Merge remote-tracking branch 'origin/main' into feat/whatsapp

2026-04-02 03:52:43 -03:00 · 2026-04-02 03:52:43 -03:00 · df3350e055
commit df3350e055
parent c823c3087a 03b97e412e
206 changed files with 15154 additions and 2112 deletions
--- a/.github/workflows/create_dmg.yml
+++ b/.github/workflows/create_dmg.yml
@ -0,0 +1,62 @@
 name: Create macOS DMG
 on:
  workflow_dispatch:
 jobs:
  build:
    name: Build ${{ matrix.arch }}
    runs-on: macos-latest
    strategy:
      matrix:
        # This creates two parallel jobs
        arch: [arm64, amd64]
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          ref: main
      # 1. 安装指定版本的 Go (可选，但推荐)
      - name: Setup Go
        uses: actions/setup-go@v6
        with:
          go-version-file: go.mod
      # 2. 安装 pnpm
      - name: Install pnpm
        run: brew install pnpm
      # 3. 运行你的 Makefile 编译二进制文件
      - name: Build with Make
        run: make build ARCH=${{ matrix.arch }} && make build-macos-app ARCH=${{ matrix.arch }}
      # 4. 签名
      - name: Ad-hoc Sign
        run: codesign --force --deep --sign - "build/PicoClaw Launcher.app"
      # 5. 安装打包工具
      - name: Install create-dmg
        run: brew install create-dmg
      # 6. 执行打包命令
      - name: Create DMG
        run: |
          mkdir -p dist
          create-dmg \
            --volname "PicoClaw Installer" \
            --window-pos 200 120 \
            --window-size 800 400 \
            --icon-size 100 \
            --icon "PicoClaw Launcher.app" 200 190 \
            --hide-extension "PicoClaw Launcher.app" \
            --app-drop-link 600 185 \
            "dist/picoclaw-${{ matrix.arch }}.dmg" \
            "build/PicoClaw Launcher.app"
      # 7. 上传文件到 GitHub Artifacts (供你下载)
      - name: Upload DMG
        uses: actions/upload-artifact@v4
        with:
          name: macos-dmg-${{ matrix.arch }}
          path: dist/*.dmg
--- a/.golangci.yaml
+++ b/.golangci.yaml
@ -61,6 +61,9 @@ linters:
    - usestdlibvars
    - usetesting
  settings:
    gomoddirectives:
      replace-allow-list:
        - github.com/bwmarrin/discordgo
    errcheck:
      check-type-assertions: true
      check-blank: true
--- a/17
+++ b/17
@ -93,13 +93,13 @@ ifeq ($(UNAME_S),Linux)
 	endif
 else ifeq ($(UNAME_S),Darwin)
 	PLATFORM=darwin
-	WEB_GO=CGO_ENABLED=1 go
+	WEB_GO=CGO_LDFLAGS="-mmacosx-version-min=10.11" CGO_CFLAGS="-mmacosx-version-min=10.11" CGO_ENABLED=1 go
 	ifeq ($(UNAME_M),x86_64)
-		ARCH=amd64
+		ARCH?=amd64
 	else ifeq ($(UNAME_M),arm64)
-		ARCH=arm64
+		ARCH?=arm64
 	else
-		ARCH=$(UNAME_M)
+		ARCH?=$(UNAME_M)
 	endif
 else
 	PLATFORM=$(UNAME_S)
@ -122,7 +122,7 @@ generate:
 build: generate
 	@echo "Building $(BINARY_NAME) for $(PLATFORM)/$(ARCH)..."
 	@mkdir -p $(BUILD_DIR)
-	@$(GO) build $(GOFLAGS) -ldflags "$(LDFLAGS)" -o $(BINARY_PATH) ./$(CMD_DIR)
+	@GOARCH=${ARCH} $(GO) build $(GOFLAGS) -ldflags "$(LDFLAGS)" -o $(BINARY_PATH) ./$(CMD_DIR)
 	@echo "Build complete: $(BINARY_PATH)"
 	@ln -sf $(BINARY_NAME)-$(PLATFORM)-$(ARCH) $(BUILD_DIR)/$(BINARY_NAME)
@ -130,7 +130,7 @@ build: generate
 build-launcher:
 	@echo "Building picoclaw-launcher for $(PLATFORM)/$(ARCH)..."
 	@mkdir -p $(BUILD_DIR)
-	@$(MAKE) -C web build \
+	@GOARCH=${ARCH} $(MAKE) -C web build \
 		OUTPUT="$(CURDIR)/$(BUILD_DIR)/picoclaw-launcher-$(PLATFORM)-$(ARCH)" \
 		WEB_GO='$(WEB_GO)' \
 		GO_BUILD_TAGS='$(GO_BUILD_TAGS)' \
@ -324,14 +324,13 @@ docker-clean:
 ## build-macos-app: Build PicoClaw macOS .app bundle (no terminal window)
-build-macos-app:
+build-macos-app:build-launcher
 	@echo "Building macOS .app bundle..."
 	@if [ "$(UNAME_S)" != "Darwin" ]; then \
 		echo "Error: This target is only available on macOS"; \
 		exit 1; \
 	fi
-	@cd web && $(MAKE) build && cd ..
+	@./scripts/build-macos-app.sh $(PLATFORM)-$(ARCH)
 	@./scripts/build-macos-app.sh $(BINARY_NAME)-$(PLATFORM)-$(ARCH)
 	@echo "macOS .app bundle created: $(BUILD_DIR)/PicoClaw.app"
 ## help: Show this help message
--- a/README.fr.md
+++ b/README.fr.md
@ -57,6 +57,8 @@
 ## 📢 Actualités
 2026-03-31 📱 **Support Android !** PicoClaw fonctionne maintenant sur Android ! Téléchargez l'APK sur [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 publiée !** Refonte de l'architecture Agent (SubTurn, Hooks, Steering, EventBus), intégration WeChat/WeCom, renforcement de la sécurité (.security.yml, filtrage des données sensibles), nouveaux providers (AWS Bedrock, Azure, Xiaomi MiMo), et 35 corrections de bugs. PicoClaw a atteint **26K Stars** !
 2026-03-17 🚀 **v0.2.3 publiée !** Interface system tray (Windows & Linux), requête de statut des sous-agents (`spawn_status`), rechargement à chaud expérimental du Gateway, sécurisation Cron, et 2 correctifs de sécurité. PicoClaw a atteint **25K Stars** !
@ -304,7 +306,25 @@ Pour la documentation détaillée du TUI, voir [docs.picoclaw.io](https://docs.p
 Donnez une seconde vie à votre téléphone vieux de dix ans ! Transformez-le en assistant IA intelligent avec PicoClaw.
-**Option 1 : Termux (disponible maintenant)**
+**Option 1 : Installation APK**
 Aperçu :
 <table>
  <tr>
    <td><img src="assets/fui_main_page.jpg" width="200"></td>
    <td><img src="assets/fui_web_page.jpg" width="200"></td>
    <td><img src="assets/fui_log_page.jpg" width="200"></td>
    <td><img src="assets/fui_setting_page.jpg" width="200"></td>
  </tr>
 </table>
 Téléchargez l'APK depuis [picoclaw.io](https://picoclaw.io/download/) et installez-le directement. Pas besoin de Termux !
 **Option 2 : Termux**
 <details>
 <summary><b>Terminal Launcher (pour les environnements à ressources limitées)</b></summary>
 1. Installez [Termux](https://github.com/termux/termux-app) (téléchargez depuis [GitHub Releases](https://github.com/termux/termux-app/releases), ou cherchez dans F-Droid / Google Play)
 2. Exécutez les commandes suivantes :
@ -321,13 +341,6 @@ Suivez ensuite la section Terminal Launcher ci-dessous pour terminer la configur
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
 **Option 2 : Installation APK (bientôt disponible)**
 Un APK Android autonome avec WebUI intégré est en développement. Restez à l'écoute !
 <details>
 <summary><b>Terminal Launcher (pour les environnements à ressources limitées)</b></summary>
 Pour les environnements minimaux où seul le binaire principal `picoclaw` est disponible (sans Launcher UI), vous pouvez tout configurer via la ligne de commande et un fichier de configuration JSON.
 **1. Initialiser**
--- a/README.id.md
+++ b/README.id.md
@ -56,6 +56,8 @@
 ## 📢 Berita
 2026-03-31 📱 **Dukungan Android!** PicoClaw sekarang berjalan di Android! Unduh APK di [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 Dirilis!** Perombakan arsitektur Agent (SubTurn, Hooks, Steering, EventBus), integrasi WeChat/WeCom, penguatan keamanan (.security.yml, penyaringan data sensitif), provider baru (AWS Bedrock, Azure, Xiaomi MiMo), dan 35 perbaikan bug. PicoClaw telah mencapai **26K Stars**!
 2026-03-17 🚀 **v0.2.3 Dirilis!** UI system tray (Windows & Linux), pelacakan status sub-agent (`spawn_status`), eksperimental Gateway hot-reload, gerbang keamanan Cron, dan 2 perbaikan keamanan. PicoClaw telah mencapai **25K Stars**!
@ -301,7 +303,25 @@ Untuk dokumentasi TUI lengkap, lihat [docs.picoclaw.io](https://docs.picoclaw.io
 Berikan kehidupan kedua untuk ponsel lama Anda! Ubah menjadi Asisten AI pintar dengan PicoClaw.
-**Opsi 1: Termux (tersedia sekarang)**
+**Opsi 1: Instal APK**
 Pratinjau:
 <table>
  <tr>
    <td><img src="assets/fui_main_page.jpg" width="200"></td>
    <td><img src="assets/fui_web_page.jpg" width="200"></td>
    <td><img src="assets/fui_log_page.jpg" width="200"></td>
    <td><img src="assets/fui_setting_page.jpg" width="200"></td>
  </tr>
 </table>
 Unduh APK dari [picoclaw.io](https://picoclaw.io/download/) dan instal langsung. Tanpa Termux!
 **Opsi 2: Termux**
 <details>
 <summary><b>Terminal Launcher (untuk lingkungan dengan sumber daya terbatas)</b></summary>
 1. Instal [Termux](https://github.com/termux/termux-app) (unduh dari [GitHub Releases](https://github.com/termux/termux-app/releases), atau cari di F-Droid / Google Play)
 2. Jalankan perintah berikut:
@ -318,13 +338,6 @@ Kemudian ikuti bagian Terminal Launcher di bawah untuk menyelesaikan konfigurasi
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
 **Opsi 2: Instal APK (segera hadir)**
 APK Android mandiri dengan WebUI bawaan sedang dalam pengembangan. Pantau terus!
 <details>
 <summary><b>Terminal Launcher (untuk lingkungan dengan sumber daya terbatas)</b></summary>
 Untuk lingkungan minimal di mana hanya binary inti `picoclaw` yang tersedia (tanpa Launcher UI), Anda dapat mengonfigurasi semuanya melalui command line dan file konfigurasi JSON.
 **1. Inisialisasi**
--- a/README.it.md
+++ b/README.it.md
@ -56,6 +56,8 @@
 ## 📢 Novità
 2026-03-31 📱 **Supporto Android!** PicoClaw ora funziona su Android! Scarica l'APK su [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 rilasciata!** Revisione dell'architettura Agent (SubTurn, Hooks, Steering, EventBus), integrazione WeChat/WeCom, rafforzamento della sicurezza (.security.yml, filtraggio dati sensibili), nuovi provider (AWS Bedrock, Azure, Xiaomi MiMo) e 35 correzioni di bug. PicoClaw raggiunge **26K Stars**!
 2026-03-17 🚀 **v0.2.3 rilasciata!** Interfaccia system tray (Windows & Linux), query sullo stato dei sub-agent (`spawn_status`), hot-reload sperimentale del Gateway, gate di sicurezza per Cron e 2 correzioni di sicurezza. PicoClaw raggiunge **25K Stars**!
@ -301,7 +303,25 @@ Per la documentazione dettagliata del TUI, vedi [docs.picoclaw.io](https://docs.
 Dai una seconda vita al tuo telefono di dieci anni fa! Trasformalo in un assistente IA intelligente con PicoClaw.
-**Opzione 1: Termux (disponibile ora)**
+**Opzione 1: Installazione APK**
 Anteprima:
 <table>
  <tr>
    <td><img src="assets/fui_main_page.jpg" width="200"></td>
    <td><img src="assets/fui_web_page.jpg" width="200"></td>
    <td><img src="assets/fui_log_page.jpg" width="200"></td>
    <td><img src="assets/fui_setting_page.jpg" width="200"></td>
  </tr>
 </table>
 Scarica l'APK da [picoclaw.io](https://picoclaw.io/download/) e installa direttamente. Senza Termux!
 **Opzione 2: Termux**
 <details>
 <summary><b>Terminal Launcher (per ambienti con risorse limitate)</b></summary>
 1. Installa [Termux](https://github.com/termux/termux-app) (scarica da [GitHub Releases](https://github.com/termux/termux-app/releases), o cerca su F-Droid / Google Play)
 2. Esegui i seguenti comandi:
@ -318,13 +338,6 @@ Poi segui la sezione Terminal Launcher qui sotto per completare la configurazion
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
 **Opzione 2: APK Install (prossimamente)**
 Un APK Android standalone con WebUI integrato è in sviluppo. Resta sintonizzato!
 <details>
 <summary><b>Terminal Launcher (per ambienti con risorse limitate)</b></summary>
 Per ambienti minimali dove è disponibile solo il binario core `picoclaw` (senza Launcher UI), puoi configurare tutto tramite riga di comando e un file di configurazione JSON.
 **1. Inizializza**
--- a/README.ja.md
+++ b/README.ja.md
@ -56,6 +56,8 @@
 ## 📢 ニュース
 2026-03-31 📱 **Android サポート！** PicoClawがAndroidで動作！APKは[picoclaw.io](https://picoclaw.io/download)からダウンロード
 2026-03-25 🚀 **v0.2.4 リリース！** Agent アーキテクチャ全面刷新（SubTurn、Hooks、Steering、EventBus）、WeChat/WeCom 統合、セキュリティ強化（.security.yml、機密データフィルタリング）、新プロバイダー（AWS Bedrock、Azure、Xiaomi MiMo）、35 件のバグ修正。PicoClaw **26K ⭐** 達成！
 2026-03-17 🚀 **v0.2.3 リリース！** システムトレイ UI（Windows & Linux）、サブエージェントステータス追跡（`spawn_status`）、実験的 Gateway ホットリロード、cron セキュリティゲート、セキュリティ修正 2 件。PicoClaw **25K ⭐** 達成！
@ -301,7 +303,25 @@ TUI の詳細なドキュメントは [docs.picoclaw.io](https://docs.picoclaw.i
 10 年前のスマホに第二の人生を！PicoClaw でスマート AI アシスタントに変身させましょう。
-**オプション 1: Termux（現在利用可能）**
+**オプション 1: APK インストール**
 プレビュー：
 <table>
  <tr>
    <td><img src="assets/fui_main_page.jpg" width="200"></td>
    <td><img src="assets/fui_web_page.jpg" width="200"></td>
    <td><img src="assets/fui_log_page.jpg" width="200"></td>
    <td><img src="assets/fui_setting_page.jpg" width="200"></td>
  </tr>
 </table>
 [picoclaw.io](https://picoclaw.io/download/) から APK をダウンロードして直接インストール。Termux 不要！
 **オプション 2: Termux**
 <details>
 <summary><b>Terminal Launcher（リソース制約環境向け）</b></summary>
 1. [Termux](https://github.com/termux/termux-app) をインストール（[GitHub Releases](https://github.com/termux/termux-app/releases) からダウンロード、または F-Droid / Google Play で検索）
 2. 以下のコマンドを実行：
@ -318,13 +338,6 @@ termux-chroot ./picoclaw onboard   # chroot で標準的な Linux ファイル
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
 **オプション 2: APK インストール（近日公開）**
 内蔵 WebUI を備えたスタンドアロン Android APK を開発中です。お楽しみに！
 <details>
 <summary><b>Terminal Launcher（リソース制約環境向け）</b></summary>
 `picoclaw` コアバイナリのみが利用可能な最小環境（Launcher UI なし）では、コマンドラインと JSON 設定ファイルですべてを設定できます。
 **1. 初期化**
--- a/README.md
+++ b/README.md
@ -56,6 +56,8 @@
 ## 📢 News
 2026-03-31 📱 **Android Support!** PicoClaw now runs on Android! Download the APK at [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 Released!** Agent architecture overhaul (SubTurn, Hooks, Steering, EventBus), WeChat/WeCom integration, security hardening (.security.yml, sensitive data filtering), new providers (AWS Bedrock, Azure, Xiaomi MiMo), and 35 bug fixes. PicoClaw has reached **26K Stars**!
 2026-03-17 🚀 **v0.2.3 Released!** System tray UI (Windows & Linux), sub-agent status query (`spawn_status`), experimental Gateway hot-reload, Cron security gating, and 2 security fixes. PicoClaw has reached **25K Stars**!
@ -301,7 +303,25 @@ For detailed TUI documentation, see [docs.picoclaw.io](https://docs.picoclaw.io)
 Give your decade-old phone a second life! Turn it into a smart AI Assistant with PicoClaw.
-**Option 1: Termux (available now)**
+**Option 1: APK Install**
 Preview:
 <table>
  <tr>
    <td><img src="assets/fui_main_page.jpg" width="200"></td>
    <td><img src="assets/fui_web_page.jpg" width="200"></td>
    <td><img src="assets/fui_log_page.jpg" width="200"></td>
    <td><img src="assets/fui_setting_page.jpg" width="200"></td>
  </tr>
 </table>
 Download the APK from [picoclaw.io](https://picoclaw.io/download/) and install directly. No Termux required!
 **Option 2: Termux**
 <details>
 <summary><b>Terminal Launcher (for resource-constrained environments)</b></summary>
 1. Install [Termux](https://github.com/termux/termux-app) (download from [GitHub Releases](https://github.com/termux/termux-app/releases), or search in F-Droid / Google Play)
 2. Run the following commands:
@ -318,13 +338,6 @@ Then follow the Terminal Launcher section below to complete configuration.
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
 **Option 2: APK Install (coming soon)**
 A standalone Android APK with built-in WebUI is in development. Stay tuned!
 <details>
 <summary><b>Terminal Launcher (for resource-constrained environments)</b></summary>
 For minimal environments where only the `picoclaw` core binary is available (no Launcher UI), you can configure everything via the command line and a JSON config file.
 **1. Initialize**
--- a/README.my.md
+++ b/README.my.md
@ -56,6 +56,8 @@
 ## 📢 Berita
 2026-03-31 📱 **Sokongan Android!** PicoClaw sekarang berjalan di Android! Muat turun APK di [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 Dikeluarkan!** Penstrukturan semula seni bina Agent (SubTurn, Hooks, Steering, EventBus), integrasi WeChat/WeCom, penguatan keselamatan (.security.yml, penapisan data sensitif), penyedia baharu (AWS Bedrock, Azure, Xiaomi MiMo), dan 35 pembetulan pepijat. PicoClaw mencapai **26K Stars**!
 2026-03-17 🚀 **v0.2.3 Dikeluarkan!** UI dulang sistem (Windows & Linux), pertanyaan status sub-agent (`spawn_status`), muat semula panas Gateway eksperimental, kawalan keselamatan Cron, dan 2 pembetulan keselamatan. PicoClaw mencapai **25K Stars**!
@ -298,7 +300,25 @@ Untuk dokumentasi TUI terperinci, lihat [docs.picoclaw.io](https://docs.picoclaw
 Berikan telefon lama anda kehidupan baru! Jadikannya Pembantu AI pintar dengan PicoClaw.
-**Pilihan 1: Termux (tersedia sekarang)**
+**Pilihan 1: Pasang APK**
 Pratonton:
 <table>
  <tr>
    <td><img src="assets/fui_main_page.jpg" width="200"></td>
    <td><img src="assets/fui_web_page.jpg" width="200"></td>
    <td><img src="assets/fui_log_page.jpg" width="200"></td>
    <td><img src="assets/fui_setting_page.jpg" width="200"></td>
  </tr>
 </table>
 Muat turun APK dari [picoclaw.io](https://picoclaw.io/download/) dan pasang secara langsung. Tiada Termux diperlukan!
 **Pilihan 2: Termux**
 <details>
 <summary><b>Pelancar Terminal (untuk persekitaran terhad sumber)</b></summary>
 1. Pasang [Termux](https://github.com/termux/termux-app) (muat turun dari [GitHub Releases](https://github.com/termux/termux-app/releases), atau cari di F-Droid / Google Play)
 2. Jalankan arahan berikut:
@ -315,13 +335,6 @@ Kemudian ikuti bahagian Pelancar Terminal di bawah untuk melengkapkan konfiguras
 <img src="assets/termux.jpg" alt="PicoClaw pada Termux" width="512">
 **Pilihan 2: APK (akan datang)**
 APK Android bebas dengan WebUI terbina dalam sedang dalam pembangunan. Nantikan!
 <details>
 <summary><b>Pelancar Terminal (untuk persekitaran terhad sumber)</b></summary>
 Untuk persekitaran minimal di mana hanya binari teras `picoclaw` tersedia (tiada UI Pelancar), anda boleh mengkonfigurasi semua melalui baris arahan dan fail konfigurasi JSON.
 **1. Mulakan**
--- a/README.pt-br.md
+++ b/README.pt-br.md
@ -56,6 +56,8 @@
 ## 📢 Novidades
 2026-03-31 📱 **Suporte Android!** PicoClaw agora roda no Android! Baixe o APK em [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 Lançada!** Reformulação da arquitetura Agent (SubTurn, Hooks, Steering, EventBus), integração WeChat/WeCom, fortalecimento de segurança (.security.yml, filtragem de dados sensíveis), novos providers (AWS Bedrock, Azure, Xiaomi MiMo) e 35 correções de bugs. O PicoClaw atingiu **26K Stars**!
 2026-03-17 🚀 **v0.2.3 Lançada!** UI na bandeja do sistema (Windows e Linux), consulta de status de sub-agent (`spawn_status`), hot-reload experimental do Gateway, controle de segurança do Cron e 2 correções de segurança. O PicoClaw atingiu **25K Stars**!
@ -301,7 +303,25 @@ Para documentação detalhada do TUI, veja [docs.picoclaw.io](https://docs.picoc
 Dê uma segunda vida ao seu celular de uma década! Transforme-o em um Assistente de IA inteligente com o PicoClaw.
-**Opção 1: Termux (disponível agora)**
+**Opção 1: Instalação via APK**
 Pré-visualização:
 <table>
  <tr>
    <td><img src="assets/fui_main_page.jpg" width="200"></td>
    <td><img src="assets/fui_web_page.jpg" width="200"></td>
    <td><img src="assets/fui_log_page.jpg" width="200"></td>
    <td><img src="assets/fui_setting_page.jpg" width="200"></td>
  </tr>
 </table>
 Baixe o APK de [picoclaw.io](https://picoclaw.io/download/) e instale diretamente. Sem necessidade de Termux!
 **Opção 2: Termux**
 <details>
 <summary><b>Terminal Launcher (para ambientes com recursos limitados)</b></summary>
 1. Instale o [Termux](https://github.com/termux/termux-app) (baixe nas [GitHub Releases](https://github.com/termux/termux-app/releases), ou pesquise no F-Droid / Google Play)
 2. Execute os seguintes comandos:
@ -318,13 +338,6 @@ Em seguida, siga a seção Terminal Launcher abaixo para concluir a configuraç
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
 **Opção 2: Instalação via APK (em breve)**
 Um APK Android independente com WebUI integrado está em desenvolvimento. Fique ligado!
 <details>
 <summary><b>Terminal Launcher (para ambientes com recursos limitados)</b></summary>
 Para ambientes mínimos onde apenas o binário principal `picoclaw` está disponível (sem Launcher UI), você pode configurar tudo via linha de comando e um arquivo de configuração JSON.
 **1. Inicializar**
--- a/README.vi.md
+++ b/README.vi.md
@ -56,6 +56,8 @@
 ## 📢 Tin tức
 2026-03-31 📱 **Hỗ trợ Android!** PicoClaw giờ chạy trên Android! Tải APK tại [picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 đã phát hành!** Tái cấu trúc kiến trúc Agent (SubTurn, Hooks, Steering, EventBus), tích hợp WeChat/WeCom, tăng cường bảo mật (.security.yml, lọc dữ liệu nhạy cảm), provider mới (AWS Bedrock, Azure, Xiaomi MiMo) và 35 bản vá lỗi. PicoClaw đã đạt **26K Stars**!
 2026-03-17 🚀 **v0.2.3 đã phát hành!** Giao diện system tray (Windows & Linux), truy vấn trạng thái sub-agent (`spawn_status`), thử nghiệm Gateway hot-reload, bảo mật Cron, và 2 bản vá bảo mật. PicoClaw đã đạt **25K Stars**!
@ -301,7 +303,25 @@ Sử dụng menu TUI để: **1)** Cấu hình Provider -> **2)** Cấu hình Ch
 Hãy cho chiếc điện thoại cũ của bạn một cuộc sống mới! Biến nó thành Trợ lý AI thông minh với PicoClaw.
-**Tùy chọn 1: Termux (có sẵn ngay)**
+**Tùy chọn 1: Cài đặt APK**
 Xem trước:
 <table>
  <tr>
    <td><img src="assets/fui_main_page.jpg" width="200"></td>
    <td><img src="assets/fui_web_page.jpg" width="200"></td>
    <td><img src="assets/fui_log_page.jpg" width="200"></td>
    <td><img src="assets/fui_setting_page.jpg" width="200"></td>
  </tr>
 </table>
 Tải APK từ [picoclaw.io](https://picoclaw.io/download/) và cài đặt trực tiếp. Không cần Termux!
 **Tùy chọn 2: Termux**
 <details>
 <summary><b>Terminal Launcher (cho môi trường hạn chế tài nguyên)</b></summary>
 1. Cài đặt [Termux](https://github.com/termux/termux-app) (tải từ [GitHub Releases](https://github.com/termux/termux-app/releases), hoặc tìm kiếm trong F-Droid / Google Play)
 2. Chạy các lệnh sau:
@ -318,13 +338,6 @@ Sau đó làm theo phần Terminal Launcher bên dưới để hoàn tất cấu
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
 **Tùy chọn 2: Cài đặt APK (sắp ra mắt)**
 Một APK Android độc lập với WebUI tích hợp đang được phát triển. Hãy đón chờ!
 <details>
 <summary><b>Terminal Launcher (cho môi trường hạn chế tài nguyên)</b></summary>
 Đối với các môi trường tối giản chỉ có binary lõi `picoclaw` (không có Launcher UI), bạn có thể cấu hình mọi thứ qua dòng lệnh và tệp cấu hình JSON.
 **1. Khởi tạo**
--- a/README.zh.md
+++ b/README.zh.md
@ -56,6 +56,8 @@
 ## 📢 新闻
 2026-03-31 📱 **Android 支持！** PicoClaw 现可在 Android 上运行！APK 下载地址：[picoclaw.io](https://picoclaw.io/download)
 2026-03-25 🚀 **v0.2.4 发布！** Agent 架构全面重构（SubTurn、Hook、Steering、EventBus）、微信/企业微信深度集成、安全体系升级（.security.yml、敏感数据过滤）、新增 Provider（AWS Bedrock、Azure、小米 MiMo），以及 35 项 Bug 修复。PicoClaw 已达 **26K ⭐**！
 2026-03-17 🚀 **v0.2.3 发布！** 系统托盘 UI（Windows & Linux）、子 Agent 状态查询 (`spawn_status`)、实验性 Gateway 热重载、Cron 安全门控，以及 2 项安全修复。PicoClaw 已达 **25K ⭐**！
@ -301,7 +303,25 @@ picoclaw-launcher-tui
 让你十年前的旧手机焕发新生！将它变成你的 AI 助手。
-**方式一：Termux（现已可用）**
+**方式一：APK 安装**
 预览：
 <table>
  <tr>
    <td><img src="assets/fui_main_page.jpg" width="200"></td>
    <td><img src="assets/fui_web_page.jpg" width="200"></td>
    <td><img src="assets/fui_log_page.jpg" width="200"></td>
    <td><img src="assets/fui_setting_page.jpg" width="200"></td>
  </tr>
 </table>
 从 [picoclaw.io](https://picoclaw.io/download/) 下载 APK 并直接安装，无需 Termux！
 **方式二：Termux**
 <details>
 <summary><b>Terminal Launcher（适用于资源受限环境）</b></summary>
 1. 安装 [Termux](https://github.com/termux/termux-app)（可从 [GitHub Releases](https://github.com/termux/termux-app/releases) 下载，或在 F-Droid / Google Play 中搜索）
 2. 执行以下命令：
@ -318,13 +338,6 @@ termux-chroot ./picoclaw onboard   # chroot 提供标准 Linux 文件系统布
 <img src="assets/termux.jpg" alt="PicoClaw on Termux" width="512">
 **方式二：APK 安装（即将推出）**
 内置 WebUI 的独立 Android APK 正在开发中，敬请期待！
 <details>
 <summary><b>Terminal Launcher（适用于资源受限环境）</b></summary>
 对于只有 `picoclaw` 核心二进制文件的极简环境（无 Launcher UI），可通过命令行和 JSON 配置文件完成所有配置。
 **1. 初始化**
--- a/assets/fui_log_page.jpg
+++ b/assets/fui_log_page.jpg
--- a/assets/fui_main_page.jpg
+++ b/assets/fui_main_page.jpg
--- a/assets/fui_setting_page.jpg
+++ b/assets/fui_setting_page.jpg
--- a/assets/fui_web_page.jpg
+++ b/assets/fui_web_page.jpg
--- a/assets/wechat.png
+++ b/assets/wechat.png
--- a/cmd/picoclaw/main.go
+++ b/cmd/picoclaw/main.go
@ -24,6 +24,7 @@ import (
 	"github.com/sipeed/picoclaw/cmd/picoclaw/internal/status"
 	"github.com/sipeed/picoclaw/cmd/picoclaw/internal/version"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/updater"
 )
 func NewPicoclawCommand() *cobra.Command {
@ -45,6 +46,7 @@ func NewPicoclawCommand() *cobra.Command {
 		migrate.NewMigrateCommand(),
 		skills.NewSkillsCommand(),
 		model.NewModelCommand(),
 		updater.NewUpdateCommand("picoclaw"),
 		version.NewVersionCommand(),
 	)
--- a/cmd/picoclaw/main_test.go
+++ b/cmd/picoclaw/main_test.go
@ -43,6 +43,7 @@ func TestNewPicoclawCommand(t *testing.T) {
 		"onboard",
 		"skills",
 		"status",
 		"update",
 		"version",
 	}
--- a/config/config.example.json
+++ b/config/config.example.json
@ -48,6 +48,15 @@
      "model": "deepseek/deepseek-chat",
      "api_key": "sk-your-deepseek-key"
    },
    {
      "model_name": "venice-uncensored",
      "model": "venice/venice-uncensored",
      "api_key": "your-venice-api-key"
    },
    {
      "model_name": "lmstudio-local",
      "model": "lmstudio/openai/gpt-oss-20b"
    },
    {
      "model_name": "longcat",
      "model": "longcat/LongCat-Flash-Thinking",
@ -414,6 +423,9 @@
    "read_file": {
      "enabled": true
    },
    "send_tts": {
      "enabled": false
    },
    "spawn": {
      "enabled": true
    },
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@ -24,7 +24,7 @@ services:
  picoclaw-gateway:
    image: docker.io/sipeed/picoclaw:latest
    container_name: picoclaw-gateway
-    restart: on-failure
+    restart: unless-stopped
    profiles:
      - gateway
    # Uncomment to access host network; leave commented unless needed.
@ -40,7 +40,7 @@ services:
  picoclaw-launcher:
    image: docker.io/sipeed/picoclaw:launcher
    container_name: picoclaw-launcher
-    restart: on-failure
+    restart: unless-stopped
    profiles:
      - launcher
    environment:
--- a/docs/channels/telegram/README.fr.md
+++ b/docs/channels/telegram/README.fr.md
@ -13,18 +13,20 @@ Le canal Telegram utilise le long polling via l'API Bot Telegram pour une commun
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | Champ           | Type   | Requis | Description                                                              |
-| ---------- | ------ | ------ | ------------------------------------------------------------------------ |
+| --------------- | ------ | ------ | ------------------------------------------------------------------------ |
 | enabled         | bool   | Oui    | Activer ou non le canal Telegram                                         |
 | token           | string | Oui    | Token de l'API Bot Telegram                                              |
 | allow_from      | array  | Non    | Liste blanche d'identifiants utilisateur ; vide signifie tous les utilisateurs |
 | proxy           | string | Non    | URL du proxy pour se connecter à l'API Telegram (ex. http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | Non    | Activer le formatage Telegram MarkdownV2                                 |
 ## Configuration initiale
@ -33,3 +35,20 @@ Le canal Telegram utilise le long polling via l'API Bot Telegram pour une commun
 3. Obtenir le Token de l'API HTTP
 4. Renseigner le Token dans le fichier de configuration
 5. (Optionnel) Configurer `allow_from` pour restreindre les identifiants utilisateur autorisés à interagir (les IDs peuvent être obtenus via `@userinfobot`)
 ## Formatage avancées
 Vous pouvez définir `use_markdown_v2: true` pour activer les options de formatage améliorées. Cela permet au bot d'utiliser toutes les fonctionnalités de Telegram MarkdownV2, y compris les styles imbriqués, les spoilers et les blocs de largeur fixe personnalisés.
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.ja.md
+++ b/docs/channels/telegram/README.ja.md
@ -13,18 +13,20 @@ Telegram チャンネルは、Telegram Bot API を使用したロングポーリ
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | フィールド      | 型     | 必須 | 説明                                                              |
-| ---------- | ------ | ---- | ----------------------------------------------------------------- |
+| --------------- | ------ | ---- | ----------------------------------------------------------------- |
 | enabled         | bool   | はい | Telegram チャンネルを有効にするかどうか                           |
 | token           | string | はい | Telegram Bot API トークン                                         |
 | allow_from      | array  | いいえ | 許可するユーザーIDのリスト。空の場合はすべてのユーザーを許可     |
 | proxy           | string | いいえ | Telegram API への接続に使用するプロキシ URL (例: http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | いいえ | Telegram MarkdownV2 フォーマットを有効にする                      |
 ## セットアップ手順
@ -33,3 +35,20 @@ Telegram チャンネルは、Telegram Bot API を使用したロングポーリ
 3. HTTP API トークンを取得する
 4. 設定ファイルにトークンを入力する
 5. (任意) `allow_from` を設定して、対話を許可するユーザー ID を制限する（ID は `@userinfobot` で取得可能）
 ## 高度なフォーマット
 `use_markdown_v2: true` を設定することで、增强されたフォーマットオプションを有効にできます。これにより、ボットは Telegram MarkdownV2 の全機能（ネストされたスタイル、スポイラー、カスタム固定幅ブロックなど）を利用できます。
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.md
+++ b/docs/channels/telegram/README.md
@ -13,18 +13,20 @@ The Telegram channel uses long polling via the Telegram Bot API for bot-based co
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | Field            | Type   | Required | Description                                                        |
-| ---------- | ------ | -------- | ------------------------------------------------------------------ |
+| ---------------- | ------ | -------- | ------------------------------------------------------------------ |
 | enabled          | bool   | Yes      | Whether to enable the Telegram channel                             |
 | token            | string | Yes      | Telegram Bot API Token                                             |
 | allow_from       | array  | No       | Allowlist of user IDs; empty means all users are allowed           |
 | proxy            | string | No       | Proxy URL for connecting to the Telegram API (e.g. http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | No       | Enable Telegram MarkdownV2 formatting                              |
 ## Setup
@ -53,3 +55,20 @@ Examples:
 /use git
 explain how to squash the last 3 commits
 ```
 ## Advanced Formatting
 You can set `use_markdown_v2: true` to enable enhanced formatting options. This allows the bot to utilize the full range of Telegram MarkdownV2 features, including nested styles, spoilers, and custom fixed-width blocks.
