Merge branch 'sipeed:main' into fix/google-antigravity-oauth-refresh

2026-04-01 07:45:41 -03:00 · 2026-04-01 07:45:41 -03:00 · 5f54790048
commit 5f54790048
parent b713711416 a9c76eca21
140 changed files with 6861 additions and 1011 deletions
--- a/.golangci.yaml
+++ b/.golangci.yaml
@ -61,6 +61,9 @@ linters:
    - usestdlibvars
    - usetesting
  settings:
    gomoddirectives:
      replace-allow-list:
        - github.com/bwmarrin/discordgo
    errcheck:
      check-type-assertions: true
      check-blank: true
--- a/README.fr.md
+++ b/README.fr.md
@ -57,6 +57,8 @@
 ## 📢 Actualités
 2026-03-31 📱 **Support Android !** PicoClaw fonctionne maintenant sur Android ! Téléchargez l'APK sur [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 publiée !** Refonte de l'architecture Agent (SubTurn, Hooks, Steering, EventBus), intégration WeChat/WeCom, renforcement de la sécurité (.security.yml, filtrage des données sensibles), nouveaux providers (AWS Bedrock, Azure, Xiaomi MiMo), et 35 corrections de bugs. PicoClaw a atteint **26K Stars** !
 2026-03-17 🚀 **v0.2.3 publiée !** Interface system tray (Windows & Linux), requête de statut des sous-agents (`spawn_status`), rechargement à chaud expérimental du Gateway, sécurisation Cron, et 2 correctifs de sécurité. PicoClaw a atteint **25K Stars** !
@ -321,9 +323,9 @@ Suivez ensuite la section Terminal Launcher ci-dessous pour terminer la configur
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
-**Option 2 : Installation APK (bientôt disponible)**
+**Option 2 : Installation APK**
-Un APK Android autonome avec WebUI intégré est en développement. Restez à l'écoute !
+Téléchargez l'APK depuis [picoclaw.io](https://picoclaw.io/download/) et installez-le directement. Pas besoin de Termux !
 <details>
 <summary><b>Terminal Launcher (pour les environnements à ressources limitées)</b></summary>
--- a/README.id.md
+++ b/README.id.md
@ -56,6 +56,8 @@
 ## 📢 Berita
 2026-03-31 📱 **Dukungan Android!** PicoClaw sekarang berjalan di Android! Unduh APK di [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 Dirilis!** Perombakan arsitektur Agent (SubTurn, Hooks, Steering, EventBus), integrasi WeChat/WeCom, penguatan keamanan (.security.yml, penyaringan data sensitif), provider baru (AWS Bedrock, Azure, Xiaomi MiMo), dan 35 perbaikan bug. PicoClaw telah mencapai **26K Stars**!
 2026-03-17 🚀 **v0.2.3 Dirilis!** UI system tray (Windows & Linux), pelacakan status sub-agent (`spawn_status`), eksperimental Gateway hot-reload, gerbang keamanan Cron, dan 2 perbaikan keamanan. PicoClaw telah mencapai **25K Stars**!
@ -318,9 +320,9 @@ Kemudian ikuti bagian Terminal Launcher di bawah untuk menyelesaikan konfigurasi
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
-**Opsi 2: Instal APK (segera hadir)**
+**Opsi 2: Instal APK**
-APK Android mandiri dengan WebUI bawaan sedang dalam pengembangan. Pantau terus!
+Unduh APK dari [picoclaw.io](https://picoclaw.io/download/) dan instal langsung. Tanpa Termux!
 <details>
 <summary><b>Terminal Launcher (untuk lingkungan dengan sumber daya terbatas)</b></summary>
--- a/README.it.md
+++ b/README.it.md
@ -56,6 +56,8 @@
 ## 📢 Novità
 2026-03-31 📱 **Supporto Android!** PicoClaw ora funziona su Android! Scarica l'APK su [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 rilasciata!** Revisione dell'architettura Agent (SubTurn, Hooks, Steering, EventBus), integrazione WeChat/WeCom, rafforzamento della sicurezza (.security.yml, filtraggio dati sensibili), nuovi provider (AWS Bedrock, Azure, Xiaomi MiMo) e 35 correzioni di bug. PicoClaw raggiunge **26K Stars**!
 2026-03-17 🚀 **v0.2.3 rilasciata!** Interfaccia system tray (Windows & Linux), query sullo stato dei sub-agent (`spawn_status`), hot-reload sperimentale del Gateway, gate di sicurezza per Cron e 2 correzioni di sicurezza. PicoClaw raggiunge **25K Stars**!
@ -318,9 +320,9 @@ Poi segui la sezione Terminal Launcher qui sotto per completare la configurazion
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
-**Opzione 2: APK Install (prossimamente)**
+**Opzione 2: Installazione APK**
-Un APK Android standalone con WebUI integrato è in sviluppo. Resta sintonizzato!
+Scarica l'APK da [picoclaw.io](https://picoclaw.io/download/) e installa direttamente. Senza Termux!
 <details>
 <summary><b>Terminal Launcher (per ambienti con risorse limitate)</b></summary>
--- a/README.ja.md
+++ b/README.ja.md
@ -56,6 +56,8 @@
 ## 📢 ニュース
 2026-03-31 📱 **Android サポート！** PicoClawがAndroidで動作！APKは[picoclaw.io](https://picoclaw.io/download)からダウンロード
 2026-03-25 🚀 **v0.2.4 リリース！** Agent アーキテクチャ全面刷新（SubTurn、Hooks、Steering、EventBus）、WeChat/WeCom 統合、セキュリティ強化（.security.yml、機密データフィルタリング）、新プロバイダー（AWS Bedrock、Azure、Xiaomi MiMo）、35 件のバグ修正。PicoClaw **26K ⭐** 達成！
 2026-03-17 🚀 **v0.2.3 リリース！** システムトレイ UI（Windows & Linux）、サブエージェントステータス追跡（`spawn_status`）、実験的 Gateway ホットリロード、cron セキュリティゲート、セキュリティ修正 2 件。PicoClaw **25K ⭐** 達成！
@ -318,9 +320,9 @@ termux-chroot ./picoclaw onboard   # chroot で標準的な Linux ファイル
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
-**オプション 2: APK インストール（近日公開）**
+**オプション 2: APK インストール**
-内蔵 WebUI を備えたスタンドアロン Android APK を開発中です。お楽しみに！
+[picoclaw.io](https://picoclaw.io/download/) から APK をダウンロードして直接インストール。Termux 不要！
 <details>
 <summary><b>Terminal Launcher（リソース制約環境向け）</b></summary>
--- a/README.md
+++ b/README.md
@ -56,6 +56,8 @@
 ## 📢 News
 2026-03-31 📱 **Android Support!** PicoClaw now runs on Android! Download the APK at [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 Released!** Agent architecture overhaul (SubTurn, Hooks, Steering, EventBus), WeChat/WeCom integration, security hardening (.security.yml, sensitive data filtering), new providers (AWS Bedrock, Azure, Xiaomi MiMo), and 35 bug fixes. PicoClaw has reached **26K Stars**!
 2026-03-17 🚀 **v0.2.3 Released!** System tray UI (Windows & Linux), sub-agent status query (`spawn_status`), experimental Gateway hot-reload, Cron security gating, and 2 security fixes. PicoClaw has reached **25K Stars**!
@ -318,9 +320,9 @@ Then follow the Terminal Launcher section below to complete configuration.
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
-**Option 2: APK Install (coming soon)**
+**Option 2: APK Install**
-A standalone Android APK with built-in WebUI is in development. Stay tuned!
+Download the APK from [picoclaw.io](https://picoclaw.io/download/) and install directly. No Termux required!
 <details>
 <summary><b>Terminal Launcher (for resource-constrained environments)</b></summary>
--- a/README.my.md
+++ b/README.my.md
@ -56,6 +56,8 @@
 ## 📢 Berita
 2026-03-31 📱 **Sokongan Android!** PicoClaw sekarang berjalan di Android! Muat turun APK di [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 Dikeluarkan!** Penstrukturan semula seni bina Agent (SubTurn, Hooks, Steering, EventBus), integrasi WeChat/WeCom, penguatan keselamatan (.security.yml, penapisan data sensitif), penyedia baharu (AWS Bedrock, Azure, Xiaomi MiMo), dan 35 pembetulan pepijat. PicoClaw mencapai **26K Stars**!
 2026-03-17 🚀 **v0.2.3 Dikeluarkan!** UI dulang sistem (Windows & Linux), pertanyaan status sub-agent (`spawn_status`), muat semula panas Gateway eksperimental, kawalan keselamatan Cron, dan 2 pembetulan keselamatan. PicoClaw mencapai **25K Stars**!
@ -315,9 +317,9 @@ Kemudian ikuti bahagian Pelancar Terminal di bawah untuk melengkapkan konfiguras
 <img src="assets/termux.jpg" alt="PicoClaw pada Termux" width="512">
-**Pilihan 2: APK (akan datang)**
+**Pilihan 2: Pasang APK**
-APK Android bebas dengan WebUI terbina dalam sedang dalam pembangunan. Nantikan!
+Muat turun APK dari [picoclaw.io](https://picoclaw.io/download/) dan pasang secara langsung. Tiada Termux diperlukan!
 <details>
 <summary><b>Pelancar Terminal (untuk persekitaran terhad sumber)</b></summary>
--- a/README.pt-br.md
+++ b/README.pt-br.md
@ -56,6 +56,8 @@
 ## 📢 Novidades
 2026-03-31 📱 **Suporte Android!** PicoClaw agora roda no Android! Baixe o APK em [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 Lançada!** Reformulação da arquitetura Agent (SubTurn, Hooks, Steering, EventBus), integração WeChat/WeCom, fortalecimento de segurança (.security.yml, filtragem de dados sensíveis), novos providers (AWS Bedrock, Azure, Xiaomi MiMo) e 35 correções de bugs. O PicoClaw atingiu **26K Stars**!
 2026-03-17 🚀 **v0.2.3 Lançada!** UI na bandeja do sistema (Windows e Linux), consulta de status de sub-agent (`spawn_status`), hot-reload experimental do Gateway, controle de segurança do Cron e 2 correções de segurança. O PicoClaw atingiu **25K Stars**!
@ -318,9 +320,9 @@ Em seguida, siga a seção Terminal Launcher abaixo para concluir a configuraç
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
-**Opção 2: Instalação via APK (em breve)**
+**Opção 2: Instalação via APK**
-Um APK Android independente com WebUI integrado está em desenvolvimento. Fique ligado!
+Baixe o APK de [picoclaw.io](https://picoclaw.io/download/) e instale diretamente. Sem necessidade de Termux!
 <details>
 <summary><b>Terminal Launcher (para ambientes com recursos limitados)</b></summary>
--- a/README.vi.md
+++ b/README.vi.md
@ -56,6 +56,8 @@
 ## 📢 Tin tức
 2026-03-31 📱 **Hỗ trợ Android!** PicoClaw giờ chạy trên Android! Tải APK tại [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 đã phát hành!** Tái cấu trúc kiến trúc Agent (SubTurn, Hooks, Steering, EventBus), tích hợp WeChat/WeCom, tăng cường bảo mật (.security.yml, lọc dữ liệu nhạy cảm), provider mới (AWS Bedrock, Azure, Xiaomi MiMo) và 35 bản vá lỗi. PicoClaw đã đạt **26K Stars**!
 2026-03-17 🚀 **v0.2.3 đã phát hành!** Giao diện system tray (Windows & Linux), truy vấn trạng thái sub-agent (`spawn_status`), thử nghiệm Gateway hot-reload, bảo mật Cron, và 2 bản vá bảo mật. PicoClaw đã đạt **25K Stars**!
@ -318,9 +320,9 @@ Sau đó làm theo phần Terminal Launcher bên dưới để hoàn tất cấu
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
-**Tùy chọn 2: Cài đặt APK (sắp ra mắt)**
+**Tùy chọn 2: Cài đặt APK**
-Một APK Android độc lập với WebUI tích hợp đang được phát triển. Hãy đón chờ!
+Tải APK từ [picoclaw.io](https://picoclaw.io/download/) và cài đặt trực tiếp. Không cần Termux!
 <details>
 <summary><b>Terminal Launcher (cho môi trường hạn chế tài nguyên)</b></summary>
--- a/README.zh.md
+++ b/README.zh.md
@ -56,6 +56,8 @@
 ## 📢 新闻
 2026-03-31 📱 **Android 支持！** PicoClaw 现可在 Android 上运行！APK 下载地址：[picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 发布！** Agent 架构全面重构（SubTurn、Hook、Steering、EventBus）、微信/企业微信深度集成、安全体系升级（.security.yml、敏感数据过滤）、新增 Provider（AWS Bedrock、Azure、小米 MiMo），以及 35 项 Bug 修复。PicoClaw 已达 **26K ⭐**！
 2026-03-17 🚀 **v0.2.3 发布！** 系统托盘 UI（Windows & Linux）、子 Agent 状态查询 (`spawn_status`)、实验性 Gateway 热重载、Cron 安全门控，以及 2 项安全修复。PicoClaw 已达 **25K ⭐**！
@ -318,9 +320,9 @@ termux-chroot ./picoclaw onboard   # chroot 提供标准 Linux 文件系统布
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
-**方式二：APK 安装（即将推出）**
+**方式二：APK 安装**
-内置 WebUI 的独立 Android APK 正在开发中，敬请期待！
+从 [picoclaw.io](https://picoclaw.io/download/) 下载 APK 并直接安装，无需 Termux！
 <details>
 <summary><b>Terminal Launcher（适用于资源受限环境）</b></summary>
--- a/assets/wechat.png
+++ b/assets/wechat.png
--- a/config/config.example.json
+++ b/config/config.example.json
@ -48,6 +48,10 @@
      "model": "deepseek/deepseek-chat",
      "api_key": "sk-your-deepseek-key"
    },
    {
      "model_name": "lmstudio-local",
      "model": "lmstudio/openai/gpt-oss-20b"
    },
    {
      "model_name": "longcat",
      "model": "longcat/LongCat-Flash-Thinking",
@ -414,6 +418,9 @@
    "read_file": {
      "enabled": true
    },
    "send_tts": {
      "enabled": false
    },
    "spawn": {
      "enabled": true
    },
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@ -24,7 +24,7 @@ services:
  picoclaw-gateway:
    image: docker.io/sipeed/picoclaw:latest
    container_name: picoclaw-gateway
-    restart: on-failure
+    restart: unless-stopped
    profiles:
      - gateway
    # Uncomment to access host network; leave commented unless needed.
@ -40,7 +40,7 @@ services:
  picoclaw-launcher:
    image: docker.io/sipeed/picoclaw:launcher
    container_name: picoclaw-launcher
-    restart: on-failure
+    restart: unless-stopped
    profiles:
      - launcher
    environment:
--- a/docs/channels/telegram/README.fr.md
+++ b/docs/channels/telegram/README.fr.md
@ -13,18 +13,20 @@ Le canal Telegram utilise le long polling via l'API Bot Telegram pour une commun
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | Champ           | Type   | Requis | Description                                                              |
-| ---------- | ------ | ------ | ------------------------------------------------------------------------ |
+| --------------- | ------ | ------ | ------------------------------------------------------------------------ |
 | enabled         | bool   | Oui    | Activer ou non le canal Telegram                                         |
 | token           | string | Oui    | Token de l'API Bot Telegram                                              |
 | allow_from      | array  | Non    | Liste blanche d'identifiants utilisateur ; vide signifie tous les utilisateurs |
 | proxy           | string | Non    | URL du proxy pour se connecter à l'API Telegram (ex. http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | Non    | Activer le formatage Telegram MarkdownV2                                 |
 ## Configuration initiale
@ -33,3 +35,20 @@ Le canal Telegram utilise le long polling via l'API Bot Telegram pour une commun
 3. Obtenir le Token de l'API HTTP
 4. Renseigner le Token dans le fichier de configuration
 5. (Optionnel) Configurer `allow_from` pour restreindre les identifiants utilisateur autorisés à interagir (les IDs peuvent être obtenus via `@userinfobot`)
 ## Formatage avancées
 Vous pouvez définir `use_markdown_v2: true` pour activer les options de formatage améliorées. Cela permet au bot d'utiliser toutes les fonctionnalités de Telegram MarkdownV2, y compris les styles imbriqués, les spoilers et les blocs de largeur fixe personnalisés.
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.ja.md
+++ b/docs/channels/telegram/README.ja.md
@ -13,18 +13,20 @@ Telegram チャンネルは、Telegram Bot API を使用したロングポーリ
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | フィールド      | 型     | 必須 | 説明                                                              |
-| ---------- | ------ | ---- | ----------------------------------------------------------------- |
+| --------------- | ------ | ---- | ----------------------------------------------------------------- |
 | enabled         | bool   | はい | Telegram チャンネルを有効にするかどうか                           |
 | token           | string | はい | Telegram Bot API トークン                                         |
 | allow_from      | array  | いいえ | 許可するユーザーIDのリスト。空の場合はすべてのユーザーを許可     |
 | proxy           | string | いいえ | Telegram API への接続に使用するプロキシ URL (例: http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | いいえ | Telegram MarkdownV2 フォーマットを有効にする                      |
 ## セットアップ手順
@ -33,3 +35,20 @@ Telegram チャンネルは、Telegram Bot API を使用したロングポーリ
 3. HTTP API トークンを取得する
 4. 設定ファイルにトークンを入力する
 5. (任意) `allow_from` を設定して、対話を許可するユーザー ID を制限する（ID は `@userinfobot` で取得可能）
 ## 高度なフォーマット
 `use_markdown_v2: true` を設定することで、增强されたフォーマットオプションを有効にできます。これにより、ボットは Telegram MarkdownV2 の全機能（ネストされたスタイル、スポイラー、カスタム固定幅ブロックなど）を利用できます。
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.md
+++ b/docs/channels/telegram/README.md
@ -13,18 +13,20 @@ The Telegram channel uses long polling via the Telegram Bot API for bot-based co
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | Field            | Type   | Required | Description                                                        |
-| ---------- | ------ | -------- | ------------------------------------------------------------------ |
+| ---------------- | ------ | -------- | ------------------------------------------------------------------ |
 | enabled          | bool   | Yes      | Whether to enable the Telegram channel                             |
 | token            | string | Yes      | Telegram Bot API Token                                             |
 | allow_from       | array  | No       | Allowlist of user IDs; empty means all users are allowed           |
 | proxy            | string | No       | Proxy URL for connecting to the Telegram API (e.g. http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | No       | Enable Telegram MarkdownV2 formatting                              |
 ## Setup
@ -53,3 +55,20 @@ Examples:
 /use git
 explain how to squash the last 3 commits
 ```
 ## Advanced Formatting
 You can set `use_markdown_v2: true` to enable enhanced formatting options. This allows the bot to utilize the full range of Telegram MarkdownV2 features, including nested styles, spoilers, and custom fixed-width blocks.
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.pt-br.md
+++ b/docs/channels/telegram/README.pt-br.md
@ -13,18 +13,20 @@ O canal Telegram utiliza long polling via a API de Bot do Telegram para comunica
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | Campo           | Tipo   | Obrigatório | Descrição                                                                  |
-| ---------- | ------ | ----------- | -------------------------------------------------------------------------- |
+| --------------- | ------ | ----------- | -------------------------------------------------------------------------- |
 | enabled         | bool   | Sim         | Se o canal Telegram deve ser habilitado                                    |
 | token           | string | Sim         | Token da API de Bot do Telegram                                            |
 | allow_from      | array  | Não         | Lista de IDs de usuários permitidos; vazio significa todos os usuários     |
 | proxy           | string | Não         | URL do proxy para conexão com a API do Telegram (ex. http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | Não         | Habilitar formatação Telegram MarkdownV2                                   |
 ## Configuração inicial
@ -33,3 +35,20 @@ O canal Telegram utiliza long polling via a API de Bot do Telegram para comunica
 3. Obtenha o Token da API HTTP
 4. Preencha o Token no arquivo de configuração
 5. (Opcional) Configure `allow_from` para restringir quais IDs de usuário podem interagir (os IDs podem ser obtidos via `@userinfobot`)
 ## Formatação Avançada
 Você pode definir `use_markdown_v2: true` para habilitar opções de formatação aprimoradas. Isso permite que o bot utilize todos os recursos do Telegram MarkdownV2, incluindo estilos aninhados, spoilers e blocos de largura fixa personalizados.
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.vi.md
+++ b/docs/channels/telegram/README.vi.md
@ -13,18 +13,20 @@ Kênh Telegram sử dụng long polling qua Telegram Bot API để giao tiếp d
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | Trường         | Kiểu   | Bắt buộc | Mô tả                                                                    |
-| ---------- | ------ | -------- | ------------------------------------------------------------------------ |
+| -------------- | ------ | -------- | ------------------------------------------------------------------------ |
 | enabled        | bool   | Có       | Có bật kênh Telegram hay không                                           |
 | token          | string | Có       | Token API Bot Telegram                                                   |
 | allow_from     | array  | Không    | Danh sách trắng ID người dùng; để trống nghĩa là cho phép tất cả        |
 | proxy          | string | Không    | URL proxy để kết nối với Telegram API (ví dụ: http://127.0.0.1:7890)    |
 | use_markdown_v2 | bool   | Không    | Bật định dạng Telegram MarkdownV2                                        |
 ## Hướng dẫn thiết lập
@ -33,3 +35,20 @@ Kênh Telegram sử dụng long polling qua Telegram Bot API để giao tiếp d
 3. Lấy Token API HTTP
 4. Điền Token vào file cấu hình
 5. (Tùy chọn) Cấu hình `allow_from` để giới hạn ID người dùng được phép tương tác (có thể lấy ID qua `@userinfobot`)
 ## Định dạng nâng cao
 Bạn có thể đặt `use_markdown_v2: true` để bật các tùy chọn định dạng nâng cao. Điều này cho phép bot sử dụng toàn bộ các tính năng của Telegram MarkdownV2, bao gồm các kiểu lồng nhau, spoiler và các khối chiều rộng cố định tùy chỉnh.
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.zh.md
+++ b/docs/channels/telegram/README.zh.md
@ -13,18 +13,20 @@ Telegram Channel 通过 Telegram 机器人 API 使用长轮询实现基于机器
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | 字段             | 类型   | 必填 | 描述                                                      |
-| ---------- | ------ | ---- | --------------------------------------------------------- |
+| ---------------- | ------ | ---- | --------------------------------------------------------- |
 | enabled          | bool   | 是   | 是否启用 Telegram 频道                                    |
 | token            | string | 是   | Telegram 机器人 API Token                                 |
 | allow_from       | array  | 否   | 用户ID白名单，空表示允许所有用户                          |
 | proxy            | string | 否   | 连接 Telegram API 的代理 URL (例如 http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | 否   | 启用 Telegram MarkdownV2 格式化                           |
 ## 设置流程
@ -50,6 +52,23 @@ Telegram 会在启动时自动注册 PicoClaw 的顶级 Bot 命令，包括 `/st
 ```text
 /list skills
 /use git explain how to squash the last 3 commits
-/use italiapersonalfinance
+/use git
-dammi le ultime news
+explain how to squash the last 3 commits
 ```
 ## 高级格式化
 您可以设置 `use_markdown_v2: true` 来启用增强的格式化选项。这允许机器人使用 Telegram MarkdownV2 的全部功能，包括嵌套样式、剧透和自定义等宽代码块。
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/configuration.md
+++ b/docs/configuration.md
@ -563,6 +563,7 @@ For complete documentation, see [`security_configuration.md`](security_configura
 | **通义千问 (Qwen)**     | `qwen/`           | `https://dashscope.aliyuncs.com/compatible-mode/v1` | OpenAI    | [Get Key](https://dashscope.console.aliyun.com)                  |
 | **NVIDIA**              | `nvidia/`         | `https://integrate.api.nvidia.com/v1`               | OpenAI    | [Get Key](https://build.nvidia.com)                              |
 | **Ollama**              | `ollama/`         | `http://localhost:11434/v1`                         | OpenAI    | Local (no key needed)                                            |
 | **LM Studio**           | `lmstudio/`       | `http://localhost:1234/v1`                          | OpenAI    | Optional (local default: no key)                                 |
 | **OpenRouter**          | `openrouter/`     | `https://openrouter.ai/api/v1`                      | OpenAI    | [Get Key](https://openrouter.ai/keys)                            |
 | **LiteLLM Proxy**       | `litellm/`        | `http://localhost:4000/v1`                          | OpenAI    | Your LiteLLM proxy key                                           |
 | **VLLM**                | `vllm/`           | `http://localhost:8000/v1`                          | OpenAI    | Local                                                            |
@ -710,6 +711,21 @@ For direct Anthropic API access or custom endpoints that only support Anthropic'
 </details>
 <details>
 <summary><b>LM Studio (local)</b></summary>
 ```json
 {
  "model_name": "lmstudio-local",
  "model": "lmstudio/openai/gpt-oss-20b"
 }
 ```
 `api_base` defaults to `http://localhost:1234/v1`. API key is optional unless your LM Studio server enables authentication.<br/>
 PicoClaw sends OpenAI-compatible requests to LM Studio, and strips the `lmstudio/` prefix before sending requests, so `lmstudio/openai/gpt-oss-20b` sends `openai/gpt-oss-20b` to the LM Studio server.
 </details>
 <details>
 <summary><b>Custom Proxy / LiteLLM</b></summary>
--- a/docs/providers.md
+++ b/docs/providers.md
@ -56,6 +56,7 @@ This design also enables **multi-agent support** with flexible provider selectio
 | **通义千问 (Qwen)** | `qwen/`           | `https://dashscope.aliyuncs.com/compatible-mode/v1` | OpenAI    | [Get Key](https://dashscope.console.aliyun.com)                  |
 | **NVIDIA**          | `nvidia/`         | `https://integrate.api.nvidia.com/v1`               | OpenAI    | [Get Key](https://build.nvidia.com)                              |
 | **Ollama**          | `ollama/`         | `http://localhost:11434/v1`                         | OpenAI    | Local (no key needed)                                            |
 | **LM Studio**       | `lmstudio/`       | `http://localhost:1234/v1`                          | OpenAI    | Optional (local default: no key)                                 |
 | **OpenRouter**      | `openrouter/`     | `https://openrouter.ai/api/v1`                      | OpenAI    | [Get Key](https://openrouter.ai/keys)                            |
 | **LiteLLM Proxy**   | `litellm/`        | `http://localhost:4000/v1`                          | OpenAI    | Your LiteLLM proxy key                                            |
 | **VLLM**            | `vllm/`           | `http://localhost:8000/v1`                          | OpenAI    | Local                                                            |
@ -226,6 +227,18 @@ For direct Anthropic API access or custom endpoints that only support Anthropic'
 }
 ```
 **LM Studio (local)**
 ```json
 {
  "model_name": "lmstudio-local",
  "model": "lmstudio/openai/gpt-oss-20b"
 }
 ```
 `api_base` defaults to `http://localhost:1234/v1`. API key is optional unless your LM Studio server enables authentication.<br/>
 PicoClaw sends OpenAI-compatible requests to LM Studio, and strips the `lmstudio/` prefix before sending requests, so `lmstudio/openai/gpt-oss-20b` sends `openai/gpt-oss-20b` to the LM Studio server.
 **Custom Proxy/API**
 ```json
--- a/docs/zh/configuration.md
+++ b/docs/zh/configuration.md
@ -365,6 +365,7 @@ Agent 读取 HEARTBEAT.md
 | **通义千问 (Qwen)**     | `qwen/`           | `https://dashscope.aliyuncs.com/compatible-mode/v1` | OpenAI    | [获取](https://dashscope.console.aliyun.com)                     |
 | **NVIDIA**              | `nvidia/`         | `https://integrate.api.nvidia.com/v1`               | OpenAI    | [获取](https://build.nvidia.com)                                 |
 | **Ollama**              | `ollama/`         | `http://localhost:11434/v1`                         | OpenAI    | 本地（无需 Key）                                                 |
 | **LM Studio**           | `lmstudio/`       | `http://localhost:1234/v1`                          | OpenAI    | 可选（本地默认无需密钥）                                         |
 | **OpenRouter**          | `openrouter/`     | `https://openrouter.ai/api/v1`                      | OpenAI    | [获取](https://openrouter.ai/keys)                               |
 | **LiteLLM Proxy**       | `litellm/`        | `http://localhost:4000/v1`                          | OpenAI    | 你的 LiteLLM 代理 Key                                            |
 | **VLLM**                | `vllm/`           | `http://localhost:8000/v1`                          | OpenAI    | 本地                                                             |
@ -506,6 +507,21 @@ Agent 读取 HEARTBEAT.md
 </details>
 <details>
 <summary><b>LM Studio（本地）</b></summary>
 ```json
 {
  "model_name": "lmstudio-local",
  "model": "lmstudio/openai/gpt-oss-20b"
 }
 ```
 `api_base` 默认是 `http://localhost:1234/v1`。除非你在 LM Studio 侧启用了认证，否则不需要配置 API Key。
 PicoClaw 向 LM Studio 的 OpenAI 兼容终结点发送请求，且将移除首个 `lmstudio/` 前缀，因此 `lmstudio/openai/gpt-oss-20b` 会发送 `openai/gpt-oss-20b`。
 </details>
 <details>
 <summary><b>自定义代理 / LiteLLM</b></summary>
--- a/docs/zh/providers.md
+++ b/docs/zh/providers.md
@ -53,6 +53,7 @@
 | **通义千问 (Qwen)** | `qwen/`           | `https://dashscope.aliyuncs.com/compatible-mode/v1` | OpenAI    | [获取密钥](https://dashscope.console.aliyun.com)                  |
 | **NVIDIA**          | `nvidia/`         | `https://integrate.api.nvidia.com/v1`               | OpenAI    | [获取密钥](https://build.nvidia.com)                              |
 | **Ollama**          | `ollama/`         | `http://localhost:11434/v1`                         | OpenAI    | 本地（无需密钥）                                                  |
 | **LM Studio**       | `lmstudio/`       | `http://localhost:1234/v1`                          | OpenAI    | 可选（本地默认无需密钥）                                          |
 | **OpenRouter**      | `openrouter/`     | `https://openrouter.ai/api/v1`                      | OpenAI    | [获取密钥](https://openrouter.ai/keys)                            |
 | **LiteLLM Proxy**   | `litellm/`        | `http://localhost:4000/v1`                          | OpenAI    | 你的 LiteLLM 代理密钥                                             |
 | **VLLM**            | `vllm/`           | `http://localhost:8000/v1`                          | OpenAI    | 本地                                                              |
@ -211,6 +212,18 @@
 }
 ```
 **LM Studio（本地）**
 ```json
 {
  "model_name": "lmstudio-local",
  "model": "lmstudio/openai/gpt-oss-20b"
 }
 ```
 `api_base` 默认是 `http://localhost:1234/v1`。除非你在 LM Studio 侧启用了认证，否则不需要配置 API Key。
 PicoClaw 向 LM Studio 的 OpenAI 兼容终结点发送请求，且将移除首个 `lmstudio/` 前缀，因此 `lmstudio/openai/gpt-oss-20b` 会发送 `openai/gpt-oss-20b`。
 **自定义代理/API**
 ```json
--- a/go.mod
+++ b/go.mod
@ -27,6 +27,8 @@ require (
 	github.com/mymmrac/telego v1.7.0
 	github.com/open-dingtalk/dingtalk-stream-sdk-go v0.9.1
 	github.com/openai/openai-go/v3 v3.22.0
 	github.com/pion/rtp v1.8.7
 	github.com/pion/webrtc/v3 v3.3.6
 	github.com/rivo/tview v0.42.0
 	github.com/rs/zerolog v1.34.0
 	github.com/slack-go/slack v0.17.3
@ -61,6 +63,7 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/sts v1.41.9 // indirect
 	github.com/aws/smithy-go v1.24.2 // indirect
 	github.com/beeper/argo-go v1.1.2 // indirect
 	github.com/cloudflare/circl v1.6.3 // indirect
 	github.com/coder/websocket v1.8.14 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
@ -76,6 +79,7 @@ require (
 	github.com/mattn/go-sqlite3 v1.14.34 // indirect
 	github.com/ncruces/go-strftime v1.0.0 // indirect
 	github.com/petermattis/goid v0.0.0-20260226131333-17d1149c6ac6 // indirect
 	github.com/pion/randutil v0.1.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
@ -123,3 +127,5 @@ require (
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.42.0
 )
 replace github.com/bwmarrin/discordgo => github.com/yeongaori/discordgo-fork v0.0.0-20260319072544-e8e546f5d532
--- a/go.sum
+++ b/go.sum
@ -53,8 +53,6 @@ github.com/aws/smithy-go v1.24.2 h1:FzA3bu/nt/vDvmnkg+R8Xl46gmzEDam6mZ1hzmwXFng=
 github.com/aws/smithy-go v1.24.2/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
 github.com/beeper/argo-go v1.1.2 h1:UQI2G8F+NLfGTOmTUI0254pGKx/HUU/etbUGTJv91Fs=
 github.com/beeper/argo-go v1.1.2/go.mod h1:M+LJAnyowKVQ6Rdj6XYGEn+qcVFkb3R/MUpqkGR0hM4=
 github.com/bwmarrin/discordgo v0.29.0 h1:FmWeXFaKUwrcL3Cx65c20bTRW+vOb6k8AnaP+EgjDno=
 github.com/bwmarrin/discordgo v0.29.0/go.mod h1:NJZpH+1AfhIcyQsPeuBKsUtYrRnjkyu0kIVMCHkZtRY=
 github.com/bytedance/gopkg v0.1.3 h1:TPBSwH8RsouGCBcMBktLt1AymVo2TVsBVCY4b6TnZ/M=
 github.com/bytedance/gopkg v0.1.3/go.mod h1:576VvJ+eJgyCzdjS+c4+77QF3p7ubbtiKARP3TxducM=
 github.com/bytedance/sonic v1.15.0 h1:/PXeWFaR5ElNcVE84U0dOHjiMHQOwNIx3K4ymzh/uSE=
@ -65,6 +63,8 @@ github.com/caarlos0/env/v11 v11.4.0 h1:Kcb6t5kIIr4XkoQC9AF2j+8E1Jsrl3Wz/hhm1LtoG
 github.com/caarlos0/env/v11 v11.4.0/go.mod h1:qupehSf/Y0TUTsxKywqRt/vJjN5nz6vauiYEUUr8P4U=
 github.com/cespare/xxhash/v2 v2.1.2/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8=
 github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4=
 github.com/cloudwego/base64x v0.1.6 h1:t11wG9AECkCDk5fMSoxmufanudBtJ+/HemLstXDLI2M=
 github.com/cloudwego/base64x v0.1.6/go.mod h1:OFcloc187FXDaYHvrNIjxSe8ncn0OOM8gEHfghB2IPU=
 github.com/coder/websocket v1.8.14 h1:9L0p0iKiNOibykf283eHkKUHHrpG7f65OE3BhhO7v9g=
@ -204,6 +204,12 @@ github.com/openai/openai-go/v3 v3.22.0 h1:6MEoNoV8sbjOVmXdvhmuX3BjVbVdcExbVyGixi
 github.com/openai/openai-go/v3 v3.22.0/go.mod h1:cdufnVK14cWcT9qA1rRtrXx4FTRsgbDPW7Ia7SS5cZo=
 github.com/petermattis/goid v0.0.0-20260226131333-17d1149c6ac6 h1:rh2lKw/P/EqHa724vYH2+VVQ1YnW4u6EOXl0PMAovZE=
 github.com/petermattis/goid v0.0.0-20260226131333-17d1149c6ac6/go.mod h1:pxMtw7cyUw6B2bRH0ZBANSPg+AoSud1I1iyJHI69jH4=
 github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
 github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
 github.com/pion/rtp v1.8.7 h1:qslKkG8qxvQ7hqaxkmL7Pl0XcUm+/Er7nMnu6Vq+ZxM=
 github.com/pion/rtp v1.8.7/go.mod h1:pBGHaFt/yW7bf1jjWAoUjpSNoDnw98KTMg+jWWvziqU=
 github.com/pion/webrtc/v3 v3.3.6 h1:7XAh4RPtlY1Vul6/GmZrv7z+NnxKA6If0KStXBI2ZLE=
 github.com/pion/webrtc/v3 v3.3.6/go.mod h1:zyN7th4mZpV27eXybfR/cnUf3J2DRy8zw/mdjD9JTNM=
 github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
@ -273,6 +279,8 @@ github.com/vektah/gqlparser/v2 v2.5.27 h1:RHPD3JOplpk5mP5JGX8RKZkt2/Vwj/PZv0HxTd
 github.com/vektah/gqlparser/v2 v2.5.27/go.mod h1:D1/VCZtV3LPnQrcPBeR/q5jkSQIPti0uYCP/RI0gIeo=
 github.com/xyproto/randomstring v1.0.5 h1:YtlWPoRdgMu3NZtP45drfy1GKoojuR7hmRcnhZqKjWU=
 github.com/xyproto/randomstring v1.0.5/go.mod h1:rgmS5DeNXLivK7YprL0pY+lTuhNQW3iGxZ18UQApw/E=
 github.com/yeongaori/discordgo-fork v0.0.0-20260319072544-e8e546f5d532 h1:gxFHYeUDGziRb0zXYEqBFohC+NJbIW9L0tddaXMWr2o=
 github.com/yeongaori/discordgo-fork v0.0.0-20260319072544-e8e546f5d532/go.mod h1:A0FcMFJKJ9fRjgSuZ2o+pIQ6mPS81SVuiLN2vYTa7Ao=
 github.com/yosida95/uritemplate/v3 v3.0.2 h1:Ed3Oyj9yrmi9087+NczuL5BwkIc4wvTb5zIM+UJPGz4=
 github.com/yosida95/uritemplate/v3 v3.0.2/go.mod h1:ILOh0sOhIJR3+L/8afwt/kE++YT040gmv5BQTMR2HP4=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
@ -300,7 +308,6 @@ golang.org/x/arch v0.24.0/go.mod h1:dNHoOeKiyja7GTvF9NJS1l3Z2yntpQNzgrjh1cU103A=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.16.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
 golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
--- a/pkg/agent/context_budget.go
+++ b/pkg/agent/context_budget.go
@ -90,13 +90,28 @@ func findSafeBoundary(history []providers.Message, targetIndex int) int {
 // including Content, ReasoningContent, ToolCalls arguments, ToolCallID
 // metadata, and Media items. Uses a heuristic of 2.5 characters per token.
 func estimateMessageTokens(msg providers.Message) int {
-	chars := utf8.RuneCountInString(msg.Content)
+	contentChars := utf8.RuneCountInString(msg.Content)
-	// ReasoningContent (extended thinking / chain-of-thought) can be
+	// SystemParts are structured system blocks used for cache-aware adapters.
