(entry) && typeof entry.id === "string" && entry.id.trim() === normalized);
-	if (existing) return existing;
-	const created = { id: normalized };
-	list.push(created);
-	return created;
-};
-
-//#endregion
-//#region src/config/legacy.migrations.part-1.ts
-function migrateBindings(raw, changes, changeNote, mutator) {
-	const bindings = Array.isArray(raw.bindings) ? raw.bindings : null;
-	if (!bindings) return;
-	let touched = false;
-	for (const entry of bindings) {
-		if (!isRecord(entry)) continue;
-		const match = getRecord(entry.match);
-		if (!match) continue;
-		if (!mutator(match)) continue;
-		entry.match = match;
-		touched = true;
-	}
-	if (touched) {
-		raw.bindings = bindings;
-		changes.push(changeNote);
-	}
-}
-function ensureDefaultGroupEntry(section) {
-	const groups = isRecord(section.groups) ? section.groups : {};
-	const defaultKey = "*";
-	return {
-		groups,
-		entry: isRecord(groups[defaultKey]) ? groups[defaultKey] : {}
-	};
-}
-const LEGACY_CONFIG_MIGRATIONS_PART_1 = [
-	{
-		id: "bindings.match.provider->bindings.match.channel",
-		describe: "Move bindings[].match.provider to bindings[].match.channel",
-		apply: (raw, changes) => {
-			migrateBindings(raw, changes, "Moved bindings[].match.provider → bindings[].match.channel.", (match) => {
-				if (typeof match.channel === "string" && match.channel.trim()) return false;
-				const provider = typeof match.provider === "string" ? match.provider.trim() : "";
-				if (!provider) return false;
-				match.channel = provider;
-				delete match.provider;
-				return true;
-			});
-		}
-	},
-	{
-		id: "bindings.match.accountID->bindings.match.accountId",
-		describe: "Move bindings[].match.accountID to bindings[].match.accountId",
-		apply: (raw, changes) => {
-			migrateBindings(raw, changes, "Moved bindings[].match.accountID → bindings[].match.accountId.", (match) => {
-				if (match.accountId !== void 0) return false;
-				const accountID = typeof match.accountID === "string" ? match.accountID.trim() : match.accountID;
-				if (!accountID) return false;
-				match.accountId = accountID;
-				delete match.accountID;
-				return true;
-			});
-		}
-	},
-	{
-		id: "session.sendPolicy.rules.match.provider->match.channel",
-		describe: "Move session.sendPolicy.rules[].match.provider to match.channel",
-		apply: (raw, changes) => {
-			const session = getRecord(raw.session);
-			if (!session) return;
-			const sendPolicy = getRecord(session.sendPolicy);
-			if (!sendPolicy) return;
-			const rules = Array.isArray(sendPolicy.rules) ? sendPolicy.rules : null;
-			if (!rules) return;
-			let touched = false;
-			for (const rule of rules) {
-				if (!isRecord(rule)) continue;
-				const match = getRecord(rule.match);
-				if (!match) continue;
-				if (typeof match.channel === "string" && match.channel.trim()) continue;
-				const provider = typeof match.provider === "string" ? match.provider.trim() : "";
-				if (!provider) continue;
-				match.channel = provider;
-				delete match.provider;
-				rule.match = match;
-				touched = true;
-			}
-			if (touched) {
-				sendPolicy.rules = rules;
-				session.sendPolicy = sendPolicy;
-				raw.session = session;
-				changes.push("Moved session.sendPolicy.rules[].match.provider → match.channel.");
-			}
-		}
-	},
-	{
-		id: "messages.queue.byProvider->byChannel",
-		describe: "Move messages.queue.byProvider to messages.queue.byChannel",
-		apply: (raw, changes) => {
-			const messages = getRecord(raw.messages);
-			if (!messages) return;
-			const queue = getRecord(messages.queue);
-			if (!queue) return;
-			if (queue.byProvider === void 0) return;
-			if (queue.byChannel === void 0) {
-				queue.byChannel = queue.byProvider;
-				changes.push("Moved messages.queue.byProvider → messages.queue.byChannel.");
-			} else changes.push("Removed messages.queue.byProvider (messages.queue.byChannel already set).");
-			delete queue.byProvider;
-			messages.queue = queue;
-			raw.messages = messages;
-		}
-	},
-	{
-		id: "providers->channels",
-		describe: "Move provider config sections to channels.*",
-		apply: (raw, changes) => {
-			const legacyEntries = [
-				"whatsapp",
-				"telegram",
-				"discord",
-				"slack",
-				"signal",
-				"imessage",
-				"msteams"
-			].filter((key) => isRecord(raw[key]));
-			if (legacyEntries.length === 0) return;
-			const channels = ensureRecord(raw, "channels");
-			for (const key of legacyEntries) {
-				const legacy = getRecord(raw[key]);
-				if (!legacy) continue;
-				const channelEntry = ensureRecord(channels, key);
-				const hadEntries = Object.keys(channelEntry).length > 0;
-				mergeMissing(channelEntry, legacy);
-				channels[key] = channelEntry;
-				delete raw[key];
-				changes.push(hadEntries ? `Merged ${key} → channels.${key}.` : `Moved ${key} → channels.${key}.`);
-			}
-			raw.channels = channels;
-		}
-	},
-	{
-		id: "channels.streaming-keys->channels.streaming",
-		describe: "Normalize legacy streaming keys to channels.<provider>.streaming (Telegram/Discord/Slack)",
-		apply: (raw, changes) => {
-			const channels = getRecord(raw.channels);
-			if (!channels) return;
-			const migrateProviderEntry = (params) => {
-				const migrateCommonStreamingMode = (resolveMode) => {
-					const hasLegacyStreamMode = params.entry.streamMode !== void 0;
-					const legacyStreaming = params.entry.streaming;
-					if (!hasLegacyStreamMode && typeof legacyStreaming !== "boolean") return false;
-					const resolved = resolveMode(params.entry);
-					params.entry.streaming = resolved;
-					if (hasLegacyStreamMode) {
-						delete params.entry.streamMode;
-						changes.push(`Moved ${params.pathPrefix}.streamMode → ${params.pathPrefix}.streaming (${resolved}).`);
-					}
-					if (typeof legacyStreaming === "boolean") changes.push(`Normalized ${params.pathPrefix}.streaming boolean → enum (${resolved}).`);
-					return true;
-				};
-				const hasLegacyStreamMode = params.entry.streamMode !== void 0;
-				const legacyStreaming = params.entry.streaming;
-				const legacyNativeStreaming = params.entry.nativeStreaming;
-				if (params.provider === "telegram") {
-					migrateCommonStreamingMode(resolveTelegramPreviewStreamMode);
-					return;
-				}
-				if (params.provider === "discord") {
-					migrateCommonStreamingMode(resolveDiscordPreviewStreamMode);
-					return;
-				}
-				if (!hasLegacyStreamMode && typeof legacyStreaming !== "boolean") return;
-				const resolvedStreaming = resolveSlackStreamingMode(params.entry);
-				const resolvedNativeStreaming = resolveSlackNativeStreaming(params.entry);
-				params.entry.streaming = resolvedStreaming;
-				params.entry.nativeStreaming = resolvedNativeStreaming;
-				if (hasLegacyStreamMode) {
-					delete params.entry.streamMode;
-					changes.push(`Moved ${params.pathPrefix}.streamMode → ${params.pathPrefix}.streaming (${resolvedStreaming}).`);
-				}
-				if (typeof legacyStreaming === "boolean") changes.push(`Moved ${params.pathPrefix}.streaming (boolean) → ${params.pathPrefix}.nativeStreaming (${resolvedNativeStreaming}).`);
-				else if (typeof legacyNativeStreaming !== "boolean" && hasLegacyStreamMode) changes.push(`Set ${params.pathPrefix}.nativeStreaming → ${resolvedNativeStreaming}.`);
-			};
-			const migrateProvider = (provider) => {
-				const providerEntry = getRecord(channels[provider]);
-				if (!providerEntry) return;
-				migrateProviderEntry({
-					provider,
-					entry: providerEntry,
-					pathPrefix: `channels.${provider}`
-				});
-				const accounts = getRecord(providerEntry.accounts);
-				if (!accounts) return;
-				for (const [accountId, accountValue] of Object.entries(accounts)) {
-					const account = getRecord(accountValue);
-					if (!account) continue;
-					migrateProviderEntry({
-						provider,
-						entry: account,
-						pathPrefix: `channels.${provider}.accounts.${accountId}`
-					});
-				}
-			};
-			migrateProvider("telegram");
-			migrateProvider("discord");
-			migrateProvider("slack");
-		}
-	},
-	{
-		id: "routing.allowFrom->channels.whatsapp.allowFrom",
-		describe: "Move routing.allowFrom to channels.whatsapp.allowFrom",
-		apply: (raw, changes) => {
-			const routing = raw.routing;
-			if (!routing || typeof routing !== "object") return;
-			const allowFrom = routing.allowFrom;
-			if (allowFrom === void 0) return;
-			const channels = getRecord(raw.channels);
-			const whatsapp = channels ? getRecord(channels.whatsapp) : null;
-			if (!whatsapp) {
-				delete routing.allowFrom;
-				if (Object.keys(routing).length === 0) delete raw.routing;
-				changes.push("Removed routing.allowFrom (channels.whatsapp not configured).");
-				return;
-			}
-			if (whatsapp.allowFrom === void 0) {
-				whatsapp.allowFrom = allowFrom;
-				changes.push("Moved routing.allowFrom → channels.whatsapp.allowFrom.");
-			} else changes.push("Removed routing.allowFrom (channels.whatsapp.allowFrom already set).");
-			delete routing.allowFrom;
-			if (Object.keys(routing).length === 0) delete raw.routing;
-			channels.whatsapp = whatsapp;
-			raw.channels = channels;
-		}
-	},
-	{
-		id: "routing.groupChat.requireMention->groups.*.requireMention",
-		describe: "Move routing.groupChat.requireMention to channels.whatsapp/telegram/imessage groups",
-		apply: (raw, changes) => {
-			const routing = raw.routing;
-			if (!routing || typeof routing !== "object") return;
-			const groupChat = routing.groupChat && typeof routing.groupChat === "object" ? routing.groupChat : null;
-			if (!groupChat) return;
-			const requireMention = groupChat.requireMention;
-			if (requireMention === void 0) return;
-			const channels = ensureRecord(raw, "channels");
-			const applyTo = (key, options) => {
-				if (options?.requireExisting && !isRecord(channels[key])) return;
-				const section = channels[key] && typeof channels[key] === "object" ? channels[key] : {};
-				const { groups, entry } = ensureDefaultGroupEntry(section);
-				const defaultKey = "*";
-				if (entry.requireMention === void 0) {
-					entry.requireMention = requireMention;
-					groups[defaultKey] = entry;
-					section.groups = groups;
-					channels[key] = section;
-					changes.push(`Moved routing.groupChat.requireMention → channels.${key}.groups."*".requireMention.`);
-				} else changes.push(`Removed routing.groupChat.requireMention (channels.${key}.groups."*" already set).`);
-			};
-			applyTo("whatsapp", { requireExisting: true });
-			applyTo("telegram");
-			applyTo("imessage");
-			delete groupChat.requireMention;
-			if (Object.keys(groupChat).length === 0) delete routing.groupChat;
-			if (Object.keys(routing).length === 0) delete raw.routing;
-			raw.channels = channels;
-		}
-	},
-	{
-		id: "gateway.token->gateway.auth.token",
-		describe: "Move gateway.token to gateway.auth.token",
-		apply: (raw, changes) => {
-			const gateway = raw.gateway;
-			if (!gateway || typeof gateway !== "object") return;
-			const token = gateway.token;
-			if (token === void 0) return;
-			const gatewayObj = gateway;
-			const auth = gatewayObj.auth && typeof gatewayObj.auth === "object" ? gatewayObj.auth : {};
-			if (auth.token === void 0) {
-				auth.token = token;
-				if (!auth.mode) auth.mode = "token";
-				changes.push("Moved gateway.token → gateway.auth.token.");
-			} else changes.push("Removed gateway.token (gateway.auth.token already set).");
-			delete gatewayObj.token;
-			if (Object.keys(auth).length > 0) gatewayObj.auth = auth;
-			raw.gateway = gatewayObj;
-		}
-	},
-	{
-		id: "telegram.requireMention->channels.telegram.groups.*.requireMention",
-		describe: "Move telegram.requireMention to channels.telegram.groups.*.requireMention",
-		apply: (raw, changes) => {
-			const channels = ensureRecord(raw, "channels");
-			const telegram = channels.telegram;
-			if (!telegram || typeof telegram !== "object") return;
-			const requireMention = telegram.requireMention;
-			if (requireMention === void 0) return;
-			const { groups, entry } = ensureDefaultGroupEntry(telegram);
-			const defaultKey = "*";
-			if (entry.requireMention === void 0) {
-				entry.requireMention = requireMention;
-				groups[defaultKey] = entry;
-				telegram.groups = groups;
-				changes.push("Moved telegram.requireMention → channels.telegram.groups.\"*\".requireMention.");
-			} else changes.push("Removed telegram.requireMention (channels.telegram.groups.\"*\" already set).");
-			delete telegram.requireMention;
-			channels.telegram = telegram;
-			raw.channels = channels;
-		}
-	}
-];
-
-//#endregion
-//#region src/config/legacy.migrations.part-2.ts
-function applyLegacyAudioTranscriptionModel(params) {
-	const mapped = mapLegacyAudioTranscription(params.source);
-	if (!mapped) {
-		params.changes.push(params.invalidMessage);
-		return;
-	}
-	const mediaAudio = ensureRecord(ensureRecord(ensureRecord(params.raw, "tools"), "media"), "audio");
-	if ((Array.isArray(mediaAudio.models) ? mediaAudio.models : []).length === 0) {
-		mediaAudio.enabled = true;
-		mediaAudio.models = [mapped];
-		params.changes.push(params.movedMessage);
-		return;
-	}
-	params.changes.push(params.alreadySetMessage);
-}
-const LEGACY_CONFIG_MIGRATIONS_PART_2 = [
-	{
-		id: "agent.model-config-v2",
-		describe: "Migrate legacy agent.model/allowedModels/modelAliases/modelFallbacks/imageModelFallbacks to agent.models + model lists",
-		apply: (raw, changes) => {
-			const agentRoot = getRecord(raw.agent);
-			const defaults = getRecord(getRecord(raw.agents)?.defaults);
-			const agent = agentRoot ?? defaults;
-			if (!agent) return;
-			const label = agentRoot ? "agent" : "agents.defaults";
-			const legacyModel = typeof agent.model === "string" ? String(agent.model) : void 0;
-			const legacyImageModel = typeof agent.imageModel === "string" ? String(agent.imageModel) : void 0;
-			const legacyAllowed = Array.isArray(agent.allowedModels) ? agent.allowedModels.map(String) : [];
-			const legacyModelFallbacks = Array.isArray(agent.modelFallbacks) ? agent.modelFallbacks.map(String) : [];
-			const legacyImageModelFallbacks = Array.isArray(agent.imageModelFallbacks) ? agent.imageModelFallbacks.map(String) : [];
-			const legacyAliases = agent.modelAliases && typeof agent.modelAliases === "object" ? agent.modelAliases : {};
-			if (!(legacyModel || legacyImageModel || legacyAllowed.length > 0 || legacyModelFallbacks.length > 0 || legacyImageModelFallbacks.length > 0 || Object.keys(legacyAliases).length > 0)) return;
-			const models = agent.models && typeof agent.models === "object" ? agent.models : {};
-			const ensureModel = (rawKey) => {
-				if (typeof rawKey !== "string") return;
-				const key = rawKey.trim();
-				if (!key) return;
-				if (!models[key]) models[key] = {};
-			};
-			ensureModel(legacyModel);
-			ensureModel(legacyImageModel);
-			for (const key of legacyAllowed) ensureModel(key);
-			for (const key of legacyModelFallbacks) ensureModel(key);
-			for (const key of legacyImageModelFallbacks) ensureModel(key);
-			for (const target of Object.values(legacyAliases)) {
-				if (typeof target !== "string") continue;
-				ensureModel(target);
-			}
-			for (const [alias, targetRaw] of Object.entries(legacyAliases)) {
-				if (typeof targetRaw !== "string") continue;
-				const target = targetRaw.trim();
-				if (!target) continue;
-				const entry = models[target] && typeof models[target] === "object" ? models[target] : {};
-				if (!("alias" in entry)) {
-					entry.alias = alias;
-					models[target] = entry;
-				}
-			}
-			const currentModel = agent.model && typeof agent.model === "object" ? agent.model : null;
-			if (currentModel) {
-				if (!currentModel.primary && legacyModel) currentModel.primary = legacyModel;
-				if (legacyModelFallbacks.length > 0 && (!Array.isArray(currentModel.fallbacks) || currentModel.fallbacks.length === 0)) currentModel.fallbacks = legacyModelFallbacks;
-				agent.model = currentModel;
-			} else if (legacyModel || legacyModelFallbacks.length > 0) agent.model = {
-				primary: legacyModel,
-				fallbacks: legacyModelFallbacks.length ? legacyModelFallbacks : []
-			};
-			const currentImageModel = agent.imageModel && typeof agent.imageModel === "object" ? agent.imageModel : null;
-			if (currentImageModel) {
-				if (!currentImageModel.primary && legacyImageModel) currentImageModel.primary = legacyImageModel;
-				if (legacyImageModelFallbacks.length > 0 && (!Array.isArray(currentImageModel.fallbacks) || currentImageModel.fallbacks.length === 0)) currentImageModel.fallbacks = legacyImageModelFallbacks;
-				agent.imageModel = currentImageModel;
-			} else if (legacyImageModel || legacyImageModelFallbacks.length > 0) agent.imageModel = {
-				primary: legacyImageModel,
-				fallbacks: legacyImageModelFallbacks.length ? legacyImageModelFallbacks : []
-			};
-			agent.models = models;
-			if (legacyModel !== void 0) changes.push(`Migrated ${label}.model string → ${label}.model.primary.`);
-			if (legacyModelFallbacks.length > 0) changes.push(`Migrated ${label}.modelFallbacks → ${label}.model.fallbacks.`);
-			if (legacyImageModel !== void 0) changes.push(`Migrated ${label}.imageModel string → ${label}.imageModel.primary.`);
-			if (legacyImageModelFallbacks.length > 0) changes.push(`Migrated ${label}.imageModelFallbacks → ${label}.imageModel.fallbacks.`);
-			if (legacyAllowed.length > 0) changes.push(`Migrated ${label}.allowedModels → ${label}.models.`);