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.pt-br.md
+++ b/docs/channels/telegram/README.pt-br.md
@ -13,18 +13,20 @@ O canal Telegram utiliza long polling via a API de Bot do Telegram para comunica
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | Campo           | Tipo   | Obrigatório | Descrição                                                                  |
-| ---------- | ------ | ----------- | -------------------------------------------------------------------------- |
+| --------------- | ------ | ----------- | -------------------------------------------------------------------------- |
 | enabled         | bool   | Sim         | Se o canal Telegram deve ser habilitado                                    |
 | token           | string | Sim         | Token da API de Bot do Telegram                                            |
 | allow_from      | array  | Não         | Lista de IDs de usuários permitidos; vazio significa todos os usuários     |
 | proxy           | string | Não         | URL do proxy para conexão com a API do Telegram (ex. http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | Não         | Habilitar formatação Telegram MarkdownV2                                   |
 ## Configuração inicial
@ -33,3 +35,20 @@ O canal Telegram utiliza long polling via a API de Bot do Telegram para comunica
 3. Obtenha o Token da API HTTP
 4. Preencha o Token no arquivo de configuração
 5. (Opcional) Configure `allow_from` para restringir quais IDs de usuário podem interagir (os IDs podem ser obtidos via `@userinfobot`)
 ## Formatação Avançada
 Você pode definir `use_markdown_v2: true` para habilitar opções de formatação aprimoradas. Isso permite que o bot utilize todos os recursos do Telegram MarkdownV2, incluindo estilos aninhados, spoilers e blocos de largura fixa personalizados.
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.vi.md
+++ b/docs/channels/telegram/README.vi.md
@ -13,18 +13,20 @@ Kênh Telegram sử dụng long polling qua Telegram Bot API để giao tiếp d
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | Trường         | Kiểu   | Bắt buộc | Mô tả                                                                    |
-| ---------- | ------ | -------- | ------------------------------------------------------------------------ |
+| -------------- | ------ | -------- | ------------------------------------------------------------------------ |
 | enabled        | bool   | Có       | Có bật kênh Telegram hay không                                           |
 | token          | string | Có       | Token API Bot Telegram                                                   |
 | allow_from     | array  | Không    | Danh sách trắng ID người dùng; để trống nghĩa là cho phép tất cả        |
 | proxy          | string | Không    | URL proxy để kết nối với Telegram API (ví dụ: http://127.0.0.1:7890)    |
 | use_markdown_v2 | bool   | Không    | Bật định dạng Telegram MarkdownV2                                        |
 ## Hướng dẫn thiết lập
@ -33,3 +35,20 @@ Kênh Telegram sử dụng long polling qua Telegram Bot API để giao tiếp d
 3. Lấy Token API HTTP
 4. Điền Token vào file cấu hình
 5. (Tùy chọn) Cấu hình `allow_from` để giới hạn ID người dùng được phép tương tác (có thể lấy ID qua `@userinfobot`)
 ## Định dạng nâng cao
 Bạn có thể đặt `use_markdown_v2: true` để bật các tùy chọn định dạng nâng cao. Điều này cho phép bot sử dụng toàn bộ các tính năng của Telegram MarkdownV2, bao gồm các kiểu lồng nhau, spoiler và các khối chiều rộng cố định tùy chỉnh.
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/channels/telegram/README.zh.md
+++ b/docs/channels/telegram/README.zh.md
@ -13,18 +13,20 @@ Telegram Channel 通过 Telegram 机器人 API 使用长轮询实现基于机器
      "enabled": true,
      "token": "123456789:ABCdefGHIjklMNOpqrsTUVwxyz",
      "allow_from": ["123456789"],
-      "proxy": ""
+      "proxy": "",
      "use_markdown_v2": false
    }
  }
 }
 ```
 | 字段             | 类型   | 必填 | 描述                                                      |
-| ---------- | ------ | ---- | --------------------------------------------------------- |
+| ---------------- | ------ | ---- | --------------------------------------------------------- |
 | enabled          | bool   | 是   | 是否启用 Telegram 频道                                    |
 | token            | string | 是   | Telegram 机器人 API Token                                 |
 | allow_from       | array  | 否   | 用户ID白名单，空表示允许所有用户                          |
 | proxy            | string | 否   | 连接 Telegram API 的代理 URL (例如 http://127.0.0.1:7890) |
 | use_markdown_v2 | bool   | 否   | 启用 Telegram MarkdownV2 格式化                           |
 ## 设置流程
@ -50,6 +52,23 @@ Telegram 会在启动时自动注册 PicoClaw 的顶级 Bot 命令，包括 `/st
 ```text
 /list skills
 /use git explain how to squash the last 3 commits
-/use italiapersonalfinance
+/use git
-dammi le ultime news
+explain how to squash the last 3 commits
 ```
 ## 高级格式化
 您可以设置 `use_markdown_v2: true` 来启用增强的格式化选项。这允许机器人使用 Telegram MarkdownV2 的全部功能，包括嵌套样式、剧透和自定义等宽代码块。
 ```json
 {
  "channels": {
    "telegram": {
      "enabled": true,
      "token": "YOUR_BOT_TOKEN",
      "allow_from": ["YOUR_USER_ID"],
      "use_markdown_v2": true
    }
  }
 }
 ```
--- a/docs/configuration.md
+++ b/docs/configuration.md
@ -563,6 +563,7 @@ For complete documentation, see [`security_configuration.md`](security_configura
 | **通义千问 (Qwen)**     | `qwen/`           | `https://dashscope.aliyuncs.com/compatible-mode/v1` | OpenAI    | [Get Key](https://dashscope.console.aliyun.com)                  |
 | **NVIDIA**              | `nvidia/`         | `https://integrate.api.nvidia.com/v1`               | OpenAI    | [Get Key](https://build.nvidia.com)                              |
 | **Ollama**              | `ollama/`         | `http://localhost:11434/v1`                         | OpenAI    | Local (no key needed)                                            |
 | **LM Studio**           | `lmstudio/`       | `http://localhost:1234/v1`                          | OpenAI    | Optional (local default: no key)                                 |
 | **OpenRouter**          | `openrouter/`     | `https://openrouter.ai/api/v1`                      | OpenAI    | [Get Key](https://openrouter.ai/keys)                            |
 | **LiteLLM Proxy**       | `litellm/`        | `http://localhost:4000/v1`                          | OpenAI    | Your LiteLLM proxy key                                           |
 | **VLLM**                | `vllm/`           | `http://localhost:8000/v1`                          | OpenAI    | Local                                                            |
@ -710,6 +711,21 @@ For direct Anthropic API access or custom endpoints that only support Anthropic'
 </details>
 <details>
 <summary><b>LM Studio (local)</b></summary>
 ```json
 {
  "model_name": "lmstudio-local",
  "model": "lmstudio/openai/gpt-oss-20b"
 }
 ```
 `api_base` defaults to `http://localhost:1234/v1`. API key is optional unless your LM Studio server enables authentication.<br/>
 PicoClaw sends OpenAI-compatible requests to LM Studio, and strips the `lmstudio/` prefix before sending requests, so `lmstudio/openai/gpt-oss-20b` sends `openai/gpt-oss-20b` to the LM Studio server.
 </details>
 <details>
 <summary><b>Custom Proxy / LiteLLM</b></summary>
--- a/docs/fr/providers.md
+++ b/docs/fr/providers.md
@ -99,6 +99,24 @@ Cette conception permet également le **support multi-agents** avec une sélecti
 }
 ```
 #### Champs d'entrée `model_list`
 | Champ | Type | Requis | Description |
 |-------|------|--------|-------------|
 | `model_name` | string | Oui | Nom unique pour référencer ce modèle dans la config agent |
 | `model` | string | Oui | Identifiant fournisseur/modèle (ex : `openai/gpt-5.4`, `azure/gpt-5.4`, `anthropic/claude-sonnet-4.6`) |
 | `api_keys` | string[] | Oui* | Clé(s) API pour l'authentification. Plusieurs clés permettent la rotation par requête. Non requis pour les fournisseurs locaux (Ollama, LM Studio, VLLM) |
 | `api_base` | string | Non | Remplace l'URL de base API par défaut |
 | `proxy` | string | Non | URL du proxy HTTP pour cette entrée de modèle |
 | `user_agent` | string | Non | En-tête `User-Agent` personnalisé pour les requêtes API (supporté par les providers OpenAI-compatible, Anthropic et Azure) |
 | `request_timeout` | int | Non | Délai d'expiration de la requête en secondes (la valeur par défaut varie selon le provider) |
 | `max_tokens_field` | string | Non | Remplace le nom du champ max tokens dans le corps de la requête (ex : `max_completion_tokens` pour les modèles o1) |
 | `thinking_level` | string | Non | Niveau de pensée étendue : `off`, `low`, `medium`, `high`, `xhigh` ou `adaptive` |
 | `extra_body` | object | Non | Champs supplémentaires à injecter dans chaque corps de requête |
 | `rpm` | int | Non | Limite de requêtes par minute |
 | `fallbacks` | string[] | Non | Noms des modèles de secours pour le basculement automatique |
 | `enabled` | bool | Non | Activer ou désactiver cette entrée de modèle (par défaut : `true`) |
 #### Exemples par Vendor
 **OpenAI**
@ -190,6 +208,7 @@ Pour l'accès direct à l'API Anthropic ou les endpoints personnalisés qui ne p
  "model": "openai/custom-model",
  "api_base": "https://my-proxy.com/v1",
  "api_keys": ["sk-..."],
  "user_agent": "MyApp/1.0",
  "request_timeout": 300
 }
 ```
--- a/docs/ja/providers.md
+++ b/docs/ja/providers.md
@ -99,6 +99,24 @@
 }
 ```
 #### `model_list` エントリフィールド
 | フィールド | 型 | 必須 | 説明 |
 |-----------|------|------|------|
 | `model_name` | string | はい | agent 設定でこのモデルを参照するための一意の名前 |
 | `model` | string | はい | ベンダー/モデル識別子（例：`openai/gpt-5.4`、`azure/gpt-5.4`、`anthropic/claude-sonnet-4.6`） |
 | `api_keys` | string[] | はい* | 認証キー。複数キーでリクエストごとのローテーションが可能。ローカル provider（Ollama、LM Studio、VLLM）には不要 |
 | `api_base` | string | いいえ | デフォルトの API エンドポイント URL を上書き |
 | `proxy` | string | いいえ | このモデルエントリの HTTP プロキシ URL |
 | `user_agent` | string | いいえ | カスタム `User-Agent` リクエストヘッダー（OpenAI 互換、Anthropic、Azure provider で対応） |
 | `request_timeout` | int | いいえ | リクエストタイムアウト（秒）。デフォルト値は provider により異なる |
 | `max_tokens_field` | string | いいえ | リクエストボディの max tokens フィールド名を上書き（例：o1 モデルでは `max_completion_tokens`） |
 | `thinking_level` | string | いいえ | 拡張思考レベル：`off`、`low`、`medium`、`high`、`xhigh`、`adaptive` |
 | `extra_body` | object | いいえ | 各リクエストボディに注入する追加フィールド |
 | `rpm` | int | いいえ | 1 分あたりのリクエストレート制限 |
 | `fallbacks` | string[] | いいえ | 自動フェイルオーバーのフォールバックモデル名 |
 | `enabled` | bool | いいえ | このモデルエントリを有効にするかどうか（デフォルト：`true`） |
 #### ベンダー別設定例
 **OpenAI**
@ -201,6 +219,7 @@ Anthropic API への直接アクセスや、Anthropic のネイティブメッ
  "model": "openai/custom-model",
  "api_base": "https://my-proxy.com/v1",
  "api_keys": ["sk-..."],
  "user_agent": "MyApp/1.0",
  "request_timeout": 300
 }
 ```
--- a/docs/providers.md
+++ b/docs/providers.md
@ -16,6 +16,7 @@
 | `openrouter` | LLM (recommended, access to all models) | [openrouter.ai](https://openrouter.ai)                       |
 | `anthropic`  | LLM (Claude direct)                     | [console.anthropic.com](https://console.anthropic.com)       |
 | `openai`     | LLM (GPT direct)                        | [platform.openai.com](https://platform.openai.com)           |
 | `venice`     | LLM (Venice AI direct)                  | [venice.ai](https://venice.ai)                               |
 | `deepseek`   | LLM (DeepSeek direct)                   | [platform.deepseek.com](https://platform.deepseek.com)       |
 | `qwen`       | LLM (Qwen direct)                       | [dashscope.console.aliyun.com](https://dashscope.console.aliyun.com) |
 | `groq`       | LLM + **Voice transcription** (Whisper) | [console.groq.com](https://console.groq.com)                 |
@ -46,6 +47,7 @@ This design also enables **multi-agent support** with flexible provider selectio
 | Vendor              | `model` Prefix    | Default API Base                                    | Protocol  | API Key                                                          |
 | ------------------- | ----------------- |-----------------------------------------------------| --------- | ---------------------------------------------------------------- |
 | **OpenAI**          | `openai/`         | `https://api.openai.com/v1`                         | OpenAI    | [Get Key](https://platform.openai.com)                           |
 | **Venice AI**       | `venice/`         | `https://api.venice.ai/api/v1`                      | OpenAI    | [Get Key](https://venice.ai)                                     |
 | **Anthropic**       | `anthropic/`      | `https://api.anthropic.com/v1`                      | Anthropic | [Get Key](https://console.anthropic.com)                         |
 | **智谱 AI (GLM)**   | `zhipu/`          | `https://open.bigmodel.cn/api/paas/v4`              | OpenAI    | [Get Key](https://open.bigmodel.cn/usercenter/proj-mgmt/apikeys) |
 | **Z.AI Coding Plan** | `openai/`         | `https://api.z.ai/api/coding/paas/v4`              | OpenAI    | [Get Key](https://z.ai/manage-apikey/apikey-list) |
@ -56,6 +58,7 @@ This design also enables **multi-agent support** with flexible provider selectio
 | **通义千问 (Qwen)** | `qwen/`           | `https://dashscope.aliyuncs.com/compatible-mode/v1` | OpenAI    | [Get Key](https://dashscope.console.aliyun.com)                  |
 | **NVIDIA**          | `nvidia/`         | `https://integrate.api.nvidia.com/v1`               | OpenAI    | [Get Key](https://build.nvidia.com)                              |
 | **Ollama**          | `ollama/`         | `http://localhost:11434/v1`                         | OpenAI    | Local (no key needed)                                            |
 | **LM Studio**       | `lmstudio/`       | `http://localhost:1234/v1`                          | OpenAI    | Optional (local default: no key)                                 |
 | **OpenRouter**      | `openrouter/`     | `https://openrouter.ai/api/v1`                      | OpenAI    | [Get Key](https://openrouter.ai/keys)                            |
 | **LiteLLM Proxy**   | `litellm/`        | `http://localhost:4000/v1`                          | OpenAI    | Your LiteLLM proxy key                                            |
 | **VLLM**            | `vllm/`           | `http://localhost:8000/v1`                          | OpenAI    | Local                                                            |
@ -105,6 +108,24 @@ This design also enables **multi-agent support** with flexible provider selectio
 }
 ```
 #### `model_list` Entry Fields
 | Field | Type | Required | Description |
 |-------|------|----------|-------------|
 | `model_name` | string | Yes | Unique name used to reference this model in agent config |
 | `model` | string | Yes | Vendor/model identifier (e.g., `openai/gpt-5.4`, `azure/gpt-5.4`, `anthropic/claude-sonnet-4.6`) |
 | `api_keys` | string[] | Yes* | API key(s) for authentication. Multiple keys enable per-request rotation. Not required for local providers (Ollama, LM Studio, VLLM) |
 | `api_base` | string | No | Override the default API endpoint URL |
 | `proxy` | string | No | HTTP proxy URL for this model entry |
 | `user_agent` | string | No | Custom `User-Agent` header sent with API requests (supported by OpenAI-compatible, Anthropic, and Azure providers) |
 | `request_timeout` | int | No | Request timeout in seconds (default varies by provider) |
 | `max_tokens_field` | string | No | Override the max tokens field name in request body (e.g., `max_completion_tokens` for o1 models) |
 | `thinking_level` | string | No | Extended thinking level: `off`, `low`, `medium`, `high`, `xhigh`, or `adaptive` |
 | `extra_body` | object | No | Additional fields to inject into every request body |
 | `rpm` | int | No | Per-minute request rate limit |
 | `fallbacks` | string[] | No | Fallback model names for automatic failover |
 | `enabled` | bool | No | Whether this model entry is active (default: `true`) |
 #### Voice Transcription
 You can configure a dedicated model for audio transcription with `voice.model_name`. This lets you reuse existing multimodal providers that support audio input instead of relying only on Groq.
@ -226,6 +247,18 @@ For direct Anthropic API access or custom endpoints that only support Anthropic'
 }
 ```
 **LM Studio (local)**
 ```json
 {
  "model_name": "lmstudio-local",
  "model": "lmstudio/openai/gpt-oss-20b"
 }
 ```
 `api_base` defaults to `http://localhost:1234/v1`. API key is optional unless your LM Studio server enables authentication.<br/>
 PicoClaw sends OpenAI-compatible requests to LM Studio, and strips the `lmstudio/` prefix before sending requests, so `lmstudio/openai/gpt-oss-20b` sends `openai/gpt-oss-20b` to the LM Studio server.
 **Custom Proxy/API**
 ```json
@ -234,6 +267,7 @@ For direct Anthropic API access or custom endpoints that only support Anthropic'
  "model": "openai/custom-model",
  "api_base": "https://my-proxy.com/v1",
  "api_keys": ["sk-..."],
  "user_agent": "MyApp/1.0",
  "request_timeout": 300
 }
 ```
--- a/docs/pt-br/providers.md
+++ b/docs/pt-br/providers.md
@ -99,6 +99,24 @@ Este design também permite **suporte multi-agente** com seleção flexível de
 }
 ```
 #### Campos de entrada `model_list`
 | Campo | Tipo | Obrigatório | Descrição |
 |-------|------|-------------|-----------|
 | `model_name` | string | Sim | Nome único para referenciar este modelo na config do agent |
 | `model` | string | Sim | Identificador fornecedor/modelo (ex: `openai/gpt-5.4`, `azure/gpt-5.4`, `anthropic/claude-sonnet-4.6`) |
 | `api_keys` | string[] | Sim* | Chave(s) API para autenticação. Múltiplas chaves permitem rotação por requisição. Não necessário para providers locais (Ollama, LM Studio, VLLM) |
 | `api_base` | string | Não | Substitui a URL base da API padrão |
 | `proxy` | string | Não | URL do proxy HTTP para esta entrada de modelo |
 | `user_agent` | string | Não | Cabeçalho `User-Agent` personalizado enviado com requisições API (suportado por providers OpenAI-compatible, Anthropic e Azure) |
 | `request_timeout` | int | Não | Timeout de requisição em segundos (o padrão varia por provider) |
 | `max_tokens_field` | string | Não | Substitui o nome do campo max tokens no corpo da requisição (ex: `max_completion_tokens` para modelos o1) |
 | `thinking_level` | string | Não | Nível de pensamento estendido: `off`, `low`, `medium`, `high`, `xhigh` ou `adaptive` |
 | `extra_body` | object | Não | Campos adicionais para injetar em cada corpo de requisição |
 | `rpm` | int | Não | Limite de requisições por minuto |
 | `fallbacks` | string[] | Não | Nomes dos modelos de fallback para failover automático |
 | `enabled` | bool | Não | Ativar ou desativar esta entrada de modelo (padrão: `true`) |
 #### Exemplos por Vendor
 **OpenAI**
@ -190,6 +208,7 @@ Para acesso direto à API Anthropic ou endpoints personalizados que suportam ape
  "model": "openai/custom-model",
  "api_base": "https://my-proxy.com/v1",
  "api_keys": ["sk-..."],
  "user_agent": "MyApp/1.0",
  "request_timeout": 300
 }
 ```
--- a/docs/vi/providers.md
+++ b/docs/vi/providers.md
@ -99,6 +99,24 @@ Thiết kế này cũng cho phép **hỗ trợ đa agent** với lựa chọn pr
 }
 ```
 #### Các trường entry `model_list`
 | Trường | Kiểu | Bắt buộc | Mô tả |
 |--------|------|----------|------|
 | `model_name` | string | Có | Tên duy nhất để tham chiếu model này trong cấu hình agent |
 | `model` | string | Có | Định danh nhà cung cấp/model (ví dụ: `openai/gpt-5.4`, `azure/gpt-5.4`, `anthropic/claude-sonnet-4.6`) |
 | `api_keys` | string[] | Có* | Khóa API xác thực. Nhiều khóa cho phép xoay vòng theo yêu cầu. Không cần thiết cho provider nội bộ (Ollama, LM Studio, VLLM) |
 | `api_base` | string | Không | Ghi đè URL endpoint API mặc định |
 | `proxy` | string | Không | URL proxy HTTP cho entry model này |
 | `user_agent` | string | Không | Header `User-Agent` tùy chỉnh gửi với yêu cầu API (được hỗ trợ bởi provider OpenAI-compatible, Anthropic và Azure) |
 | `request_timeout` | int | Không | Timeout yêu cầu tính bằng giây (mặc định khác nhau tùy provider) |
 | `max_tokens_field` | string | Không | Ghi đè tên trường max tokens trong request body (ví dụ: `max_completion_tokens` cho model o1) |
 | `thinking_level` | string | Không | Mức độ tư duy mở rộng: `off`, `low`, `medium`, `high`, `xhigh` hoặc `adaptive` |
 | `extra_body` | object | Không | Các trường bổ sung để chèn vào mỗi request body |
 | `rpm` | int | Không | Giới hạn tốc độ yêu cầu mỗi phút |
 | `fallbacks` | string[] | Không | Tên model dự phòng cho failover tự động |
 | `enabled` | bool | Không | Kích hoạt hay vô hiệu hóa entry model này (mặc định: `true`) |
 #### Ví Dụ Theo Vendor
 **OpenAI**
@ -190,6 +208,7 @@ Thiết kế này cũng cho phép **hỗ trợ đa agent** với lựa chọn pr
  "model": "openai/custom-model",
  "api_base": "https://my-proxy.com/v1",
  "api_keys": ["sk-..."],
  "user_agent": "MyApp/1.0",
  "request_timeout": 300
 }
 ```
--- a/docs/zh/configuration.md
+++ b/docs/zh/configuration.md
@ -365,6 +365,7 @@ Agent 读取 HEARTBEAT.md
 | **通义千问 (Qwen)**     | `qwen/`           | `https://dashscope.aliyuncs.com/compatible-mode/v1` | OpenAI    | [获取](https://dashscope.console.aliyun.com)                     |
 | **NVIDIA**              | `nvidia/`         | `https://integrate.api.nvidia.com/v1`               | OpenAI    | [获取](https://build.nvidia.com)                                 |
 | **Ollama**              | `ollama/`         | `http://localhost:11434/v1`                         | OpenAI    | 本地（无需 Key）                                                 |
 | **LM Studio**           | `lmstudio/`       | `http://localhost:1234/v1`                          | OpenAI    | 可选（本地默认无需密钥）                                         |
 | **OpenRouter**          | `openrouter/`     | `https://openrouter.ai/api/v1`                      | OpenAI    | [获取](https://openrouter.ai/keys)                               |
 | **LiteLLM Proxy**       | `litellm/`        | `http://localhost:4000/v1`                          | OpenAI    | 你的 LiteLLM 代理 Key                                            |
 | **VLLM**                | `vllm/`           | `http://localhost:8000/v1`                          | OpenAI    | 本地                                                             |
@ -506,6 +507,21 @@ Agent 读取 HEARTBEAT.md
 </details>
 <details>
 <summary><b>LM Studio（本地）</b></summary>
 ```json
 {
  "model_name": "lmstudio-local",
  "model": "lmstudio/openai/gpt-oss-20b"
 }
 ```
 `api_base` 默认是 `http://localhost:1234/v1`。除非你在 LM Studio 侧启用了认证，否则不需要配置 API Key。
 PicoClaw 向 LM Studio 的 OpenAI 兼容终结点发送请求，且将移除首个 `lmstudio/` 前缀，因此 `lmstudio/openai/gpt-oss-20b` 会发送 `openai/gpt-oss-20b`。
 </details>
 <details>
 <summary><b>自定义代理 / LiteLLM</b></summary>
--- a/docs/zh/providers.md
+++ b/docs/zh/providers.md
@ -15,6 +15,7 @@
 | `openrouter`         | LLM (推荐，可访问所有模型)   | [openrouter.ai](https://openrouter.ai)                               |
 | `anthropic`          | LLM (Claude 直连)            | [console.anthropic.com](https://console.anthropic.com)               |
 | `openai`             | LLM (GPT 直连)               | [platform.openai.com](https://platform.openai.com)                   |
 | `venice`             | LLM (Venice AI 直连)         | [venice.ai](https://venice.ai)                                       |
 | `deepseek`           | LLM (DeepSeek 直连)          | [platform.deepseek.com](https://platform.deepseek.com)               |
 | `qwen`               | LLM (通义千问)               | [dashscope.console.aliyun.com](https://dashscope.console.aliyun.com) |
 | `groq`               | LLM + **语音转录** (Whisper) | [console.groq.com](https://console.groq.com)                         |
@ -44,6 +45,7 @@
 | 厂商                | `model` 前缀      | 默认 API Base                                       | 协议      | 获取 API Key                                                      |
 | ------------------- | ----------------- | --------------------------------------------------- | --------- | ----------------------------------------------------------------- |
 | **OpenAI**          | `openai/`         | `https://api.openai.com/v1`                         | OpenAI    | [获取密钥](https://platform.openai.com)                           |
 | **Venice AI**       | `venice/`         | `https://api.venice.ai/api/v1`                      | OpenAI    | [获取密钥](https://venice.ai)                                     |
 | **Anthropic**       | `anthropic/`      | `https://api.anthropic.com/v1`                      | Anthropic | [获取密钥](https://console.anthropic.com)                         |
 | **智谱 AI (GLM)**   | `zhipu/`          | `https://open.bigmodel.cn/api/paas/v4`              | OpenAI    | [获取密钥](https://open.bigmodel.cn/usercenter/proj-mgmt/apikeys) |
 | **DeepSeek**        | `deepseek/`       | `https://api.deepseek.com/v1`                       | OpenAI    | [获取密钥](https://platform.deepseek.com)                         |
@ -53,6 +55,7 @@
 | **通义千问 (Qwen)** | `qwen/`           | `https://dashscope.aliyuncs.com/compatible-mode/v1` | OpenAI    | [获取密钥](https://dashscope.console.aliyun.com)                  |
 | **NVIDIA**          | `nvidia/`         | `https://integrate.api.nvidia.com/v1`               | OpenAI    | [获取密钥](https://build.nvidia.com)                              |
 | **Ollama**          | `ollama/`         | `http://localhost:11434/v1`                         | OpenAI    | 本地（无需密钥）                                                  |
 | **LM Studio**       | `lmstudio/`       | `http://localhost:1234/v1`                          | OpenAI    | 可选（本地默认无需密钥）                                          |
 | **OpenRouter**      | `openrouter/`     | `https://openrouter.ai/api/v1`                      | OpenAI    | [获取密钥](https://openrouter.ai/keys)                            |
 | **LiteLLM Proxy**   | `litellm/`        | `http://localhost:4000/v1`                          | OpenAI    | 你的 LiteLLM 代理密钥                                             |
 | **VLLM**            | `vllm/`           | `http://localhost:8000/v1`                          | OpenAI    | 本地                                                              |
@ -101,6 +104,24 @@
 }
 ```
 #### `model_list` 条目字段
 | 字段 | 类型 | 必填 | 说明 |
 |------|------|------|------|
 | `model_name` | string | 是 | 在 agent 配置中引用此模型的唯一名称 |
 | `model` | string | 是 | 厂商/模型标识符（如 `openai/gpt-5.4`、`azure/gpt-5.4`、`anthropic/claude-sonnet-4.6`） |
 | `api_keys` | string[] | 是* | 认证密钥。多个密钥可按请求轮换。本地 provider（Ollama、LM Studio、VLLM）不需要 |
 | `api_base` | string | 否 | 覆盖默认的 API 端点 URL |
 | `proxy` | string | 否 | 此模型条目的 HTTP 代理 URL |
 | `user_agent` | string | 否 | 自定义 `User-Agent` 请求头（支持 OpenAI 兼容、Anthropic 和 Azure provider） |
 | `request_timeout` | int | 否 | 请求超时时间（秒），默认值因 provider 而异 |
 | `max_tokens_field` | string | 否 | 覆盖请求体中 max tokens 的字段名（如 o1 模型使用 `max_completion_tokens`） |
 | `thinking_level` | string | 否 | 扩展思考级别：`off`、`low`、`medium`、`high`、`xhigh` 或 `adaptive` |
 | `extra_body` | object | 否 | 注入到每个请求体中的额外字段 |
 | `rpm` | int | 否 | 每分钟请求速率限制 |
 | `fallbacks` | string[] | 否 | 自动故障转移的备用模型名称 |
 | `enabled` | bool | 否 | 是否启用此模型条目（默认：`true`） |
 #### 语音转录
 你可以通过 `voice.model_name` 为语音转录指定一个专用模型。这样可以直接复用已经配置好的、支持音频输入的多模态 provider，而不必只依赖 Groq。
@ -211,6 +232,18 @@
 }
 ```
 **LM Studio（本地）**
 ```json
 {
  "model_name": "lmstudio-local",
  "model": "lmstudio/openai/gpt-oss-20b"
 }
 ```
 `api_base` 默认是 `http://localhost:1234/v1`。除非你在 LM Studio 侧启用了认证，否则不需要配置 API Key。
 PicoClaw 向 LM Studio 的 OpenAI 兼容终结点发送请求，且将移除首个 `lmstudio/` 前缀，因此 `lmstudio/openai/gpt-oss-20b` 会发送 `openai/gpt-oss-20b`。
 **自定义代理/API**
 ```json
@ -219,6 +252,7 @@
  "model": "openai/custom-model",
  "api_base": "https://my-proxy.com/v1",
  "api_keys": ["sk-..."],
  "user_agent": "MyApp/1.0",
  "request_timeout": 300
 }
 ```
--- a/go.mod
+++ b/go.mod
@ -23,10 +23,13 @@ require (
 	github.com/h2non/filetype v1.1.3
 	github.com/larksuite/oapi-sdk-go/v3 v3.5.3
 	github.com/mdp/qrterminal/v3 v3.2.1
 	github.com/minio/selfupdate v0.6.0
 	github.com/modelcontextprotocol/go-sdk v1.4.1
 	github.com/mymmrac/telego v1.7.0
 	github.com/open-dingtalk/dingtalk-stream-sdk-go v0.9.1
 	github.com/openai/openai-go/v3 v3.22.0
 	github.com/pion/rtp v1.8.7
 	github.com/pion/webrtc/v3 v3.3.6
 	github.com/rivo/tview v0.42.0
 	github.com/rs/zerolog v1.34.0
 	github.com/slack-go/slack v0.17.3
@ -46,6 +49,7 @@ require (
 )
 require (
 	aead.dev/minisign v0.2.0 // indirect
 	filippo.io/edwards25519 v1.2.0 // indirect
 	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.8 // indirect
 	github.com/aws/aws-sdk-go-v2/credentials v1.19.12 // indirect
@ -61,6 +65,7 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/sts v1.41.9 // indirect
 	github.com/aws/smithy-go v1.24.2 // indirect
 	github.com/beeper/argo-go v1.1.2 // indirect
 	github.com/cloudflare/circl v1.6.3 // indirect
 	github.com/coder/websocket v1.8.14 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
@ -76,6 +81,7 @@ require (
 	github.com/mattn/go-sqlite3 v1.14.34 // indirect
 	github.com/ncruces/go-strftime v1.0.0 // indirect
 	github.com/petermattis/goid v0.0.0-20260226131333-17d1149c6ac6 // indirect
 	github.com/pion/randutil v0.1.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
@ -123,3 +129,5 @@ require (
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.42.0
 )
 replace github.com/bwmarrin/discordgo => github.com/yeongaori/discordgo-fork v0.0.0-20260319072544-e8e546f5d532
--- a/go.sum
+++ b/go.sum
@ -1,3 +1,5 @@
 aead.dev/minisign v0.2.0 h1:kAWrq/hBRu4AARY6AlciO83xhNnW9UaC8YipS2uhLPk=
 aead.dev/minisign v0.2.0/go.mod h1:zdq6LdSd9TbuSxchxwhpA9zEb9YXcVGoE8JakuiGaIQ=
 cloud.google.com/go/compute/metadata v0.3.0/go.mod h1:zFmK7XCadkQkj6TtorcaGlCW1hT1fIilQDwofLpJ20k=
 filippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo=
 filippo.io/edwards25519 v1.2.0/go.mod h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc=
@ -53,8 +55,6 @@ github.com/aws/smithy-go v1.24.2 h1:FzA3bu/nt/vDvmnkg+R8Xl46gmzEDam6mZ1hzmwXFng=
 github.com/aws/smithy-go v1.24.2/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
 github.com/beeper/argo-go v1.1.2 h1:UQI2G8F+NLfGTOmTUI0254pGKx/HUU/etbUGTJv91Fs=
 github.com/beeper/argo-go v1.1.2/go.mod h1:M+LJAnyowKVQ6Rdj6XYGEn+qcVFkb3R/MUpqkGR0hM4=
 github.com/bwmarrin/discordgo v0.29.0 h1:FmWeXFaKUwrcL3Cx65c20bTRW+vOb6k8AnaP+EgjDno=
 github.com/bwmarrin/discordgo v0.29.0/go.mod h1:NJZpH+1AfhIcyQsPeuBKsUtYrRnjkyu0kIVMCHkZtRY=
 github.com/bytedance/gopkg v0.1.3 h1:TPBSwH8RsouGCBcMBktLt1AymVo2TVsBVCY4b6TnZ/M=
 github.com/bytedance/gopkg v0.1.3/go.mod h1:576VvJ+eJgyCzdjS+c4+77QF3p7ubbtiKARP3TxducM=
 github.com/bytedance/sonic v1.15.0 h1:/PXeWFaR5ElNcVE84U0dOHjiMHQOwNIx3K4ymzh/uSE=
@ -65,6 +65,8 @@ github.com/caarlos0/env/v11 v11.4.0 h1:Kcb6t5kIIr4XkoQC9AF2j+8E1Jsrl3Wz/hhm1LtoG
 github.com/caarlos0/env/v11 v11.4.0/go.mod h1:qupehSf/Y0TUTsxKywqRt/vJjN5nz6vauiYEUUr8P4U=
 github.com/cespare/xxhash/v2 v2.1.2/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8=
 github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4=
 github.com/cloudwego/base64x v0.1.6 h1:t11wG9AECkCDk5fMSoxmufanudBtJ+/HemLstXDLI2M=
 github.com/cloudwego/base64x v0.1.6/go.mod h1:OFcloc187FXDaYHvrNIjxSe8ncn0OOM8gEHfghB2IPU=
 github.com/coder/websocket v1.8.14 h1:9L0p0iKiNOibykf283eHkKUHHrpG7f65OE3BhhO7v9g=
@ -184,6 +186,8 @@ github.com/mattn/go-sqlite3 v1.14.34 h1:3NtcvcUnFBPsuRcno8pUtupspG/GM+9nZ88zgJcp
 github.com/mattn/go-sqlite3 v1.14.34/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=
 github.com/mdp/qrterminal/v3 v3.2.1 h1:6+yQjiiOsSuXT5n9/m60E54vdgFsw0zhADHhHLrFet4=
 github.com/mdp/qrterminal/v3 v3.2.1/go.mod h1:jOTmXvnBsMy5xqLniO0R++Jmjs2sTm9dFSuQ5kpz/SU=
 github.com/minio/selfupdate v0.6.0 h1:i76PgT0K5xO9+hjzKcacQtO7+MjJ4JKA8Ak8XQ9DDwU=
 github.com/minio/selfupdate v0.6.0/go.mod h1:bO02GTIPCMQFTEvE5h4DjYB58bCoZ35XLeBf0buTDdM=
 github.com/modelcontextprotocol/go-sdk v1.4.1 h1:M4x9GyIPj+HoIlHNGpK2hq5o3BFhC+78PkEaldQRphc=
 github.com/modelcontextprotocol/go-sdk v1.4.1/go.mod h1:Bo/mS87hPQqHSRkMv4dQq1XCu6zv4INdXnFZabkNU6s=
 github.com/mymmrac/telego v1.7.0 h1:yRO/l00tFGG4nY66ufUKb4ARqv7qx9+LsjQv/b0NEyo=
@ -204,6 +208,12 @@ github.com/openai/openai-go/v3 v3.22.0 h1:6MEoNoV8sbjOVmXdvhmuX3BjVbVdcExbVyGixi
 github.com/openai/openai-go/v3 v3.22.0/go.mod h1:cdufnVK14cWcT9qA1rRtrXx4FTRsgbDPW7Ia7SS5cZo=
 github.com/petermattis/goid v0.0.0-20260226131333-17d1149c6ac6 h1:rh2lKw/P/EqHa724vYH2+VVQ1YnW4u6EOXl0PMAovZE=
 github.com/petermattis/goid v0.0.0-20260226131333-17d1149c6ac6/go.mod h1:pxMtw7cyUw6B2bRH0ZBANSPg+AoSud1I1iyJHI69jH4=
 github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
 github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
 github.com/pion/rtp v1.8.7 h1:qslKkG8qxvQ7hqaxkmL7Pl0XcUm+/Er7nMnu6Vq+ZxM=
 github.com/pion/rtp v1.8.7/go.mod h1:pBGHaFt/yW7bf1jjWAoUjpSNoDnw98KTMg+jWWvziqU=
 github.com/pion/webrtc/v3 v3.3.6 h1:7XAh4RPtlY1Vul6/GmZrv7z+NnxKA6If0KStXBI2ZLE=
 github.com/pion/webrtc/v3 v3.3.6/go.mod h1:zyN7th4mZpV27eXybfR/cnUf3J2DRy8zw/mdjD9JTNM=
 github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
@ -273,6 +283,8 @@ github.com/vektah/gqlparser/v2 v2.5.27 h1:RHPD3JOplpk5mP5JGX8RKZkt2/Vwj/PZv0HxTd
 github.com/vektah/gqlparser/v2 v2.5.27/go.mod h1:D1/VCZtV3LPnQrcPBeR/q5jkSQIPti0uYCP/RI0gIeo=
 github.com/xyproto/randomstring v1.0.5 h1:YtlWPoRdgMu3NZtP45drfy1GKoojuR7hmRcnhZqKjWU=
 github.com/xyproto/randomstring v1.0.5/go.mod h1:rgmS5DeNXLivK7YprL0pY+lTuhNQW3iGxZ18UQApw/E=
 github.com/yeongaori/discordgo-fork v0.0.0-20260319072544-e8e546f5d532 h1:gxFHYeUDGziRb0zXYEqBFohC+NJbIW9L0tddaXMWr2o=
 github.com/yeongaori/discordgo-fork v0.0.0-20260319072544-e8e546f5d532/go.mod h1:A0FcMFJKJ9fRjgSuZ2o+pIQ6mPS81SVuiLN2vYTa7Ao=
 github.com/yosida95/uritemplate/v3 v3.0.2 h1:Ed3Oyj9yrmi9087+NczuL5BwkIc4wvTb5zIM+UJPGz4=
 github.com/yosida95/uritemplate/v3 v3.0.2/go.mod h1:ILOh0sOhIJR3+L/8afwt/kE++YT040gmv5BQTMR2HP4=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
@ -300,8 +312,10 @@ golang.org/x/arch v0.24.0/go.mod h1:dNHoOeKiyja7GTvF9NJS1l3Z2yntpQNzgrjh1cU103A=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I=
 golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211209193657-4570a0811e8b/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.16.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
 golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
 golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
@ -322,6 +336,7 @@ golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwY
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
 golang.org/x/net v0.0.0-20210428140749-89ef3d95e781/go.mod h1:OJAsFXCWl8Ukc7SiCT/9KSuxbyM7479/AVlXFRxuMCk=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
@ -344,11 +359,13 @@ golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5h
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190904154756-749cb33beabd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191005200804-aed5e4c7ecf9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191120155948-bd437916bb0e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210112080510-489259a85091/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210228012217-479acdf4ea46/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@ -362,6 +379,7 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=
 golang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
--- a/pkg/agent/context_budget.go
+++ b/pkg/agent/context_budget.go
@ -90,13 +90,28 @@ func findSafeBoundary(history []providers.Message, targetIndex int) int {
 // including Content, ReasoningContent, ToolCalls arguments, ToolCallID
 // metadata, and Media items. Uses a heuristic of 2.5 characters per token.