-	// substantial and is stored in session history via AddFullMessage.
+	// They carry the same content as Content, but in multiple blocks.
-	if msg.ReasoningContent != "" {
+	// We estimate them as an alternative representation, not additive.
-		chars += utf8.RuneCountInString(msg.ReasoningContent)
+	systemPartsChars := 0
 	if len(msg.SystemParts) > 0 {
 		for _, part := range msg.SystemParts {
 			systemPartsChars += utf8.RuneCountInString(part.Text)
 		}
 		// Per-part overhead for JSON structure (type, text, cache_control).
 		const perPartOverhead = 20
 		systemPartsChars += len(msg.SystemParts) * perPartOverhead
 	}
 	// Use the larger of the two representations to stay conservative.
 	chars := contentChars
 	if systemPartsChars > chars {
 		chars = systemPartsChars
 	}
 	chars += utf8.RuneCountInString(msg.ReasoningContent)
 	for _, tc := range msg.ToolCalls {
 		chars += len(tc.ID) + len(tc.Type)
--- a/pkg/agent/context_budget_test.go
+++ b/pkg/agent/context_budget_test.go
@ -529,6 +529,26 @@ func TestEstimateMessageTokens_MediaItems(t *testing.T) {
 	}
 }
 func TestEstimateMessageTokens_SystemParts(t *testing.T) {
 	plain := providers.Message{Role: "system", Content: "instructions"}
 	withParts := providers.Message{
 		Role:    "system",
 		Content: "instructions",
 		SystemParts: []providers.ContentBlock{
 			{Type: "text", Text: "some more system context"},
 			{Type: "text", Text: "even more cached blocks"},
 		},
 	}
 	plainTokens := estimateMessageTokens(plain)
 	partsTokens := estimateMessageTokens(withParts)
 	if partsTokens <= plainTokens {
 		t.Errorf("system message with SystemParts (%d) should exceed plain message (%d)",
 			partsTokens, plainTokens)
 	}
 }
 // --- estimateToolDefsTokens tests ---
 func TestEstimateToolDefsTokens(t *testing.T) {
--- a/pkg/agent/loop.go
+++ b/pkg/agent/loop.go
@ -18,6 +18,8 @@ import (
 	"sync/atomic"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/audio/asr"
 	"github.com/sipeed/picoclaw/pkg/audio/tts"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/channels"
 	"github.com/sipeed/picoclaw/pkg/commands"
@ -31,7 +33,6 @@ import (
 	"github.com/sipeed/picoclaw/pkg/state"
 	"github.com/sipeed/picoclaw/pkg/tools"
 	"github.com/sipeed/picoclaw/pkg/utils"
 	"github.com/sipeed/picoclaw/pkg/voice"
 )
 type AgentLoop struct {
@ -51,7 +52,7 @@ type AgentLoop struct {
 	fallback       *providers.FallbackChain
 	channelManager *channels.Manager
 	mediaStore     media.MediaStore
-	transcriber    voice.Transcriber
+	transcriber    asr.Transcriber
 	cmdRegistry    *commands.Registry
 	mcp            mcpRuntime
 	hookRuntime    hookRuntime
@ -159,6 +160,13 @@ func registerSharedTools(
 	provider providers.LLMProvider,
 ) {
 	allowReadPaths := buildAllowReadPatterns(cfg)
 	var ttsProvider tts.TTSProvider
 	if cfg.Tools.IsToolEnabled("send_tts") {
 		ttsProvider = tts.DetectTTS(cfg)
 		if ttsProvider == nil {
 			logger.WarnCF("voice-tts", "send_tts enabled but no TTS provider configured", nil)
 		}
 	}
 	for _, agentID := range registry.ListAgentIDs() {
 		agent, ok := registry.GetAgent(agentID)
@ -269,6 +277,10 @@ func registerSharedTools(
 			agent.Tools.Register(sendFileTool)
 		}
 		if ttsProvider != nil {
 			agent.Tools.Register(tools.NewSendTTSTool(ttsProvider, nil))
 		}
 		// Skill discovery and installation tools
 		skills_enabled := cfg.Tools.IsToolEnabled("skills")
 		find_skills_enable := cfg.Tools.IsToolEnabled("find_skills")
@ -1059,10 +1071,15 @@ func (al *AgentLoop) SetMediaStore(s media.MediaStore) {
 			agent.Tools.SetMediaStore(s)
 		}
 	}
 	registry.ForEachTool("send_tts", func(t tools.Tool) {
 		if st, ok := t.(*tools.SendTTSTool); ok {
 			st.SetMediaStore(s)
 		}
 	})
 }
 // SetTranscriber injects a voice transcriber for agent-level audio transcription.
-func (al *AgentLoop) SetTranscriber(t voice.Transcriber) {
+func (al *AgentLoop) SetTranscriber(t asr.Transcriber) {
 	al.transcriber = t
 }
@ -1083,19 +1100,23 @@ func (al *AgentLoop) transcribeAudioInMessage(ctx context.Context, msg bus.Inbou
 	// Transcribe each audio media ref in order.
 	var transcriptions []string
 	var keptMedia []string
 	for _, ref := range msg.Media {
 		path, meta, err := al.mediaStore.ResolveWithMeta(ref)
 		if err != nil {
 			logger.WarnCF("voice", "Failed to resolve media ref", map[string]any{"ref": ref, "error": err})
 			keptMedia = append(keptMedia, ref)
 			continue
 		}
 		if !utils.IsAudioFile(meta.Filename, meta.ContentType) {
 			keptMedia = append(keptMedia, ref)
 			continue
 		}
 		result, err := al.transcriber.Transcribe(ctx, path)
 		if err != nil {
 			logger.WarnCF("voice", "Transcription failed", map[string]any{"ref": ref, "error": err})
 			transcriptions = append(transcriptions, "")
 			keptMedia = append(keptMedia, ref)
 			continue
 		}
 		transcriptions = append(transcriptions, result.Text)
@ -1115,15 +1136,21 @@ func (al *AgentLoop) transcribeAudioInMessage(ctx context.Context, msg bus.Inbou
 		}
 		text := transcriptions[idx]
 		idx++
 		if text == "" {
 			return match
 		}
 		return "[voice: " + text + "]"
 	})
 	// Append any remaining transcriptions not matched by an annotation.
 	for ; idx < len(transcriptions); idx++ {
 		if transcriptions[idx] != "" {
 			newContent += "\n[voice: " + transcriptions[idx] + "]"
 		}
 	}
 	msg.Content = newContent
 	msg.Media = keptMedia
 	return msg, true
 }
@ -2464,6 +2491,28 @@ turnLoop:
 			if toolResult == nil {
 				toolResult = tools.ErrorResult("hook returned nil tool result")
 			}
 			// Send ForUser if not silent and has content.
 			// For ResponseHandled tools, send regardless of SendResponse setting,
 			// since they've already handled the response (e.g., send_tts, send_file).
 			shouldSendForUser := !toolResult.Silent && toolResult.ForUser != "" &&
 				(ts.opts.SendResponse || toolResult.ResponseHandled)
 			if shouldSendForUser {
 				al.bus.PublishOutbound(ctx, bus.OutboundMessage{
 					Channel: ts.channel,
 					ChatID:  ts.chatID,
 					Content: toolResult.ForUser,
 					Metadata: map[string]string{
 						"is_tool_call": "true",
 					},
 				})
 				logger.DebugCF("agent", "Sent tool result to user",
 					map[string]any{
 						"tool":        toolName,
 						"content_len": len(toolResult.ForUser),
 					})
 			}
 			if len(toolResult.Media) > 0 && toolResult.ResponseHandled {
 				parts := make([]bus.MediaPart, 0, len(toolResult.Media))
 				for _, ref := range toolResult.Media {
@ -2509,19 +2558,6 @@ turnLoop:
 				allResponsesHandled = false
 			}
 			if !toolResult.Silent && toolResult.ForUser != "" && ts.opts.SendResponse {
 				al.bus.PublishOutbound(ctx, bus.OutboundMessage{
 					Channel: ts.channel,
 					ChatID:  ts.chatID,
 					Content: toolResult.ForUser,
 				})
 				logger.DebugCF("agent", "Sent tool result to user",
 					map[string]any{
 						"tool":        toolName,
 						"content_len": len(toolResult.ForUser),
 					})
 			}
 			contentForLLM := toolResult.ContentForLLM()
 			// Filter sensitive data (API keys, tokens, secrets) before sending to LLM
--- a/pkg/agent/loop_test.go
+++ b/pkg/agent/loop_test.go
@ -28,7 +28,9 @@ type fakeChannel struct{ id string }
 func (f *fakeChannel) Name() string                    { return "fake" }
 func (f *fakeChannel) Start(ctx context.Context) error { return nil }
 func (f *fakeChannel) Stop(ctx context.Context) error  { return nil }
-func (f *fakeChannel) Send(ctx context.Context, msg bus.OutboundMessage) error { return nil }
+func (f *fakeChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	return nil, nil
 }
 func (f *fakeChannel) IsRunning() bool                            { return true }
 func (f *fakeChannel) IsAllowed(string) bool                      { return true }
 func (f *fakeChannel) IsAllowedSender(sender bus.SenderInfo) bool { return true }
@ -39,9 +41,9 @@ type fakeMediaChannel struct {
 	sentMedia []bus.OutboundMediaMessage
 }
-func (f *fakeMediaChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (f *fakeMediaChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	f.sentMedia = append(f.sentMedia, msg)
-	return nil
+	return nil, nil
 }
 func newStartedTestChannelManager(
--- a/pkg/audio/asr/README.md
+++ b/pkg/audio/asr/README.md
@ -0,0 +1,166 @@
 # ASR (Automatic Speech Recognition)
 This package handles speech-to-text for PicoClaw voice input.
 If you are new to ASR setup, the simplest mental model is:
 1. Add one or more ASR-capable entries to `model_list`.
 2. Point `voice.model_name` at the one you want to use.
 3. Put the API key in `.security.yml`.
 ## Quick Recommendation
 For most new users, start with one of these:
 | Provider | Example model | Why start here |
 | --- | --- | --- |
 | [Groq](https://console.groq.com/keys) | `groq/whisper-large-v3-turbo` | Fast Whisper-style transcription and a straightforward OpenAI-compatible API. Groq currently advertises a free tier plan for 2000 reqs/day. |
 | [ElevenLabs](https://elevenlabs.io/pricing) | `elevenlabs/scribe_v1` | Easy setup and strong speech-to-text quality. ElevenLabs currently advertises a free plan that includes speech-to-text usage. |
 Pricing and free-plan limits can change, so check the linked pricing pages before depending on them in production.
 ## How ASR Configuration Works
 PicoClaw does not keep ASR API keys inside the `voice` section.
 Instead:
 - `voice.model_name` chooses a named entry from `model_list`.
 - The matching `model_list` entry describes the actual provider and model.
 - `.security.yml` stores the API key for that named model entry.
 This is the recommended pattern because it is explicit, reusable, and consistent with the rest of PicoClaw's model configuration.
 ## Recommended Setup
 ### Option A: Groq Whisper
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "groq-asr",
    "echo_transcription": true
  },
  "model_list": [
    {
      "model_name": "groq-asr",
      "model": "groq/whisper-large-v3-turbo"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  groq-asr:
    api_keys:
      - "gsk_your_groq_key"
 ```
 Notes:
 - You can omit `api_base` and PicoClaw will use Groq's default API base automatically.
 - If you set `api_base` manually for Groq Whisper, both of these forms work:
  - `https://api.groq.com/openai/v1`
  - `https://api.groq.com/openai/v1/audio/transcriptions`
 - Any OpenAI-compatible Whisper model name containing `whisper` can use the Whisper transcription path, not only `whisper-large-v3-turbo`.
 ### Option B: ElevenLabs
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "elevenlabs-asr",
    "echo_transcription": true
  },
  "model_list": [
    {
      "model_name": "elevenlabs-asr",
      "model": "elevenlabs/scribe_v1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  elevenlabs-asr:
    api_keys:
      - "sk-elevenlabs-your-key"
 ```
 ### Option C: OpenAI Whisper
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "openai-asr"
  },
  "model_list": [
    {
      "model_name": "openai-asr",
      "model": "openai/whisper-1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  openai-asr:
    api_keys:
      - "sk-openai-your-key"
 ```
 ## Other ASR-Capable Model Types
 PicoClaw currently supports three main ASR routes:
 | Route | Example models | Behavior |
 | --- | --- | --- |
 | ElevenLabs ASR | `elevenlabs/scribe_v1` | Uses the ElevenLabs transcription API. |
 | Whisper endpoint models | `openai/whisper-1`, `groq/whisper-large-v3` | Uses an OpenAI-compatible `/audio/transcriptions` endpoint. |
 | Audio-capable chat models **(Under construction)** | `openai/gpt-4o-audio-preview`, `gemini/gemini-2.5-flash` | Sends audio to a multimodal chat model and asks it to transcribe. |
 If you are unsure which one to pick, choose Groq Whisper or ElevenLabs first.
 ## How PicoClaw Chooses a Transcriber
 `DetectTranscriber` resolves ASR in this order:
 1. **Preferred path**: resolve `voice.model_name` against `model_list`.
 2. If that resolved model is:
   - `elevenlabs/...`, PicoClaw uses the ElevenLabs transcriber.
   - an OpenAI-compatible Whisper model, PicoClaw uses the Whisper transcriber.
   - an audio-capable chat model, PicoClaw uses `AudioModelTranscriber`.
 3. **Fallback path**: if `voice.model_name` is not set, PicoClaw performs a compatibility scan through `model_list` for legacy auto-detected ASR entries.
 Fallback scanning exists for backward compatibility. New configurations should set `voice.model_name` explicitly.
 ## Common Mistakes
 - Defining an ASR model in `model_list` but forgetting to set `voice.model_name`.
 - Putting the API key in `voice` instead of `.security.yml`.
 - Using a non-ASR model and expecting Whisper-style transcription behavior.
 - Setting a custom `api_base` that points to the wrong provider endpoint.
 ## Minimal Checklist
 Before testing voice input, make sure:
 - `voice.model_name` matches a `model_list[].model_name`.
 - The matching `.security.yml` entry contains a valid API key.
 - The selected model is actually ASR-capable.
 - Voice input is enabled for the channel you are using.
--- a/pkg/audio/asr/README_zh.md
+++ b/pkg/audio/asr/README_zh.md
@ -0,0 +1,166 @@
 # ASR（自动语音识别）
 这个目录负责 PicoClaw 的语音转文字能力。
 如果你是第一次配置 ASR，可以参考如下步骤：
 1. 在 `model_list` 里添加一个或多个支持 ASR 的模型条目。
 2. 用 `voice.model_name` 指向你想使用的那个条目。
 3. 在 `.security.yml` 里配置对应的 API Key。
 ## 快速推荐
 对于大多数新用户，建议先从下面两种开始：
 | 提供商 | 示例模型 | 推荐理由 |
 | --- | --- | --- |
 | [Groq](https://console.groq.com/keys) | `groq/whisper-large-v3-turbo` | Whisper 风格转录速度快，并且提供 OpenAI 兼容接口，配置比较直接。Groq 目前官方提供2000请求每日的免费套餐。 |
 | [ElevenLabs](https://elevenlabs.io/pricing) | `elevenlabs/scribe_v1` | 上手简单，语音转文字质量也不错。ElevenLabs 目前官方免费套餐包含 STT 用量。 |
 价格和免费额度可能会变化，正式使用前请以官网定价页为准。
 ## ASR 配置是如何工作的
 PicoClaw 不会把 ASR 的 API Key 放在 `voice` 配置里。
 推荐的方式是：
 - `voice.model_name` 用来选择 `model_list` 里的某个命名模型。
 -  `model_list` 条目描述真实的提供商和模型。
 - `.security.yml` 负责保存该模型条目的 API Key。
 这种方式更明确、更安全，也和 PicoClaw 其他模型配置方式保持一致。
 ## 推荐配置方式
 ### 方案 A：Groq Whisper
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "groq-asr",
    "echo_transcription": true
  },
  "model_list": [
    {
      "model_name": "groq-asr",
      "model": "groq/whisper-large-v3-turbo"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  groq-asr:
    api_keys:
      - "gsk_your_groq_key"
 ```
 说明：
 - 你可以不写 `api_base`，PicoClaw 会自动使用 Groq 默认接口地址。
 - 如果你手动设置 Groq Whisper 的 `api_base`，下面两种写法都可以：
  - `https://api.groq.com/openai/v1`
  - `https://api.groq.com/openai/v1/audio/transcriptions`
 - 只要是 OpenAI 兼容、并且模型名里包含 `whisper` 的模型，都可以走 Whisper 转录路径，不仅限于 `whisper-large-v3-turbo`。
 ### 方案 B：ElevenLabs
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "elevenlabs-asr",
    "echo_transcription": true
  },
  "model_list": [
    {
      "model_name": "elevenlabs-asr",
      "model": "elevenlabs/scribe_v1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  elevenlabs-asr:
    api_keys:
      - "sk-elevenlabs-your-key"
 ```
 ### 方案 C：OpenAI Whisper
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "openai-asr"
  },
  "model_list": [
    {
      "model_name": "openai-asr",
      "model": "openai/whisper-1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  openai-asr:
    api_keys:
      - "sk-openai-your-key"
 ```
 ## 其他支持 ASR 的模型类型
 PicoClaw 目前主要支持三种 ASR 路径：
 | 路径 | 示例模型 | 行为说明 |
 | --- | --- | --- |
 | ElevenLabs ASR | `elevenlabs/scribe_v1` | 使用 ElevenLabs 的语音转录接口。 |
 | Whisper 接口模型 | `openai/whisper-1`、`groq/whisper-large-v3` | 使用 OpenAI 兼容的 `/audio/transcriptions` 接口。 |
 | 支持音频的聊天模型 **（重构中）** | `openai/gpt-4o-audio-preview`、`gemini/gemini-2.5-flash` | 把音频发给多模态聊天模型，并要求它返回转录结果。 |
 如果你不确定该选哪种，建议优先使用 Groq Whisper 或 ElevenLabs。
 ## PicoClaw 如何选择转录器
 `DetectTranscriber` 会按下面顺序选择 ASR：
 1. **首选路径**：根据 `voice.model_name` 在 `model_list` 中找到对应模型。
 2. 如果找到的模型属于以下类型：
   - `elevenlabs/...`，则使用 ElevenLabs transcriber。
   - OpenAI 兼容的 Whisper 模型，则使用 Whisper transcriber。
   - 支持音频输入的聊天模型，则使用 `AudioModelTranscriber`。
 3. **回退路径**：如果没有设置 `voice.model_name`，PicoClaw 会为了兼容旧配置，扫描 `model_list` 中可自动识别的 ASR 条目。
 回退扫描只是为了兼容旧行为。新配置建议始终显式设置 `voice.model_name`。
 ## 常见错误
 - 在 `model_list` 里定义了 ASR 模型，但忘了设置 `voice.model_name`。
 - 把 API Key 写进了 `voice`，而不是 `.security.yml`。
 - 选择了不支持 ASR 的模型，却期望得到 Whisper 风格的转录结果。
 - 自定义了错误的 `api_base`，导致请求打到错误的接口地址。
 ## 最小检查清单
 在测试语音输入前，请确认：
 - `voice.model_name` 能正确匹配某个 `model_list[].model_name`。
 - `.security.yml` 中对应条目已经配置了有效 API Key。
 - 你选择的模型确实支持 ASR。
 - 你当前使用的频道已经启用了语音输入能力。
--- a/pkg/audio/asr/agent.go
+++ b/pkg/audio/asr/agent.go
@ -0,0 +1,252 @@
 package asr
 import (
 	"context"
 	"fmt"
 	"os"
 	"path/filepath"
 	"strings"
 	"sync"
 	"time"
 	"github.com/pion/rtp"
 	"github.com/pion/webrtc/v3/pkg/media/oggwriter"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/logger"
 )
 type speechAccumulator struct {
 	writer      *oggwriter.OggWriter
 	file        string
 	lastAudioAt time.Time
 	mu          sync.Mutex
 	closed      bool
 	chatID      string
 	speakerID   string
 	sessionID   string
 	channel     string
 }
 func (a *speechAccumulator) Push(chunk bus.AudioChunk) {
 	a.mu.Lock()
 	defer a.mu.Unlock()
 	if a.closed {
 		return
 	}
 	a.lastAudioAt = time.Now()
 	pkt := &rtp.Packet{
 		Header: rtp.Header{
 			SequenceNumber: uint16(chunk.Sequence),
 			Timestamp:      chunk.Timestamp,
 			SSRC:           1, // Stable arbitrary dummy
 		},
 		Payload: chunk.Data,
 	}
 	if err := a.writer.WriteRTP(pkt); err != nil {
 		logger.ErrorCF("voice-agent", "Failed to write RTP", map[string]any{"error": err})
 	}
 }
 func (a *speechAccumulator) Close() {
 	a.mu.Lock()
 	defer a.mu.Unlock()
 	if !a.closed {
 		a.writer.Close()
 		a.closed = true
 	}
 }
 type Agent struct {
 	bus         *bus.MessageBus
 	transcriber Transcriber
 	mu       sync.Mutex
 	sessions map[string]*speechAccumulator // keyed by sessionID_speakerID
 }
 func NewAgent(mb *bus.MessageBus, t Transcriber) *Agent {
 	return &Agent{
 		bus:         mb,
 		transcriber: t,
 		sessions:    make(map[string]*speechAccumulator),
 	}
 }
 func (a *Agent) Start(ctx context.Context) {
 	logger.InfoCF("voice-agent", "Started Voice Agent orchestrator", nil)
 	go a.listenChunks(ctx)
 	go a.vadTick(ctx)
 	// Cleanup sessions on shutdown
 	go func() {
 		<-ctx.Done()
 		a.mu.Lock()
 		for key, acc := range a.sessions {
 			acc.Close()
 			os.Remove(acc.file)
 			delete(a.sessions, key)
 		}
 		a.mu.Unlock()
 		logger.InfoCF("voice-agent", "Cleaned up voice sessions on shutdown", nil)
 	}()
 }
 func (a *Agent) listenChunks(ctx context.Context) {
 	chunks := a.bus.AudioChunksChan()
 	for {
 		select {
 		case <-ctx.Done():
 			return
 		case chunk, ok := <-chunks:
 			if !ok {
 				return
 			}
 			a.handleChunk(chunk)
 		}
 	}
 }
 func (a *Agent) handleChunk(chunk bus.AudioChunk) {
 	// Only accept Opus-encoded audio
 	if chunk.Format != "opus" {
 		logger.DebugCF("voice-agent", "Ignoring unsupported audio format", map[string]any{"format": chunk.Format})
 		return
 	}
 	key := fmt.Sprintf("%s_%s", chunk.SessionID, chunk.SpeakerID)
 	a.mu.Lock()
 	acc, exists := a.sessions[key]
 	if !exists {
 		filename := filepath.Join(os.TempDir(), fmt.Sprintf("voice_%s_%d.ogg", key, time.Now().UnixNano()))
 		writer, err := oggwriter.New(filename, uint32(chunk.SampleRate), uint16(chunk.Channels))
 		if err != nil {
 			a.mu.Unlock()
 			logger.ErrorCF("voice-agent", "Failed to create OggWriter", map[string]any{"error": err})
 			return
 		}
 		acc = &speechAccumulator{
 			writer:      writer,
 			file:        filename,
 			lastAudioAt: time.Now(),
 			chatID:      chunk.ChatID,
 			speakerID:   chunk.SpeakerID,
 			sessionID:   chunk.SessionID,
 			channel:     chunk.Channel,
 		}
 		a.sessions[key] = acc
 		logger.DebugCF("voice-agent", "Started accumulating voice", map[string]any{"key": key, "file": filename})
 	}
 	a.mu.Unlock()
 	acc.Push(chunk)
 }
 func (a *Agent) vadTick(ctx context.Context) {
 	ticker := time.NewTicker(500 * time.Millisecond)
 	defer ticker.Stop()
 	for {
 		select {
 		case <-ctx.Done():
 			return
 		case <-ticker.C:
 			a.checkSilence(ctx)
 		}
 	}
 }
 func (a *Agent) checkSilence(ctx context.Context) {
 	a.mu.Lock()
 	now := time.Now()
 	var finished []*speechAccumulator
 	for key, acc := range a.sessions {
 		acc.mu.Lock()
 		last := acc.lastAudioAt
 		acc.mu.Unlock()
 		if now.Sub(last) > 1500*time.Millisecond {
 			acc.Close()
 			delete(a.sessions, key)
 			finished = append(finished, acc)
 		}
 	}
 	a.mu.Unlock()
 	for _, acc := range finished {
 		go a.processUtterance(ctx, acc)
 	}
 }
 func (a *Agent) processUtterance(ctx context.Context, acc *speechAccumulator) {
 	defer os.Remove(acc.file)
 	logger.InfoCF("voice-agent", "User finished speaking, transcribing...", map[string]any{"file": acc.file})
 	if a.transcriber == nil {
 		logger.ErrorCF("voice-agent", "No STT configured!", nil)
 		return
 	}
 	res, err := a.transcriber.Transcribe(ctx, acc.file)
 	if err != nil {
 		logger.ErrorCF("voice-agent", "Transcription failed", map[string]any{"error": err})
 		return
 	}
 	if res.Text == "" {
 		logger.DebugCF("voice-agent", "Ignored empty transcription", map[string]any{"file": acc.file})
 		return
 	}
 	logger.InfoCF("voice-agent", "Transcription result", map[string]any{"text": res.Text, "duration": res.Duration})
 	channelType := acc.channel
 	if channelType == "" {
 		channelType = "discord" // fallback for legacy chunks
 	}
 	text := strings.ToLower(strings.TrimSpace(res.Text))
 	if strings.Contains(text, "leave the voice channel") || strings.Contains(text, "leave voice") ||
 		strings.Contains(text, "disconnect voice") || strings.Contains(text, "leave the channel") ||
 		strings.Contains(text, "leave channel") {
 		logger.InfoCF("voice-agent", "Voice command triggered: leave", nil)
 		if err := a.bus.PublishVoiceControl(ctx, bus.VoiceControl{
 			SessionID: acc.sessionID,
 			Type:      "command",
 			Action:    "leave",
 		}); err != nil {
 			logger.ErrorCF("voice-agent", "Failed to publish leave control", map[string]any{"error": err})
 		}
 		if err := a.bus.PublishOutbound(ctx, bus.OutboundMessage{
 			Channel: channelType,
 			ChatID:  acc.chatID,
 			Content: "Goodbye! Leaving the voice channel.",
 		}); err != nil {
 			logger.ErrorCF("voice-agent", "Failed to publish goodbye message", map[string]any{"error": err})
 		}
 		return
 	}
 	oralPrompt := "\n\n[SYSTEM]: The user just spoke this to you over voice chat. Please reply in a highly concise, conversational, oral style suitable for text-to-speech. Do not use markdown, emojis, asterisks, or code blocks. Speak naturally."
 	if err := a.bus.PublishInbound(ctx, bus.InboundMessage{
 		Channel:  channelType,
 		SenderID: acc.speakerID,
 		ChatID:   acc.chatID,
 		Content:  res.Text + oralPrompt,
 		Peer:     bus.Peer{Kind: "channel", ID: acc.chatID},
 		Metadata: map[string]string{
 			"is_voice": "true",
 		},
 	}); err != nil {
 		logger.ErrorCF("voice-agent", "Failed to publish inbound message", map[string]any{"error": err})
 	}
 }
--- a/pkg/audio/asr/agent_test.go
+++ b/pkg/audio/asr/agent_test.go
@ -0,0 +1,196 @@
 package asr
 import (
 	"context"
 	"os"
 	"path/filepath"
 	"strings"
 	"testing"
 	"time"
 	"github.com/pion/webrtc/v3/pkg/media/oggwriter"
 	"github.com/sipeed/picoclaw/pkg/bus"
 )
 type fakeTranscriber struct {
 	text     string
 	err      error
 	lastPath string
 }
 func (f *fakeTranscriber) Name() string { return "fake" }
 func (f *fakeTranscriber) Transcribe(ctx context.Context, audioFilePath string) (*TranscriptionResponse, error) {
 	f.lastPath = audioFilePath
 	if f.err != nil {
 		return nil, f.err
 	}
 	return &TranscriptionResponse{Text: f.text}, nil
 }
 func waitForFileRemoval(t *testing.T, path string, timeout time.Duration) {
 	t.Helper()
 	deadline := time.Now().Add(timeout)
 	for time.Now().Before(deadline) {
 		if _, err := os.Stat(path); os.IsNotExist(err) {
 			return
 		}
 		time.Sleep(10 * time.Millisecond)
 	}
 	if _, err := os.Stat(path); err == nil {
 		t.Fatalf("expected file to be removed: %s", path)
 	}
 }
 func TestAgentHandleChunkCreatesSession(t *testing.T) {
 	t.Parallel()
 	mb := bus.NewMessageBus()
 	defer mb.Close()
 	agent := NewAgent(mb, &fakeTranscriber{})
 	chunk := bus.AudioChunk{
 		SessionID:  "sess",
 		SpeakerID:  "speaker",
 		ChatID:     "chat",
 		Channel:    "discord",
 		Sequence:   1,
 		Timestamp:  1,
 		SampleRate: 48000,
 		Channels:   2,
 		Format:     "opus",
 		Data:       []byte{0xF8, 0xFF, 0xFE},
 	}
 	agent.handleChunk(chunk)
 	key := "sess_speaker"
 	agent.mu.Lock()
 	acc, ok := agent.sessions[key]
 	agent.mu.Unlock()
 	if !ok {
 		t.Fatal("expected session to be created")
 	}
 	acc.Close()
 	_ = os.Remove(acc.file)
 }
 func TestAgentHandleChunkIgnoresUnsupportedFormat(t *testing.T) {
 	t.Parallel()
 	mb := bus.NewMessageBus()
 	defer mb.Close()
 	agent := NewAgent(mb, &fakeTranscriber{})
 	chunk := bus.AudioChunk{Format: "pcm"}
 	agent.handleChunk(chunk)
 	agent.mu.Lock()
 	count := len(agent.sessions)
 	agent.mu.Unlock()
 	if count != 0 {
 		t.Fatalf("expected no sessions, got %d", count)
 	}
 }
 func TestAgentProcessUtteranceLeaveCommand(t *testing.T) {
 	t.Parallel()
 	mb := bus.NewMessageBus()
 	defer mb.Close()
 	tr := &fakeTranscriber{text: "please leave the voice channel now"}
 	agent := NewAgent(mb, tr)
 	tmpDir := t.TempDir()
 	filePath := filepath.Join(tmpDir, "voice.ogg")
 	if err := os.WriteFile(filePath, []byte("data"), 0o600); err != nil {
 		t.Fatalf("write temp file: %v", err)
 	}
 	acc := &speechAccumulator{
 		file:      filePath,
 		chatID:    "chat",
 		speakerID: "speaker",
 		sessionID: "sess",
 		channel:   "discord",
 	}
 	agent.processUtterance(context.Background(), acc)
 	select {
 	case ctrl := <-mb.VoiceControlsChan():
 		if ctrl.Action != "leave" || ctrl.Type != "command" || ctrl.SessionID != "sess" {
 			t.Fatalf("unexpected voice control: %#v", ctrl)
 		}
 	case <-time.After(250 * time.Millisecond):
 		t.Fatal("expected voice control publish")
 	}
 	select {
 	case out := <-mb.OutboundChan():
 		if !strings.Contains(out.Content, "Leaving the voice channel") {
 			t.Fatalf("unexpected outbound content: %q", out.Content)
 		}
 	case <-time.After(250 * time.Millisecond):
 		t.Fatal("expected outbound publish")
 	}
 	if _, err := os.Stat(filePath); !os.IsNotExist(err) {
 		t.Fatalf("expected temp file to be removed")
 	}
 }
 func TestAgentCheckSilencePublishesInboundAndCleansUp(t *testing.T) {
 	t.Parallel()
 	mb := bus.NewMessageBus()
 	defer mb.Close()
 	tr := &fakeTranscriber{text: "hello there"}
 	agent := NewAgent(mb, tr)
 	filePath := filepath.Join(t.TempDir(), "voice.ogg")
 	writer, err := oggwriter.New(filePath, 48000, 2)
 	if err != nil {
 		t.Fatalf("create ogg writer: %v", err)
 	}
 	acc := &speechAccumulator{
 		writer:      writer,
 		file:        filePath,
 		lastAudioAt: time.Now().Add(-2 * time.Second),
 		chatID:      "chat",
 		speakerID:   "speaker",
 		sessionID:   "sess",
 		channel:     "slack",
 	}
 	agent.mu.Lock()
 	agent.sessions["sess_speaker"] = acc
 	agent.mu.Unlock()
 	agent.checkSilence(context.Background())
 	select {
 	case msg := <-mb.InboundChan():
 		if msg.Channel != "slack" {
 			t.Fatalf("unexpected inbound channel: %q", msg.Channel)
 		}
 		if !strings.Contains(msg.Content, "hello there") {
 			t.Fatalf("unexpected inbound content: %q", msg.Content)
 		}
 		if msg.Metadata["is_voice"] != "true" {
 			t.Fatalf("expected is_voice metadata, got %#v", msg.Metadata)
 		}
 	case <-time.After(500 * time.Millisecond):
 		t.Fatal("expected inbound publish")
 	}
 	waitForFileRemoval(t, filePath, 500*time.Millisecond)
 }
--- a/pkg/audio/asr/asr.go
+++ b/pkg/audio/asr/asr.go
@ -0,0 +1,131 @@
 package asr
 import (
 	"context"
 	"strings"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/providers"
 )
 type Transcriber interface {
 	Name() string
 	Transcribe(ctx context.Context, audioFilePath string) (*TranscriptionResponse, error)
 }
 type TranscriptionResponse struct {
 	Text     string  `json:"text"`
 	Language string  `json:"language,omitempty"`
 	Duration float64 `json:"duration,omitempty"`
 }
 func supportsAudioTranscription(model string) bool {
 	protocol, _ := providers.ExtractProtocol(model)
 	switch protocol {
 	case "openai", "azure", "azure-openai",
 		"litellm", "openrouter", "groq", "zhipu", "gemini", "nvidia",
 		"ollama", "moonshot", "shengsuanyun", "deepseek", "cerebras",
 		"vivgrid", "volcengine", "vllm", "qwen", "qwen-intl", "qwen-international", "dashscope-intl",
 		"qwen-us", "dashscope-us", "mistral", "avian", "minimax", "longcat", "modelscope", "novita",
 		"coding-plan", "alibaba-coding", "qwen-coding":
 		// These protocols all go through the OpenAI-compatible or Azure provider path in
 		// providers.CreateProviderFromConfig, so they are the only ones that can supply
 		// the audio media payload shape expected by NewAudioModelTranscriber.