-			if (Object.keys(legacyAliases).length > 0) changes.push(`Migrated ${label}.modelAliases → ${label}.models.*.alias.`);
-			delete agent.allowedModels;
-			delete agent.modelAliases;
-			delete agent.modelFallbacks;
-			delete agent.imageModelFallbacks;
-		}
-	},
-	{
-		id: "routing.agents-v2",
-		describe: "Move routing.agents/defaultAgentId to agents.list",
-		apply: (raw, changes) => {
-			const routing = getRecord(raw.routing);
-			if (!routing) return;
-			const routingAgents = getRecord(routing.agents);
-			const agents = ensureRecord(raw, "agents");
-			const list = getAgentsList(agents);
-			if (routingAgents) {
-				for (const [rawId, entryRaw] of Object.entries(routingAgents)) {
-					const agentId = String(rawId ?? "").trim();
-					const entry = getRecord(entryRaw);
-					if (!agentId || !entry) continue;
-					const target = ensureAgentEntry(list, agentId);
-					const entryCopy = { ...entry };
-					if ("mentionPatterns" in entryCopy) {
-						const mentionPatterns = entryCopy.mentionPatterns;
-						const groupChat = ensureRecord(target, "groupChat");
-						if (groupChat.mentionPatterns === void 0) {
-							groupChat.mentionPatterns = mentionPatterns;
-							changes.push(`Moved routing.agents.${agentId}.mentionPatterns → agents.list (id "${agentId}").groupChat.mentionPatterns.`);
-						} else changes.push(`Removed routing.agents.${agentId}.mentionPatterns (agents.list groupChat mentionPatterns already set).`);
-						delete entryCopy.mentionPatterns;
-					}
-					const legacyGroupChat = getRecord(entryCopy.groupChat);
-					if (legacyGroupChat) {
-						mergeMissing(ensureRecord(target, "groupChat"), legacyGroupChat);
-						delete entryCopy.groupChat;
-					}
-					const legacySandbox = getRecord(entryCopy.sandbox);
-					if (legacySandbox) {
-						const sandboxTools = getRecord(legacySandbox.tools);
-						if (sandboxTools) {
-							mergeMissing(ensureRecord(ensureRecord(ensureRecord(target, "tools"), "sandbox"), "tools"), sandboxTools);
-							delete legacySandbox.tools;
-							changes.push(`Moved routing.agents.${agentId}.sandbox.tools → agents.list (id "${agentId}").tools.sandbox.tools.`);
-						}
-						entryCopy.sandbox = legacySandbox;
-					}
-					mergeMissing(target, entryCopy);
-				}
-				delete routing.agents;
-				changes.push("Moved routing.agents → agents.list.");
-			}
-			const defaultAgentId = typeof routing.defaultAgentId === "string" ? routing.defaultAgentId.trim() : "";
-			if (defaultAgentId) {
-				if (!list.some((entry) => isRecord(entry) && entry.default === true)) {
-					const entry = ensureAgentEntry(list, defaultAgentId);
-					entry.default = true;
-					changes.push(`Moved routing.defaultAgentId → agents.list (id "${defaultAgentId}").default.`);
-				} else changes.push("Removed routing.defaultAgentId (agents.list default already set).");
-				delete routing.defaultAgentId;
-			}
-			if (list.length > 0) agents.list = list;
-			if (Object.keys(routing).length === 0) delete raw.routing;
-		}
-	},
-	{
-		id: "routing.config-v2",
-		describe: "Move routing bindings/groupChat/queue/agentToAgent/transcribeAudio",
-		apply: (raw, changes) => {
-			const routing = getRecord(raw.routing);
-			if (!routing) return;
-			if (routing.bindings !== void 0) {
-				if (raw.bindings === void 0) {
-					raw.bindings = routing.bindings;
-					changes.push("Moved routing.bindings → bindings.");
-				} else changes.push("Removed routing.bindings (bindings already set).");
-				delete routing.bindings;
-			}
-			if (routing.agentToAgent !== void 0) {
-				const tools = ensureRecord(raw, "tools");
-				if (tools.agentToAgent === void 0) {
-					tools.agentToAgent = routing.agentToAgent;
-					changes.push("Moved routing.agentToAgent → tools.agentToAgent.");
-				} else changes.push("Removed routing.agentToAgent (tools.agentToAgent already set).");
-				delete routing.agentToAgent;
-			}
-			if (routing.queue !== void 0) {
-				const messages = ensureRecord(raw, "messages");
-				if (messages.queue === void 0) {
-					messages.queue = routing.queue;
-					changes.push("Moved routing.queue → messages.queue.");
-				} else changes.push("Removed routing.queue (messages.queue already set).");
-				delete routing.queue;
-			}
-			const groupChat = getRecord(routing.groupChat);
-			if (groupChat) {
-				const historyLimit = groupChat.historyLimit;
-				if (historyLimit !== void 0) {
-					const messagesGroup = ensureRecord(ensureRecord(raw, "messages"), "groupChat");
-					if (messagesGroup.historyLimit === void 0) {
-						messagesGroup.historyLimit = historyLimit;
-						changes.push("Moved routing.groupChat.historyLimit → messages.groupChat.historyLimit.");
-					} else changes.push("Removed routing.groupChat.historyLimit (messages.groupChat.historyLimit already set).");
-					delete groupChat.historyLimit;
-				}
-				const mentionPatterns = groupChat.mentionPatterns;
-				if (mentionPatterns !== void 0) {
-					const messagesGroup = ensureRecord(ensureRecord(raw, "messages"), "groupChat");
-					if (messagesGroup.mentionPatterns === void 0) {
-						messagesGroup.mentionPatterns = mentionPatterns;
-						changes.push("Moved routing.groupChat.mentionPatterns → messages.groupChat.mentionPatterns.");
-					} else changes.push("Removed routing.groupChat.mentionPatterns (messages.groupChat.mentionPatterns already set).");
-					delete groupChat.mentionPatterns;
-				}
-				if (Object.keys(groupChat).length === 0) delete routing.groupChat;
-				else routing.groupChat = groupChat;
-			}
-			if (routing.transcribeAudio !== void 0) {
-				applyLegacyAudioTranscriptionModel({
-					raw,
-					source: routing.transcribeAudio,
-					changes,
-					movedMessage: "Moved routing.transcribeAudio → tools.media.audio.models.",
-					alreadySetMessage: "Removed routing.transcribeAudio (tools.media.audio.models already set).",
-					invalidMessage: "Removed routing.transcribeAudio (invalid or empty command)."
-				});
-				delete routing.transcribeAudio;
-			}
-			if (Object.keys(routing).length === 0) delete raw.routing;
-		}
-	},
-	{
-		id: "audio.transcription-v2",
-		describe: "Move audio.transcription to tools.media.audio.models",
-		apply: (raw, changes) => {
-			const audio = getRecord(raw.audio);
-			if (audio?.transcription === void 0) return;
-			applyLegacyAudioTranscriptionModel({
-				raw,
-				source: audio.transcription,
-				changes,
-				movedMessage: "Moved audio.transcription → tools.media.audio.models.",
-				alreadySetMessage: "Removed audio.transcription (tools.media.audio.models already set).",
-				invalidMessage: "Removed audio.transcription (invalid or empty command)."
-			});
-			delete audio.transcription;
-			if (Object.keys(audio).length === 0) delete raw.audio;
-			else raw.audio = audio;
-		}
-	}
-];
-
-//#endregion
-//#region src/config/legacy.migrations.part-3.ts
-const LEGACY_CONFIG_MIGRATIONS_PART_3 = [
-	{
-		id: "auth.anthropic-claude-cli-mode-oauth",
-		describe: "Switch anthropic:claude-cli auth profile mode to oauth",
-		apply: (raw, changes) => {
-			const profiles = getRecord(getRecord(raw.auth)?.profiles);
-			if (!profiles) return;
-			const claudeCli = getRecord(profiles["anthropic:claude-cli"]);
-			if (!claudeCli) return;
-			if (claudeCli.mode !== "token") return;
-			claudeCli.mode = "oauth";
-			changes.push("Updated auth.profiles[\"anthropic:claude-cli\"].mode → \"oauth\".");
-		}
-	},
-	{
-		id: "tools.bash->tools.exec",
-		describe: "Move tools.bash to tools.exec",
-		apply: (raw, changes) => {
-			const tools = ensureRecord(raw, "tools");
-			const bash = getRecord(tools.bash);
-			if (!bash) return;
-			if (tools.exec === void 0) {
-				tools.exec = bash;
-				changes.push("Moved tools.bash → tools.exec.");
-			} else changes.push("Removed tools.bash (tools.exec already set).");
-			delete tools.bash;
-		}
-	},
-	{
-		id: "messages.tts.enabled->auto",
-		describe: "Move messages.tts.enabled to messages.tts.auto",
-		apply: (raw, changes) => {
-			const tts = getRecord(getRecord(raw.messages)?.tts);
-			if (!tts) return;
-			if (tts.auto !== void 0) {
-				if ("enabled" in tts) {
-					delete tts.enabled;
-					changes.push("Removed messages.tts.enabled (messages.tts.auto already set).");
-				}
-				return;
-			}
-			if (typeof tts.enabled !== "boolean") return;
-			tts.auto = tts.enabled ? "always" : "off";
-			delete tts.enabled;
-			changes.push(`Moved messages.tts.enabled → messages.tts.auto (${String(tts.auto)}).`);
-		}
-	},
-	{
-		id: "agent.defaults-v2",
-		describe: "Move agent config to agents.defaults and tools",
-		apply: (raw, changes) => {
-			const agent = getRecord(raw.agent);
-			if (!agent) return;
-			const agents = ensureRecord(raw, "agents");
-			const defaults = getRecord(agents.defaults) ?? {};
-			const tools = ensureRecord(raw, "tools");
-			const agentTools = getRecord(agent.tools);
-			if (agentTools) {
-				if (tools.allow === void 0 && agentTools.allow !== void 0) {
-					tools.allow = agentTools.allow;
-					changes.push("Moved agent.tools.allow → tools.allow.");
-				}
-				if (tools.deny === void 0 && agentTools.deny !== void 0) {
-					tools.deny = agentTools.deny;
-					changes.push("Moved agent.tools.deny → tools.deny.");
-				}
-			}
-			const elevated = getRecord(agent.elevated);
-			if (elevated) if (tools.elevated === void 0) {
-				tools.elevated = elevated;
-				changes.push("Moved agent.elevated → tools.elevated.");
-			} else changes.push("Removed agent.elevated (tools.elevated already set).");
-			const bash = getRecord(agent.bash);
-			if (bash) if (tools.exec === void 0) {
-				tools.exec = bash;
-				changes.push("Moved agent.bash → tools.exec.");
-			} else changes.push("Removed agent.bash (tools.exec already set).");
-			const sandbox = getRecord(agent.sandbox);
-			if (sandbox) {
-				const sandboxTools = getRecord(sandbox.tools);
-				if (sandboxTools) {
-					mergeMissing(ensureRecord(ensureRecord(tools, "sandbox"), "tools"), sandboxTools);
-					delete sandbox.tools;
-					changes.push("Moved agent.sandbox.tools → tools.sandbox.tools.");
-				}
-			}
-			const subagents = getRecord(agent.subagents);
-			if (subagents) {
-				const subagentTools = getRecord(subagents.tools);
-				if (subagentTools) {
-					mergeMissing(ensureRecord(ensureRecord(tools, "subagents"), "tools"), subagentTools);
-					delete subagents.tools;
-					changes.push("Moved agent.subagents.tools → tools.subagents.tools.");
-				}
-			}
-			const agentCopy = structuredClone(agent);
-			delete agentCopy.tools;
-			delete agentCopy.elevated;
-			delete agentCopy.bash;
-			if (isRecord(agentCopy.sandbox)) delete agentCopy.sandbox.tools;
-			if (isRecord(agentCopy.subagents)) delete agentCopy.subagents.tools;
-			mergeMissing(defaults, agentCopy);
-			agents.defaults = defaults;
-			raw.agents = agents;
-			delete raw.agent;
-			changes.push("Moved agent → agents.defaults.");
-		}
-	},
-	{
-		id: "identity->agents.list",
-		describe: "Move identity to agents.list[].identity",
-		apply: (raw, changes) => {
-			const identity = getRecord(raw.identity);
-			if (!identity) return;
-			const agents = ensureRecord(raw, "agents");
-			const list = getAgentsList(agents);
-			const defaultId = resolveDefaultAgentIdFromRaw(raw);
-			const entry = ensureAgentEntry(list, defaultId);
-			if (entry.identity === void 0) {
-				entry.identity = identity;
-				changes.push(`Moved identity → agents.list (id "${defaultId}").identity.`);
-			} else changes.push("Removed identity (agents.list identity already set).");
-			agents.list = list;
-			raw.agents = agents;
-			delete raw.identity;
-		}
-	}
-];
-
-//#endregion
-//#region src/config/legacy.migrations.ts
-const LEGACY_CONFIG_MIGRATIONS = [
-	...LEGACY_CONFIG_MIGRATIONS_PART_1,
-	...LEGACY_CONFIG_MIGRATIONS_PART_2,
-	...LEGACY_CONFIG_MIGRATIONS_PART_3
-];
-
-//#endregion
-//#region src/config/legacy.rules.ts
-const LEGACY_CONFIG_RULES = [
-	{
-		path: ["whatsapp"],
-		message: "whatsapp config moved to channels.whatsapp (auto-migrated on load)."
-	},
-	{
-		path: ["telegram"],
-		message: "telegram config moved to channels.telegram (auto-migrated on load)."
-	},
-	{
-		path: ["discord"],
-		message: "discord config moved to channels.discord (auto-migrated on load)."
-	},
-	{
-		path: ["slack"],
-		message: "slack config moved to channels.slack (auto-migrated on load)."
-	},
-	{
-		path: ["signal"],
-		message: "signal config moved to channels.signal (auto-migrated on load)."
-	},
-	{
-		path: ["imessage"],
-		message: "imessage config moved to channels.imessage (auto-migrated on load)."
-	},
-	{
-		path: ["msteams"],
-		message: "msteams config moved to channels.msteams (auto-migrated on load)."
-	},
-	{
-		path: ["routing", "allowFrom"],
-		message: "routing.allowFrom was removed; use channels.whatsapp.allowFrom instead (auto-migrated on load)."
-	},
-	{
-		path: ["routing", "bindings"],
-		message: "routing.bindings was moved; use top-level bindings instead (auto-migrated on load)."
-	},
-	{
-		path: ["routing", "agents"],
-		message: "routing.agents was moved; use agents.list instead (auto-migrated on load)."
-	},
-	{
-		path: ["routing", "defaultAgentId"],
-		message: "routing.defaultAgentId was moved; use agents.list[].default instead (auto-migrated on load)."
-	},
-	{
-		path: ["routing", "agentToAgent"],
-		message: "routing.agentToAgent was moved; use tools.agentToAgent instead (auto-migrated on load)."
-	},
-	{
-		path: [
-			"routing",
-			"groupChat",
-			"requireMention"
-		],
-		message: "routing.groupChat.requireMention was removed; use channels.whatsapp/telegram/imessage groups defaults (e.g. channels.whatsapp.groups.\"*\".requireMention) instead (auto-migrated on load)."
-	},
-	{
-		path: [
-			"routing",
-			"groupChat",
-			"mentionPatterns"
-		],
-		message: "routing.groupChat.mentionPatterns was moved; use agents.list[].groupChat.mentionPatterns or messages.groupChat.mentionPatterns instead (auto-migrated on load)."
-	},
-	{
-		path: ["routing", "queue"],
-		message: "routing.queue was moved; use messages.queue instead (auto-migrated on load)."
-	},
-	{
-		path: ["routing", "transcribeAudio"],
-		message: "routing.transcribeAudio was moved; use tools.media.audio.models instead (auto-migrated on load)."
-	},
-	{
-		path: ["telegram", "requireMention"],
-		message: "telegram.requireMention was removed; use channels.telegram.groups.\"*\".requireMention instead (auto-migrated on load)."
-	},
-	{
-		path: ["identity"],
-		message: "identity was moved; use agents.list[].identity instead (auto-migrated on load)."
-	},
-	{
-		path: ["agent"],
-		message: "agent.* was moved; use agents.defaults (and tools.* for tool/elevated/exec settings) instead (auto-migrated on load)."
-	},
-	{
-		path: ["tools", "bash"],
-		message: "tools.bash was removed; use tools.exec instead (auto-migrated on load)."
-	},
-	{
-		path: ["agent", "model"],
-		message: "agent.model string was replaced by agents.defaults.model.primary/fallbacks and agents.defaults.models (auto-migrated on load).",
-		match: (value) => typeof value === "string"
-	},
-	{
-		path: ["agent", "imageModel"],
-		message: "agent.imageModel string was replaced by agents.defaults.imageModel.primary/fallbacks (auto-migrated on load).",
-		match: (value) => typeof value === "string"
-	},
-	{
-		path: ["agent", "allowedModels"],
-		message: "agent.allowedModels was replaced by agents.defaults.models (auto-migrated on load)."
-	},
-	{
-		path: ["agent", "modelAliases"],
-		message: "agent.modelAliases was replaced by agents.defaults.models.*.alias (auto-migrated on load)."
-	},
-	{
-		path: ["agent", "modelFallbacks"],
-		message: "agent.modelFallbacks was replaced by agents.defaults.model.fallbacks (auto-migrated on load)."
-	},
-	{
-		path: ["agent", "imageModelFallbacks"],
-		message: "agent.imageModelFallbacks was replaced by agents.defaults.imageModel.fallbacks (auto-migrated on load)."
-	},
-	{
-		path: [
-			"messages",
-			"tts",
-			"enabled"
-		],
-		message: "messages.tts.enabled was replaced by messages.tts.auto (auto-migrated on load)."
-	},
-	{
-		path: ["gateway", "token"],
-		message: "gateway.token is ignored; use gateway.auth.token instead (auto-migrated on load)."
-	}
-];
-
-//#endregion
-//#region src/config/legacy.ts
-function findLegacyConfigIssues(raw) {
-	if (!raw || typeof raw !== "object") return [];
-	const root = raw;
-	const issues = [];
-	for (const rule of LEGACY_CONFIG_RULES) {
-		let cursor = root;
-		for (const key of rule.path) {
-			if (!cursor || typeof cursor !== "object") {
-				cursor = void 0;
-				break;
-			}
-			cursor = cursor[key];
-		}
-		if (cursor !== void 0 && (!rule.match || rule.match(cursor, root))) issues.push({
-			path: rule.path.join("."),
-			message: rule.message
-		});
-	}
-	return issues;
-}
-
-//#endregion
-//#region src/config/merge-patch.ts
-function isObjectWithStringId(value) {
-	if (!isPlainObject$2(value)) return false;
-	return typeof value.id === "string" && value.id.length > 0;
-}
-/**
-* Merge arrays of object-like entries keyed by `id`.
-*
-* Contract:
-* - Base array must be fully id-keyed; otherwise return undefined (caller should replace).
-* - Patch entries with valid id merge by id (or append when the id is new).
-* - Patch entries without valid id append as-is, avoiding destructive full-array replacement.