 func estimateMessageTokens(msg providers.Message) int {
-	chars := utf8.RuneCountInString(msg.Content)
+	contentChars := utf8.RuneCountInString(msg.Content)
-	// ReasoningContent (extended thinking / chain-of-thought) can be
+	// SystemParts are structured system blocks used for cache-aware adapters.
-	// substantial and is stored in session history via AddFullMessage.
+	// They carry the same content as Content, but in multiple blocks.
-	if msg.ReasoningContent != "" {
+	// We estimate them as an alternative representation, not additive.
-		chars += utf8.RuneCountInString(msg.ReasoningContent)
+	systemPartsChars := 0
 	if len(msg.SystemParts) > 0 {
 		for _, part := range msg.SystemParts {
 			systemPartsChars += utf8.RuneCountInString(part.Text)
 		}
 		// Per-part overhead for JSON structure (type, text, cache_control).
 		const perPartOverhead = 20
 		systemPartsChars += len(msg.SystemParts) * perPartOverhead
 	}
 	// Use the larger of the two representations to stay conservative.
 	chars := contentChars
 	if systemPartsChars > chars {
 		chars = systemPartsChars
 	}
 	chars += utf8.RuneCountInString(msg.ReasoningContent)
 	for _, tc := range msg.ToolCalls {
 		chars += len(tc.ID) + len(tc.Type)
--- a/pkg/agent/context_budget_test.go
+++ b/pkg/agent/context_budget_test.go
@ -529,6 +529,26 @@ func TestEstimateMessageTokens_MediaItems(t *testing.T) {
 	}
 }
 func TestEstimateMessageTokens_SystemParts(t *testing.T) {
 	plain := providers.Message{Role: "system", Content: "instructions"}
 	withParts := providers.Message{
 		Role:    "system",
 		Content: "instructions",
 		SystemParts: []providers.ContentBlock{
 			{Type: "text", Text: "some more system context"},
 			{Type: "text", Text: "even more cached blocks"},
 		},
 	}
 	plainTokens := estimateMessageTokens(plain)
 	partsTokens := estimateMessageTokens(withParts)
 	if partsTokens <= plainTokens {
 		t.Errorf("system message with SystemParts (%d) should exceed plain message (%d)",
 			partsTokens, plainTokens)
 	}
 }
 // --- estimateToolDefsTokens tests ---
 func TestEstimateToolDefsTokens(t *testing.T) {
--- a/pkg/agent/context_legacy.go
+++ b/pkg/agent/context_legacy.go
@ -0,0 +1,379 @@
 package agent
 import (
 	"context"
 	"fmt"
 	"strings"
 	"sync"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/logger"
 	"github.com/sipeed/picoclaw/pkg/providers"
 )
 // legacyContextManager wraps the existing summarization/compression logic
 // as a ContextManager implementation. It is the default when no other
 // ContextManager is configured.
 type legacyContextManager struct {
 	al          *AgentLoop
 	summarizing sync.Map // dedup for async Compact (post-turn)
 }
 func (m *legacyContextManager) Assemble(_ context.Context, req *AssembleRequest) (*AssembleResponse, error) {
 	// Legacy: read history from session, return as-is.
 	// Budget enforcement happens in BuildMessages caller via
 	// isOverContextBudget + forceCompression.
 	agent := m.al.registry.GetDefaultAgent()
 	if agent == nil {
 		return &AssembleResponse{}, nil
 	}
 	history := agent.Sessions.GetHistory(req.SessionKey)
 	summary := agent.Sessions.GetSummary(req.SessionKey)
 	return &AssembleResponse{
 		History: history,
 		Summary: summary,
 	}, nil
 }
 func (m *legacyContextManager) Compact(_ context.Context, req *CompactRequest) error {
 	switch req.Reason {
 	case ContextCompressReasonProactive, ContextCompressReasonRetry:
 		// Sync emergency compression — budget exceeded.
 		if result, ok := m.forceCompression(req.SessionKey); ok {
 			m.al.emitEvent(
 				EventKindContextCompress,
 				m.al.newTurnEventScope("", req.SessionKey).meta(0, "forceCompression", "turn.context.compress"),
 				ContextCompressPayload{
 					Reason:            req.Reason,
 					DroppedMessages:   result.DroppedMessages,
 					RemainingMessages: result.RemainingMessages,
 				},
 			)
 		}
 	case ContextCompressReasonSummarize:
 		m.maybeSummarize(req.SessionKey)
 	}
 	return nil
 }
 func (m *legacyContextManager) Ingest(_ context.Context, _ *IngestRequest) error {
 	// Legacy: no-op. Messages are persisted by Sessions JSONL.
 	return nil
 }
 // maybeSummarize triggers summarization if the session history exceeds thresholds.
 // It runs asynchronously in a goroutine.
 func (m *legacyContextManager) maybeSummarize(sessionKey string) {
 	agent := m.al.registry.GetDefaultAgent()
 	if agent == nil {
 		return
 	}
 	newHistory := agent.Sessions.GetHistory(sessionKey)
 	tokenEstimate := m.estimateTokens(newHistory)
 	threshold := agent.ContextWindow * agent.SummarizeTokenPercent / 100
 	if len(newHistory) > agent.SummarizeMessageThreshold || tokenEstimate > threshold {
 		summarizeKey := agent.ID + ":" + sessionKey
 		if _, loading := m.summarizing.LoadOrStore(summarizeKey, true); !loading {
 			go func() {
 				defer m.summarizing.Delete(summarizeKey)
 				defer func() {
 					if r := recover(); r != nil {
 						logger.WarnCF("agent", "Summarization panic recovered", map[string]any{
 							"session_key": sessionKey,
 							"panic":       r,
 						})
 					}
 				}()
 				logger.Debug("Memory threshold reached. Optimizing conversation history...")
 				m.summarizeSession(agent, sessionKey)
 			}()
 		}
 	}
 }
 type compressionResult struct {
 	DroppedMessages   int
 	RemainingMessages int
 }
 // forceCompression aggressively reduces context when the limit is hit.
 // It drops the oldest ~50% of Turns (a Turn is a complete user→LLM→response
 // cycle, as defined in #1316), so tool-call sequences are never split.
 func (m *legacyContextManager) forceCompression(sessionKey string) (compressionResult, bool) {
 	agent := m.al.registry.GetDefaultAgent()
 	if agent == nil {
 		return compressionResult{}, false
 	}
 	history := agent.Sessions.GetHistory(sessionKey)
 	if len(history) <= 2 {
 		return compressionResult{}, false
 	}
 	turns := parseTurnBoundaries(history)
 	var mid int
 	if len(turns) >= 2 {
 		mid = turns[len(turns)/2]
 	} else {
 		mid = findSafeBoundary(history, len(history)/2)
 	}
 	var keptHistory []providers.Message
 	if mid <= 0 {
 		for i := len(history) - 1; i >= 0; i-- {
 			if history[i].Role == "user" {
 				keptHistory = []providers.Message{history[i]}
 				break
 			}
 		}
 	} else {
 		keptHistory = history[mid:]
 	}
 	droppedCount := len(history) - len(keptHistory)
 	existingSummary := agent.Sessions.GetSummary(sessionKey)
 	compressionNote := fmt.Sprintf(
 		"[Emergency compression dropped %d oldest messages due to context limit]",
 		droppedCount,
 	)
 	if existingSummary != "" {
 		compressionNote = existingSummary + "\n\n" + compressionNote
 	}
 	agent.Sessions.SetSummary(sessionKey, compressionNote)
 	agent.Sessions.SetHistory(sessionKey, keptHistory)
 	agent.Sessions.Save(sessionKey)
 	logger.WarnCF("agent", "Forced compression executed", map[string]any{
 		"session_key":  sessionKey,
 		"dropped_msgs": droppedCount,
 		"new_count":    len(keptHistory),
 	})
 	return compressionResult{
 		DroppedMessages:   droppedCount,
 		RemainingMessages: len(keptHistory),
 	}, true
 }
 func (m *legacyContextManager) summarizeSession(agent *AgentInstance, sessionKey string) {
 	ctx, cancel := context.WithTimeout(context.Background(), 120*time.Second)
 	defer cancel()
 	history := agent.Sessions.GetHistory(sessionKey)
 	summary := agent.Sessions.GetSummary(sessionKey)
 	if len(history) <= 4 {
 		return
 	}
 	safeCut := findSafeBoundary(history, len(history)-4)
 	if safeCut <= 0 {
 		return
 	}
 	keepCount := len(history) - safeCut
 	toSummarize := history[:safeCut]
 	maxMessageTokens := agent.ContextWindow / 2
 	validMessages := make([]providers.Message, 0)
 	omitted := false
 	for _, msg := range toSummarize {
 		if msg.Role != "user" && msg.Role != "assistant" {
 			continue
 		}
 		msgTokens := len(msg.Content) / 2
 		if msgTokens > maxMessageTokens {
 			omitted = true
 			continue
 		}
 		validMessages = append(validMessages, msg)
 	}
 	if len(validMessages) == 0 {
 		return
 	}
 	const (
 		maxSummarizationMessages = 10
 		llmMaxRetries            = 3
 	)
 	var finalSummary string
 	if len(validMessages) > maxSummarizationMessages {
 		mid := len(validMessages) / 2
 		mid = m.findNearestUserMessage(validMessages, mid)
 		part1 := validMessages[:mid]
 		part2 := validMessages[mid:]
 		s1, _ := m.summarizeBatch(ctx, agent, part1, "")
 		s2, _ := m.summarizeBatch(ctx, agent, part2, "")
 		mergePrompt := fmt.Sprintf(
 			"Merge these two conversation summaries into one cohesive summary:\n\n1: %s\n\n2: %s",
 			s1, s2,
 		)
 		resp, err := m.retryLLMCall(ctx, agent, mergePrompt, llmMaxRetries)
 		if err == nil && resp.Content != "" {
 			finalSummary = resp.Content
 		} else {
 			finalSummary = s1 + " " + s2
 		}
 	} else {
 		finalSummary, _ = m.summarizeBatch(ctx, agent, validMessages, summary)
 	}
 	if omitted && finalSummary != "" {
 		finalSummary += "\n[Note: Some oversized messages were omitted from this summary for efficiency.]"
 	}
 	if finalSummary != "" {
 		agent.Sessions.SetSummary(sessionKey, finalSummary)
 		agent.Sessions.TruncateHistory(sessionKey, keepCount)
 		agent.Sessions.Save(sessionKey)
 		m.al.emitEvent(
 			EventKindSessionSummarize,
 			m.al.newTurnEventScope(agent.ID, sessionKey).meta(0, "summarizeSession", "turn.session.summarize"),
 			SessionSummarizePayload{
 				SummarizedMessages: len(validMessages),
 				KeptMessages:       keepCount,
 				SummaryLen:         len(finalSummary),
 				OmittedOversized:   omitted,
 			},
 		)
 	}
 }
 func (m *legacyContextManager) findNearestUserMessage(messages []providers.Message, mid int) int {
 	originalMid := mid
 	for mid > 0 && messages[mid].Role != "user" {
 		mid--
 	}
 	if messages[mid].Role == "user" {
 		return mid
 	}
 	mid = originalMid
 	for mid < len(messages) && messages[mid].Role != "user" {
 		mid++
 	}
 	if mid < len(messages) {
 		return mid
 	}
 	return originalMid
 }
 func (m *legacyContextManager) retryLLMCall(
 	ctx context.Context,
 	agent *AgentInstance,
 	prompt string,
 	maxRetries int,
 ) (*providers.LLMResponse, error) {
 	const llmTemperature = 0.3
 	var resp *providers.LLMResponse
 	var err error
 	for attempt := 0; attempt < maxRetries; attempt++ {
 		m.al.activeRequests.Add(1)
 		resp, err = func() (*providers.LLMResponse, error) {
 			defer m.al.activeRequests.Done()
 			return agent.Provider.Chat(
 				ctx,
 				[]providers.Message{{Role: "user", Content: prompt}},
 				nil,
 				agent.Model,
 				map[string]any{
 					"max_tokens":       agent.MaxTokens,
 					"temperature":      llmTemperature,
 					"prompt_cache_key": agent.ID,
 				},
 			)
 		}()
 		if err == nil && resp != nil && resp.Content != "" {
 			return resp, nil
 		}
 		if attempt < maxRetries-1 {
 			time.Sleep(time.Duration(attempt+1) * 100 * time.Millisecond)
 		}
 	}
 	return resp, err
 }
 func (m *legacyContextManager) summarizeBatch(
 	ctx context.Context,
 	agent *AgentInstance,
 	batch []providers.Message,
 	existingSummary string,
 ) (string, error) {
 	const (
 		llmMaxRetries             = 3
 		fallbackMinContentLength  = 200
 		fallbackMaxContentPercent = 10
 	)
 	var sb strings.Builder
 	sb.WriteString("Provide a concise summary of this conversation segment, preserving core context and key points.\n")
 	if existingSummary != "" {
 		sb.WriteString("Existing context: ")
 		sb.WriteString(existingSummary)
 		sb.WriteString("\n")
 	}
 	sb.WriteString("\nCONVERSATION:\n")
 	for _, msg := range batch {
 		fmt.Fprintf(&sb, "%s: %s\n", msg.Role, msg.Content)
 	}
 	prompt := sb.String()
 	response, err := m.retryLLMCall(ctx, agent, prompt, llmMaxRetries)
 	if err == nil && response.Content != "" {
 		return strings.TrimSpace(response.Content), nil
 	}
 	var fallback strings.Builder
 	fallback.WriteString("Conversation summary: ")
 	for i, msg := range batch {
 		if i > 0 {
 			fallback.WriteString(" | ")
 		}
 		content := strings.TrimSpace(msg.Content)
 		runes := []rune(content)
 		if len(runes) == 0 {
 			fallback.WriteString(fmt.Sprintf("%s: ", msg.Role))
 			continue
 		}
 		keepLength := len(runes) * fallbackMaxContentPercent / 100
 		if keepLength < fallbackMinContentLength {
 			keepLength = fallbackMinContentLength
 		}
 		if keepLength > len(runes) {
 			keepLength = len(runes)
 		}
 		content = string(runes[:keepLength])
 		if keepLength < len(runes) {
 			content += "..."
 		}
 		fallback.WriteString(fmt.Sprintf("%s: %s", msg.Role, content))
 	}
 	return fallback.String(), nil
 }
 func (m *legacyContextManager) estimateTokens(messages []providers.Message) int {
 	total := 0
 	for _, msg := range messages {
 		total += estimateMessageTokens(msg)
 	}
 	return total
 }
--- a/pkg/agent/context_manager.go
+++ b/pkg/agent/context_manager.go
@ -0,0 +1,89 @@
 package agent
 import (
 	"context"
 	"encoding/json"
 	"fmt"
 	"sync"
 	"github.com/sipeed/picoclaw/pkg/providers"
 )
 // ContextManager manages conversation context via a pluggable strategy.
 // Exactly ONE ContextManager is active per AgentLoop, selected by config.
 // The default ("legacy") preserves current summarization behavior.
 type ContextManager interface {
 	// Assemble builds budget-aware context from the ContextManager's own storage.
 	// Called before BuildMessages. Returns assembled messages ready for LLM.
 	Assemble(ctx context.Context, req *AssembleRequest) (*AssembleResponse, error)
 	// Compact compresses conversation history.
 	// Called after turn completes (may be async internally) and on context overflow (sync).
 	Compact(ctx context.Context, req *CompactRequest) error
 	// Ingest records a message into the ContextManager's own storage.
 	// Called after each message is persisted to session JSONL.
 	Ingest(ctx context.Context, req *IngestRequest) error
 }
 // AssembleRequest is the input to Assemble.
 type AssembleRequest struct {
 	SessionKey string // session identifier
 	Budget     int    // context window in tokens
 	MaxTokens  int    // max response tokens
 }
 // AssembleResponse is the output of Assemble.
 type AssembleResponse struct {
 	History []providers.Message // assembled conversation history for BuildMessages
 	Summary string              // conversation summary embedded into system prompt by BuildMessages
 }
 // CompactRequest is the input to Compact.
 type CompactRequest struct {
 	SessionKey string                // session identifier
 	Reason     ContextCompressReason // proactive_budget | llm_retry | summarize
 }
 // IngestRequest is the input to Ingest.
 type IngestRequest struct {
 	SessionKey string            // session identifier
 	Message    providers.Message // the message just persisted
 }
 // ContextManagerFactory constructs a ContextManager from config.
 // al provides access to the AgentLoop's runtime resources (provider, model, workspace, etc.)
 // cfg is the raw JSON configuration from config.json (may be nil).
 type ContextManagerFactory func(cfg json.RawMessage, al *AgentLoop) (ContextManager, error)
 var (
 	cmRegistryMu sync.RWMutex
 	cmRegistry   = map[string]ContextManagerFactory{}
 )
 // RegisterContextManager registers a named ContextManager factory.
 func RegisterContextManager(name string, factory ContextManagerFactory) error {
 	if name == "" {
 		return fmt.Errorf("context manager name is required")
 	}
 	if factory == nil {
 		return fmt.Errorf("context manager %q factory is nil", name)
 	}
 	cmRegistryMu.Lock()
 	defer cmRegistryMu.Unlock()
 	if _, exists := cmRegistry[name]; exists {
 		return fmt.Errorf("context manager %q is already registered", name)
 	}
 	cmRegistry[name] = factory
 	return nil
 }
 func lookupContextManager(name string) (ContextManagerFactory, bool) {
 	cmRegistryMu.RLock()
 	defer cmRegistryMu.RUnlock()
 	f, ok := cmRegistry[name]
 	return f, ok
 }
--- a/pkg/agent/context_manager_test.go
+++ b/pkg/agent/context_manager_test.go
@ -0,0 +1,764 @@
 package agent
 import (
 	"context"
 	"encoding/json"
 	"os"
 	"strings"
 	"sync"
 	"sync/atomic"
 	"testing"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/providers"
 )
 // ---------------------------------------------------------------------------
 // Factory registry tests
 // ---------------------------------------------------------------------------
 func TestRegisterContextManager_Success(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	factory := func(cfg json.RawMessage, al *AgentLoop) (ContextManager, error) {
 		return &noopContextManager{}, nil
 	}
 	if err := RegisterContextManager("test_cm", factory); err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	f, ok := lookupContextManager("test_cm")
 	if !ok {
 		t.Fatal("expected factory to be registered")
 	}
 	if f == nil {
 		t.Fatal("expected non-nil factory")
 	}
 }
 func TestRegisterContextManager_EmptyName(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	err := RegisterContextManager("", func(cfg json.RawMessage, al *AgentLoop) (ContextManager, error) {
 		return &noopContextManager{}, nil
 	})
 	if err == nil {
 		t.Fatal("expected error for empty name")
 	}
 	if !strings.Contains(err.Error(), "name is required") {
 		t.Fatalf("unexpected error: %v", err)
 	}
 }
 func TestRegisterContextManager_NilFactory(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	err := RegisterContextManager("nil_factory", nil)
 	if err == nil {
 		t.Fatal("expected error for nil factory")
 	}
 	if !strings.Contains(err.Error(), "factory is nil") {
 		t.Fatalf("unexpected error: %v", err)
 	}
 }
 func TestRegisterContextManager_Duplicate(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	factory := func(cfg json.RawMessage, al *AgentLoop) (ContextManager, error) {
 		return &noopContextManager{}, nil
 	}
 	if err := RegisterContextManager("dup_cm", factory); err != nil {
 		t.Fatalf("first registration failed: %v", err)
 	}
 	err := RegisterContextManager("dup_cm", factory)
 	if err == nil {
 		t.Fatal("expected error for duplicate registration")
 	}
 	if !strings.Contains(err.Error(), "already registered") {
 		t.Fatalf("unexpected error: %v", err)
 	}
 }
 func TestLookupContextManager_Unknown(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	_, ok := lookupContextManager("nonexistent")
 	if ok {
 		t.Fatal("expected lookup to fail for unknown name")
 	}
 }
 // ---------------------------------------------------------------------------
 // resolveContextManager tests
 // ---------------------------------------------------------------------------
 func TestResolveContextManager_Default(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	cfg := &config.Config{
 		Agents: config.AgentsConfig{
 			Defaults: config.AgentDefaults{
 				Workspace:         t.TempDir(),
 				ModelName:         "test-model",
 				MaxTokens:         4096,
 				MaxToolIterations: 10,
 				ContextManager:    "", // default → legacy
 			},
 		},
 	}
 	al := newCMTestAgentLoop(cfg)
 	cm := al.contextManager
 	if cm == nil {
 		t.Fatal("expected non-nil context manager")
 	}
 	if _, ok := cm.(*legacyContextManager); !ok {
 		t.Fatalf("expected *legacyContextManager, got %T", cm)
 	}
 }
 func TestResolveContextManager_ExplicitLegacy(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	cfg := &config.Config{
 		Agents: config.AgentsConfig{
 			Defaults: config.AgentDefaults{
 				Workspace:         t.TempDir(),
 				ModelName:         "test-model",
 				MaxTokens:         4096,
 				MaxToolIterations: 10,
 				ContextManager:    "legacy",
 			},
 		},
 	}
 	al := newCMTestAgentLoop(cfg)
 	if _, ok := al.contextManager.(*legacyContextManager); !ok {
 		t.Fatalf("expected *legacyContextManager, got %T", al.contextManager)
 	}
 }
 func TestResolveContextManager_UnknownFallsBackToLegacy(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	cfg := &config.Config{
 		Agents: config.AgentsConfig{
 			Defaults: config.AgentDefaults{
 				Workspace:         t.TempDir(),
 				ModelName:         "test-model",
 				MaxTokens:         4096,
 				MaxToolIterations: 10,
 				ContextManager:    "unknown_cm",
 			},
 		},
 	}
 	al := newCMTestAgentLoop(cfg)
 	if _, ok := al.contextManager.(*legacyContextManager); !ok {
 		t.Fatalf("expected fallback to *legacyContextManager, got %T", al.contextManager)
 	}
 }
 func TestResolveContextManager_RegisteredFactory(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	factory := func(cfg json.RawMessage, al *AgentLoop) (ContextManager, error) {
 		return &noopContextManager{}, nil
 	}
 	if err := RegisterContextManager("custom_cm", factory); err != nil {
 		t.Fatalf("register failed: %v", err)
 	}
 	cfg := &config.Config{
 		Agents: config.AgentsConfig{
 			Defaults: config.AgentDefaults{
 				Workspace:         t.TempDir(),
 				ModelName:         "test-model",
 				MaxTokens:         4096,
 				MaxToolIterations: 10,
 				ContextManager:    "custom_cm",
 			},
 		},
 	}
 	al := newCMTestAgentLoop(cfg)
 	if _, ok := al.contextManager.(*noopContextManager); !ok {
 		t.Fatalf("expected *noopContextManager, got %T", al.contextManager)
 	}
 }
 func TestResolveContextManager_FactoryError(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	factory := func(cfg json.RawMessage, al *AgentLoop) (ContextManager, error) {
 		return nil, os.ErrPermission
 	}
 	if err := RegisterContextManager("broken_cm", factory); err != nil {
 		t.Fatalf("register failed: %v", err)
 	}
 	cfg := &config.Config{
 		Agents: config.AgentsConfig{
 			Defaults: config.AgentDefaults{
 				Workspace:         t.TempDir(),
 				ModelName:         "test-model",
 				MaxTokens:         4096,
 				MaxToolIterations: 10,
 				ContextManager:    "broken_cm",
 			},
 		},
 	}
 	al := newCMTestAgentLoop(cfg)
 	// Should fall back to legacy when factory returns error
 	if _, ok := al.contextManager.(*legacyContextManager); !ok {
 		t.Fatalf("expected fallback to *legacyContextManager on factory error, got %T", al.contextManager)
 	}
 }
 // ---------------------------------------------------------------------------
 // Legacy Assemble tests
 // ---------------------------------------------------------------------------
 func TestLegacyAssemble_Passthrough(t *testing.T) {
 	cfg := testConfig(t)
 	al := newCMTestAgentLoop(cfg)
 	agent := al.registry.GetDefaultAgent()
 	if agent == nil {
 		t.Fatal("expected default agent")
 	}
 	history := []providers.Message{
 		{Role: "user", Content: "hello"},
 		{Role: "assistant", Content: "hi there"},
 	}
 	agent.Sessions.SetHistory("test-session", history)
 	resp, err := al.contextManager.Assemble(context.Background(), &AssembleRequest{
 		SessionKey: "test-session",
 		Budget:     8000,
 		MaxTokens:  4096,
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	if len(resp.History) != len(history) {
 		t.Fatalf("expected %d messages, got %d", len(history), len(resp.History))
 	}
 	for i, msg := range resp.History {
 		if msg.Content != history[i].Content || msg.Role != history[i].Role {
 			t.Fatalf("message %d mismatch: want %+v, got %+v", i, history[i], msg)
 		}
 	}
 }
 func TestLegacyAssemble_EmptyHistory(t *testing.T) {
 	cfg := testConfig(t)
 	al := newCMTestAgentLoop(cfg)
 	resp, err := al.contextManager.Assemble(context.Background(), &AssembleRequest{
 		SessionKey: "test-session",
 		Budget:     8000,
 		MaxTokens:  4096,
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	if len(resp.History) != 0 {
 		t.Fatalf("expected empty messages, got %d", len(resp.History))
 	}
 }
 // ---------------------------------------------------------------------------
 // Legacy Compact overflow tests
 // ---------------------------------------------------------------------------
 func TestLegacyCompact_Overflow(t *testing.T) {
 	cfg := testConfig(t)
 	al := newCMTestAgentLoop(cfg)
 	defaultAgent := al.registry.GetDefaultAgent()
 	if defaultAgent == nil {
 		t.Fatal("expected default agent")
 	}
 	history := []providers.Message{
 		{Role: "user", Content: "msg 1"},
 		{Role: "assistant", Content: "resp 1"},
 		{Role: "user", Content: "msg 2"},
 		{Role: "assistant", Content: "resp 2"},
 		{Role: "user", Content: "msg 3"},
 	}
 	defaultAgent.Sessions.SetHistory("session-overflow", history)
 	sub := al.SubscribeEvents(16)
 	defer al.UnsubscribeEvents(sub.ID)
 	err := al.contextManager.Compact(context.Background(), &CompactRequest{
 		SessionKey: "session-overflow",
 		Reason:     ContextCompressReasonRetry,
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	// After overflow compression, history should be shorter
 	newHistory := defaultAgent.Sessions.GetHistory("session-overflow")
 	if len(newHistory) >= len(history) {
 		t.Fatalf("expected compressed history, got %d messages (was %d)", len(newHistory), len(history))
 	}
 	// Summary should contain compression note
 	summary := defaultAgent.Sessions.GetSummary("session-overflow")
 	if !strings.Contains(summary, "Emergency compression") {
 		t.Fatalf("expected compression note in summary, got %q", summary)
 	}
 	// Event should carry the proactive reason
 	events := collectEventStream(sub.C)
 	compressEvt, ok := findEvent(events, EventKindContextCompress)
 	if !ok {
 		t.Fatal("expected context compress event")
 	}
 	payload, ok := compressEvt.Payload.(ContextCompressPayload)
 	if !ok {
 		t.Fatalf("expected ContextCompressPayload, got %T", compressEvt.Payload)
 	}
 	if payload.Reason != ContextCompressReasonRetry {
 		t.Fatalf("expected retry reason, got %q", payload.Reason)
 	}
 }
 func TestLegacyCompact_Overflow_ProactiveReason(t *testing.T) {
 	cfg := testConfig(t)
 	al := newCMTestAgentLoop(cfg)
 	defaultAgent := al.registry.GetDefaultAgent()
 	if defaultAgent == nil {
 		t.Fatal("expected default agent")
 	}
 	history := []providers.Message{
 		{Role: "user", Content: "msg 1"},
 		{Role: "assistant", Content: "resp 1"},
 		{Role: "user", Content: "msg 2"},
 		{Role: "assistant", Content: "resp 2"},
 		{Role: "user", Content: "msg 3"},
 	}
 	defaultAgent.Sessions.SetHistory("session-proactive", history)
 	sub := al.SubscribeEvents(16)
 	defer al.UnsubscribeEvents(sub.ID)
 	err := al.contextManager.Compact(context.Background(), &CompactRequest{
 		SessionKey: "session-proactive",
 		Reason:     ContextCompressReasonProactive,
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	events := collectEventStream(sub.C)
 	compressEvt, ok := findEvent(events, EventKindContextCompress)
 	if !ok {
 		t.Fatal("expected context compress event")
 	}
 	payload, ok := compressEvt.Payload.(ContextCompressPayload)
 	if !ok {
 		t.Fatalf("expected ContextCompressPayload, got %T", compressEvt.Payload)
 	}
 	if payload.Reason != ContextCompressReasonProactive {
 		t.Fatalf("expected proactive reason, got %q", payload.Reason)
 	}
 }
 func TestLegacyCompact_Overflow_TooShortToCompress(t *testing.T) {
 	cfg := testConfig(t)
 	al := newCMTestAgentLoop(cfg)
 	defaultAgent := al.registry.GetDefaultAgent()
 	if defaultAgent == nil {
 		t.Fatal("expected default agent")
 	}
 	history := []providers.Message{
 		{Role: "user", Content: "only one"},
 	}
 	defaultAgent.Sessions.SetHistory("session-tiny", history)
 	err := al.contextManager.Compact(context.Background(), &CompactRequest{
 		SessionKey: "session-tiny",
 		Reason:     ContextCompressReasonRetry,
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	// History should be unchanged (too short to compress)
 	newHistory := defaultAgent.Sessions.GetHistory("session-tiny")
 	if len(newHistory) != len(history) {
 		t.Fatalf("expected history unchanged, got %d messages (was %d)", len(newHistory), len(history))
 	}
 }
 // ---------------------------------------------------------------------------
 // Legacy Compact post-turn tests
 // ---------------------------------------------------------------------------
 func TestLegacyCompact_PostTurn_BelowThreshold(t *testing.T) {
 	cfg := testConfig(t)
 	al := newCMTestAgentLoop(cfg)
 	defaultAgent := al.registry.GetDefaultAgent()
 	if defaultAgent == nil {
 		t.Fatal("expected default agent")
 	}
 	// Small history, below summarization thresholds
 	history := []providers.Message{
 		{Role: "user", Content: "hi"},
 		{Role: "assistant", Content: "hello"},
 	}
 	defaultAgent.Sessions.SetHistory("session-small", history)
 	err := al.contextManager.Compact(context.Background(), &CompactRequest{
 		SessionKey: "session-small",
 		Reason:     ContextCompressReasonSummarize,
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	// History should remain unchanged
 	newHistory := defaultAgent.Sessions.GetHistory("session-small")
 	if len(newHistory) != len(history) {
 		t.Fatalf("expected unchanged history, got %d messages (was %d)", len(newHistory), len(history))
 	}
 }
 func TestLegacyCompact_PostTurn_ExceedsMessageThreshold(t *testing.T) {
 	cfg := &config.Config{
 		Agents: config.AgentsConfig{
 			Defaults: config.AgentDefaults{
 				Workspace:                 t.TempDir(),
 				ModelName:                 "test-model",
 				MaxTokens:                 4096,
 				MaxToolIterations:         10,
 				ContextWindow:             8000,
 				SummarizeMessageThreshold: 2,
 				SummarizeTokenPercent:     75,
 			},
 		},
 	}
 	msgBus := bus.NewMessageBus()
 	al := NewAgentLoop(cfg, msgBus, &simpleMockProvider{response: "summary"})
 	defaultAgent := al.registry.GetDefaultAgent()
 	if defaultAgent == nil {
 		t.Fatal("expected default agent")
 	}
 	// 6 messages > threshold of 2
 	history := []providers.Message{
 		{Role: "user", Content: "q1"},
 		{Role: "assistant", Content: "a1"},
 		{Role: "user", Content: "q2"},
 		{Role: "assistant", Content: "a2"},
 		{Role: "user", Content: "q3"},
 		{Role: "assistant", Content: "a3"},
 	}
 	defaultAgent.Sessions.SetHistory("session-threshold", history)
 	err := al.contextManager.Compact(context.Background(), &CompactRequest{
 		SessionKey: "session-threshold",
 		Reason:     ContextCompressReasonSummarize,
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	// Wait for async summarization to complete via event
 	sub := al.SubscribeEvents(16)
 	defer al.UnsubscribeEvents(sub.ID)
 	waitForEvent(t, sub.C, 5*time.Second, func(evt Event) bool {
 		return evt.Kind == EventKindSessionSummarize
 	})
 	newHistory := defaultAgent.Sessions.GetHistory("session-threshold")
 	if len(newHistory) >= len(history) {
 		t.Fatalf("expected summarization to reduce history from %d messages, got %d", len(history), len(newHistory))
 	}
 }
 // ---------------------------------------------------------------------------
 // Legacy Ingest tests
 // ---------------------------------------------------------------------------
 func TestLegacyIngest_NoOp(t *testing.T) {
 	cfg := testConfig(t)
 	al := newCMTestAgentLoop(cfg)
 	err := al.contextManager.Ingest(context.Background(), &IngestRequest{
 		SessionKey: "session-ingest",
 		Message:    providers.Message{Role: "user", Content: "test"},
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 }
 // ---------------------------------------------------------------------------
 // Mock ContextManager — verifies dispatch through AgentLoop
 // ---------------------------------------------------------------------------
 func TestAgentLoop_UsesCustomContextManager(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	mock := &trackingContextManager{}
 	factory := func(cfg json.RawMessage, al *AgentLoop) (ContextManager, error) {
 		return mock, nil
 	}
 	if err := RegisterContextManager("tracking_cm", factory); err != nil {
 		t.Fatalf("register failed: %v", err)
 	}
 	cfg := &config.Config{
 		Agents: config.AgentsConfig{
 			Defaults: config.AgentDefaults{
 				Workspace:         t.TempDir(),
 				ModelName:         "test-model",
 				MaxTokens:         4096,
 				MaxToolIterations: 10,
 				ContextManager:    "tracking_cm",
 			},
 		},
 	}
 	al := newCMTestAgentLoop(cfg)
 	// Verify the mock was installed
 	if al.contextManager != mock {
 		t.Fatalf("expected mock context manager, got %T", al.contextManager)
 	}
 	// Direct method calls
 	_, err := mock.Assemble(context.Background(), &AssembleRequest{
 		SessionKey: "s1",
 		Budget:     8000,
 		MaxTokens:  4096,
 	})
 	if err != nil {
 		t.Fatalf("Assemble error: %v", err)
 	}
 	if mock.assembleCalls.Load() != 1 {
 		t.Fatalf("expected 1 assemble call, got %d", mock.assembleCalls.Load())
 	}
 	err = mock.Compact(context.Background(), &CompactRequest{
 		SessionKey: "s1",
 		Reason:     ContextCompressReasonRetry,
 	})
 	if err != nil {
 		t.Fatalf("Compact error: %v", err)
 	}
 	if mock.compactCalls.Load() != 1 {
 		t.Fatalf("expected 1 compact call, got %d", mock.compactCalls.Load())
 	}
 	err = mock.Ingest(context.Background(), &IngestRequest{
 		SessionKey: "s1",
 		Message:    providers.Message{Role: "user", Content: "test"},
 	})
 	if err != nil {
 		t.Fatalf("Ingest error: %v", err)
 	}
 	if mock.ingestCalls.Load() != 1 {
 		t.Fatalf("expected 1 ingest call, got %d", mock.ingestCalls.Load())
 	}
 }
 func TestIngestCalledDuringTurn(t *testing.T) {
 	cleanup := resetCMRegistry()
 	defer cleanup()
 	mock := &trackingContextManager{}
 	factory := func(cfg json.RawMessage, al *AgentLoop) (ContextManager, error) {
 		return mock, nil
 	}
 	if err := RegisterContextManager("ingest_track_cm", factory); err != nil {
 		t.Fatalf("register failed: %v", err)
 	}
 	cfg := &config.Config{
 		Agents: config.AgentsConfig{
 			Defaults: config.AgentDefaults{
 				Workspace:         t.TempDir(),
 				ModelName:         "test-model",
 				MaxTokens:         4096,
 				MaxToolIterations: 10,
 				ContextManager:    "ingest_track_cm",
 			},
 		},
 	}
 	msgBus := bus.NewMessageBus()
 	al := NewAgentLoop(cfg, msgBus, &simpleMockProvider{response: "done"})
 	defaultAgent := al.registry.GetDefaultAgent()
 	if defaultAgent == nil {
 		t.Fatal("expected default agent")
 	}
 	// Run a turn — ingestMessage is called for user message and final assistant message
 	_, err := al.runAgentLoop(context.Background(), defaultAgent, processOptions{
 		SessionKey:      "session-ingest-turn",
 		Channel:         "cli",
 		ChatID:          "direct",
 		UserMessage:     "test ingest",
 		DefaultResponse: defaultResponse,
 		EnableSummary:   false,
 		SendResponse:    false,
 	})
 	if err != nil {
 		t.Fatalf("runAgentLoop failed: %v", err)
 	}
 	// Should have at least 2 ingest calls: user message + final assistant message
 	if mock.ingestCalls.Load() < 2 {
 		t.Fatalf("expected >= 2 ingest calls during turn, got %d", mock.ingestCalls.Load())
 	}
 }
 // ---------------------------------------------------------------------------
 // forceCompression edge cases (via legacy Compact)
 // ---------------------------------------------------------------------------
 func TestLegacyCompact_Overflow_SingleTurnKeepsLastUserMessage(t *testing.T) {
 	cfg := testConfig(t)
 	al := newCMTestAgentLoop(cfg)
 	defaultAgent := al.registry.GetDefaultAgent()
 	if defaultAgent == nil {
 		t.Fatal("expected default agent")
 	}
 	// History with only 2 messages — forceCompression should still handle it
 	history := []providers.Message{
 		{Role: "user", Content: "first question"},
 		{Role: "assistant", Content: "first answer"},
 	}
 	defaultAgent.Sessions.SetHistory("session-2msg", history)
 	err := al.contextManager.Compact(context.Background(), &CompactRequest{
 		SessionKey: "session-2msg",
 		Reason:     ContextCompressReasonRetry,
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	newHistory := defaultAgent.Sessions.GetHistory("session-2msg")
 	// With 2 messages, forceCompression returns false (len <= 2), so no compression
 	if len(newHistory) != len(history) {
 		t.Fatalf("expected no compression for 2-message history, got %d", len(newHistory))
 	}
 }
 // ---------------------------------------------------------------------------
 // Test helpers
 // ---------------------------------------------------------------------------
 // noopContextManager is a minimal ContextManager that does nothing.