 		// TODO: Further restrict this by modelID, since not every model under these
 		// protocols supports audio transcription.
 		return true
 	default:
 		return false
 	}
 }
 func supportsWhisperTranscription(model string) bool {
 	protocol, _ := providers.ExtractProtocol(model)
 	switch protocol {
 	case "openai", "litellm", "openrouter", "groq", "zhipu", "gemini", "nvidia",
 		"ollama", "moonshot", "shengsuanyun", "deepseek", "cerebras",
 		"vivgrid", "volcengine", "vllm", "qwen", "qwen-intl", "qwen-international", "dashscope-intl",
 		"qwen-us", "dashscope-us", "mistral", "avian", "minimax", "longcat", "modelscope", "novita",
 		"coding-plan", "alibaba-coding", "qwen-coding", "mimo":
 		return true
 	default:
 		return false
 	}
 }
 func whisperModelID(modelCfg *config.ModelConfig) string {
 	if modelCfg == nil || modelCfg.APIKey() == "" {
 		return ""
 	}
 	if !supportsWhisperTranscription(modelCfg.Model) {
 		return ""
 	}
 	_, modelID := providers.ExtractProtocol(strings.TrimSpace(modelCfg.Model))
 	if strings.Contains(strings.ToLower(modelID), "whisper") {
 		return modelID
 	}
 	return ""
 }
 func transcriberFromModelConfig(modelCfg *config.ModelConfig) Transcriber {
 	if modelCfg == nil {
 		return nil
 	}
 	protocol, _ := providers.ExtractProtocol(modelCfg.Model)
 	if protocol == "elevenlabs" && modelCfg.APIKey() != "" {
 		return NewElevenLabsTranscriber(modelCfg.APIKey(), modelCfg.APIBase)
 	}
 	if modelID := whisperModelID(modelCfg); modelID != "" {
 		return NewWhisperTranscriber(modelCfg)
 	}
 	if supportsAudioTranscription(modelCfg.Model) {
 		return NewAudioModelTranscriber(modelCfg)
 	}
 	return nil
 }
 func fallbackTranscriberFromModelConfig(modelCfg *config.ModelConfig) Transcriber {
 	if modelCfg == nil {
 		return nil
 	}
 	protocol, _ := providers.ExtractProtocol(modelCfg.Model)
 	if protocol == "elevenlabs" && modelCfg.APIKey() != "" {
 		return NewElevenLabsTranscriber(modelCfg.APIKey(), modelCfg.APIBase)
 	}
 	if modelID := whisperModelID(modelCfg); modelID != "" {
 		return NewWhisperTranscriber(modelCfg)
 	}
 	return nil
 }
 // DetectTranscriber inspects cfg and returns the appropriate Transcriber, or
 // nil if no supported transcription provider is configured.
 func DetectTranscriber(cfg *config.Config) Transcriber {
 	if cfg == nil {
 		return nil
 	}
 	if modelName := strings.TrimSpace(cfg.Voice.ModelName); modelName != "" {
 		modelCfg, err := cfg.GetModelConfig(modelName)
 		if err == nil {
 			if tr := transcriberFromModelConfig(modelCfg); tr != nil {
 				return tr
 			}
 		}
 	}
 	// Fall back to compatibility scanning for legacy auto-detected ASR providers.
 	for _, mc := range cfg.ModelList {
 		if tr := fallbackTranscriberFromModelConfig(mc); tr != nil {
 			return tr
 		}
 	}
 	return nil
 }
--- a/pkg/voice/transcriber_test.go
+++ b/pkg/voice/transcriber_test.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"testing"
@ -33,26 +33,68 @@ func TestDetectTranscriber(t *testing.T) {
 			wantName: "audio-model",
 		},
 		{
-			name: "groq via model list",
+			name: "voice model name alias selects elevenlabs transcriber",
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{ModelName: "my-asr-model"},
 				ModelList: []*config.ModelConfig{
 					{
 						ModelName: "my-asr-model",
 						Model:     "elevenlabs/scribe_v1",
 						APIKeys:   config.SimpleSecureStrings("sk_elevenlabs_test"),
 					},
 				},
 			},
 			wantName: "elevenlabs",
 		},
 		{
 			name: "voice model name alias selects whisper transcriber for groq",
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{ModelName: "my-asr-model"},
 				ModelList: []*config.ModelConfig{
 					{
 						ModelName: "my-asr-model",
 						Model:     "groq/whisper-large-v3",
 						APIKeys:   config.SimpleSecureStrings("sk-groq-model"),
 					},
 				},
 			},
 			wantName: "whisper",
 		},
 		{
 			name: "openai whisper alias selects whisper transcriber",
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{ModelName: "my-asr-model"},
 				ModelList: []*config.ModelConfig{
 					{
 						ModelName: "my-asr-model",
 						Model:     "openai/whisper-1",
 						APIKeys:   config.SimpleSecureStrings("sk-openai-model"),
 					},
 				},
 			},
 			wantName: "whisper",
 		},
 		{
 			name: "whisper via model list fallback",
 			cfg: &config.Config{
 				ModelList: []*config.ModelConfig{
 					{ModelName: "openai", Model: "openai/gpt-4o", APIKeys: config.SimpleSecureStrings("sk-openai")},
 					{
 						ModelName: "groq",
-						Model:     "groq/llama-3.3-70b",
+						Model:     "groq/whisper-large-v3-turbo",
 						APIKeys:   config.SimpleSecureStrings("sk-groq-model"),
 					},
 				},
 			},
-			wantName: "groq",
+			wantName: "whisper",
 		},
 		{
-			name: "voice model name selects non-gemini audio model transcriber",
+			name: "voice model name alias selects non-gemini audio model transcriber",
 			cfg: &config.Config{
-				Voice: config.VoiceConfig{ModelName: "voice-openai-audio"},
+				Voice: config.VoiceConfig{ModelName: "my-asr-model"},
 				ModelList: []*config.ModelConfig{
 					{
-						ModelName: "voice-openai-audio",
+						ModelName: "my-asr-model",
 						Model:     "openai/gpt-4o-audio-preview",
 						APIKeys:   config.SimpleSecureStrings("sk-openai"),
 					},
@ -92,7 +134,7 @@ func TestDetectTranscriber(t *testing.T) {
 			name: "groq model list entry without key is skipped",
 			cfg: &config.Config{
 				ModelList: []*config.ModelConfig{
-					{Model: "groq/llama-3.3-70b"},
+					{Model: "groq/whisper-large-v3"},
 				},
 			},
 			wantNil: true,
@ -103,12 +145,12 @@ func TestDetectTranscriber(t *testing.T) {
 				ModelList: []*config.ModelConfig{
 					{
 						ModelName: "groq",
-						Model:     "groq/llama-3.3-70b",
+						Model:     "groq/whisper-large-v3",
 						APIKeys:   config.SimpleSecureStrings("sk-groq-model"),
 					},
 				},
 			},
-			wantName: "groq",
+			wantName: "whisper",
 		},
 		{
 			name: "missing voice model name config returns nil",
@ -127,15 +169,17 @@ func TestDetectTranscriber(t *testing.T) {
 		{
 			name: "elevenlabs voice config key",
 			cfg: &config.Config{
-				Voice: config.VoiceConfig{ElevenLabsAPIKey: "sk_elevenlabs_test"},
+				ModelList: []*config.ModelConfig{
 					{Model: "elevenlabs/scribe_v1", APIKeys: config.SimpleSecureStrings("sk_elevenlabs_test")},
 				},
 			},
 			wantName: "elevenlabs",
 		},
 		{
 			name: "elevenlabs takes priority over groq model list",
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{ElevenLabsAPIKey: "sk_elevenlabs_test"},
 				ModelList: []*config.ModelConfig{
 					{Model: "elevenlabs/scribe_v1", APIKeys: config.SimpleSecureStrings("sk_elevenlabs_test")},
 					{
 						ModelName: "groq",
 						Model:     "groq/llama-3.3-70b",
@ -150,9 +194,9 @@ func TestDetectTranscriber(t *testing.T) {
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{
 					ModelName: "voice-gemini",
 					ElevenLabsAPIKey: "sk_elevenlabs_test",
 				},
 				ModelList: []*config.ModelConfig{
 					{Model: "elevenlabs", APIKeys: config.SimpleSecureStrings("sk_elevenlabs_test")},
 					{
 						ModelName: "voice-gemini",
 						Model:     "gemini/gemini-2.5-flash",
--- a/pkg/audio/asr/audio_model_transcriber.go
+++ b/pkg/audio/asr/audio_model_transcriber.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"context"
--- a/pkg/audio/asr/audio_model_transcriber_test.go
+++ b/pkg/audio/asr/audio_model_transcriber_test.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"context"
--- a/pkg/audio/asr/elevenlabs_transcriber.go
+++ b/pkg/audio/asr/elevenlabs_transcriber.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"bytes"
@ -23,12 +23,16 @@ type ElevenLabsTranscriber struct {
 	httpClient *http.Client
 }
-func NewElevenLabsTranscriber(apiKey string) *ElevenLabsTranscriber {
+func NewElevenLabsTranscriber(apiKey, apiBase string) *ElevenLabsTranscriber {
 	logger.DebugCF("voice", "Creating ElevenLabs transcriber", map[string]any{"has_api_key": apiKey != ""})
 	if apiBase == "" {
 		apiBase = "https://api.elevenlabs.io"
 	}
 	return &ElevenLabsTranscriber{
 		apiKey:  apiKey,
-		apiBase: "https://api.elevenlabs.io",
+		apiBase: apiBase,
 		httpClient: &http.Client{
 			Timeout: 120 * time.Second,
 		},
--- a/pkg/audio/asr/elevenlabs_transcriber_test.go
+++ b/pkg/audio/asr/elevenlabs_transcriber_test.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"context"
@ -14,7 +14,7 @@ import (
 var _ Transcriber = (*ElevenLabsTranscriber)(nil)
 func TestElevenLabsTranscriberName(t *testing.T) {
-	tr := NewElevenLabsTranscriber("sk_test")
+	tr := NewElevenLabsTranscriber("sk_test", "")
 	if got := tr.Name(); got != "elevenlabs" {
 		t.Errorf("Name() = %q, want %q", got, "elevenlabs")
 	}
@ -43,7 +43,7 @@ func TestElevenLabsTranscribe(t *testing.T) {
 		}))
 		defer srv.Close()
-		tr := NewElevenLabsTranscriber("sk_test")
+		tr := NewElevenLabsTranscriber("sk_test", "")
 		tr.apiBase = srv.URL
 		resp, err := tr.Transcribe(context.Background(), audioPath)
@ -64,7 +64,7 @@ func TestElevenLabsTranscribe(t *testing.T) {
 		}))
 		defer srv.Close()
-		tr := NewElevenLabsTranscriber("sk_bad")
+		tr := NewElevenLabsTranscriber("sk_bad", "")
 		tr.apiBase = srv.URL
 		_, err := tr.Transcribe(context.Background(), audioPath)
@ -74,7 +74,7 @@ func TestElevenLabsTranscribe(t *testing.T) {
 	})
 	t.Run("missing file", func(t *testing.T) {
-		tr := NewElevenLabsTranscriber("sk_test")
+		tr := NewElevenLabsTranscriber("sk_test", "")
 		_, err := tr.Transcribe(context.Background(), filepath.Join(tmpDir, "nonexistent.ogg"))
 		if err == nil {
 			t.Fatal("expected error for missing file, got nil")
--- a/pkg/audio/asr/whisper_transcriber.go
+++ b/pkg/audio/asr/whisper_transcriber.go
@ -0,0 +1,245 @@
 package asr
 import (
 	"bytes"
 	"context"
 	"encoding/json"
 	"fmt"
 	"io"
 	"mime/multipart"
 	"net/http"
 	"os"
 	"path/filepath"
 	"strings"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/logger"
 	"github.com/sipeed/picoclaw/pkg/providers"
 	"github.com/sipeed/picoclaw/pkg/utils"
 )
 type WhisperTranscriber struct {
 	apiKey       string
 	apiBase      string
 	modelID      string
 	providerName string
 	httpClient   *http.Client
 }
 func NewWhisperTranscriber(modelCfg *config.ModelConfig) *WhisperTranscriber {
 	if modelCfg == nil {
 		return nil
 	}
 	protocol, modelID := providers.ExtractProtocol(modelCfg.Model)
 	if modelID == "" {
 		modelID = strings.TrimSpace(modelCfg.Model)
 	}
 	tr := newWhisperTranscriber(
 		modelCfg.APIKey(),
 		providers.ResolveAPIBase(modelCfg),
 		modelID,
 		protocol,
 	)
 	if tr == nil {
 		return nil
 	}
 	logger.DebugCF("voice", "Creating whisper transcriber", map[string]any{
 		"api_base": tr.apiBase,
 		"has_key":  tr.apiKey != "",
 		"model":    tr.modelID,
 		"provider": tr.providerName,
 	})
 	return tr
 }
 func NewGroqTranscriber(apiKey, modelID string) *WhisperTranscriber {
 	return newWhisperTranscriber(apiKey, "https://api.groq.com/openai/v1", modelID, "groq")
 }
 func newWhisperTranscriber(apiKey, apiBase, modelID, providerName string) *WhisperTranscriber {
 	if modelID == "" {
 		return nil
 	}
 	if providerName == "" {
 		providerName = "whisper"
 	}
 	return &WhisperTranscriber{
 		apiKey:       apiKey,
 		apiBase:      strings.TrimRight(apiBase, "/"),
 		modelID:      modelID,
 		providerName: providerName,
 		httpClient: &http.Client{
 			Timeout: 60 * time.Second,
 		},
 	}
 }
 func (t *WhisperTranscriber) transcriptionURL() string {
 	base := strings.TrimRight(t.apiBase, "/")
 	if strings.HasSuffix(base, "/audio/transcriptions") {
 		return base
 	}
 	return base + "/audio/transcriptions"
 }
 func (t *WhisperTranscriber) TranscribeData(
 	ctx context.Context,
 	data []byte,
 	filename string,
 ) (*TranscriptionResponse, error) {
 	logger.InfoCF("voice", "Starting whisper transcription from memory", map[string]any{
 		"bytes":    len(data),
 		"filename": filename,
 		"model":    t.modelID,
 		"provider": t.providerName,
 	})
 	var requestBody bytes.Buffer
 	writer := multipart.NewWriter(&requestBody)
 	part, err := writer.CreateFormFile("file", filename)
 	if err != nil {
 		logger.ErrorCF("voice", "Failed to create whisper form file", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to create form file: %w", err)
 	}
 	if _, copyErr := io.Copy(part, bytes.NewReader(data)); copyErr != nil {
 		logger.ErrorCF("voice", "Failed to copy whisper file content", map[string]any{"error": copyErr})
 		return nil, fmt.Errorf("failed to copy file content: %w", copyErr)
 	}
 	if err = writer.WriteField("model", t.modelID); err != nil {
 		logger.ErrorCF("voice", "Failed to write whisper model field", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to write model field: %w", err)
 	}
 	if err = writer.WriteField("response_format", "json"); err != nil {
 		logger.ErrorCF("voice", "Failed to write whisper response_format field", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to write response_format field: %w", err)
 	}
 	if err = writer.Close(); err != nil {
 		logger.ErrorCF("voice", "Failed to close whisper multipart writer", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to close multipart writer: %w", err)
 	}
 	return t.doRequest(ctx, &requestBody, writer.FormDataContentType(), int64(len(data)))
 }
 func (t *WhisperTranscriber) Transcribe(ctx context.Context, audioFilePath string) (*TranscriptionResponse, error) {
 	logger.InfoCF("voice", "Starting whisper transcription", map[string]any{
 		"audio_file": audioFilePath,
 		"model":      t.modelID,
 		"provider":   t.providerName,
 	})
 	audioFile, err := os.Open(audioFilePath)
 	if err != nil {
 		return nil, fmt.Errorf("failed to open audio file %s: %w", audioFilePath, err)
 	}
 	defer audioFile.Close()
 	fileInfo, err := audioFile.Stat()
 	if err != nil {
 		return nil, fmt.Errorf("failed to stat audio file %s: %w", audioFilePath, err)
 	}
 	var requestBody bytes.Buffer
 	writer := multipart.NewWriter(&requestBody)
 	part, err := writer.CreateFormFile("file", filepath.Base(audioFilePath))
 	if err != nil {
 		return nil, fmt.Errorf("failed to create form file: %w", err)
 	}
 	if _, copyErr := io.Copy(part, audioFile); copyErr != nil {
 		return nil, fmt.Errorf("failed to copy audio data: %w", copyErr)
 	}
 	if err = writer.WriteField("model", t.modelID); err != nil {
 		return nil, fmt.Errorf("failed to write model field: %w", err)
 	}
 	if err = writer.WriteField("response_format", "json"); err != nil {
 		return nil, fmt.Errorf("failed to write response_format field: %w", err)
 	}
 	if err = writer.Close(); err != nil {
 		return nil, fmt.Errorf("failed to close multipart writer: %w", err)
 	}
 	return t.doRequest(ctx, &requestBody, writer.FormDataContentType(), fileInfo.Size())
 }
 func (t *WhisperTranscriber) doRequest(
 	ctx context.Context,
 	requestBody *bytes.Buffer,
 	contentType string,
 	fileSize int64,
 ) (*TranscriptionResponse, error) {
 	url := t.transcriptionURL()
 	req, err := http.NewRequestWithContext(ctx, "POST", url, requestBody)
 	if err != nil {
 		logger.ErrorCF("voice", "Failed to create whisper request", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to create request: %w", err)
 	}
 	req.Header.Set("Content-Type", contentType)
 	if t.apiKey != "" {
 		req.Header.Set("Authorization", "Bearer "+t.apiKey)
 	}
 	logger.DebugCF("voice", "Sending whisper transcription request", map[string]any{
 		"file_size_bytes":    fileSize,
 		"model":              t.modelID,
 		"provider":           t.providerName,
 		"request_size_bytes": requestBody.Len(),
 		"url":                url,
 	})
 	resp, err := t.httpClient.Do(req)
 	if err != nil {
 		logger.ErrorCF("voice", "Failed to send whisper request", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to send request: %w", err)
 	}
 	defer resp.Body.Close()
 	body, err := io.ReadAll(resp.Body)
 	if err != nil {
 		logger.ErrorCF("voice", "Failed to read whisper response", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to read response: %w", err)
 	}
 	if resp.StatusCode != http.StatusOK {
 		logger.ErrorCF("voice", "Whisper API error", map[string]any{
 			"provider":    t.providerName,
 			"response":    string(body),
 			"status_code": resp.StatusCode,
 		})
 		return nil, fmt.Errorf("API error (status %d): %s", resp.StatusCode, string(body))
 	}
 	var result TranscriptionResponse
 	if err := json.Unmarshal(body, &result); err != nil {
 		logger.ErrorCF("voice", "Failed to unmarshal whisper response", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to unmarshal response: %w", err)
 	}
 	logger.InfoCF("voice", "Whisper transcription completed successfully", map[string]any{
 		"duration_seconds":      result.Duration,
 		"language":              result.Language,
 		"provider":              t.providerName,
 		"text_length":           len(result.Text),
 		"transcription_preview": utils.Truncate(result.Text, 50),
 	})
 	return &result, nil
 }
 func (t *WhisperTranscriber) Name() string {
 	return "whisper"
 }
--- a/pkg/audio/asr/whisper_transcriber_test.go
+++ b/pkg/audio/asr/whisper_transcriber_test.go
@ -0,0 +1,102 @@
 package asr
 import (
 	"context"
 	"encoding/json"
 	"io"
 	"net/http"
 	"net/http/httptest"
 	"testing"
 	"github.com/sipeed/picoclaw/pkg/config"
 )
 func TestWhisperTranscriberTranscribeDataUsesConfiguredModel(t *testing.T) {
 	var gotModel string
 	var gotPath string
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		gotPath = r.URL.Path
 		if got := r.Header.Get("Authorization"); got != "Bearer sk-openai-test" {
 			t.Errorf("Authorization = %q, want %q", got, "Bearer sk-openai-test")
 		}
 		reader, err := r.MultipartReader()
 		if err != nil {
 			t.Fatalf("MultipartReader() error: %v", err)
 		}
 		for {
 			part, err := reader.NextPart()
 			if err == io.EOF {
 				break
 			}
 			if err != nil {
 				t.Fatalf("NextPart() error: %v", err)
 			}
 			data, err := io.ReadAll(part)
 			if err != nil {
 				t.Fatalf("ReadAll() error: %v", err)
 			}
 			if part.FormName() == "model" {
 				gotModel = string(data)
 			}
 		}
 		w.Header().Set("Content-Type", "application/json")
 		if err := json.NewEncoder(w).Encode(TranscriptionResponse{Text: "hello from whisper"}); err != nil {
 			t.Fatalf("Encode() error: %v", err)
 		}
 	}))
 	defer server.Close()
 	tr := NewWhisperTranscriber(&config.ModelConfig{
 		Model:   "openai/whisper-1",
 		APIBase: server.URL,
 		APIKeys: config.SimpleSecureStrings("sk-openai-test"),
 	})
 	tr.httpClient = server.Client()
 	resp, err := tr.TranscribeData(context.Background(), []byte("audio"), "clip.ogg")
 	if err != nil {
 		t.Fatalf("TranscribeData() error: %v", err)
 	}
 	if resp.Text != "hello from whisper" {
 		t.Errorf("Text = %q, want %q", resp.Text, "hello from whisper")
 	}
 	if gotModel != "whisper-1" {
 		t.Errorf("model field = %q, want %q", gotModel, "whisper-1")
 	}
 	if gotPath != "/audio/transcriptions" {
 		t.Errorf("path = %q, want %q", gotPath, "/audio/transcriptions")
 	}
 }
 func TestWhisperTranscriberUsesEndpointAPIBaseWithoutDoubleAppend(t *testing.T) {
 	var gotPath string
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		gotPath = r.URL.Path
 		w.Header().Set("Content-Type", "application/json")
 		if err := json.NewEncoder(w).Encode(TranscriptionResponse{Text: "ok"}); err != nil {
 			t.Fatalf("Encode() error: %v", err)
 		}
 	}))
 	defer server.Close()
 	tr := NewWhisperTranscriber(&config.ModelConfig{
 		Model:   "groq/whisper-large-v3",
 		APIBase: server.URL + "/audio/transcriptions",
 		APIKeys: config.SimpleSecureStrings("sk-groq-test"),
 	})
 	tr.httpClient = server.Client()
 	if _, err := tr.TranscribeData(context.Background(), []byte("audio"), "clip.ogg"); err != nil {
 		t.Fatalf("TranscribeData() error: %v", err)
 	}
 	if gotPath != "/audio/transcriptions" {
 		t.Errorf("path = %q, want %q", gotPath, "/audio/transcriptions")
 	}
 }
--- a/pkg/audio/ogg.go
+++ b/pkg/audio/ogg.go
@ -0,0 +1,57 @@
 package audio
 import (
 	"bytes"
 	"fmt"
 	"io"
 )
 // DecodeOggOpus reads an Ogg format stream and extracts individual Opus payloads.
 // It calls onFrame for every complete Opus frame found in the stream.
 func DecodeOggOpus(r io.Reader, onFrame func([]byte) error) error {
 	var packet bytes.Buffer
 	header := make([]byte, 27)
 	segment := make([]byte, 255)
 	for {
 		if _, err := io.ReadFull(r, header); err != nil {
 			if err == io.EOF || err == io.ErrUnexpectedEOF {
 				return nil
 			}
 			return fmt.Errorf("failed to read ogg header: %w", err)
 		}
 		if string(header[:4]) != "OggS" {
 			return fmt.Errorf("invalid ogg magic string")
 		}
 		pageSegments := int(header[26])
 		segmentTable := make([]byte, pageSegments)
 		if _, err := io.ReadFull(r, segmentTable); err != nil {
 			return fmt.Errorf("failed to read segment table: %w", err)
 		}
 		for _, lacing := range segmentTable {
 			if _, err := io.ReadFull(r, segment[:lacing]); err != nil {
 				return fmt.Errorf("failed to read segment data: %w", err)
 			}
 			packet.Write(segment[:lacing])
 			// If lacing is less than 255, the packet is complete
 			if lacing < 255 {
 				if packet.Len() > 0 {
 					packetBytes := packet.Bytes()
 					// Ignore Ogg Opus headers
 					if !bytes.HasPrefix(packetBytes, []byte("OpusHead")) &&
 						!bytes.HasPrefix(packetBytes, []byte("OpusTags")) {
 						if err := onFrame(packetBytes); err != nil {
 							return err
 						}
 					}
 					// Start new packet
 					packet.Reset()
 				}
 			}
 		}
 	}
 }
--- a/pkg/audio/ogg_test.go
+++ b/pkg/audio/ogg_test.go
@ -0,0 +1,146 @@
 package audio
 import (
 	"bytes"
 	"reflect"
 	"strings"
 	"testing"
 )
 // buildOggPage helper creates an Ogg page for testing.
 // lacingVals specifies the segment table, and data is the payload.
 func buildOggPage(lacingVals []byte, data []byte) []byte {
 	var buf bytes.Buffer
 	// 27-byte Ogg header
 	header := make([]byte, 27)
 	copy(header[:4], "OggS")
 	header[5] = 0 // type flag
 	// For testing, we only care about OggS magic and page_segments (byte 26)
 	header[26] = byte(len(lacingVals))
 	buf.Write(header)
 	buf.Write(lacingVals)
 	buf.Write(data)
 	return buf.Bytes()
 }
 func TestDecodeOggOpus_ValidParsing(t *testing.T) {
 	var b bytes.Buffer
 	// Packet 1: Single segment, length 50
 	pkt1 := bytes.Repeat([]byte{1}, 50)
 	// Packet 2: Multi-segment (255 + 10 = 265 bytes)
 	pkt2Part1 := bytes.Repeat([]byte{2}, 255)
 	pkt2Part2 := bytes.Repeat([]byte{2}, 10)
 	// Packet 3: Continued across pages. Page 1 gets 255, Page 2 gets 20. Total 275 bytes.
 	pkt3Part1 := bytes.Repeat([]byte{3}, 255)
 	pkt3Part2 := bytes.Repeat([]byte{3}, 20)
 	// Page 1: OpusHead (skip), OpusTags (skip), pkt1, pkt2, pkt3Part1
 	page1Lacing := []byte{8, 8, 50, 255, 10, 255}
 	page1Data := bytes.Join([][]byte{
 		[]byte("OpusHead"),
 		[]byte("OpusTags"),
 		pkt1,
 		pkt2Part1, pkt2Part2,
 		pkt3Part1,
 	}, nil)
 	// Page 2: pkt3Part2, pkt4 (length 10)
 	pkt4 := bytes.Repeat([]byte{4}, 10)
 	page2Lacing := []byte{20, 10}
 	page2Data := bytes.Join([][]byte{
 		pkt3Part2,
 		pkt4,
 	}, nil)
 	b.Write(buildOggPage(page1Lacing, page1Data))
 	b.Write(buildOggPage(page2Lacing, page2Data))
 	var frames [][]byte
 	err := DecodeOggOpus(&b, func(frame []byte) error {
 		// making a copy to store as DecodeOggOpus might reuse backing array
 		cpy := make([]byte, len(frame))
 		copy(cpy, frame)
 		frames = append(frames, cpy)
 		return nil
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	expectedFrames := [][]byte{
 		pkt1,
 		append(pkt2Part1, pkt2Part2...),
 		append(pkt3Part1, pkt3Part2...),
 		pkt4,
 	}
 	if len(frames) != len(expectedFrames) {
 		t.Fatalf("expected %d frames, got %d", len(expectedFrames), len(frames))
 	}
 	for i, expected := range expectedFrames {
 		if !reflect.DeepEqual(frames[i], expected) {
 			t.Errorf("frame %d mismatch:\nexp: %v\ngot: %v", i, expected, frames[i])
 		}
 	}
 }
 func TestDecodeOggOpus_Errors(t *testing.T) {
 	tests := []struct {
 		name        string
 		data        []byte
 		errContains string
 	}{
 		{
 			name: "invalid magic string",
 			data: []byte(
 				"OggX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
 			),
 			errContains: "invalid ogg magic string",
 		},
 		{
 			name:        "short header",
 			data:        []byte("Ogg"),
 			errContains: "failed to read ogg header",
 		},
 		{
 			name: "eof in segment table",
 			data: func() []byte {
 				h := make([]byte, 27)
 				copy(h, "OggS")
 				h[26] = 5 // expects 5 bytes of segment table, but none provided
 				return h
 			}(),
 			errContains: "failed to read segment table",
 		},
 		{
 			name: "eof in segment data",
 			data: func() []byte {
 				h := make([]byte, 27, 28)
 				copy(h, "OggS")
 				h[26] = 1
 				return append(h, 100) // expects 100 bytes of data, but none provided
 			}(),
 			errContains: "failed to read segment data",
 		},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
 			err := DecodeOggOpus(bytes.NewReader(tt.data), func(b []byte) error { return nil })
 			if tt.name == "short header" {
 				if err != nil {
 					t.Errorf("expected no error (io.EOF/ErrUnexpectedEOF swallowed), got %v", err)
 				}
 				return
 			}
 			if err == nil {
 				t.Fatalf("expected error containing %q, got nil", tt.errContains)
 			}
 			if !strings.Contains(err.Error(), tt.errContains) {
 				t.Errorf("expected error to contain %q, got: %q", tt.errContains, err.Error())
 			}
 		})
 	}
 }
--- a/pkg/audio/sentence.go
+++ b/pkg/audio/sentence.go
@ -0,0 +1,96 @@
 package audio
 import (
 	"strings"
 	"unicode"
 )
 // SplitSentences splits text into sentence-sized chunks suitable for TTS synthesis.
 // It splits on sentence-ending punctuation (.!?\n, as well as CJK 。, ！, ？) while avoiding false splits
 // on decimal numbers. Very short fragments are merged with
 // the next sentence to prevent choppy playback.
 func SplitSentences(text string) []string {
 	if text == "" {
 		return nil
 	}
 	var sentences []string
 	var current strings.Builder
 	runes := []rune(text)
 	for i := 0; i < len(runes); i++ {
 		r := runes[i]
 		if r == '\n' {
 			s := strings.TrimSpace(current.String())
 			if s != "" {
 				sentences = append(sentences, s)
 			}
 			current.Reset()
 			continue
 		}
 		current.WriteRune(r)
 		if r == '.' || r == '!' || r == '?' || r == '。' || r == '！' || r == '？' {
 			// Avoid splitting on decimal numbers like "3.14"
 			if r == '.' && i > 0 && unicode.IsDigit(runes[i-1]) &&
 				i+1 < len(runes) && unicode.IsDigit(runes[i+1]) {
 				continue
 			}
 			// Consume contiguous punctuation clusters (e.g., "..." or "?!").
 			for i+1 < len(runes) && (runes[i+1] == '.' || runes[i+1] == '!' || runes[i+1] == '?' || runes[i+1] == '。' || runes[i+1] == '！' || runes[i+1] == '？') {
 				i++
 				current.WriteRune(runes[i])
 			}
 			s := strings.TrimSpace(current.String())
 			if s != "" {
 				sentences = append(sentences, s)
 			}
 			current.Reset()
 		}
 	}
 	// Flush remaining text
 	if s := strings.TrimSpace(current.String()); s != "" {
 		sentences = append(sentences, s)
 	}
 	// Merge very short fragments with the next sentence
 	return mergeShorties(sentences, 15)
 }
 // mergeShorties merges sentences shorter than minLen characters with the following sentence.
 func mergeShorties(sentences []string, minLen int) []string {
 	if len(sentences) <= 1 {
 		return sentences
 	}
 	var merged []string
 	var buf string
 	for _, s := range sentences {
 		if buf != "" {
 			buf += " " + s
 			if len([]rune(buf)) >= minLen {
 				merged = append(merged, buf)
 				buf = ""
 			}
 		} else if len([]rune(s)) < minLen {
 			buf = s
 		} else {
 			merged = append(merged, s)
 		}
 	}
 	if buf != "" {
 		if len(merged) > 0 {
 			merged[len(merged)-1] += " " + buf
 		} else {
 			merged = append(merged, buf)
 		}
 	}
 	return merged
 }
--- a/pkg/audio/sentence_test.go
+++ b/pkg/audio/sentence_test.go
@ -0,0 +1,69 @@
 package audio
 import (
 	"reflect"
 	"testing"
 )
 func TestSplitSentences(t *testing.T) {
 	tests := []struct {
 		name string
 		in   string
 		want []string
 	}{
 		{
 			name: "empty input",
 			in:   "",
 			want: nil,
 		},
 		{
 			name: "single sentence",
 			in:   "Hello world.",
 			want: []string{"Hello world."},
 		},
 		{
 			name: "decimal numbers do not split",
 			in:   "The value is 3.14 today. Keep watching closely.",
 			want: []string{"The value is 3.14 today.", "Keep watching closely."},
 		},
 		{
 			name: "newline boundary",
 			in:   "This is line number one\nThis is line number two",
 			want: []string{"This is line number one", "This is line number two"},
 		},
 		{
 			name: "newline with surrounding spaces",
 			in:   "  This is the first line   \n   This is the second line   ",
 			want: []string{"This is the first line", "This is the second line"},
 		},
 		{
 			name: "trailing punctuation consumed",
 			in:   "Please wait a moment... What on earth?! That is perfectly fine.",
 			want: []string{"Please wait a moment...", "What on earth?!", "That is perfectly fine."},
 		},
 		{
 			name: "short leading fragment merges with next",
 			in:   "Hi. This is a longer sentence.",
 			want: []string{"Hi. This is a longer sentence."},
 		},
 		{
 			name: "consecutive short fragments keep merging",
 			in:   "A. B. C. This is the real sentence.",
 			want: []string{"A. B. C. This is the real sentence."},
 		},
 		{
 			name: "short trailing fragment merges back",
 			in:   "This sentence is long enough. End.",
 			want: []string{"This sentence is long enough. End."},
 		},
 	}
 	for _, tc := range tests {
 		t.Run(tc.name, func(t *testing.T) {
 			got := SplitSentences(tc.in)
 			if !reflect.DeepEqual(got, tc.want) {
 				t.Fatalf("SplitSentences(%q) = %#v, want %#v", tc.in, got, tc.want)
 			}
 		})
 	}
 }
--- a/pkg/audio/tts/README.md
+++ b/pkg/audio/tts/README.md
@ -0,0 +1,137 @@
 # TTS (Text-to-Speech)
 This package handles speech synthesis for PicoClaw.