-*/
-function mergeObjectArraysById(base, patch, options) {
-	if (!base.every(isObjectWithStringId)) return;
-	const merged = [...base];
-	const indexById = /* @__PURE__ */ new Map();
-	for (const [index, entry] of merged.entries()) {
-		if (!isObjectWithStringId(entry)) return;
-		indexById.set(entry.id, index);
-	}
-	for (const patchEntry of patch) {
-		if (!isObjectWithStringId(patchEntry)) {
-			merged.push(structuredClone(patchEntry));
-			continue;
-		}
-		const existingIndex = indexById.get(patchEntry.id);
-		if (existingIndex === void 0) {
-			merged.push(structuredClone(patchEntry));
-			indexById.set(patchEntry.id, merged.length - 1);
-			continue;
-		}
-		merged[existingIndex] = applyMergePatch(merged[existingIndex], patchEntry, options);
-	}
-	return merged;
-}
-function applyMergePatch(base, patch, options = {}) {
-	if (!isPlainObject$2(patch)) return patch;
-	const result = isPlainObject$2(base) ? { ...base } : {};
-	for (const [key, value] of Object.entries(patch)) {
-		if (isBlockedObjectKey(key)) continue;
-		if (value === null) {
-			delete result[key];
-			continue;
-		}
-		if (options.mergeObjectArraysById && Array.isArray(result[key]) && Array.isArray(value)) {
-			const mergedArray = mergeObjectArraysById(result[key], value, options);
-			if (mergedArray) {
-				result[key] = mergedArray;
-				continue;
-			}
-		}
-		if (isPlainObject$2(value)) {
-			const baseValue = result[key];
-			result[key] = applyMergePatch(isPlainObject$2(baseValue) ? baseValue : {}, value, options);
-			continue;
-		}
-		result[key] = value;
-	}
-	return result;
-}
-
-//#endregion
-//#region src/config/normalize-paths.ts
-const PATH_VALUE_RE = /^~(?=$|[\\/])/;
-const PATH_KEY_RE = /(dir|path|paths|file|root|workspace)$/i;
-const PATH_LIST_KEYS = new Set(["paths", "pathPrepend"]);
-function normalizeStringValue(key, value) {
-	if (!PATH_VALUE_RE.test(value.trim())) return value;
-	if (!key) return value;
-	if (PATH_KEY_RE.test(key) || PATH_LIST_KEYS.has(key)) return resolveUserPath(value);
-	return value;
-}
-function normalizeAny(key, value) {
-	if (typeof value === "string") return normalizeStringValue(key, value);
-	if (Array.isArray(value)) {
-		const normalizeChildren = Boolean(key && PATH_LIST_KEYS.has(key));
-		return value.map((entry) => {
-			if (typeof entry === "string") return normalizeChildren ? normalizeStringValue(key, entry) : entry;
-			if (Array.isArray(entry)) return normalizeAny(void 0, entry);
-			if (isPlainObject$2(entry)) return normalizeAny(void 0, entry);
-			return entry;
-		});
-	}
-	if (!isPlainObject$2(value)) return value;
-	for (const [childKey, childValue] of Object.entries(value)) {
-		const next = normalizeAny(childKey, childValue);
-		if (next !== childValue) value[childKey] = next;
-	}
-	return value;
-}
-/**
-* Normalize "~" paths in path-ish config fields.
-*
-* Goal: accept `~/...` consistently across config file + env overrides, while
-* keeping the surface area small and predictable.
-*/
-function normalizeConfigPaths(cfg) {
-	if (!cfg || typeof cfg !== "object") return cfg;
-	normalizeAny(void 0, cfg);
-	return cfg;
-}
-
-//#endregion
-//#region src/config/runtime-overrides.ts
-let overrides = {};
-function mergeOverrides(base, override) {
-	if (!isPlainObject$2(base) || !isPlainObject$2(override)) return override;
-	const next = { ...base };
-	for (const [key, value] of Object.entries(override)) {
-		if (value === void 0 || isBlockedObjectKey(key)) continue;
-		next[key] = mergeOverrides(base[key], value);
-	}
-	return next;
-}
-function applyConfigOverrides(cfg) {
-	if (!overrides || Object.keys(overrides).length === 0) return cfg;
-	return mergeOverrides(cfg, overrides);
-}
-
-//#endregion
-//#region src/plugins/config-state.ts
-const BUNDLED_ENABLED_BY_DEFAULT = new Set([
-	"device-pair",
-	"phone-control",
-	"talk-voice"
-]);
-const normalizeList = (value) => {
-	if (!Array.isArray(value)) return [];
-	return value.map((entry) => typeof entry === "string" ? entry.trim() : "").filter(Boolean);
-};
-const normalizePluginEntries = (entries) => {
-	if (!entries || typeof entries !== "object" || Array.isArray(entries)) return {};
-	const normalized = {};
-	for (const [key, value] of Object.entries(entries)) {
-		if (!key.trim()) continue;
-		if (!value || typeof value !== "object" || Array.isArray(value)) {
-			normalized[key] = {};
-			continue;
-		}
-		const entry = value;
-		normalized[key] = {
-			enabled: typeof entry.enabled === "boolean" ? entry.enabled : void 0,
-			config: "config" in entry ? entry.config : void 0
-		};
-	}
-	return normalized;
-};
-const normalizePluginsConfig = (config) => {
-	return {
-		enabled: config?.enabled !== false,
-		allow: normalizeList(config?.allow),
-		deny: normalizeList(config?.deny),
-		loadPaths: normalizeList(config?.load?.paths),
-		slots: {},
-		entries: normalizePluginEntries(config?.entries)
+const normalizePluginsConfig = (config) => {
+	return {
+		enabled: config?.enabled !== false,
+		allow: normalizeList(config?.allow),
+		deny: normalizeList(config?.deny),
+		loadPaths: normalizeList(config?.load?.paths),
+		slots: {},
+		entries: normalizePluginEntries(config?.entries)
 	};
 };
 function resolveEnableState(id, origin, config) {
@@ -3848,27 +2881,15 @@ function resolveBundledPluginsDir() {
 	} catch {}
 }
 
-//#endregion
-//#region src/compat/legacy-names.ts
-const PROJECT_NAME = "remoteclaw";
-const LEGACY_PROJECT_NAMES = [];
-const MANIFEST_KEY = PROJECT_NAME;
-const LEGACY_MANIFEST_KEYS = LEGACY_PROJECT_NAMES;
-const LEGACY_PLUGIN_MANIFEST_FILENAMES = [];
-
 //#endregion
 //#region src/plugins/manifest.ts
+const MANIFEST_KEY = "remoteclaw";
 const PLUGIN_MANIFEST_FILENAME = "remoteclaw.plugin.json";
-const PLUGIN_MANIFEST_FILENAMES = [PLUGIN_MANIFEST_FILENAME, ...LEGACY_PLUGIN_MANIFEST_FILENAMES];
 function normalizeStringList(value) {
 	if (!Array.isArray(value)) return [];
 	return value.map((entry) => typeof entry === "string" ? entry.trim() : "").filter(Boolean);
 }
 function resolvePluginManifestPath(rootDir) {
-	for (const filename of PLUGIN_MANIFEST_FILENAMES) {
-		const candidate = path.join(rootDir, filename);
-		if (fs.existsSync(candidate)) return candidate;
-	}
 	return path.join(rootDir, PLUGIN_MANIFEST_FILENAME);
 }
 function loadPluginManifest(rootDir) {
@@ -3912,6 +2933,8 @@ function loadPluginManifest(rootDir) {
 	const channels = normalizeStringList(raw.channels);
 	const providers = normalizeStringList(raw.providers);
 	const skills = normalizeStringList(raw.skills);
+	const stt = normalizeStringList(raw.stt);
+	const tts = normalizeStringList(raw.tts);
 	let uiHints;
 	if (isRecord(raw.uiHints)) uiHints = raw.uiHints;
 	return {
@@ -3923,6 +2946,8 @@ function loadPluginManifest(rootDir) {
 			channels,
 			providers,
 			skills,
+			stt,
+			tts,
 			name,
 			description,
 			version,
@@ -3933,12 +2958,7 @@ function loadPluginManifest(rootDir) {
 }
 function getPackageManifestMetadata(manifest) {
 	if (!manifest) return;
-	const current = manifest[MANIFEST_KEY];
-	if (current) return current;
-	for (const key of LEGACY_MANIFEST_KEYS) {
-		const legacy = manifest[key];
-		if (legacy) return legacy;
-	}
+	return manifest[MANIFEST_KEY];
 }
 
 //#endregion
@@ -4428,6 +3448,8 @@ function buildRecord(params) {
 		channels: params.manifest.channels ?? [],
 		providers: params.manifest.providers ?? [],
 		skills: params.manifest.skills ?? [],
+		stt: params.manifest.stt ?? [],
+		tts: params.manifest.tts ?? [],
 		origin: params.candidate.origin,
 		workspaceDir: params.candidate.workspaceDir,
 		rootDir: params.candidate.rootDir,
@@ -4658,34 +3680,27 @@ function parseDurationMs(raw, opts) {
 }
 
 //#endregion
-//#region src/config/zod-schema.agent-model.ts
-const AgentModelSchema = z.union([z.string(), z.object({
-	primary: z.string().optional(),
-	fallbacks: z.array(z.string()).optional()
-}).strict()]);
-
-//#endregion
-//#region src/config/zod-schema.allowdeny.ts
-const AllowDenyActionSchema = z.union([z.literal("allow"), z.literal("deny")]);
-const AllowDenyChatTypeSchema = z.union([
-	z.literal("direct"),
-	z.literal("group"),
-	z.literal("channel"),
-	z.literal("dm")
-]).optional();
-function createAllowDenyChannelRulesSchema() {
-	return z.object({
-		default: AllowDenyActionSchema.optional(),
-		rules: z.array(z.object({
-			action: AllowDenyActionSchema,
-			match: z.object({
-				channel: z.string().optional(),
-				chatType: AllowDenyChatTypeSchema,
-				keyPrefix: z.string().optional(),
-				rawKeyPrefix: z.string().optional()
-			}).strict().optional()
-		}).strict()).optional()
-	}).strict().optional();
+//#region src/infra/safe-executable-value.ts
+const SHELL_METACHARS = /[;&|`$<>]/;
+const CONTROL_CHARS = /[\r\n]/;
+const QUOTE_CHARS = /["']/;
+const BARE_NAME_PATTERN = /^[A-Za-z0-9._+-]+$/;
+function isLikelyPath(value) {
+	if (value.startsWith(".") || value.startsWith("~")) return true;
+	if (value.includes("/") || value.includes("\\")) return true;
+	return /^[A-Za-z]:[\\/]/.test(value);
+}
+function isSafeExecutableValue(value) {
+	if (!value) return false;
+	const trimmed = value.trim();
+	if (!trimmed) return false;
+	if (trimmed.includes("\0")) return false;
+	if (CONTROL_CHARS.test(trimmed)) return false;
+	if (SHELL_METACHARS.test(trimmed)) return false;
+	if (QUOTE_CHARS.test(trimmed)) return false;
+	if (isLikelyPath(trimmed)) return true;
+	if (trimmed.startsWith("-")) return false;
+	return BARE_NAME_PATTERN.test(trimmed);
 }
 
 //#endregion
@@ -4772,11 +3787,7 @@ const MarkdownTableModeSchema = z.enum([
 	"code"
 ]);
 const MarkdownConfigSchema = z.object({ tables: MarkdownTableModeSchema.optional() }).strict().optional();
-const TtsProviderSchema = z.enum([
-	"elevenlabs",
-	"openai",
-	"edge"
-]);
+const TtsProviderSchema = z.string().min(1);
 const TtsModeSchema = z.enum(["final", "all"]);
 const TtsAutoSchema = z.enum([
 	"off",
@@ -4954,22 +3965,6 @@ const TranscribeAudioSchema = z.object({
 }).strict().optional();
 const HexColorSchema = z.string().regex(/^#?[0-9a-fA-F]{6}$/, "expected hex color (RRGGBB)");
 const ExecutableTokenSchema = z.string().refine(isSafeExecutableValue, "expected safe executable name or path");
-const MediaUnderstandingScopeSchema = createAllowDenyChannelRulesSchema();
-const MediaUnderstandingCapabilitiesSchema = z.array(z.union([
-	z.literal("image"),
-	z.literal("audio"),
-	z.literal("video")
-])).optional();
-const MediaUnderstandingAttachmentsSchema = z.object({
-	mode: z.union([z.literal("first"), z.literal("all")]).optional(),
-	maxAttachments: z.number().int().positive().optional(),
-	prefer: z.union([
-		z.literal("first"),
-		z.literal("last"),
-		z.literal("path"),
-		z.literal("url")
-	]).optional()
-}).strict().optional();
 const DeepgramAudioSchema = z.object({
 	detectLanguage: z.boolean().optional(),
 	punctuate: z.boolean().optional(),
@@ -4993,7 +3988,6 @@ const MediaUnderstandingRuntimeFields = {
 const MediaUnderstandingModelSchema = z.object({
 	provider: z.string().optional(),
 	model: z.string().optional(),
-	capabilities: MediaUnderstandingCapabilitiesSchema,
 	type: z.union([z.literal("provider"), z.literal("cli")]).optional(),
 	command: z.string().optional(),
 	args: z.array(z.string()).optional(),
@@ -5005,38 +3999,23 @@ const MediaUnderstandingModelSchema = z.object({
 }).strict().optional();
 const ToolsMediaUnderstandingSchema = z.object({
 	enabled: z.boolean().optional(),
-	scope: MediaUnderstandingScopeSchema,
 	maxBytes: z.number().int().positive().optional(),
 	maxChars: z.number().int().positive().optional(),
 	...MediaUnderstandingRuntimeFields,
-	attachments: MediaUnderstandingAttachmentsSchema,
 	models: z.array(MediaUnderstandingModelSchema).optional()
 }).strict().optional();
-const ToolsMediaSchema = z.object({
-	models: z.array(MediaUnderstandingModelSchema).optional(),
-	concurrency: z.number().int().positive().optional(),
-	image: ToolsMediaUnderstandingSchema.optional(),
-	audio: ToolsMediaUnderstandingSchema.optional(),
-	video: ToolsMediaUnderstandingSchema.optional()
-}).strict().optional();
-const LinkModelSchema = z.object({
-	type: z.literal("cli").optional(),
-	command: z.string().min(1),
-	args: z.array(z.string()).optional(),
-	timeoutSeconds: z.number().int().positive().optional()
-}).strict();
-const ToolsLinksSchema = z.object({
-	enabled: z.boolean().optional(),
-	scope: MediaUnderstandingScopeSchema,
-	maxLinks: z.number().int().positive().optional(),
-	timeoutSeconds: z.number().int().positive().optional(),
-	models: z.array(LinkModelSchema).optional()
-}).strict().optional();
+const ToolsMediaSchema = z.object({ audio: ToolsMediaUnderstandingSchema.optional() }).strict().optional();
 const NativeCommandsSettingSchema = z.union([z.boolean(), z.literal("auto")]);
 const ProviderCommandsSchema = z.object({ native: NativeCommandsSettingSchema.optional() }).strict().optional();
 
 //#endregion
 //#region src/config/zod-schema.agent-runtime.ts
+/** Auth profile ref: `false` (skip), single string, or string array (rotation). */
+const AuthFieldSchema = z.union([
+	z.literal(false),
+	z.string(),
+	z.array(z.string())
+]).optional();
 const BootSchema = z.object({
 	prompt: z.string().optional(),
 	file: z.string().optional()
@@ -5050,7 +4029,6 @@ const HeartbeatSchema = z.object({
 	}).strict().optional(),
 	model: z.string().optional(),
 	session: z.string().optional(),
-	includeReasoning: z.boolean().optional(),
 	target: z.string().optional(),
 	to: z.string().optional(),
 	accountId: z.string().optional(),
@@ -5131,7 +4109,6 @@ const ToolPolicyWithProfileSchema = z.object({
 }).strict().superRefine((value, ctx) => {
 	addAllowAlsoAllowConflictIssue(value, ctx, "tools.byProvider policy cannot set both allow and alsoAllow in the same scope (merge alsoAllow into allow, or remove allow and use profile + alsoAllow)");
 });
-const ElevatedAllowFromSchema = z.record(z.string(), z.array(z.union([z.string(), z.number()]))).optional();
 const ToolExecSafeBinProfileSchema = z.object({
 	minPositional: z.number().int().nonnegative().optional(),
 	maxPositional: z.number().int().nonnegative().optional(),
@@ -5180,10 +4157,6 @@ const CommonToolPolicyFields = {
 };
 const AgentToolsSchema = z.object({
 	...CommonToolPolicyFields,
-	elevated: z.object({
-		enabled: z.boolean().optional(),
-		allowFrom: ElevatedAllowFromSchema
-	}).strict().optional(),
 	exec: AgentToolExecSchema,
 	fs: ToolFsSchema
 }).strict().superRefine((value, ctx) => {
@@ -5195,7 +4168,7 @@ const AgentEntrySchema = z.object({
 	name: z.string().optional(),
 	workspace: z.string().optional(),
 	agentDir: z.string().optional(),
-	model: AgentModelSchema.optional(),
+	model: z.unknown().optional(),
 	skills: z.array(z.string()).optional(),
 	humanDelay: HumanDelaySchema.optional(),
 	heartbeat: HeartbeatSchema,
@@ -5204,19 +4177,15 @@ const AgentEntrySchema = z.object({
 	groupChat: GroupChatSchema,
 	subagents: z.object({
 		allowAgents: z.array(z.string()).optional(),
-		model: z.union([z.string(), z.object({
-			primary: z.string().optional(),
-			fallbacks: z.array(z.string()).optional()
-		}).strict()]).optional(),
-		thinking: z.string().optional()
+		model: z.unknown().optional()
 	}).strict().optional(),
 	editableFiles: z.array(z.string()).optional(),
-	tools: AgentToolsSchema
+	tools: AgentToolsSchema,
+	auth: AuthFieldSchema
 }).strict();
 const ToolsSchema = z.object({
 	...CommonToolPolicyFields,
 	media: ToolsMediaSchema,
-	links: ToolsLinksSchema,
 	sessions: z.object({ visibility: z.enum([
 		"self",
 		"tree",
@@ -5240,10 +4209,6 @@ const ToolsSchema = z.object({
 		enabled: z.boolean().optional(),
 		allow: z.array(z.string()).optional()
 	}).strict().optional(),
-	elevated: z.object({
-		enabled: z.boolean().optional(),
-		allowFrom: ElevatedAllowFromSchema
-	}).strict().optional(),
 	exec: ToolExecSchema,
 	fs: ToolFsSchema,
 	subagents: z.object({ tools: ToolPolicySchema }).strict().optional()
@@ -5254,17 +4219,11 @@ const ToolsSchema = z.object({
 //#endregion
 //#region src/config/zod-schema.agent-defaults.ts
 const AgentDefaultsSchema = z.object({
-	model: AgentModelSchema.optional(),
-	imageModel: AgentModelSchema.optional(),
-	models: z.record(z.string(), z.object({
-		alias: z.string().optional(),
-		params: z.record(z.string(), z.unknown()).optional(),
-		streaming: z.boolean().optional()
-	}).strict()).optional(),
+	model: z.unknown().optional(),
+	imageModel: z.unknown().optional(),
+	models: z.unknown().optional(),
+	workspace: z.string().optional(),
 	repoRoot: z.string().optional(),
-	skipBootstrap: z.boolean().optional(),
-	bootstrapMaxChars: z.number().int().positive().optional(),
-	bootstrapTotalMaxChars: z.number().int().positive().optional(),
 	userTimezone: z.string().optional(),
 	timeFormat: z.union([
 		z.literal("auto"),
@@ -5275,7 +4234,7 @@ const AgentDefaultsSchema = z.object({
 	envelopeTimestamp: z.union([z.literal("on"), z.literal("off")]).optional(),
 	envelopeElapsed: z.union([z.literal("on"), z.literal("off")]).optional(),