 type noopContextManager struct{}
 func (m *noopContextManager) Assemble(_ context.Context, req *AssembleRequest) (*AssembleResponse, error) {
 	return &AssembleResponse{}, nil
 }
 func (m *noopContextManager) Compact(_ context.Context, _ *CompactRequest) error { return nil }
 func (m *noopContextManager) Ingest(_ context.Context, _ *IngestRequest) error   { return nil }
 // trackingContextManager tracks call counts for each method.
 type trackingContextManager struct {
 	assembleCalls atomic.Int64
 	compactCalls  atomic.Int64
 	ingestCalls   atomic.Int64
 	mu            sync.Mutex
 	lastAssemble  *AssembleRequest
 	lastCompact   *CompactRequest
 	lastIngest    *IngestRequest
 }
 func (m *trackingContextManager) Assemble(_ context.Context, req *AssembleRequest) (*AssembleResponse, error) {
 	m.assembleCalls.Add(1)
 	m.mu.Lock()
 	m.lastAssemble = req
 	m.mu.Unlock()
 	return &AssembleResponse{}, nil
 }
 func (m *trackingContextManager) Compact(_ context.Context, req *CompactRequest) error {
 	m.compactCalls.Add(1)
 	m.mu.Lock()
 	m.lastCompact = req
 	m.mu.Unlock()
 	return nil
 }
 func (m *trackingContextManager) Ingest(_ context.Context, req *IngestRequest) error {
 	m.ingestCalls.Add(1)
 	m.mu.Lock()
 	m.lastIngest = req
 	m.mu.Unlock()
 	return nil
 }
 // resetCMRegistry clears the global factory registry and returns a cleanup
 // function that restores the original state after the test.
 func resetCMRegistry() func() {
 	cmRegistryMu.Lock()
 	original := make(map[string]ContextManagerFactory, len(cmRegistry))
 	for k, v := range cmRegistry {
 		original[k] = v
 	}
 	cmRegistry = make(map[string]ContextManagerFactory)
 	cmRegistryMu.Unlock()
 	return func() {
 		cmRegistryMu.Lock()
 		cmRegistry = original
 		cmRegistryMu.Unlock()
 	}
 }
 func testConfig(t *testing.T) *config.Config {
 	t.Helper()
 	return &config.Config{
 		Agents: config.AgentsConfig{
 			Defaults: config.AgentDefaults{
 				Workspace:         t.TempDir(),
 				ModelName:         "test-model",
 				MaxTokens:         4096,
 				MaxToolIterations: 10,
 			},
 		},
 	}
 }
 func newCMTestAgentLoop(cfg *config.Config) *AgentLoop {
 	msgBus := bus.NewMessageBus()
 	return NewAgentLoop(cfg, msgBus, &simpleMockProvider{response: "test"})
 }
--- a/pkg/agent/eventbus_test.go
+++ b/pkg/agent/eventbus_test.go
@ -472,8 +472,9 @@ func TestAgentLoop_EmitsSessionSummarizeEvent(t *testing.T) {
 	sub := al.SubscribeEvents(16)
 	defer al.UnsubscribeEvents(sub.ID)
-	turnScope := al.newTurnEventScope(defaultAgent.ID, "session-1")
+	// Use legacyContextManager's summarizeSession via contextManager interface
-	al.summarizeSession(defaultAgent, "session-1", turnScope)
+	lcm := &legacyContextManager{al: al}
 	lcm.summarizeSession(defaultAgent, "session-1")
 	events := collectEventStream(sub.C)
 	summaryEvt, ok := findEvent(events, EventKindSessionSummarize)
--- a/pkg/agent/events.go
+++ b/pkg/agent/events.go
@ -167,6 +167,8 @@ const (
 	ContextCompressReasonProactive ContextCompressReason = "proactive_budget"
 	// ContextCompressReasonRetry indicates compression during context-error retry handling.
 	ContextCompressReasonRetry ContextCompressReason = "llm_retry"
 	// ContextCompressReasonSummarize indicates post-turn async summarization.
 	ContextCompressReasonSummarize ContextCompressReason = "summarize"
 )
 // ContextCompressPayload describes a forced history compression.
--- a/pkg/agent/loop.go
+++ b/pkg/agent/loop.go
@ -18,6 +18,8 @@ import (
 	"sync/atomic"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/audio/asr"
 	"github.com/sipeed/picoclaw/pkg/audio/tts"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/channels"
 	"github.com/sipeed/picoclaw/pkg/commands"
@ -31,7 +33,6 @@ import (
 	"github.com/sipeed/picoclaw/pkg/state"
 	"github.com/sipeed/picoclaw/pkg/tools"
 	"github.com/sipeed/picoclaw/pkg/utils"
 	"github.com/sipeed/picoclaw/pkg/voice"
 )
 type AgentLoop struct {
@ -47,11 +48,11 @@ type AgentLoop struct {
 	// Runtime state
 	running        atomic.Bool
-	summarizing    sync.Map
+	contextManager ContextManager
 	fallback       *providers.FallbackChain
 	channelManager *channels.Manager
 	mediaStore     media.MediaStore
-	transcriber    voice.Transcriber
+	transcriber    asr.Transcriber
 	cmdRegistry    *commands.Registry
 	mcp            mcpRuntime
 	hookRuntime    hookRuntime
@ -136,13 +137,13 @@ func NewAgentLoop(
 		registry:    registry,
 		state:       stateManager,
 		eventBus:    eventBus,
 		summarizing: sync.Map{},
 		fallback:    fallbackChain,
 		cmdRegistry: commands.NewRegistry(commands.BuiltinDefinitions()),
 		steering:    newSteeringQueue(parseSteeringMode(cfg.Agents.Defaults.SteeringMode)),
 	}
 	al.hooks = NewHookManager(eventBus)
 	configureHookManagerFromConfig(al.hooks, cfg)
 	al.contextManager = al.resolveContextManager()
 	// Register shared tools to all agents (now that al is created)
 	registerSharedTools(al, cfg, msgBus, registry, provider)
@ -159,6 +160,13 @@ func registerSharedTools(
 	provider providers.LLMProvider,
 ) {
 	allowReadPaths := buildAllowReadPatterns(cfg)
 	var ttsProvider tts.TTSProvider
 	if cfg.Tools.IsToolEnabled("send_tts") {
 		ttsProvider = tts.DetectTTS(cfg)
 		if ttsProvider == nil {
 			logger.WarnCF("voice-tts", "send_tts enabled but no TTS provider configured", nil)
 		}
 	}
 	for _, agentID := range registry.ListAgentIDs() {
 		agent, ok := registry.GetAgent(agentID)
@ -269,6 +277,21 @@ func registerSharedTools(
 			agent.Tools.Register(sendFileTool)
 		}
 		if ttsProvider != nil {
 			agent.Tools.Register(tools.NewSendTTSTool(ttsProvider, nil))
 		}
 		if cfg.Tools.IsToolEnabled("load_image") {
 			loadImageTool := tools.NewLoadImageTool(
 				agent.Workspace,
 				cfg.Agents.Defaults.RestrictToWorkspace,
 				cfg.Agents.Defaults.GetMaxMediaSize(),
 				nil,
 				allowReadPaths,
 			)
 			agent.Tools.Register(loadImageTool)
 		}
 		// Skill discovery and installation tools
 		skills_enabled := cfg.Tools.IsToolEnabled("skills")
 		find_skills_enable := cfg.Tools.IsToolEnabled("find_skills")
@ -311,6 +334,14 @@ func registerSharedTools(
 			subagentManager := tools.NewSubagentManager(provider, agent.Model, agent.Workspace)
 			subagentManager.SetLLMOptions(agent.MaxTokens, agent.Temperature)
 			// Inject a media resolver so the legacy RunToolLoop fallback path can
 			// resolve media:// refs in the same way the main AgentLoop does.
 			// This keeps subagent vision support working even when the optimized
 			// sub-turn spawner path is unavailable.
 			subagentManager.SetMediaResolver(func(msgs []providers.Message) []providers.Message {
 				return resolveMediaRefs(msgs, al.mediaStore, cfg.Agents.Defaults.GetMaxMediaSize())
 			})
 			// Set the spawner that links into AgentLoop's turnState
 			subagentManager.SetSpawner(func(
 				ctx context.Context,
@ -960,6 +991,7 @@ func (al *AgentLoop) ReloadProviderAndConfig(
 	go func() {
 		defer func() {
 			if r := recover(); r != nil {
 				logger.RecoverPanicNoExit(r)
 				panicErr = fmt.Errorf("panic during registry creation: %v", r)
 				logger.ErrorCF("agent", "Panic during registry creation",
 					map[string]any{"panic": r})
@ -1059,10 +1091,15 @@ func (al *AgentLoop) SetMediaStore(s media.MediaStore) {
 			agent.Tools.SetMediaStore(s)
 		}
 	}
 	registry.ForEachTool("send_tts", func(t tools.Tool) {
 		if st, ok := t.(*tools.SendTTSTool); ok {
 			st.SetMediaStore(s)
 		}
 	})
 }
 // SetTranscriber injects a voice transcriber for agent-level audio transcription.
-func (al *AgentLoop) SetTranscriber(t voice.Transcriber) {
+func (al *AgentLoop) SetTranscriber(t asr.Transcriber) {
 	al.transcriber = t
 }
@ -1083,19 +1120,23 @@ func (al *AgentLoop) transcribeAudioInMessage(ctx context.Context, msg bus.Inbou
 	// Transcribe each audio media ref in order.
 	var transcriptions []string
 	var keptMedia []string
 	for _, ref := range msg.Media {
 		path, meta, err := al.mediaStore.ResolveWithMeta(ref)
 		if err != nil {
 			logger.WarnCF("voice", "Failed to resolve media ref", map[string]any{"ref": ref, "error": err})
 			keptMedia = append(keptMedia, ref)
 			continue
 		}
 		if !utils.IsAudioFile(meta.Filename, meta.ContentType) {
 			keptMedia = append(keptMedia, ref)
 			continue
 		}
 		result, err := al.transcriber.Transcribe(ctx, path)
 		if err != nil {
 			logger.WarnCF("voice", "Transcription failed", map[string]any{"ref": ref, "error": err})
 			transcriptions = append(transcriptions, "")
 			keptMedia = append(keptMedia, ref)
 			continue
 		}
 		transcriptions = append(transcriptions, result.Text)
@ -1115,15 +1156,21 @@ func (al *AgentLoop) transcribeAudioInMessage(ctx context.Context, msg bus.Inbou
 		}
 		text := transcriptions[idx]
 		idx++
 		if text == "" {
 			return match
 		}
 		return "[voice: " + text + "]"
 	})
 	// Append any remaining transcriptions not matched by an annotation.
 	for ; idx < len(transcriptions); idx++ {
 		if transcriptions[idx] != "" {
 			newContent += "\n[voice: " + transcriptions[idx] + "]"
 		}
 	}
 	msg.Content = newContent
 	msg.Media = keptMedia
 	return msg, true
 }
@ -1643,8 +1690,15 @@ func (al *AgentLoop) runTurn(ctx context.Context, ts *turnState) (turnResult, er
 	var history []providers.Message
 	var summary string
 	if !ts.opts.NoHistory {
-		history = ts.agent.Sessions.GetHistory(ts.sessionKey)
+		// ContextManager assembles budget-aware history and summary.
-		summary = ts.agent.Sessions.GetSummary(ts.sessionKey)
+		if resp, err := al.contextManager.Assemble(turnCtx, &AssembleRequest{
 			SessionKey: ts.sessionKey,
 			Budget:     ts.agent.ContextWindow,
 			MaxTokens:  ts.agent.MaxTokens,
 		}); err == nil && resp != nil {
 			history = resp.History
 			summary = resp.Summary
 		}
 	}
 	ts.captureRestorePoint(history, summary)
@ -1669,22 +1723,27 @@ func (al *AgentLoop) runTurn(ctx context.Context, ts *turnState) (turnResult, er
 		if isOverContextBudget(ts.agent.ContextWindow, messages, toolDefs, ts.agent.MaxTokens) {
 			logger.WarnCF("agent", "Proactive compression: context budget exceeded before LLM call",
 				map[string]any{"session_key": ts.sessionKey})
-			if compression, ok := al.forceCompression(ts.agent, ts.sessionKey); ok {
+			if err := al.contextManager.Compact(turnCtx, &CompactRequest{
-				al.emitEvent(
+				SessionKey: ts.sessionKey,
 					EventKindContextCompress,
 					ts.eventMeta("runTurn", "turn.context.compress"),
 					ContextCompressPayload{
 				Reason:     ContextCompressReasonProactive,
-						DroppedMessages:   compression.DroppedMessages,
+			}); err != nil {
-						RemainingMessages: compression.RemainingMessages,
+				logger.WarnCF("agent", "Proactive compact failed", map[string]any{
-					},
+					"session_key": ts.sessionKey,
-				)
+					"error":       err.Error(),
-				ts.refreshRestorePointFromSession(ts.agent)
+				})
 			}
 			ts.refreshRestorePointFromSession(ts.agent)
 			// Re-assemble from CM after compact.
 			if resp, err := al.contextManager.Assemble(turnCtx, &AssembleRequest{
 				SessionKey: ts.sessionKey,
 				Budget:     ts.agent.ContextWindow,
 				MaxTokens:  ts.agent.MaxTokens,
 			}); err == nil && resp != nil {
 				history = resp.History
 				summary = resp.Summary
 			}
 			newHistory := ts.agent.Sessions.GetHistory(ts.sessionKey)
 			newSummary := ts.agent.Sessions.GetSummary(ts.sessionKey)
 			messages = ts.agent.ContextBuilder.BuildMessages(
-				newHistory, newSummary, ts.userMessage,
+				history, summary, ts.userMessage,
 				ts.media, ts.channel, ts.chatID,
 				ts.opts.SenderID, ts.opts.SenderDisplayName,
 				activeSkillNames(ts.agent, ts.opts)...,
@ -1706,6 +1765,7 @@ func (al *AgentLoop) runTurn(ctx context.Context, ts *turnState) (turnResult, er
 			ts.agent.Sessions.AddMessage(ts.sessionKey, rootMsg.Role, rootMsg.Content)
 		}
 		ts.recordPersistedMessage(rootMsg)
 		ts.ingestMessage(turnCtx, al, rootMsg)
 	}
 	activeCandidates, activeModel, usedLight := al.selectCandidates(ts.agent, ts.userMessage, messages)
@ -1834,6 +1894,14 @@ turnLoop:
 			providerToolDefs = filtered
 		}
 		// Resolve media:// refs produced by tool results (e.g. load_image).
 		// Skipped on iteration 1 because inbound user media is already resolved
 		// before entering the loop; only subsequent iterations can contain new
 		// tool-generated media refs that need base64 encoding.
 		if iteration > 1 {
 			messages = resolveMediaRefs(messages, al.mediaStore, maxMediaSize)
 		}
 		callMessages := messages
 		if gracefulTerminal {
 			callMessages = append(append([]providers.Message(nil), messages...), ts.interruptHintMessage())
@ -2041,23 +2109,27 @@ turnLoop:
 					})
 				}
-				if compression, ok := al.forceCompression(ts.agent, ts.sessionKey); ok {
+				if compactErr := al.contextManager.Compact(turnCtx, &CompactRequest{
-					al.emitEvent(
+					SessionKey: ts.sessionKey,
 						EventKindContextCompress,
 						ts.eventMeta("runTurn", "turn.context.compress"),
 						ContextCompressPayload{
 					Reason:     ContextCompressReasonRetry,
-							DroppedMessages:   compression.DroppedMessages,
+				}); compactErr != nil {
-							RemainingMessages: compression.RemainingMessages,
+					logger.WarnCF("agent", "Context overflow compact failed", map[string]any{
-						},
+						"session_key": ts.sessionKey,
-					)
+						"error":       compactErr.Error(),
-					ts.refreshRestorePointFromSession(ts.agent)
+					})
 				}
 				ts.refreshRestorePointFromSession(ts.agent)
 				// Re-assemble from CM after compact.
 				if asmResp, asmErr := al.contextManager.Assemble(turnCtx, &AssembleRequest{
 					SessionKey: ts.sessionKey,
 					Budget:     ts.agent.ContextWindow,
 					MaxTokens:  ts.agent.MaxTokens,
 				}); asmErr == nil && asmResp != nil {
 					history = asmResp.History
 					summary = asmResp.Summary
 				}
 				newHistory := ts.agent.Sessions.GetHistory(ts.sessionKey)
 				newSummary := ts.agent.Sessions.GetSummary(ts.sessionKey)
 				messages = ts.agent.ContextBuilder.BuildMessages(
-					newHistory, newSummary, "",
+					history, summary, "",
 					nil, ts.channel, ts.chatID, ts.opts.SenderID, ts.opts.SenderDisplayName,
 					activeSkillNames(ts.agent, ts.opts)...,
 				)
@ -2230,6 +2302,7 @@ turnLoop:
 		if !ts.opts.NoHistory {
 			ts.agent.Sessions.AddFullMessage(ts.sessionKey, assistantMsg)
 			ts.recordPersistedMessage(assistantMsg)
 			ts.ingestMessage(turnCtx, al, assistantMsg)
 		}
 		// When the LLM returns both text content and tool calls in the
@ -2482,6 +2555,28 @@ turnLoop:
 			if toolResult == nil {
 				toolResult = tools.ErrorResult("hook returned nil tool result")
 			}
 			// Send ForUser if not silent and has content.
 			// For ResponseHandled tools, send regardless of SendResponse setting,
 			// since they've already handled the response (e.g., send_tts, send_file).
 			shouldSendForUser := !toolResult.Silent && toolResult.ForUser != "" &&
 				(ts.opts.SendResponse || toolResult.ResponseHandled)
 			if shouldSendForUser {
 				al.bus.PublishOutbound(ctx, bus.OutboundMessage{
 					Channel: ts.channel,
 					ChatID:  ts.chatID,
 					Content: toolResult.ForUser,
 					Metadata: map[string]string{
 						"is_tool_call": "true",
 					},
 				})
 				logger.DebugCF("agent", "Sent tool result to user",
 					map[string]any{
 						"tool":        toolName,
 						"content_len": len(toolResult.ForUser),
 					})
 			}
 			if len(toolResult.Media) > 0 && toolResult.ResponseHandled {
 				parts := make([]bus.MediaPart, 0, len(toolResult.Media))
 				for _, ref := range toolResult.Media {
@ -2520,6 +2615,13 @@ turnLoop:
 			}
 			if len(toolResult.Media) > 0 && !toolResult.ResponseHandled {
 				// For tools like load_image that produce media refs without sending them
 				// to the user channel (ResponseHandled == false), both Media and ArtifactTags
 				// coexist on the result:
 				//   - Media: carries media:// refs that resolveMediaRefs will base64-encode
 				//     into image_url parts in the next LLM iteration (enabling vision).
 				//   - ArtifactTags: exposes the local file path as a structured [file:…] tag
 				//     in the tool result text, so the LLM knows an artifact was produced.
 				toolResult.ArtifactTags = buildArtifactTags(al.mediaStore, toolResult.Media)
 			}
@ -2527,19 +2629,6 @@ turnLoop:
 				allResponsesHandled = false
 			}
 			if !toolResult.Silent && toolResult.ForUser != "" && ts.opts.SendResponse {
 				al.bus.PublishOutbound(ctx, bus.OutboundMessage{
 					Channel: ts.channel,
 					ChatID:  ts.chatID,
 					Content: toolResult.ForUser,
 				})
 				logger.DebugCF("agent", "Sent tool result to user",
 					map[string]any{
 						"tool":        toolName,
 						"content_len": len(toolResult.ForUser),
 					})
 			}
 			contentForLLM := toolResult.ContentForLLM()
 			// Filter sensitive data (API keys, tokens, secrets) before sending to LLM
@ -2552,6 +2641,9 @@ turnLoop:
 				Content:    contentForLLM,
 				ToolCallID: toolCallID,
 			}
 			if len(toolResult.Media) > 0 && !toolResult.ResponseHandled {
 				toolResultMsg.Media = append(toolResultMsg.Media, toolResult.Media...)
 			}
 			al.emitEvent(
 				EventKindToolExecEnd,
 				ts.eventMeta("runTurn", "turn.tool.end"),
@ -2568,6 +2660,7 @@ turnLoop:
 			if !ts.opts.NoHistory {
 				ts.agent.Sessions.AddFullMessage(ts.sessionKey, toolResultMsg)
 				ts.recordPersistedMessage(toolResultMsg)
 				ts.ingestMessage(turnCtx, al, toolResultMsg)
 			}
 			if steerMsgs := al.dequeueSteeringMessagesForScope(ts.sessionKey); len(steerMsgs) > 0 {
@ -2667,6 +2760,7 @@ turnLoop:
 			if !ts.opts.NoHistory {
 				ts.agent.Sessions.AddMessage(ts.sessionKey, summaryMsg.Role, summaryMsg.Content)
 				ts.recordPersistedMessage(summaryMsg)
 				ts.ingestMessage(turnCtx, al, summaryMsg)
 				if err := ts.agent.Sessions.Save(ts.sessionKey); err != nil {
 					turnStatus = TurnEndStatusError
 					al.emitEvent(
@ -2681,7 +2775,7 @@ turnLoop:
 				}
 			}
 			if ts.opts.EnableSummary {
-				al.maybeSummarize(ts.agent, ts.sessionKey, ts.scope)
+				al.contextManager.Compact(turnCtx, &CompactRequest{SessionKey: ts.sessionKey, Reason: ContextCompressReasonSummarize})
 			}
 			ts.setPhase(TurnPhaseCompleted)
@ -2736,6 +2830,7 @@ turnLoop:
 		finalMsg := providers.Message{Role: "assistant", Content: finalContent}
 		ts.agent.Sessions.AddMessage(ts.sessionKey, finalMsg.Role, finalMsg.Content)
 		ts.recordPersistedMessage(finalMsg)
 		ts.ingestMessage(turnCtx, al, finalMsg)
 		if err := ts.agent.Sessions.Save(ts.sessionKey); err != nil {
 			turnStatus = TurnEndStatusError
 			al.emitEvent(
@ -2751,7 +2846,13 @@ turnLoop:
 	}
 	if ts.opts.EnableSummary {
-		al.maybeSummarize(ts.agent, ts.sessionKey, ts.scope)
+		al.contextManager.Compact(
 			turnCtx,
 			&CompactRequest{
 				SessionKey: ts.sessionKey,
 				Reason:     ContextCompressReasonSummarize,
 			},
 		)
 	}
 	ts.setPhase(TurnPhaseCompleted)
@ -2830,103 +2931,28 @@ func (al *AgentLoop) selectCandidates(
 	return agent.LightCandidates, resolvedCandidateModel(agent.LightCandidates, agent.Router.LightModel()), true
 }
-// maybeSummarize triggers summarization if the session history exceeds thresholds.
+// resolveContextManager selects the ContextManager implementation based on config.
-func (al *AgentLoop) maybeSummarize(agent *AgentInstance, sessionKey string, turnScope turnEventScope) {
+func (al *AgentLoop) resolveContextManager() ContextManager {
-	newHistory := agent.Sessions.GetHistory(sessionKey)
+	name := al.cfg.Agents.Defaults.ContextManager
-	tokenEstimate := al.estimateTokens(newHistory)
+	if name == "" || name == "legacy" {
-	threshold := agent.ContextWindow * agent.SummarizeTokenPercent / 100
+		return &legacyContextManager{al: al}
 	if len(newHistory) > agent.SummarizeMessageThreshold || tokenEstimate > threshold {
 		summarizeKey := agent.ID + ":" + sessionKey
 		if _, loading := al.summarizing.LoadOrStore(summarizeKey, true); !loading {
 			go func() {
 				defer al.summarizing.Delete(summarizeKey)
 				logger.Debug("Memory threshold reached. Optimizing conversation history...")
 				al.summarizeSession(agent, sessionKey, turnScope)
 			}()
 	}
-	}
+	factory, ok := lookupContextManager(name)
-}
+	if !ok {
-
+		logger.WarnCF("agent", "Unknown context manager, falling back to legacy", map[string]any{
-type compressionResult struct {
+			"name": name,
 	DroppedMessages   int
 	RemainingMessages int
 }
 // forceCompression aggressively reduces context when the limit is hit.
 // It drops the oldest ~50% of Turns (a Turn is a complete user→LLM→response
 // cycle, as defined in #1316), so tool-call sequences are never split.
 //
 // If the history is a single Turn with no safe split point, the function
 // falls back to keeping only the most recent user message. This breaks
 // Turn atomicity as a last resort to avoid a context-exceeded loop.
 //
 // Session history contains only user/assistant/tool messages — the system
 // prompt is built dynamically by BuildMessages and is NOT stored here.
 // The compression note is recorded in the session summary so that
 // BuildMessages can include it in the next system prompt.
 func (al *AgentLoop) forceCompression(agent *AgentInstance, sessionKey string) (compressionResult, bool) {
 	history := agent.Sessions.GetHistory(sessionKey)
 	if len(history) <= 2 {
 		return compressionResult{}, false
 	}
 	// Split at a Turn boundary so no tool-call sequence is torn apart.
 	// parseTurnBoundaries gives us the start of each Turn; we drop the
 	// oldest half of Turns and keep the most recent ones.
 	turns := parseTurnBoundaries(history)
 	var mid int
 	if len(turns) >= 2 {
 		mid = turns[len(turns)/2]
 	} else {
 		// Fewer than 2 Turns — fall back to message-level midpoint
 		// aligned to the nearest Turn boundary.
 		mid = findSafeBoundary(history, len(history)/2)
 	}
 	var keptHistory []providers.Message
 	if mid <= 0 {
 		// No safe Turn boundary — the entire history is a single Turn
 		// (e.g. one user message followed by a massive tool response).
 		// Keeping everything would leave the agent stuck in a context-
 		// exceeded loop, so fall back to keeping only the most recent
 		// user message. This breaks Turn atomicity as a last resort.
 		for i := len(history) - 1; i >= 0; i-- {
 			if history[i].Role == "user" {
 				keptHistory = []providers.Message{history[i]}
 				break
 			}
 		}
 	} else {
 		keptHistory = history[mid:]
 	}
 	droppedCount := len(history) - len(keptHistory)
 	// Record compression in the session summary so BuildMessages includes it
 	// in the system prompt. We do not modify history messages themselves.
 	existingSummary := agent.Sessions.GetSummary(sessionKey)
 	compressionNote := fmt.Sprintf(
 		"[Emergency compression dropped %d oldest messages due to context limit]",
 		droppedCount,
 	)
 	if existingSummary != "" {
 		compressionNote = existingSummary + "\n\n" + compressionNote
 	}
 	agent.Sessions.SetSummary(sessionKey, compressionNote)
 	agent.Sessions.SetHistory(sessionKey, keptHistory)
 	agent.Sessions.Save(sessionKey)
 	logger.WarnCF("agent", "Forced compression executed", map[string]any{
 		"session_key":  sessionKey,
 		"dropped_msgs": droppedCount,
 		"new_count":    len(keptHistory),
 		})
-
+		return &legacyContextManager{al: al}
-	return compressionResult{
+	}
-		DroppedMessages:   droppedCount,
+	cm, err := factory(al.cfg.Agents.Defaults.ContextManagerConfig, al)
-		RemainingMessages: len(keptHistory),
+	if err != nil {
-	}, true
+		logger.WarnCF("agent", "Failed to create context manager, falling back to legacy", map[string]any{
 			"name":  name,
 			"error": err.Error(),
 		})
 		return &legacyContextManager{al: al}
 	}
 	return cm
 }
 // GetStartupInfo returns information about loaded tools and skills for logging.