 If you are new to TTS setup, the simplest workflow is:
 1. Add a TTS-capable entry to `model_list`.
 2. Point `voice.tts_model_name` at that entry.
 3. Put the API key in `.security.yml`.
 ## Quick Recommendation
 For most users, these are the best starting points:
 | Provider | Why start here |
 | --- | --- |
 | [OpenAI](https://platform.openai.com/docs/guides/text-to-speech) | Best-supported path in PicoClaw today. The current TTS implementation is built around the OpenAI-compatible `/audio/speech` API shape, and OpenAI is the safest default. |
 | [Xiaomi MiMo](https://platform.xiaomimimo.com) | A good second option if you want an OpenAI-compatible provider endpoint and are already using MiMo models in the rest of your stack. |
 ## How TTS Configuration Works
 PicoClaw does not keep TTS API keys inside `voice`.
 Instead:
 - `voice.tts_model_name` selects a named entry from `model_list`.
 - That `model_list` entry provides the provider, model ID, API base, and proxy settings.
 - `.security.yml` stores the API key for the same named model entry.
 This is the recommended and supported configuration pattern.
 ## Recommended Setup
 ### Option A: OpenAI
 `config.json`
 ```json
 {
  "voice": {
    "tts_model_name": "openai-tts"
  },
  "model_list": [
    {
      "model_name": "openai-tts",
      "model": "openai/tts-1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  openai-tts:
    api_keys:
      - "sk-openai-your-key"
 ```
 ### Option B: Xiaomi MiMo
 `config.json`
 ```json
 {
  "voice": {
    "tts_model_name": "mimo-tts"
  },
  "model_list": [
    {
      "model_name": "mimo-tts",
      "model": "mimo/mimo-v2-tts"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  mimo-tts:
    api_keys:
      - "your-mimo-key"
 ```
 If you use a custom MiMo endpoint, you can also set `api_base` explicitly. Otherwise PicoClaw will use the provider default.
 ## What PicoClaw Sends Today
 The current TTS runtime uses an OpenAI-compatible speech request with these defaults:
 - Endpoint: `/audio/speech`
 - Response format: `opus`
 - Voice: `alloy`
 - Model: taken from the selected `model_list` entry
 That means:
 - `openai/tts-1` works naturally.
 - Other OpenAI-compatible providers can work if they accept the same request format.
 - PicoClaw currently does not expose a user-facing config field for changing the TTS voice from `alloy`.
 ## How PicoClaw Chooses a TTS Provider
 `DetectTTS` resolves TTS in this order:
 1. **Preferred path**: resolve `voice.tts_model_name` against `model_list`.
 2. If a matching model entry exists and has an API key, PicoClaw creates an OpenAI-compatible TTS provider using that model's settings.
 3. **Fallback path**: if `voice.tts_model_name` is not set or cannot be resolved, PicoClaw scans `model_list` for the first entry whose model string contains `tts` and has an API key.
 Fallback scanning exists for compatibility. New configs should set `voice.tts_model_name` explicitly.
 ## Notes About API Base Handling
 PicoClaw normalizes the configured base URL for TTS:
 - For OpenAI, a base like `https://api.openai.com` or `https://api.openai.com/v1` becomes `https://api.openai.com/v1/audio/speech`.
 - For other OpenAI-compatible providers, PicoClaw preserves the configured base path and ensures it ends with `/audio/speech`.
 - If `api_base` is omitted, PicoClaw uses the provider default base when the model prefix is known.
 ## Common Mistakes
 - Setting `voice.tts_model_name` to a name that does not exist in `model_list`.
 - Adding a TTS model but forgetting to put its API key in `.security.yml`.
 - Assuming PicoClaw will automatically use provider-specific custom voices.
 - Using a provider endpoint that is not compatible with the OpenAI `/audio/speech` request format.
 ## Minimal Checklist
 Before testing `send_tts`, make sure:
 - `voice.tts_model_name` matches a `model_list[].model_name`.
 - The matching `.security.yml` entry contains a valid API key.
 - The chosen provider supports an OpenAI-compatible speech synthesis endpoint.
 - Your selected model is actually a TTS-capable model.
--- a/pkg/audio/tts/README_zh.md
+++ b/pkg/audio/tts/README_zh.md
@ -0,0 +1,137 @@
 # TTS（文本转语音）
 这个目录负责 PicoClaw 的语音合成能力。
 如果你是第一次配置 TTS，可以参照下面这个流程：
 1. 在 `model_list` 里添加一个支持 TTS 的模型。
 2. 用 `voice.tts_model_name` 指向这个模型。
 3. 在 `.security.yml` 里配置对应的 API Key。
 ## 快速推荐
 对于大多数用户，建议优先从下面两种开始：
 | 提供商 | 推荐理由 |
 | --- | --- |
 | [OpenAI](https://platform.openai.com/docs/guides/text-to-speech) | 这是 PicoClaw 当前最稳定、最直接的 TTS 路径。当前实现就是围绕 OpenAI 兼容的 `/audio/speech` 接口格式构建的，所以 OpenAI 是最稳妥的默认选择。 |
 | [Xiaomi MiMo](https://platform.xiaomimimo.com) | 由于响应速度和语音音色对于中国用户更友好，MiMo 是一个不错的第二选择。 |
 ## TTS 配置是如何工作的
 PicoClaw 不会把 TTS 的 API Key 放在 `voice` 配置里。
 推荐方式是：
 - `voice.tts_model_name` 用来选择 `model_list` 里的某个命名模型。
 - 对应的 `model_list` 条目提供真实的 provider、model ID、`api_base` 和代理配置。
 - `.security.yml` 负责保存该模型条目的 API Key。
 这是当前推荐且受支持的配置方式。
 ## 推荐配置方式
 ### 方案 A：OpenAI
 `config.json`
 ```json
 {
  "voice": {
    "tts_model_name": "openai-tts"
  },
  "model_list": [
    {
      "model_name": "openai-tts",
      "model": "openai/tts-1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  openai-tts:
    api_keys:
      - "sk-openai-your-key"
 ```
 ### 方案 B：Xiaomi MiMo
 `config.json`
 ```json
 {
  "voice": {
    "tts_model_name": "mimo-tts"
  },
  "model_list": [
    {
      "model_name": "mimo-tts",
      "model": "mimo/mimo-v2-tts"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  mimo-tts:
    api_keys:
      - "your-mimo-key"
 ```
 如果你使用自定义的 MiMo 接口地址，也可以显式设置 `api_base`。如果不设置，PicoClaw 会自动使用该 provider 的默认地址。
 ## PicoClaw 当前实际发送的 TTS 请求
 当前 TTS 运行时使用的是 OpenAI 兼容的语音合成请求，并带有以下默认值：
 - Endpoint：`/audio/speech`
 - 返回格式：`opus`
 - Voice：`alloy`
 - Model：来自你所选中的 `model_list` 条目
 这意味着：
 - `openai/tts-1` 可以自然工作。
 - 其他 OpenAI 兼容 provider 也可能可用，前提是它们接受相同的请求格式。
 - PicoClaw 目前还没有对用户暴露一个配置项来修改 TTS voice，当前固定为 `alloy`。
 ## PicoClaw 如何选择 TTS Provider
 `DetectTTS` 会按下面顺序选择 TTS：
 1. **首选路径**：根据 `voice.tts_model_name` 在 `model_list` 中找到对应模型。
 2. 如果找到了匹配条目，并且它有 API Key，PicoClaw 就会使用这个模型条目的配置创建一个 OpenAI 兼容的 TTS provider。
 3. **回退路径**：如果没有设置 `voice.tts_model_name`，或者该名字无法解析，PicoClaw 会扫描 `model_list`，选中第一个模型字符串里包含 `tts` 且带有 API Key 的条目。
 回退扫描只是为了兼容旧行为。新配置建议始终显式设置 `voice.tts_model_name`。
 ## 关于 API Base 的处理方式
 PicoClaw 会对 TTS 的 `api_base` 做规范化处理：
 - 对 OpenAI 来说，像 `https://api.openai.com` 或 `https://api.openai.com/v1` 这样的地址，会自动变成 `https://api.openai.com/v1/audio/speech`。
 - 对其他 OpenAI 兼容 provider，PicoClaw 会尽量保留你提供的基础路径，只确保它最终以 `/audio/speech` 结尾。
 - 如果没有设置 `api_base`，并且模型前缀是已知 provider，PicoClaw 会自动使用该 provider 的默认地址。
 ## 常见错误
 - `voice.tts_model_name` 指向了一个不存在的 `model_list` 名称。
 - 在 `model_list` 里定义了 TTS 模型，但忘了在 `.security.yml` 中配置对应 API Key。
 - 误以为 PicoClaw 会自动支持 provider 自定义 voice 参数。
 - 使用了不兼容 OpenAI `/audio/speech` 请求格式的接口地址。
 ## 最小检查清单
 在测试 `send_tts` 之前，请确认：
 - `voice.tts_model_name` 能正确匹配某个 `model_list[].model_name`。
 - `.security.yml` 中对应条目已经配置了有效 API Key。
 - 你所选的 provider 支持 OpenAI 兼容的语音合成接口。
 - 你选择的模型本身确实支持 TTS。
--- a/pkg/audio/tts/mimo_tts.go
+++ b/pkg/audio/tts/mimo_tts.go
@ -0,0 +1,162 @@
 package tts
 import (
 	"bytes"
 	"context"
 	"encoding/base64"
 	"encoding/json"
 	"fmt"
 	"io"
 	"net/http"
 	"net/url"
 	"strings"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/logger"
 )
 type MimoTTSProvider struct {
 	apiKey     string
 	apiBase    string
 	voice      string
 	format     string
 	model      string
 	httpClient *http.Client
 }
 func NewMimoTTSProvider(apiKey string, apiBase string, model string, proxyURL string) *MimoTTSProvider {
 	if apiBase == "" {
 		apiBase = "https://api.xiaomimimo.com/v1/chat/completions"
 	} else {
 		if u, err := url.Parse(apiBase); err == nil && u.Scheme != "" && u.Host != "" {
 			path := u.Path
 			if u.Host == "api.xiaomimimo.com" {
 				if path == "" || path == "/" || path == "/v1" || path == "/v1/" {
 					path = "/v1/chat/completions"
 				} else {
 					if !strings.HasPrefix(path, "/") {
 						path = "/" + path
 					}
 					if !strings.HasPrefix(path, "/v1/") {
 						path = "/v1" + strings.TrimSuffix(path, "/")
 					}
 					if !strings.HasSuffix(path, "/chat/completions") {
 						path = strings.TrimSuffix(path, "/") + "/chat/completions"
 					}
 				}
 			} else {
 				if !strings.HasSuffix(path, "/chat/completions") {
 					path = strings.TrimSuffix(path, "/") + "/chat/completions"
 				}
 			}
 			u.Path = path
 			apiBase = u.String()
 		} else {
 			if apiBase == "https://api.xiaomimimo.com/v1" {
 				apiBase = "https://api.xiaomimimo.com/v1/chat/completions"
 			} else if !strings.HasSuffix(apiBase, "/chat/completions") {
 				apiBase = strings.TrimSuffix(apiBase, "/") + "/chat/completions"
 			}
 		}
 	}
 	model = strings.TrimSpace(model)
 	if model == "" {
 		model = "mimo-v2-tts"
 	}
 	client := &http.Client{Timeout: 60 * time.Second}
 	if proxyURL != "" {
 		if pURL, err := url.Parse(proxyURL); err == nil {
 			client.Transport = &http.Transport{Proxy: http.ProxyURL(pURL)}
 		} else {
 			logger.WarnF(
 				"NewMimoTTSProvider: invalid proxy URL; proceeding without proxy",
 				map[string]any{"proxyURL": proxyURL, "error": err},
 			)
 		}
 	}
 	return &MimoTTSProvider{
 		apiKey:     apiKey,
 		apiBase:    apiBase,
 		voice:      "default_zh", // mimo_default now seems to be an alias for default_en, which is not working for Chinese TTS. default_zh seems to work fine with both English and Chinese, and is likely the intended default for TTS.
 		format:     "mp3",
 		model:      model,
 		httpClient: client,
 	}
 }
 func (t *MimoTTSProvider) Name() string {
 	return "mimo-tts"
 }
 func (t *MimoTTSProvider) Synthesize(ctx context.Context, text string) (io.ReadCloser, error) {
 	logger.DebugCF("voice-tts", "Starting TTS synthesis", map[string]any{"text_len": len(text), "provider": t.Name()})
 	reqBody := map[string]any{
 		"model": t.model,
 		"messages": []map[string]string{
 			{"role": "assistant", "content": text},
 		},
 		"audio": map[string]string{
 			"format": t.format,
 			"voice":  t.voice,
 		},
 		"stream": false,
 	}
 	jsonData, err := json.Marshal(reqBody)
 	if err != nil {
 		return nil, fmt.Errorf("failed to marshal request: %w", err)
 	}
 	req, err := http.NewRequestWithContext(ctx, "POST", t.apiBase, bytes.NewReader(jsonData))
 	if err != nil {
 		return nil, fmt.Errorf("failed to create request: %w", err)
 	}
 	req.Header.Set("Content-Type", "application/json")
 	req.Header.Set("Api-Key", t.apiKey)
 	resp, err := t.httpClient.Do(req)
 	if err != nil {
 		return nil, fmt.Errorf("failed to send request: %w", err)
 	}
 	defer resp.Body.Close()
 	body, err := io.ReadAll(resp.Body)
 	if err != nil {
 		return nil, fmt.Errorf("failed to read response: %w", err)
 	}
 	if resp.StatusCode != http.StatusOK {
 		return nil, fmt.Errorf("API error (status %d): %s", resp.StatusCode, string(body))
 	}
 	var payload struct {
 		Choices []struct {
 			Message struct {
 				Audio struct {
 					Data string `json:"data"`
 				} `json:"audio"`
 			} `json:"message"`
 		} `json:"choices"`
 	}
 	err = json.Unmarshal(body, &payload)
 	if err != nil {
 		return nil, fmt.Errorf("failed to decode response: %w", err)
 	}
 	if len(payload.Choices) == 0 || payload.Choices[0].Message.Audio.Data == "" {
 		return nil, fmt.Errorf("invalid TTS response: missing audio data")
 	}
 	audioBytes, err := base64.StdEncoding.DecodeString(payload.Choices[0].Message.Audio.Data)
 	if err != nil {
 		return nil, fmt.Errorf("failed to decode audio data: %w", err)
 	}
 	return io.NopCloser(bytes.NewReader(audioBytes)), nil
 }
--- a/pkg/audio/tts/openai_tts.go
+++ b/pkg/audio/tts/openai_tts.go
@ -0,0 +1,126 @@
 package tts
 import (
 	"bytes"
 	"context"
 	"encoding/json"
 	"fmt"
 	"io"
 	"net/http"
 	"net/url"
 	"strings"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/logger"
 	"github.com/sipeed/picoclaw/pkg/providers/common"
 )
 type OpenAITTSProvider struct {
 	apiKey     string
 	apiBase    string
 	voice      string
 	model      string
 	httpClient *http.Client
 }
 func NewOpenAITTSProvider(apiKey string, apiBase string, proxyURL string, model string) *OpenAITTSProvider {
 	// Normalize apiBase to avoid malformed endpoints like
 	// "https://api.openai.com/audio/speech" when "/v1" is required.
 	if apiBase == "" {
 		apiBase = "https://api.openai.com/v1/audio/speech"
 	} else {
 		if u, err := url.Parse(apiBase); err == nil && u.Scheme != "" && u.Host != "" {
 			path := u.Path
 			if u.Host == "api.openai.com" {
 				// For the official OpenAI host, ensure exactly one /v1 prefix and
 				// that the path ends with /audio/speech.
 				if path == "" || path == "/" || path == "/v1" {
 					path = "/v1/audio/speech"
 				} else {
 					if !strings.HasPrefix(path, "/") {
 						path = "/" + path
 					}
 					if !strings.HasPrefix(path, "/v1/") {
 						path = "/v1" + strings.TrimSuffix(path, "/")
 					}
 					if !strings.HasSuffix(path, "/audio/speech") {
 						path = strings.TrimSuffix(path, "/") + "/audio/speech"
 					}
 				}
 			} else {
 				// For non-OpenAI hosts (e.g., proxies), preserve the existing base
 				// path and only ensure it ends with /audio/speech.
 				if !strings.HasSuffix(path, "/audio/speech") {
 					path = strings.TrimSuffix(path, "/") + "/audio/speech"
 				}
 			}
 			u.Path = path
 			apiBase = u.String()
 		} else {
 			// Fallback to the previous string-based behavior if parsing fails.
 			if apiBase == "https://api.openai.com/v1" {
 				apiBase = "https://api.openai.com/v1/audio/speech"
 			} else if !strings.HasSuffix(apiBase, "/audio/speech") {
 				// Just in case they provide openrouter base or standard base
 				apiBase = strings.TrimSuffix(apiBase, "/") + "/audio/speech"
 			}
 		}
 	}
 	client := common.NewHTTPClient(proxyURL)
 	client.Timeout = 60 * time.Second
 	model = strings.TrimSpace(model)
 	if model == "" {
 		model = "tts-1"
 	}
 	return &OpenAITTSProvider{
 		apiKey:     apiKey,
 		apiBase:    apiBase,
 		voice:      "alloy",
 		model:      model,
 		httpClient: client,
 	}
 }
 func (t *OpenAITTSProvider) Name() string {
 	return "openai-tts"
 }
 func (t *OpenAITTSProvider) Synthesize(ctx context.Context, text string) (io.ReadCloser, error) {
 	logger.DebugCF("voice-tts", "Starting TTS synthesis", map[string]any{"text_len": len(text)})
 	reqBody := map[string]any{
 		"model":           t.model,
 		"input":           text,
 		"voice":           t.voice,
 		"response_format": "opus",
 	}
 	jsonData, err := json.Marshal(reqBody)
 	if err != nil {
 		return nil, fmt.Errorf("failed to marshal request: %w", err)
 	}
 	req, err := http.NewRequestWithContext(ctx, "POST", t.apiBase, bytes.NewReader(jsonData))
 	if err != nil {
 		return nil, fmt.Errorf("failed to create request: %w", err)
 	}
 	req.Header.Set("Content-Type", "application/json")
 	req.Header.Set("Authorization", "Bearer "+t.apiKey)
 	resp, err := t.httpClient.Do(req)
 	if err != nil {
 		return nil, fmt.Errorf("failed to send request: %w", err)
 	}
 	if resp.StatusCode != http.StatusOK {
 		defer resp.Body.Close()
 		body, _ := io.ReadAll(resp.Body)
 		return nil, fmt.Errorf("API error (status %d): %s", resp.StatusCode, string(body))
 	}
 	return resp.Body, nil
 }
--- a/pkg/audio/tts/tts.go
+++ b/pkg/audio/tts/tts.go
@ -0,0 +1,151 @@
 package tts
 import (
 	"context"
 	"fmt"
 	"io"
 	"os"
 	"path/filepath"
 	"strings"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/media"
 	"github.com/sipeed/picoclaw/pkg/providers"
 )
 type TTSProvider interface {
 	Name() string
 	Synthesize(ctx context.Context, text string) (io.ReadCloser, error)
 }
 func providerFromModelConfig(mc *config.ModelConfig) TTSProvider {
 	if mc == nil || mc.APIKey() == "" {
 		return nil
 	}
 	protocol, modelID := providers.ExtractProtocol(mc.Model)
 	if modelID == "" {
 		modelID = strings.TrimSpace(mc.Model)
 	}
 	switch protocol {
 	case "mimo":
 		return NewMimoTTSProvider(mc.APIKey(), providers.ResolveAPIBase(mc), modelID, mc.Proxy)
 	default:
 		return NewOpenAITTSProvider(mc.APIKey(), providers.ResolveAPIBase(mc), mc.Proxy, modelID)
 	}
 }
 func DetectTTS(cfg *config.Config) TTSProvider {
 	if cfg == nil {
 		return nil
 	}
 	if modelName := strings.TrimSpace(cfg.Voice.TTSModelName); modelName != "" {
 		if mc, err := cfg.GetModelConfig(modelName); err == nil {
 			if provider := providerFromModelConfig(mc); provider != nil {
 				return provider
 			}
 		}
 	}
 	for _, mc := range cfg.ModelList {
 		if strings.Contains(strings.ToLower(mc.Model), "tts") && mc.APIKey() != "" {
 			if provider := providerFromModelConfig(mc); provider != nil {
 				return provider
 			}
 		}
 	}
 	return nil
 }
 // SynthesizeAndStore synthesizes text to speech and registers it in the media store, returning the media reference.
 func SynthesizeAndStore(
 	ctx context.Context,
 	provider TTSProvider,
 	store media.MediaStore,
 	text string,
 	filename string,
 	channel string,
 	chatID string,
 ) (string, error) {
 	if provider == nil {
 		return "", fmt.Errorf("tts provider is not configured")
 	}
 	if store == nil {
 		return "", fmt.Errorf("media store not configured")
 	}
 	if channel == "" || chatID == "" {
 		return "", fmt.Errorf("no target channel/chat available")
 	}
 	if strings.TrimSpace(text) == "" {
 		return "", fmt.Errorf("text is required")
 	}
 	stream, err := provider.Synthesize(ctx, text)
 	if err != nil {
 		return "", fmt.Errorf("tts synthesize failed: %w", err)
 	}
 	defer stream.Close()
 	err = os.MkdirAll(media.TempDir(), 0o700)
 	if err != nil {
 		return "", fmt.Errorf("failed to create media temp dir: %w", err)
 	}
 	fileExt := ".ogg"
 	contentType := "audio/ogg"
 	if provider.Name() == "mimo-tts" {
 		fileExt = ".mp3"
 		contentType = "audio/mpeg"
 	}
 	file, err := os.CreateTemp(media.TempDir(), "tts-*"+fileExt)
 	if err != nil {
 		return "", fmt.Errorf("failed to create temp file: %w", err)
 	}
 	removeTemp := true
 	defer func() {
 		if removeTemp {
 			_ = os.Remove(file.Name())
 		}
 	}()
 	_, err = io.Copy(file, stream)
 	if err != nil {
 		file.Close()
 		return "", fmt.Errorf("failed to write tts audio: %w", err)
 	}
 	err = file.Close()
 	if err != nil {
 		return "", fmt.Errorf("failed to close tts audio file: %w", err)
 	}
 	filename = strings.TrimSpace(filename)
 	if filename == "" {
 		filename = fmt.Sprintf("tts-%d%s", time.Now().Unix(), fileExt)
 	}
 	ext := strings.ToLower(filepath.Ext(filename))
 	if ext == "" {
 		filename += fileExt
 	} else if ext != fileExt {
 		filename = strings.TrimSuffix(filename, filepath.Ext(filename)) + fileExt
 	}
 	scope := fmt.Sprintf("tool:send_tts:%s:%s:%d", channel, chatID, time.Now().UnixNano())
 	ref, err := store.Store(file.Name(), media.MediaMeta{
 		Filename:    filename,
 		ContentType: contentType,
 		Source:      "tool:send_tts",
 	}, scope)
 	if err != nil {
 		return "", fmt.Errorf("failed to register audio: %w", err)
 	}
 	removeTemp = false
 	return ref, nil
 }
--- a/pkg/audio/tts/tts_test.go
+++ b/pkg/audio/tts/tts_test.go
@ -0,0 +1,247 @@
 package tts
 import (
 	"context"
 	"encoding/json"
 	"io"
 	"net/http"
 	"net/http/httptest"
 	"path/filepath"
 	"strings"
 	"testing"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/media"
 )
 func TestNewOpenAITTSProvider_APIBaseNormalization(t *testing.T) {
 	t.Parallel()
 	cases := []struct {
 		name   string
 		input  string
 		expect string
 	}{
 		{
 			name:   "empty base",
 			input:  "",
 			expect: "https://api.openai.com/v1/audio/speech",
 		},
 		{
 			name:   "official host no path",
 			input:  "https://api.openai.com",
 			expect: "https://api.openai.com/v1/audio/speech",
 		},
 		{
 			name:   "official host v1",
 			input:  "https://api.openai.com/v1",
 			expect: "https://api.openai.com/v1/audio/speech",
 		},
 		{
 			name:   "official host v1 slash",
 			input:  "https://api.openai.com/v1/",
 			expect: "https://api.openai.com/v1/audio/speech",
 		},
 		{
 			name:   "non-openai host preserves base path",
 			input:  "https://proxy.example.com/base",
 			expect: "https://proxy.example.com/base/audio/speech",
 		},
 	}
 	for _, tc := range cases {
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			provider := NewOpenAITTSProvider("key", tc.input, "", "")
 			if provider.apiBase != tc.expect {
 				t.Fatalf("apiBase mismatch: got %q, want %q", provider.apiBase, tc.expect)
 			}
 		})
 	}
 }
 func TestOpenAITTSProvider_SynthesizeSuccess(t *testing.T) {
 	t.Parallel()
 	var gotPath string
 	var gotAuth string
 	var gotContentType string
 	var gotBody map[string]any
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		gotPath = r.URL.Path
 		gotAuth = r.Header.Get("Authorization")
 		gotContentType = r.Header.Get("Content-Type")
 		bodyBytes, _ := io.ReadAll(r.Body)
 		_ = r.Body.Close()
 		_ = json.Unmarshal(bodyBytes, &gotBody)
 		w.WriteHeader(http.StatusOK)
 		_, _ = w.Write([]byte("audio-bytes"))
 	}))
 	defer server.Close()
 	provider := NewOpenAITTSProvider("k123", server.URL, "", "")
 	stream, err := provider.Synthesize(context.Background(), "hello")
 	if err != nil {
 		t.Fatalf("Synthesize failed: %v", err)
 	}
 	defer stream.Close()
 	data, err := io.ReadAll(stream)
 	if err != nil {
 		t.Fatalf("read stream failed: %v", err)
 	}
 	if gotPath != "/audio/speech" {
 		t.Fatalf("request path mismatch: got %q", gotPath)
 	}
 	if gotAuth != "Bearer k123" {
 		t.Fatalf("authorization mismatch: got %q", gotAuth)
 	}
 	if gotContentType != "application/json" {
 		t.Fatalf("content-type mismatch: got %q", gotContentType)
 	}
 	if gotBody["model"] != "tts-1" || gotBody["voice"] != "alloy" || gotBody["response_format"] != "opus" ||
 		gotBody["input"] != "hello" {
 		bodyJSON, _ := json.Marshal(gotBody)
 		t.Fatalf("request body mismatch: %s", string(bodyJSON))
 	}
 	if string(data) != "audio-bytes" {
 		t.Fatalf("response body mismatch: got %q", string(data))
 	}
 }
 func TestOpenAITTSProvider_SynthesizeNon200(t *testing.T) {
 	t.Parallel()
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		w.WriteHeader(http.StatusInternalServerError)
 		_, _ = w.Write([]byte("nope"))
 	}))
 	defer server.Close()
 	provider := NewOpenAITTSProvider("k123", server.URL, "", "")
 	_, err := provider.Synthesize(context.Background(), "hello")
 	if err == nil {
 		t.Fatal("expected error")
 	}
 	if !strings.Contains(err.Error(), "API error (status 500): nope") {
 		t.Fatalf("unexpected error: %v", err)
 	}
 }
 func TestNewOpenAITTSProvider_UsesConfiguredModel(t *testing.T) {
 	t.Parallel()
 	provider := NewOpenAITTSProvider("key", "https://api.xiaomimimo.com/v1", "", "mimo-v2-tts")
 	if provider.model != "mimo-v2-tts" {
 		t.Fatalf("model mismatch: got %q, want %q", provider.model, "mimo-v2-tts")
 	}
 	if provider.apiBase != "https://api.xiaomimimo.com/v1/audio/speech" {
 		t.Fatalf("apiBase mismatch: got %q", provider.apiBase)
 	}
 }
 func TestDetectTTS_UsesMimoProviderForMimoModels(t *testing.T) {
 	t.Parallel()
 	provider := DetectTTS(&config.Config{
 		Voice: config.VoiceConfig{TTSModelName: "mimo-tts"},
 		ModelList: []*config.ModelConfig{
 			{
 				ModelName: "mimo-tts",
 				Model:     "mimo/mimo-v2-tts",
 				APIKeys:   config.SimpleSecureStrings("sk-mimo"),
 			},
 		},
 	})
 	ttsProvider, ok := provider.(*MimoTTSProvider)
 	if !ok {
 		t.Fatalf("DetectTTS() type = %T, want *MimoTTSProvider", provider)
 	}
 	if ttsProvider.model != "mimo-v2-tts" {
 		t.Fatalf("model mismatch: got %q, want %q", ttsProvider.model, "mimo-v2-tts")
 	}
 	if ttsProvider.apiBase != "https://api.xiaomimimo.com/v1/chat/completions" {
 		t.Fatalf("apiBase mismatch: got %q", ttsProvider.apiBase)
 	}
 }
 type stubTTSProvider struct {
 	name string
 }
 func (s stubTTSProvider) Name() string {
 	return s.name
 }
 func (s stubTTSProvider) Synthesize(ctx context.Context, text string) (io.ReadCloser, error) {
 	return io.NopCloser(strings.NewReader("audio")), nil
 }
 func TestSynthesizeAndStore_UsesOggMetadataByDefault(t *testing.T) {
 	t.Parallel()
 	store := media.NewFileMediaStore()
 	ref, err := SynthesizeAndStore(
 		context.Background(),
 		stubTTSProvider{name: "openai-tts"},
 		store,
 		"hello",
 		"",
 		"discord",
 		"chat123",
 	)
 	if err != nil {
 		t.Fatalf("SynthesizeAndStore failed: %v", err)
 	}
 	path, meta, err := store.ResolveWithMeta(ref)
 	if err != nil {
 		t.Fatalf("ResolveWithMeta failed: %v", err)
 	}
 	if meta.ContentType != "audio/ogg" {
 		t.Fatalf("ContentType = %q, want %q", meta.ContentType, "audio/ogg")
 	}
 	if filepath.Ext(path) != ".ogg" {
 		t.Fatalf("stored file extension = %q, want %q", filepath.Ext(path), ".ogg")
 	}
 	if filepath.Ext(meta.Filename) != ".ogg" {
 		t.Fatalf("filename extension = %q, want %q", filepath.Ext(meta.Filename), ".ogg")
 	}
 }
 func TestSynthesizeAndStore_UsesMp3MetadataForMimo(t *testing.T) {
 	t.Parallel()
 	store := media.NewFileMediaStore()
 	ref, err := SynthesizeAndStore(
 		context.Background(),
 		stubTTSProvider{name: "mimo-tts"},
 		store,
 		"hello",
 		"",
 		"discord",
 		"chat123",
 	)
 	if err != nil {
 		t.Fatalf("SynthesizeAndStore failed: %v", err)
 	}
 	path, meta, err := store.ResolveWithMeta(ref)
 	if err != nil {
 		t.Fatalf("ResolveWithMeta failed: %v", err)
 	}
 	if meta.ContentType != "audio/mpeg" {
 		t.Fatalf("ContentType = %q, want %q", meta.ContentType, "audio/mpeg")
 	}
 	if filepath.Ext(path) != ".mp3" {
 		t.Fatalf("stored file extension = %q, want %q", filepath.Ext(path), ".mp3")
 	}
 	if filepath.Ext(meta.Filename) != ".mp3" {
 		t.Fatalf("filename extension = %q, want %q", filepath.Ext(meta.Filename), ".mp3")
 	}
 }
--- a/pkg/bus/bus.go
+++ b/pkg/bus/bus.go
@ -34,6 +34,8 @@ type MessageBus struct {
 	inbound       chan InboundMessage
 	outbound      chan OutboundMessage
 	outboundMedia chan OutboundMediaMessage
 	audioChunks   chan AudioChunk
 	voiceControls chan VoiceControl
 	closeOnce      sync.Once
 	done           chan struct{}
@ -47,6 +49,8 @@ func NewMessageBus() *MessageBus {
 		inbound:       make(chan InboundMessage, defaultBusBufferSize),
 		outbound:      make(chan OutboundMessage, defaultBusBufferSize),
 		outboundMedia: make(chan OutboundMediaMessage, defaultBusBufferSize),
 		audioChunks:   make(chan AudioChunk, defaultBusBufferSize*4), // Audio chunks need more buffer
 		voiceControls: make(chan VoiceControl, defaultBusBufferSize),
 		done:          make(chan struct{}),
 	}
 }
@ -103,6 +107,22 @@ func (mb *MessageBus) OutboundMediaChan() <-chan OutboundMediaMessage {
 	return mb.outboundMedia
 }
 func (mb *MessageBus) PublishAudioChunk(ctx context.Context, chunk AudioChunk) error {
 	return publish(ctx, mb, mb.audioChunks, chunk)
 }
 func (mb *MessageBus) AudioChunksChan() <-chan AudioChunk {
 	return mb.audioChunks
 }
 func (mb *MessageBus) PublishVoiceControl(ctx context.Context, ctrl VoiceControl) error {
 	return publish(ctx, mb, mb.voiceControls, ctrl)
 }
 func (mb *MessageBus) VoiceControlsChan() <-chan VoiceControl {
 	return mb.voiceControls
 }
 // SetStreamDelegate registers a StreamDelegate (typically the channel Manager).
 func (mb *MessageBus) SetStreamDelegate(d StreamDelegate) {
 	mb.streamDelegate.Store(d)
@ -132,6 +152,8 @@ func (mb *MessageBus) Close() {
 		close(mb.inbound)
 		close(mb.outbound)
 		close(mb.outboundMedia)
 		close(mb.audioChunks)
 		close(mb.voiceControls)
 		// clean up any remaining messages in channels
 		drained := 0
@ -144,6 +166,12 @@ func (mb *MessageBus) Close() {
 		for range mb.outboundMedia {
 			drained++
 		}
 		for range mb.audioChunks {
 			drained++
 		}
 		for range mb.voiceControls {
 			drained++
 		}
 		if drained > 0 {
 			logger.DebugCF("bus", "Drained buffered messages during close", map[string]any{
--- a/pkg/bus/types.go
+++ b/pkg/bus/types.go
@ -34,6 +34,7 @@ type OutboundMessage struct {
 	ChatID           string            `json:"chat_id"`
 	Content          string            `json:"content"`
 	ReplyToMessageID string            `json:"reply_to_message_id,omitempty"`
 	Metadata         map[string]string `json:"metadata,omitempty"`
 }
 // MediaPart describes a single media attachment to send.