 	contextTokens: z.number().int().positive().optional(),
-	cliBackends: z.record(z.string(), CliBackendSchema).optional(),
+	cliBackends: z.unknown().optional(),
 	contextPruning: z.object({
 		mode: z.union([z.literal("off"), z.literal("cache-ttl")]).optional(),
 		ttl: z.string().optional(),
@@ -5297,32 +4256,11 @@ const AgentDefaultsSchema = z.object({
 			placeholder: z.string().optional()
 		}).strict().optional()
 	}).strict().optional(),
-	compaction: z.object({
-		mode: z.union([z.literal("default"), z.literal("safeguard")]).optional(),
-		reserveTokens: z.number().int().nonnegative().optional(),
-		keepRecentTokens: z.number().int().positive().optional(),
-		reserveTokensFloor: z.number().int().nonnegative().optional(),
-		maxHistoryShare: z.number().min(.1).max(.9).optional()
-	}).strict().optional(),
-	thinkingDefault: z.union([
-		z.literal("off"),
-		z.literal("minimal"),
-		z.literal("low"),
-		z.literal("medium"),
-		z.literal("high"),
-		z.literal("xhigh")
-	]).optional(),
 	verboseDefault: z.union([
 		z.literal("off"),
 		z.literal("on"),
 		z.literal("full")
 	]).optional(),
-	elevatedDefault: z.union([
-		z.literal("off"),
-		z.literal("on"),
-		z.literal("ask"),
-		z.literal("full")
-	]).optional(),
 	blockStreamingDefault: z.union([z.literal("off"), z.literal("on")]).optional(),
 	blockStreamingBreak: z.union([z.literal("text_end"), z.literal("message_end")]).optional(),
 	blockStreamingChunk: BlockStreamingChunkSchema.optional(),
@@ -5341,8 +4279,7 @@ const AgentDefaultsSchema = z.object({
 		maxSpawnDepth: z.number().int().min(1).max(5).optional().describe("Maximum nesting depth for sub-agent spawning. 1 = no nesting (default), 2 = sub-agents can spawn sub-sub-agents."),
 		maxChildrenPerAgent: z.number().int().min(1).max(20).optional().describe("Maximum number of active children a single agent session can spawn (default: 5)."),
 		archiveAfterMinutes: z.number().int().positive().optional(),
-		model: AgentModelSchema.optional(),
-		thinking: z.string().optional(),
+		model: z.unknown().optional(),
 		runTimeoutSeconds: z.number().int().min(0).optional(),
 		announceTimeoutMs: z.number().int().positive().optional()
 	}).strict().optional(),
@@ -5353,7 +4290,10 @@ const AgentDefaultsSchema = z.object({
 		z.literal("gemini"),
 		z.literal("codex"),
 		z.literal("opencode")
-	]).optional()
+	]).optional(),
+	runtimeArgs: z.array(z.string()).optional(),
+	runtimeEnv: z.record(z.string(), z.string()).optional(),
+	auth: AuthFieldSchema
 }).strict().optional();
 
 //#endregion
@@ -5601,6 +4541,65 @@ function isValidInboundPathRootPattern(value) {
 	return segments.every((segment) => segment === WILDCARD_SEGMENT || !segment.includes("*"));
 }
 
+//#endregion
+//#region src/config/discord-preview-streaming.ts
+function normalizeStreamingMode(value) {
+	if (typeof value !== "string") return null;
+	return value.trim().toLowerCase() || null;
+}
+function parseStreamingMode(value) {
+	const normalized = normalizeStreamingMode(value);
+	if (normalized === "off" || normalized === "partial" || normalized === "block" || normalized === "progress") return normalized;
+	return null;
+}
+function parseDiscordPreviewStreamMode(value) {
+	const parsed = parseStreamingMode(value);
+	if (!parsed) return null;
+	return parsed === "progress" ? "partial" : parsed;
+}
+function parseSlackLegacyDraftStreamMode(value) {
+	const normalized = normalizeStreamingMode(value);
+	if (normalized === "replace" || normalized === "status_final" || normalized === "append") return normalized;
+	return null;
+}
+function mapSlackLegacyDraftStreamModeToStreaming(mode) {
+	if (mode === "append") return "block";
+	if (mode === "status_final") return "progress";
+	return "partial";
+}
+function resolveTelegramPreviewStreamMode(params = {}) {
+	const parsedStreaming = parseStreamingMode(params.streaming);
+	if (parsedStreaming) {
+		if (parsedStreaming === "progress") return "partial";
+		return parsedStreaming;
+	}
+	const legacy = parseDiscordPreviewStreamMode(params.streamMode);
+	if (legacy) return legacy;
+	if (typeof params.streaming === "boolean") return params.streaming ? "partial" : "off";
+	return "off";
+}
+function resolveDiscordPreviewStreamMode(params = {}) {
+	const parsedStreaming = parseDiscordPreviewStreamMode(params.streaming);
+	if (parsedStreaming) return parsedStreaming;
+	const legacy = parseDiscordPreviewStreamMode(params.streamMode);
+	if (legacy) return legacy;
+	if (typeof params.streaming === "boolean") return params.streaming ? "partial" : "off";
+	return "off";
+}
+function resolveSlackStreamingMode(params = {}) {
+	const parsedStreaming = parseStreamingMode(params.streaming);
+	if (parsedStreaming) return parsedStreaming;
+	const legacyStreamMode = parseSlackLegacyDraftStreamMode(params.streamMode);
+	if (legacyStreamMode) return mapSlackLegacyDraftStreamModeToStreaming(legacyStreamMode);
+	if (typeof params.streaming === "boolean") return "partial";
+	return "partial";
+}
+function resolveSlackNativeStreaming(params = {}) {
+	if (typeof params.nativeStreaming === "boolean") return params.nativeStreaming;
+	if (typeof params.streaming === "boolean") return params.streaming;
+	return true;
+}
+
 //#endregion
 //#region src/config/telegram-custom-commands.ts
 const TELEGRAM_COMMAND_NAME_PATTERN = /^[a-z0-9_]{1,32}$/;
@@ -6669,6 +5668,30 @@ const ChannelsSchema = z.object({
 	msteams: MSTeamsConfigSchema.optional()
 }).passthrough().optional();
 
+//#endregion
+//#region src/config/zod-schema.allowdeny.ts
+const AllowDenyActionSchema = z.union([z.literal("allow"), z.literal("deny")]);
+const AllowDenyChatTypeSchema = z.union([
+	z.literal("direct"),
+	z.literal("group"),
+	z.literal("channel"),
+	z.literal("dm")
+]).optional();
+function createAllowDenyChannelRulesSchema() {
+	return z.object({
+		default: AllowDenyActionSchema.optional(),
+		rules: z.array(z.object({
+			action: AllowDenyActionSchema,
+			match: z.object({
+				channel: z.string().optional(),
+				chatType: AllowDenyChatTypeSchema,
+				keyPrefix: z.string().optional(),
+				rawKeyPrefix: z.string().optional()
+			}).strict().optional()
+		}).strict()).optional()
+	}).strict().optional();
+}
+
 //#endregion
 //#region src/config/zod-schema.session.ts
 const SessionResetConfigSchema = z.object({
@@ -6807,8 +5830,6 @@ const MessagesSchema = z.object({
 const CommandsSchema = z.object({
 	native: NativeCommandsSettingSchema.optional().default("auto"),
 	text: z.boolean().optional(),
-	bash: z.boolean().optional(),
-	bashForegroundMs: z.number().int().min(0).max(3e4).optional(),
 	config: z.boolean().optional(),
 	debug: z.boolean().optional(),
 	restart: z.boolean().optional().default(true),
@@ -6816,7 +5837,7 @@ const CommandsSchema = z.object({
 	ownerAllowFrom: z.array(z.union([z.string(), z.number()])).optional(),
 	ownerDisplay: z.enum(["raw", "hash"]).optional().default("raw"),
 	ownerDisplaySecret: z.string().optional().register(sensitive),
-	allowFrom: ElevatedAllowFromSchema.optional()
+	allowFrom: z.record(z.string(), z.array(z.union([z.string(), z.number()]))).optional()
 }).strict().optional().default(() => ({
 	native: "auto",
 	restart: true,
@@ -6913,7 +5934,7 @@ const RemoteClawSchema = z.object({
 		channel: z.union([
 			z.literal("stable"),
 			z.literal("beta"),
-			z.literal("dev")
+			z.literal("next")
 		]).optional(),
 		checkOnStart: z.boolean().optional(),
 		auto: z.object({
@@ -7270,7 +6291,8 @@ function validateIdentityAvatar(config) {
 			});
 			continue;
 		}
-		if (!isWorkspaceAvatarPath(avatar, resolveAgentWorkspaceDir(config, entry.id ?? resolveDefaultAgentId(config)))) issues.push({
+		const workspaceDir = resolveAgentWorkspaceDirOrNull(config, entry.id ?? resolveDefaultAgentId(config));
+		if (workspaceDir != null && !isWorkspaceAvatarPath(avatar, workspaceDir)) issues.push({
 			path: `agents.list.${index}.identity.avatar`,
 			message: "identity.avatar must stay within the agent workspace."
 		});
@@ -7346,7 +6368,7 @@ function validateConfigObjectWithPluginsBase(raw, opts) {
 		if (registryInfo) return registryInfo;
 		const registry = loadPluginManifestRegistry({
 			config,
-			workspaceDir: resolveAgentWorkspaceDir(config, resolveDefaultAgentId(config)) ?? void 0
+			workspaceDir: resolveAgentWorkspaceDirOrNull(config, resolveDefaultAgentId(config)) ?? void 0
 		});
 		const knownIds = new Set(registry.plugins.map((record) => record.id));
 		const normalizedPlugins = normalizePluginsConfig(config.plugins);
@@ -7949,7 +6971,7 @@ function createConfigIO(overrides = {}) {
 				deps.logger.warn(`Config warnings:\\n${details}`);
 			}
 			warnIfConfigFromFuture(validated.config, deps.logger);
-			const cfg = applyTalkConfigNormalization(applyModelDefaults(applyCompactionDefaults(applyContextPruningDefaults(applyAgentDefaults(applySessionDefaults(applyLoggingDefaults(applyMessageDefaults(validated.config))))))));
+			const cfg = applyTalkConfigNormalization(applyModelDefaults(applyContextPruningDefaults(applyAgentDefaults(applySessionDefaults(applyLoggingDefaults(applyMessageDefaults(validated.config)))))));
 			normalizeConfigPaths(cfg);
 			const duplicates = findDuplicateAgentDirs(cfg, {
 				env: deps.env,
@@ -8009,7 +7031,7 @@ function createConfigIO(overrides = {}) {
 				parsed: {},
 				resolved: {},
 				valid: true,
-				config: applyTalkApiKey(applyTalkConfigNormalization(applyModelDefaults(applyCompactionDefaults(applyContextPruningDefaults(applyAgentDefaults(applySessionDefaults(applyMessageDefaults({})))))))),
+				config: applyTalkApiKey(applyTalkConfigNormalization(applyModelDefaults(applyContextPruningDefaults(applyAgentDefaults(applySessionDefaults(applyMessageDefaults({}))))))),
 				hash,
 				issues: [],
 				warnings: [],
@@ -9363,22 +8385,6 @@ function loadSessionStore(storePath, opts = {}) {
 			continue;
 		}
 	}
-	for (const entry of Object.values(store)) {
-		if (!entry || typeof entry !== "object") continue;
-		const rec = entry;
-		if (typeof rec.channel !== "string" && typeof rec.provider === "string") {
-			rec.channel = rec.provider;
-			delete rec.provider;
-		}
-		if (typeof rec.lastChannel !== "string" && typeof rec.lastProvider === "string") {
-			rec.lastChannel = rec.lastProvider;
-			delete rec.lastProvider;
-		}
-		if (typeof rec.groupChannel !== "string" && typeof rec.room === "string") {
-			rec.groupChannel = rec.room;
-			delete rec.room;
-		} else if ("room" in rec) delete rec.room;
-	}
 	if (!opts.skipCache && isSessionStoreCacheEnabled()) SESSION_STORE_CACHE.set(storePath, {
 		store: structuredClone(store),
 		loadedAt: Date.now(),
@@ -9789,273 +8795,1160 @@ async function drainSessionStoreLockQueue(storePath) {
 			drainSessionStoreLockQueue(storePath);
 		});
 	}
-}
-async function withSessionStoreLock(storePath, fn, opts = {}) {
-	if (!storePath || typeof storePath !== "string") throw new Error(`withSessionStoreLock: storePath must be a non-empty string, got ${JSON.stringify(storePath)}`);
-	const timeoutMs = opts.timeoutMs ?? 1e4;
-	const staleMs = opts.staleMs ?? 3e4;
-	opts.pollIntervalMs;
-	const hasTimeout = timeoutMs > 0 && Number.isFinite(timeoutMs);
-	const queue = getOrCreateLockQueue(storePath);
-	return await new Promise((resolve, reject) => {
-		const task = {
-			fn: async () => await fn(),
-			resolve: (value) => resolve(value),
-			reject,
-			timeoutMs: hasTimeout ? timeoutMs : void 0,
-			staleMs
+}
+async function withSessionStoreLock(storePath, fn, opts = {}) {
+	if (!storePath || typeof storePath !== "string") throw new Error(`withSessionStoreLock: storePath must be a non-empty string, got ${JSON.stringify(storePath)}`);
+	const timeoutMs = opts.timeoutMs ?? 1e4;
+	const staleMs = opts.staleMs ?? 3e4;
+	opts.pollIntervalMs;
+	const hasTimeout = timeoutMs > 0 && Number.isFinite(timeoutMs);
+	const queue = getOrCreateLockQueue(storePath);
+	return await new Promise((resolve, reject) => {
+		const task = {
+			fn: async () => await fn(),
+			resolve: (value) => resolve(value),
+			reject,
+			timeoutMs: hasTimeout ? timeoutMs : void 0,
+			staleMs
+		};
+		queue.pending.push(task);
+		drainSessionStoreLockQueue(storePath);
+	});
+}
+
+//#endregion
+//#region src/logger.ts
+const subsystemPrefixRe = /^([a-z][a-z0-9-]{1,20}):\s+(.*)$/i;
+function splitSubsystem(message) {
+	const match = message.match(subsystemPrefixRe);
+	if (!match) return null;
+	const [, subsystem, rest] = match;
+	return {
+		subsystem,
+		rest
+	};
+}
+function logWarn(message, runtime = defaultRuntime) {
+	const parsed = runtime === defaultRuntime ? splitSubsystem(message) : null;
+	if (parsed) {
+		createSubsystemLogger(parsed.subsystem).warn(parsed.rest);
+		return;
+	}
+	runtime.log(warn(message));
+	getLogger().warn(message);
+}
+function logDebug(message) {
+	getLogger().debug(message);
+	logVerboseConsole(message);
+}
+
+//#endregion
+//#region src/plugins/hook-runner-global.ts
+/**
+* Global Plugin Hook Runner
+*
+* Singleton hook runner that's initialized when plugins are loaded
+* and can be called from anywhere in the codebase.
+*/
+const log = createSubsystemLogger("plugins");
+let globalHookRunner = null;
+/**
+* Get the global hook runner.
+* Returns null if plugins haven't been loaded yet.
+*/
+function getGlobalHookRunner() {
+	return globalHookRunner;
+}
+
+//#endregion
+//#region src/middleware/delivery-adapter.ts
+const DEFAULT_CHUNK_LIMIT = 4e3;
+/**
+* Converts AgentEvent async iterable into channel-deliverable ReplyPayload chunks.
+*
+* Handles:
+* - Text accumulation and chunking at channel limits
+* - Progressive streaming via BridgeCallbacks
+* - Tool result formatting
+* - Error event formatting
+*/
+var DeliveryAdapter = class {
+	constructor(options) {
+		this.chunkLimit = options?.chunkLimit ?? DEFAULT_CHUNK_LIMIT;
+	}
+	/**
+	* Process an event stream, invoking callbacks for real-time delivery
+	* and returning final payloads for post-execution delivery.
+	*
+	* @param events - AgentEvent async iterable from runtime.execute()
+	* @param callbacks - Optional streaming callbacks for real-time delivery
+	* @returns Final ReplyPayload array for post-execution delivery
+	*/
+	async process(events, callbacks) {
+		let textBuffer = "";
+		const payloads = [];
+		/** Track media delivered via streaming events to avoid duplicates from result.media. */
+		const deliveredMediaKeys = /* @__PURE__ */ new Set();
+		let eventCount = 0;
+		for await (const event of events) {
+			eventCount++;
+			switch (event.type) {
+				case "text":
+					if (event.text === "") break;
+					textBuffer += event.text;
+					while (textBuffer.length > this.chunkLimit) {
+						const { chunk, rest } = splitAtBoundary(textBuffer, this.chunkLimit);
+						textBuffer = rest;
+						const payload = { text: chunk };
+						payloads.push(payload);
+						await callbacks?.onPartialReply?.(payload);
+					}
+					break;
+				case "media": {
+					const mediaUrl = event.media.filePath ?? event.media.sourceUrl;
+					if (mediaUrl) {
+						if (textBuffer.length > 0) {
+							const textPayload = { text: textBuffer };
+							payloads.push(textPayload);
+							await callbacks?.onBlockReply?.(textPayload);
+							textBuffer = "";
+						}
+						deliveredMediaKeys.add(mediaUrl);
+						const payload = { mediaUrl };
+						payloads.push(payload);
+						await callbacks?.onBlockReply?.(payload);
+					}
+					break;
+				}
+				case "thinking":
+					if (event.text) callbacks?.onThinking?.({ text: event.text });
+					break;
+				case "tool_use": break;
+				case "tool_result": {
+					const payload = { text: formatToolResult(event.toolId, event.output, event.isError) };
+					await callbacks?.onToolResult?.(payload);
+					break;
+				}
+				case "error": {
+					const payload = {
+						text: event.code ? `[${event.code}] ${event.message}` : event.message,
+						isError: true
+					};
+					payloads.push(payload);
+					await callbacks?.onBlockReply?.(payload);
+					break;
+				}
+				case "done":
+					if (textBuffer.length > 0) {
+						const payload = { text: textBuffer };
+						payloads.push(payload);
+						await callbacks?.onBlockReply?.(payload);
+						textBuffer = "";
+					}
+					if (event.result.media?.length) for (const media of event.result.media) {
+						const url = media.filePath ?? media.sourceUrl;
+						if (url && !deliveredMediaKeys.has(url)) {
+							const payload = { mediaUrl: url };
+							payloads.push(payload);
+							await callbacks?.onBlockReply?.(payload);
+						}
+					}
+					break;
+			}
+		}
+		if (textBuffer.length > 0) {
+			const payload = { text: textBuffer };
+			payloads.push(payload);
+		}
+		logDebug(`[delivery-adapter] processed ${eventCount} events into ${payloads.length} payloads (chunkLimit=${this.chunkLimit})`);
+		return payloads;
+	}
+};
+/** Format a tool result for display. */
+function formatToolResult(toolId, output, isError) {
+	return `${isError ? `Tool ${toolId} error` : `Tool ${toolId} result`}: ${output}`;
+}
+/**
+* Split text at the nearest safe boundary before the limit.