@ -3018,247 +3044,13 @@ func formatToolsForLog(toolDefs []providers.ToolDefinition) string {
 }
 // summarizeSession summarizes the conversation history for a session.
 func (al *AgentLoop) summarizeSession(agent *AgentInstance, sessionKey string, turnScope turnEventScope) {
 	ctx, cancel := context.WithTimeout(context.Background(), 120*time.Second)
 	defer cancel()
 	history := agent.Sessions.GetHistory(sessionKey)
 	summary := agent.Sessions.GetSummary(sessionKey)
 	// Keep the most recent Turns for continuity, aligned to a Turn boundary
 	// so that no tool-call sequence is split.
 	if len(history) <= 4 {
 		return
 	}
 	safeCut := findSafeBoundary(history, len(history)-4)
 	if safeCut <= 0 {
 		return
 	}
 	keepCount := len(history) - safeCut
 	toSummarize := history[:safeCut]
 	// Oversized Message Guard
 	maxMessageTokens := agent.ContextWindow / 2
 	validMessages := make([]providers.Message, 0)
 	omitted := false
 	for _, m := range toSummarize {
 		if m.Role != "user" && m.Role != "assistant" {
 			continue
 		}
 		msgTokens := len(m.Content) / 2
 		if msgTokens > maxMessageTokens {
 			omitted = true
 			continue
 		}
 		validMessages = append(validMessages, m)
 	}
 	if len(validMessages) == 0 {
 		return
 	}
 	const (
 		maxSummarizationMessages = 10
 		llmMaxRetries            = 3
 		llmTemperature           = 0.3
 		fallbackMaxContentLength = 200
 	)
 	// Multi-Part Summarization
 	var finalSummary string
 	if len(validMessages) > maxSummarizationMessages {
 		mid := len(validMessages) / 2
 		mid = al.findNearestUserMessage(validMessages, mid)
 		part1 := validMessages[:mid]
 		part2 := validMessages[mid:]
 		s1, _ := al.summarizeBatch(ctx, agent, part1, "")
 		s2, _ := al.summarizeBatch(ctx, agent, part2, "")
 		mergePrompt := fmt.Sprintf(
 			"Merge these two conversation summaries into one cohesive summary:\n\n1: %s\n\n2: %s",
 			s1,
 			s2,
 		)
 		resp, err := al.retryLLMCall(ctx, agent, mergePrompt, llmMaxRetries)
 		if err == nil && resp.Content != "" {
 			finalSummary = resp.Content
 		} else {
 			finalSummary = s1 + " " + s2
 		}
 	} else {
 		finalSummary, _ = al.summarizeBatch(ctx, agent, validMessages, summary)
 	}
 	if omitted && finalSummary != "" {
 		finalSummary += "\n[Note: Some oversized messages were omitted from this summary for efficiency.]"
 	}
 	if finalSummary != "" {
 		agent.Sessions.SetSummary(sessionKey, finalSummary)
 		agent.Sessions.TruncateHistory(sessionKey, keepCount)
 		agent.Sessions.Save(sessionKey)
 		al.emitEvent(
 			EventKindSessionSummarize,
 			turnScope.meta(0, "summarizeSession", "turn.session.summarize"),
 			SessionSummarizePayload{
 				SummarizedMessages: len(validMessages),
 				KeptMessages:       keepCount,
 				SummaryLen:         len(finalSummary),
 				OmittedOversized:   omitted,
 			},
 		)
 	}
 }
 // findNearestUserMessage finds the nearest user message to the given index.
 // It searches backward first, then forward if no user message is found.
 func (al *AgentLoop) findNearestUserMessage(messages []providers.Message, mid int) int {
 	originalMid := mid
 	for mid > 0 && messages[mid].Role != "user" {
 		mid--
 	}
 	if messages[mid].Role == "user" {
 		return mid
 	}
 	mid = originalMid
 	for mid < len(messages) && messages[mid].Role != "user" {
 		mid++
 	}
 	if mid < len(messages) {
 		return mid
 	}
 	return originalMid
 }
 // retryLLMCall calls the LLM with retry logic.
 func (al *AgentLoop) retryLLMCall(
 	ctx context.Context,
 	agent *AgentInstance,
 	prompt string,
 	maxRetries int,
 ) (*providers.LLMResponse, error) {
 	const (
 		llmTemperature = 0.3
 	)
 	var resp *providers.LLMResponse
 	var err error
 	for attempt := 0; attempt < maxRetries; attempt++ {
 		al.activeRequests.Add(1)
 		resp, err = func() (*providers.LLMResponse, error) {
 			defer al.activeRequests.Done()
 			return agent.Provider.Chat(
 				ctx,
 				[]providers.Message{{Role: "user", Content: prompt}},
 				nil,
 				agent.Model,
 				map[string]any{
 					"max_tokens":       agent.MaxTokens,
 					"temperature":      llmTemperature,
 					"prompt_cache_key": agent.ID,
 				},
 			)
 		}()
 		if err == nil && resp != nil && resp.Content != "" {
 			return resp, nil
 		}
 		if attempt < maxRetries-1 {
 			time.Sleep(time.Duration(attempt+1) * 100 * time.Millisecond)
 		}
 	}
 	return resp, err
 }
 // summarizeBatch summarizes a batch of messages.
 func (al *AgentLoop) summarizeBatch(
 	ctx context.Context,
 	agent *AgentInstance,
 	batch []providers.Message,
 	existingSummary string,
 ) (string, error) {
 	const (
 		llmMaxRetries             = 3
 		llmTemperature            = 0.3
 		fallbackMinContentLength  = 200
 		fallbackMaxContentPercent = 10
 	)
 	var sb strings.Builder
 	sb.WriteString(
 		"Provide a concise summary of this conversation segment, preserving core context and key points.\n",
 	)
 	if existingSummary != "" {
 		sb.WriteString("Existing context: ")
 		sb.WriteString(existingSummary)
 		sb.WriteString("\n")
 	}
 	sb.WriteString("\nCONVERSATION:\n")
 	for _, m := range batch {
 		fmt.Fprintf(&sb, "%s: %s\n", m.Role, m.Content)
 	}
 	prompt := sb.String()
 	response, err := al.retryLLMCall(ctx, agent, prompt, llmMaxRetries)
 	if err == nil && response.Content != "" {
 		return strings.TrimSpace(response.Content), nil
 	}
 	var fallback strings.Builder
 	fallback.WriteString("Conversation summary: ")
 	for i, m := range batch {
 		if i > 0 {
 			fallback.WriteString(" | ")
 		}
 		content := strings.TrimSpace(m.Content)
 		runes := []rune(content)
 		if len(runes) == 0 {
 			fallback.WriteString(fmt.Sprintf("%s: ", m.Role))
 			continue
 		}
 		keepLength := len(runes) * fallbackMaxContentPercent / 100
 		if keepLength < fallbackMinContentLength {
 			keepLength = fallbackMinContentLength
 		}
 		if keepLength > len(runes) {
 			keepLength = len(runes)
 		}
 		content = string(runes[:keepLength])
 		if keepLength < len(runes) {
 			content += "..."
 		}
 		fallback.WriteString(fmt.Sprintf("%s: %s", m.Role, content))
 	}
 	return fallback.String(), nil
 }
 // estimateTokens estimates the number of tokens in a message list.
 // Counts Content, ToolCalls arguments, and ToolCallID metadata so that
 // tool-heavy conversations are not systematically undercounted.
 func (al *AgentLoop) estimateTokens(messages []providers.Message) int {
 	total := 0
 	for _, m := range messages {
 		total += estimateMessageTokens(m)
 	}
 	return total
 }
 func (al *AgentLoop) handleCommand(
 	ctx context.Context,
 	msg bus.InboundMessage,
--- a/pkg/agent/loop_test.go
+++ b/pkg/agent/loop_test.go
@ -28,7 +28,9 @@ type fakeChannel struct{ id string }
 func (f *fakeChannel) Name() string                    { return "fake" }
 func (f *fakeChannel) Start(ctx context.Context) error { return nil }
 func (f *fakeChannel) Stop(ctx context.Context) error  { return nil }
-func (f *fakeChannel) Send(ctx context.Context, msg bus.OutboundMessage) error { return nil }
+func (f *fakeChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	return nil, nil
 }
 func (f *fakeChannel) IsRunning() bool                            { return true }
 func (f *fakeChannel) IsAllowed(string) bool                      { return true }
 func (f *fakeChannel) IsAllowedSender(sender bus.SenderInfo) bool { return true }
@ -39,9 +41,9 @@ type fakeMediaChannel struct {
 	sentMedia []bus.OutboundMediaMessage
 }
-func (f *fakeMediaChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (f *fakeMediaChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	f.sentMedia = append(f.sentMedia, msg)
-	return nil
+	return nil, nil
 }
 func newStartedTestChannelManager(
--- a/pkg/agent/subturn.go
+++ b/pkg/agent/subturn.go
@ -427,6 +427,7 @@ func spawnSubTurn(
 	// 7. Defer cleanup: deliver result (for async), emit End event, and recover from panics
 	defer func() {
 		if r := recover(); r != nil {
 			logger.RecoverPanicNoExit(r)
 			err = fmt.Errorf("subturn panicked: %v", r)
 			result = nil
 			logger.ErrorCF("subturn", "SubTurn panicked", map[string]any{
@ -510,6 +511,7 @@ func deliverSubTurnResult(al *AgentLoop, parentTS *turnState, childID string, re
 	// We use defer/recover to catch any unlikely channel panics if it were ever closed.
 	defer func() {
 		if r := recover(); r != nil {
 			logger.RecoverPanicNoExit(r)
 			logger.WarnCF("subturn", "recovered panic sending to pendingResults", map[string]any{
 				"parent_id": parentTS.turnID,
 				"child_id":  childID,
--- a/pkg/agent/turn.go
+++ b/pkg/agent/turn.go
@ -8,6 +8,7 @@ import (
 	"time"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/logger"
 	"github.com/sipeed/picoclaw/pkg/providers"
 	"github.com/sipeed/picoclaw/pkg/session"
 	"github.com/sipeed/picoclaw/pkg/tools"
@ -338,6 +339,23 @@ func (ts *turnState) refreshRestorePointFromSession(agent *AgentInstance) {
 	ts.captureRestorePoint(history, summary)
 }
 // ingestMessage calls the ContextManager's Ingest method for a persisted message.
 // Errors are logged but never block the turn.
 func (ts *turnState) ingestMessage(ctx context.Context, al *AgentLoop, msg providers.Message) {
 	if al.contextManager == nil {
 		return
 	}
 	if err := al.contextManager.Ingest(ctx, &IngestRequest{
 		SessionKey: ts.sessionKey,
 		Message:    msg,
 	}); err != nil {
 		logger.WarnCF("agent", "Context manager ingest failed", map[string]any{
 			"session_key": ts.sessionKey,
 			"error":       err.Error(),
 		})
 	}
 }
 func (ts *turnState) restoreSession(agent *AgentInstance) error {
 	ts.mu.RLock()
 	history := append([]providers.Message(nil), ts.restorePointHistory...)
--- a/pkg/audio/asr/README.md
+++ b/pkg/audio/asr/README.md
@ -0,0 +1,166 @@
 # ASR (Automatic Speech Recognition)
 This package handles speech-to-text for PicoClaw voice input.
 If you are new to ASR setup, the simplest mental model is:
 1. Add one or more ASR-capable entries to `model_list`.
 2. Point `voice.model_name` at the one you want to use.
 3. Put the API key in `.security.yml`.
 ## Quick Recommendation
 For most new users, start with one of these:
 | Provider | Example model | Why start here |
 | --- | --- | --- |
 | [Groq](https://console.groq.com/keys) | `groq/whisper-large-v3-turbo` | Fast Whisper-style transcription and a straightforward OpenAI-compatible API. Groq currently advertises a free tier plan for 2000 reqs/day. |
 | [ElevenLabs](https://elevenlabs.io/pricing) | `elevenlabs/scribe_v1` | Easy setup and strong speech-to-text quality. ElevenLabs currently advertises a free plan that includes speech-to-text usage. |
 Pricing and free-plan limits can change, so check the linked pricing pages before depending on them in production.
 ## How ASR Configuration Works
 PicoClaw does not keep ASR API keys inside the `voice` section.
 Instead:
 - `voice.model_name` chooses a named entry from `model_list`.
 - The matching `model_list` entry describes the actual provider and model.
 - `.security.yml` stores the API key for that named model entry.
 This is the recommended pattern because it is explicit, reusable, and consistent with the rest of PicoClaw's model configuration.
 ## Recommended Setup
 ### Option A: Groq Whisper
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "groq-asr",
    "echo_transcription": true
  },
  "model_list": [
    {
      "model_name": "groq-asr",
      "model": "groq/whisper-large-v3-turbo"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  groq-asr:
    api_keys:
      - "gsk_your_groq_key"
 ```
 Notes:
 - You can omit `api_base` and PicoClaw will use Groq's default API base automatically.
 - If you set `api_base` manually for Groq Whisper, both of these forms work:
  - `https://api.groq.com/openai/v1`
  - `https://api.groq.com/openai/v1/audio/transcriptions`
 - Any OpenAI-compatible Whisper model name containing `whisper` can use the Whisper transcription path, not only `whisper-large-v3-turbo`.
 ### Option B: ElevenLabs
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "elevenlabs-asr",
    "echo_transcription": true
  },
  "model_list": [
    {
      "model_name": "elevenlabs-asr",
      "model": "elevenlabs/scribe_v1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  elevenlabs-asr:
    api_keys:
      - "sk-elevenlabs-your-key"
 ```
 ### Option C: OpenAI Whisper
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "openai-asr"
  },
  "model_list": [
    {
      "model_name": "openai-asr",
      "model": "openai/whisper-1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  openai-asr:
    api_keys:
      - "sk-openai-your-key"
 ```
 ## Other ASR-Capable Model Types
 PicoClaw currently supports three main ASR routes:
 | Route | Example models | Behavior |
 | --- | --- | --- |
 | ElevenLabs ASR | `elevenlabs/scribe_v1` | Uses the ElevenLabs transcription API. |
 | Whisper endpoint models | `openai/whisper-1`, `groq/whisper-large-v3` | Uses an OpenAI-compatible `/audio/transcriptions` endpoint. |
 | Audio-capable chat models **(Under construction)** | `openai/gpt-4o-audio-preview`, `gemini/gemini-2.5-flash` | Sends audio to a multimodal chat model and asks it to transcribe. |
 If you are unsure which one to pick, choose Groq Whisper or ElevenLabs first.
 ## How PicoClaw Chooses a Transcriber
 `DetectTranscriber` resolves ASR in this order:
 1. **Preferred path**: resolve `voice.model_name` against `model_list`.
 2. If that resolved model is:
   - `elevenlabs/...`, PicoClaw uses the ElevenLabs transcriber.
   - an OpenAI-compatible Whisper model, PicoClaw uses the Whisper transcriber.
   - an audio-capable chat model, PicoClaw uses `AudioModelTranscriber`.
 3. **Fallback path**: if `voice.model_name` is not set, PicoClaw performs a compatibility scan through `model_list` for legacy auto-detected ASR entries.
 Fallback scanning exists for backward compatibility. New configurations should set `voice.model_name` explicitly.
 ## Common Mistakes
 - Defining an ASR model in `model_list` but forgetting to set `voice.model_name`.
 - Putting the API key in `voice` instead of `.security.yml`.
 - Using a non-ASR model and expecting Whisper-style transcription behavior.
 - Setting a custom `api_base` that points to the wrong provider endpoint.
 ## Minimal Checklist
 Before testing voice input, make sure:
 - `voice.model_name` matches a `model_list[].model_name`.
 - The matching `.security.yml` entry contains a valid API key.
 - The selected model is actually ASR-capable.
 - Voice input is enabled for the channel you are using.
--- a/pkg/audio/asr/README_zh.md
+++ b/pkg/audio/asr/README_zh.md
@ -0,0 +1,166 @@
 # ASR（自动语音识别）
 这个目录负责 PicoClaw 的语音转文字能力。
 如果你是第一次配置 ASR，可以参考如下步骤：
 1. 在 `model_list` 里添加一个或多个支持 ASR 的模型条目。
 2. 用 `voice.model_name` 指向你想使用的那个条目。
 3. 在 `.security.yml` 里配置对应的 API Key。
 ## 快速推荐
 对于大多数新用户，建议先从下面两种开始：
 | 提供商 | 示例模型 | 推荐理由 |
 | --- | --- | --- |
 | [Groq](https://console.groq.com/keys) | `groq/whisper-large-v3-turbo` | Whisper 风格转录速度快，并且提供 OpenAI 兼容接口，配置比较直接。Groq 目前官方提供2000请求每日的免费套餐。 |
 | [ElevenLabs](https://elevenlabs.io/pricing) | `elevenlabs/scribe_v1` | 上手简单，语音转文字质量也不错。ElevenLabs 目前官方免费套餐包含 STT 用量。 |
 价格和免费额度可能会变化，正式使用前请以官网定价页为准。
 ## ASR 配置是如何工作的
 PicoClaw 不会把 ASR 的 API Key 放在 `voice` 配置里。
 推荐的方式是：
 - `voice.model_name` 用来选择 `model_list` 里的某个命名模型。
 -  `model_list` 条目描述真实的提供商和模型。
 - `.security.yml` 负责保存该模型条目的 API Key。
 这种方式更明确、更安全，也和 PicoClaw 其他模型配置方式保持一致。
 ## 推荐配置方式
 ### 方案 A：Groq Whisper
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "groq-asr",
    "echo_transcription": true
  },
  "model_list": [
    {
      "model_name": "groq-asr",
      "model": "groq/whisper-large-v3-turbo"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  groq-asr:
    api_keys:
      - "gsk_your_groq_key"
 ```
 说明：
 - 你可以不写 `api_base`，PicoClaw 会自动使用 Groq 默认接口地址。
 - 如果你手动设置 Groq Whisper 的 `api_base`，下面两种写法都可以：
  - `https://api.groq.com/openai/v1`
  - `https://api.groq.com/openai/v1/audio/transcriptions`
 - 只要是 OpenAI 兼容、并且模型名里包含 `whisper` 的模型，都可以走 Whisper 转录路径，不仅限于 `whisper-large-v3-turbo`。
 ### 方案 B：ElevenLabs
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "elevenlabs-asr",
    "echo_transcription": true
  },
  "model_list": [
    {
      "model_name": "elevenlabs-asr",
      "model": "elevenlabs/scribe_v1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  elevenlabs-asr:
    api_keys:
      - "sk-elevenlabs-your-key"
 ```
 ### 方案 C：OpenAI Whisper
 `config.json`
 ```json
 {
  "voice": {
    "model_name": "openai-asr"
  },
  "model_list": [
    {
      "model_name": "openai-asr",
      "model": "openai/whisper-1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  openai-asr:
    api_keys:
      - "sk-openai-your-key"
 ```
 ## 其他支持 ASR 的模型类型
 PicoClaw 目前主要支持三种 ASR 路径：
 | 路径 | 示例模型 | 行为说明 |
 | --- | --- | --- |
 | ElevenLabs ASR | `elevenlabs/scribe_v1` | 使用 ElevenLabs 的语音转录接口。 |
 | Whisper 接口模型 | `openai/whisper-1`、`groq/whisper-large-v3` | 使用 OpenAI 兼容的 `/audio/transcriptions` 接口。 |
 | 支持音频的聊天模型 **（重构中）** | `openai/gpt-4o-audio-preview`、`gemini/gemini-2.5-flash` | 把音频发给多模态聊天模型，并要求它返回转录结果。 |
 如果你不确定该选哪种，建议优先使用 Groq Whisper 或 ElevenLabs。
 ## PicoClaw 如何选择转录器
 `DetectTranscriber` 会按下面顺序选择 ASR：
 1. **首选路径**：根据 `voice.model_name` 在 `model_list` 中找到对应模型。
 2. 如果找到的模型属于以下类型：
   - `elevenlabs/...`，则使用 ElevenLabs transcriber。
   - OpenAI 兼容的 Whisper 模型，则使用 Whisper transcriber。
   - 支持音频输入的聊天模型，则使用 `AudioModelTranscriber`。
 3. **回退路径**：如果没有设置 `voice.model_name`，PicoClaw 会为了兼容旧配置，扫描 `model_list` 中可自动识别的 ASR 条目。
 回退扫描只是为了兼容旧行为。新配置建议始终显式设置 `voice.model_name`。
 ## 常见错误
 - 在 `model_list` 里定义了 ASR 模型，但忘了设置 `voice.model_name`。
 - 把 API Key 写进了 `voice`，而不是 `.security.yml`。
 - 选择了不支持 ASR 的模型，却期望得到 Whisper 风格的转录结果。
 - 自定义了错误的 `api_base`，导致请求打到错误的接口地址。
 ## 最小检查清单
 在测试语音输入前，请确认：
 - `voice.model_name` 能正确匹配某个 `model_list[].model_name`。
 - `.security.yml` 中对应条目已经配置了有效 API Key。
 - 你选择的模型确实支持 ASR。
 - 你当前使用的频道已经启用了语音输入能力。
--- a/pkg/audio/asr/agent.go
+++ b/pkg/audio/asr/agent.go
@ -0,0 +1,252 @@
 package asr
 import (
 	"context"
 	"fmt"
 	"os"
 	"path/filepath"
 	"strings"
 	"sync"
 	"time"
 	"github.com/pion/rtp"
 	"github.com/pion/webrtc/v3/pkg/media/oggwriter"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/logger"
 )
 type speechAccumulator struct {
 	writer      *oggwriter.OggWriter
 	file        string
 	lastAudioAt time.Time
 	mu          sync.Mutex
 	closed      bool
 	chatID      string
 	speakerID   string
 	sessionID   string
 	channel     string
 }
 func (a *speechAccumulator) Push(chunk bus.AudioChunk) {
 	a.mu.Lock()
 	defer a.mu.Unlock()
 	if a.closed {
 		return
 	}
 	a.lastAudioAt = time.Now()
 	pkt := &rtp.Packet{
 		Header: rtp.Header{
 			SequenceNumber: uint16(chunk.Sequence),
 			Timestamp:      chunk.Timestamp,
 			SSRC:           1, // Stable arbitrary dummy
 		},
 		Payload: chunk.Data,
 	}
 	if err := a.writer.WriteRTP(pkt); err != nil {
 		logger.ErrorCF("voice-agent", "Failed to write RTP", map[string]any{"error": err})
 	}
 }
 func (a *speechAccumulator) Close() {
 	a.mu.Lock()
 	defer a.mu.Unlock()
 	if !a.closed {
 		a.writer.Close()
 		a.closed = true
 	}
 }
 type Agent struct {
 	bus         *bus.MessageBus
 	transcriber Transcriber
 	mu       sync.Mutex
 	sessions map[string]*speechAccumulator // keyed by sessionID_speakerID
 }
 func NewAgent(mb *bus.MessageBus, t Transcriber) *Agent {
 	return &Agent{
 		bus:         mb,
 		transcriber: t,
 		sessions:    make(map[string]*speechAccumulator),
 	}
 }
 func (a *Agent) Start(ctx context.Context) {
 	logger.InfoCF("voice-agent", "Started Voice Agent orchestrator", nil)
 	go a.listenChunks(ctx)
 	go a.vadTick(ctx)
 	// Cleanup sessions on shutdown
 	go func() {
 		<-ctx.Done()
 		a.mu.Lock()
 		for key, acc := range a.sessions {
 			acc.Close()
 			os.Remove(acc.file)
 			delete(a.sessions, key)
 		}
 		a.mu.Unlock()
 		logger.InfoCF("voice-agent", "Cleaned up voice sessions on shutdown", nil)
 	}()
 }
 func (a *Agent) listenChunks(ctx context.Context) {
 	chunks := a.bus.AudioChunksChan()
 	for {
 		select {
 		case <-ctx.Done():
 			return
 		case chunk, ok := <-chunks:
 			if !ok {
 				return
 			}
 			a.handleChunk(chunk)
 		}
 	}
 }
 func (a *Agent) handleChunk(chunk bus.AudioChunk) {
 	// Only accept Opus-encoded audio
 	if chunk.Format != "opus" {
 		logger.DebugCF("voice-agent", "Ignoring unsupported audio format", map[string]any{"format": chunk.Format})
 		return
 	}
 	key := fmt.Sprintf("%s_%s", chunk.SessionID, chunk.SpeakerID)
 	a.mu.Lock()
 	acc, exists := a.sessions[key]
 	if !exists {
 		filename := filepath.Join(os.TempDir(), fmt.Sprintf("voice_%s_%d.ogg", key, time.Now().UnixNano()))
 		writer, err := oggwriter.New(filename, uint32(chunk.SampleRate), uint16(chunk.Channels))
 		if err != nil {
 			a.mu.Unlock()
 			logger.ErrorCF("voice-agent", "Failed to create OggWriter", map[string]any{"error": err})
 			return
 		}
 		acc = &speechAccumulator{
 			writer:      writer,
 			file:        filename,
 			lastAudioAt: time.Now(),
 			chatID:      chunk.ChatID,
 			speakerID:   chunk.SpeakerID,
 			sessionID:   chunk.SessionID,
 			channel:     chunk.Channel,
 		}
 		a.sessions[key] = acc
 		logger.DebugCF("voice-agent", "Started accumulating voice", map[string]any{"key": key, "file": filename})
 	}
 	a.mu.Unlock()
 	acc.Push(chunk)
 }
 func (a *Agent) vadTick(ctx context.Context) {
 	ticker := time.NewTicker(500 * time.Millisecond)
 	defer ticker.Stop()
 	for {
 		select {
 		case <-ctx.Done():
 			return
 		case <-ticker.C:
 			a.checkSilence(ctx)
 		}
 	}
 }
 func (a *Agent) checkSilence(ctx context.Context) {
 	a.mu.Lock()
 	now := time.Now()
 	var finished []*speechAccumulator
 	for key, acc := range a.sessions {
 		acc.mu.Lock()
 		last := acc.lastAudioAt
 		acc.mu.Unlock()
 		if now.Sub(last) > 1500*time.Millisecond {
 			acc.Close()
 			delete(a.sessions, key)
 			finished = append(finished, acc)
 		}
 	}
 	a.mu.Unlock()
 	for _, acc := range finished {
 		go a.processUtterance(ctx, acc)
 	}
 }
 func (a *Agent) processUtterance(ctx context.Context, acc *speechAccumulator) {
 	defer os.Remove(acc.file)
 	logger.InfoCF("voice-agent", "User finished speaking, transcribing...", map[string]any{"file": acc.file})
 	if a.transcriber == nil {
 		logger.ErrorCF("voice-agent", "No STT configured!", nil)
 		return
 	}
 	res, err := a.transcriber.Transcribe(ctx, acc.file)
 	if err != nil {
 		logger.ErrorCF("voice-agent", "Transcription failed", map[string]any{"error": err})
 		return
 	}
 	if res.Text == "" {
 		logger.DebugCF("voice-agent", "Ignored empty transcription", map[string]any{"file": acc.file})
 		return
 	}
 	logger.InfoCF("voice-agent", "Transcription result", map[string]any{"text": res.Text, "duration": res.Duration})
 	channelType := acc.channel
 	if channelType == "" {
 		channelType = "discord" // fallback for legacy chunks
 	}
 	text := strings.ToLower(strings.TrimSpace(res.Text))
 	if strings.Contains(text, "leave the voice channel") || strings.Contains(text, "leave voice") ||
 		strings.Contains(text, "disconnect voice") || strings.Contains(text, "leave the channel") ||
 		strings.Contains(text, "leave channel") {
 		logger.InfoCF("voice-agent", "Voice command triggered: leave", nil)
 		if err := a.bus.PublishVoiceControl(ctx, bus.VoiceControl{
 			SessionID: acc.sessionID,
 			Type:      "command",
 			Action:    "leave",
 		}); err != nil {
 			logger.ErrorCF("voice-agent", "Failed to publish leave control", map[string]any{"error": err})
 		}
 		if err := a.bus.PublishOutbound(ctx, bus.OutboundMessage{
 			Channel: channelType,
 			ChatID:  acc.chatID,
 			Content: "Goodbye! Leaving the voice channel.",
 		}); err != nil {
 			logger.ErrorCF("voice-agent", "Failed to publish goodbye message", map[string]any{"error": err})
 		}
 		return
 	}
 	oralPrompt := "\n\n[SYSTEM]: The user just spoke this to you over voice chat. Please reply in a highly concise, conversational, oral style suitable for text-to-speech. Do not use markdown, emojis, asterisks, or code blocks. Speak naturally."
 	if err := a.bus.PublishInbound(ctx, bus.InboundMessage{
 		Channel:  channelType,
 		SenderID: acc.speakerID,
 		ChatID:   acc.chatID,
 		Content:  res.Text + oralPrompt,
 		Peer:     bus.Peer{Kind: "channel", ID: acc.chatID},
 		Metadata: map[string]string{
 			"is_voice": "true",
 		},
 	}); err != nil {
 		logger.ErrorCF("voice-agent", "Failed to publish inbound message", map[string]any{"error": err})
 	}
 }
--- a/pkg/audio/asr/agent_test.go
+++ b/pkg/audio/asr/agent_test.go
@ -0,0 +1,196 @@
 package asr
 import (
 	"context"
 	"os"
 	"path/filepath"
 	"strings"
 	"testing"
 	"time"
 	"github.com/pion/webrtc/v3/pkg/media/oggwriter"
 	"github.com/sipeed/picoclaw/pkg/bus"
 )
 type fakeTranscriber struct {
 	text     string
 	err      error
 	lastPath string
 }
 func (f *fakeTranscriber) Name() string { return "fake" }
 func (f *fakeTranscriber) Transcribe(ctx context.Context, audioFilePath string) (*TranscriptionResponse, error) {
 	f.lastPath = audioFilePath
 	if f.err != nil {
 		return nil, f.err
 	}
 	return &TranscriptionResponse{Text: f.text}, nil
 }
 func waitForFileRemoval(t *testing.T, path string, timeout time.Duration) {
 	t.Helper()
 	deadline := time.Now().Add(timeout)
 	for time.Now().Before(deadline) {
 		if _, err := os.Stat(path); os.IsNotExist(err) {
 			return
 		}
 		time.Sleep(10 * time.Millisecond)
 	}
 	if _, err := os.Stat(path); err == nil {
 		t.Fatalf("expected file to be removed: %s", path)
 	}
 }
 func TestAgentHandleChunkCreatesSession(t *testing.T) {
 	t.Parallel()
 	mb := bus.NewMessageBus()
 	defer mb.Close()
 	agent := NewAgent(mb, &fakeTranscriber{})
 	chunk := bus.AudioChunk{
 		SessionID:  "sess",
 		SpeakerID:  "speaker",
 		ChatID:     "chat",
 		Channel:    "discord",
 		Sequence:   1,
 		Timestamp:  1,
 		SampleRate: 48000,
 		Channels:   2,
 		Format:     "opus",
 		Data:       []byte{0xF8, 0xFF, 0xFE},
 	}
 	agent.handleChunk(chunk)
 	key := "sess_speaker"
 	agent.mu.Lock()
 	acc, ok := agent.sessions[key]
 	agent.mu.Unlock()
 	if !ok {
 		t.Fatal("expected session to be created")
 	}
 	acc.Close()
 	_ = os.Remove(acc.file)
 }
 func TestAgentHandleChunkIgnoresUnsupportedFormat(t *testing.T) {
 	t.Parallel()
 	mb := bus.NewMessageBus()
 	defer mb.Close()
 	agent := NewAgent(mb, &fakeTranscriber{})
 	chunk := bus.AudioChunk{Format: "pcm"}
 	agent.handleChunk(chunk)
 	agent.mu.Lock()
 	count := len(agent.sessions)
 	agent.mu.Unlock()
 	if count != 0 {
 		t.Fatalf("expected no sessions, got %d", count)
 	}
 }
 func TestAgentProcessUtteranceLeaveCommand(t *testing.T) {
 	t.Parallel()
 	mb := bus.NewMessageBus()
 	defer mb.Close()
 	tr := &fakeTranscriber{text: "please leave the voice channel now"}
 	agent := NewAgent(mb, tr)
 	tmpDir := t.TempDir()
 	filePath := filepath.Join(tmpDir, "voice.ogg")
 	if err := os.WriteFile(filePath, []byte("data"), 0o600); err != nil {
 		t.Fatalf("write temp file: %v", err)
 	}
 	acc := &speechAccumulator{
 		file:      filePath,
 		chatID:    "chat",
 		speakerID: "speaker",
 		sessionID: "sess",
 		channel:   "discord",
 	}
 	agent.processUtterance(context.Background(), acc)
 	select {
 	case ctrl := <-mb.VoiceControlsChan():
 		if ctrl.Action != "leave" || ctrl.Type != "command" || ctrl.SessionID != "sess" {
 			t.Fatalf("unexpected voice control: %#v", ctrl)
 		}
 	case <-time.After(250 * time.Millisecond):
 		t.Fatal("expected voice control publish")
 	}
 	select {
 	case out := <-mb.OutboundChan():
 		if !strings.Contains(out.Content, "Leaving the voice channel") {
 			t.Fatalf("unexpected outbound content: %q", out.Content)
 		}
 	case <-time.After(250 * time.Millisecond):
 		t.Fatal("expected outbound publish")
 	}
 	if _, err := os.Stat(filePath); !os.IsNotExist(err) {
 		t.Fatalf("expected temp file to be removed")
 	}
 }
 func TestAgentCheckSilencePublishesInboundAndCleansUp(t *testing.T) {
 	t.Parallel()
 	mb := bus.NewMessageBus()
 	defer mb.Close()
 	tr := &fakeTranscriber{text: "hello there"}
 	agent := NewAgent(mb, tr)
 	filePath := filepath.Join(t.TempDir(), "voice.ogg")
 	writer, err := oggwriter.New(filePath, 48000, 2)
 	if err != nil {
 		t.Fatalf("create ogg writer: %v", err)
 	}
 	acc := &speechAccumulator{
 		writer:      writer,
 		file:        filePath,
 		lastAudioAt: time.Now().Add(-2 * time.Second),
 		chatID:      "chat",
 		speakerID:   "speaker",
 		sessionID:   "sess",
 		channel:     "slack",
 	}
 	agent.mu.Lock()
 	agent.sessions["sess_speaker"] = acc
 	agent.mu.Unlock()
 	agent.checkSilence(context.Background())
 	select {
 	case msg := <-mb.InboundChan():
 		if msg.Channel != "slack" {
 			t.Fatalf("unexpected inbound channel: %q", msg.Channel)
 		}
 		if !strings.Contains(msg.Content, "hello there") {
 			t.Fatalf("unexpected inbound content: %q", msg.Content)
 		}
 		if msg.Metadata["is_voice"] != "true" {
 			t.Fatalf("expected is_voice metadata, got %#v", msg.Metadata)
 		}
 	case <-time.After(500 * time.Millisecond):
 		t.Fatal("expected inbound publish")
 	}
 	waitForFileRemoval(t, filePath, 500*time.Millisecond)
 }
--- a/pkg/audio/asr/asr.go
+++ b/pkg/audio/asr/asr.go
@ -0,0 +1,131 @@
 package asr
 import (
 	"context"
 	"strings"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/providers"
 )
 type Transcriber interface {
 	Name() string
 	Transcribe(ctx context.Context, audioFilePath string) (*TranscriptionResponse, error)
 }
 type TranscriptionResponse struct {
 	Text     string  `json:"text"`
 	Language string  `json:"language,omitempty"`
 	Duration float64 `json:"duration,omitempty"`
 }
 func supportsAudioTranscription(model string) bool {
 	protocol, _ := providers.ExtractProtocol(model)
 	switch protocol {
 	case "openai", "azure", "azure-openai",
 		"litellm", "openrouter", "groq", "zhipu", "gemini", "nvidia",
 		"ollama", "moonshot", "shengsuanyun", "deepseek", "cerebras",
 		"vivgrid", "volcengine", "vllm", "qwen", "qwen-intl", "qwen-international", "dashscope-intl",
 		"qwen-us", "dashscope-us", "mistral", "avian", "minimax", "longcat", "modelscope", "novita",
 		"coding-plan", "alibaba-coding", "qwen-coding":
 		// These protocols all go through the OpenAI-compatible or Azure provider path in
 		// providers.CreateProviderFromConfig, so they are the only ones that can supply
 		// the audio media payload shape expected by NewAudioModelTranscriber.