@ -51,3 +52,25 @@ type OutboundMediaMessage struct {
 	ChatID  string      `json:"chat_id"`
 	Parts   []MediaPart `json:"parts"`
 }
 // AudioChunk represents a chunk of streaming voice data.
 type AudioChunk struct {
 	SessionID  string `json:"session_id"`
 	SpeakerID  string `json:"speaker_id"` // User ID or SSRC
 	ChatID     string `json:"chat_id"`    // Where to respond
 	Channel    string `json:"channel"`    // Source channel type (e.g. "discord")
 	Sequence   uint64 `json:"sequence"`
 	Timestamp  uint32 `json:"timestamp"`
 	SampleRate int    `json:"sample_rate"`
 	Channels   int    `json:"channels"`
 	Format     string `json:"format"` // "opus", "pcm", etc
 	Data       []byte `json:"data"`
 }
 // VoiceControl represents state or commands for voice sessions.
 type VoiceControl struct {
 	SessionID string `json:"session_id"`
 	ChatID    string `json:"chat_id"`
 	Type      string `json:"type"`   // "state", "command"
 	Action    string `json:"action"` // "idle", "listening", "start", "stop", "leave"
 }
--- a/pkg/channels/README.md
+++ b/pkg/channels/README.md
@ -252,28 +252,28 @@ func (c *TelegramChannel) Stop(ctx context.Context) error {
 **3e. Send method error returns**
 ```go
-// Old code: returns plain error
+// Old code: returned only error
 func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
    if !c.running { return fmt.Errorf("not running") }
    // ...
    if err != nil { return err }
 }
-// New code: must return sentinel errors for Manager to determine retry strategy
+// New code: return delivered message IDs plus sentinel errors
-func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
    if !c.IsRunning() {
-        return channels.ErrNotRunning    // ← Manager will not retry
+        return nil, channels.ErrNotRunning    // ← Manager will not retry
    }
    // ...
    if err != nil {
        // Use ClassifySendError to wrap error based on HTTP status code
-        return channels.ClassifySendError(statusCode, err)
+        return nil, channels.ClassifySendError(statusCode, err)
        // Or manually wrap:
-        // return fmt.Errorf("%w: %v", channels.ErrTemporary, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrTemporary, err)
-        // return fmt.Errorf("%w: %v", channels.ErrRateLimit, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrRateLimit, err)
-        // return fmt.Errorf("%w: %v", channels.ErrSendFailed, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrSendFailed, err)
    }
-    return nil
+    return []string{deliveredID}, nil // or return nil, nil if IDs are unavailable
 }
 ```
@ -502,25 +502,25 @@ func (c *MatrixChannel) Stop(ctx context.Context) error {
    return nil
 }
-func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
    // 1. Check running state
    if !c.IsRunning() {
-        return channels.ErrNotRunning
+        return nil, channels.ErrNotRunning
    }
    // 2. Send message to Matrix
-    err := c.sendToMatrix(ctx, msg.ChatID, msg.Content)
+    eventID, err := c.sendToMatrix(ctx, msg.ChatID, msg.Content)
    if err != nil {
        // 3. Must use error classification wrapping
        //    If you have an HTTP status code:
-        //    return channels.ClassifySendError(statusCode, err)
+        //    return nil, channels.ClassifySendError(statusCode, err)
        //    If it's a network error:
-        //    return channels.ClassifyNetError(err)
+        //    return nil, channels.ClassifyNetError(err)
        //    If manual classification is needed:
-        return fmt.Errorf("%w: %v", channels.ErrTemporary, err)
+        return nil, fmt.Errorf("%w: %v", channels.ErrTemporary, err)
    }
-    return nil
+    return []string{eventID}, nil
 }
 // ========== Incoming Message Handling ==========
@ -580,9 +580,9 @@ func (c *MatrixChannel) handleIncoming(roomID, senderID, displayName, content st
 // ========== Internal Methods ==========
-func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string) error {
+func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string) (string, error) {
    // Actual Matrix SDK call
-    return nil
+    return "event-id", nil
 }
 ```
@ -594,16 +594,17 @@ Depending on platform capabilities, your channel can optionally implement the fo
 ```go
 // If the platform supports sending images/files/audio/video
-func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
    if !c.IsRunning() {
-        return channels.ErrNotRunning
+        return nil, channels.ErrNotRunning
    }
    store := c.GetMediaStore()
    if store == nil {
-        return fmt.Errorf("no media store: %w", channels.ErrSendFailed)
+        return nil, fmt.Errorf("no media store: %w", channels.ErrSendFailed)
    }
    var messageIDs []string
    for _, part := range msg.Parts {
        localPath, err := store.Resolve(part.Ref)
        if err != nil {
@ -620,8 +621,10 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
        default:
            // Upload file to Matrix
        }
        // Append platform IDs here when the API returns them.
        // messageIDs = append(messageIDs, uploadedMessageID)
    }
-    return nil
+    return messageIDs, nil
 }
 ```
@ -1270,7 +1273,7 @@ type Channel interface {
    Name() string
    Start(ctx context.Context) error
    Stop(ctx context.Context) error
-    Send(ctx context.Context, msg bus.OutboundMessage) error
+    Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error)
    IsRunning() bool
    IsAllowed(senderID string) bool
    IsAllowedSender(sender bus.SenderInfo) bool
@ -1279,7 +1282,7 @@ type Channel interface {
 // ===== Optional =====
 type MediaSender interface {
-    SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error
+    SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error)
 }
 type TypingCapable interface {
--- a/pkg/channels/README.zh.md
+++ b/pkg/channels/README.zh.md
@ -252,28 +252,28 @@ func (c *TelegramChannel) Stop(ctx context.Context) error {
 **3e. Send 方法的错误返回**
 ```go
-// 旧代码：返回普通 error
+// 旧代码：只返回 error
 func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
    if !c.running { return fmt.Errorf("not running") }
    // ...
    if err != nil { return err }
 }
-// 新代码：必须返回哨兵错误，供 Manager 判断重试策略
+// 新代码：返回投递后的消息 ID，以及供 Manager 判断重试策略的哨兵错误
-func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
    if !c.IsRunning() {
-        return channels.ErrNotRunning    // ← Manager 不会重试
+        return nil, channels.ErrNotRunning    // ← Manager 不会重试
    }
    // ...
    if err != nil {
        // 使用 ClassifySendError 根据 HTTP 状态码包装错误
-        return channels.ClassifySendError(statusCode, err)
+        return nil, channels.ClassifySendError(statusCode, err)
        // 或手动包装：
-        // return fmt.Errorf("%w: %v", channels.ErrTemporary, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrTemporary, err)
-        // return fmt.Errorf("%w: %v", channels.ErrRateLimit, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrRateLimit, err)
-        // return fmt.Errorf("%w: %v", channels.ErrSendFailed, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrSendFailed, err)
    }
-    return nil
+    return []string{deliveredID}, nil // 如果拿不到 ID，也可以返回 nil, nil
 }
 ```
@ -502,25 +502,25 @@ func (c *MatrixChannel) Stop(ctx context.Context) error {
    return nil
 }
-func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
    // 1. 检查运行状态
    if !c.IsRunning() {
-        return channels.ErrNotRunning
+        return nil, channels.ErrNotRunning
    }
    // 2. 发送消息到 Matrix
-    err := c.sendToMatrix(ctx, msg.ChatID, msg.Content)
+    eventID, err := c.sendToMatrix(ctx, msg.ChatID, msg.Content)
    if err != nil {
        // 3. 必须使用错误分类包装
        //    如果你有 HTTP 状态码：
-        //    return channels.ClassifySendError(statusCode, err)
+        //    return nil, channels.ClassifySendError(statusCode, err)
        //    如果是网络错误：
-        //    return channels.ClassifyNetError(err)
+        //    return nil, channels.ClassifyNetError(err)
        //    如果需要手动分类：
-        return fmt.Errorf("%w: %v", channels.ErrTemporary, err)
+        return nil, fmt.Errorf("%w: %v", channels.ErrTemporary, err)
    }
-    return nil
+    return []string{eventID}, nil
 }
 // ========== 消息接收处理 ==========
@ -580,9 +580,9 @@ func (c *MatrixChannel) handleIncoming(roomID, senderID, displayName, content st
 // ========== 内部方法 ==========
-func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string) error {
+func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string) (string, error) {
    // 实际的 Matrix SDK 调用
-    return nil
+    return "event-id", nil
 }
 ```
@ -594,16 +594,17 @@ func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string
 ```go
 // 如果平台支持发送图片/文件/音频/视频
-func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
    if !c.IsRunning() {
-        return channels.ErrNotRunning
+        return nil, channels.ErrNotRunning
    }
    store := c.GetMediaStore()
    if store == nil {
-        return fmt.Errorf("no media store: %w", channels.ErrSendFailed)
+        return nil, fmt.Errorf("no media store: %w", channels.ErrSendFailed)
    }
    var messageIDs []string
    for _, part := range msg.Parts {
        localPath, err := store.Resolve(part.Ref)
        if err != nil {
@ -620,8 +621,10 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
        default:
            // 上传文件到 Matrix
        }
        // 如果 API 能返回平台消息 ID，就在这里追加。
        // messageIDs = append(messageIDs, uploadedMessageID)
    }
-    return nil
+    return messageIDs, nil
 }
 ```
@ -1269,7 +1272,7 @@ type Channel interface {
    Name() string
    Start(ctx context.Context) error
    Stop(ctx context.Context) error
-    Send(ctx context.Context, msg bus.OutboundMessage) error
+    Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error)
    IsRunning() bool
    IsAllowed(senderID string) bool
    IsAllowedSender(sender bus.SenderInfo) bool
@ -1278,7 +1281,7 @@ type Channel interface {
 // ===== 可选实现 =====
 type MediaSender interface {
-    SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error
+    SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error)
 }
 type TypingCapable interface {
--- a/pkg/channels/base.go
+++ b/pkg/channels/base.go
@ -48,7 +48,7 @@ type Channel interface {
 	Name() string
 	Start(ctx context.Context) error
 	Stop(ctx context.Context) error
-	Send(ctx context.Context, msg bus.OutboundMessage) error
+	Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error)
 	IsRunning() bool
 	IsAllowed(senderID string) bool
 	IsAllowedSender(sender bus.SenderInfo) bool
@ -112,6 +112,18 @@ func NewBaseChannel(
 	for _, opt := range opts {
 		opt(bc)
 	}
 	// Security Audit: Check for open-by-default (unsecured) channels.
 	// PicoClaw aims to be secure-by-default. If allow_from is empty, the bot
 	// currently defaults to accepting messages from ANYONE. To explicitly
 	// acknowledge and permit this (e.g. for a public bot), use ["*"].
 	if len(bc.allowList) == 0 {
 		logger.WarnCF("channels", "SECURITY: Channel allows EVERYONE (allow_from is empty)", map[string]any{
 			"channel": bc.name,
 			"hint":    "Set allow_from to your ID, or use '*' to explicitly acknowledge open access.",
 		})
 	}
 	return bc
 }
@ -187,6 +199,9 @@ func (c *BaseChannel) IsAllowed(senderID string) bool {
 	}
 	for _, allowed := range c.allowList {
 		if allowed == "*" {
 			return true
 		}
 		// Strip leading "@" from allowed value for username matching
 		trimmed := strings.TrimPrefix(allowed, "@")
 		allowedID := trimmed
@ -221,7 +236,7 @@ func (c *BaseChannel) IsAllowedSender(sender bus.SenderInfo) bool {
 	}
 	for _, allowed := range c.allowList {
-		if identity.MatchAllowed(sender, allowed) {
+		if allowed == "*" || identity.MatchAllowed(sender, allowed) {
 			return true
 		}
 	}
--- a/pkg/channels/dingtalk/dingtalk.go
+++ b/pkg/channels/dingtalk/dingtalk.go
@ -104,20 +104,20 @@ func (c *DingTalkChannel) Stop(ctx context.Context) error {
 }
 // Send sends a message to DingTalk via the chatbot reply API
-func (c *DingTalkChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *DingTalkChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	// Get session webhook from storage
 	sessionWebhookRaw, ok := c.sessionWebhooks.Load(msg.ChatID)
 	if !ok {
-		return fmt.Errorf("no session_webhook found for chat %s, cannot send message", msg.ChatID)
+		return nil, fmt.Errorf("no session_webhook found for chat %s, cannot send message", msg.ChatID)
 	}
 	sessionWebhook, ok := sessionWebhookRaw.(string)
 	if !ok {
-		return fmt.Errorf("invalid session_webhook type for chat %s", msg.ChatID)
+		return nil, fmt.Errorf("invalid session_webhook type for chat %s", msg.ChatID)
 	}
 	logger.DebugCF("dingtalk", "Sending message", map[string]any{
@ -126,7 +126,7 @@ func (c *DingTalkChannel) Send(ctx context.Context, msg bus.OutboundMessage) err
 	})
 	// Use the session webhook to send the reply
-	return c.SendDirectReply(ctx, sessionWebhook, msg.Content)
+	return nil, c.SendDirectReply(ctx, sessionWebhook, msg.Content)
 }
 // onChatBotMessageReceived implements the IChatBotMessageHandler function signature
--- a/pkg/channels/discord/discord.go
+++ b/pkg/channels/discord/discord.go
@ -3,6 +3,7 @@ package discord
 import (
 	"context"
 	"fmt"
 	"io"
 	"net/http"
 	"net/url"
 	"os"
@ -14,6 +15,8 @@ import (
 	"github.com/bwmarrin/discordgo"
 	"github.com/gorilla/websocket"
 	"github.com/sipeed/picoclaw/pkg/audio"
 	"github.com/sipeed/picoclaw/pkg/audio/tts"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/channels"
 	"github.com/sipeed/picoclaw/pkg/config"
@ -42,6 +45,15 @@ type DiscordChannel struct {
 	typingMu   sync.Mutex
 	typingStop map[string]chan struct{} // chatID → stop signal
 	botUserID  string                   // stored for mention checking
 	bus        *bus.MessageBus
 	tts        tts.TTSProvider
 	voiceMu    sync.RWMutex
 	voiceSSRC  map[string]map[uint32]string // guildID -> ssrc -> userID
 	// TTS interruption: cancel active playback when user speaks
 	ttsMu     sync.Mutex
 	cancelTTS context.CancelFunc
 	ttsPlayID uint64
 }
 func NewDiscordChannel(cfg config.DiscordConfig, bus *bus.MessageBus) (*DiscordChannel, error) {
@ -73,6 +85,8 @@ func NewDiscordChannel(cfg config.DiscordConfig, bus *bus.MessageBus) (*DiscordC
 		config:      cfg,
 		ctx:         context.Background(),
 		typingStop:  make(map[string]chan struct{}),
 		bus:         bus,
 		voiceSSRC:   make(map[string]map[uint32]string),
 	}, nil
 }
@ -90,6 +104,8 @@ func (c *DiscordChannel) Start(ctx context.Context) error {
 	c.session.AddHandler(c.handleMessage)
 	go c.listenVoiceControl(c.ctx)
 	if err := c.session.Open(); err != nil {
 		return fmt.Errorf("failed to open discord session: %w", err)
 	}
@ -128,37 +144,60 @@ func (c *DiscordChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *DiscordChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *DiscordChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	channelID := msg.ChatID
 	if channelID == "" {
-		return fmt.Errorf("channel ID is empty")
+		return nil, fmt.Errorf("channel ID is empty")
 	}
 	if len([]rune(msg.Content)) == 0 {
-		return nil
+		return nil, nil
 	}
-	return c.sendChunk(ctx, channelID, msg.Content, msg.ReplyToMessageID)
+	if c.tts != nil {
 		if ch, err := c.session.State.Channel(channelID); err == nil && ch.GuildID != "" {
 			if vc, ok := c.session.VoiceConnections[ch.GuildID]; ok && vc != nil {
 				// Cancel any previous TTS playback
 				c.ttsMu.Lock()
 				if c.cancelTTS != nil {
 					c.cancelTTS()
 				}
 				ttsCtx, ttsCancel := context.WithCancel(c.ctx)
 				c.ttsPlayID++
 				playID := c.ttsPlayID
 				c.cancelTTS = ttsCancel
 				c.ttsMu.Unlock()
 				go c.playTTS(ttsCtx, vc, msg.Content, playID)
 			}
 		}
 	}
 	msgID, err := c.sendChunk(ctx, channelID, msg.Content, msg.ReplyToMessageID)
 	if err != nil {
 		return nil, err
 	}
 	return []string{msgID}, nil
 }
 // SendMedia implements the channels.MediaSender interface.
-func (c *DiscordChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *DiscordChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	channelID := msg.ChatID
 	if channelID == "" {
-		return fmt.Errorf("channel ID is empty")
+		return nil, fmt.Errorf("channel ID is empty")
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	// Collect all files into a single ChannelMessageSendComplex call
@ -202,33 +241,41 @@ func (c *DiscordChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMes
 	}
 	if len(files) == 0 {
-		return nil
+		return nil, nil
 	}
 	sendCtx, cancel := context.WithTimeout(ctx, sendTimeout)
 	defer cancel()
-	done := make(chan error, 1)
+	type mediaResult struct {
 		id  string
 		err error
 	}
 	done := make(chan mediaResult, 1)
 	go func() {
-		_, err := c.session.ChannelMessageSendComplex(channelID, &discordgo.MessageSend{
+		sentMsg, err := c.session.ChannelMessageSendComplex(channelID, &discordgo.MessageSend{
 			Content: caption,
 			Files:   files,
 		})
-		done <- err
+		if err != nil {
 			done <- mediaResult{err: err}
 			return
 		}
 		done <- mediaResult{id: sentMsg.ID}
 	}()
 	select {
-	case err := <-done:
+	case r := <-done:
 		// Close all file readers
 		for _, f := range files {
 			if closer, ok := f.Reader.(*os.File); ok {
 				closer.Close()
 			}
 		}
-		if err != nil {
+		if r.err != nil {
-			return fmt.Errorf("discord send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("discord send media: %w", channels.ErrTemporary)
 		}
-		return nil
+		return []string{r.id}, nil
 	case <-sendCtx.Done():
 		// Close all file readers
 		for _, f := range files {
@ -236,7 +283,7 @@ func (c *DiscordChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMes
 				closer.Close()
 			}
 		}
-		return sendCtx.Err()
+		return nil, sendCtx.Err()
 	}
 }
@ -264,18 +311,25 @@ func (c *DiscordChannel) SendPlaceholder(ctx context.Context, chatID string) (st
 	return msg.ID, nil
 }
-func (c *DiscordChannel) sendChunk(ctx context.Context, channelID, content, replyToID string) error {
+func (c *DiscordChannel) sendChunk(ctx context.Context, channelID, content, replyToID string) (string, error) {
 	// Use the passed ctx for timeout control
 	sendCtx, cancel := context.WithTimeout(ctx, sendTimeout)
 	defer cancel()
-	done := make(chan error, 1)
+	type result struct {
 		id  string
 		err error
 	}
 	done := make(chan result, 1)
 	go func() {
-		var err error
+		var (
 			msg *discordgo.Message
 			err error
 		)
 		// If we have an ID, we send the message as "Reply"
 		if replyToID != "" {
-			_, err = c.session.ChannelMessageSendComplex(channelID, &discordgo.MessageSend{
+			msg, err = c.session.ChannelMessageSendComplex(channelID, &discordgo.MessageSend{
 				Content: content,
 				Reference: &discordgo.MessageReference{
 					MessageID: replyToID,
@ -284,20 +338,21 @@ func (c *DiscordChannel) sendChunk(ctx context.Context, channelID, content, repl
 			})
 		} else {
 			// Otherwise, we send a normal message
-			_, err = c.session.ChannelMessageSend(channelID, content)
+			msg, err = c.session.ChannelMessageSend(channelID, content)
 		}
-		done <- err
+		if err != nil {
 			done <- result{err: fmt.Errorf("discord send: %w", channels.ErrTemporary)}
 			return
 		}
 		done <- result{id: msg.ID}
 	}()
 	select {
-	case err := <-done:
+	case r := <-done:
-		if err != nil {
+		return r.id, r.err
 			return fmt.Errorf("discord send: %w", channels.ErrTemporary)
 		}
 		return nil
 	case <-sendCtx.Done():
-		return sendCtx.Err()
+		return "", sendCtx.Err()
 	}
 }
@ -339,6 +394,10 @@ func (c *DiscordChannel) handleMessage(s *discordgo.Session, m *discordgo.Messag
 		return
 	}
 	if c.handleVoiceCommand(s, m) {
 		return
 	}
 	content := m.Content
 	// In guild (group) channels, apply unified group trigger filtering
@ -610,3 +669,134 @@ func (c *DiscordChannel) stripBotMention(text string) string {
 	text = strings.ReplaceAll(text, fmt.Sprintf("<@!%s>", c.botUserID), "")
 	return strings.TrimSpace(text)
 }
 func (c *DiscordChannel) listenVoiceControl(ctx context.Context) {
 	for {
 		select {
 		case <-ctx.Done():
 			return
 		case ctrl, ok := <-c.bus.VoiceControlsChan():
 			if !ok {
 				return
 			}
 			if ctrl.Type == "command" && ctrl.Action == "leave" {
 				if strings.HasPrefix(ctrl.SessionID, "discord_vc_") {
 					guildID := strings.TrimPrefix(ctrl.SessionID, "discord_vc_")
 					vc, exists := c.session.VoiceConnections[guildID]
 					if exists && vc != nil {
 						vc.Disconnect(ctx)
 					}
 				}
 			}
 		}
 	}
 }
 func (c *DiscordChannel) playTTS(ctx context.Context, vc *discordgo.VoiceConnection, text string, playID uint64) {
 	// Capture the cancel func associated with this playback (if any).
 	// Clear cancelTTS when playback finishes (normal or interrupted),
 	// but only if it still refers to this playback's cancel func.
 	defer func() {
 		c.ttsMu.Lock()
 		if c.ttsPlayID == playID {
 			c.cancelTTS = nil
 		}
 		c.ttsMu.Unlock()
 	}()
 	sentences := audio.SplitSentences(text)
 	if len(sentences) == 0 {
 		return
 	}
 	logger.InfoCF("discord", "Starting streamed TTS", map[string]any{"sentences": len(sentences)})
 	// Pipeline: prefetch next sentence's audio while playing current
 	type ttResult struct {
 		stream io.ReadCloser
 		err    error
 	}
 	var prefetch chan ttResult
 	// Ensure any in-flight prefetch is drained on exit to prevent stream leaks,
 	// but avoid blocking indefinitely if the prefetch goroutine is stuck or never sends.
 	defer func() {
 		if prefetch != nil {
 			select {
 			case result := <-prefetch:
 				if result.stream != nil {
 					result.stream.Close()
 				}
 			case <-time.After(100 * time.Millisecond):
 				// Timed out waiting for a prefetched result; avoid blocking on exit.
 			}
 		}
 	}()
 	for i, sentence := range sentences {
 		// Check for cancellation (interruption)
 		select {
 		case <-ctx.Done():
 			logger.InfoCF("discord", "TTS interrupted", map[string]any{"at_sentence": i})
 			return
 		default:
 		}
 		// Start prefetching the NEXT sentence while we process the current one
 		var nextPrefetch chan ttResult
 		if i+1 < len(sentences) {
 			nextPrefetch = make(chan ttResult, 1)
 			nextSentence := sentences[i+1]
 			go func() {
 				s, e := c.tts.Synthesize(ctx, nextSentence)
 				nextPrefetch <- ttResult{s, e}
 			}()
 		}
 		// Get the current sentence's audio
 		var stream io.ReadCloser
 		var err error
 		if prefetch != nil {
 			// Use prefetched result from previous iteration, but be responsive to cancellation.
 			var result ttResult
 			select {
 			case result = <-prefetch:
 				stream, err = result.stream, result.err
 			case <-ctx.Done():
 				// Context canceled while waiting for prefetched audio; abort playback.
 				logger.InfoCF(
 					"discord",
 					"TTS interrupted while waiting for prefetched audio",
 					map[string]any{"at_sentence": i},
 				)
 				return
 			}
 		} else {
 			// First sentence: synthesize directly
 			stream, err = c.tts.Synthesize(ctx, sentence)
 		}
 		if err != nil {
 			if stream != nil {
 				stream.Close()
 			}
 			logger.ErrorCF("discord", "TTS synthesize failed", map[string]any{"error": err.Error(), "sentence": i})
 			prefetch = nextPrefetch
 			continue
 		}
 		if err := streamOggOpusToDiscord(ctx, vc, stream); err != nil {
 			logger.ErrorCF("discord", "TTS playback failed", map[string]any{"error": err.Error(), "sentence": i})
 		}
 		stream.Close()
 		prefetch = nextPrefetch
 	}
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *DiscordChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/discord/init.go
+++ b/pkg/channels/discord/init.go
@ -1,6 +1,7 @@
 package discord
 import (
 	"github.com/sipeed/picoclaw/pkg/audio/tts"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/channels"
 	"github.com/sipeed/picoclaw/pkg/config"
@ -8,6 +9,10 @@ import (
 func init() {
 	channels.RegisterFactory("discord", func(cfg *config.Config, b *bus.MessageBus) (channels.Channel, error) {
-		return NewDiscordChannel(cfg.Channels.Discord, b)
+		ch, err := NewDiscordChannel(cfg.Channels.Discord, b)
 		if err == nil {
 			ch.tts = tts.DetectTTS(cfg)
 		}
 		return ch, err
 	})
 }
--- a/pkg/channels/discord/voice.go
+++ b/pkg/channels/discord/voice.go
@ -0,0 +1,313 @@
 package discord
 import (
 	"context"
 	"fmt"
 	"io"
 	"time"
 	"github.com/bwmarrin/discordgo"
 	"github.com/sipeed/picoclaw/pkg/audio"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/identity"
 	"github.com/sipeed/picoclaw/pkg/logger"
 )
 func (c *DiscordChannel) setVoiceUserID(guildID string, ssrc uint32, userID string) {
 	if userID == "" {
 		return
 	}
 	c.voiceMu.Lock()
 	defer c.voiceMu.Unlock()
 	ssrcMap, ok := c.voiceSSRC[guildID]
 	if !ok {
 		ssrcMap = make(map[uint32]string)
 		c.voiceSSRC[guildID] = ssrcMap
 	}
 	ssrcMap[ssrc] = userID
 }
 func (c *DiscordChannel) voiceUserID(guildID string, ssrc uint32) string {
 	c.voiceMu.RLock()
 	defer c.voiceMu.RUnlock()
 	ssrcMap, ok := c.voiceSSRC[guildID]
 	if !ok {
 		return ""
 	}
 	return ssrcMap[ssrc]
 }
 func (c *DiscordChannel) handleVoiceCommand(s *discordgo.Session, m *discordgo.MessageCreate) bool {
 	if m.Content == "!vc join" {
 		vs, err := s.State.VoiceState(m.GuildID, m.Author.ID)
 		if err != nil || vs == nil {
 			if _, sendErr := s.ChannelMessageSend(
 				m.ChannelID,
 				"You need to be in a voice channel first!",
 			); sendErr != nil {
 				logger.InfoCF("discord", "Failed to send voice channel requirement message", map[string]any{
 					"channel": m.ChannelID,
 					"error":   sendErr,
 				})
 			}
 			return true
 		}
 		logger.InfoCF("discord", "Joining voice channel", map[string]any{"channel": vs.ChannelID})
 		vc, err := s.ChannelVoiceJoin(c.ctx, m.GuildID, vs.ChannelID, false, false)
 		if err != nil {
 			if _, sendErr := s.ChannelMessageSend(
 				m.ChannelID,
 				fmt.Sprintf("Failed to join voice channel: %v", err),
 			); sendErr != nil {
 				logger.InfoCF("discord", "Failed to send voice join error message", map[string]any{
 					"channel": m.ChannelID,
 					"error":   sendErr,
 				})
 			}
 			return true
 		}
 		go c.receiveVoice(vc, m.GuildID, m.ChannelID)
 		if _, sendErr := s.ChannelMessageSend(
 			m.ChannelID,
 			"Joined Voice Channel! Listening for audio...",
 		); sendErr != nil {
 			logger.InfoCF("discord", "Failed to send voice join success message", map[string]any{
 				"channel": m.ChannelID,
 				"error":   sendErr,
 			})
 		}
 		return true
 	} else if m.Content == "!vc leave" {
 		vc, exists := s.VoiceConnections[m.GuildID]
 		if exists && vc != nil {
 			if err := vc.Disconnect(c.ctx); err != nil {
 				logger.InfoCF("discord", "Failed to disconnect from voice channel", map[string]any{
 					"guild": m.GuildID,
 					"error": err,
 				})
 			}
 			if _, sendErr := s.ChannelMessageSend(m.ChannelID, "Left Voice Channel."); sendErr != nil {
 				logger.InfoCF("discord", "Failed to send voice leave success message", map[string]any{
 					"channel": m.ChannelID,
 					"error":   sendErr,
 				})
 			}
 		} else {
 			if _, sendErr := s.ChannelMessageSend(m.ChannelID, "Not in a voice channel."); sendErr != nil {
 				logger.InfoCF("discord", "Failed to send voice not-in-channel message", map[string]any{
 					"channel": m.ChannelID,
 					"error":   sendErr,
 				})
 			}
 		}
 		return true
 	}
 	return false
 }
 func VoiceReceiveActive(vc *discordgo.VoiceConnection) bool {
 	return vc != nil && vc.OpusRecv != nil
 }
 func streamOggOpusToDiscord(ctx context.Context, vc *discordgo.VoiceConnection, r io.Reader) (retErr error) {
 	// Recover from panic if vc.OpusSend is closed mid-send (e.g. on disconnect)
 	defer func() {
 		if rec := recover(); rec != nil {
 			retErr = fmt.Errorf("voice connection closed during playback")
 		}
 	}()
 	// Wait for the speaking transition to register
 	vc.Speaking(true)
 	defer vc.Speaking(false)
 	return audio.DecodeOggOpus(r, func(frame []byte) error {
 		select {
 		case <-ctx.Done():
 			return ctx.Err()
 		case vc.OpusSend <- frame:
 			return nil
 		}
 	})
 }
 func (c *DiscordChannel) receiveVoice(vc *discordgo.VoiceConnection, guildID string, chatID string) {
 	logger.InfoCF("discord", "Started listening for voice", map[string]any{"guild": guildID})
 	vc.AddHandler(func(_ *discordgo.VoiceConnection, vs *discordgo.VoiceSpeakingUpdate) {
 		if vs == nil {
 			return
 		}
 		c.setVoiceUserID(guildID, uint32(vs.SSRC), vs.UserID)
 	})
 	defer func() {
 		c.voiceMu.Lock()
 		delete(c.voiceSSRC, guildID)
 		c.voiceMu.Unlock()
 	}()
 	go func(ctx context.Context, vc *discordgo.VoiceConnection) {
 		// Recover from potential panics if OpusSend is closed mid-send.
 		defer func() {
 			if rec := recover(); rec != nil {
 				logger.WarnCF("discord", "Recovered from panic while sending wake-up frames", map[string]any{
 					"error": rec,
 					"guild": guildID,
 				})
 			}
 		}()
 		// If the voice connection or OpusSend are not available, nothing to do.
 		if vc == nil || vc.OpusSend == nil {
 			return
 		}
 		time.Sleep(250 * time.Millisecond) // Wait a bit for connection to settle
 		// Abort if the context has already been canceled.
 		select {
 		case <-ctx.Done():
 			return
 		default:
 		}
 		vc.Speaking(true)
 		defer vc.Speaking(false)
 		silenceFrame := []byte{0xF8, 0xFF, 0xFE}
 		for i := 0; i < 5; i++ {
 			select {
 			case <-ctx.Done():
 				return
 			case vc.OpusSend <- silenceFrame:
 			}
 			time.Sleep(20 * time.Millisecond)
 		}
 		logger.DebugCF("discord", "Sent wake-up silence frames", map[string]any{"guild": guildID})
 	}(c.ctx, vc)
 	sessionID := fmt.Sprintf("discord_vc_%s", guildID)
 	c.bus.PublishVoiceControl(c.ctx, bus.VoiceControl{
 		SessionID: sessionID,
 		Type:      "state",
 		Action:    "listening",
 	})
 	var sequence uint64 = 0
 	var interruptCount int
 	var lastInterruptAt time.Time
 	for {
 		select {
 		case <-c.ctx.Done():
 			return
 		case p, ok := <-vc.OpusRecv:
 			if !ok {
 				logger.InfoCF("discord", "Voice channel closed", map[string]any{"guild": guildID})
 				// Cancel any TTS that may still be playing
 				c.ttsMu.Lock()
 				if c.cancelTTS != nil {
 					c.cancelTTS()
 					c.cancelTTS = nil
 				}
 				c.ttsMu.Unlock()
 				return
 			}
 			if p == nil {
 				logger.DebugCF("discord", "Received nil Opus packet", nil)
 				continue
 			}
 			if len(p.Opus) == 0 {
 				logger.DebugCF("discord", "Received empty Opus packet", map[string]any{
 					"seq":  p.Sequence,
 					"ssrc": p.SSRC,
 				})
 				continue
 			}
 			logger.DebugCF("discord", "Received Opus packet", map[string]any{
 				"seq":  p.Sequence,
 				"len":  len(p.Opus),
 				"ssrc": p.SSRC,
 			})
 			// Interruption detection: if user sends voice while TTS is playing,
 			// cancel TTS after a short debounce (3 packets in 200ms)
 			now := time.Now()
 			if now.Sub(lastInterruptAt) > 500*time.Millisecond {
 				interruptCount = 0
 			}
 			interruptCount++
 			lastInterruptAt = now
 			if interruptCount >= 3 {
 				c.ttsMu.Lock()
 				if c.cancelTTS != nil {
 					c.cancelTTS()
 					c.cancelTTS = nil
 					logger.InfoCF("discord", "TTS interrupted by user voice", nil)
 				}
 				c.ttsMu.Unlock()
 				interruptCount = 0
 			}
 			userID := c.voiceUserID(guildID, p.SSRC)
 			if userID == "" {
 				logger.DebugCF("discord", "Dropping voice packet without user mapping", map[string]any{
 					"ssrc":  p.SSRC,
 					"guild": guildID,
 				})
 				continue
 			}
 			sender := bus.SenderInfo{
 				Platform:    "discord",
 				PlatformID:  userID,
 				CanonicalID: identity.BuildCanonicalID("discord", userID),
 			}
 			if !c.IsAllowedSender(sender) {
 				logger.DebugCF("discord", "Voice packet rejected by allowlist", map[string]any{
 					"user_id": userID,
 					"guild":   guildID,
 				})
 				continue
 			}
 			sequence++
 			chunk := bus.AudioChunk{
 				SessionID:  sessionID,
 				SpeakerID:  userID,
 				ChatID:     chatID,
 				Channel:    "discord",
 				Sequence:   sequence,
 				Timestamp:  p.Timestamp,
 				SampleRate: 48000,
 				Channels:   2,
 				Format:     "opus",
 				Data:       p.Opus,
 			}
 			ctx, cancel := context.WithTimeout(c.ctx, 100*time.Millisecond)
 			err := c.bus.PublishAudioChunk(ctx, chunk)
 			cancel()
 			if err != nil {
 				logger.ErrorCF("discord", "Failed to publish audio chunk", map[string]any{
 					"guild":     guildID,
 					"sessionID": sessionID,
 					"sequence":  sequence,
 					"error":     err.Error(),
 				})
 			}
 		}
 	}
 }
--- a/pkg/channels/feishu/common.go
+++ b/pkg/channels/feishu/common.go
@ -6,6 +6,8 @@ import (
 	"strings"
 	larkim "github.com/larksuite/oapi-sdk-go/v3/service/im/v1"
 	"github.com/sipeed/picoclaw/pkg/channels"
 )
 // mentionPlaceholderRegex matches @_user_N placeholders inserted by Feishu for mentions.
@ -145,3 +147,8 @@ func extractImageKeysRecursive(v any, feishuKeys, externalURLs *[]string) {
 		}
 	}
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *FeishuChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/feishu/feishu_32.go
+++ b/pkg/channels/feishu/feishu_32.go
@ -36,8 +36,8 @@ func (c *FeishuChannel) Stop(ctx context.Context) error {
 }
 // Send is a stub method to satisfy the Channel interface
-func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
-	return errUnsupported
+	return nil, errUnsupported
 }
 // EditMessage is a stub method to satisfy MessageEditor
@ -56,6 +56,6 @@ func (c *FeishuChannel) ReactToMessage(ctx context.Context, chatID, messageID st
 }
 // SendMedia is a stub method to satisfy MediaSender
-func (c *FeishuChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *FeishuChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
-	return errUnsupported
+	return nil, errUnsupported
 }
--- a/pkg/channels/feishu/feishu_64.go
+++ b/pkg/channels/feishu/feishu_64.go
@ -131,26 +131,26 @@ func (c *FeishuChannel) Stop(ctx context.Context) error {
 // Send sends a message using Interactive Card format for markdown rendering.
 // Falls back to plain text message if card sending fails (e.g., table limit exceeded).