+*
+* Preference order:
+* 1. Paragraph break (\n\n)
+* 2. Line break (\n)
+* 3. Word boundary (space)
+* 4. Hard split at limit
+*
+* Markdown-aware: preserves code fence boundaries by closing/reopening
+* fences at split points when a split occurs inside a fenced code block.
+*/
+function splitAtBoundary(text, limit) {
+	const fenceInfo = findOpenCodeFence(text, limit);
+	if (fenceInfo !== void 0) {
+		const beforeFence = text.substring(0, fenceInfo.fenceStart);
+		if (beforeFence.trimEnd().length > 0) {
+			const trimmed = beforeFence.trimEnd();
+			return {
+				chunk: trimmed,
+				rest: text.substring(trimmed.length).trimStart()
+			};
+		}
+		const closingFence = `\n${fenceInfo.fence}`;
+		const openingFence = `${fenceInfo.fence}\n`;
+		const splitPoint = findSplitPoint(text, limit - closingFence.length);
+		return {
+			chunk: text.substring(0, splitPoint) + closingFence,
+			rest: openingFence + text.substring(splitPoint)
+		};
+	}
+	const splitPoint = findSplitPoint(text, limit);
+	return {
+		chunk: text.substring(0, splitPoint),
+		rest: text.substring(splitPoint)
+	};
+}
+/** Find the best split point within the text up to the given limit. */
+function findSplitPoint(text, limit) {
+	if (limit <= 0) return Math.min(1, text.length);
+	const searchRegion = text.substring(0, limit);
+	const paragraphIdx = searchRegion.lastIndexOf("\n\n");
+	if (paragraphIdx > 0) return paragraphIdx + 2;
+	const lineIdx = searchRegion.lastIndexOf("\n");
+	if (lineIdx > 0) return lineIdx + 1;
+	const spaceIdx = searchRegion.lastIndexOf(" ");
+	if (spaceIdx > 0) return spaceIdx + 1;
+	return limit;
+}
+/**
+* Detect if the text has an unclosed code fence at or before the limit position.
+* Returns info about the open fence, or undefined if no open fence.
+*/
+function findOpenCodeFence(text, limit) {
+	const fenceRegex = /^(`{3,}|~{3,})/gm;
+	let openFence;
+	let match;
+	while ((match = fenceRegex.exec(text)) !== null) {
+		if (match.index >= limit) break;
+		if (openFence === void 0) openFence = {
+			fenceStart: match.index,
+			fence: match[1]
+		};
+		else if (match[1].charAt(0) === openFence.fence.charAt(0) && match[1].length >= openFence.fence.length) openFence = void 0;
+	}
+	return openFence;
+}
+
+//#endregion
+//#region src/middleware/error-classifier.ts
+const retryablePatterns = [
+	/rate.?limit/i,
+	/429/i,
+	/503/i,
+	/overloaded/i,
+	/ETIMEDOUT/i,
+	/ECONNRESET/i,
+	/ECONNREFUSED/i,
+	/network/i
+];
+const contextOverflowPatterns = [
+	/context.?length/i,
+	/context.?window/i,
+	/context.?overflow/i,
+	/too many tokens/i,
+	/maximum context/i,
+	/token.?limit/i
+];
+const fatalAuthPatterns = [
+	/401/i,
+	/403/i,
+	/unauthorized/i,
+	/forbidden/i,
+	/invalid.?key/i,
+	/authentication/i
+];
+/**
+* Classify an error message string into an actionable category.
+*
+* Uses first-match-wins semantics across ordered pattern arrays:
+* 1. Retryable patterns checked first
+* 2. Context overflow patterns checked second
+* 3. Fatal auth patterns checked third
+* 4. Default: "fatal" for unmatched messages
+*
+* Case-insensitive matching throughout.
+*/
+function classifyError(message) {
+	for (const pattern of retryablePatterns) if (pattern.test(message)) {
+		logDebug(`[error-classifier] classified as retryable: ${message.slice(0, 200)}`);
+		return "retryable";
+	}
+	for (const pattern of contextOverflowPatterns) if (pattern.test(message)) {
+		logDebug(`[error-classifier] classified as context_overflow: ${message.slice(0, 200)}`);
+		return "context_overflow";
+	}
+	for (const pattern of fatalAuthPatterns) if (pattern.test(message)) {
+		logDebug(`[error-classifier] classified as fatal (auth): ${message.slice(0, 200)}`);
+		return "fatal";
+	}
+	logDebug(`[error-classifier] classified as fatal (unmatched): ${message.slice(0, 200)}`);
+	return "fatal";
+}
+
+//#endregion
+//#region src/middleware/mcp-side-effects.ts
+async function readMcpSideEffects(filePath) {
+	const result = {
+		sentTexts: [],
+		sentMediaUrls: [],
+		sentTargets: [],
+		cronAdds: 0
+	};
+	let content;
+	try {
+		content = await readFile(filePath, "utf-8");
+	} catch {
+		return result;
+	}
+	const lines = content.split("\n").filter(Boolean);
+	for (const line of lines) {
+		let record;
+		try {
+			record = JSON.parse(line);
+		} catch {
+			continue;
+		}
+		if (record.type === "message_sent") {
+			result.sentTexts.push(record.text);
+			if (record.mediaUrl) result.sentMediaUrls.push(record.mediaUrl);
+			const target = {
+				tool: record.tool,
+				provider: record.provider,
+				...record.accountId ? { accountId: record.accountId } : {},
+				...record.to ? { to: record.to } : {}
+			};
+			result.sentTargets.push(target);
+		} else if (record.type === "cron_added") result.cronAdds += 1;
+		else if (record.type === "heartbeat_report") result.heartbeatReport = {
+			anythingDone: record.anythingDone,
+			summary: record.summary
 		};
-		queue.pending.push(task);
-		drainSessionStoreLockQueue(storePath);
-	});
+	}
+	return result;
 }
 
 //#endregion
-//#region src/plugins/hook-runner-global.ts
+//#region src/middleware/media-capability.ts
 /**
-* Global Plugin Hook Runner
+* Partition media attachments by whether the runtime accepts them.
 *
-* Singleton hook runner that's initialized when plugins are loaded
-* and can be called from anywhere in the codebase.
+* If the runtime does not declare `mediaCapabilities` at all, all media is
+* treated as supported (backwards-compatible — the runtime decides what to do).
 */
-const log = createSubsystemLogger("plugins");
-let globalHookRunner = null;
+function partitionMedia(runtime, media) {
+	const prefixes = runtime.mediaCapabilities?.acceptsInbound;
+	if (prefixes === void 0) return {
+		supported: media,
+		unsupported: []
+	};
+	const supported = [];
+	const unsupported = [];
+	for (const attachment of media) if (prefixes.some((prefix) => attachment.mimeType.startsWith(prefix))) supported.push(attachment);
+	else unsupported.push(attachment);
+	return {
+		supported,
+		unsupported
+	};
+}
 /**
-* Get the global hook runner.
-* Returns null if plugins haven't been loaded yet.
+* Format a user-facing warning for media the runtime cannot handle.
+*
+* Returns `undefined` when there are no unsupported attachments.
 */
-function getGlobalHookRunner() {
-	return globalHookRunner;
+function formatUnsupportedMediaWarning(unsupported, runtimeName) {
+	if (unsupported.length === 0) return;
+	const typeSummary = summarizeMediaTypes(unsupported);
+	const runtimeLabel = runtimeName.toLowerCase();
+	if (unsupported.length === 1) return `\u26a0\ufe0f Your ${typeSummary} was received but the current runtime (${runtimeLabel}) doesn't support ${typeSummary} input. Its content was not included in the conversation.`;
+	return `\u26a0\ufe0f ${unsupported.length} media attachments were received but the current runtime (${runtimeLabel}) doesn't support them: ${typeSummary}. Their content was not included in the conversation.`;
 }
-
-//#endregion
-//#region src/middleware/delivery-adapter.ts
-const DEFAULT_CHUNK_LIMIT = 4e3;
 /**
-* Converts AgentEvent async iterable into channel-deliverable ReplyPayload chunks.
+* Produce a human-readable summary of MIME type categories.
 *
-* Handles:
-* - Text accumulation and chunking at channel limits
-* - Progressive streaming via BridgeCallbacks
-* - Tool result formatting
-* - Error event formatting
+* Groups by top-level type (image, audio, video) and deduplicates.
+* Falls back to "media" for unknown types.
 */
-var DeliveryAdapter = class {
-	constructor(options) {
-		this.chunkLimit = options?.chunkLimit ?? DEFAULT_CHUNK_LIMIT;
+function summarizeMediaTypes(attachments) {
+	const categories = /* @__PURE__ */ new Set();
+	for (const a of attachments) switch (a.mimeType.split("/")[0]) {
+		case "image":
+			categories.add("image");
+			break;
+		case "audio":
+			categories.add("audio");
+			break;
+		case "video":
+			categories.add("video");
+			break;
+		default:
+			categories.add("media");
+			break;
+	}
+	return [...categories].toSorted().join("/");
+}
+
+//#endregion
+//#region src/utils/fetch-timeout.ts
+/**
+* Relay abort without forwarding the Event argument as the abort reason.
+* Using .bind() avoids closure scope capture (memory leak prevention).
+*/
+function relayAbort() {
+	this.abort();
+}
+/** Returns a bound abort relay for use as an event listener. */
+function bindAbortRelay(controller) {
+	return relayAbort.bind(controller);
+}
+
+//#endregion
+//#region src/shared/net/ip.ts
+const BLOCKED_IPV4_SPECIAL_USE_RANGES = new Set([
+	"unspecified",
+	"broadcast",
+	"multicast",
+	"linkLocal",
+	"loopback",
+	"carrierGradeNat",
+	"private",
+	"reserved"
+]);
+const PRIVATE_OR_LOOPBACK_IPV4_RANGES = new Set([
+	"loopback",
+	"private",
+	"linkLocal",
+	"carrierGradeNat"
+]);
+const PRIVATE_OR_LOOPBACK_IPV6_RANGES = new Set([
+	"unspecified",
+	"loopback",
+	"linkLocal",
+	"uniqueLocal"
+]);
+const RFC2544_BENCHMARK_PREFIX = [ipaddr.IPv4.parse("198.18.0.0"), 15];
+const EMBEDDED_IPV4_SENTINEL_RULES = [
+	{
+		matches: (parts) => parts[0] === 0 && parts[1] === 0 && parts[2] === 0 && parts[3] === 0 && parts[4] === 0 && parts[5] === 0,
+		toHextets: (parts) => [parts[6], parts[7]]
+	},
+	{
+		matches: (parts) => parts[0] === 100 && parts[1] === 65435 && parts[2] === 1 && parts[3] === 0 && parts[4] === 0 && parts[5] === 0,
+		toHextets: (parts) => [parts[6], parts[7]]
+	},
+	{
+		matches: (parts) => parts[0] === 8194,
+		toHextets: (parts) => [parts[1], parts[2]]
+	},
+	{
+		matches: (parts) => parts[0] === 8193 && parts[1] === 0,
+		toHextets: (parts) => [parts[6] ^ 65535, parts[7] ^ 65535]
+	},
+	{
+		matches: (parts) => (parts[4] & 64767) === 0 && parts[5] === 24318,
+		toHextets: (parts) => [parts[6], parts[7]]
 	}
-	/**
-	* Process an event stream, invoking callbacks for real-time delivery
-	* and returning final payloads for post-execution delivery.
-	*
-	* @param events - AgentEvent async iterable from runtime.execute()
-	* @param callbacks - Optional streaming callbacks for real-time delivery
-	* @returns Final ReplyPayload array for post-execution delivery
-	*/
-	async process(events, callbacks) {
-		let textBuffer = "";
-		const payloads = [];
-		for await (const event of events) switch (event.type) {
-			case "text":
-				if (event.text === "") break;
-				textBuffer += event.text;
-				while (textBuffer.length > this.chunkLimit) {
-					const { chunk, rest } = splitAtBoundary(textBuffer, this.chunkLimit);
-					textBuffer = rest;
-					const payload = { text: chunk };
-					payloads.push(payload);
-					await callbacks?.onPartialReply?.(payload);
-				}
-				break;
-			case "tool_use": break;
-			case "tool_result": {
-				const payload = { text: formatToolResult(event.toolId, event.output, event.isError) };
-				await callbacks?.onToolResult?.(payload);
-				break;
-			}
-			case "error": {
-				const payload = {
-					text: event.code ? `[${event.code}] ${event.message}` : event.message,
-					isError: true
-				};
-				payloads.push(payload);
-				await callbacks?.onBlockReply?.(payload);
-				break;
-			}
-			case "done":
-				if (textBuffer.length > 0) {
-					const payload = { text: textBuffer };
-					payloads.push(payload);
-					await callbacks?.onBlockReply?.(payload);
-					textBuffer = "";
-				}
-				break;
-		}
-		if (textBuffer.length > 0) {
-			const payload = { text: textBuffer };
-			payloads.push(payload);
-		}
-		return payloads;
+];
+function stripIpv6Brackets(value) {
+	if (value.startsWith("[") && value.endsWith("]")) return value.slice(1, -1);
+	return value;
+}
+function isNumericIpv4LiteralPart(value) {
+	return /^[0-9]+$/.test(value) || /^0x[0-9a-f]+$/i.test(value);
+}
+function parseIpv6WithEmbeddedIpv4(raw) {
+	if (!raw.includes(":") || !raw.includes(".")) return;
+	const match = /^(.*:)([^:%]+(?:\.[^:%]+){3})(%[0-9A-Za-z]+)?$/i.exec(raw);
+	if (!match) return;
+	const [, prefix, embeddedIpv4, zoneSuffix = ""] = match;
+	if (!ipaddr.IPv4.isValidFourPartDecimal(embeddedIpv4)) return;
+	const octets = embeddedIpv4.split(".").map((part) => Number.parseInt(part, 10));
+	const normalizedIpv6 = `${prefix}${(octets[0] << 8 | octets[1]).toString(16)}:${(octets[2] << 8 | octets[3]).toString(16)}${zoneSuffix}`;
+	if (!ipaddr.IPv6.isValid(normalizedIpv6)) return;
+	return ipaddr.IPv6.parse(normalizedIpv6);
+}
+function isIpv4Address(address) {
+	return address.kind() === "ipv4";
+}
+function isIpv6Address(address) {
+	return address.kind() === "ipv6";
+}
+function normalizeIpv4MappedAddress(address) {
+	if (!isIpv6Address(address)) return address;
+	if (!address.isIPv4MappedAddress()) return address;
+	return address.toIPv4Address();
+}
+function parseCanonicalIpAddress(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized) return;
+	if (ipaddr.IPv4.isValid(normalized)) {
+		if (!ipaddr.IPv4.isValidFourPartDecimal(normalized)) return;
+		return ipaddr.IPv4.parse(normalized);
+	}
+	if (ipaddr.IPv6.isValid(normalized)) return ipaddr.IPv6.parse(normalized);
+	return parseIpv6WithEmbeddedIpv4(normalized);
+}
+function parseLooseIpAddress(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized) return;
+	if (ipaddr.isValid(normalized)) return ipaddr.parse(normalized);
+	return parseIpv6WithEmbeddedIpv4(normalized);
+}
+function isCanonicalDottedDecimalIPv4(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return false;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized) return false;
+	return ipaddr.IPv4.isValidFourPartDecimal(normalized);
+}
+function isLegacyIpv4Literal(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return false;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized || normalized.includes(":")) return false;
+	if (isCanonicalDottedDecimalIPv4(normalized)) return false;
+	const parts = normalized.split(".");
+	if (parts.length === 0 || parts.length > 4) return false;
+	if (parts.some((part) => part.length === 0)) return false;
+	if (!parts.every((part) => isNumericIpv4LiteralPart(part))) return false;
+	return true;
+}
+function isPrivateOrLoopbackIpAddress(raw) {
+	const parsed = parseCanonicalIpAddress(raw);
+	if (!parsed) return false;
+	const normalized = normalizeIpv4MappedAddress(parsed);
+	if (isIpv4Address(normalized)) return PRIVATE_OR_LOOPBACK_IPV4_RANGES.has(normalized.range());
+	if (PRIVATE_OR_LOOPBACK_IPV6_RANGES.has(normalized.range())) return true;
+	return (normalized.parts[0] & 65472) === 65216;
+}
+function isBlockedSpecialUseIpv4Address(address, options = {}) {
+	const inRfc2544BenchmarkRange = address.match(RFC2544_BENCHMARK_PREFIX);
+	if (inRfc2544BenchmarkRange && options.allowRfc2544BenchmarkRange === true) return false;
+	return BLOCKED_IPV4_SPECIAL_USE_RANGES.has(address.range()) || inRfc2544BenchmarkRange;
+}
+function decodeIpv4FromHextets(high, low) {
+	const octets = [
+		high >>> 8 & 255,
+		high & 255,
+		low >>> 8 & 255,
+		low & 255
+	];
+	return ipaddr.IPv4.parse(octets.join("."));
+}
+function extractEmbeddedIpv4FromIpv6(address) {
+	if (address.isIPv4MappedAddress()) return address.toIPv4Address();
+	if (address.range() === "rfc6145") return decodeIpv4FromHextets(address.parts[6], address.parts[7]);
+	if (address.range() === "rfc6052") return decodeIpv4FromHextets(address.parts[6], address.parts[7]);
+	for (const rule of EMBEDDED_IPV4_SENTINEL_RULES) {
+		if (!rule.matches(address.parts)) continue;
+		const [high, low] = rule.toHextets(address.parts);
+		return decodeIpv4FromHextets(high, low);
+	}
+}
+
+//#endregion
+//#region src/infra/net/hostname.ts
+function normalizeHostname(hostname) {
+	const normalized = hostname.trim().toLowerCase().replace(/\.$/, "");
+	if (normalized.startsWith("[") && normalized.endsWith("]")) return normalized.slice(1, -1);
+	return normalized;
+}
+
+//#endregion
+//#region src/infra/net/ssrf.ts
+var SsrFBlockedError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "SsrFBlockedError";
 	}
 };
-/** Format a tool result for display. */
-function formatToolResult(toolId, output, isError) {
-	return `${isError ? `Tool ${toolId} error` : `Tool ${toolId} result`}: ${output}`;
+const BLOCKED_HOSTNAMES = new Set([
+	"localhost",
+	"localhost.localdomain",
+	"metadata.google.internal"
+]);
+function normalizeHostnameSet(values) {
+	if (!values || values.length === 0) return /* @__PURE__ */ new Set();
+	return new Set(values.map((value) => normalizeHostname(value)).filter(Boolean));
 }
-/**
-* Split text at the nearest safe boundary before the limit.