 		// TODO: Further restrict this by modelID, since not every model under these
 		// protocols supports audio transcription.
 		return true
 	default:
 		return false
 	}
 }
 func supportsWhisperTranscription(model string) bool {
 	protocol, _ := providers.ExtractProtocol(model)
 	switch protocol {
 	case "openai", "litellm", "openrouter", "groq", "zhipu", "gemini", "nvidia",
 		"ollama", "moonshot", "shengsuanyun", "deepseek", "cerebras",
 		"vivgrid", "volcengine", "vllm", "qwen", "qwen-intl", "qwen-international", "dashscope-intl",
 		"qwen-us", "dashscope-us", "mistral", "avian", "minimax", "longcat", "modelscope", "novita",
 		"coding-plan", "alibaba-coding", "qwen-coding", "mimo":
 		return true
 	default:
 		return false
 	}
 }
 func whisperModelID(modelCfg *config.ModelConfig) string {
 	if modelCfg == nil || modelCfg.APIKey() == "" {
 		return ""
 	}
 	if !supportsWhisperTranscription(modelCfg.Model) {
 		return ""
 	}
 	_, modelID := providers.ExtractProtocol(strings.TrimSpace(modelCfg.Model))
 	if strings.Contains(strings.ToLower(modelID), "whisper") {
 		return modelID
 	}
 	return ""
 }
 func transcriberFromModelConfig(modelCfg *config.ModelConfig) Transcriber {
 	if modelCfg == nil {
 		return nil
 	}
 	protocol, _ := providers.ExtractProtocol(modelCfg.Model)
 	if protocol == "elevenlabs" && modelCfg.APIKey() != "" {
 		return NewElevenLabsTranscriber(modelCfg.APIKey(), modelCfg.APIBase)
 	}
 	if modelID := whisperModelID(modelCfg); modelID != "" {
 		return NewWhisperTranscriber(modelCfg)
 	}
 	if supportsAudioTranscription(modelCfg.Model) {
 		return NewAudioModelTranscriber(modelCfg)
 	}
 	return nil
 }
 func fallbackTranscriberFromModelConfig(modelCfg *config.ModelConfig) Transcriber {
 	if modelCfg == nil {
 		return nil
 	}
 	protocol, _ := providers.ExtractProtocol(modelCfg.Model)
 	if protocol == "elevenlabs" && modelCfg.APIKey() != "" {
 		return NewElevenLabsTranscriber(modelCfg.APIKey(), modelCfg.APIBase)
 	}
 	if modelID := whisperModelID(modelCfg); modelID != "" {
 		return NewWhisperTranscriber(modelCfg)
 	}
 	return nil
 }
 // DetectTranscriber inspects cfg and returns the appropriate Transcriber, or
 // nil if no supported transcription provider is configured.
 func DetectTranscriber(cfg *config.Config) Transcriber {
 	if cfg == nil {
 		return nil
 	}
 	if modelName := strings.TrimSpace(cfg.Voice.ModelName); modelName != "" {
 		modelCfg, err := cfg.GetModelConfig(modelName)
 		if err == nil {
 			if tr := transcriberFromModelConfig(modelCfg); tr != nil {
 				return tr
 			}
 		}
 	}
 	// Fall back to compatibility scanning for legacy auto-detected ASR providers.
 	for _, mc := range cfg.ModelList {
 		if tr := fallbackTranscriberFromModelConfig(mc); tr != nil {
 			return tr
 		}
 	}
 	return nil
 }
--- a/pkg/voice/transcriber_test.go
+++ b/pkg/voice/transcriber_test.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"testing"
@ -33,26 +33,68 @@ func TestDetectTranscriber(t *testing.T) {
 			wantName: "audio-model",
 		},
 		{
-			name: "groq via model list",
+			name: "voice model name alias selects elevenlabs transcriber",
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{ModelName: "my-asr-model"},
 				ModelList: []*config.ModelConfig{
 					{
 						ModelName: "my-asr-model",
 						Model:     "elevenlabs/scribe_v1",
 						APIKeys:   config.SimpleSecureStrings("sk_elevenlabs_test"),
 					},
 				},
 			},
 			wantName: "elevenlabs",
 		},
 		{
 			name: "voice model name alias selects whisper transcriber for groq",
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{ModelName: "my-asr-model"},
 				ModelList: []*config.ModelConfig{
 					{
 						ModelName: "my-asr-model",
 						Model:     "groq/whisper-large-v3",
 						APIKeys:   config.SimpleSecureStrings("sk-groq-model"),
 					},
 				},
 			},
 			wantName: "whisper",
 		},
 		{
 			name: "openai whisper alias selects whisper transcriber",
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{ModelName: "my-asr-model"},
 				ModelList: []*config.ModelConfig{
 					{
 						ModelName: "my-asr-model",
 						Model:     "openai/whisper-1",
 						APIKeys:   config.SimpleSecureStrings("sk-openai-model"),
 					},
 				},
 			},
 			wantName: "whisper",
 		},
 		{
 			name: "whisper via model list fallback",
 			cfg: &config.Config{
 				ModelList: []*config.ModelConfig{
 					{ModelName: "openai", Model: "openai/gpt-4o", APIKeys: config.SimpleSecureStrings("sk-openai")},
 					{
 						ModelName: "groq",
-						Model:     "groq/llama-3.3-70b",
+						Model:     "groq/whisper-large-v3-turbo",
 						APIKeys:   config.SimpleSecureStrings("sk-groq-model"),
 					},
 				},
 			},
-			wantName: "groq",
+			wantName: "whisper",
 		},
 		{
-			name: "voice model name selects non-gemini audio model transcriber",
+			name: "voice model name alias selects non-gemini audio model transcriber",
 			cfg: &config.Config{
-				Voice: config.VoiceConfig{ModelName: "voice-openai-audio"},
+				Voice: config.VoiceConfig{ModelName: "my-asr-model"},
 				ModelList: []*config.ModelConfig{
 					{
-						ModelName: "voice-openai-audio",
+						ModelName: "my-asr-model",
 						Model:     "openai/gpt-4o-audio-preview",
 						APIKeys:   config.SimpleSecureStrings("sk-openai"),
 					},
@ -92,7 +134,7 @@ func TestDetectTranscriber(t *testing.T) {
 			name: "groq model list entry without key is skipped",
 			cfg: &config.Config{
 				ModelList: []*config.ModelConfig{
-					{Model: "groq/llama-3.3-70b"},
+					{Model: "groq/whisper-large-v3"},
 				},
 			},
 			wantNil: true,
@ -103,12 +145,12 @@ func TestDetectTranscriber(t *testing.T) {
 				ModelList: []*config.ModelConfig{
 					{
 						ModelName: "groq",
-						Model:     "groq/llama-3.3-70b",
+						Model:     "groq/whisper-large-v3",
 						APIKeys:   config.SimpleSecureStrings("sk-groq-model"),
 					},
 				},
 			},
-			wantName: "groq",
+			wantName: "whisper",
 		},
 		{
 			name: "missing voice model name config returns nil",
@ -127,15 +169,17 @@ func TestDetectTranscriber(t *testing.T) {
 		{
 			name: "elevenlabs voice config key",
 			cfg: &config.Config{
-				Voice: config.VoiceConfig{ElevenLabsAPIKey: "sk_elevenlabs_test"},
+				ModelList: []*config.ModelConfig{
 					{Model: "elevenlabs/scribe_v1", APIKeys: config.SimpleSecureStrings("sk_elevenlabs_test")},
 				},
 			},
 			wantName: "elevenlabs",
 		},
 		{
 			name: "elevenlabs takes priority over groq model list",
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{ElevenLabsAPIKey: "sk_elevenlabs_test"},
 				ModelList: []*config.ModelConfig{
 					{Model: "elevenlabs/scribe_v1", APIKeys: config.SimpleSecureStrings("sk_elevenlabs_test")},
 					{
 						ModelName: "groq",
 						Model:     "groq/llama-3.3-70b",
@ -150,9 +194,9 @@ func TestDetectTranscriber(t *testing.T) {
 			cfg: &config.Config{
 				Voice: config.VoiceConfig{
 					ModelName: "voice-gemini",
 					ElevenLabsAPIKey: "sk_elevenlabs_test",
 				},
 				ModelList: []*config.ModelConfig{
 					{Model: "elevenlabs", APIKeys: config.SimpleSecureStrings("sk_elevenlabs_test")},
 					{
 						ModelName: "voice-gemini",
 						Model:     "gemini/gemini-2.5-flash",
--- a/pkg/audio/asr/audio_model_transcriber.go
+++ b/pkg/audio/asr/audio_model_transcriber.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"context"
--- a/pkg/audio/asr/audio_model_transcriber_test.go
+++ b/pkg/audio/asr/audio_model_transcriber_test.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"context"
--- a/pkg/audio/asr/elevenlabs_transcriber.go
+++ b/pkg/audio/asr/elevenlabs_transcriber.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"bytes"
@ -23,12 +23,16 @@ type ElevenLabsTranscriber struct {
 	httpClient *http.Client
 }
-func NewElevenLabsTranscriber(apiKey string) *ElevenLabsTranscriber {
+func NewElevenLabsTranscriber(apiKey, apiBase string) *ElevenLabsTranscriber {
 	logger.DebugCF("voice", "Creating ElevenLabs transcriber", map[string]any{"has_api_key": apiKey != ""})
 	if apiBase == "" {
 		apiBase = "https://api.elevenlabs.io"
 	}
 	return &ElevenLabsTranscriber{
 		apiKey:  apiKey,
-		apiBase: "https://api.elevenlabs.io",
+		apiBase: apiBase,
 		httpClient: &http.Client{
 			Timeout: 120 * time.Second,
 		},
--- a/pkg/audio/asr/elevenlabs_transcriber_test.go
+++ b/pkg/audio/asr/elevenlabs_transcriber_test.go
@ -1,4 +1,4 @@
-package voice
+package asr
 import (
 	"context"
@ -14,7 +14,7 @@ import (
 var _ Transcriber = (*ElevenLabsTranscriber)(nil)
 func TestElevenLabsTranscriberName(t *testing.T) {
-	tr := NewElevenLabsTranscriber("sk_test")
+	tr := NewElevenLabsTranscriber("sk_test", "")
 	if got := tr.Name(); got != "elevenlabs" {
 		t.Errorf("Name() = %q, want %q", got, "elevenlabs")
 	}
@ -43,7 +43,7 @@ func TestElevenLabsTranscribe(t *testing.T) {
 		}))
 		defer srv.Close()
-		tr := NewElevenLabsTranscriber("sk_test")
+		tr := NewElevenLabsTranscriber("sk_test", "")
 		tr.apiBase = srv.URL
 		resp, err := tr.Transcribe(context.Background(), audioPath)
@ -64,7 +64,7 @@ func TestElevenLabsTranscribe(t *testing.T) {
 		}))
 		defer srv.Close()
-		tr := NewElevenLabsTranscriber("sk_bad")
+		tr := NewElevenLabsTranscriber("sk_bad", "")
 		tr.apiBase = srv.URL
 		_, err := tr.Transcribe(context.Background(), audioPath)
@ -74,7 +74,7 @@ func TestElevenLabsTranscribe(t *testing.T) {
 	})
 	t.Run("missing file", func(t *testing.T) {
-		tr := NewElevenLabsTranscriber("sk_test")
+		tr := NewElevenLabsTranscriber("sk_test", "")
 		_, err := tr.Transcribe(context.Background(), filepath.Join(tmpDir, "nonexistent.ogg"))
 		if err == nil {
 			t.Fatal("expected error for missing file, got nil")
--- a/pkg/audio/asr/whisper_transcriber.go
+++ b/pkg/audio/asr/whisper_transcriber.go
@ -0,0 +1,245 @@
 package asr
 import (
 	"bytes"
 	"context"
 	"encoding/json"
 	"fmt"
 	"io"
 	"mime/multipart"
 	"net/http"
 	"os"
 	"path/filepath"
 	"strings"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/logger"
 	"github.com/sipeed/picoclaw/pkg/providers"
 	"github.com/sipeed/picoclaw/pkg/utils"
 )
 type WhisperTranscriber struct {
 	apiKey       string
 	apiBase      string
 	modelID      string
 	providerName string
 	httpClient   *http.Client
 }
 func NewWhisperTranscriber(modelCfg *config.ModelConfig) *WhisperTranscriber {
 	if modelCfg == nil {
 		return nil
 	}
 	protocol, modelID := providers.ExtractProtocol(modelCfg.Model)
 	if modelID == "" {
 		modelID = strings.TrimSpace(modelCfg.Model)
 	}
 	tr := newWhisperTranscriber(
 		modelCfg.APIKey(),
 		providers.ResolveAPIBase(modelCfg),
 		modelID,
 		protocol,
 	)
 	if tr == nil {
 		return nil
 	}
 	logger.DebugCF("voice", "Creating whisper transcriber", map[string]any{
 		"api_base": tr.apiBase,
 		"has_key":  tr.apiKey != "",
 		"model":    tr.modelID,
 		"provider": tr.providerName,
 	})
 	return tr
 }
 func NewGroqTranscriber(apiKey, modelID string) *WhisperTranscriber {
 	return newWhisperTranscriber(apiKey, "https://api.groq.com/openai/v1", modelID, "groq")
 }
 func newWhisperTranscriber(apiKey, apiBase, modelID, providerName string) *WhisperTranscriber {
 	if modelID == "" {
 		return nil
 	}
 	if providerName == "" {
 		providerName = "whisper"
 	}
 	return &WhisperTranscriber{
 		apiKey:       apiKey,
 		apiBase:      strings.TrimRight(apiBase, "/"),
 		modelID:      modelID,
 		providerName: providerName,
 		httpClient: &http.Client{
 			Timeout: 60 * time.Second,
 		},
 	}
 }
 func (t *WhisperTranscriber) transcriptionURL() string {
 	base := strings.TrimRight(t.apiBase, "/")
 	if strings.HasSuffix(base, "/audio/transcriptions") {
 		return base
 	}
 	return base + "/audio/transcriptions"
 }
 func (t *WhisperTranscriber) TranscribeData(
 	ctx context.Context,
 	data []byte,
 	filename string,
 ) (*TranscriptionResponse, error) {
 	logger.InfoCF("voice", "Starting whisper transcription from memory", map[string]any{
 		"bytes":    len(data),
 		"filename": filename,
 		"model":    t.modelID,
 		"provider": t.providerName,
 	})
 	var requestBody bytes.Buffer
 	writer := multipart.NewWriter(&requestBody)
 	part, err := writer.CreateFormFile("file", filename)
 	if err != nil {
 		logger.ErrorCF("voice", "Failed to create whisper form file", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to create form file: %w", err)
 	}
 	if _, copyErr := io.Copy(part, bytes.NewReader(data)); copyErr != nil {
 		logger.ErrorCF("voice", "Failed to copy whisper file content", map[string]any{"error": copyErr})
 		return nil, fmt.Errorf("failed to copy file content: %w", copyErr)
 	}
 	if err = writer.WriteField("model", t.modelID); err != nil {
 		logger.ErrorCF("voice", "Failed to write whisper model field", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to write model field: %w", err)
 	}
 	if err = writer.WriteField("response_format", "json"); err != nil {
 		logger.ErrorCF("voice", "Failed to write whisper response_format field", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to write response_format field: %w", err)
 	}
 	if err = writer.Close(); err != nil {
 		logger.ErrorCF("voice", "Failed to close whisper multipart writer", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to close multipart writer: %w", err)
 	}
 	return t.doRequest(ctx, &requestBody, writer.FormDataContentType(), int64(len(data)))
 }
 func (t *WhisperTranscriber) Transcribe(ctx context.Context, audioFilePath string) (*TranscriptionResponse, error) {
 	logger.InfoCF("voice", "Starting whisper transcription", map[string]any{
 		"audio_file": audioFilePath,
 		"model":      t.modelID,
 		"provider":   t.providerName,
 	})
 	audioFile, err := os.Open(audioFilePath)
 	if err != nil {
 		return nil, fmt.Errorf("failed to open audio file %s: %w", audioFilePath, err)
 	}
 	defer audioFile.Close()
 	fileInfo, err := audioFile.Stat()
 	if err != nil {
 		return nil, fmt.Errorf("failed to stat audio file %s: %w", audioFilePath, err)
 	}
 	var requestBody bytes.Buffer
 	writer := multipart.NewWriter(&requestBody)
 	part, err := writer.CreateFormFile("file", filepath.Base(audioFilePath))
 	if err != nil {
 		return nil, fmt.Errorf("failed to create form file: %w", err)
 	}
 	if _, copyErr := io.Copy(part, audioFile); copyErr != nil {
 		return nil, fmt.Errorf("failed to copy audio data: %w", copyErr)
 	}
 	if err = writer.WriteField("model", t.modelID); err != nil {
 		return nil, fmt.Errorf("failed to write model field: %w", err)
 	}
 	if err = writer.WriteField("response_format", "json"); err != nil {
 		return nil, fmt.Errorf("failed to write response_format field: %w", err)
 	}
 	if err = writer.Close(); err != nil {
 		return nil, fmt.Errorf("failed to close multipart writer: %w", err)
 	}
 	return t.doRequest(ctx, &requestBody, writer.FormDataContentType(), fileInfo.Size())
 }
 func (t *WhisperTranscriber) doRequest(
 	ctx context.Context,
 	requestBody *bytes.Buffer,
 	contentType string,
 	fileSize int64,
 ) (*TranscriptionResponse, error) {
 	url := t.transcriptionURL()
 	req, err := http.NewRequestWithContext(ctx, "POST", url, requestBody)
 	if err != nil {
 		logger.ErrorCF("voice", "Failed to create whisper request", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to create request: %w", err)
 	}
 	req.Header.Set("Content-Type", contentType)
 	if t.apiKey != "" {
 		req.Header.Set("Authorization", "Bearer "+t.apiKey)
 	}
 	logger.DebugCF("voice", "Sending whisper transcription request", map[string]any{
 		"file_size_bytes":    fileSize,
 		"model":              t.modelID,
 		"provider":           t.providerName,
 		"request_size_bytes": requestBody.Len(),
 		"url":                url,
 	})
 	resp, err := t.httpClient.Do(req)
 	if err != nil {
 		logger.ErrorCF("voice", "Failed to send whisper request", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to send request: %w", err)
 	}
 	defer resp.Body.Close()
 	body, err := io.ReadAll(resp.Body)
 	if err != nil {
 		logger.ErrorCF("voice", "Failed to read whisper response", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to read response: %w", err)
 	}
 	if resp.StatusCode != http.StatusOK {
 		logger.ErrorCF("voice", "Whisper API error", map[string]any{
 			"provider":    t.providerName,
 			"response":    string(body),
 			"status_code": resp.StatusCode,
 		})
 		return nil, fmt.Errorf("API error (status %d): %s", resp.StatusCode, string(body))
 	}
 	var result TranscriptionResponse
 	if err := json.Unmarshal(body, &result); err != nil {
 		logger.ErrorCF("voice", "Failed to unmarshal whisper response", map[string]any{"error": err})
 		return nil, fmt.Errorf("failed to unmarshal response: %w", err)
 	}
 	logger.InfoCF("voice", "Whisper transcription completed successfully", map[string]any{
 		"duration_seconds":      result.Duration,
 		"language":              result.Language,
 		"provider":              t.providerName,
 		"text_length":           len(result.Text),
 		"transcription_preview": utils.Truncate(result.Text, 50),
 	})
 	return &result, nil
 }
 func (t *WhisperTranscriber) Name() string {
 	return "whisper"
 }
--- a/pkg/audio/asr/whisper_transcriber_test.go
+++ b/pkg/audio/asr/whisper_transcriber_test.go
@ -0,0 +1,102 @@
 package asr
 import (
 	"context"
 	"encoding/json"
 	"io"
 	"net/http"
 	"net/http/httptest"
 	"testing"
 	"github.com/sipeed/picoclaw/pkg/config"
 )
 func TestWhisperTranscriberTranscribeDataUsesConfiguredModel(t *testing.T) {
 	var gotModel string
 	var gotPath string
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		gotPath = r.URL.Path
 		if got := r.Header.Get("Authorization"); got != "Bearer sk-openai-test" {
 			t.Errorf("Authorization = %q, want %q", got, "Bearer sk-openai-test")
 		}
 		reader, err := r.MultipartReader()
 		if err != nil {
 			t.Fatalf("MultipartReader() error: %v", err)
 		}
 		for {
 			part, err := reader.NextPart()
 			if err == io.EOF {
 				break
 			}
 			if err != nil {
 				t.Fatalf("NextPart() error: %v", err)
 			}
 			data, err := io.ReadAll(part)
 			if err != nil {
 				t.Fatalf("ReadAll() error: %v", err)
 			}
 			if part.FormName() == "model" {
 				gotModel = string(data)
 			}
 		}
 		w.Header().Set("Content-Type", "application/json")
 		if err := json.NewEncoder(w).Encode(TranscriptionResponse{Text: "hello from whisper"}); err != nil {
 			t.Fatalf("Encode() error: %v", err)
 		}
 	}))
 	defer server.Close()
 	tr := NewWhisperTranscriber(&config.ModelConfig{
 		Model:   "openai/whisper-1",
 		APIBase: server.URL,
 		APIKeys: config.SimpleSecureStrings("sk-openai-test"),
 	})
 	tr.httpClient = server.Client()
 	resp, err := tr.TranscribeData(context.Background(), []byte("audio"), "clip.ogg")
 	if err != nil {
 		t.Fatalf("TranscribeData() error: %v", err)
 	}
 	if resp.Text != "hello from whisper" {
 		t.Errorf("Text = %q, want %q", resp.Text, "hello from whisper")
 	}
 	if gotModel != "whisper-1" {
 		t.Errorf("model field = %q, want %q", gotModel, "whisper-1")
 	}
 	if gotPath != "/audio/transcriptions" {
 		t.Errorf("path = %q, want %q", gotPath, "/audio/transcriptions")
 	}
 }
 func TestWhisperTranscriberUsesEndpointAPIBaseWithoutDoubleAppend(t *testing.T) {
 	var gotPath string
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		gotPath = r.URL.Path
 		w.Header().Set("Content-Type", "application/json")
 		if err := json.NewEncoder(w).Encode(TranscriptionResponse{Text: "ok"}); err != nil {
 			t.Fatalf("Encode() error: %v", err)
 		}
 	}))
 	defer server.Close()
 	tr := NewWhisperTranscriber(&config.ModelConfig{
 		Model:   "groq/whisper-large-v3",
 		APIBase: server.URL + "/audio/transcriptions",
 		APIKeys: config.SimpleSecureStrings("sk-groq-test"),
 	})
 	tr.httpClient = server.Client()
 	if _, err := tr.TranscribeData(context.Background(), []byte("audio"), "clip.ogg"); err != nil {
 		t.Fatalf("TranscribeData() error: %v", err)
 	}
 	if gotPath != "/audio/transcriptions" {
 		t.Errorf("path = %q, want %q", gotPath, "/audio/transcriptions")
 	}
 }
--- a/pkg/audio/ogg.go
+++ b/pkg/audio/ogg.go
@ -0,0 +1,57 @@
 package audio
 import (
 	"bytes"
 	"fmt"
 	"io"
 )
 // DecodeOggOpus reads an Ogg format stream and extracts individual Opus payloads.
 // It calls onFrame for every complete Opus frame found in the stream.
 func DecodeOggOpus(r io.Reader, onFrame func([]byte) error) error {
 	var packet bytes.Buffer
 	header := make([]byte, 27)
 	segment := make([]byte, 255)
 	for {
 		if _, err := io.ReadFull(r, header); err != nil {
 			if err == io.EOF || err == io.ErrUnexpectedEOF {
 				return nil
 			}
 			return fmt.Errorf("failed to read ogg header: %w", err)
 		}
 		if string(header[:4]) != "OggS" {
 			return fmt.Errorf("invalid ogg magic string")
 		}
 		pageSegments := int(header[26])
 		segmentTable := make([]byte, pageSegments)
 		if _, err := io.ReadFull(r, segmentTable); err != nil {
 			return fmt.Errorf("failed to read segment table: %w", err)
 		}
 		for _, lacing := range segmentTable {
 			if _, err := io.ReadFull(r, segment[:lacing]); err != nil {
 				return fmt.Errorf("failed to read segment data: %w", err)
 			}
 			packet.Write(segment[:lacing])
 			// If lacing is less than 255, the packet is complete
 			if lacing < 255 {
 				if packet.Len() > 0 {
 					packetBytes := packet.Bytes()
 					// Ignore Ogg Opus headers
 					if !bytes.HasPrefix(packetBytes, []byte("OpusHead")) &&
 						!bytes.HasPrefix(packetBytes, []byte("OpusTags")) {
 						if err := onFrame(packetBytes); err != nil {
 							return err
 						}
 					}
 					// Start new packet
 					packet.Reset()
 				}
 			}
 		}
 	}
 }
--- a/pkg/audio/ogg_test.go
+++ b/pkg/audio/ogg_test.go
@ -0,0 +1,146 @@
 package audio
 import (
 	"bytes"
 	"reflect"
 	"strings"
 	"testing"
 )
 // buildOggPage helper creates an Ogg page for testing.
 // lacingVals specifies the segment table, and data is the payload.
 func buildOggPage(lacingVals []byte, data []byte) []byte {
 	var buf bytes.Buffer
 	// 27-byte Ogg header
 	header := make([]byte, 27)
 	copy(header[:4], "OggS")
 	header[5] = 0 // type flag
 	// For testing, we only care about OggS magic and page_segments (byte 26)
 	header[26] = byte(len(lacingVals))
 	buf.Write(header)
 	buf.Write(lacingVals)
 	buf.Write(data)
 	return buf.Bytes()
 }
 func TestDecodeOggOpus_ValidParsing(t *testing.T) {
 	var b bytes.Buffer
 	// Packet 1: Single segment, length 50
 	pkt1 := bytes.Repeat([]byte{1}, 50)
 	// Packet 2: Multi-segment (255 + 10 = 265 bytes)
 	pkt2Part1 := bytes.Repeat([]byte{2}, 255)
 	pkt2Part2 := bytes.Repeat([]byte{2}, 10)
 	// Packet 3: Continued across pages. Page 1 gets 255, Page 2 gets 20. Total 275 bytes.
 	pkt3Part1 := bytes.Repeat([]byte{3}, 255)
 	pkt3Part2 := bytes.Repeat([]byte{3}, 20)
 	// Page 1: OpusHead (skip), OpusTags (skip), pkt1, pkt2, pkt3Part1
 	page1Lacing := []byte{8, 8, 50, 255, 10, 255}
 	page1Data := bytes.Join([][]byte{
 		[]byte("OpusHead"),
 		[]byte("OpusTags"),
 		pkt1,
 		pkt2Part1, pkt2Part2,
 		pkt3Part1,
 	}, nil)
 	// Page 2: pkt3Part2, pkt4 (length 10)
 	pkt4 := bytes.Repeat([]byte{4}, 10)
 	page2Lacing := []byte{20, 10}
 	page2Data := bytes.Join([][]byte{
 		pkt3Part2,
 		pkt4,
 	}, nil)
 	b.Write(buildOggPage(page1Lacing, page1Data))
 	b.Write(buildOggPage(page2Lacing, page2Data))
 	var frames [][]byte
 	err := DecodeOggOpus(&b, func(frame []byte) error {
 		// making a copy to store as DecodeOggOpus might reuse backing array
 		cpy := make([]byte, len(frame))
 		copy(cpy, frame)
 		frames = append(frames, cpy)
 		return nil
 	})
 	if err != nil {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	expectedFrames := [][]byte{
 		pkt1,
 		append(pkt2Part1, pkt2Part2...),
 		append(pkt3Part1, pkt3Part2...),
 		pkt4,
 	}
 	if len(frames) != len(expectedFrames) {
 		t.Fatalf("expected %d frames, got %d", len(expectedFrames), len(frames))
 	}
 	for i, expected := range expectedFrames {
 		if !reflect.DeepEqual(frames[i], expected) {
 			t.Errorf("frame %d mismatch:\nexp: %v\ngot: %v", i, expected, frames[i])
 		}
 	}
 }
 func TestDecodeOggOpus_Errors(t *testing.T) {
 	tests := []struct {
 		name        string
 		data        []byte
 		errContains string
 	}{
 		{
 			name: "invalid magic string",
 			data: []byte(
 				"OggX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
 			),
 			errContains: "invalid ogg magic string",
 		},
 		{
 			name:        "short header",
 			data:        []byte("Ogg"),
 			errContains: "failed to read ogg header",
 		},
 		{
 			name: "eof in segment table",
 			data: func() []byte {
 				h := make([]byte, 27)
 				copy(h, "OggS")
 				h[26] = 5 // expects 5 bytes of segment table, but none provided
 				return h
 			}(),
 			errContains: "failed to read segment table",
 		},
 		{
 			name: "eof in segment data",
 			data: func() []byte {
 				h := make([]byte, 27, 28)
 				copy(h, "OggS")
 				h[26] = 1
 				return append(h, 100) // expects 100 bytes of data, but none provided
 			}(),
 			errContains: "failed to read segment data",
 		},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
 			err := DecodeOggOpus(bytes.NewReader(tt.data), func(b []byte) error { return nil })
 			if tt.name == "short header" {
 				if err != nil {
 					t.Errorf("expected no error (io.EOF/ErrUnexpectedEOF swallowed), got %v", err)
 				}
 				return
 			}
 			if err == nil {
 				t.Fatalf("expected error containing %q, got nil", tt.errContains)
 			}
 			if !strings.Contains(err.Error(), tt.errContains) {
 				t.Errorf("expected error to contain %q, got: %q", tt.errContains, err.Error())
 			}
 		})
 	}
 }
--- a/pkg/audio/sentence.go
+++ b/pkg/audio/sentence.go
@ -0,0 +1,96 @@
 package audio
 import (
 	"strings"
 	"unicode"
 )
 // SplitSentences splits text into sentence-sized chunks suitable for TTS synthesis.
 // It splits on sentence-ending punctuation (.!?\n, as well as CJK 。, ！, ？) while avoiding false splits
 // on decimal numbers. Very short fragments are merged with
 // the next sentence to prevent choppy playback.
 func SplitSentences(text string) []string {
 	if text == "" {
 		return nil
 	}
 	var sentences []string
 	var current strings.Builder
 	runes := []rune(text)
 	for i := 0; i < len(runes); i++ {
 		r := runes[i]
 		if r == '\n' {
 			s := strings.TrimSpace(current.String())
 			if s != "" {
 				sentences = append(sentences, s)
 			}
 			current.Reset()
 			continue
 		}
 		current.WriteRune(r)
 		if r == '.' || r == '!' || r == '?' || r == '。' || r == '！' || r == '？' {
 			// Avoid splitting on decimal numbers like "3.14"
 			if r == '.' && i > 0 && unicode.IsDigit(runes[i-1]) &&
 				i+1 < len(runes) && unicode.IsDigit(runes[i+1]) {
 				continue
 			}
 			// Consume contiguous punctuation clusters (e.g., "..." or "?!").
 			for i+1 < len(runes) && (runes[i+1] == '.' || runes[i+1] == '!' || runes[i+1] == '?' || runes[i+1] == '。' || runes[i+1] == '！' || runes[i+1] == '？') {
 				i++
 				current.WriteRune(runes[i])
 			}
 			s := strings.TrimSpace(current.String())
 			if s != "" {
 				sentences = append(sentences, s)
 			}
 			current.Reset()
 		}
 	}
 	// Flush remaining text
 	if s := strings.TrimSpace(current.String()); s != "" {
 		sentences = append(sentences, s)
 	}
 	// Merge very short fragments with the next sentence
 	return mergeShorties(sentences, 15)
 }
 // mergeShorties merges sentences shorter than minLen characters with the following sentence.
 func mergeShorties(sentences []string, minLen int) []string {
 	if len(sentences) <= 1 {
 		return sentences
 	}
 	var merged []string
 	var buf string
 	for _, s := range sentences {
 		if buf != "" {
 			buf += " " + s
 			if len([]rune(buf)) >= minLen {
 				merged = append(merged, buf)
 				buf = ""
 			}
 		} else if len([]rune(s)) < minLen {
 			buf = s
 		} else {
 			merged = append(merged, s)
 		}
 	}
 	if buf != "" {
 		if len(merged) > 0 {
 			merged[len(merged)-1] += " " + buf
 		} else {
 			merged = append(merged, buf)
 		}
 	}
 	return merged
 }
--- a/pkg/audio/sentence_test.go
+++ b/pkg/audio/sentence_test.go
@ -0,0 +1,69 @@
 package audio
 import (
 	"reflect"
 	"testing"
 )
 func TestSplitSentences(t *testing.T) {
 	tests := []struct {
 		name string
 		in   string
 		want []string
 	}{
 		{
 			name: "empty input",
 			in:   "",
 			want: nil,
 		},
 		{
 			name: "single sentence",
 			in:   "Hello world.",
 			want: []string{"Hello world."},
 		},
 		{
 			name: "decimal numbers do not split",
 			in:   "The value is 3.14 today. Keep watching closely.",
 			want: []string{"The value is 3.14 today.", "Keep watching closely."},
 		},
 		{
 			name: "newline boundary",
 			in:   "This is line number one\nThis is line number two",
 			want: []string{"This is line number one", "This is line number two"},
 		},
 		{
 			name: "newline with surrounding spaces",
 			in:   "  This is the first line   \n   This is the second line   ",
 			want: []string{"This is the first line", "This is the second line"},
 		},
 		{
 			name: "trailing punctuation consumed",
 			in:   "Please wait a moment... What on earth?! That is perfectly fine.",
 			want: []string{"Please wait a moment...", "What on earth?!", "That is perfectly fine."},
 		},
 		{
 			name: "short leading fragment merges with next",
 			in:   "Hi. This is a longer sentence.",
 			want: []string{"Hi. This is a longer sentence."},
 		},
 		{
 			name: "consecutive short fragments keep merging",
 			in:   "A. B. C. This is the real sentence.",
 			want: []string{"A. B. C. This is the real sentence."},
 		},
 		{
 			name: "short trailing fragment merges back",
 			in:   "This sentence is long enough. End.",
 			want: []string{"This sentence is long enough. End."},
 		},
 	}
 	for _, tc := range tests {
 		t.Run(tc.name, func(t *testing.T) {
 			got := SplitSentences(tc.in)
 			if !reflect.DeepEqual(got, tc.want) {
 				t.Fatalf("SplitSentences(%q) = %#v, want %#v", tc.in, got, tc.want)
 			}
 		})
 	}
 }
--- a/pkg/audio/tts/README.md
+++ b/pkg/audio/tts/README.md
@ -0,0 +1,137 @@
 # TTS (Text-to-Speech)
 This package handles speech synthesis for PicoClaw.