-func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	if msg.ChatID == "" {
-		return fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
 	}
 	// Build interactive card with markdown content
 	cardContent, err := buildMarkdownCard(msg.Content)
 	if err != nil {
 		// If card build fails, fall back to plain text
-		return c.sendText(ctx, msg.ChatID, msg.Content)
+		return nil, c.sendText(ctx, msg.ChatID, msg.Content)
 	}
 	// First attempt: try sending as interactive card
 	err = c.sendCard(ctx, msg.ChatID, cardContent)
 	if err == nil {
-		return nil
+		return nil, nil
 	}
 	// Check if error is due to card table limit (error code 11310)
@ -167,14 +167,14 @@ func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 		// Second attempt: fall back to plain text message
 		textErr := c.sendText(ctx, msg.ChatID, msg.Content)
 		if textErr == nil {
-			return nil
+			return nil, nil
 		}
 		// If text also fails, return the text error
-		return textErr
+		return nil, textErr
 	}
 	// For other errors, return the original card error
-	return err
+	return nil, err
 }
 // EditMessage implements channels.MessageEditor.
@ -310,27 +310,27 @@ func (c *FeishuChannel) ReactToMessage(ctx context.Context, chatID, messageID st
 // SendMedia implements channels.MediaSender.
 // Uploads images/files via Feishu API then sends as messages.
-func (c *FeishuChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *FeishuChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	if msg.ChatID == "" {
-		return fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	for _, part := range msg.Parts {
 		if err := c.sendMediaPart(ctx, msg.ChatID, part, store); err != nil {
-			return err
+			return nil, err
 		}
 	}
-	return nil
+	return nil, nil
 }
 // sendMediaPart resolves and sends a single media part.
--- a/pkg/channels/irc/irc.go
+++ b/pkg/channels/irc/irc.go
@ -130,18 +130,18 @@ func (c *IRCChannel) Stop(ctx context.Context) error {
 }
 // Send sends a message to an IRC channel or user.
-func (c *IRCChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *IRCChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	target := msg.ChatID
 	if target == "" {
-		return fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
 	}
 	if strings.TrimSpace(msg.Content) == "" {
-		return nil
+		return nil, nil
 	}
 	// Send each line separately (IRC is line-oriented)
@ -158,7 +158,7 @@ func (c *IRCChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
 		"target": target,
 		"lines":  len(lines),
 	})
-	return nil
+	return nil, nil
 }
 // StartTyping implements channels.TypingCapable using IRCv3 +typing client tag.
--- a/pkg/channels/line/line.go
+++ b/pkg/channels/line/line.go
@ -496,9 +496,9 @@ func (c *LINEChannel) resolveChatID(source lineSource) string {
 // Send sends a message to LINE. It first tries the Reply API (free)
 // using a cached reply token, then falls back to the Push API.
-func (c *LINEChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *LINEChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	// Load and consume quote token for this chat
@ -516,28 +516,28 @@ func (c *LINEChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
 					"chat_id": msg.ChatID,
 					"quoted":  quoteToken != "",
 				})
-				return nil
+				return nil, nil
 			}
 			logger.DebugC("line", "Reply API failed, falling back to Push API")
 		}
 	}
 	// Fall back to Push API
-	return c.sendPush(ctx, msg.ChatID, msg.Content, quoteToken)
+	return nil, c.sendPush(ctx, msg.ChatID, msg.Content, quoteToken)
 }
 // SendMedia implements the channels.MediaSender interface.
 // LINE requires media to be accessible via public URL; since we only have local files,
 // we fall back to sending a text message with the filename/caption.
 // For full support, an external file hosting service would be needed.
-func (c *LINEChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *LINEChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	// LINE Messaging API requires publicly accessible URLs for media messages.
@ -549,11 +549,11 @@ func (c *LINEChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessag
 		}
 		if err := c.sendPush(ctx, msg.ChatID, caption, ""); err != nil {
-			return err
+			return nil, err
 		}
 	}
-	return nil
+	return nil, nil
 }
 // buildTextMessage creates a text message object, optionally with quoteToken.
@ -684,3 +684,8 @@ func (c *LINEChannel) downloadContent(messageID, filename string) string {
 		},
 	})
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *LINEChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/maixcam/maixcam.go
+++ b/pkg/channels/maixcam/maixcam.go
@ -240,15 +240,15 @@ func (c *MaixCamChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	// Check ctx before entering write path
 	select {
 	case <-ctx.Done():
-		return ctx.Err()
+		return nil, ctx.Err()
 	default:
 	}
@ -257,7 +257,7 @@ func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) erro
 	if len(c.clients) == 0 {
 		logger.WarnC("maixcam", "No MaixCam devices connected")
-		return fmt.Errorf("no connected MaixCam devices")
+		return nil, fmt.Errorf("no connected MaixCam devices")
 	}
 	response := map[string]any{
@ -269,7 +269,7 @@ func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) erro
 	data, err := json.Marshal(response)
 	if err != nil {
-		return fmt.Errorf("failed to marshal response: %w", err)
+		return nil, fmt.Errorf("failed to marshal response: %w", err)
 	}
 	var sendErr error
@ -285,5 +285,5 @@ func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) erro
 		_ = conn.SetWriteDeadline(time.Time{})
 	}
-	return sendErr
+	return nil, sendErr
 }
--- a/pkg/channels/manager.go
+++ b/pkg/channels/manager.go
@ -158,8 +158,8 @@ func (m *Manager) RecordReactionUndo(channel, chatID string, undo func()) {
 }
 // preSend handles typing stop, reaction undo, and placeholder editing before sending a message.
-// Returns true if the message was already delivered (skip Send).
+// Returns the delivered message IDs and true when delivery completed before a normal Send.
-func (m *Manager) preSend(ctx context.Context, name string, msg bus.OutboundMessage, ch Channel) bool {
+func (m *Manager) preSend(ctx context.Context, name string, msg bus.OutboundMessage, ch Channel) ([]string, bool) {
 	key := name + ":" + msg.ChatID
 	// 1. Stop typing
@ -188,7 +188,7 @@ func (m *Manager) preSend(ctx context.Context, name string, msg bus.OutboundMess
 				}
 			}
 		}
-		return true
+		return nil, true
 	}
 	// 4. Try editing placeholder
@ -196,14 +196,14 @@ func (m *Manager) preSend(ctx context.Context, name string, msg bus.OutboundMess
 		if entry, ok := v.(placeholderEntry); ok && entry.id != "" {
 			if editor, ok := ch.(MessageEditor); ok {
 				if err := editor.EditMessage(ctx, msg.ChatID, entry.id, msg.Content); err == nil {
-					return true // edited successfully, skip Send
+					return []string{entry.id}, true
 				}
 				// edit failed → fall through to normal Send
 			}
 		}
 	}
-	return false
+	return nil, false
 }
 // preSendMedia handles typing stop, reaction undo, and placeholder cleanup
@ -699,23 +699,29 @@ func splitByLength(content string, maxLen int) []string {
 //   - ErrNotRunning / ErrSendFailed: permanent, no retry
 //   - ErrRateLimit: fixed delay retry
 //   - ErrTemporary / unknown: exponential backoff retry
-func (m *Manager) sendWithRetry(ctx context.Context, name string, w *channelWorker, msg bus.OutboundMessage) {
+func (m *Manager) sendWithRetry(
 	ctx context.Context,
 	name string,
 	w *channelWorker,
 	msg bus.OutboundMessage,
 ) ([]string, bool) {
 	// Rate limit: wait for token
 	if err := w.limiter.Wait(ctx); err != nil {
 		// ctx canceled, shutting down
-		return
+		return nil, false
 	}
 	// Pre-send: stop typing and try to edit placeholder
-	if m.preSend(ctx, name, msg, w.ch) {
+	if msgIDs, handled := m.preSend(ctx, name, msg, w.ch); handled {
-		return // placeholder was edited successfully, skip Send
+		return msgIDs, true
 	}
 	var lastErr error
 	var msgIDs []string
 	for attempt := 0; attempt <= maxRetries; attempt++ {
-		lastErr = w.ch.Send(ctx, msg)
+		msgIDs, lastErr = w.ch.Send(ctx, msg)
 		if lastErr == nil {
-			return
+			return msgIDs, true
 		}
 		// Permanent failures — don't retry
@ -734,7 +740,7 @@ func (m *Manager) sendWithRetry(ctx context.Context, name string, w *channelWork
 			case <-time.After(rateLimitDelay):
 				continue
 			case <-ctx.Done():
-				return
+				return nil, false
 			}
 		}
@ -743,7 +749,7 @@ func (m *Manager) sendWithRetry(ctx context.Context, name string, w *channelWork
 		select {
 		case <-time.After(backoff):
 		case <-ctx.Done():
-			return
+			return nil, false
 		}
 	}
@ -754,6 +760,8 @@ func (m *Manager) sendWithRetry(ctx context.Context, name string, w *channelWork
 		"error":   lastErr.Error(),
 		"retries": maxRetries,
 	})
 	return nil, false
 }
 func dispatchLoop[M any](
@ -855,7 +863,7 @@ func (m *Manager) runMediaWorker(ctx context.Context, name string, w *channelWor
 			if !ok {
 				return
 			}
-			_ = m.sendMediaWithRetry(ctx, name, w, msg)
+			_, _ = m.sendMediaWithRetry(ctx, name, w, msg)
 		case <-ctx.Done():
 			return
 		}
@ -863,14 +871,14 @@ func (m *Manager) runMediaWorker(ctx context.Context, name string, w *channelWor
 }
 // sendMediaWithRetry sends a media message through the channel with rate limiting and
-// retry logic. It returns nil on success, or the last error after retries,
+// retry logic. It returns the message IDs and nil on success, or nil and the last error
-// including when the channel does not support MediaSender.
+// after retries, including when the channel does not support MediaSender.
 func (m *Manager) sendMediaWithRetry(
 	ctx context.Context,
 	name string,
 	w *channelWorker,
 	msg bus.OutboundMediaMessage,
-) error {
+) ([]string, error) {
 	ms, ok := w.ch.(MediaSender)
 	if !ok {
 		err := fmt.Errorf("channel %q does not support media sending", name)
@ -878,22 +886,23 @@ func (m *Manager) sendMediaWithRetry(
 			"channel": name,
 			"error":   err.Error(),
 		})
-		return err
+		return nil, err
 	}
 	// Rate limit: wait for token
 	if err := w.limiter.Wait(ctx); err != nil {
-		return err
+		return nil, err
 	}
 	// Pre-send: stop typing and clean up any placeholder before sending media.
 	m.preSendMedia(ctx, name, msg, w.ch)
 	var lastErr error
 	var msgIDs []string
 	for attempt := 0; attempt <= maxRetries; attempt++ {
-		lastErr = ms.SendMedia(ctx, msg)
+		msgIDs, lastErr = ms.SendMedia(ctx, msg)
 		if lastErr == nil {
-			return nil
+			return msgIDs, nil
 		}
 		// Permanent failures — don't retry
@ -912,7 +921,7 @@ func (m *Manager) sendMediaWithRetry(
 			case <-time.After(rateLimitDelay):
 				continue
 			case <-ctx.Done():
-				return ctx.Err()
+				return nil, ctx.Err()
 			}
 		}
@ -921,7 +930,7 @@ func (m *Manager) sendMediaWithRetry(
 		select {
 		case <-time.After(backoff):
 		case <-ctx.Done():
-			return ctx.Err()
+			return nil, ctx.Err()
 		}
 	}
@ -932,7 +941,7 @@ func (m *Manager) sendMediaWithRetry(
 		"error":   lastErr.Error(),
 		"retries": maxRetries,
 	})
-	return lastErr
+	return nil, lastErr
 }
 // runTTLJanitor periodically scans the typingStops and placeholders maps
@ -1166,7 +1175,8 @@ func (m *Manager) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) e
 		return fmt.Errorf("channel %s has no active worker", msg.Channel)
 	}
-	return m.sendMediaWithRetry(ctx, msg.Channel, w, msg)
+	_, err := m.sendMediaWithRetry(ctx, msg.Channel, w, msg)
 	return err
 }
 func (m *Manager) SendToChannel(ctx context.Context, channelName, chatID, content string) error {
@ -1196,5 +1206,6 @@ func (m *Manager) SendToChannel(ctx context.Context, channelName, chatID, conten
 	// Fallback: direct send (should not happen)
 	channel, _ := m.channels[channelName]
-	return channel.Send(ctx, msg)
+	_, err := channel.Send(ctx, msg)
 	return err
 }
--- a/pkg/channels/manager_test.go
+++ b/pkg/channels/manager_test.go
@ -25,9 +25,12 @@ type mockChannel struct {
 	lastPlaceholderID string
 }
-func (m *mockChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (m *mockChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	m.sentMessages = append(m.sentMessages, msg)
-	return m.sendFn(ctx, msg)
+	if m.sendFn == nil {
 		return nil, nil
 	}
 	return nil, m.sendFn(ctx, msg)
 }
 func (m *mockChannel) Start(ctx context.Context) error { return nil }
@ -46,16 +49,16 @@ func (m *mockChannel) EditMessage(ctx context.Context, chatID, messageID, conten
 type mockMediaChannel struct {
 	mockChannel
-	sendMediaFn       func(ctx context.Context, msg bus.OutboundMediaMessage) error
+	sendMediaFn       func(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error)
 	sentMediaMessages []bus.OutboundMediaMessage
 }
-func (m *mockMediaChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (m *mockMediaChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	m.sentMediaMessages = append(m.sentMediaMessages, msg)
 	if m.sendMediaFn != nil {
 		return m.sendMediaFn(ctx, msg)
 	}
-	return nil
+	return nil, nil
 }
 type mockDeletingMediaChannel struct {
@ -247,9 +250,9 @@ func TestSendMedia_Success(t *testing.T) {
 	m := newTestManager()
 	var callCount int
 	ch := &mockMediaChannel{
-		sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) error {
+		sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) ([]string, error) {
 			callCount++
-			return nil
+			return nil, nil
 		},
 	}
 	w := &channelWorker{
@ -275,8 +278,8 @@ func TestSendMedia_Success(t *testing.T) {
 func TestSendMedia_PropagatesFailure(t *testing.T) {
 	m := newTestManager()
 	ch := &mockMediaChannel{
-		sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) error {
+		sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) ([]string, error) {
-			return fmt.Errorf("bad upload: %w", ErrSendFailed)
+			return nil, fmt.Errorf("bad upload: %w", ErrSendFailed)
 		},
 	}
 	w := &channelWorker{
@ -330,8 +333,8 @@ func TestSendMedia_DeletesPlaceholderBeforeSending(t *testing.T) {
 	m := newTestManager()
 	ch := &mockDeletingMediaChannel{
 		mockMediaChannel: mockMediaChannel{
-			sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) error {
+			sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) ([]string, error) {
-				return nil
+				return nil, nil
 			},
 		},
 	}
@ -628,7 +631,7 @@ func TestPreSend_PlaceholderEditSuccess(t *testing.T) {
 	m.RecordPlaceholder("test", "123", "456")
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "123", Content: "hello"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if !edited {
 		t.Fatal("expected preSend to return true (placeholder edited)")
@ -658,7 +661,7 @@ func TestPreSend_PlaceholderEditFails_FallsThrough(t *testing.T) {
 	m.RecordPlaceholder("test", "123", "456")
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "123", Content: "hello"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if edited {
 		t.Fatal("expected preSend to return false when edit fails")
@ -734,7 +737,7 @@ func TestPreSend_NoRegisteredState(t *testing.T) {
 	}
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "123", Content: "hello"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if edited {
 		t.Fatal("expected preSend to return false with no registered state")
@ -764,7 +767,7 @@ func TestPreSend_TypingAndPlaceholder(t *testing.T) {
 	m.RecordPlaceholder("test", "123", "456")
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "123", Content: "hello"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if !stopCalled {
 		t.Fatal("expected typing stop to be called")
@ -1025,7 +1028,7 @@ func TestPreSendStillWorksWithWrappedTypes(t *testing.T) {
 	m.RecordPlaceholder("test", "chat1", "ph_id")
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "chat1", Content: "response"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if !stopCalled {
 		t.Fatal("expected typing stop to be called via wrapped type")
--- a/pkg/channels/matrix/matrix.go
+++ b/pkg/channels/matrix/matrix.go
@ -380,26 +380,26 @@ func markdownToHTML(md string) string {
 	return strings.TrimSpace(string(markdown.ToHTML([]byte(md), p, renderer)))
 }
-func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	roomID := id.RoomID(strings.TrimSpace(msg.ChatID))
 	if roomID == "" {
-		return fmt.Errorf("matrix room ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("matrix room ID is empty: %w", channels.ErrSendFailed)
 	}
 	content := strings.TrimSpace(msg.Content)
 	if content == "" {
-		return nil
+		return nil, nil
 	}
-	_, err := c.client.SendMessageEvent(ctx, roomID, event.EventMessage, c.messageContent(content))
+	resp, err := c.client.SendMessageEvent(ctx, roomID, event.EventMessage, c.messageContent(content))
 	if err != nil {
-		return fmt.Errorf("matrix send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("matrix send: %w", channels.ErrTemporary)
 	}
-	return nil
+	return []string{resp.EventID.String()}, nil
 }
 func (c *MatrixChannel) messageContent(text string) *event.MessageEventContent {
@ -412,9 +412,9 @@ func (c *MatrixChannel) messageContent(text string) *event.MessageEventContent {
 }
 // SendMedia implements channels.MediaSender.
-func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	sendCtx := ctx
 	if sendCtx == nil {
@ -423,17 +423,18 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	roomID := id.RoomID(strings.TrimSpace(msg.ChatID))
 	if roomID == "" {
-		return fmt.Errorf("matrix room ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("matrix room ID is empty: %w", channels.ErrSendFailed)
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	var eventIDs []string
 	for _, part := range msg.Parts {
 		if err := sendCtx.Err(); err != nil {
-			return err
+			return nil, err
 		}
 		localPath, meta, err := store.ResolveWithMeta(part.Ref)
@ -498,7 +499,7 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 				"type":  part.Type,
 				"error": err.Error(),
 			})
-			return fmt.Errorf("matrix upload media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("matrix upload media: %w", channels.ErrTemporary)
 		}
 		msgType := matrixOutboundMsgType(part.Type, filename, contentType)
@ -511,17 +512,21 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 			uploadResp.ContentURI.CUString(),
 		)
-		if _, err := c.client.SendMessageEvent(sendCtx, roomID, event.EventMessage, content); err != nil {
+		sendResp, err := c.client.SendMessageEvent(sendCtx, roomID, event.EventMessage, content)
 		if err != nil {
 			logger.ErrorCF("matrix", "Failed to send media message", map[string]any{
 				"room_id": roomID.String(),
 				"type":    msgType,
 				"error":   err.Error(),
 			})
-			return fmt.Errorf("matrix send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("matrix send media: %w", channels.ErrTemporary)
 		}
 		if sendResp != nil {
 			eventIDs = append(eventIDs, sendResp.EventID.String())
 		}
 	}
-	return nil
+	return eventIDs, nil
 }
 // StartTyping implements channels.TypingCapable.
@ -1295,3 +1300,8 @@ func stripUserMentionWithRegexp(text string, userID id.UserID, mentionR *regexp.
 	cleaned = strings.TrimLeft(cleaned, ",:; ")
 	return strings.TrimSpace(cleaned)
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *MatrixChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/media.go
+++ b/pkg/channels/media.go
@ -11,5 +11,5 @@ import (
 // Manager discovers channels implementing this interface via type
 // assertion and routes OutboundMediaMessage to them.
 type MediaSender interface {
-	SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error
+	SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error)
 }
--- a/pkg/channels/onebot/onebot.go
+++ b/pkg/channels/onebot/onebot.go
@ -391,15 +391,15 @@ func (c *OneBotChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	// Check ctx before entering write path
 	select {
 	case <-ctx.Done():
-		return ctx.Err()
+		return nil, ctx.Err()
 	default:
 	}
@ -408,12 +408,12 @@ func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 	c.mu.Unlock()
 	if conn == nil {
-		return fmt.Errorf("OneBot WebSocket not connected")
+		return nil, fmt.Errorf("OneBot WebSocket not connected")
 	}
 	action, params, err := c.buildSendRequest(msg)
 	if err != nil {
-		return err
+		return nil, err
 	}
 	echo := fmt.Sprintf("send_%d", atomic.AddInt64(&c.echoCounter, 1))
@ -426,7 +426,7 @@ func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 	data, err := json.Marshal(req)
 	if err != nil {
-		return fmt.Errorf("failed to marshal OneBot request: %w", err)
+		return nil, fmt.Errorf("failed to marshal OneBot request: %w", err)
 	}
 	c.writeMu.Lock()
@ -439,21 +439,21 @@ func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 		logger.ErrorCF("onebot", "Failed to send message", map[string]any{
 			"error": err.Error(),
 		})
-		return fmt.Errorf("onebot send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("onebot send: %w", channels.ErrTemporary)
 	}
-	return nil
+	return nil, nil
 }
 // SendMedia implements the channels.MediaSender interface.
-func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	select {
 	case <-ctx.Done():
-		return ctx.Err()
+		return nil, ctx.Err()
 	default:
 	}
@ -462,12 +462,12 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	c.mu.Unlock()
 	if conn == nil {
-		return fmt.Errorf("OneBot WebSocket not connected")
+		return nil, fmt.Errorf("OneBot WebSocket not connected")
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	// Build media segments
@ -508,7 +508,7 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	}
 	if len(segments) == 0 {
-		return nil
+		return nil, nil
 	}
 	chatID := msg.ChatID
@ -524,7 +524,7 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	id, err := strconv.ParseInt(rawID, 10, 64)
 	if err != nil {
-		return fmt.Errorf("invalid %s in chatID: %s: %w", idKey, chatID, channels.ErrSendFailed)
+		return nil, fmt.Errorf("invalid %s in chatID: %s: %w", idKey, chatID, channels.ErrSendFailed)
 	}
 	echo := fmt.Sprintf("send_%d", atomic.AddInt64(&c.echoCounter, 1))
@ -537,7 +537,7 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	data, err := json.Marshal(req)
 	if err != nil {
-		return fmt.Errorf("failed to marshal OneBot request: %w", err)
+		return nil, fmt.Errorf("failed to marshal OneBot request: %w", err)
 	}
 	c.writeMu.Lock()
@ -550,10 +550,10 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 		logger.ErrorCF("onebot", "Failed to send media message", map[string]any{
 			"error": err.Error(),
 		})
-		return fmt.Errorf("onebot send media: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("onebot send media: %w", channels.ErrTemporary)
 	}
-	return nil
+	return nil, nil
 }
 func (c *OneBotChannel) buildMessageSegments(chatID, content string) []oneBotMessageSegment {
@ -1104,3 +1104,8 @@ func truncate(s string, n int) string {
 	}
 	return string(runes[:n]) + "..."
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *OneBotChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/pico/client.go
+++ b/pkg/channels/pico/client.go
@ -273,22 +273,22 @@ func (c *PicoClientChannel) handleServerMessage(pc *picoConn, msg PicoMessage) {
 }
 // Send sends a message to the remote server.
-func (c *PicoClientChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *PicoClientChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	c.mu.Lock()
 	pc := c.conn
 	c.mu.Unlock()
 	if pc == nil || pc.closed.Load() {
-		return channels.ErrSendFailed
+		return nil, channels.ErrSendFailed
 	}
 	outMsg := newMessage(TypeMessageSend, map[string]any{
 		"content": msg.Content,
 	})
 	outMsg.SessionID = strings.TrimPrefix(msg.ChatID, "pico_client:")
-	return pc.writeJSON(outMsg)
+	return nil, pc.writeJSON(outMsg)
 }
 // StartTyping implements channels.TypingCapable.
--- a/pkg/channels/pico/client_test.go
+++ b/pkg/channels/pico/client_test.go
@ -46,7 +46,7 @@ func TestSend_NotRunning(t *testing.T) {
 	if err != nil {
 		t.Fatal(err)
 	}
-	err = ch.Send(context.Background(), bus.OutboundMessage{Content: "hi"})
+	_, err = ch.Send(context.Background(), bus.OutboundMessage{Content: "hi"})
 	if !errors.Is(err, channels.ErrNotRunning) {
 		t.Fatalf("expected ErrNotRunning, got %v", err)
 	}
@ -124,7 +124,7 @@ func TestClientChannel_ConnectAndSend(t *testing.T) {
 	defer ch.Stop(ctx)
 	// Send a message
-	err = ch.Send(ctx, bus.OutboundMessage{
+	_, err = ch.Send(ctx, bus.OutboundMessage{
 		ChatID:  "pico_client:sess-1",
 		Content: "hello",
 	})
@ -179,7 +179,7 @@ func TestClientChannel_ReceivesServerMessage(t *testing.T) {
 	defer ch.Stop(ctx)
 	// Send a message; the echo server replies with message.create
-	err = ch.Send(ctx, bus.OutboundMessage{
+	_, err = ch.Send(ctx, bus.OutboundMessage{
 		ChatID:  "pico_client:sess-echo",
 		Content: "ping",
 	})
@ -252,7 +252,7 @@ func TestSend_ClosedConnection(t *testing.T) {
 	ch.conn.close()
 	ch.mu.Unlock()
-	err = ch.Send(ctx, bus.OutboundMessage{
+	_, err = ch.Send(ctx, bus.OutboundMessage{
 		ChatID:  "pico_client:sess-close",
 		Content: "should fail",
 	})
--- a/pkg/channels/pico/pico.go
+++ b/pkg/channels/pico/pico.go
@ -234,16 +234,16 @@ func (c *PicoChannel) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 }
 // Send implements Channel — sends a message to the appropriate WebSocket connection.
-func (c *PicoChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *PicoChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	outMsg := newMessage(TypeMessageCreate, map[string]any{
 		"content": msg.Content,
 	})
-	return c.broadcastToSession(msg.ChatID, outMsg)
+	return nil, c.broadcastToSession(msg.ChatID, outMsg)
 }
 // EditMessage implements channels.MessageEditor.
--- a/pkg/channels/qq/qq.go
+++ b/pkg/channels/qq/qq.go
@ -200,9 +200,9 @@ func (c *QQChannel) getChatKind(chatID string) string {
 	return "group"
 }
-func (c *QQChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *QQChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	chatKind := c.getChatKind(msg.ChatID)
@ -236,11 +236,14 @@ func (c *QQChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
 	}
 	// Route to group or C2C.
-	var err error
+	var (
 		sentMsg *dto.Message
 		err     error
 	)
 	if chatKind == "group" {
-		_, err = c.api.PostGroupMessage(ctx, msg.ChatID, msgToCreate)
+		sentMsg, err = c.api.PostGroupMessage(ctx, msg.ChatID, msgToCreate)
 	} else {
-		_, err = c.api.PostC2CMessage(ctx, msg.ChatID, msgToCreate)
+		sentMsg, err = c.api.PostC2CMessage(ctx, msg.ChatID, msgToCreate)
 	}
 	if err != nil {
@ -249,10 +252,13 @@ func (c *QQChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
 			"chat_kind": chatKind,
 			"error":     err.Error(),
 		})
-		return fmt.Errorf("qq send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("qq send: %w", channels.ErrTemporary)
 	}
-	return nil
+	if sentMsg == nil {
 		return nil, nil
 	}
 	return []string{sentMsg.ID}, nil
 }
 // StartTyping implements channels.TypingCapable.
@ -319,13 +325,14 @@ func (c *QQChannel) StartTyping(ctx context.Context, chatID string) (func(), err
 // QQ group/C2C media sending is a two-step flow:
 // 1. Upload media to /files using a remote URL or base64-encoded local bytes.
 // 2. Send a msg_type=7 message using the returned file_info.
-func (c *QQChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *QQChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	chatKind := c.getChatKind(msg.ChatID)
 	var messageIDs []string
 	for _, part := range msg.Parts {
 		fileInfo, err := c.uploadMedia(ctx, chatKind, msg.ChatID, part)
 		if err != nil {
@ -335,22 +342,26 @@ func (c *QQChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage)
 				"error":   err.Error(),
 			})
 			if errors.Is(err, channels.ErrSendFailed) {
-				return err
+				return nil, err
 			}
-			return fmt.Errorf("qq send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("qq send media: %w", channels.ErrTemporary)
 		}
-		if err := c.sendUploadedMedia(ctx, chatKind, msg.ChatID, part, fileInfo); err != nil {
+		sentMsg, err := c.sendUploadedMedia(ctx, chatKind, msg.ChatID, part, fileInfo)
 		if err != nil {
 			logger.ErrorCF("qq", "Failed to send media", map[string]any{
 				"type":    part.Type,
 				"chat_id": msg.ChatID,
 				"error":   err.Error(),
 			})
-			return fmt.Errorf("qq send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("qq send media: %w", channels.ErrTemporary)
 		}
 		if sentMsg != nil && sentMsg.ID != "" {
 			messageIDs = append(messageIDs, sentMsg.ID)
 		}
 	}
-	return nil
+	return messageIDs, nil
 }
 type qqMediaUpload struct {
@ -517,7 +528,7 @@ func (c *QQChannel) sendUploadedMedia(
 	chatKind, chatID string,
 	part bus.MediaPart,
 	fileInfo []byte,
-) error {
+) (*dto.Message, error) {
 	msg := &dto.MessageToCreate{
 		Content: part.Caption,
 		MsgType: dto.RichMediaMsg,
@ -532,11 +543,11 @@ func (c *QQChannel) sendUploadedMedia(
 	}
 	if chatKind == "group" {
-		_, err := c.api.PostGroupMessage(ctx, chatID, msg)
+		sentMsg, err := c.api.PostGroupMessage(ctx, chatID, msg)
-		return err
+		return sentMsg, err
 	}
-	_, err := c.api.PostC2CMessage(ctx, chatID, msg)
+	sentMsg, err := c.api.PostC2CMessage(ctx, chatID, msg)
-	return err
+	return sentMsg, err
 }
 func (c *QQChannel) applyPassiveReplyMetadata(chatID string, msg *dto.MessageToCreate) {
@ -991,3 +1002,8 @@ func sanitizeURLs(text string) string {
 		return scheme + domain + path
 	})
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *QQChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/qq/qq_test.go
+++ b/pkg/channels/qq/qq_test.go
@ -209,7 +209,7 @@ func TestSendMedia_UploadsLocalFileAsBase64(t *testing.T) {
 	ch.lastMsgID.Store("group-1", "msg-1")
 	ch.msgSeqCounters.Store("group-1", new(atomic.Uint64))
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type:    "image",
@ -303,7 +303,7 @@ func assertAudioWAVUploadType(t *testing.T, duration time.Duration, wantFileType
 	ch.SetMediaStore(store)
 	ch.chatType.Store("group-1", "group")
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type: "audio",
@ -337,7 +337,7 @@ func TestSendMedia_RemoteAudioFallsBackToFileUpload(t *testing.T) {
 	ch.SetRunning(true)
 	ch.chatType.Store("user-1", "direct")
-	err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "user-1",
 		Parts: []bus.MediaPart{{
 			Type: "audio",
@ -383,7 +383,7 @@ func TestSendMedia_LocalAudioWithUnknownDurationFallsBackToFileUpload(t *testing
 	ch.SetMediaStore(store)
 	ch.chatType.Store("group-1", "group")
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type: "audio",
@ -417,7 +417,7 @@ func TestSendMedia_UsesRemoteURLUploadForC2C(t *testing.T) {
 	ch.SetRunning(true)
 	ch.chatType.Store("user-1", "direct")
-	err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "user-1",
 		Parts: []bus.MediaPart{{
 			Type: "file",
@ -490,7 +490,7 @@ func TestSendMedia_LocalFileUploadIncludesStoredFilename(t *testing.T) {
 	ch.SetMediaStore(store)
 	ch.chatType.Store("user-1", "direct")
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "user-1",
 		Parts: []bus.MediaPart{{
 			Type: "file",
@ -528,7 +528,7 @@ func TestSendMedia_ReturnsSendFailedWithoutMediaStore(t *testing.T) {
 	ch.SetRunning(true)
 	ch.chatType.Store("group-1", "group")
-	err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type: "image",
@ -578,7 +578,7 @@ func TestSendMedia_ReturnsSendFailedWhenLocalFileExceedsBase64MiBLimit(t *testin
 	ch.SetMediaStore(store)
 	ch.chatType.Store("group-1", "group")
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type: "file",
--- a/pkg/channels/slack/slack.go
+++ b/pkg/channels/slack/slack.go
@ -108,14 +108,14 @@ func (c *SlackChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *SlackChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *SlackChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	channelID, threadTS := parseSlackChatID(msg.ChatID)
 	if channelID == "" {
-		return fmt.Errorf("invalid slack chat ID: %s", msg.ChatID)
+		return nil, fmt.Errorf("invalid slack chat ID: %s", msg.ChatID)
 	}
 	opts := []slack.MsgOption{
@ -130,9 +130,9 @@ func (c *SlackChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 		opts = append(opts, slack.MsgOptionTS(threadTS))
 	}
-	_, _, err := c.api.PostMessageContext(ctx, channelID, opts...)
+	_, ts, err := c.api.PostMessageContext(ctx, channelID, opts...)
 	if err != nil {
-		return fmt.Errorf("slack send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("slack send: %w", channels.ErrTemporary)
 	}
 	if ref, ok := c.pendingAcks.LoadAndDelete(msg.ChatID); ok {
@ -148,23 +148,23 @@ func (c *SlackChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 		"thread_ts":  threadTS,
 	})
-	return nil
+	return []string{ts}, nil
 }
 // SendMedia implements the channels.MediaSender interface.
-func (c *SlackChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *SlackChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	channelID, _ := parseSlackChatID(msg.ChatID)
 	if channelID == "" {
-		return fmt.Errorf("invalid slack chat ID: %s", msg.ChatID)
+		return nil, fmt.Errorf("invalid slack chat ID: %s", msg.ChatID)
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	for _, part := range msg.Parts {
@ -198,11 +198,13 @@ func (c *SlackChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessa
 				"filename": filename,
 				"error":    err.Error(),
 			})
-			return fmt.Errorf("slack send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("slack send media: %w", channels.ErrTemporary)
 		}
 	}
-	return nil
+	// UploadFileV2 does not expose the posted message timestamp in its
 	// response; returning nil avoids conflating file IDs with message IDs.
 	return nil, nil
 }
 // ReactToMessage implements channels.ReactionCapable.
--- a/pkg/channels/telegram/parser_markdown_to_html.go
+++ b/pkg/channels/telegram/parser_markdown_to_html.go
@ -16,14 +16,15 @@ func markdownToTelegramHTML(text string) string {
 	inlineCodes := extractInlineCodes(text)
 	text = inlineCodes.text
 	links := extractLinks(text)
 	text = links.text
 	text = reHeading.ReplaceAllString(text, "$1")
 	text = reBlockquote.ReplaceAllString(text, "$1")
 	text = escapeHTML(text)
 	text = reLink.ReplaceAllString(text, `<a href="$2">$1</a>`)
 	text = reBoldStar.ReplaceAllString(text, "<b>$1</b>")
 	text = reBoldUnder.ReplaceAllString(text, "<b>$1</b>")
@ -40,6 +41,12 @@ func markdownToTelegramHTML(text string) string {
 	text = reListItem.ReplaceAllString(text, "• ")
 	for i, lnk := range links.links {
 		label := escapeHTML(lnk[0])
 		url := lnk[1]
 		text = strings.ReplaceAll(text, fmt.Sprintf("\x00LK%d\x00", i), fmt.Sprintf(`<a href="%s">%s</a>`, url, label))
 	}
 	for i, code := range inlineCodes.codes {
 		escaped := escapeHTML(code)
 		text = strings.ReplaceAll(text, fmt.Sprintf("\x00IC%d\x00", i), fmt.Sprintf("<code>%s</code>", escaped))
@ -57,6 +64,29 @@ func markdownToTelegramHTML(text string) string {
 	return text
 }
 type linkMatch struct {
 	text  string
 	links [][2]string // [label, url]
 }
 func extractLinks(text string) linkMatch {
 	matches := reLink.FindAllStringSubmatch(text, -1)
 	extracted := make([][2]string, 0, len(matches))
 	for _, match := range matches {
 		extracted = append(extracted, [2]string{match[1], match[2]})
 	}
 	i := 0
 	text = reLink.ReplaceAllStringFunc(text, func(m string) string {
 		placeholder := fmt.Sprintf("\x00LK%d\x00", i)
 		i++
 		return placeholder
 	})
 	return linkMatch{text: text, links: extracted}
 }
 type codeBlockMatch struct {
 	text  string
 	codes []string
--- a/pkg/channels/telegram/parser_markdown_to_html_test.go
+++ b/pkg/channels/telegram/parser_markdown_to_html_test.go
@ -0,0 +1,66 @@
 package telegram
 import (
 	"testing"
 	"github.com/stretchr/testify/require"
 )
 func Test_markdownToTelegramHTML(t *testing.T) {
 	cases := []struct {
 		name     string
 		input    string
 		expected string
 	}{
 		{
 			name:     "plain text",
 			input:    "hello world",
 			expected: "hello world",
 		},
 		{
 			name:     "bold",
 			input:    "**bold text**",
 			expected: "<b>bold text</b>",
 		},
 		{
 			name:     "italic",
 			input:    "_italic text_",
 			expected: "<i>italic text</i>",
 		},
 		{
 			name:     "link without underscores in URL",
 			input:    "[click here](https://example.com/path)",
 			expected: `<a href="https://example.com/path">click here</a>`,
 		},
 		{
 			name: "link with underscores in URL is not corrupted by italic regex",
 			// Google Flights URLs use URL-safe base64 with underscores in the tfs param.