-*
-* Preference order:
-* 1. Paragraph break (\n\n)
-* 2. Line break (\n)
-* 3. Word boundary (space)
-* 4. Hard split at limit
-*
-* Markdown-aware: preserves code fence boundaries by closing/reopening
-* fences at split points when a split occurs inside a fenced code block.
-*/
-function splitAtBoundary(text, limit) {
-	const fenceInfo = findOpenCodeFence(text, limit);
-	if (fenceInfo !== void 0) {
-		const beforeFence = text.substring(0, fenceInfo.fenceStart);
-		if (beforeFence.trimEnd().length > 0) {
-			const trimmed = beforeFence.trimEnd();
+function normalizeHostnameAllowlist(values) {
+	if (!values || values.length === 0) return [];
+	return Array.from(new Set(values.map((value) => normalizeHostname(value)).filter((value) => value !== "*" && value !== "*." && value.length > 0)));
+}
+function resolveAllowPrivateNetwork(policy) {
+	return policy?.dangerouslyAllowPrivateNetwork === true || policy?.allowPrivateNetwork === true;
+}
+function resolveIpv4SpecialUseBlockOptions(policy) {
+	return { allowRfc2544BenchmarkRange: policy?.allowRfc2544BenchmarkRange === true };
+}
+function isHostnameAllowedByPattern(hostname, pattern) {
+	if (pattern.startsWith("*.")) {
+		const suffix = pattern.slice(2);
+		if (!suffix || hostname === suffix) return false;
+		return hostname.endsWith(`.${suffix}`);
+	}
+	return hostname === pattern;
+}
+function matchesHostnameAllowlist(hostname, allowlist) {
+	if (allowlist.length === 0) return true;
+	return allowlist.some((pattern) => isHostnameAllowedByPattern(hostname, pattern));
+}
+function looksLikeUnsupportedIpv4Literal(address) {
+	const parts = address.split(".");
+	if (parts.length === 0 || parts.length > 4) return false;
+	if (parts.some((part) => part.length === 0)) return true;
+	return parts.every((part) => /^[0-9]+$/.test(part) || /^0x/i.test(part));
+}
+function isPrivateIpAddress(address, policy) {
+	let normalized = address.trim().toLowerCase();
+	if (normalized.startsWith("[") && normalized.endsWith("]")) normalized = normalized.slice(1, -1);
+	if (!normalized) return false;
+	const blockOptions = resolveIpv4SpecialUseBlockOptions(policy);
+	const strictIp = parseCanonicalIpAddress(normalized);
+	if (strictIp) {
+		if (isIpv4Address(strictIp)) return isBlockedSpecialUseIpv4Address(strictIp, blockOptions);
+		if (isPrivateOrLoopbackIpAddress(strictIp.toString())) return true;
+		const embeddedIpv4 = extractEmbeddedIpv4FromIpv6(strictIp);
+		if (embeddedIpv4) return isBlockedSpecialUseIpv4Address(embeddedIpv4, blockOptions);
+		return false;
+	}
+	if (normalized.includes(":") && !parseLooseIpAddress(normalized)) return true;
+	if (!isCanonicalDottedDecimalIPv4(normalized) && isLegacyIpv4Literal(normalized)) return true;
+	if (looksLikeUnsupportedIpv4Literal(normalized)) return true;
+	return false;
+}
+function isBlockedHostnameNormalized(normalized) {
+	if (BLOCKED_HOSTNAMES.has(normalized)) return true;
+	return normalized.endsWith(".localhost") || normalized.endsWith(".local") || normalized.endsWith(".internal");
+}
+function isBlockedHostnameOrIp(hostname, policy) {
+	const normalized = normalizeHostname(hostname);
+	if (!normalized) return false;
+	return isBlockedHostnameNormalized(normalized) || isPrivateIpAddress(normalized, policy);
+}
+const BLOCKED_HOST_OR_IP_MESSAGE = "Blocked hostname or private/internal/special-use IP address";
+const BLOCKED_RESOLVED_IP_MESSAGE = "Blocked: resolves to private/internal/special-use IP address";
+function assertAllowedHostOrIpOrThrow(hostnameOrIp, policy) {
+	if (isBlockedHostnameOrIp(hostnameOrIp, policy)) throw new SsrFBlockedError(BLOCKED_HOST_OR_IP_MESSAGE);
+}
+function assertAllowedResolvedAddressesOrThrow(results, policy) {
+	for (const entry of results) if (isBlockedHostnameOrIp(entry.address, policy)) throw new SsrFBlockedError(BLOCKED_RESOLVED_IP_MESSAGE);
+}
+function createPinnedLookup(params) {
+	const normalizedHost = normalizeHostname(params.hostname);
+	const fallback = params.fallback ?? lookup;
+	const fallbackLookup = fallback;
+	const fallbackWithOptions = fallback;
+	const records = params.addresses.map((address) => ({
+		address,
+		family: address.includes(":") ? 6 : 4
+	}));
+	let index = 0;
+	return ((host, options, callback) => {
+		const cb = typeof options === "function" ? options : callback;
+		if (!cb) return;
+		const normalized = normalizeHostname(host);
+		if (!normalized || normalized !== normalizedHost) {
+			if (typeof options === "function" || options === void 0) return fallbackLookup(host, cb);
+			return fallbackWithOptions(host, options, cb);
+		}
+		const opts = typeof options === "object" && options !== null ? options : {};
+		const requestedFamily = typeof options === "number" ? options : typeof opts.family === "number" ? opts.family : 0;
+		const candidates = requestedFamily === 4 || requestedFamily === 6 ? records.filter((entry) => entry.family === requestedFamily) : records;
+		const usable = candidates.length > 0 ? candidates : records;
+		if (opts.all) {
+			cb(null, usable);
+			return;
+		}
+		const chosen = usable[index % usable.length];
+		index += 1;
+		cb(null, chosen.address, chosen.family);
+	});
+}
+function dedupeAndPreferIpv4(results) {
+	const seen = /* @__PURE__ */ new Set();
+	const ipv4 = [];
+	const otherFamilies = [];
+	for (const entry of results) {
+		if (seen.has(entry.address)) continue;
+		seen.add(entry.address);
+		if (entry.family === 4) {
+			ipv4.push(entry.address);
+			continue;
+		}
+		otherFamilies.push(entry.address);
+	}
+	return [...ipv4, ...otherFamilies];
+}
+async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
+	const normalized = normalizeHostname(hostname);
+	if (!normalized) throw new Error("Invalid hostname");
+	const allowPrivateNetwork = resolveAllowPrivateNetwork(params.policy);
+	const allowedHostnames = normalizeHostnameSet(params.policy?.allowedHostnames);
+	const hostnameAllowlist = normalizeHostnameAllowlist(params.policy?.hostnameAllowlist);
+	const isExplicitAllowed = allowedHostnames.has(normalized);
+	const skipPrivateNetworkChecks = allowPrivateNetwork || isExplicitAllowed;
+	if (!matchesHostnameAllowlist(normalized, hostnameAllowlist)) throw new SsrFBlockedError(`Blocked hostname (not in allowlist): ${hostname}`);
+	if (!skipPrivateNetworkChecks) assertAllowedHostOrIpOrThrow(normalized, params.policy);
+	const results = await (params.lookupFn ?? lookup$1)(normalized, { all: true });
+	if (results.length === 0) throw new Error(`Unable to resolve hostname: ${hostname}`);
+	if (!skipPrivateNetworkChecks) assertAllowedResolvedAddressesOrThrow(results, params.policy);
+	const addresses = dedupeAndPreferIpv4(results);
+	if (addresses.length === 0) throw new Error(`Unable to resolve hostname: ${hostname}`);
+	return {
+		hostname: normalized,
+		addresses,
+		lookup: createPinnedLookup({
+			hostname: normalized,
+			addresses
+		})
+	};
+}
+function createPinnedDispatcher(pinned) {
+	return new Agent({ connect: {
+		lookup: pinned.lookup,
+		autoSelectFamily: true,
+		autoSelectFamilyAttemptTimeout: 300
+	} });
+}
+async function closeDispatcher(dispatcher) {
+	if (!dispatcher) return;
+	const candidate = dispatcher;
+	try {
+		if (typeof candidate.close === "function") {
+			await candidate.close();
+			return;
+		}
+		if (typeof candidate.destroy === "function") candidate.destroy();
+	} catch {}
+}
+
+//#endregion
+//#region src/infra/net/fetch-guard.ts
+const DEFAULT_MAX_REDIRECTS = 3;
+const CROSS_ORIGIN_REDIRECT_SENSITIVE_HEADERS = [
+	"authorization",
+	"proxy-authorization",
+	"cookie",
+	"cookie2"
+];
+function isRedirectStatus(status) {
+	return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
+}
+function stripSensitiveHeadersForCrossOriginRedirect(init) {
+	if (!init?.headers) return init;
+	const headers = new Headers(init.headers);
+	for (const header of CROSS_ORIGIN_REDIRECT_SENSITIVE_HEADERS) headers.delete(header);
+	return {
+		...init,
+		headers
+	};
+}
+function buildAbortSignal(params) {
+	const { timeoutMs, signal } = params;
+	if (!timeoutMs && !signal) return {
+		signal: void 0,
+		cleanup: () => {}
+	};
+	if (!timeoutMs) return {
+		signal,
+		cleanup: () => {}
+	};
+	const controller = new AbortController();
+	const timeoutId = setTimeout(controller.abort.bind(controller), timeoutMs);
+	const onAbort = bindAbortRelay(controller);
+	if (signal) if (signal.aborted) controller.abort();
+	else signal.addEventListener("abort", onAbort, { once: true });
+	const cleanup = () => {
+		clearTimeout(timeoutId);
+		if (signal) signal.removeEventListener("abort", onAbort);
+	};
+	return {
+		signal: controller.signal,
+		cleanup
+	};
+}
+async function fetchWithSsrFGuard(params) {
+	const fetcher = params.fetchImpl ?? globalThis.fetch;
+	if (!fetcher) throw new Error("fetch is not available");
+	const maxRedirects = typeof params.maxRedirects === "number" && Number.isFinite(params.maxRedirects) ? Math.max(0, Math.floor(params.maxRedirects)) : DEFAULT_MAX_REDIRECTS;
+	const { signal, cleanup } = buildAbortSignal({
+		timeoutMs: params.timeoutMs,
+		signal: params.signal
+	});
+	let released = false;
+	const release = async (dispatcher) => {
+		if (released) return;
+		released = true;
+		cleanup();
+		await closeDispatcher(dispatcher ?? void 0);
+	};
+	const visited = /* @__PURE__ */ new Set();
+	let currentUrl = params.url;
+	let currentInit = params.init ? { ...params.init } : void 0;
+	let redirectCount = 0;
+	while (true) {
+		let parsedUrl;
+		try {
+			parsedUrl = new URL(currentUrl);
+		} catch {
+			await release();
+			throw new Error("Invalid URL: must be http or https");
+		}
+		if (!["http:", "https:"].includes(parsedUrl.protocol)) {
+			await release();
+			throw new Error("Invalid URL: must be http or https");
+		}
+		let dispatcher = null;
+		try {
+			const pinned = await resolvePinnedHostnameWithPolicy(parsedUrl.hostname, {
+				lookupFn: params.lookupFn,
+				policy: params.policy
+			});
+			if (params.pinDns !== false) dispatcher = createPinnedDispatcher(pinned);
+			const init = {
+				...currentInit ? { ...currentInit } : {},
+				redirect: "manual",
+				...dispatcher ? { dispatcher } : {},
+				...signal ? { signal } : {}
+			};
+			const response = await fetcher(parsedUrl.toString(), init);
+			if (isRedirectStatus(response.status)) {
+				const location = response.headers.get("location");
+				if (!location) {
+					await release(dispatcher);
+					throw new Error(`Redirect missing location header (${response.status})`);
+				}
+				redirectCount += 1;
+				if (redirectCount > maxRedirects) {
+					await release(dispatcher);
+					throw new Error(`Too many redirects (limit: ${maxRedirects})`);
+				}
+				const nextParsedUrl = new URL(location, parsedUrl);
+				const nextUrl = nextParsedUrl.toString();
+				if (visited.has(nextUrl)) {
+					await release(dispatcher);
+					throw new Error("Redirect loop detected");
+				}
+				if (nextParsedUrl.origin !== parsedUrl.origin) currentInit = stripSensitiveHeadersForCrossOriginRedirect(currentInit);
+				visited.add(nextUrl);
+				response.body?.cancel();
+				await closeDispatcher(dispatcher);
+				currentUrl = nextUrl;
+				continue;
+			}
 			return {
-				chunk: trimmed,
-				rest: text.substring(trimmed.length).trimStart()
+				response,
+				finalUrl: currentUrl,
+				release: async () => release(dispatcher)
 			};
-		}
-		const closingFence = `\n${fenceInfo.fence}`;
-		const openingFence = `${fenceInfo.fence}\n`;
-		const splitPoint = findSplitPoint(text, limit - closingFence.length);
-		return {
-			chunk: text.substring(0, splitPoint) + closingFence,
-			rest: openingFence + text.substring(splitPoint)
-		};
+		} catch (err) {
+			if (err instanceof SsrFBlockedError) logWarn(`security: blocked URL fetch (${params.auditContext ?? "url-fetch"}) target=${parsedUrl.origin}${parsedUrl.pathname} reason=${err.message}`);
+			await release(dispatcher);
+			throw err;
+		}
 	}
-	const splitPoint = findSplitPoint(text, limit);
-	return {
-		chunk: text.substring(0, splitPoint),
-		rest: text.substring(splitPoint)
-	};
 }
-/** Find the best split point within the text up to the given limit. */
-function findSplitPoint(text, limit) {
-	if (limit <= 0) return Math.min(1, text.length);
-	const searchRegion = text.substring(0, limit);
-	const paragraphIdx = searchRegion.lastIndexOf("\n\n");
-	if (paragraphIdx > 0) return paragraphIdx + 2;
-	const lineIdx = searchRegion.lastIndexOf("\n");
-	if (lineIdx > 0) return lineIdx + 1;
-	const spaceIdx = searchRegion.lastIndexOf(" ");
-	if (spaceIdx > 0) return spaceIdx + 1;
-	return limit;
+
+//#endregion
+//#region src/media/constants.ts
+const MAX_IMAGE_BYTES = 6 * 1024 * 1024;
+const MAX_AUDIO_BYTES = 16 * 1024 * 1024;
+const MAX_VIDEO_BYTES = 16 * 1024 * 1024;
+const MAX_DOCUMENT_BYTES = 100 * 1024 * 1024;
+
+//#endregion
+//#region src/media/mime.ts
+const EXT_BY_MIME = {
+	"image/heic": ".heic",
+	"image/heif": ".heif",
+	"image/jpeg": ".jpg",
+	"image/png": ".png",
+	"image/webp": ".webp",
+	"image/gif": ".gif",
+	"audio/ogg": ".ogg",
+	"audio/mpeg": ".mp3",
+	"audio/x-m4a": ".m4a",
+	"audio/mp4": ".m4a",
+	"video/mp4": ".mp4",
+	"video/quicktime": ".mov",
+	"application/pdf": ".pdf",
+	"application/json": ".json",
+	"application/zip": ".zip",
+	"application/gzip": ".gz",
+	"application/x-tar": ".tar",
+	"application/x-7z-compressed": ".7z",
+	"application/vnd.rar": ".rar",
+	"application/msword": ".doc",
+	"application/vnd.ms-excel": ".xls",
+	"application/vnd.ms-powerpoint": ".ppt",
+	"application/vnd.openxmlformats-officedocument.wordprocessingml.document": ".docx",
+	"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet": ".xlsx",
+	"application/vnd.openxmlformats-officedocument.presentationml.presentation": ".pptx",
+	"text/csv": ".csv",
+	"text/plain": ".txt",
+	"text/markdown": ".md"
+};
+const MIME_BY_EXT = {
+	...Object.fromEntries(Object.entries(EXT_BY_MIME).map(([mime, ext]) => [ext, mime])),
+	".jpeg": "image/jpeg"
+};
+function normalizeMimeType(mime) {
+	if (!mime) return;
+	return mime.split(";")[0]?.trim().toLowerCase() || void 0;
 }
-/**
-* Detect if the text has an unclosed code fence at or before the limit position.
-* Returns info about the open fence, or undefined if no open fence.
-*/
-function findOpenCodeFence(text, limit) {
-	const fenceRegex = /^(`{3,}|~{3,})/gm;
-	let openFence;
-	let match;
-	while ((match = fenceRegex.exec(text)) !== null) {
-		if (match.index >= limit) break;
-		if (openFence === void 0) openFence = {
-			fenceStart: match.index,
-			fence: match[1]
-		};
-		else if (match[1].charAt(0) === openFence.fence.charAt(0) && match[1].length >= openFence.fence.length) openFence = void 0;
+async function sniffMime(buffer) {
+	if (!buffer) return;
+	try {
+		return (await fileTypeFromBuffer(buffer))?.mime ?? void 0;
+	} catch {
+		return;
 	}
-	return openFence;
+}
+function getFileExtension(filePath) {
+	if (!filePath) return;
+	try {
+		if (/^https?:\/\//i.test(filePath)) {
+			const url = new URL(filePath);
+			return path.extname(url.pathname).toLowerCase() || void 0;
+		}
+	} catch {}
+	return path.extname(filePath).toLowerCase() || void 0;
+}
+function detectMime(opts) {
+	return detectMimeImpl(opts);
+}
+function isGenericMime(mime) {
+	if (!mime) return true;
+	const m = mime.toLowerCase();
+	return m === "application/octet-stream" || m === "application/zip";
+}
+async function detectMimeImpl(opts) {
+	const ext = getFileExtension(opts.filePath);
+	const extMime = ext ? MIME_BY_EXT[ext] : void 0;
+	const headerMime = normalizeMimeType(opts.headerMime);
+	const sniffed = await sniffMime(opts.buffer);
+	if (sniffed && (!isGenericMime(sniffed) || !extMime)) return sniffed;
+	if (extMime) return extMime;
+	if (headerMime && !isGenericMime(headerMime)) return headerMime;
+	if (sniffed) return sniffed;
+	if (headerMime) return headerMime;
+}
+function extensionForMime$1(mime) {
+	const normalized = normalizeMimeType(mime);
+	if (!normalized) return;
+	return EXT_BY_MIME[normalized];
 }
 
 //#endregion
-//#region src/middleware/error-classifier.ts
-const retryablePatterns = [
-	/rate.?limit/i,
-	/429/i,
-	/503/i,
-	/overloaded/i,
-	/ETIMEDOUT/i,
-	/ECONNRESET/i,
-	/ECONNREFUSED/i,
-	/network/i
-];
-const contextOverflowPatterns = [
-	/context.?length/i,
-	/context.?window/i,
-	/context.?overflow/i,
-	/too many tokens/i,
-	/maximum context/i,
-	/token.?limit/i
-];
-const fatalAuthPatterns = [
-	/401/i,
-	/403/i,
-	/unauthorized/i,
-	/forbidden/i,
-	/invalid.?key/i,
-	/authentication/i
-];
-/**
-* Classify an error message string into an actionable category.