 If you are new to TTS setup, the simplest workflow is:
 1. Add a TTS-capable entry to `model_list`.
 2. Point `voice.tts_model_name` at that entry.
 3. Put the API key in `.security.yml`.
 ## Quick Recommendation
 For most users, these are the best starting points:
 | Provider | Why start here |
 | --- | --- |
 | [OpenAI](https://platform.openai.com/docs/guides/text-to-speech) | Best-supported path in PicoClaw today. The current TTS implementation is built around the OpenAI-compatible `/audio/speech` API shape, and OpenAI is the safest default. |
 | [Xiaomi MiMo](https://platform.xiaomimimo.com) | A good second option if you want an OpenAI-compatible provider endpoint and are already using MiMo models in the rest of your stack. |
 ## How TTS Configuration Works
 PicoClaw does not keep TTS API keys inside `voice`.
 Instead:
 - `voice.tts_model_name` selects a named entry from `model_list`.
 - That `model_list` entry provides the provider, model ID, API base, and proxy settings.
 - `.security.yml` stores the API key for the same named model entry.
 This is the recommended and supported configuration pattern.
 ## Recommended Setup
 ### Option A: OpenAI
 `config.json`
 ```json
 {
  "voice": {
    "tts_model_name": "openai-tts"
  },
  "model_list": [
    {
      "model_name": "openai-tts",
      "model": "openai/tts-1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  openai-tts:
    api_keys:
      - "sk-openai-your-key"
 ```
 ### Option B: Xiaomi MiMo
 `config.json`
 ```json
 {
  "voice": {
    "tts_model_name": "mimo-tts"
  },
  "model_list": [
    {
      "model_name": "mimo-tts",
      "model": "mimo/mimo-v2-tts"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  mimo-tts:
    api_keys:
      - "your-mimo-key"
 ```
 If you use a custom MiMo endpoint, you can also set `api_base` explicitly. Otherwise PicoClaw will use the provider default.
 ## What PicoClaw Sends Today
 The current TTS runtime uses an OpenAI-compatible speech request with these defaults:
 - Endpoint: `/audio/speech`
 - Response format: `opus`
 - Voice: `alloy`
 - Model: taken from the selected `model_list` entry
 That means:
 - `openai/tts-1` works naturally.
 - Other OpenAI-compatible providers can work if they accept the same request format.
 - PicoClaw currently does not expose a user-facing config field for changing the TTS voice from `alloy`.
 ## How PicoClaw Chooses a TTS Provider
 `DetectTTS` resolves TTS in this order:
 1. **Preferred path**: resolve `voice.tts_model_name` against `model_list`.
 2. If a matching model entry exists and has an API key, PicoClaw creates an OpenAI-compatible TTS provider using that model's settings.
 3. **Fallback path**: if `voice.tts_model_name` is not set or cannot be resolved, PicoClaw scans `model_list` for the first entry whose model string contains `tts` and has an API key.
 Fallback scanning exists for compatibility. New configs should set `voice.tts_model_name` explicitly.
 ## Notes About API Base Handling
 PicoClaw normalizes the configured base URL for TTS:
 - For OpenAI, a base like `https://api.openai.com` or `https://api.openai.com/v1` becomes `https://api.openai.com/v1/audio/speech`.
 - For other OpenAI-compatible providers, PicoClaw preserves the configured base path and ensures it ends with `/audio/speech`.
 - If `api_base` is omitted, PicoClaw uses the provider default base when the model prefix is known.
 ## Common Mistakes
 - Setting `voice.tts_model_name` to a name that does not exist in `model_list`.
 - Adding a TTS model but forgetting to put its API key in `.security.yml`.
 - Assuming PicoClaw will automatically use provider-specific custom voices.
 - Using a provider endpoint that is not compatible with the OpenAI `/audio/speech` request format.
 ## Minimal Checklist
 Before testing `send_tts`, make sure:
 - `voice.tts_model_name` matches a `model_list[].model_name`.
 - The matching `.security.yml` entry contains a valid API key.
 - The chosen provider supports an OpenAI-compatible speech synthesis endpoint.
 - Your selected model is actually a TTS-capable model.
--- a/pkg/audio/tts/README_zh.md
+++ b/pkg/audio/tts/README_zh.md
@ -0,0 +1,137 @@
 # TTS（文本转语音）
 这个目录负责 PicoClaw 的语音合成能力。
 如果你是第一次配置 TTS，可以参照下面这个流程：
 1. 在 `model_list` 里添加一个支持 TTS 的模型。
 2. 用 `voice.tts_model_name` 指向这个模型。
 3. 在 `.security.yml` 里配置对应的 API Key。
 ## 快速推荐
 对于大多数用户，建议优先从下面两种开始：
 | 提供商 | 推荐理由 |
 | --- | --- |
 | [OpenAI](https://platform.openai.com/docs/guides/text-to-speech) | 这是 PicoClaw 当前最稳定、最直接的 TTS 路径。当前实现就是围绕 OpenAI 兼容的 `/audio/speech` 接口格式构建的，所以 OpenAI 是最稳妥的默认选择。 |
 | [Xiaomi MiMo](https://platform.xiaomimimo.com) | 由于响应速度和语音音色对于中国用户更友好，MiMo 是一个不错的第二选择。 |
 ## TTS 配置是如何工作的
 PicoClaw 不会把 TTS 的 API Key 放在 `voice` 配置里。
 推荐方式是：
 - `voice.tts_model_name` 用来选择 `model_list` 里的某个命名模型。
 - 对应的 `model_list` 条目提供真实的 provider、model ID、`api_base` 和代理配置。
 - `.security.yml` 负责保存该模型条目的 API Key。
 这是当前推荐且受支持的配置方式。
 ## 推荐配置方式
 ### 方案 A：OpenAI
 `config.json`
 ```json
 {
  "voice": {
    "tts_model_name": "openai-tts"
  },
  "model_list": [
    {
      "model_name": "openai-tts",
      "model": "openai/tts-1"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  openai-tts:
    api_keys:
      - "sk-openai-your-key"
 ```
 ### 方案 B：Xiaomi MiMo
 `config.json`
 ```json
 {
  "voice": {
    "tts_model_name": "mimo-tts"
  },
  "model_list": [
    {
      "model_name": "mimo-tts",
      "model": "mimo/mimo-v2-tts"
    }
  ]
 }
 ```
 `.security.yml`
 ```yaml
 model_list:
  mimo-tts:
    api_keys:
      - "your-mimo-key"
 ```
 如果你使用自定义的 MiMo 接口地址，也可以显式设置 `api_base`。如果不设置，PicoClaw 会自动使用该 provider 的默认地址。
 ## PicoClaw 当前实际发送的 TTS 请求
 当前 TTS 运行时使用的是 OpenAI 兼容的语音合成请求，并带有以下默认值：
 - Endpoint：`/audio/speech`
 - 返回格式：`opus`
 - Voice：`alloy`
 - Model：来自你所选中的 `model_list` 条目
 这意味着：
 - `openai/tts-1` 可以自然工作。
 - 其他 OpenAI 兼容 provider 也可能可用，前提是它们接受相同的请求格式。
 - PicoClaw 目前还没有对用户暴露一个配置项来修改 TTS voice，当前固定为 `alloy`。
 ## PicoClaw 如何选择 TTS Provider
 `DetectTTS` 会按下面顺序选择 TTS：
 1. **首选路径**：根据 `voice.tts_model_name` 在 `model_list` 中找到对应模型。
 2. 如果找到了匹配条目，并且它有 API Key，PicoClaw 就会使用这个模型条目的配置创建一个 OpenAI 兼容的 TTS provider。
 3. **回退路径**：如果没有设置 `voice.tts_model_name`，或者该名字无法解析，PicoClaw 会扫描 `model_list`，选中第一个模型字符串里包含 `tts` 且带有 API Key 的条目。
 回退扫描只是为了兼容旧行为。新配置建议始终显式设置 `voice.tts_model_name`。
 ## 关于 API Base 的处理方式
 PicoClaw 会对 TTS 的 `api_base` 做规范化处理：
 - 对 OpenAI 来说，像 `https://api.openai.com` 或 `https://api.openai.com/v1` 这样的地址，会自动变成 `https://api.openai.com/v1/audio/speech`。
 - 对其他 OpenAI 兼容 provider，PicoClaw 会尽量保留你提供的基础路径，只确保它最终以 `/audio/speech` 结尾。
 - 如果没有设置 `api_base`，并且模型前缀是已知 provider，PicoClaw 会自动使用该 provider 的默认地址。
 ## 常见错误
 - `voice.tts_model_name` 指向了一个不存在的 `model_list` 名称。
 - 在 `model_list` 里定义了 TTS 模型，但忘了在 `.security.yml` 中配置对应 API Key。
 - 误以为 PicoClaw 会自动支持 provider 自定义 voice 参数。
 - 使用了不兼容 OpenAI `/audio/speech` 请求格式的接口地址。
 ## 最小检查清单
 在测试 `send_tts` 之前，请确认：
 - `voice.tts_model_name` 能正确匹配某个 `model_list[].model_name`。
 - `.security.yml` 中对应条目已经配置了有效 API Key。
 - 你所选的 provider 支持 OpenAI 兼容的语音合成接口。
 - 你选择的模型本身确实支持 TTS。
--- a/pkg/audio/tts/mimo_tts.go
+++ b/pkg/audio/tts/mimo_tts.go
@ -0,0 +1,162 @@
 package tts
 import (
 	"bytes"
 	"context"
 	"encoding/base64"
 	"encoding/json"
 	"fmt"
 	"io"
 	"net/http"
 	"net/url"
 	"strings"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/logger"
 )
 type MimoTTSProvider struct {
 	apiKey     string
 	apiBase    string
 	voice      string
 	format     string
 	model      string
 	httpClient *http.Client
 }
 func NewMimoTTSProvider(apiKey string, apiBase string, model string, proxyURL string) *MimoTTSProvider {
 	if apiBase == "" {
 		apiBase = "https://api.xiaomimimo.com/v1/chat/completions"
 	} else {
 		if u, err := url.Parse(apiBase); err == nil && u.Scheme != "" && u.Host != "" {
 			path := u.Path
 			if u.Host == "api.xiaomimimo.com" {
 				if path == "" || path == "/" || path == "/v1" || path == "/v1/" {
 					path = "/v1/chat/completions"
 				} else {
 					if !strings.HasPrefix(path, "/") {
 						path = "/" + path
 					}
 					if !strings.HasPrefix(path, "/v1/") {
 						path = "/v1" + strings.TrimSuffix(path, "/")
 					}
 					if !strings.HasSuffix(path, "/chat/completions") {
 						path = strings.TrimSuffix(path, "/") + "/chat/completions"
 					}
 				}
 			} else {
 				if !strings.HasSuffix(path, "/chat/completions") {
 					path = strings.TrimSuffix(path, "/") + "/chat/completions"
 				}
 			}
 			u.Path = path
 			apiBase = u.String()
 		} else {
 			if apiBase == "https://api.xiaomimimo.com/v1" {
 				apiBase = "https://api.xiaomimimo.com/v1/chat/completions"
 			} else if !strings.HasSuffix(apiBase, "/chat/completions") {
 				apiBase = strings.TrimSuffix(apiBase, "/") + "/chat/completions"
 			}
 		}
 	}
 	model = strings.TrimSpace(model)
 	if model == "" {
 		model = "mimo-v2-tts"
 	}
 	client := &http.Client{Timeout: 60 * time.Second}
 	if proxyURL != "" {
 		if pURL, err := url.Parse(proxyURL); err == nil {
 			client.Transport = &http.Transport{Proxy: http.ProxyURL(pURL)}
 		} else {
 			logger.WarnF(
 				"NewMimoTTSProvider: invalid proxy URL; proceeding without proxy",
 				map[string]any{"proxyURL": proxyURL, "error": err},
 			)
 		}
 	}
 	return &MimoTTSProvider{
 		apiKey:     apiKey,
 		apiBase:    apiBase,
 		voice:      "default_zh", // mimo_default now seems to be an alias for default_en, which is not working for Chinese TTS. default_zh seems to work fine with both English and Chinese, and is likely the intended default for TTS.
 		format:     "mp3",
 		model:      model,
 		httpClient: client,
 	}
 }
 func (t *MimoTTSProvider) Name() string {
 	return "mimo-tts"
 }
 func (t *MimoTTSProvider) Synthesize(ctx context.Context, text string) (io.ReadCloser, error) {
 	logger.DebugCF("voice-tts", "Starting TTS synthesis", map[string]any{"text_len": len(text), "provider": t.Name()})
 	reqBody := map[string]any{
 		"model": t.model,
 		"messages": []map[string]string{
 			{"role": "assistant", "content": text},
 		},
 		"audio": map[string]string{
 			"format": t.format,
 			"voice":  t.voice,
 		},
 		"stream": false,
 	}
 	jsonData, err := json.Marshal(reqBody)
 	if err != nil {
 		return nil, fmt.Errorf("failed to marshal request: %w", err)
 	}
 	req, err := http.NewRequestWithContext(ctx, "POST", t.apiBase, bytes.NewReader(jsonData))
 	if err != nil {
 		return nil, fmt.Errorf("failed to create request: %w", err)
 	}
 	req.Header.Set("Content-Type", "application/json")
 	req.Header.Set("Api-Key", t.apiKey)
 	resp, err := t.httpClient.Do(req)
 	if err != nil {
 		return nil, fmt.Errorf("failed to send request: %w", err)
 	}
 	defer resp.Body.Close()
 	body, err := io.ReadAll(resp.Body)
 	if err != nil {
 		return nil, fmt.Errorf("failed to read response: %w", err)
 	}
 	if resp.StatusCode != http.StatusOK {
 		return nil, fmt.Errorf("API error (status %d): %s", resp.StatusCode, string(body))
 	}
 	var payload struct {
 		Choices []struct {
 			Message struct {
 				Audio struct {
 					Data string `json:"data"`
 				} `json:"audio"`
 			} `json:"message"`
 		} `json:"choices"`
 	}
 	err = json.Unmarshal(body, &payload)
 	if err != nil {
 		return nil, fmt.Errorf("failed to decode response: %w", err)
 	}
 	if len(payload.Choices) == 0 || payload.Choices[0].Message.Audio.Data == "" {
 		return nil, fmt.Errorf("invalid TTS response: missing audio data")
 	}
 	audioBytes, err := base64.StdEncoding.DecodeString(payload.Choices[0].Message.Audio.Data)
 	if err != nil {
 		return nil, fmt.Errorf("failed to decode audio data: %w", err)
 	}
 	return io.NopCloser(bytes.NewReader(audioBytes)), nil
 }
--- a/pkg/audio/tts/openai_tts.go
+++ b/pkg/audio/tts/openai_tts.go
@ -0,0 +1,126 @@
 package tts
 import (
 	"bytes"
 	"context"
 	"encoding/json"
 	"fmt"
 	"io"
 	"net/http"
 	"net/url"
 	"strings"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/logger"
 	"github.com/sipeed/picoclaw/pkg/providers/common"
 )
 type OpenAITTSProvider struct {
 	apiKey     string
 	apiBase    string
 	voice      string
 	model      string
 	httpClient *http.Client
 }
 func NewOpenAITTSProvider(apiKey string, apiBase string, proxyURL string, model string) *OpenAITTSProvider {
 	// Normalize apiBase to avoid malformed endpoints like
 	// "https://api.openai.com/audio/speech" when "/v1" is required.
 	if apiBase == "" {
 		apiBase = "https://api.openai.com/v1/audio/speech"
 	} else {
 		if u, err := url.Parse(apiBase); err == nil && u.Scheme != "" && u.Host != "" {
 			path := u.Path
 			if u.Host == "api.openai.com" {
 				// For the official OpenAI host, ensure exactly one /v1 prefix and
 				// that the path ends with /audio/speech.
 				if path == "" || path == "/" || path == "/v1" {
 					path = "/v1/audio/speech"
 				} else {
 					if !strings.HasPrefix(path, "/") {
 						path = "/" + path
 					}
 					if !strings.HasPrefix(path, "/v1/") {
 						path = "/v1" + strings.TrimSuffix(path, "/")
 					}
 					if !strings.HasSuffix(path, "/audio/speech") {
 						path = strings.TrimSuffix(path, "/") + "/audio/speech"
 					}
 				}
 			} else {
 				// For non-OpenAI hosts (e.g., proxies), preserve the existing base
 				// path and only ensure it ends with /audio/speech.
 				if !strings.HasSuffix(path, "/audio/speech") {
 					path = strings.TrimSuffix(path, "/") + "/audio/speech"
 				}
 			}
 			u.Path = path
 			apiBase = u.String()
 		} else {
 			// Fallback to the previous string-based behavior if parsing fails.
 			if apiBase == "https://api.openai.com/v1" {
 				apiBase = "https://api.openai.com/v1/audio/speech"
 			} else if !strings.HasSuffix(apiBase, "/audio/speech") {
 				// Just in case they provide openrouter base or standard base
 				apiBase = strings.TrimSuffix(apiBase, "/") + "/audio/speech"
 			}
 		}
 	}
 	client := common.NewHTTPClient(proxyURL)
 	client.Timeout = 60 * time.Second
 	model = strings.TrimSpace(model)
 	if model == "" {
 		model = "tts-1"
 	}
 	return &OpenAITTSProvider{
 		apiKey:     apiKey,
 		apiBase:    apiBase,
 		voice:      "alloy",
 		model:      model,
 		httpClient: client,
 	}
 }
 func (t *OpenAITTSProvider) Name() string {
 	return "openai-tts"
 }
 func (t *OpenAITTSProvider) Synthesize(ctx context.Context, text string) (io.ReadCloser, error) {
 	logger.DebugCF("voice-tts", "Starting TTS synthesis", map[string]any{"text_len": len(text)})
 	reqBody := map[string]any{
 		"model":           t.model,
 		"input":           text,
 		"voice":           t.voice,
 		"response_format": "opus",
 	}
 	jsonData, err := json.Marshal(reqBody)
 	if err != nil {
 		return nil, fmt.Errorf("failed to marshal request: %w", err)
 	}
 	req, err := http.NewRequestWithContext(ctx, "POST", t.apiBase, bytes.NewReader(jsonData))
 	if err != nil {
 		return nil, fmt.Errorf("failed to create request: %w", err)
 	}
 	req.Header.Set("Content-Type", "application/json")
 	req.Header.Set("Authorization", "Bearer "+t.apiKey)
 	resp, err := t.httpClient.Do(req)
 	if err != nil {
 		return nil, fmt.Errorf("failed to send request: %w", err)
 	}
 	if resp.StatusCode != http.StatusOK {
 		defer resp.Body.Close()
 		body, _ := io.ReadAll(resp.Body)
 		return nil, fmt.Errorf("API error (status %d): %s", resp.StatusCode, string(body))
 	}
 	return resp.Body, nil
 }
--- a/pkg/audio/tts/tts.go
+++ b/pkg/audio/tts/tts.go
@ -0,0 +1,151 @@
 package tts
 import (
 	"context"
 	"fmt"
 	"io"
 	"os"
 	"path/filepath"
 	"strings"
 	"time"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/media"
 	"github.com/sipeed/picoclaw/pkg/providers"
 )
 type TTSProvider interface {
 	Name() string
 	Synthesize(ctx context.Context, text string) (io.ReadCloser, error)
 }
 func providerFromModelConfig(mc *config.ModelConfig) TTSProvider {
 	if mc == nil || mc.APIKey() == "" {
 		return nil
 	}
 	protocol, modelID := providers.ExtractProtocol(mc.Model)
 	if modelID == "" {
 		modelID = strings.TrimSpace(mc.Model)
 	}
 	switch protocol {
 	case "mimo":
 		return NewMimoTTSProvider(mc.APIKey(), providers.ResolveAPIBase(mc), modelID, mc.Proxy)
 	default:
 		return NewOpenAITTSProvider(mc.APIKey(), providers.ResolveAPIBase(mc), mc.Proxy, modelID)
 	}
 }
 func DetectTTS(cfg *config.Config) TTSProvider {
 	if cfg == nil {
 		return nil
 	}
 	if modelName := strings.TrimSpace(cfg.Voice.TTSModelName); modelName != "" {
 		if mc, err := cfg.GetModelConfig(modelName); err == nil {
 			if provider := providerFromModelConfig(mc); provider != nil {
 				return provider
 			}
 		}
 	}
 	for _, mc := range cfg.ModelList {
 		if strings.Contains(strings.ToLower(mc.Model), "tts") && mc.APIKey() != "" {
 			if provider := providerFromModelConfig(mc); provider != nil {
 				return provider
 			}
 		}
 	}
 	return nil
 }
 // SynthesizeAndStore synthesizes text to speech and registers it in the media store, returning the media reference.
 func SynthesizeAndStore(
 	ctx context.Context,
 	provider TTSProvider,
 	store media.MediaStore,
 	text string,
 	filename string,
 	channel string,
 	chatID string,
 ) (string, error) {
 	if provider == nil {
 		return "", fmt.Errorf("tts provider is not configured")
 	}
 	if store == nil {
 		return "", fmt.Errorf("media store not configured")
 	}
 	if channel == "" || chatID == "" {
 		return "", fmt.Errorf("no target channel/chat available")
 	}
 	if strings.TrimSpace(text) == "" {
 		return "", fmt.Errorf("text is required")
 	}
 	stream, err := provider.Synthesize(ctx, text)
 	if err != nil {
 		return "", fmt.Errorf("tts synthesize failed: %w", err)
 	}
 	defer stream.Close()
 	err = os.MkdirAll(media.TempDir(), 0o700)
 	if err != nil {
 		return "", fmt.Errorf("failed to create media temp dir: %w", err)
 	}
 	fileExt := ".ogg"
 	contentType := "audio/ogg"
 	if provider.Name() == "mimo-tts" {
 		fileExt = ".mp3"
 		contentType = "audio/mpeg"
 	}
 	file, err := os.CreateTemp(media.TempDir(), "tts-*"+fileExt)
 	if err != nil {
 		return "", fmt.Errorf("failed to create temp file: %w", err)
 	}
 	removeTemp := true
 	defer func() {
 		if removeTemp {
 			_ = os.Remove(file.Name())
 		}
 	}()
 	_, err = io.Copy(file, stream)
 	if err != nil {
 		file.Close()
 		return "", fmt.Errorf("failed to write tts audio: %w", err)
 	}
 	err = file.Close()
 	if err != nil {
 		return "", fmt.Errorf("failed to close tts audio file: %w", err)
 	}
 	filename = strings.TrimSpace(filename)
 	if filename == "" {
 		filename = fmt.Sprintf("tts-%d%s", time.Now().Unix(), fileExt)
 	}
 	ext := strings.ToLower(filepath.Ext(filename))
 	if ext == "" {
 		filename += fileExt
 	} else if ext != fileExt {
 		filename = strings.TrimSuffix(filename, filepath.Ext(filename)) + fileExt
 	}
 	scope := fmt.Sprintf("tool:send_tts:%s:%s:%d", channel, chatID, time.Now().UnixNano())
 	ref, err := store.Store(file.Name(), media.MediaMeta{
 		Filename:    filename,
 		ContentType: contentType,
 		Source:      "tool:send_tts",
 	}, scope)
 	if err != nil {
 		return "", fmt.Errorf("failed to register audio: %w", err)
 	}
 	removeTemp = false
 	return ref, nil
 }
--- a/pkg/audio/tts/tts_test.go
+++ b/pkg/audio/tts/tts_test.go
@ -0,0 +1,247 @@
 package tts
 import (
 	"context"
 	"encoding/json"
 	"io"
 	"net/http"
 	"net/http/httptest"
 	"path/filepath"
 	"strings"
 	"testing"
 	"github.com/sipeed/picoclaw/pkg/config"
 	"github.com/sipeed/picoclaw/pkg/media"
 )
 func TestNewOpenAITTSProvider_APIBaseNormalization(t *testing.T) {
 	t.Parallel()
 	cases := []struct {
 		name   string
 		input  string
 		expect string
 	}{
 		{
 			name:   "empty base",
 			input:  "",
 			expect: "https://api.openai.com/v1/audio/speech",
 		},
 		{
 			name:   "official host no path",
 			input:  "https://api.openai.com",
 			expect: "https://api.openai.com/v1/audio/speech",
 		},
 		{
 			name:   "official host v1",
 			input:  "https://api.openai.com/v1",
 			expect: "https://api.openai.com/v1/audio/speech",
 		},
 		{
 			name:   "official host v1 slash",
 			input:  "https://api.openai.com/v1/",
 			expect: "https://api.openai.com/v1/audio/speech",
 		},
 		{
 			name:   "non-openai host preserves base path",
 			input:  "https://proxy.example.com/base",
 			expect: "https://proxy.example.com/base/audio/speech",
 		},
 	}
 	for _, tc := range cases {
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			provider := NewOpenAITTSProvider("key", tc.input, "", "")
 			if provider.apiBase != tc.expect {
 				t.Fatalf("apiBase mismatch: got %q, want %q", provider.apiBase, tc.expect)
 			}
 		})
 	}
 }
 func TestOpenAITTSProvider_SynthesizeSuccess(t *testing.T) {
 	t.Parallel()
 	var gotPath string
 	var gotAuth string
 	var gotContentType string
 	var gotBody map[string]any
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		gotPath = r.URL.Path
 		gotAuth = r.Header.Get("Authorization")
 		gotContentType = r.Header.Get("Content-Type")
 		bodyBytes, _ := io.ReadAll(r.Body)
 		_ = r.Body.Close()
 		_ = json.Unmarshal(bodyBytes, &gotBody)
 		w.WriteHeader(http.StatusOK)
 		_, _ = w.Write([]byte("audio-bytes"))
 	}))
 	defer server.Close()
 	provider := NewOpenAITTSProvider("k123", server.URL, "", "")
 	stream, err := provider.Synthesize(context.Background(), "hello")
 	if err != nil {
 		t.Fatalf("Synthesize failed: %v", err)
 	}
 	defer stream.Close()
 	data, err := io.ReadAll(stream)
 	if err != nil {
 		t.Fatalf("read stream failed: %v", err)
 	}
 	if gotPath != "/audio/speech" {
 		t.Fatalf("request path mismatch: got %q", gotPath)
 	}
 	if gotAuth != "Bearer k123" {
 		t.Fatalf("authorization mismatch: got %q", gotAuth)
 	}
 	if gotContentType != "application/json" {
 		t.Fatalf("content-type mismatch: got %q", gotContentType)
 	}
 	if gotBody["model"] != "tts-1" || gotBody["voice"] != "alloy" || gotBody["response_format"] != "opus" ||
 		gotBody["input"] != "hello" {
 		bodyJSON, _ := json.Marshal(gotBody)
 		t.Fatalf("request body mismatch: %s", string(bodyJSON))
 	}
 	if string(data) != "audio-bytes" {
 		t.Fatalf("response body mismatch: got %q", string(data))
 	}
 }
 func TestOpenAITTSProvider_SynthesizeNon200(t *testing.T) {
 	t.Parallel()
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		w.WriteHeader(http.StatusInternalServerError)
 		_, _ = w.Write([]byte("nope"))
 	}))
 	defer server.Close()
 	provider := NewOpenAITTSProvider("k123", server.URL, "", "")
 	_, err := provider.Synthesize(context.Background(), "hello")
 	if err == nil {
 		t.Fatal("expected error")
 	}
 	if !strings.Contains(err.Error(), "API error (status 500): nope") {
 		t.Fatalf("unexpected error: %v", err)
 	}
 }
 func TestNewOpenAITTSProvider_UsesConfiguredModel(t *testing.T) {
 	t.Parallel()
 	provider := NewOpenAITTSProvider("key", "https://api.xiaomimimo.com/v1", "", "mimo-v2-tts")
 	if provider.model != "mimo-v2-tts" {
 		t.Fatalf("model mismatch: got %q, want %q", provider.model, "mimo-v2-tts")
 	}
 	if provider.apiBase != "https://api.xiaomimimo.com/v1/audio/speech" {
 		t.Fatalf("apiBase mismatch: got %q", provider.apiBase)
 	}
 }
 func TestDetectTTS_UsesMimoProviderForMimoModels(t *testing.T) {
 	t.Parallel()
 	provider := DetectTTS(&config.Config{
 		Voice: config.VoiceConfig{TTSModelName: "mimo-tts"},
 		ModelList: []*config.ModelConfig{
 			{
 				ModelName: "mimo-tts",
 				Model:     "mimo/mimo-v2-tts",
 				APIKeys:   config.SimpleSecureStrings("sk-mimo"),
 			},
 		},
 	})
 	ttsProvider, ok := provider.(*MimoTTSProvider)
 	if !ok {
 		t.Fatalf("DetectTTS() type = %T, want *MimoTTSProvider", provider)
 	}
 	if ttsProvider.model != "mimo-v2-tts" {
 		t.Fatalf("model mismatch: got %q, want %q", ttsProvider.model, "mimo-v2-tts")
 	}
 	if ttsProvider.apiBase != "https://api.xiaomimimo.com/v1/chat/completions" {
 		t.Fatalf("apiBase mismatch: got %q", ttsProvider.apiBase)
 	}
 }
 type stubTTSProvider struct {
 	name string
 }
 func (s stubTTSProvider) Name() string {
 	return s.name
 }
 func (s stubTTSProvider) Synthesize(ctx context.Context, text string) (io.ReadCloser, error) {
 	return io.NopCloser(strings.NewReader("audio")), nil
 }
 func TestSynthesizeAndStore_UsesOggMetadataByDefault(t *testing.T) {
 	t.Parallel()
 	store := media.NewFileMediaStore()
 	ref, err := SynthesizeAndStore(
 		context.Background(),
 		stubTTSProvider{name: "openai-tts"},
 		store,
 		"hello",
 		"",
 		"discord",
 		"chat123",
 	)
 	if err != nil {
 		t.Fatalf("SynthesizeAndStore failed: %v", err)
 	}
 	path, meta, err := store.ResolveWithMeta(ref)
 	if err != nil {
 		t.Fatalf("ResolveWithMeta failed: %v", err)
 	}
 	if meta.ContentType != "audio/ogg" {
 		t.Fatalf("ContentType = %q, want %q", meta.ContentType, "audio/ogg")
 	}
 	if filepath.Ext(path) != ".ogg" {
 		t.Fatalf("stored file extension = %q, want %q", filepath.Ext(path), ".ogg")
 	}
 	if filepath.Ext(meta.Filename) != ".ogg" {
 		t.Fatalf("filename extension = %q, want %q", filepath.Ext(meta.Filename), ".ogg")
 	}
 }
 func TestSynthesizeAndStore_UsesMp3MetadataForMimo(t *testing.T) {
 	t.Parallel()
 	store := media.NewFileMediaStore()
 	ref, err := SynthesizeAndStore(
 		context.Background(),
 		stubTTSProvider{name: "mimo-tts"},
 		store,
 		"hello",
 		"",
 		"discord",
 		"chat123",
 	)
 	if err != nil {
 		t.Fatalf("SynthesizeAndStore failed: %v", err)
 	}
 	path, meta, err := store.ResolveWithMeta(ref)
 	if err != nil {
 		t.Fatalf("ResolveWithMeta failed: %v", err)
 	}
 	if meta.ContentType != "audio/mpeg" {
 		t.Fatalf("ContentType = %q, want %q", meta.ContentType, "audio/mpeg")
 	}
 	if filepath.Ext(path) != ".mp3" {
 		t.Fatalf("stored file extension = %q, want %q", filepath.Ext(path), ".mp3")
 	}
 	if filepath.Ext(meta.Filename) != ".mp3" {
 		t.Fatalf("filename extension = %q, want %q", filepath.Ext(meta.Filename), ".mp3")
 	}
 }
--- a/pkg/bus/bus.go
+++ b/pkg/bus/bus.go
@ -34,6 +34,8 @@ type MessageBus struct {
 	inbound       chan InboundMessage
 	outbound      chan OutboundMessage
 	outboundMedia chan OutboundMediaMessage
 	audioChunks   chan AudioChunk
 	voiceControls chan VoiceControl
 	closeOnce      sync.Once
 	done           chan struct{}
@ -47,6 +49,8 @@ func NewMessageBus() *MessageBus {
 		inbound:       make(chan InboundMessage, defaultBusBufferSize),
 		outbound:      make(chan OutboundMessage, defaultBusBufferSize),
 		outboundMedia: make(chan OutboundMediaMessage, defaultBusBufferSize),
 		audioChunks:   make(chan AudioChunk, defaultBusBufferSize*4), // Audio chunks need more buffer
 		voiceControls: make(chan VoiceControl, defaultBusBufferSize),
 		done:          make(chan struct{}),
 	}
 }
@ -103,6 +107,22 @@ func (mb *MessageBus) OutboundMediaChan() <-chan OutboundMediaMessage {
 	return mb.outboundMedia
 }
 func (mb *MessageBus) PublishAudioChunk(ctx context.Context, chunk AudioChunk) error {
 	return publish(ctx, mb, mb.audioChunks, chunk)
 }
 func (mb *MessageBus) AudioChunksChan() <-chan AudioChunk {
 	return mb.audioChunks
 }
 func (mb *MessageBus) PublishVoiceControl(ctx context.Context, ctrl VoiceControl) error {
 	return publish(ctx, mb, mb.voiceControls, ctrl)
 }
 func (mb *MessageBus) VoiceControlsChan() <-chan VoiceControl {
 	return mb.voiceControls
 }
 // SetStreamDelegate registers a StreamDelegate (typically the channel Manager).
 func (mb *MessageBus) SetStreamDelegate(d StreamDelegate) {
 	mb.streamDelegate.Store(d)
@ -132,6 +152,8 @@ func (mb *MessageBus) Close() {
 		close(mb.inbound)
 		close(mb.outbound)
 		close(mb.outboundMedia)
 		close(mb.audioChunks)
 		close(mb.voiceControls)
 		// clean up any remaining messages in channels
 		drained := 0
@ -144,6 +166,12 @@ func (mb *MessageBus) Close() {
 		for range mb.outboundMedia {
 			drained++
 		}
 		for range mb.audioChunks {
 			drained++
 		}
 		for range mb.voiceControls {
 			drained++
 		}
 		if drained > 0 {
 			logger.DebugCF("bus", "Drained buffered messages during close", map[string]any{
--- a/pkg/bus/types.go
+++ b/pkg/bus/types.go
@ -34,6 +34,7 @@ type OutboundMessage struct {
 	ChatID           string            `json:"chat_id"`
 	Content          string            `json:"content"`
 	ReplyToMessageID string            `json:"reply_to_message_id,omitempty"`
 	Metadata         map[string]string `json:"metadata,omitempty"`
 }
 // MediaPart describes a single media attachment to send.