 			// Previously reItalic ran after reLink, matching _text_ inside href and injecting
 			// <i> tags into the URL, which broke the link in Telegram.
 			input:    "[3 → 10 сентября — от $202](https://www.google.com/travel/flights/search?tfs=CBwQAho_EgoyURL_safe_base64)",
 			expected: `<a href="https://www.google.com/travel/flights/search?tfs=CBwQAho_EgoyURL_safe_base64">3 → 10 сентября — от $202</a>`,
 		},
 		{
 			name:     "multiple links all survive",
 			input:    "[first](https://a.com/path_one) and [second](https://b.com/path_two_x)",
 			expected: `<a href="https://a.com/path_one">first</a> and <a href="https://b.com/path_two_x">second</a>`,
 		},
 		{
 			name:     "link label with HTML special chars is escaped",
 			input:    "[a & b](https://example.com)",
 			expected: `<a href="https://example.com">a &amp; b</a>`,
 		},
 		{
 			name:     "HTML special chars in plain text are escaped",
 			input:    "a & b < c > d",
 			expected: "a &amp; b &lt; c &gt; d",
 		},
 	}
 	for _, tc := range cases {
 		t.Run(tc.name, func(t *testing.T) {
 			actual := markdownToTelegramHTML(tc.input)
 			require.Equal(t, tc.expected, actual)
 		})
 	}
 }
--- a/pkg/channels/telegram/telegram.go
+++ b/pkg/channels/telegram/telegram.go
@ -168,26 +168,27 @@ func (c *TelegramChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	useMarkdownV2 := c.config.Channels.Telegram.UseMarkdownV2
 	chatID, threadID, err := parseTelegramChatID(msg.ChatID)
 	if err != nil {
-		return fmt.Errorf("invalid chat ID %s: %w", msg.ChatID, channels.ErrSendFailed)
+		return nil, fmt.Errorf("invalid chat ID %s: %w", msg.ChatID, channels.ErrSendFailed)
 	}
 	if msg.Content == "" {
-		return nil
+		return nil, nil
 	}
 	// The Manager already splits messages to ≤4000 chars (WithMaxMessageLength),
 	// so msg.Content is guaranteed to be within that limit. We still need to
 	// check if HTML expansion pushes it beyond Telegram's 4096-char API limit.
 	replyToID := msg.ReplyToMessageID
 	var messageIDs []string
 	queue := []string{msg.Content}
 	for len(queue) > 0 {
 		chunk := queue[0]
@ -206,16 +207,18 @@ func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) err
 			}
 			if smallerLen <= 0 {
-				if err := c.sendChunk(ctx, sendChunkParams{
+				msgID, err := c.sendChunk(ctx, sendChunkParams{
 					chatID:        chatID,
 					threadID:      threadID,
 					content:       content,
 					replyToID:     replyToID,
 					mdFallback:    chunk,
 					useMarkdownV2: useMarkdownV2,
-				}); err != nil {
+				})
-					return err
+				if err != nil {
 					return nil, err
 				}
 				messageIDs = append(messageIDs, msgID)
 				replyToID = ""
 				continue
 			}
@ -244,21 +247,23 @@ func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) err
 			continue
 		}
-		if err := c.sendChunk(ctx, sendChunkParams{
+		msgID, err := c.sendChunk(ctx, sendChunkParams{
 			chatID:        chatID,
 			threadID:      threadID,
 			content:       content,
 			replyToID:     replyToID,
 			mdFallback:    chunk,
 			useMarkdownV2: useMarkdownV2,
-		}); err != nil {
+		})
-			return err
+		if err != nil {
 			return nil, err
 		}
 		messageIDs = append(messageIDs, msgID)
 		// Only the first chunk should be a reply; subsequent chunks are normal messages.
 		replyToID = ""
 	}
-	return nil
+	return messageIDs, nil
 }
 type sendChunkParams struct {
@ -275,7 +280,7 @@ type sendChunkParams struct {
 func (c *TelegramChannel) sendChunk(
 	ctx context.Context,
 	params sendChunkParams,
-) error {
+) (string, error) {
 	tgMsg := tu.Message(tu.ID(params.chatID), params.content)
 	tgMsg.MessageThreadID = params.threadID
 	if params.useMarkdownV2 {
@ -292,17 +297,19 @@ func (c *TelegramChannel) sendChunk(
 		}
 	}
-	if _, err := c.bot.SendMessage(ctx, tgMsg); err != nil {
+	pMsg, err := c.bot.SendMessage(ctx, tgMsg)
 	if err != nil {
 		logParseFailed(err, params.useMarkdownV2)
 		tgMsg.Text = params.mdFallback
 		tgMsg.ParseMode = ""
-		if _, err = c.bot.SendMessage(ctx, tgMsg); err != nil {
+		pMsg, err = c.bot.SendMessage(ctx, tgMsg)
-			return fmt.Errorf("telegram send: %w", channels.ErrTemporary)
+		if err != nil {
 			return "", fmt.Errorf("telegram send: %w", channels.ErrTemporary)
 		}
 	}
-	return nil
+	return strconv.Itoa(pMsg.MessageID), nil
 }
 // maxTypingDuration limits how long the typing indicator can run.
@ -420,21 +427,22 @@ func (c *TelegramChannel) SendPlaceholder(ctx context.Context, chatID string) (s
 }
 // SendMedia implements the channels.MediaSender interface.
-func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	chatID, threadID, err := parseTelegramChatID(msg.ChatID)
 	if err != nil {
-		return fmt.Errorf("invalid chat ID %s: %w", msg.ChatID, channels.ErrSendFailed)
+		return nil, fmt.Errorf("invalid chat ID %s: %w", msg.ChatID, channels.ErrSendFailed)
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	var messageIDs []string
 	for _, part := range msg.Parts {
 		localPath, err := store.Resolve(part.Ref)
 		if err != nil {
@ -454,6 +462,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 			continue
 		}
 		var tgResult *telego.Message
 		switch part.Type {
 		case "image":
 			params := &telego.SendPhotoParams{
@ -462,11 +471,11 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 				Photo:           telego.InputFile{File: file},
 				Caption:         part.Caption,
 			}
-			_, err = c.bot.SendPhoto(ctx, params)
+			tgResult, err = c.bot.SendPhoto(ctx, params)
 			if err != nil && strings.Contains(err.Error(), "PHOTO_INVALID_DIMENSIONS") {
 				if _, seekErr := file.Seek(0, io.SeekStart); seekErr != nil {
 					file.Close()
-					return fmt.Errorf("telegram rewind media after photo failure: %w", channels.ErrTemporary)
+					return nil, fmt.Errorf("telegram rewind media after photo failure: %w", channels.ErrTemporary)
 				}
 				docParams := &telego.SendDocumentParams{
@ -475,7 +484,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 					Document:        telego.InputFile{File: file},
 					Caption:         part.Caption,
 				}
-				_, err = c.bot.SendDocument(ctx, docParams)
+				tgResult, err = c.bot.SendDocument(ctx, docParams)
 			}
 		case "audio":
 			// Send OGG files with "voice" in the filename as Telegram voice
@ -488,7 +497,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 					Voice:           telego.InputFile{File: file},
 					Caption:         part.Caption,
 				}
-				_, err = c.bot.SendVoice(ctx, vparams)
+				tgResult, err = c.bot.SendVoice(ctx, vparams)
 			} else {
 				params := &telego.SendAudioParams{
 					ChatID:          tu.ID(chatID),
@ -496,7 +505,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 					Audio:           telego.InputFile{File: file},
 					Caption:         part.Caption,
 				}
-				_, err = c.bot.SendAudio(ctx, params)
+				tgResult, err = c.bot.SendAudio(ctx, params)
 			}
 		case "video":
 			params := &telego.SendVideoParams{
@ -505,7 +514,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 				Video:           telego.InputFile{File: file},
 				Caption:         part.Caption,
 			}
-			_, err = c.bot.SendVideo(ctx, params)
+			tgResult, err = c.bot.SendVideo(ctx, params)
 		default: // "file" or unknown types
 			params := &telego.SendDocumentParams{
 				ChatID:          tu.ID(chatID),
@ -513,9 +522,12 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 				Document:        telego.InputFile{File: file},
 				Caption:         part.Caption,
 			}
-			_, err = c.bot.SendDocument(ctx, params)
+			tgResult, err = c.bot.SendDocument(ctx, params)
 		}
 		if tgResult != nil {
 			messageIDs = append(messageIDs, strconv.Itoa(tgResult.MessageID))
 		}
 		file.Close()
 		if err != nil {
@ -523,11 +535,11 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 				"type":  part.Type,
 				"error": err.Error(),
 			})
-			return fmt.Errorf("telegram send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("telegram send media: %w", channels.ErrTemporary)
 		}
 	}
-	return nil
+	return messageIDs, nil
 }
 func (c *TelegramChannel) handleMessage(ctx context.Context, message *telego.Message) error {
@ -660,6 +672,23 @@ func (c *TelegramChannel) handleMessage(ctx context.Context, message *telego.Mes
 		content = cleaned
 	}
 	if message.ReplyToMessage != nil {
 		quotedMedia := quotedTelegramMediaRefs(
 			message.ReplyToMessage,
 			func(fileID, ext, filename string) string {
 				localPath := c.downloadFile(ctx, fileID, ext)
 				if localPath == "" {
 					return ""
 				}
 				return storeMedia(localPath, filename)
 			},
 		)
 		if len(quotedMedia) > 0 {
 			mediaPaths = append(quotedMedia, mediaPaths...)
 		}
 		content = c.prependTelegramQuotedReply(content, message.ReplyToMessage)
 	}
 	// For forum topics, embed the thread ID as "chatID/threadID" so replies
 	// route to the correct topic and each topic gets its own session.
 	// Only forum groups (IsForum) are handled; regular group reply threads
@ -693,6 +722,9 @@ func (c *TelegramChannel) handleMessage(ctx context.Context, message *telego.Mes
 		"first_name": user.FirstName,
 		"is_group":   fmt.Sprintf("%t", message.Chat.Type != "private"),
 	}
 	if message.ReplyToMessage != nil {
 		metadata["reply_to_message_id"] = fmt.Sprintf("%d", message.ReplyToMessage.MessageID)
 	}
 	// Set parent_peer metadata for per-topic agent binding.
 	if message.Chat.IsForum && threadID != 0 {
@ -713,6 +745,122 @@ func (c *TelegramChannel) handleMessage(ctx context.Context, message *telego.Mes
 	return nil
 }
 func (c *TelegramChannel) prependTelegramQuotedReply(content string, reply *telego.Message) string {
 	quoted := strings.TrimSpace(telegramQuotedContent(reply))
 	if quoted == "" {
 		return content
 	}
 	author := telegramQuotedAuthor(reply)
 	role := c.telegramQuotedRole(reply)
 	if strings.TrimSpace(content) == "" {
 		return fmt.Sprintf("[quoted %s message from %s]: %s", role, author, quoted)
 	}
 	return fmt.Sprintf("[quoted %s message from %s]: %s\n\n%s", role, author, quoted, content)
 }
 func (c *TelegramChannel) telegramQuotedRole(message *telego.Message) string {
 	if message == nil {
 		return "unknown"
 	}
 	if message.From != nil {
 		if !message.From.IsBot {
 			return "user"
 		}
 		if c.isOwnBotUser(message.From) {
 			return "assistant"
 		}
 		return "bot"
 	}
 	if message.SenderChat != nil {
 		return "chat"
 	}
 	return "unknown"
 }
 func (c *TelegramChannel) isOwnBotUser(user *telego.User) bool {
 	if c == nil || c.bot == nil || user == nil || !user.IsBot {
 		return false
 	}
 	if botID := c.bot.ID(); botID != 0 && user.ID == botID {
 		return true
 	}
 	botUsername := strings.TrimPrefix(strings.TrimSpace(c.bot.Username()), "@")
 	if botUsername == "" {
 		return false
 	}
 	return strings.EqualFold(strings.TrimPrefix(strings.TrimSpace(user.Username), "@"), botUsername)
 }
 func telegramQuotedAuthor(message *telego.Message) string {
 	if message == nil || message.From == nil {
 		return "unknown"
 	}
 	if username := strings.TrimSpace(message.From.Username); username != "" {
 		return username
 	}
 	if firstName := strings.TrimSpace(message.From.FirstName); firstName != "" {
 		return firstName
 	}
 	return "unknown"
 }
 func telegramQuotedContent(message *telego.Message) string {
 	if message == nil {
 		return ""
 	}
 	var parts []string
 	if text := strings.TrimSpace(message.Text); text != "" {
 		parts = append(parts, text)
 	}
 	if caption := strings.TrimSpace(message.Caption); caption != "" {
 		parts = append(parts, caption)
 	}
 	switch {
 	case len(message.Photo) > 0:
 		parts = append(parts, "[image: photo]")
 	}
 	switch {
 	case message.Voice != nil:
 		parts = append(parts, "[voice]")
 	case message.Audio != nil:
 		parts = append(parts, "[audio]")
 	}
 	if message.Document != nil {
 		parts = append(parts, "[file]")
 	}
 	return strings.Join(parts, "\n")
 }
 func quotedTelegramMediaRefs(
 	message *telego.Message,
 	resolve func(fileID, ext, filename string) string,
 ) []string {
 	if message == nil || resolve == nil {
 		return nil
 	}
 	var refs []string
 	if message.Voice != nil {
 		if ref := resolve(message.Voice.FileID, ".ogg", "voice.ogg"); ref != "" {
 			refs = append(refs, ref)
 		}
 	}
 	if message.Audio != nil {
 		if ref := resolve(message.Audio.FileID, ".mp3", "audio.mp3"); ref != "" {
 			refs = append(refs, ref)
 		}
 	}
 	return refs
 }
 func (c *TelegramChannel) downloadPhoto(ctx context.Context, fileID string) string {
 	file, err := c.bot.GetFile(ctx, &telego.GetFileParams{FileID: fileID})
 	if err != nil {
@ -985,3 +1133,8 @@ func cryptoRandInt() int {
 	_, _ = rand.Read(b[:])
 	return int(binary.BigEndian.Uint32(b[:])) | 1 // ensure non-zero
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *TelegramChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/telegram/telegram_test.go
+++ b/pkg/channels/telegram/telegram_test.go
@ -7,6 +7,7 @@ import (
 	"io"
 	"os"
 	"path/filepath"
 	"strconv"
 	"strings"
 	"testing"
@ -104,6 +105,13 @@ func successResponse(t *testing.T) *ta.Response {
 	return &ta.Response{Ok: true, Result: b}
 }
 func successUserResponse(t *testing.T, user *telego.User) *ta.Response {
 	t.Helper()
 	b, err := json.Marshal(user)
 	require.NoError(t, err)
 	return &ta.Response{Ok: true, Result: b}
 }
 // newTestChannel creates a TelegramChannel with a mocked bot for unit testing.
 func newTestChannel(t *testing.T, caller *stubCaller) *TelegramChannel {
 	return newTestChannelWithConstructor(t, caller, &stubConstructor{})
@ -168,7 +176,7 @@ func TestSendMedia_ImageFallbacksToDocumentOnInvalidDimensions(t *testing.T) {
 	)
 	require.NoError(t, err)
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "12345",
 		Parts: []bus.MediaPart{{
 			Type:    "image",
@ -206,7 +214,7 @@ func TestSendMedia_ImageNonDimensionErrorDoesNotFallback(t *testing.T) {
 	ref, err := store.Store(localPath, media.MediaMeta{Filename: "image.png", ContentType: "image/png"}, "scope-1")
 	require.NoError(t, err)
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "12345",
 		Parts: []bus.MediaPart{{
 			Type: "image",
@ -231,7 +239,7 @@ func TestSend_EmptyContent(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "",
 	})
@ -248,7 +256,7 @@ func TestSend_ShortMessage_SingleCall(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "Hello, world!",
 	})
@ -271,7 +279,7 @@ func TestSend_LongMessage_SingleCall(t *testing.T) {
 	longContent := strings.Repeat("a", 4000)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: longContent,
 	})
@ -294,7 +302,7 @@ func TestSend_HTMLFallback_PerChunk(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "Hello **world**",
 	})
@ -312,7 +320,7 @@ func TestSend_HTMLFallback_BothFail(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "Hello",
 	})
@ -334,7 +342,7 @@ func TestSend_LongMessage_HTMLFallback_StopsOnError(t *testing.T) {
 	longContent := strings.Repeat("x", 4001)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: longContent,
 	})
@ -364,7 +372,7 @@ func TestSend_MarkdownShortButHTMLLong_MultipleCalls(t *testing.T) {
 		"HTML expansion must exceed Telegram limit for this test to be meaningful",
 	)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: markdownContent,
 	})
@ -399,7 +407,7 @@ func TestSend_HTMLOverflow_WordBoundary(t *testing.T) {
 	// Ensure the test content matches the intended boundary conditions.
 	assert.LessOrEqual(t, len([]rune(content)), 4000, "markdown content must not exceed chunk size for this test")
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "123456",
 		Content: content,
 	})
@ -435,7 +443,7 @@ func TestSend_NotRunning(t *testing.T) {
 	ch := newTestChannel(t, caller)
 	ch.SetRunning(false)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "Hello",
 	})
@ -453,7 +461,7 @@ func TestSend_InvalidChatID(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "not-a-number",
 		Content: "Hello",
 	})
@ -510,7 +518,7 @@ func TestSend_WithForumThreadID(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "-1001234567890/42",
 		Content: "Hello from topic",
 	})
@ -642,6 +650,181 @@ func TestHandleMessage_ReplyThread_NonForum_NoIsolation(t *testing.T) {
 	assert.Empty(t, inbound.Metadata["parent_peer_id"])
 }
 func assertHandleMessageQuotedUserReply(
 	t *testing.T,
 	chatID int64,
 	messageID int,
 	userID int64,
 	userName string,
 	userText string,
 	replyMessageID int,
 	replyText string,
 	replyCaption string,
 	replyAuthorID int64,
 	replyAuthorName string,
 	expectedContent string,
 ) {
 	t.Helper()
 	messageBus := bus.NewMessageBus()
 	ch := &TelegramChannel{
 		BaseChannel: channels.NewBaseChannel("telegram", nil, messageBus, nil),
 		chatIDs:     make(map[string]int64),
 		ctx:         context.Background(),
 	}
 	msg := &telego.Message{
 		Text:      userText,
 		MessageID: messageID,
 		Chat: telego.Chat{
 			ID:   chatID,
 			Type: "private",
 		},
 		From: &telego.User{
 			ID:        userID,
 			FirstName: userName,
 		},
 		ReplyToMessage: &telego.Message{
 			MessageID: replyMessageID,
 			Text:      replyText,
 			Caption:   replyCaption,
 			From: &telego.User{
 				ID:        replyAuthorID,
 				FirstName: replyAuthorName,
 			},
 		},
 	}
 	err := ch.handleMessage(context.Background(), msg)
 	require.NoError(t, err)
 	inbound, ok := <-messageBus.InboundChan()
 	require.True(t, ok)
 	assert.Equal(t, strconv.Itoa(replyMessageID), inbound.Metadata["reply_to_message_id"])
 	assert.Equal(t, expectedContent, inbound.Content)
 }
 func TestHandleMessage_ReplyToMessage_PrependsQuotedTextAndMetadata(t *testing.T) {
 	assertHandleMessageQuotedUserReply(
 		t,
 		456,
 		21,
 		11,
 		"Alice",
 		"follow up",
 		99,
 		"old context",
 		"",
 		12,
 		"Bob",
 		"[quoted user message from Bob]: old context\n\nfollow up",
 	)
 }
 func TestHandleMessage_ReplyToMessage_UsesCaptionWhenQuotedTextMissing(t *testing.T) {
 	assertHandleMessageQuotedUserReply(
 		t,
 		789,
 		22,
 		13,
 		"Carol",
 		"answer this",
 		100,
 		"",
 		"caption context",
 		14,
 		"Dave",
 		"[quoted user message from Dave]: caption context\n\nanswer this",
 	)
 }
 func TestHandleMessage_ReplyToOwnBotMessage_UsesAssistantRole(t *testing.T) {
 	messageBus := bus.NewMessageBus()
 	caller := &stubCaller{
 		callFn: func(ctx context.Context, url string, data *ta.RequestData) (*ta.Response, error) {
 			if strings.Contains(url, "getMe") {
 				return successUserResponse(t, &telego.User{
 					ID:        42,
 					IsBot:     true,
 					FirstName: "Pico",
 					Username:  "afjcjsbx_picoclaw_bot",
 				}), nil
 			}
 			t.Fatalf("unexpected API call: %s", url)
 			return nil, nil
 		},
 	}
 	ch := newTestChannel(t, caller)
 	ch.BaseChannel = channels.NewBaseChannel("telegram", nil, messageBus, nil)
 	ch.ctx = context.Background()
 	msg := &telego.Message{
 		Text:      "ti ricordi questo file?",
 		MessageID: 23,
 		Chat: telego.Chat{
 			ID:   999,
 			Type: "private",
 		},
 		From: &telego.User{
 			ID:        15,
 			FirstName: "Eve",
 		},
 		ReplyToMessage: &telego.Message{
 			MessageID: 101,
 			Text:      "Fatto! Ho creato il file notizie_2026_03_28.md",
 			From: &telego.User{
 				ID:        42,
 				IsBot:     true,
 				FirstName: "Pico",
 				Username:  "afjcjsbx_picoclaw_bot",
 			},
 		},
 	}
 	err := ch.handleMessage(context.Background(), msg)
 	require.NoError(t, err)
 	inbound, ok := <-messageBus.InboundChan()
 	require.True(t, ok)
 	assert.Equal(t, "101", inbound.Metadata["reply_to_message_id"])
 	assert.Equal(
 		t,
 		"[quoted assistant message from afjcjsbx_picoclaw_bot]: Fatto! Ho creato il file notizie_2026_03_28.md\n\nti ricordi questo file?",
 		inbound.Content,
 	)
 }
 func TestTelegramQuotedContent_IncludesVoiceMarkerAlongsideCaption(t *testing.T) {
 	msg := &telego.Message{
 		Caption: "listen to this",
 		Voice: &telego.Voice{
 			FileID: "voice-file",
 		},
 	}
 	assert.Equal(t, "listen to this\n[voice]", telegramQuotedContent(msg))
 }
 func TestQuotedTelegramMediaRefs_ResolvesQuotedAudioInOrder(t *testing.T) {
 	msg := &telego.Message{
 		Voice: &telego.Voice{FileID: "voice-file"},
 		Audio: &telego.Audio{FileID: "audio-file"},
 	}
 	var calls []string
 	refs := quotedTelegramMediaRefs(msg, func(fileID, ext, filename string) string {
 		calls = append(calls, fileID+"|"+ext+"|"+filename)
 		return "ref://" + filename
 	})
 	assert.Equal(
 		t,
 		[]string{"voice-file|.ogg|voice.ogg", "audio-file|.mp3|audio.mp3"},
 		calls,
 	)
 	assert.Equal(t, []string{"ref://voice.ogg", "ref://audio.mp3"}, refs)
 }
 func TestHandleMessage_EmptyContent_Ignored(t *testing.T) {
 	messageBus := bus.NewMessageBus()
 	ch := &TelegramChannel{
--- a/pkg/channels/voice_capabilities.go
+++ b/pkg/channels/voice_capabilities.go
@ -0,0 +1,58 @@
 package channels
 // VoiceCapabilities describes whether ASR (speech-to-text) and TTS (text-to-speech)
 // are available for a channel under the current configuration.
 type VoiceCapabilities struct {
 	ASR bool
 	TTS bool
 }
 // VoiceCapabilityProvider is an optional interface for channels that want to
 // explicitly declare their ASR/TTS support.
 type VoiceCapabilityProvider interface {
 	VoiceCapabilities() VoiceCapabilities
 }
 // Deprecated: Channels should implement VoiceCapabilityProvider instead.
 // To be removed once all existing capable channels conform to the interface.
 var asrCapableChannels = map[string]bool{
 	"discord":  true,
 	"telegram": true,
 	"matrix":   true,
 	"qq":       true,
 	"weixin":   true,
 	"line":     true,
 	"feishu":   true,
 	"onebot":   true,
 }
 // DetectVoiceCapabilities returns ASR/TTS availability for a channel, gated by
 // whether providers are configured.
 func DetectVoiceCapabilities(channelName string, ch Channel, asrAvailable bool, ttsAvailable bool) VoiceCapabilities {
 	if ch == nil {
 		return VoiceCapabilities{}
 	}
 	if vcp, ok := ch.(VoiceCapabilityProvider); ok {
 		caps := vcp.VoiceCapabilities()
 		if !asrAvailable {
 			caps.ASR = false
 		}
 		if !ttsAvailable {
 			caps.TTS = false
 		}
 		return caps
 	}
 	caps := VoiceCapabilities{}
 	if asrAvailable {
 		caps.ASR = asrCapableChannels[channelName]
 	}
 	if ttsAvailable {
 		if _, ok := ch.(MediaSender); ok {
 			caps.TTS = true
 		}
 	}
 	return caps
 }
--- a/pkg/channels/wecom/wecom.go
+++ b/pkg/channels/wecom/wecom.go
@ -184,20 +184,20 @@ func (c *WeComChannel) BeginStream(_ context.Context, chatID string) (channels.S
 	}, nil
 }
-func (c *WeComChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *WeComChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	content := strings.TrimSpace(msg.Content)
 	if content == "" {
-		return nil
+		return nil, nil
 	}
 	if turn, ok := c.getTurn(msg.ChatID); ok {
 		if time.Since(turn.CreatedAt) <= wecomStreamMaxDuration {
 			if err := c.sendStreamReply(turn, content); err == nil {
 				c.consumeTurn(msg.ChatID, turn)
-				return nil
+				return nil, nil
 			}
 		}
 		c.consumeTurn(msg.ChatID, turn)
@ -205,20 +205,20 @@ func (c *WeComChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 	if route, ok := c.routes.Get(msg.ChatID); ok {
 		if err := c.sendActivePush(route.ChatID, route.ChatType, content); err != nil {
-			return err
+			return nil, err
 		}
-		return nil
+		return nil, nil
 	}
 	if err := c.sendActivePush(msg.ChatID, 0, content); err != nil {
-		return err
+		return nil, err
 	}
-	return nil
+	return nil, nil
 }
-func (c *WeComChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *WeComChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	route, chatType, hasTurn := c.resolveMediaRoute(msg.ChatID)
@ -231,7 +231,7 @@ func (c *WeComChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessa
 		if strings.TrimSpace(part.Ref) == "" {
 			if caption := strings.TrimSpace(part.Caption); caption != "" {
 				if err := c.sendActivePush(chatID, chatType, caption); err != nil {
-					return err
+					return nil, err
 				}
 			}
 			continue
@ -239,7 +239,7 @@ func (c *WeComChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessa
 		localPath, filename, contentType, cleanup, err := c.resolveOutboundPart(ctx, part)
 		if err != nil {
-			return fmt.Errorf("wecom resolve media %q: %v: %w", part.Ref, err, channels.ErrSendFailed)
+			return nil, fmt.Errorf("wecom resolve media %q: %v: %w", part.Ref, err, channels.ErrSendFailed)
 		}
 		func() {
@ -283,11 +283,11 @@ func (c *WeComChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessa
 			}
 		}()
 		if err != nil {
-			return err
+			return nil, err
 		}
 	}
-	return nil
+	return nil, nil
 }
 func (c *WeComChannel) connectLoop() {
--- a/pkg/channels/wecom/wecom_test.go
+++ b/pkg/channels/wecom/wecom_test.go
@ -190,7 +190,7 @@ func TestSend_StreamFailureFallsBackToActualChatID(t *testing.T) {
 		return wecomTestAck(nil), nil
 	}
-	if err := ch.Send(context.Background(), bus.OutboundMessage{
+	if _, err := ch.Send(context.Background(), bus.OutboundMessage{
 		Channel: "wecom",
 		ChatID:  "chat-1",
 		Content: "hello",
@ -247,7 +247,7 @@ func TestSend_DoesNotSplitStreamReply(t *testing.T) {
 	}
 	content := strings.Repeat("\u4e2d", 30000)
-	if err := ch.Send(context.Background(), bus.OutboundMessage{
+	if _, err := ch.Send(context.Background(), bus.OutboundMessage{
 		Channel: "wecom",
 		ChatID:  "chat-1",
 		Content: content,
@ -283,7 +283,7 @@ func TestSend_DoesNotSplitActivePush(t *testing.T) {
 	}
 	content := strings.Repeat("a", 30000)
-	if err := ch.Send(context.Background(), bus.OutboundMessage{
+	if _, err := ch.Send(context.Background(), bus.OutboundMessage{
 		Channel: "wecom",
 		ChatID:  "chat-1",
 		Content: content,
@ -346,7 +346,7 @@ func TestSendMedia_SendsActiveImage(t *testing.T) {
 		}
 	}
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		Channel: "wecom",
 		ChatID:  "chat-1",
 		Parts: []bus.MediaPart{{
@ -457,7 +457,7 @@ func TestSendMedia_UsesTurnImageAndFinishesStream(t *testing.T) {
 		}
 	}
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		Channel: "wecom",
 		ChatID:  "chat-1",
 		Parts: []bus.MediaPart{{
@ -553,7 +553,7 @@ func TestSendMedia_SendsActiveFile(t *testing.T) {
 		}
 	}
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		Channel: "wecom",
 		ChatID:  "chat-2",
 		Parts: []bus.MediaPart{{
--- a/pkg/channels/weixin/media.go
+++ b/pkg/channels/weixin/media.go
@ -1097,12 +1097,12 @@ func (c *WeixinChannel) StartTyping(ctx context.Context, chatID string) (func(),
 }
 // SendMedia implements channels.MediaSender.
-func (c *WeixinChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *WeixinChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return basechannels.ErrNotRunning
+		return nil, basechannels.ErrNotRunning
 	}
 	if err := c.ensureSessionActive(); err != nil {
-		return err
+		return nil, err
 	}
 	contextToken := ""
@ -1110,7 +1110,7 @@ func (c *WeixinChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 		contextToken, _ = v.(string)
 	}
 	if contextToken == "" {
-		return fmt.Errorf(
+		return nil, fmt.Errorf(
 			"weixin send media: missing context token for chat %s: %w",
 			msg.ChatID,
 			basechannels.ErrSendFailed,
@ -1125,7 +1125,7 @@ func (c *WeixinChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 				"ref":     part.Ref,
 				"error":   err.Error(),
 			})
-			return fmt.Errorf("weixin send media: %w", basechannels.ErrSendFailed)
+			return nil, fmt.Errorf("weixin send media: %w", basechannels.ErrSendFailed)
 		}
 		func() {
 			if cleanup != nil {
@ -1147,11 +1147,11 @@ func (c *WeixinChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 				"error":   err.Error(),
 			})
 			if c.remainingPause() > 0 {
-				return fmt.Errorf("weixin send media: %w", basechannels.ErrSendFailed)
+				return nil, fmt.Errorf("weixin send media: %w", basechannels.ErrSendFailed)
 			}
-			return fmt.Errorf("weixin send media: %w", basechannels.ErrTemporary)
+			return nil, fmt.Errorf("weixin send media: %w", basechannels.ErrTemporary)
 		}
 	}
-	return nil
+	return nil, nil
 }
--- a/pkg/channels/weixin/weixin.go
+++ b/pkg/channels/weixin/weixin.go
@ -358,16 +358,16 @@ func (c *WeixinChannel) handleInboundMessage(ctx context.Context, msg WeixinMess
 }
 // Send implements channels.Channel by sending a text message to the WeChat user.
-func (c *WeixinChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *WeixinChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	if err := c.ensureSessionActive(); err != nil {
-		return err
+		return nil, err
 	}
 	if msg.Content == "" {
-		return nil
+		return nil, nil
 	}
 	// We need a context_token to send a reply. It should be stored in the conversation metadata.
@ -386,7 +386,7 @@ func (c *WeixinChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 		logger.ErrorCF("weixin", "Missing context token, cannot send message", map[string]any{
 			"to_user_id": toUserID,
 		})
-		return fmt.Errorf("weixin send: %w: missing context token for chat %s", channels.ErrSendFailed, toUserID)
+		return nil, fmt.Errorf("weixin send: %w: missing context token for chat %s", channels.ErrSendFailed, toUserID)
 	}
 	if err := c.sendTextMessage(ctx, toUserID, contextToken, msg.Content); err != nil {
@ -395,10 +395,15 @@ func (c *WeixinChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 			"error":      err.Error(),
 		})
 		if c.remainingPause() > 0 {
-			return fmt.Errorf("weixin send: %w", channels.ErrSendFailed)
+			return nil, fmt.Errorf("weixin send: %w", channels.ErrSendFailed)
 		}
-		return fmt.Errorf("weixin send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("weixin send: %w", channels.ErrTemporary)
 	}
-	return nil
+	return nil, nil
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *WeixinChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/whatsapp/whatsapp.go
+++ b/pkg/channels/whatsapp/whatsapp.go
@ -104,15 +104,15 @@ func (c *WhatsAppChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *WhatsAppChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *WhatsAppChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	// Check ctx before acquiring lock
 	select {
 	case <-ctx.Done():
-		return ctx.Err()
+		return nil, ctx.Err()
 	default:
 	}
@ -120,7 +120,7 @@ func (c *WhatsAppChannel) Send(ctx context.Context, msg bus.OutboundMessage) err
 	defer c.mu.Unlock()
 	if c.conn == nil {
-		return fmt.Errorf("whatsapp connection not established: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("whatsapp connection not established: %w", channels.ErrTemporary)
 	}
 	payload := map[string]any{
@ -131,17 +131,17 @@ func (c *WhatsAppChannel) Send(ctx context.Context, msg bus.OutboundMessage) err
 	data, err := json.Marshal(payload)
 	if err != nil {
-		return fmt.Errorf("failed to marshal message: %w", err)
+		return nil, fmt.Errorf("failed to marshal message: %w", err)
 	}
 	_ = c.conn.SetWriteDeadline(time.Now().Add(10 * time.Second))
 	if err := c.conn.WriteMessage(websocket.TextMessage, data); err != nil {
 		_ = c.conn.SetWriteDeadline(time.Time{})
-		return fmt.Errorf("whatsapp send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("whatsapp send: %w", channels.ErrTemporary)
 	}
 	_ = c.conn.SetWriteDeadline(time.Time{})
-	return nil
+	return nil, nil
 }
 func (c *WhatsAppChannel) listen() {
--- a/pkg/channels/whatsapp_native/whatsapp_native.go
+++ b/pkg/channels/whatsapp_native/whatsapp_native.go
@ -396,13 +396,13 @@ func (c *WhatsAppNativeChannel) handleIncoming(evt *events.Message) {
 	c.HandleMessage(c.runCtx, peer, messageID, senderID, chatID, content, mediaPaths, metadata, sender)
 }
-func (c *WhatsAppNativeChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *WhatsAppNativeChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	select {
 	case <-ctx.Done():
-		return ctx.Err()
+		return nil, ctx.Err()
 	default:
 	}
@ -411,18 +411,18 @@ func (c *WhatsAppNativeChannel) Send(ctx context.Context, msg bus.OutboundMessag
 	c.mu.Unlock()
 	if client == nil || !client.IsConnected() {
-		return fmt.Errorf("whatsapp connection not established: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("whatsapp connection not established: %w", channels.ErrTemporary)
 	}
 	// Detect unpaired state: the client is connected (to WhatsApp servers)
 	// but has not completed QR-login yet, so sending would fail.
 	if client.Store.ID == nil {
-		return fmt.Errorf("whatsapp not yet paired (QR login pending): %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("whatsapp not yet paired (QR login pending): %w", channels.ErrTemporary)
 	}
 	to, err := parseJID(msg.ChatID)
 	if err != nil {
-		return fmt.Errorf("invalid chat id %q: %w", msg.ChatID, err)
+		return nil, fmt.Errorf("invalid chat id %q: %w", msg.ChatID, err)
 	}
 	waMsg := &waE2E.Message{
@ -430,9 +430,9 @@ func (c *WhatsAppNativeChannel) Send(ctx context.Context, msg bus.OutboundMessag
 	}
 	if _, err = client.SendMessage(ctx, to, waMsg); err != nil {
-		return fmt.Errorf("whatsapp send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("whatsapp send: %w", channels.ErrTemporary)
 	}
-	return nil
+	return nil, nil
 }
 // parseJID converts a chat ID (phone number or JID string) to types.JID.