-*
-* Uses first-match-wins semantics across ordered pattern arrays:
-* 1. Retryable patterns checked first
-* 2. Context overflow patterns checked second
-* 3. Fatal auth patterns checked third
-* 4. Default: "fatal" for unmatched messages
-*
-* Case-insensitive matching throughout.
-*/
-function classifyError(message) {
-	for (const pattern of retryablePatterns) if (pattern.test(message)) return "retryable";
-	for (const pattern of contextOverflowPatterns) if (pattern.test(message)) return "context_overflow";
-	for (const pattern of fatalAuthPatterns) if (pattern.test(message)) return "fatal";
-	return "fatal";
+//#region src/media/read-response-with-limit.ts
+async function readResponseWithLimit(res, maxBytes, opts) {
+	const onOverflow = opts?.onOverflow ?? ((params) => /* @__PURE__ */ new Error(`Content too large: ${params.size} bytes (limit: ${params.maxBytes} bytes)`));
+	const body = res.body;
+	if (!body || typeof body.getReader !== "function") {
+		const fallback = Buffer.from(await res.arrayBuffer());
+		if (fallback.length > maxBytes) throw onOverflow({
+			size: fallback.length,
+			maxBytes,
+			res
+		});
+		return fallback;
+	}
+	const reader = body.getReader();
+	const chunks = [];
+	let total = 0;
+	try {
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (value?.length) {
+				total += value.length;
+				if (total > maxBytes) {
+					try {
+						await reader.cancel();
+					} catch {}
+					throw onOverflow({
+						size: total,
+						maxBytes,
+						res
+					});
+				}
+				chunks.push(value);
+			}
+		}
+	} finally {
+		try {
+			reader.releaseLock();
+		} catch {}
+	}
+	return Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)), total);
 }
 
 //#endregion
-//#region src/middleware/mcp-side-effects.ts
-async function readMcpSideEffects(filePath) {
-	const result = {
-		sentTexts: [],
-		sentMediaUrls: [],
-		sentTargets: [],
-		cronAdds: 0
-	};
-	let content;
+//#region src/media/fetch.ts
+var MediaFetchError = class extends Error {
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "MediaFetchError";
+	}
+};
+function stripQuotes(value) {
+	return value.replace(/^["']|["']$/g, "");
+}
+function parseContentDispositionFileName(header) {
+	if (!header) return;
+	const starMatch = /filename\*\s*=\s*([^;]+)/i.exec(header);
+	if (starMatch?.[1]) {
+		const cleaned = stripQuotes(starMatch[1].trim());
+		const encoded = cleaned.split("''").slice(1).join("''") || cleaned;
+		try {
+			return path.basename(decodeURIComponent(encoded));
+		} catch {
+			return path.basename(encoded);
+		}
+	}
+	const match = /filename\s*=\s*([^;]+)/i.exec(header);
+	if (match?.[1]) return path.basename(stripQuotes(match[1].trim()));
+}
+async function readErrorBodySnippet(res, maxChars = 200) {
 	try {
-		content = await readFile(filePath, "utf-8");
+		const text = await res.text();
+		if (!text) return;
+		const collapsed = text.replace(/\s+/g, " ").trim();
+		if (!collapsed) return;
+		if (collapsed.length <= maxChars) return collapsed;
+		return `${collapsed.slice(0, maxChars)}…`;
 	} catch {
-		return result;
+		return;
 	}
-	const lines = content.split("\n").filter(Boolean);
-	for (const line of lines) {
-		let record;
+}
+async function fetchRemoteMedia(options) {
+	const { url, fetchImpl, filePathHint, maxBytes, maxRedirects, ssrfPolicy, lookupFn } = options;
+	let res;
+	let finalUrl = url;
+	let release = null;
+	try {
+		const result = await fetchWithSsrFGuard({
+			url,
+			fetchImpl,
+			maxRedirects,
+			policy: ssrfPolicy,
+			lookupFn
+		});
+		res = result.response;
+		finalUrl = result.finalUrl;
+		release = result.release;
+	} catch (err) {
+		throw new MediaFetchError("fetch_failed", `Failed to fetch media from ${url}: ${String(err)}`);
+	}
+	try {
+		if (!res.ok) {
+			const statusText = res.statusText ? ` ${res.statusText}` : "";
+			const redirected = finalUrl !== url ? ` (redirected to ${finalUrl})` : "";
+			let detail = `HTTP ${res.status}${statusText}`;
+			if (!res.body) detail = `HTTP ${res.status}${statusText}; empty response body`;
+			else {
+				const snippet = await readErrorBodySnippet(res);
+				if (snippet) detail += `; body: ${snippet}`;
+			}
+			throw new MediaFetchError("http_error", `Failed to fetch media from ${url}${redirected}: ${detail}`);
+		}
+		const contentLength = res.headers.get("content-length");
+		if (maxBytes && contentLength) {
+			const length = Number(contentLength);
+			if (Number.isFinite(length) && length > maxBytes) throw new MediaFetchError("max_bytes", `Failed to fetch media from ${url}: content length ${length} exceeds maxBytes ${maxBytes}`);
+		}
+		const buffer = maxBytes ? await readResponseWithLimit(res, maxBytes, { onOverflow: ({ maxBytes, res }) => new MediaFetchError("max_bytes", `Failed to fetch media from ${res.url || url}: payload exceeds maxBytes ${maxBytes}`) }) : Buffer.from(await res.arrayBuffer());
+		let fileNameFromUrl;
 		try {
-			record = JSON.parse(line);
-		} catch {
-			continue;
+			const parsed = new URL(finalUrl);
+			fileNameFromUrl = path.basename(parsed.pathname) || void 0;
+		} catch {}
+		const headerFileName = parseContentDispositionFileName(res.headers.get("content-disposition"));
+		let fileName = headerFileName || fileNameFromUrl || (filePathHint ? path.basename(filePathHint) : void 0);
+		const filePathForMime = headerFileName && path.extname(headerFileName) ? headerFileName : filePathHint ?? finalUrl;
+		const contentType = await detectMime({
+			buffer,
+			headerMime: res.headers.get("content-type"),
+			filePath: filePathForMime
+		});
+		if (fileName && !path.extname(fileName) && contentType) {
+			const ext = extensionForMime$1(contentType);
+			if (ext) fileName = `${fileName}${ext}`;
 		}
-		if (record.type === "message_sent") {
-			result.sentTexts.push(record.text);
-			if (record.mediaUrl) result.sentMediaUrls.push(record.mediaUrl);
-			const target = {
-				tool: record.tool,
-				provider: record.provider,
-				...record.accountId ? { accountId: record.accountId } : {},
-				...record.to ? { to: record.to } : {}
-			};
-			result.sentTargets.push(target);
-		} else if (record.type === "cron_added") result.cronAdds += 1;
-		else if (record.type === "heartbeat_report") result.heartbeatReport = {
-			anythingDone: record.anythingDone,
-			summary: record.summary
+		return {
+			buffer,
+			contentType: contentType ?? void 0,
+			fileName
 		};
+	} finally {
+		if (release) await release();
 	}
-	return result;
+}
+
+//#endregion
+//#region src/middleware/media-resolver.ts
+/** Max download size for inbound channel media (100 MB). */
+const MAX_INBOUND_MEDIA_BYTES = 100 * 1024 * 1024;
+/**
+* Resolve an array of media URLs (HTTP or local paths) into MediaAttachment
+* objects suitable for passing to {@link AgentRuntime.execute}.
+*
+* Remote URLs are downloaded into `tempDir` so that CLI runtimes can access
+* them as local files.  Local paths are validated for MIME type only.
+*
+* Individual resolution failures are silently skipped — a single bad URL
+* should not prevent the rest of the message from being processed.
+*/
+async function resolveMediaAttachments(mediaUrls, tempDir) {
+	const results = [];
+	for (const [index, url] of mediaUrls.entries()) try {
+		const attachment = await resolveOne(url, tempDir, index);
+		if (attachment) {
+			logDebug(`[media-resolver] resolved: url=${url} mime=${attachment.mimeType} path=${attachment.filePath}`);
+			results.push(attachment);
+		}
+	} catch (err) {
+		logDebug(`[media-resolver] failed: url=${url} error=${String(err)}`);
+	}
+	return results;
+}
+async function resolveOne(url, tempDir, index) {
+	if (/^https?:\/\//i.test(url)) return downloadRemote(url, tempDir, index);
+	return resolveLocal(url);
+}
+async function downloadRemote(url, tempDir, index) {
+	const fetched = await fetchRemoteMedia({
+		url,
+		maxBytes: MAX_INBOUND_MEDIA_BYTES
+	});
+	const mimeType = fetched.contentType ?? "application/octet-stream";
+	const fileName = `inbound-media-${index}${extensionForMime$1(mimeType) ?? ""}`;
+	const filePath = join(tempDir, fileName);
+	await writeFile(filePath, fetched.buffer);
+	return {
+		mimeType,
+		filePath,
+		sourceUrl: url,
+		fileName: fetched.fileName ?? fileName
+	};
+}
+async function resolveLocal(filePath) {
+	return {
+		mimeType: await detectMime({ filePath }) ?? "application/octet-stream",
+		filePath
+	};
 }
 
 //#endregion
@@ -10074,6 +9967,12 @@ var CLIRuntimeBase = class CLIRuntimeBase {
 		this.command = command;
 		this.timeoutMs = timeoutMs;
 	}
+	/**
+	* Construct a custom stdin payload for the subprocess.
+	* When this returns a string, it is written to stdin instead of
+	* the default large-prompt fallback.  Subclasses may override.
+	*/
+	buildStdinPayload(_params) {}
 	/** Whether this CLI accepts prompts via stdin. Subclasses may override. */
 	get supportsStdinPrompt() {
 		return true;
@@ -10088,11 +9987,18 @@ var CLIRuntimeBase = class CLIRuntimeBase {
 	}
 	async *execute(params) {
 		const args = this.buildArgs(params);
+		if (params.extraArgs && params.extraArgs.length > 0) args.push(...params.extraArgs);
+		const runtimeEnv = this.buildEnv(params);
+		const callerEnv = params.env ?? {};
 		const env = {
 			...process.env,
-			...this.buildEnv(params),
-			...params.env
+			...runtimeEnv,
+			...callerEnv
 		};
+		logDebug(`[agent-runtime] spawn: ${this.command} ${args.map((a) => JSON.stringify(a)).join(" ")}`);
+		logDebug(`[agent-runtime] cwd: ${params.workingDirectory ?? process.cwd()}`);
+		if (Object.keys(runtimeEnv).length > 0) logDebug(`[agent-runtime] runtime env keys: ${Object.keys(runtimeEnv).join(", ")}`);
+		if (Object.keys(callerEnv).length > 0) logDebug(`[agent-runtime] caller env keys: ${Object.keys(callerEnv).join(", ")}`);
 		const child = spawn(this.command, args, {
 			cwd: params.workingDirectory,
 			env,
@@ -10102,9 +10008,11 @@ var CLIRuntimeBase = class CLIRuntimeBase {
 				"pipe"
 			]
 		});
+		logDebug(`[agent-runtime] spawned pid=${child.pid}`);
 		const startMs = Date.now();
 		const stderrChunks = [];
 		let aborted = false;
+		let yieldedEvents = false;
 		let escalationTimer;
 		const killWithEscalation = () => {
 			if (escalationTimer === void 0) escalationTimer = setTimeout(() => {
@@ -10126,6 +10034,7 @@ var CLIRuntimeBase = class CLIRuntimeBase {
 			if (watchdogTimer !== void 0) clearTimeout(watchdogTimer);
 			watchdogTimer = setTimeout(() => {
 				watchdogFired = true;
+				logDebug(`[agent-runtime] pid=${child.pid}: watchdog timeout after ${this.timeoutMs}ms`);
 				killWithEscalation();
 			}, this.timeoutMs);
 		};
@@ -10165,10 +10074,18 @@ var CLIRuntimeBase = class CLIRuntimeBase {
 				});
 			});
 		});
-		if (this.supportsStdinPrompt && params.prompt.length > CLIRuntimeBase.STDIN_PROMPT_THRESHOLD && child.stdin) child.stdin.write(params.prompt);
+		const customStdin = this.buildStdinPayload(params);
+		if (customStdin !== void 0 && child.stdin) {
+			logDebug(`[agent-runtime] pid=${child.pid}: delivering custom stdin payload (${customStdin.length} chars)`);
+			child.stdin.write(customStdin);
+		} else if (this.supportsStdinPrompt && params.prompt.length > CLIRuntimeBase.STDIN_PROMPT_THRESHOLD && child.stdin) {
+			logDebug(`[agent-runtime] pid=${child.pid}: delivering prompt via stdin (${params.prompt.length} chars)`);
+			child.stdin.write(params.prompt);
+		}
 		child.stdin?.end();
 		const onAbort = () => {
 			aborted = true;
+			logDebug(`[agent-runtime] pid=${child.pid}: abort signal received`);
 			killWithEscalation();
 		};
 		if (params.abortSignal) if (params.abortSignal.aborted) {
@@ -10183,6 +10100,7 @@ var CLIRuntimeBase = class CLIRuntimeBase {
 				while (eventQueue.length > 0) {
 					const event = eventQueue.shift();
 					if (event === null || event === void 0) break;
+					yieldedEvents = true;
 					yield event;
 				}
 			}
@@ -10190,9 +10108,16 @@ var CLIRuntimeBase = class CLIRuntimeBase {
 			if (watchdogTimer !== void 0) clearTimeout(watchdogTimer);
 			params.abortSignal?.removeEventListener("abort", onAbort);
 		}
-		await exitPromise;
+		const { code: exitCode, signal: exitSignal } = await exitPromise;
 		if (escalationTimer !== void 0) clearTimeout(escalationTimer);
 		const durationMs = Date.now() - startMs;
+		logDebug(`[agent-runtime] pid=${child.pid}: exited code=${exitCode} signal=${exitSignal} duration=${durationMs}ms`);
+		const stderr = stderrChunks.join("");
+		if (stderr && (exitCode !== 0 || !yieldedEvents)) yield {
+			type: "error",
+			message: stderr.trim(),
+			code: "CLI_STDERR"
+		};
 		if (watchdogFired) yield {
 			type: "error",
 			message: `Watchdog timeout: no output for ${this.timeoutMs}ms`,
@@ -10210,7 +10135,8 @@ var CLIRuntimeBase = class CLIRuntimeBase {
 				sessionId: void 0,
 				durationMs,
 				usage: void 0,
-				aborted
+				aborted,
+				stderr: stderr || void 0
 			}
 		};
 	}
@@ -10225,12 +10151,17 @@ var CLIRuntimeBase = class CLIRuntimeBase {
 var ClaudeCliRuntime = class extends CLIRuntimeBase {
 	constructor() {
 		super("claude");
+		this.mediaCapabilities = {
+			acceptsInbound: ["image/"],
+			emitsOutbound: false
+		};
 		this.accumulatedText = "";
 		this.toolBuffer = null;
 	}
 	async *execute(params) {
 		this.resetState();
-		for await (const event of super.execute(params)) {
+		const prepared = await this.prepareMedia(params);
+		for await (const event of super.execute(prepared)) {
 			if (event.type === "done") this.enrichDoneEvent(event);
 			yield event;
 		}
@@ -10244,9 +10175,34 @@ var ClaudeCliRuntime = class extends CLIRuntimeBase {
 		];
 		if (params.sessionId) args.push("--resume", params.sessionId);
 		if (params.mcpServers && Object.keys(params.mcpServers).length > 0) args.push("--mcp-config", JSON.stringify({ mcpServers: params.mcpServers }));
-		args.push("--print", params.prompt);
+		if (params.media?.some((m) => m.mimeType.startsWith("image/") && m.base64)) args.push("-p", "--input-format", "stream-json");
+		else args.push("--print", params.prompt);
 		return args;
 	}
+	buildStdinPayload(params) {
+		const images = params.media?.filter((m) => m.mimeType.startsWith("image/") && m.base64);
+		if (!images?.length) return;
+		const content = images.map((img) => ({
+			type: "image",
+			source: {
+				type: "base64",
+				media_type: img.mimeType,
+				data: img.base64
+			}
+		}));
+		content.push({
+			type: "text",
+			text: params.prompt
+		});
+		const envelope = {
+			type: "user",
+			message: {
+				role: "user",
+				content
+			}
+		};
+		return JSON.stringify(envelope) + "\n";
+	}
 	extractEvent(line) {
 		const parsed = JSON.parse(line);
 		if (!isObject$3(parsed)) return null;
@@ -10261,6 +10217,11 @@ var ClaudeCliRuntime = class extends CLIRuntimeBase {
 		}
 		if (parsed.type === "result") {
 			this.storeResultData(parsed);
+			if (parsed.is_error === true && typeof parsed.result === "string" && parsed.result) return {
+				type: "error",
+				message: parsed.result,
+				code: "CLI_ERROR"
+			};
 			return null;
 		}
 		return null;
@@ -10303,6 +10264,10 @@ var ClaudeCliRuntime = class extends CLIRuntimeBase {
 			if (this.toolBuffer) this.toolBuffer.input += delta.partial_json;
 			return null;
 		}
+		if (delta.type === "thinking_delta" && typeof delta.thinking === "string") return {
+			type: "thinking",
+			text: delta.thinking
+		};
 		return null;
 	}
 	handleContentBlockStop() {
@@ -10349,6 +10314,37 @@ var ClaudeCliRuntime = class extends CLIRuntimeBase {
 		if (this.resultData?.durationApiMs !== void 0) result.apiDurationMs = this.resultData.durationApiMs;
 		if (this.resultData?.numTurns !== void 0) result.numTurns = this.resultData.numTurns;
 	}
+	/**
+	* Read image files referenced by media attachments and populate their base64 field.
+	* Non-image media types are filtered out (audio/video are not supported natively).
+	*/
+	async prepareMedia(params) {
+		if (!params.media?.length) return params;
+		const prepared = [];
+		for (const attachment of params.media) {
+			if (!attachment.mimeType.startsWith("image/")) continue;
+			if (attachment.base64) {
+				prepared.push(attachment);
+				continue;
+			}
+			if (attachment.filePath) {
+				try {
+					const buffer = await readFile(attachment.filePath);
+					prepared.push({
+						...attachment,
+						base64: buffer.toString("base64")
+					});
+				} catch {
+					logDebug(`[claude-runtime] failed to read media file: ${attachment.filePath}`);
+				}
+				continue;
+			}
+		}
+		return {
+			...params,
+			media: prepared.length > 0 ? prepared : void 0
+		};
+	}
 	resetState() {
 		this.currentSessionId = void 0;
 		this.accumulatedText = "";
@@ -10385,6 +10381,10 @@ function parseUsage(raw) {
 var CodexCliRuntime = class extends CLIRuntimeBase {
 	constructor() {
 		super("codex");
+		this.mediaCapabilities = {
+			acceptsInbound: ["image/"],
+			emitsOutbound: false
+		};
 		this.accumulatedText = "";
 		this.lastEmittedTextLength = 0;
 		this.itemCounter = 0;
@@ -10413,13 +10413,17 @@ var CodexCliRuntime = class extends CLIRuntimeBase {
 			params.sessionId,
 			params.prompt
 		];
-		return [
+		const args = [
 			"exec",
 			"--json",
 			"--color",
-			"never",
-			params.prompt
+			"never"
 		];
+		if (params.media) {
+			for (const attachment of params.media) if (attachment.mimeType.startsWith("image/") && attachment.filePath) args.push("--image", attachment.filePath);
+		}
+		args.push(params.prompt);
+		return args;
 	}
 	extractEvent(line) {
 		const parsed = JSON.parse(line);
@@ -10466,12 +10470,22 @@ var CodexCliRuntime = class extends CLIRuntimeBase {
 			case "agent_message":
 				this.lastEmittedTextLength = 0;
 				return null;
+			case "reasoning": return null;
 			default: return null;
 		}
 	}
 	handleItemUpdated(parsed) {
 		const item = isObject$2(parsed.item) ? parsed.item : null;
-		if (!item || item.type !== "agent_message") return null;
+		if (!item) return null;
+		if (item.type === "reasoning") {
+			const text = this.extractReasoningText(item);
+			if (text) return {
+				type: "thinking",
+				text
+			};
+			return null;
+		}
+		if (item.type !== "agent_message") return null;
 		const fullText = this.extractMessageText(item);
 		if (fullText === void 0) return null;
 		const delta = fullText.substring(this.lastEmittedTextLength);
@@ -10504,6 +10518,14 @@ var CodexCliRuntime = class extends CLIRuntimeBase {
 				}
 				return null;
 			}
+			case "reasoning": {
+				const text = this.extractReasoningText(item);
+				if (text) return {
+					type: "thinking",
+					text
+				};
+				return null;
+			}
 			case "command_execution": {
 				const toolId = this.currentToolId ?? this.extractToolId(item);
 				this.currentToolId = void 0;
@@ -10573,6 +10595,14 @@ var CodexCliRuntime = class extends CLIRuntimeBase {
 		}
 		if (typeof item.text === "string") return item.text;
 	}
+	extractReasoningText(item) {
+		if (Array.isArray(item.summary)) {
+			const textParts = [];
+			for (const part of item.summary) if (isObject$2(part) && part.type === "summary_text" && typeof part.text === "string") textParts.push(part.text);
+			if (textParts.length > 0) return textParts.join("");
+		}
+		if (typeof item.text === "string") return item.text;
+	}
 	resetState() {
 		this.currentSessionId = void 0;
 		this.accumulatedText = "";
@@ -10709,6 +10739,15 @@ function isObject$2(value) {
 var GeminiCliRuntime = class extends CLIRuntimeBase {
 	constructor() {
 		super("gemini");
+		this.mediaCapabilities = {
+			acceptsInbound: [
+				"image/",
+				"audio/",
+				"video/",
+				"application/pdf"
+			],
+			emitsOutbound: false
+		};
 		this.accumulatedText = "";
 	}
 	get supportsStdinPrompt() {
@@ -10719,12 +10758,14 @@ var GeminiCliRuntime = class extends CLIRuntimeBase {
 		const mcpConfigManager = params.mcpServers && Object.keys(params.mcpServers).length > 0 ? new GeminiMcpConfigManager(params.workingDirectory, params.mcpServers) : null;
 		try {
 			await mcpConfigManager?.setup();
-			for await (const event of super.execute(params)) {
+			const prepared = await this.prepareMedia(params);
+			for await (const event of super.execute(prepared)) {
 				if (event.type === "done") this.enrichDoneEvent(event);
 				yield event;
 			}
 		} finally {
 			await mcpConfigManager?.teardown();
+			await this.cleanupMediaTempDir();
 		}
 	}
 	buildArgs(params) {
@@ -10814,10 +10855,52 @@ var GeminiCliRuntime = class extends CLIRuntimeBase {
 			if (this.resultStats.toolCalls !== void 0) result.numTurns = this.resultStats.toolCalls;
 		}
 	}
+	/**
+	* Save media attachments to temp files and inject `@path` references into
+	* the prompt.  Gemini CLI resolves `@path` inline references natively.
+	*/
+	async prepareMedia(params) {
+		if (!params.media?.length) return params;
+		const tempDir = join(tmpdir(), `remoteclaw-gemini-media-${randomUUID()}`);
+		await mkdir(tempDir, { recursive: true });
+		this.mediaTempDir = tempDir;
+		const mediaRefs = [];
+		for (const attachment of params.media) {
+			const ext = extensionForMime(attachment.mimeType);
+			const filePath = join(tempDir, `media-${mediaRefs.length}${ext}`);
+			if (attachment.base64) {
+				await writeFile(filePath, Buffer.from(attachment.base64, "base64"));
+				mediaRefs.push(filePath);
+			} else if (attachment.filePath) try {
+				await writeFile(filePath, await readFile(attachment.filePath));
+				mediaRefs.push(filePath);
+			} catch {
+				logDebug(`[gemini-runtime] failed to read media file: ${attachment.filePath}`);
+			}
+		}
+		if (mediaRefs.length === 0) return params;
+		const mediaPrefix = mediaRefs.map((ref) => `@${ref}`).join(" ");
+		return {
+			...params,
+			prompt: `${mediaPrefix} ${params.prompt}`
+		};
+	}
+	async cleanupMediaTempDir() {
+		if (this.mediaTempDir) {
+			try {
+				await rm(this.mediaTempDir, {
+					recursive: true,
+					force: true
+				});
+			} catch {}
+			this.mediaTempDir = void 0;
+		}
+	}
 	resetState() {
 		this.currentSessionId = void 0;
 		this.accumulatedText = "";
 		this.resultStats = void 0;
+		this.mediaTempDir = void 0;
 	}
 };
 /**
@@ -10879,6 +10962,23 @@ var GeminiMcpConfigManager = class {
 function isObject$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+/** Map common MIME types to file extensions for Gemini CLI `@path` references. */
+function extensionForMime(mimeType) {
+	return {
+		"image/jpeg": ".jpg",
+		"image/png": ".png",
+		"image/gif": ".gif",
+		"image/webp": ".webp",
+		"audio/ogg": ".ogg",
+		"audio/mpeg": ".mp3",
+		"audio/wav": ".wav",
+		"audio/webm": ".weba",
+		"video/mp4": ".mp4",
+		"video/webm": ".webm",
+		"video/quicktime": ".mov",
+		"application/pdf": ".pdf"
+	}[mimeType] ?? "";
+}
 
 //#endregion
 //#region src/middleware/runtimes/opencode.ts
@@ -10897,6 +10997,10 @@ function isObject$1(value) {
 var OpenCodeCliRuntime = class extends CLIRuntimeBase {
 	constructor() {
 		super("opencode");
+		this.mediaCapabilities = {
+			acceptsInbound: [],
+			emitsOutbound: false
+		};
 		this.accumulatedText = "";
 		this.pendingEvents = [];
 		this.toolCounter = 0;
@@ -10935,7 +11039,7 @@ var OpenCodeCliRuntime = class extends CLIRuntimeBase {
 			case "tool_use": return this.handleToolUse(data);
 			case "step_start": return null;
 			case "step_finish": return this.handleStepFinish(data);
-			case "reasoning": return null;
+			case "reasoning": return this.handleReasoning(data);
 			case "error": return this.handleError(data);
 			default: return null;
 		}
@@ -10981,6 +11085,14 @@ var OpenCodeCliRuntime = class extends CLIRuntimeBase {
 			message: typeof parsed.message === "string" ? parsed.message : "Unknown error"
 		};
 	}
+	handleReasoning(parsed) {
+		const content = typeof parsed.text === "string" ? parsed.text : typeof parsed.content === "string" ? parsed.content : "";
+		if (!content) return null;
+		return {
+			type: "thinking",
+			text: content
+		};
+	}
 	enrichDoneEvent(event) {
 		const { result } = event;
 		result.text = this.accumulatedText;
@@ -11075,12 +11187,42 @@ const SUPPORTED_PROVIDERS = [
 	"codex",
 	"opencode"
 ];
+const validatedCommands = /* @__PURE__ */ new Set();
+/**
+* Verify that a CLI binary exists on PATH.
+*
+* Results are cached per process lifetime so the `which` lookup runs at most
+* once per command.
+*/
+function validateExecutable(command) {
+	if (validatedCommands.has(command)) {
+		logDebug(`[runtime-factory] executable already validated: ${command}`);
+		return;
+	}
+	try {
+		execFileSync("which", [command], { stdio: "ignore" });
+		logDebug(`[runtime-factory] executable validated: ${command}`);
+		validatedCommands.add(command);
+	} catch {
+		throw new Error(`Runtime '${command}' is configured but the '${command}' binary was not found on PATH. Install it or set agents.defaults.runtime to a different provider.`);
+	}
+}
 function createCliRuntime(provider) {
-	switch (provider.trim().toLowerCase()) {
-		case "claude": return new ClaudeCliRuntime();
-		case "gemini": return new GeminiCliRuntime();
-		case "codex": return new CodexCliRuntime();
-		case "opencode": return new OpenCodeCliRuntime();
+	const normalized = provider.trim().toLowerCase();
+	logDebug(`[runtime-factory] creating runtime: provider=${normalized}`);
+	switch (normalized) {
+		case "claude":
+			validateExecutable(normalized);
+			return new ClaudeCliRuntime();
+		case "gemini":
+			validateExecutable(normalized);
+			return new GeminiCliRuntime();
+		case "codex":
+			validateExecutable(normalized);
+			return new CodexCliRuntime();
+		case "opencode":
+			validateExecutable(normalized);
+			return new OpenCodeCliRuntime();
 		default: throw new Error(`Unknown runtime provider "${provider}". Supported providers: ${SUPPORTED_PROVIDERS.join(", ")}`);
 	}
 }
@@ -11231,6 +11373,8 @@ var ChannelBridge = class {
 	#workspaceDir;
 	#chunkLimit;
 	#mcpServerPath;
+	#runtimeArgs;
+	#runtimeEnv;
 	constructor(options) {
 		this.#provider = options.provider;
 		this.#sessionMap = options.sessionMap;
@@ -11239,6 +11383,8 @@ var ChannelBridge = class {
 		this.#workspaceDir = options.workspaceDir ?? DEFAULT_WORKSPACE_DIR;
 		this.#chunkLimit = options.chunkLimit;
 		this.#mcpServerPath = options.mcpServerPath ?? DEFAULT_MCP_SERVER_PATH;
+		this.#runtimeArgs = options.runtimeArgs;
+		this.#runtimeEnv = options.runtimeEnv;
 	}
 	/**
 	* Process an incoming channel message through the full agent execution pipeline.
@@ -11248,7 +11394,9 @@ var ChannelBridge = class {
 	*/
 	async handle(message, callbacks, abortSignal) {
 		const sessionKey = buildSessionKey(message);
+		logDebug(`[channel-bridge] handle: channel=${message.provider} from=${message.from} channelId=${message.channelId} threadId=${message.replyToId ?? "none"} agentId=${message.agentId ?? "default"} media=${message.mediaUrls?.length ?? 0}`);
 		const existingSessionId = await this.#sessionMap.get(sessionKey);
+		logDebug(`[channel-bridge] session lookup: key=${formatSessionKeyString(sessionKey)} ${existingSessionId ? `hit=${existingSessionId}` : "miss"}`);
 		const hookRunner = getGlobalHookRunner();
 		if (existingSessionId && hookRunner?.hasHooks("session_resumed")) await hookRunner.runSessionResumed({
 			sessionId: existingSessionId,
@@ -11275,9 +11423,10 @@ var ChannelBridge = class {
 		const sideEffectsFile = join(invocationDir, "side-effects.ndjson");
 		try {
 			const mcpServers = this.#buildMcpConfig(message, sessionKey, sideEffectsFile);
+			logDebug(`[channel-bridge] creating runtime: provider=${this.#provider}`);
 			const runtime = createCliRuntime(this.#provider);
 			let workspaceDir = this.#workspaceDir;
-			let extraEnv;
+			let hookEnv;
 			const runId = randomUUID();
 			if (hookRunner?.hasHooks("before_runtime_spawn")) {
 				const spawnResult = await hookRunner.runBeforeRuntimeSpawn({
@@ -11293,9 +11442,23 @@ var ChannelBridge = class {
 					channelId: message.channelId,
 					runtimeName: this.#provider
 				});
-				if (spawnResult?.workspaceDir) workspaceDir = spawnResult.workspaceDir;
-				if (spawnResult?.env) extraEnv = spawnResult.env;
+				if (spawnResult?.workspaceDir) {
+					logDebug(`[channel-bridge] hook overrode workspaceDir: ${this.#workspaceDir} -> ${spawnResult.workspaceDir}`);
+					workspaceDir = spawnResult.workspaceDir;
+				}
+				if (spawnResult?.env) {
+					logDebug(`[channel-bridge] hook injected env keys: ${Object.keys(spawnResult.env).join(", ")}`);
+					hookEnv = spawnResult.env;
+				}
 			}
+			const resolvedMedia = message.mediaUrls?.length ? await resolveMediaAttachments(message.mediaUrls, invocationDir) : void 0;
+			if (resolvedMedia?.length) logDebug(`[channel-bridge] resolved ${resolvedMedia.length}/${message.mediaUrls.length} media attachments`);
+			const { supported: supportedMedia, unsupported: unsupportedMedia } = resolvedMedia?.length ? partitionMedia(runtime, resolvedMedia) : {
+				supported: [],
+				unsupported: []
+			};
+			const mediaWarning = formatUnsupportedMediaWarning(unsupportedMedia, this.#provider);
+			if (unsupportedMedia.length > 0) logDebug(`[channel-bridge] unsupported media: ${unsupportedMedia.length} attachment(s) not accepted by ${this.#provider}`);
 			const adapter = new DeliveryAdapter(this.#chunkLimit !== void 0 ? { chunkLimit: this.#chunkLimit } : void 0);
 			let runResult;
 			let lastError;
@@ -11303,11 +11466,16 @@ var ChannelBridge = class {
 			try {
 				const captured = captureResult(runtime.execute({
 					prompt: systemPrompt + (message.extraContext ? "\n\n" + message.extraContext : "") + "\n\n" + message.text,
+					media: supportedMedia?.length ? supportedMedia : void 0,
 					sessionId: existingSessionId,
 					mcpServers,
 					abortSignal,
 					workingDirectory: workspaceDir,
-					env: extraEnv
+					env: this.#runtimeEnv || hookEnv ? {
+						...this.#runtimeEnv,
+						...hookEnv
+					} : void 0,
+					extraArgs: this.#runtimeArgs
 				}));
 				payloads = await adapter.process(captured.events, callbacks);
 				runResult = captured.getResult();
@@ -11315,6 +11483,7 @@ var ChannelBridge = class {
 			} catch (err) {
 				const errMsg = String(err);
 				const category = classifyError(errMsg);
+				logDebug(`[channel-bridge] runtime threw: category=${category} error=${errMsg.slice(0, 500)}`);
 				lastError = errMsg;
 				payloads = [];
 				runResult = {
@@ -11322,13 +11491,18 @@ var ChannelBridge = class {
 					errorSubtype: category === "context_overflow" ? "context_window" : category
 				};
 			}
+			if (mediaWarning) payloads.unshift({ text: mediaWarning });
 			let mcp;
 			try {
 				mcp = await readMcpSideEffects(sideEffectsFile);
 			} catch {
 				mcp = { ...EMPTY_SIDE_EFFECTS };
 			}
-			if (runResult?.sessionId) await this.#sessionMap.set(sessionKey, runResult.sessionId);
+			logDebug(`[channel-bridge] side effects: sentTexts=${mcp.sentTexts.length} sentMedia=${mcp.sentMediaUrls.length} cronAdds=${mcp.cronAdds}`);
+			if (runResult?.sessionId) {
+				logDebug(`[channel-bridge] session update: key=${formatSessionKeyString(sessionKey)} sessionId=${runResult.sessionId}`);
+				await this.#sessionMap.set(sessionKey, runResult.sessionId);
+			}
 			const finalResult = runResult ?? { ...DEFAULT_RUN_RESULT };
 			if (hookRunner) {
 				const runtimeCtx = {
@@ -11356,6 +11530,7 @@ var ChannelBridge = class {
 					durationMs: finalResult.durationMs
 				}, runtimeCtx);
 			}
+			logDebug(`[channel-bridge] complete: runId=${runId} duration=${finalResult.durationMs}ms payloads=${payloads.length} error=${lastError ?? "none"}`);
 			return {
 				payloads,
 				run: finalResult,
@@ -11517,4 +11692,4 @@ function resolveGatewayCredentialsFromConfig(params) {
 }
 
 //#endregion
-export { ChannelBridge, DEFAULT_MODEL, DEFAULT_PROVIDER, ensureAgentWorkspace, loadSessionStore, resolveAgentDir, resolveAgentIdentity, resolveAgentTimeoutMs, resolveAgentWorkspaceDir, resolveGatewayCredentialsFromConfig, resolveGatewayPort, resolveSessionFilePath, resolveStorePath, saveSessionStore };
+export { ChannelBridge, ensureAgentWorkspace, loadSessionStore, resolveAgentDir, resolveAgentIdentity, resolveAgentTimeoutMs, resolveAgentWorkspaceDir, resolveGatewayCredentialsFromConfig, resolveGatewayPort, resolveSessionFilePath, resolveStorePath, saveSessionStore };