--- a/pkg/config/config.go
+++ b/pkg/config/config.go
@ -559,8 +559,8 @@ type DevicesConfig struct {
 type VoiceConfig struct {
 	ModelName         string `json:"model_name,omitempty"     env:"PICOCLAW_VOICE_MODEL_NAME"`
 	TTSModelName      string `json:"tts_model_name,omitempty" env:"PICOCLAW_VOICE_TTS_MODEL_NAME"`
 	EchoTranscription bool   `json:"echo_transcription"       env:"PICOCLAW_VOICE_ECHO_TRANSCRIPTION"`
 	ElevenLabsAPIKey  string `json:"elevenlabs_api_key,omitempty" env:"PICOCLAW_VOICE_ELEVENLABS_API_KEY"`
 }
 // ModelConfig represents a model-centric provider configuration.
@ -636,13 +636,6 @@ func (c *ModelConfig) SetAPIKey(value string) {
 	}
 }
 type GatewayConfig struct {
 	Host      string `json:"host"                env:"PICOCLAW_GATEWAY_HOST"`
 	Port      int    `json:"port"                env:"PICOCLAW_GATEWAY_PORT"`
 	HotReload bool   `json:"hot_reload"          env:"PICOCLAW_GATEWAY_HOT_RELOAD"`
 	LogLevel  string `json:"log_level,omitempty" env:"PICOCLAW_LOG_LEVEL"`
 }
 type ToolDiscoveryConfig struct {
 	Enabled          bool `json:"enabled"            env:"PICOCLAW_TOOLS_DISCOVERY_ENABLED"`
 	TTL              int  `json:"ttl"                env:"PICOCLAW_TOOLS_DISCOVERY_TTL"`
@ -836,6 +829,7 @@ type ToolsConfig struct {
 	Message         ToolConfig         `json:"message"           yaml:"-"                                                       envPrefix:"PICOCLAW_TOOLS_MESSAGE_"`
 	ReadFile        ReadFileToolConfig `json:"read_file"         yaml:"-"                                                       envPrefix:"PICOCLAW_TOOLS_READ_FILE_"`
 	SendFile        ToolConfig         `json:"send_file"         yaml:"-"                                                       envPrefix:"PICOCLAW_TOOLS_SEND_FILE_"`
 	SendTTS         ToolConfig         `json:"send_tts"          yaml:"-"                                                       envPrefix:"PICOCLAW_TOOLS_SEND_TTS_"`
 	Spawn           ToolConfig         `json:"spawn"             yaml:"-"                                                       envPrefix:"PICOCLAW_TOOLS_SPAWN_"`
 	SpawnStatus     ToolConfig         `json:"spawn_status"      yaml:"-"                                                       envPrefix:"PICOCLAW_TOOLS_SPAWN_STATUS_"`
 	SPI             ToolConfig         `json:"spi"               yaml:"-"                                                       envPrefix:"PICOCLAW_TOOLS_SPI_"`
@ -1288,6 +1282,8 @@ func (t *ToolsConfig) IsToolEnabled(name string) bool {
 		return t.WebFetch.Enabled
 	case "send_file":
 		return t.SendFile.Enabled
 	case "send_tts":
 		return t.SendTTS.Enabled
 	case "write_file":
 		return t.WriteFile.Enabled
 	case "mcp":
--- a/pkg/config/config_test.go
+++ b/pkg/config/config_test.go
@ -1418,6 +1418,38 @@ func TestConfigLogLevelEmpty(t *testing.T) {
 	}
 }
 func TestResolveGatewayLogLevel(t *testing.T) {
 	dir := t.TempDir()
 	cfgPath := filepath.Join(dir, "config.json")
 	data := `{"version":1,"gateway":{"log_level":"debug"}}`
 	if err := os.WriteFile(cfgPath, []byte(data), 0o600); err != nil {
 		t.Fatalf("setup: %v", err)
 	}
 	if got := ResolveGatewayLogLevel(cfgPath); got != "debug" {
 		t.Fatalf("ResolveGatewayLogLevel() = %q, want %q", got, "debug")
 	}
 }
 func TestResolveGatewayLogLevel_UsesEnvOverrideAndNormalizesInvalid(t *testing.T) {
 	dir := t.TempDir()
 	cfgPath := filepath.Join(dir, "config.json")
 	data := `{"version":1,"gateway":{"log_level":"debug"}}`
 	if err := os.WriteFile(cfgPath, []byte(data), 0o600); err != nil {
 		t.Fatalf("setup: %v", err)
 	}
 	t.Setenv("PICOCLAW_LOG_LEVEL", "warning")
 	if got := ResolveGatewayLogLevel(cfgPath); got != "warn" {
 		t.Fatalf("ResolveGatewayLogLevel() with env override = %q, want %q", got, "warn")
 	}
 	t.Setenv("PICOCLAW_LOG_LEVEL", "garbage")
 	if got := ResolveGatewayLogLevel(cfgPath); got != DefaultGatewayLogLevel {
 		t.Fatalf("ResolveGatewayLogLevel() with invalid env override = %q, want %q", got, DefaultGatewayLogLevel)
 	}
 }
 func TestModelConfig_ExtraBodyRoundTrip(t *testing.T) {
 	dir := t.TempDir()
 	cfgPath := filepath.Join(dir, "config.json")
--- a/pkg/config/defaults.go
+++ b/pkg/config/defaults.go
@ -347,7 +347,7 @@ func DefaultConfig() *Config {
 			Host:      "127.0.0.1",
 			Port:      18790,
 			HotReload: false,
-			LogLevel:  "warn",
+			LogLevel:  DefaultGatewayLogLevel,
 		},
 		Tools: ToolsConfig{
 			FilterSensitiveData: true,
@ -434,6 +434,9 @@ func DefaultConfig() *Config {
 			SendFile: ToolConfig{
 				Enabled: true,
 			},
 			SendTTS: ToolConfig{
 				Enabled: false,
 			},
 			MCP: MCPConfig{
 				ToolConfig: ToolConfig{
 					Enabled: false,
--- a/pkg/config/gateway.go
+++ b/pkg/config/gateway.go
@ -0,0 +1,72 @@
 package config
 import (
 	"encoding/json"
 	"os"
 	"github.com/sipeed/picoclaw/pkg/logger"
 )
 const DefaultGatewayLogLevel = "warn"
 type GatewayConfig struct {
 	Host      string `json:"host"                env:"PICOCLAW_GATEWAY_HOST"`
 	Port      int    `json:"port"                env:"PICOCLAW_GATEWAY_PORT"`
 	HotReload bool   `json:"hot_reload"          env:"PICOCLAW_GATEWAY_HOT_RELOAD"`
 	LogLevel  string `json:"log_level,omitempty" env:"PICOCLAW_LOG_LEVEL"`
 }
 func canonicalGatewayLogLevel(level logger.LogLevel) string {
 	switch level {
 	case logger.DEBUG:
 		return "debug"
 	case logger.INFO:
 		return "info"
 	case logger.WARN:
 		return "warn"
 	case logger.ERROR:
 		return "error"
 	case logger.FATAL:
 		return "fatal"
 	default:
 		return DefaultGatewayLogLevel
 	}
 }
 func normalizeGatewayLogLevel(logLevel string) string {
 	if level, ok := logger.ParseLevel(logLevel); ok {
 		return canonicalGatewayLogLevel(level)
 	}
 	return DefaultGatewayLogLevel
 }
 // EffectiveGatewayLogLevel returns the normalized runtime log level from a loaded config.
 // Invalid or empty values fall back to the package default.
 func EffectiveGatewayLogLevel(cfg *Config) string {
 	if cfg == nil {
 		return DefaultGatewayLogLevel
 	}
 	return normalizeGatewayLogLevel(cfg.Gateway.LogLevel)
 }
 // ResolveGatewayLogLevel reads the configured gateway log level without triggering
 // the full config loader, so startup code can apply logging before config load logs run.
 // The PICOCLAW_LOG_LEVEL environment variable overrides the file value.
 func ResolveGatewayLogLevel(path string) string {
 	cfg := struct {
 		Gateway GatewayConfig `json:"gateway"`
 	}{
 		Gateway: GatewayConfig{LogLevel: DefaultGatewayLogLevel},
 	}
 	data, err := os.ReadFile(path)
 	if err == nil {
 		_ = json.Unmarshal(data, &cfg)
 	}
 	if envLevel := os.Getenv("PICOCLAW_LOG_LEVEL"); envLevel != "" {
 		cfg.Gateway.LogLevel = envLevel
 	}
 	return normalizeGatewayLogLevel(cfg.Gateway.LogLevel)
 }
--- a/pkg/gateway/gateway.go
+++ b/pkg/gateway/gateway.go
@ -6,6 +6,7 @@ import (
 	"os"
 	"os/signal"
 	"path/filepath"
 	"sort"
 	"strings"
 	"sync"
 	"sync/atomic"
@ -13,6 +14,8 @@ import (
 	"time"
 	"github.com/sipeed/picoclaw/pkg/agent"
 	"github.com/sipeed/picoclaw/pkg/audio/asr"
 	"github.com/sipeed/picoclaw/pkg/audio/tts"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/channels"
 	_ "github.com/sipeed/picoclaw/pkg/channels/dingtalk"
@ -41,7 +44,6 @@ import (
 	"github.com/sipeed/picoclaw/pkg/providers"
 	"github.com/sipeed/picoclaw/pkg/state"
 	"github.com/sipeed/picoclaw/pkg/tools"
 	"github.com/sipeed/picoclaw/pkg/voice"
 )
 const (
@ -61,6 +63,7 @@ type services struct {
 	ChannelManager   *channels.Manager
 	DeviceService    *devices.Service
 	HealthServer     *health.Server
 	VoiceAgentCancel context.CancelFunc
 	manualReloadChan chan struct{}
 	reloading        atomic.Bool
 	authToken        string
@ -70,6 +73,27 @@ type startupBlockedProvider struct {
 	reason string
 }
 func logChannelVoiceCapabilities(cm *channels.Manager, asrAvailable bool, ttsAvailable bool) {
 	if cm == nil {
 		return
 	}
 	names := cm.GetEnabledChannels()
 	sort.Strings(names)
 	for _, name := range names {
 		ch, ok := cm.GetChannel(name)
 		if !ok {
 			continue
 		}
 		caps := channels.DetectVoiceCapabilities(name, ch, asrAvailable, ttsAvailable)
 		logger.InfoCF("voice", "Channel voice capabilities", map[string]any{
 			"channel": name,
 			"asr":     caps.ASR,
 			"tts":     caps.TTS,
 		})
 	}
 }
 func (p *startupBlockedProvider) Chat(
 	_ context.Context,
 	_ []providers.Message,
@ -98,6 +122,12 @@ func Run(debug bool, homePath, configPath string, allowEmptyStartup bool) error
 	}
 	defer logger.DisableFileLogging()
 	if debug {
 		logger.SetLevel(logger.DEBUG)
 	} else {
 		logger.SetLevelFromString(config.ResolveGatewayLogLevel(configPath))
 	}
 	cfg, err := config.LoadConfig(configPath)
 	if err != nil {
 		logger.Fatalf("error loading config: %v", err)
@ -109,16 +139,17 @@ func Run(debug bool, homePath, configPath string, allowEmptyStartup bool) error
 	// Debug mode permanently overrides the config log level to DEBUG.
 	if debug {
 		logger.SetLevel(logger.DEBUG)
 		fmt.Println("🔍 Debug mode enabled")
 	} else {
-		logger.SetLevelFromString(cfg.Gateway.LogLevel)
+		effectiveLogLevel := config.EffectiveGatewayLogLevel(cfg)
-		logger.Infof("Log level set to %q", cfg.Gateway.LogLevel)
+		logger.SetLevelFromString(effectiveLogLevel)
 		logger.Infof("Log level set to %q", effectiveLogLevel)
 	}
 	// Enforce singleton: write PID file with generated token.
 	pidData, err := pid.WritePidFile(homePath, cfg.Gateway.Host, cfg.Gateway.Port)
 	if err != nil {
 		logger.Warnf("write pid file failed: %v", err)
 		return fmt.Errorf("singleton check failed: %w", err)
 	}
 	defer pid.RemovePidFile(homePath)
@ -331,11 +362,14 @@ func setupAndStartServices(
 	agentLoop.SetChannelManager(runningServices.ChannelManager)
 	agentLoop.SetMediaStore(runningServices.MediaStore)
-	if transcriber := voice.DetectTranscriber(cfg); transcriber != nil {
+	transcriber := asr.DetectTranscriber(cfg)
 	if transcriber != nil {
 		agentLoop.SetTranscriber(transcriber)
 		logger.InfoCF("voice", "Transcription enabled (agent-level)", map[string]any{"provider": transcriber.Name()})
 	}
 	ttsAvailable := tts.DetectTTS(cfg) != nil
 	enabledChannels := runningServices.ChannelManager.GetEnabledChannels()
 	if len(enabledChannels) > 0 {
 		fmt.Printf("✓ Channels enabled: %s\n", enabledChannels)
@ -352,6 +386,16 @@ func setupAndStartServices(
 		return nil, fmt.Errorf("error starting channels: %w", err)
 	}
 	logChannelVoiceCapabilities(runningServices.ChannelManager, transcriber != nil, ttsAvailable)
 	if transcriber != nil {
 		// Start Voice Agent Orchestrator after channels are ready.
 		vaCtx, vaCancel := context.WithCancel(context.Background())
 		runningServices.VoiceAgentCancel = vaCancel
 		voiceAgent := asr.NewAgent(msgBus, transcriber)
 		voiceAgent.Start(vaCtx)
 	}
 	fmt.Printf(
 		"✓ Health endpoints available at http://%s:%d/health, /ready and /reload (POST)\n",
 		cfg.Gateway.Host,
@ -381,6 +425,9 @@ func stopAndCleanupServices(runningServices *services, shutdownTimeout time.Dura
 	if !isReload && runningServices.ChannelManager != nil {
 		runningServices.ChannelManager.StopAll(shutdownCtx)
 	}
 	if runningServices.VoiceAgentCancel != nil {
 		runningServices.VoiceAgentCancel()
 	}
 	if runningServices.DeviceService != nil {
 		runningServices.DeviceService.Stop()
 	}
@ -476,8 +523,9 @@ func handleConfigReload(
 	// Debug mode permanently overrides the config log level to DEBUG.
 	if !debug {
 		// Update log level last so that reload-related info/warn logs above are not suppressed.
-		logger.SetLevelFromString(newCfg.Gateway.LogLevel)
+		effectiveLogLevel := config.EffectiveGatewayLogLevel(newCfg)
-		logger.Infof("Log level changing from current to %q", newCfg.Gateway.LogLevel)
+		logger.SetLevelFromString(effectiveLogLevel)
 		logger.Infof("Log level changing from current to %q", effectiveLogLevel)
 	}
 	return nil
@ -556,14 +604,22 @@ func restartServices(
 		fmt.Println("  ✓ Device event service restarted")
 	}
-	transcriber := voice.DetectTranscriber(cfg)
+	transcriber := asr.DetectTranscriber(cfg)
 	al.SetTranscriber(transcriber)
 	if transcriber != nil {
 		logger.InfoCF("voice", "Transcription re-enabled (agent-level)", map[string]any{"provider": transcriber.Name()})
 		// Start Voice Agent Orchestrator on reload
 		vaCtx, vaCancel := context.WithCancel(context.Background())
 		runningServices.VoiceAgentCancel = vaCancel
 		voiceAgent := asr.NewAgent(msgBus, transcriber)
 		voiceAgent.Start(vaCtx)
 	} else {
 		logger.InfoCF("voice", "Transcription disabled", nil)
 	}
 	ttsAvailable := tts.DetectTTS(cfg) != nil
 	logChannelVoiceCapabilities(runningServices.ChannelManager, transcriber != nil, ttsAvailable)
 	// NOTE: PID file is written once at startup and not updated on reload.
 	// Changing the gateway listen address requires a full restart.
--- a/pkg/pid/pidfile.go
+++ b/pkg/pid/pidfile.go
@ -94,6 +94,7 @@ func WritePidFile(homePath, host string, port int) (*PidFileData, error) {
 		os.Remove(tmp)
 		return nil, fmt.Errorf("failed to rename pid file: %w", err)
 	}
 	logger.Debugf("wrote pid file: %s success", pidPath)
 	return data, nil
 }
@ -108,10 +109,12 @@ func ReadPidFileWithCheck(homePath string) *PidFileData {
 	pidPath := pidFilePath(homePath)
 	data, err := readPidFileUnlocked(pidPath)
 	if err != nil {
 		logger.Debugf("failed to read pid file: %s", err)
 		return nil
 	}
 	if !isProcessRunning(data.PID) {
 		logger.Debugf("process not running, remove pid file: %s", pidPath)
 		os.Remove(pidPath)
 		return nil
 	}
--- a/pkg/providers/bedrock/provider_bedrock.go
+++ b/pkg/providers/bedrock/provider_bedrock.go
@ -208,7 +208,10 @@ func (p *Provider) Chat(
 	if err != nil {
 		// Check for SSO token expiration errors and provide actionable guidance
 		if isSSOTokenError(err) {
-			return nil, fmt.Errorf("bedrock converse: AWS credentials may have expired. If using AWS SSO, run 'aws sso login' to refresh: %w", err)
+			return nil, fmt.Errorf(
 				"bedrock converse: AWS credentials may have expired. If using AWS SSO, run 'aws sso login' to refresh: %w",
 				err,
 			)
 		}
 		return nil, fmt.Errorf("bedrock converse: %w", err)
 	}
--- a/pkg/providers/bedrock/provider_bedrock_test.go
+++ b/pkg/providers/bedrock/provider_bedrock_test.go
@ -584,12 +584,16 @@ func TestIsSSOTokenError(t *testing.T) {
 		},
 		{
 			name: "full SSO error message",
-			err:      fmt.Errorf("get identity: get credentials: failed to refresh cached credentials, refresh cached SSO token failed, unable to refresh SSO token"),
+			err: fmt.Errorf(
 				"get identity: get credentials: failed to refresh cached credentials, refresh cached SSO token failed, unable to refresh SSO token",
 			),
 			expected: true,
 		},
 		{
 			name: "SSO token file missing",
-			err:      fmt.Errorf("get identity: get credentials: failed to refresh cached credentials, failed to read cached SSO token file, open ~/.aws/sso/cache/abc123.json: no such file or directory"),
+			err: fmt.Errorf(
 				"get identity: get credentials: failed to refresh cached credentials, failed to read cached SSO token file, open ~/.aws/sso/cache/abc123.json: no such file or directory",
 			),
 			expected: true,
 		},
 	}
--- a/pkg/providers/factory_provider.go
+++ b/pkg/providers/factory_provider.go
@ -17,6 +17,48 @@ import (
 	"github.com/sipeed/picoclaw/pkg/providers/bedrock"
 )
 type protocolMeta struct {
 	defaultAPIBase     string
 	emptyAPIKeyAllowed bool
 }
 var protocolMetaByName = map[string]protocolMeta{
 	"openai":                   {defaultAPIBase: "https://api.openai.com/v1"},
 	"openrouter":               {defaultAPIBase: "https://openrouter.ai/api/v1"},
 	"litellm":                  {defaultAPIBase: "http://localhost:4000/v1"},
 	"lmstudio":                 {defaultAPIBase: "http://localhost:1234/v1", emptyAPIKeyAllowed: true},
 	"novita":                   {defaultAPIBase: "https://api.novita.ai/openai"},
 	"groq":                     {defaultAPIBase: "https://api.groq.com/openai/v1"},
 	"zhipu":                    {defaultAPIBase: "https://open.bigmodel.cn/api/paas/v4"},
 	"gemini":                   {defaultAPIBase: "https://generativelanguage.googleapis.com/v1beta"},
 	"nvidia":                   {defaultAPIBase: "https://integrate.api.nvidia.com/v1"},
 	"ollama":                   {defaultAPIBase: "http://localhost:11434/v1", emptyAPIKeyAllowed: true},
 	"moonshot":                 {defaultAPIBase: "https://api.moonshot.cn/v1"},
 	"shengsuanyun":             {defaultAPIBase: "https://router.shengsuanyun.com/api/v1"},
 	"deepseek":                 {defaultAPIBase: "https://api.deepseek.com/v1"},
 	"cerebras":                 {defaultAPIBase: "https://api.cerebras.ai/v1"},
 	"vivgrid":                  {defaultAPIBase: "https://api.vivgrid.com/v1"},
 	"volcengine":               {defaultAPIBase: "https://ark.cn-beijing.volces.com/api/v3"},
 	"qwen":                     {defaultAPIBase: "https://dashscope.aliyuncs.com/compatible-mode/v1"},
 	"qwen-intl":                {defaultAPIBase: "https://dashscope-intl.aliyuncs.com/compatible-mode/v1"},
 	"qwen-international":       {defaultAPIBase: "https://dashscope-intl.aliyuncs.com/compatible-mode/v1"},
 	"dashscope-intl":           {defaultAPIBase: "https://dashscope-intl.aliyuncs.com/compatible-mode/v1"},
 	"qwen-us":                  {defaultAPIBase: "https://dashscope-us.aliyuncs.com/compatible-mode/v1"},
 	"dashscope-us":             {defaultAPIBase: "https://dashscope-us.aliyuncs.com/compatible-mode/v1"},
 	"coding-plan":              {defaultAPIBase: "https://coding-intl.dashscope.aliyuncs.com/v1"},
 	"alibaba-coding":           {defaultAPIBase: "https://coding-intl.dashscope.aliyuncs.com/v1"},
 	"qwen-coding":              {defaultAPIBase: "https://coding-intl.dashscope.aliyuncs.com/v1"},
 	"coding-plan-anthropic":    {defaultAPIBase: "https://coding-intl.dashscope.aliyuncs.com/apps/anthropic"},
 	"alibaba-coding-anthropic": {defaultAPIBase: "https://coding-intl.dashscope.aliyuncs.com/apps/anthropic"},
 	"vllm":                     {defaultAPIBase: "http://localhost:8000/v1", emptyAPIKeyAllowed: true},
 	"mistral":                  {defaultAPIBase: "https://api.mistral.ai/v1"},
 	"avian":                    {defaultAPIBase: "https://api.avian.io/v1"},
 	"minimax":                  {defaultAPIBase: "https://api.minimaxi.com/v1"},
 	"longcat":                  {defaultAPIBase: "https://api.longcat.chat/openai"},
 	"modelscope":               {defaultAPIBase: "https://api-inference.modelscope.cn/v1"},
 	"mimo":                     {defaultAPIBase: "https://api.xiaomimimo.com/v1"},
 }
 // createClaudeAuthProvider creates a Claude provider using OAuth credentials from auth store.
 func createClaudeAuthProvider() (LLMProvider, error) {
 	cred, err := getCredential("anthropic")
@ -56,6 +98,19 @@ func ExtractProtocol(model string) (protocol, modelID string) {
 	return protocol, modelID
 }
 // ResolveAPIBase returns the configured API base, or the protocol default when
 // the model uses an HTTP-based provider family with a known default endpoint.
 func ResolveAPIBase(cfg *config.ModelConfig) string {
 	if cfg == nil {
 		return ""
 	}
 	if apiBase := strings.TrimSpace(cfg.APIBase); apiBase != "" {
 		return strings.TrimRight(apiBase, "/")
 	}
 	protocol, _ := ExtractProtocol(cfg.Model)
 	return strings.TrimRight(getDefaultAPIBase(protocol), "/")
 }
 // CreateProviderFromConfig creates a provider based on the ModelConfig.
 // It uses the protocol prefix in the Model field to determine which provider to create.
 // Supported protocol families include OpenAI-compatible prefixes (e.g., openai, openrouter, groq, gemini),
@ -154,13 +209,13 @@ func CreateProviderFromConfig(cfg *config.ModelConfig) (LLMProvider, string, err
 		}
 		return provider, modelID, nil
-	case "litellm", "openrouter", "groq", "zhipu", "gemini", "nvidia",
+	case "litellm", "lmstudio", "openrouter", "groq", "zhipu", "gemini", "nvidia",
 		"ollama", "moonshot", "shengsuanyun", "deepseek", "cerebras",
 		"vivgrid", "volcengine", "vllm", "qwen", "qwen-intl", "qwen-international", "dashscope-intl",
 		"qwen-us", "dashscope-us", "mistral", "avian", "longcat", "modelscope", "novita",
 		"coding-plan", "alibaba-coding", "qwen-coding", "mimo":
 		// All other OpenAI-compatible HTTP providers
-		if cfg.APIKey() == "" && cfg.APIBase == "" {
+		if cfg.APIKey() == "" && cfg.APIBase == "" && !isEmptyAPIKeyAllowed(protocol) {
 			return nil, "", fmt.Errorf("api_key or api_base is required for HTTP-based protocol %q", protocol)
 		}
 		apiBase := cfg.APIBase
@ -294,64 +349,30 @@ func CreateProviderFromConfig(cfg *config.ModelConfig) (LLMProvider, string, err
 	}
 }
 func isEmptyAPIKeyAllowed(protocol string) bool {
 	meta, ok := protocolMetaByName[protocol]
 	return ok && meta.emptyAPIKeyAllowed
 }
 // IsEmptyAPIKeyAllowedForProtocol reports whether a protocol allows requests
 // without api_key when using its default local endpoint.
 func IsEmptyAPIKeyAllowedForProtocol(protocol string) bool {
 	protocol = strings.ToLower(strings.TrimSpace(protocol))
 	return isEmptyAPIKeyAllowed(protocol)
 }
 // DefaultAPIBaseForProtocol returns the configured default API base for a protocol.
 // It returns empty string if the protocol has no default base.
 func DefaultAPIBaseForProtocol(protocol string) string {
 	protocol = strings.ToLower(strings.TrimSpace(protocol))
 	return getDefaultAPIBase(protocol)
 }
 // getDefaultAPIBase returns the default API base URL for a given protocol.
 func getDefaultAPIBase(protocol string) string {
-	switch protocol {
+	meta, ok := protocolMetaByName[protocol]
-	case "openai":
+	if !ok {
 		return "https://api.openai.com/v1"
 	case "openrouter":
 		return "https://openrouter.ai/api/v1"
 	case "litellm":
 		return "http://localhost:4000/v1"
 	case "novita":
 		return "https://api.novita.ai/openai"
 	case "groq":
 		return "https://api.groq.com/openai/v1"
 	case "zhipu":
 		return "https://open.bigmodel.cn/api/paas/v4"
 	case "gemini":
 		return "https://generativelanguage.googleapis.com/v1beta"
 	case "nvidia":
 		return "https://integrate.api.nvidia.com/v1"
 	case "ollama":
 		return "http://localhost:11434/v1"
 	case "moonshot":
 		return "https://api.moonshot.cn/v1"
 	case "shengsuanyun":
 		return "https://router.shengsuanyun.com/api/v1"
 	case "deepseek":
 		return "https://api.deepseek.com/v1"
 	case "cerebras":
 		return "https://api.cerebras.ai/v1"
 	case "vivgrid":
 		return "https://api.vivgrid.com/v1"
 	case "volcengine":
 		return "https://ark.cn-beijing.volces.com/api/v3"
 	case "qwen":
 		return "https://dashscope.aliyuncs.com/compatible-mode/v1"
 	case "qwen-intl", "qwen-international", "dashscope-intl":
 		return "https://dashscope-intl.aliyuncs.com/compatible-mode/v1"
 	case "qwen-us", "dashscope-us":
 		return "https://dashscope-us.aliyuncs.com/compatible-mode/v1"
 	case "coding-plan", "alibaba-coding", "qwen-coding":
 		return "https://coding-intl.dashscope.aliyuncs.com/v1"
 	case "coding-plan-anthropic", "alibaba-coding-anthropic":
 		return "https://coding-intl.dashscope.aliyuncs.com/apps/anthropic"
 	case "vllm":
 		return "http://localhost:8000/v1"
 	case "mistral":
 		return "https://api.mistral.ai/v1"
 	case "avian":
 		return "https://api.avian.io/v1"
 	case "minimax":
 		return "https://api.minimaxi.com/v1"
 	case "longcat":
 		return "https://api.longcat.chat/openai"
 	case "modelscope":
 		return "https://api-inference.modelscope.cn/v1"
 	case "mimo":
 		return "https://api.xiaomimimo.com/v1"
 	default:
 		return ""
 	}
 	return meta.defaultAPIBase
 }
--- a/pkg/providers/factory_provider_test.go
+++ b/pkg/providers/factory_provider_test.go
@ -121,6 +121,7 @@ func TestCreateProviderFromConfig_DefaultAPIBase(t *testing.T) {
 		{"vllm", "vllm"},
 		{"deepseek", "deepseek"},
 		{"ollama", "ollama"},
 		{"lmstudio", "lmstudio"},
 		{"longcat", "longcat"},
 		{"modelscope", "modelscope"},
 		{"mimo", "mimo"},
@ -153,6 +154,12 @@ func TestGetDefaultAPIBase_LiteLLM(t *testing.T) {
 	}
 }
 func TestGetDefaultAPIBase_LMStudio(t *testing.T) {
 	if got := getDefaultAPIBase("lmstudio"); got != "http://localhost:1234/v1" {
 		t.Fatalf("getDefaultAPIBase(%q) = %q, want %q", "lmstudio", got, "http://localhost:1234/v1")
 	}
 }
 func TestCreateProviderFromConfig_LiteLLM(t *testing.T) {
 	cfg := &config.ModelConfig{
 		ModelName: "test-litellm",
@ -173,6 +180,85 @@ func TestCreateProviderFromConfig_LiteLLM(t *testing.T) {
 	}
 }
 func TestCreateProviderFromConfig_LocalProviders(t *testing.T) {
 	tests := []struct {
 		name        string
 		modelName   string
 		model       string
 		apiKey      string
 		wantModelID string
 	}{
 		{
 			name:        "LMStudio with API key",
 			modelName:   "test-lmstudio",
 			model:       "lmstudio/openai/gpt-oss-20b",
 			apiKey:      "test-key",
 			wantModelID: "openai/gpt-oss-20b",
 		},
 		{
 			name:        "LMStudio without API key",
 			modelName:   "test-lmstudio",
 			model:       "lmstudio/openai/gpt-oss-20b",
 			apiKey:      "",
 			wantModelID: "openai/gpt-oss-20b",
 		},
 		{
 			name:        "Ollama with API key",
 			modelName:   "test-ollama",
 			model:       "ollama/llama3.1:8b",
 			apiKey:      "test-key",
 			wantModelID: "llama3.1:8b",
 		},
 		{
 			name:        "Ollama without API key",
 			modelName:   "test-ollama",
 			model:       "ollama/llama3.1:8b",
 			apiKey:      "",
 			wantModelID: "llama3.1:8b",
 		},
 		{
 			name:        "VLLM with API key",
 			modelName:   "test-vllm",
 			model:       "vllm/Qwen/Qwen3-8B",
 			apiKey:      "test-key",
 			wantModelID: "Qwen/Qwen3-8B",
 		},
 		{
 			name:        "VLLM without API key",
 			modelName:   "test-vllm",
 			model:       "vllm/Qwen/Qwen3-8B",
 			apiKey:      "",
 			wantModelID: "Qwen/Qwen3-8B",
 		},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
 			cfg := &config.ModelConfig{
 				ModelName: tt.modelName,
 				Model:     tt.model,
 			}
 			if tt.apiKey != "" {
 				cfg.SetAPIKey(tt.apiKey)
 			}
 			provider, modelID, err := CreateProviderFromConfig(cfg)
 			if err != nil {
 				t.Fatalf("CreateProviderFromConfig() error = %v", err)
 			}
 			if provider == nil {
 				t.Fatal("CreateProviderFromConfig() returned nil provider")
 			}
 			if modelID != tt.wantModelID {
 				t.Errorf("modelID = %q, want %q", modelID, tt.wantModelID)
 			}
 			if _, ok := provider.(*HTTPProvider); !ok {
 				t.Fatalf("expected *HTTPProvider, got %T", provider)
 			}
 		})
 	}
 }
 func TestCreateProviderFromConfig_LongCat(t *testing.T) {
 	cfg := &config.ModelConfig{
 		ModelName: "test-longcat",
--- a/pkg/providers/github_copilot_provider.go
+++ b/pkg/providers/github_copilot_provider.go
@ -42,6 +42,7 @@ func NewGitHubCopilotProvider(uri string, connectMode string, model string) (*Gi
 		session, err := client.CreateSession(context.Background(), &copilot.SessionConfig{
 			Model:               model,
 			OnPermissionRequest: copilot.PermissionHandler.ApproveAll,
 			Hooks:               &copilot.SessionHooks{},
 		})
 		if err != nil {
--- a/pkg/providers/openai_compat/provider.go
+++ b/pkg/providers/openai_compat/provider.go
@ -42,6 +42,23 @@ type Option func(*Provider)
 const defaultRequestTimeout = common.DefaultRequestTimeout
 var stripModelPrefixProviders = map[string]struct{}{
 	"litellm":    {},
 	"moonshot":   {},
 	"nvidia":     {},
 	"groq":       {},
 	"ollama":     {},
 	"deepseek":   {},
 	"google":     {},
 	"openrouter": {},
 	"zhipu":      {},
 	"mistral":    {},
 	"vivgrid":    {},
 	"minimax":    {},
 	"novita":     {},
 	"lmstudio":   {},
 }
 func WithMaxTokensField(maxTokensField string) Option {
 	return func(p *Provider) {
 		p.maxTokensField = maxTokensField
@ -397,13 +414,11 @@ func normalizeModel(model, apiBase string) string {
 	}
 	prefix := strings.ToLower(before)
-	switch prefix {
+	if _, ok := stripModelPrefixProviders[prefix]; ok {
 	case "litellm", "moonshot", "nvidia", "groq", "ollama", "deepseek", "google",
 		"openrouter", "zhipu", "mistral", "vivgrid", "minimax", "novita":
 		return after
 	default:
 		return model
 	}
 	return model
 }
 func buildToolsList(tools []ToolDefinition, nativeSearch bool) []any {
--- a/Show more
+++ b/Show more