@ -51,3 +52,25 @@ type OutboundMediaMessage struct {
 	ChatID  string      `json:"chat_id"`
 	Parts   []MediaPart `json:"parts"`
 }
 // AudioChunk represents a chunk of streaming voice data.
 type AudioChunk struct {
 	SessionID  string `json:"session_id"`
 	SpeakerID  string `json:"speaker_id"` // User ID or SSRC
 	ChatID     string `json:"chat_id"`    // Where to respond
 	Channel    string `json:"channel"`    // Source channel type (e.g. "discord")
 	Sequence   uint64 `json:"sequence"`
 	Timestamp  uint32 `json:"timestamp"`
 	SampleRate int    `json:"sample_rate"`
 	Channels   int    `json:"channels"`
 	Format     string `json:"format"` // "opus", "pcm", etc
 	Data       []byte `json:"data"`
 }
 // VoiceControl represents state or commands for voice sessions.
 type VoiceControl struct {
 	SessionID string `json:"session_id"`
 	ChatID    string `json:"chat_id"`
 	Type      string `json:"type"`   // "state", "command"
 	Action    string `json:"action"` // "idle", "listening", "start", "stop", "leave"
 }
--- a/pkg/channels/README.md
+++ b/pkg/channels/README.md
@ -252,28 +252,28 @@ func (c *TelegramChannel) Stop(ctx context.Context) error {
 **3e. Send method error returns**
 ```go
-// Old code: returns plain error
+// Old code: returned only error
 func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
    if !c.running { return fmt.Errorf("not running") }
    // ...
    if err != nil { return err }
 }
-// New code: must return sentinel errors for Manager to determine retry strategy
+// New code: return delivered message IDs plus sentinel errors
-func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
    if !c.IsRunning() {
-        return channels.ErrNotRunning    // ← Manager will not retry
+        return nil, channels.ErrNotRunning    // ← Manager will not retry
    }
    // ...
    if err != nil {
        // Use ClassifySendError to wrap error based on HTTP status code
-        return channels.ClassifySendError(statusCode, err)
+        return nil, channels.ClassifySendError(statusCode, err)
        // Or manually wrap:
-        // return fmt.Errorf("%w: %v", channels.ErrTemporary, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrTemporary, err)
-        // return fmt.Errorf("%w: %v", channels.ErrRateLimit, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrRateLimit, err)
-        // return fmt.Errorf("%w: %v", channels.ErrSendFailed, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrSendFailed, err)
    }
-    return nil
+    return []string{deliveredID}, nil // or return nil, nil if IDs are unavailable
 }
 ```
@ -502,25 +502,25 @@ func (c *MatrixChannel) Stop(ctx context.Context) error {
    return nil
 }
-func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
    // 1. Check running state
    if !c.IsRunning() {
-        return channels.ErrNotRunning
+        return nil, channels.ErrNotRunning
    }
    // 2. Send message to Matrix
-    err := c.sendToMatrix(ctx, msg.ChatID, msg.Content)
+    eventID, err := c.sendToMatrix(ctx, msg.ChatID, msg.Content)
    if err != nil {
        // 3. Must use error classification wrapping
        //    If you have an HTTP status code:
-        //    return channels.ClassifySendError(statusCode, err)
+        //    return nil, channels.ClassifySendError(statusCode, err)
        //    If it's a network error:
-        //    return channels.ClassifyNetError(err)
+        //    return nil, channels.ClassifyNetError(err)
        //    If manual classification is needed:
-        return fmt.Errorf("%w: %v", channels.ErrTemporary, err)
+        return nil, fmt.Errorf("%w: %v", channels.ErrTemporary, err)
    }
-    return nil
+    return []string{eventID}, nil
 }
 // ========== Incoming Message Handling ==========
@ -580,9 +580,9 @@ func (c *MatrixChannel) handleIncoming(roomID, senderID, displayName, content st
 // ========== Internal Methods ==========
-func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string) error {
+func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string) (string, error) {
    // Actual Matrix SDK call
-    return nil
+    return "event-id", nil
 }
 ```
@ -594,16 +594,17 @@ Depending on platform capabilities, your channel can optionally implement the fo
 ```go
 // If the platform supports sending images/files/audio/video
-func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
    if !c.IsRunning() {
-        return channels.ErrNotRunning
+        return nil, channels.ErrNotRunning
    }
    store := c.GetMediaStore()
    if store == nil {
-        return fmt.Errorf("no media store: %w", channels.ErrSendFailed)
+        return nil, fmt.Errorf("no media store: %w", channels.ErrSendFailed)
    }
    var messageIDs []string
    for _, part := range msg.Parts {
        localPath, err := store.Resolve(part.Ref)
        if err != nil {
@ -620,8 +621,10 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
        default:
            // Upload file to Matrix
        }
        // Append platform IDs here when the API returns them.
        // messageIDs = append(messageIDs, uploadedMessageID)
    }
-    return nil
+    return messageIDs, nil
 }
 ```
@ -1270,7 +1273,7 @@ type Channel interface {
    Name() string
    Start(ctx context.Context) error
    Stop(ctx context.Context) error
-    Send(ctx context.Context, msg bus.OutboundMessage) error
+    Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error)
    IsRunning() bool
    IsAllowed(senderID string) bool
    IsAllowedSender(sender bus.SenderInfo) bool
@ -1279,7 +1282,7 @@ type Channel interface {
 // ===== Optional =====
 type MediaSender interface {
-    SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error
+    SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error)
 }
 type TypingCapable interface {
--- a/pkg/channels/README.zh.md
+++ b/pkg/channels/README.zh.md
@ -252,28 +252,28 @@ func (c *TelegramChannel) Stop(ctx context.Context) error {
 **3e. Send 方法的错误返回**
 ```go
-// 旧代码：返回普通 error
+// 旧代码：只返回 error
 func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
    if !c.running { return fmt.Errorf("not running") }
    // ...
    if err != nil { return err }
 }
-// 新代码：必须返回哨兵错误，供 Manager 判断重试策略
+// 新代码：返回投递后的消息 ID，以及供 Manager 判断重试策略的哨兵错误
-func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
    if !c.IsRunning() {
-        return channels.ErrNotRunning    // ← Manager 不会重试
+        return nil, channels.ErrNotRunning    // ← Manager 不会重试
    }
    // ...
    if err != nil {
        // 使用 ClassifySendError 根据 HTTP 状态码包装错误
-        return channels.ClassifySendError(statusCode, err)
+        return nil, channels.ClassifySendError(statusCode, err)
        // 或手动包装：
-        // return fmt.Errorf("%w: %v", channels.ErrTemporary, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrTemporary, err)
-        // return fmt.Errorf("%w: %v", channels.ErrRateLimit, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrRateLimit, err)
-        // return fmt.Errorf("%w: %v", channels.ErrSendFailed, err)
+        // return nil, fmt.Errorf("%w: %v", channels.ErrSendFailed, err)
    }
-    return nil
+    return []string{deliveredID}, nil // 如果拿不到 ID，也可以返回 nil, nil
 }
 ```
@ -502,25 +502,25 @@ func (c *MatrixChannel) Stop(ctx context.Context) error {
    return nil
 }
-func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
    // 1. 检查运行状态
    if !c.IsRunning() {
-        return channels.ErrNotRunning
+        return nil, channels.ErrNotRunning
    }
    // 2. 发送消息到 Matrix
-    err := c.sendToMatrix(ctx, msg.ChatID, msg.Content)
+    eventID, err := c.sendToMatrix(ctx, msg.ChatID, msg.Content)
    if err != nil {
        // 3. 必须使用错误分类包装
        //    如果你有 HTTP 状态码：
-        //    return channels.ClassifySendError(statusCode, err)
+        //    return nil, channels.ClassifySendError(statusCode, err)
        //    如果是网络错误：
-        //    return channels.ClassifyNetError(err)
+        //    return nil, channels.ClassifyNetError(err)
        //    如果需要手动分类：
-        return fmt.Errorf("%w: %v", channels.ErrTemporary, err)
+        return nil, fmt.Errorf("%w: %v", channels.ErrTemporary, err)
    }
-    return nil
+    return []string{eventID}, nil
 }
 // ========== 消息接收处理 ==========
@ -580,9 +580,9 @@ func (c *MatrixChannel) handleIncoming(roomID, senderID, displayName, content st
 // ========== 内部方法 ==========
-func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string) error {
+func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string) (string, error) {
    // 实际的 Matrix SDK 调用
-    return nil
+    return "event-id", nil
 }
 ```
@ -594,16 +594,17 @@ func (c *MatrixChannel) sendToMatrix(ctx context.Context, roomID, content string
 ```go
 // 如果平台支持发送图片/文件/音频/视频
-func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
    if !c.IsRunning() {
-        return channels.ErrNotRunning
+        return nil, channels.ErrNotRunning
    }
    store := c.GetMediaStore()
    if store == nil {
-        return fmt.Errorf("no media store: %w", channels.ErrSendFailed)
+        return nil, fmt.Errorf("no media store: %w", channels.ErrSendFailed)
    }
    var messageIDs []string
    for _, part := range msg.Parts {
        localPath, err := store.Resolve(part.Ref)
        if err != nil {
@ -620,8 +621,10 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
        default:
            // 上传文件到 Matrix
        }
        // 如果 API 能返回平台消息 ID，就在这里追加。
        // messageIDs = append(messageIDs, uploadedMessageID)
    }
-    return nil
+    return messageIDs, nil
 }
 ```
@ -1269,7 +1272,7 @@ type Channel interface {
    Name() string
    Start(ctx context.Context) error
    Stop(ctx context.Context) error
-    Send(ctx context.Context, msg bus.OutboundMessage) error
+    Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error)
    IsRunning() bool
    IsAllowed(senderID string) bool
    IsAllowedSender(sender bus.SenderInfo) bool
@ -1278,7 +1281,7 @@ type Channel interface {
 // ===== 可选实现 =====
 type MediaSender interface {
-    SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error
+    SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error)
 }
 type TypingCapable interface {
--- a/pkg/channels/base.go
+++ b/pkg/channels/base.go
@ -48,7 +48,7 @@ type Channel interface {
 	Name() string
 	Start(ctx context.Context) error
 	Stop(ctx context.Context) error
-	Send(ctx context.Context, msg bus.OutboundMessage) error
+	Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error)
 	IsRunning() bool
 	IsAllowed(senderID string) bool
 	IsAllowedSender(sender bus.SenderInfo) bool
@ -112,6 +112,18 @@ func NewBaseChannel(
 	for _, opt := range opts {
 		opt(bc)
 	}
 	// Security Audit: Check for open-by-default (unsecured) channels.
 	// PicoClaw aims to be secure-by-default. If allow_from is empty, the bot
 	// currently defaults to accepting messages from ANYONE. To explicitly
 	// acknowledge and permit this (e.g. for a public bot), use ["*"].
 	if len(bc.allowList) == 0 {
 		logger.WarnCF("channels", "SECURITY: Channel allows EVERYONE (allow_from is empty)", map[string]any{
 			"channel": bc.name,
 			"hint":    "Set allow_from to your ID, or use '*' to explicitly acknowledge open access.",
 		})
 	}
 	return bc
 }
@ -187,6 +199,9 @@ func (c *BaseChannel) IsAllowed(senderID string) bool {
 	}
 	for _, allowed := range c.allowList {
 		if allowed == "*" {
 			return true
 		}
 		// Strip leading "@" from allowed value for username matching
 		trimmed := strings.TrimPrefix(allowed, "@")
 		allowedID := trimmed
@ -221,7 +236,7 @@ func (c *BaseChannel) IsAllowedSender(sender bus.SenderInfo) bool {
 	}
 	for _, allowed := range c.allowList {
-		if identity.MatchAllowed(sender, allowed) {
+		if allowed == "*" || identity.MatchAllowed(sender, allowed) {
 			return true
 		}
 	}
--- a/pkg/channels/dingtalk/dingtalk.go
+++ b/pkg/channels/dingtalk/dingtalk.go
@ -104,20 +104,20 @@ func (c *DingTalkChannel) Stop(ctx context.Context) error {
 }
 // Send sends a message to DingTalk via the chatbot reply API
-func (c *DingTalkChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *DingTalkChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	// Get session webhook from storage
 	sessionWebhookRaw, ok := c.sessionWebhooks.Load(msg.ChatID)
 	if !ok {
-		return fmt.Errorf("no session_webhook found for chat %s, cannot send message", msg.ChatID)
+		return nil, fmt.Errorf("no session_webhook found for chat %s, cannot send message", msg.ChatID)
 	}
 	sessionWebhook, ok := sessionWebhookRaw.(string)
 	if !ok {
-		return fmt.Errorf("invalid session_webhook type for chat %s", msg.ChatID)
+		return nil, fmt.Errorf("invalid session_webhook type for chat %s", msg.ChatID)
 	}
 	logger.DebugCF("dingtalk", "Sending message", map[string]any{
@ -126,7 +126,7 @@ func (c *DingTalkChannel) Send(ctx context.Context, msg bus.OutboundMessage) err
 	})
 	// Use the session webhook to send the reply
-	return c.SendDirectReply(ctx, sessionWebhook, msg.Content)
+	return nil, c.SendDirectReply(ctx, sessionWebhook, msg.Content)
 }
 // onChatBotMessageReceived implements the IChatBotMessageHandler function signature
--- a/pkg/channels/discord/discord.go
+++ b/pkg/channels/discord/discord.go
@ -3,6 +3,7 @@ package discord
 import (
 	"context"
 	"fmt"
 	"io"
 	"net/http"
 	"net/url"
 	"os"
@ -14,6 +15,8 @@ import (
 	"github.com/bwmarrin/discordgo"
 	"github.com/gorilla/websocket"
 	"github.com/sipeed/picoclaw/pkg/audio"
 	"github.com/sipeed/picoclaw/pkg/audio/tts"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/channels"
 	"github.com/sipeed/picoclaw/pkg/config"
@ -42,6 +45,15 @@ type DiscordChannel struct {
 	typingMu   sync.Mutex
 	typingStop map[string]chan struct{} // chatID → stop signal
 	botUserID  string                   // stored for mention checking
 	bus        *bus.MessageBus
 	tts        tts.TTSProvider
 	voiceMu    sync.RWMutex
 	voiceSSRC  map[string]map[uint32]string // guildID -> ssrc -> userID
 	// TTS interruption: cancel active playback when user speaks
 	ttsMu     sync.Mutex
 	cancelTTS context.CancelFunc
 	ttsPlayID uint64
 }
 func NewDiscordChannel(cfg config.DiscordConfig, bus *bus.MessageBus) (*DiscordChannel, error) {
@ -73,6 +85,8 @@ func NewDiscordChannel(cfg config.DiscordConfig, bus *bus.MessageBus) (*DiscordC
 		config:      cfg,
 		ctx:         context.Background(),
 		typingStop:  make(map[string]chan struct{}),
 		bus:         bus,
 		voiceSSRC:   make(map[string]map[uint32]string),
 	}, nil
 }
@ -90,6 +104,8 @@ func (c *DiscordChannel) Start(ctx context.Context) error {
 	c.session.AddHandler(c.handleMessage)
 	go c.listenVoiceControl(c.ctx)
 	if err := c.session.Open(); err != nil {
 		return fmt.Errorf("failed to open discord session: %w", err)
 	}
@ -128,37 +144,60 @@ func (c *DiscordChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *DiscordChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *DiscordChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	channelID := msg.ChatID
 	if channelID == "" {
-		return fmt.Errorf("channel ID is empty")
+		return nil, fmt.Errorf("channel ID is empty")
 	}
 	if len([]rune(msg.Content)) == 0 {
-		return nil
+		return nil, nil
 	}
-	return c.sendChunk(ctx, channelID, msg.Content, msg.ReplyToMessageID)
+	if c.tts != nil {
 		if ch, err := c.session.State.Channel(channelID); err == nil && ch.GuildID != "" {
 			if vc, ok := c.session.VoiceConnections[ch.GuildID]; ok && vc != nil {
 				// Cancel any previous TTS playback
 				c.ttsMu.Lock()
 				if c.cancelTTS != nil {
 					c.cancelTTS()
 				}
 				ttsCtx, ttsCancel := context.WithCancel(c.ctx)
 				c.ttsPlayID++
 				playID := c.ttsPlayID
 				c.cancelTTS = ttsCancel
 				c.ttsMu.Unlock()
 				go c.playTTS(ttsCtx, vc, msg.Content, playID)
 			}
 		}
 	}
 	msgID, err := c.sendChunk(ctx, channelID, msg.Content, msg.ReplyToMessageID)
 	if err != nil {
 		return nil, err
 	}
 	return []string{msgID}, nil
 }
 // SendMedia implements the channels.MediaSender interface.
-func (c *DiscordChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *DiscordChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	channelID := msg.ChatID
 	if channelID == "" {
-		return fmt.Errorf("channel ID is empty")
+		return nil, fmt.Errorf("channel ID is empty")
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	// Collect all files into a single ChannelMessageSendComplex call
@ -202,33 +241,41 @@ func (c *DiscordChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMes
 	}
 	if len(files) == 0 {
-		return nil
+		return nil, nil
 	}
 	sendCtx, cancel := context.WithTimeout(ctx, sendTimeout)
 	defer cancel()
-	done := make(chan error, 1)
+	type mediaResult struct {
 		id  string
 		err error
 	}
 	done := make(chan mediaResult, 1)
 	go func() {
-		_, err := c.session.ChannelMessageSendComplex(channelID, &discordgo.MessageSend{
+		sentMsg, err := c.session.ChannelMessageSendComplex(channelID, &discordgo.MessageSend{
 			Content: caption,
 			Files:   files,
 		})
-		done <- err
+		if err != nil {
 			done <- mediaResult{err: err}
 			return
 		}
 		done <- mediaResult{id: sentMsg.ID}
 	}()
 	select {
-	case err := <-done:
+	case r := <-done:
 		// Close all file readers
 		for _, f := range files {
 			if closer, ok := f.Reader.(*os.File); ok {
 				closer.Close()
 			}
 		}
-		if err != nil {
+		if r.err != nil {
-			return fmt.Errorf("discord send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("discord send media: %w", channels.ErrTemporary)
 		}
-		return nil
+		return []string{r.id}, nil
 	case <-sendCtx.Done():
 		// Close all file readers
 		for _, f := range files {
@ -236,7 +283,7 @@ func (c *DiscordChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMes
 				closer.Close()
 			}
 		}
-		return sendCtx.Err()
+		return nil, sendCtx.Err()
 	}
 }
@ -264,18 +311,25 @@ func (c *DiscordChannel) SendPlaceholder(ctx context.Context, chatID string) (st
 	return msg.ID, nil
 }
-func (c *DiscordChannel) sendChunk(ctx context.Context, channelID, content, replyToID string) error {
+func (c *DiscordChannel) sendChunk(ctx context.Context, channelID, content, replyToID string) (string, error) {
 	// Use the passed ctx for timeout control
 	sendCtx, cancel := context.WithTimeout(ctx, sendTimeout)
 	defer cancel()
-	done := make(chan error, 1)
+	type result struct {
 		id  string
 		err error
 	}
 	done := make(chan result, 1)
 	go func() {
-		var err error
+		var (
 			msg *discordgo.Message
 			err error
 		)
 		// If we have an ID, we send the message as "Reply"
 		if replyToID != "" {
-			_, err = c.session.ChannelMessageSendComplex(channelID, &discordgo.MessageSend{
+			msg, err = c.session.ChannelMessageSendComplex(channelID, &discordgo.MessageSend{
 				Content: content,
 				Reference: &discordgo.MessageReference{
 					MessageID: replyToID,
@ -284,20 +338,21 @@ func (c *DiscordChannel) sendChunk(ctx context.Context, channelID, content, repl
 			})
 		} else {
 			// Otherwise, we send a normal message
-			_, err = c.session.ChannelMessageSend(channelID, content)
+			msg, err = c.session.ChannelMessageSend(channelID, content)
 		}
-		done <- err
+		if err != nil {
 			done <- result{err: fmt.Errorf("discord send: %w", channels.ErrTemporary)}
 			return
 		}
 		done <- result{id: msg.ID}
 	}()
 	select {
-	case err := <-done:
+	case r := <-done:
-		if err != nil {
+		return r.id, r.err
 			return fmt.Errorf("discord send: %w", channels.ErrTemporary)
 		}
 		return nil
 	case <-sendCtx.Done():
-		return sendCtx.Err()
+		return "", sendCtx.Err()
 	}
 }
@ -339,6 +394,10 @@ func (c *DiscordChannel) handleMessage(s *discordgo.Session, m *discordgo.Messag
 		return
 	}
 	if c.handleVoiceCommand(s, m) {
 		return
 	}
 	content := m.Content
 	// In guild (group) channels, apply unified group trigger filtering
@ -610,3 +669,134 @@ func (c *DiscordChannel) stripBotMention(text string) string {
 	text = strings.ReplaceAll(text, fmt.Sprintf("<@!%s>", c.botUserID), "")
 	return strings.TrimSpace(text)
 }
 func (c *DiscordChannel) listenVoiceControl(ctx context.Context) {
 	for {
 		select {
 		case <-ctx.Done():
 			return
 		case ctrl, ok := <-c.bus.VoiceControlsChan():
 			if !ok {
 				return
 			}
 			if ctrl.Type == "command" && ctrl.Action == "leave" {
 				if strings.HasPrefix(ctrl.SessionID, "discord_vc_") {
 					guildID := strings.TrimPrefix(ctrl.SessionID, "discord_vc_")
 					vc, exists := c.session.VoiceConnections[guildID]
 					if exists && vc != nil {
 						vc.Disconnect(ctx)
 					}
 				}
 			}
 		}
 	}
 }
 func (c *DiscordChannel) playTTS(ctx context.Context, vc *discordgo.VoiceConnection, text string, playID uint64) {
 	// Capture the cancel func associated with this playback (if any).
 	// Clear cancelTTS when playback finishes (normal or interrupted),
 	// but only if it still refers to this playback's cancel func.
 	defer func() {
 		c.ttsMu.Lock()
 		if c.ttsPlayID == playID {
 			c.cancelTTS = nil
 		}
 		c.ttsMu.Unlock()
 	}()
 	sentences := audio.SplitSentences(text)
 	if len(sentences) == 0 {
 		return
 	}
 	logger.InfoCF("discord", "Starting streamed TTS", map[string]any{"sentences": len(sentences)})
 	// Pipeline: prefetch next sentence's audio while playing current
 	type ttResult struct {
 		stream io.ReadCloser
 		err    error
 	}
 	var prefetch chan ttResult
 	// Ensure any in-flight prefetch is drained on exit to prevent stream leaks,
 	// but avoid blocking indefinitely if the prefetch goroutine is stuck or never sends.
 	defer func() {
 		if prefetch != nil {
 			select {
 			case result := <-prefetch:
 				if result.stream != nil {
 					result.stream.Close()
 				}
 			case <-time.After(100 * time.Millisecond):
 				// Timed out waiting for a prefetched result; avoid blocking on exit.
 			}
 		}
 	}()
 	for i, sentence := range sentences {
 		// Check for cancellation (interruption)
 		select {
 		case <-ctx.Done():
 			logger.InfoCF("discord", "TTS interrupted", map[string]any{"at_sentence": i})
 			return
 		default:
 		}
 		// Start prefetching the NEXT sentence while we process the current one
 		var nextPrefetch chan ttResult
 		if i+1 < len(sentences) {
 			nextPrefetch = make(chan ttResult, 1)
 			nextSentence := sentences[i+1]
 			go func() {
 				s, e := c.tts.Synthesize(ctx, nextSentence)
 				nextPrefetch <- ttResult{s, e}
 			}()
 		}
 		// Get the current sentence's audio
 		var stream io.ReadCloser
 		var err error
 		if prefetch != nil {
 			// Use prefetched result from previous iteration, but be responsive to cancellation.
 			var result ttResult
 			select {
 			case result = <-prefetch:
 				stream, err = result.stream, result.err
 			case <-ctx.Done():
 				// Context canceled while waiting for prefetched audio; abort playback.
 				logger.InfoCF(
 					"discord",
 					"TTS interrupted while waiting for prefetched audio",
 					map[string]any{"at_sentence": i},
 				)
 				return
 			}
 		} else {
 			// First sentence: synthesize directly
 			stream, err = c.tts.Synthesize(ctx, sentence)
 		}
 		if err != nil {
 			if stream != nil {
 				stream.Close()
 			}
 			logger.ErrorCF("discord", "TTS synthesize failed", map[string]any{"error": err.Error(), "sentence": i})
 			prefetch = nextPrefetch
 			continue
 		}
 		if err := streamOggOpusToDiscord(ctx, vc, stream); err != nil {
 			logger.ErrorCF("discord", "TTS playback failed", map[string]any{"error": err.Error(), "sentence": i})
 		}
 		stream.Close()
 		prefetch = nextPrefetch
 	}
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *DiscordChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/discord/init.go
+++ b/pkg/channels/discord/init.go
@ -1,6 +1,7 @@
 package discord
 import (
 	"github.com/sipeed/picoclaw/pkg/audio/tts"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/channels"
 	"github.com/sipeed/picoclaw/pkg/config"
@ -8,6 +9,10 @@ import (
 func init() {
 	channels.RegisterFactory("discord", func(cfg *config.Config, b *bus.MessageBus) (channels.Channel, error) {
-		return NewDiscordChannel(cfg.Channels.Discord, b)
+		ch, err := NewDiscordChannel(cfg.Channels.Discord, b)
 		if err == nil {
 			ch.tts = tts.DetectTTS(cfg)
 		}
 		return ch, err
 	})
 }
--- a/pkg/channels/discord/voice.go
+++ b/pkg/channels/discord/voice.go
@ -0,0 +1,314 @@
 package discord
 import (
 	"context"
 	"fmt"
 	"io"
 	"time"
 	"github.com/bwmarrin/discordgo"
 	"github.com/sipeed/picoclaw/pkg/audio"
 	"github.com/sipeed/picoclaw/pkg/bus"
 	"github.com/sipeed/picoclaw/pkg/identity"
 	"github.com/sipeed/picoclaw/pkg/logger"
 )
 func (c *DiscordChannel) setVoiceUserID(guildID string, ssrc uint32, userID string) {
 	if userID == "" {
 		return
 	}
 	c.voiceMu.Lock()
 	defer c.voiceMu.Unlock()
 	ssrcMap, ok := c.voiceSSRC[guildID]
 	if !ok {
 		ssrcMap = make(map[uint32]string)
 		c.voiceSSRC[guildID] = ssrcMap
 	}
 	ssrcMap[ssrc] = userID
 }
 func (c *DiscordChannel) voiceUserID(guildID string, ssrc uint32) string {
 	c.voiceMu.RLock()
 	defer c.voiceMu.RUnlock()
 	ssrcMap, ok := c.voiceSSRC[guildID]
 	if !ok {
 		return ""
 	}
 	return ssrcMap[ssrc]
 }
 func (c *DiscordChannel) handleVoiceCommand(s *discordgo.Session, m *discordgo.MessageCreate) bool {
 	if m.Content == "!vc join" {
 		vs, err := s.State.VoiceState(m.GuildID, m.Author.ID)
 		if err != nil || vs == nil {
 			if _, sendErr := s.ChannelMessageSend(
 				m.ChannelID,
 				"You need to be in a voice channel first!",
 			); sendErr != nil {
 				logger.InfoCF("discord", "Failed to send voice channel requirement message", map[string]any{
 					"channel": m.ChannelID,
 					"error":   sendErr,
 				})
 			}
 			return true
 		}
 		logger.InfoCF("discord", "Joining voice channel", map[string]any{"channel": vs.ChannelID})
 		vc, err := s.ChannelVoiceJoin(c.ctx, m.GuildID, vs.ChannelID, false, false)
 		if err != nil {
 			if _, sendErr := s.ChannelMessageSend(
 				m.ChannelID,
 				fmt.Sprintf("Failed to join voice channel: %v", err),
 			); sendErr != nil {
 				logger.InfoCF("discord", "Failed to send voice join error message", map[string]any{
 					"channel": m.ChannelID,
 					"error":   sendErr,
 				})
 			}
 			return true
 		}
 		go c.receiveVoice(vc, m.GuildID, m.ChannelID)
 		if _, sendErr := s.ChannelMessageSend(
 			m.ChannelID,
 			"Joined Voice Channel! Listening for audio...",
 		); sendErr != nil {
 			logger.InfoCF("discord", "Failed to send voice join success message", map[string]any{
 				"channel": m.ChannelID,
 				"error":   sendErr,
 			})
 		}
 		return true
 	} else if m.Content == "!vc leave" {
 		vc, exists := s.VoiceConnections[m.GuildID]
 		if exists && vc != nil {
 			if err := vc.Disconnect(c.ctx); err != nil {
 				logger.InfoCF("discord", "Failed to disconnect from voice channel", map[string]any{
 					"guild": m.GuildID,
 					"error": err,
 				})
 			}
 			if _, sendErr := s.ChannelMessageSend(m.ChannelID, "Left Voice Channel."); sendErr != nil {
 				logger.InfoCF("discord", "Failed to send voice leave success message", map[string]any{
 					"channel": m.ChannelID,
 					"error":   sendErr,
 				})
 			}
 		} else {
 			if _, sendErr := s.ChannelMessageSend(m.ChannelID, "Not in a voice channel."); sendErr != nil {
 				logger.InfoCF("discord", "Failed to send voice not-in-channel message", map[string]any{
 					"channel": m.ChannelID,
 					"error":   sendErr,
 				})
 			}
 		}
 		return true
 	}
 	return false
 }
 func VoiceReceiveActive(vc *discordgo.VoiceConnection) bool {
 	return vc != nil && vc.OpusRecv != nil
 }
 func streamOggOpusToDiscord(ctx context.Context, vc *discordgo.VoiceConnection, r io.Reader) (retErr error) {
 	// Recover from panic if vc.OpusSend is closed mid-send (e.g. on disconnect)
 	defer func() {
 		if rec := recover(); rec != nil {
 			retErr = fmt.Errorf("voice connection closed during playback")
 			logger.RecoverPanicNoExit(rec)
 		}
 	}()
 	// Wait for the speaking transition to register
 	vc.Speaking(true)
 	defer vc.Speaking(false)
 	return audio.DecodeOggOpus(r, func(frame []byte) error {
 		select {
 		case <-ctx.Done():
 			return ctx.Err()
 		case vc.OpusSend <- frame:
 			return nil
 		}
 	})
 }
 func (c *DiscordChannel) receiveVoice(vc *discordgo.VoiceConnection, guildID string, chatID string) {
 	logger.InfoCF("discord", "Started listening for voice", map[string]any{"guild": guildID})
 	vc.AddHandler(func(_ *discordgo.VoiceConnection, vs *discordgo.VoiceSpeakingUpdate) {
 		if vs == nil {
 			return
 		}
 		c.setVoiceUserID(guildID, uint32(vs.SSRC), vs.UserID)
 	})
 	defer func() {
 		c.voiceMu.Lock()
 		delete(c.voiceSSRC, guildID)
 		c.voiceMu.Unlock()
 	}()
 	go func(ctx context.Context, vc *discordgo.VoiceConnection) {
 		// Recover from potential panics if OpusSend is closed mid-send.
 		defer func() {
 			if rec := recover(); rec != nil {
 				logger.WarnCF("discord", "Recovered from panic while sending wake-up frames", map[string]any{
 					"error": rec,
 					"guild": guildID,
 				})
 			}
 		}()
 		// If the voice connection or OpusSend are not available, nothing to do.
 		if vc == nil || vc.OpusSend == nil {
 			return
 		}
 		time.Sleep(250 * time.Millisecond) // Wait a bit for connection to settle
 		// Abort if the context has already been canceled.
 		select {
 		case <-ctx.Done():
 			return
 		default:
 		}
 		vc.Speaking(true)
 		defer vc.Speaking(false)
 		silenceFrame := []byte{0xF8, 0xFF, 0xFE}
 		for i := 0; i < 5; i++ {
 			select {
 			case <-ctx.Done():
 				return
 			case vc.OpusSend <- silenceFrame:
 			}
 			time.Sleep(20 * time.Millisecond)
 		}
 		logger.DebugCF("discord", "Sent wake-up silence frames", map[string]any{"guild": guildID})
 	}(c.ctx, vc)
 	sessionID := fmt.Sprintf("discord_vc_%s", guildID)
 	c.bus.PublishVoiceControl(c.ctx, bus.VoiceControl{
 		SessionID: sessionID,
 		Type:      "state",
 		Action:    "listening",
 	})
 	var sequence uint64 = 0
 	var interruptCount int
 	var lastInterruptAt time.Time
 	for {
 		select {
 		case <-c.ctx.Done():
 			return
 		case p, ok := <-vc.OpusRecv:
 			if !ok {
 				logger.InfoCF("discord", "Voice channel closed", map[string]any{"guild": guildID})
 				// Cancel any TTS that may still be playing
 				c.ttsMu.Lock()
 				if c.cancelTTS != nil {
 					c.cancelTTS()
 					c.cancelTTS = nil
 				}
 				c.ttsMu.Unlock()
 				return
 			}
 			if p == nil {
 				logger.DebugCF("discord", "Received nil Opus packet", nil)
 				continue
 			}
 			if len(p.Opus) == 0 {
 				logger.DebugCF("discord", "Received empty Opus packet", map[string]any{
 					"seq":  p.Sequence,
 					"ssrc": p.SSRC,
 				})
 				continue
 			}
 			logger.DebugCF("discord", "Received Opus packet", map[string]any{
 				"seq":  p.Sequence,
 				"len":  len(p.Opus),
 				"ssrc": p.SSRC,
 			})
 			// Interruption detection: if user sends voice while TTS is playing,
 			// cancel TTS after a short debounce (3 packets in 200ms)
 			now := time.Now()
 			if now.Sub(lastInterruptAt) > 500*time.Millisecond {
 				interruptCount = 0
 			}
 			interruptCount++
 			lastInterruptAt = now
 			if interruptCount >= 3 {
 				c.ttsMu.Lock()
 				if c.cancelTTS != nil {
 					c.cancelTTS()
 					c.cancelTTS = nil
 					logger.InfoCF("discord", "TTS interrupted by user voice", nil)
 				}
 				c.ttsMu.Unlock()
 				interruptCount = 0
 			}
 			userID := c.voiceUserID(guildID, p.SSRC)
 			if userID == "" {
 				logger.DebugCF("discord", "Dropping voice packet without user mapping", map[string]any{
 					"ssrc":  p.SSRC,
 					"guild": guildID,
 				})
 				continue
 			}
 			sender := bus.SenderInfo{
 				Platform:    "discord",
 				PlatformID:  userID,
 				CanonicalID: identity.BuildCanonicalID("discord", userID),
 			}
 			if !c.IsAllowedSender(sender) {
 				logger.DebugCF("discord", "Voice packet rejected by allowlist", map[string]any{
 					"user_id": userID,
 					"guild":   guildID,
 				})
 				continue
 			}
 			sequence++
 			chunk := bus.AudioChunk{
 				SessionID:  sessionID,
 				SpeakerID:  userID,
 				ChatID:     chatID,
 				Channel:    "discord",
 				Sequence:   sequence,
 				Timestamp:  p.Timestamp,
 				SampleRate: 48000,
 				Channels:   2,
 				Format:     "opus",
 				Data:       p.Opus,
 			}
 			ctx, cancel := context.WithTimeout(c.ctx, 100*time.Millisecond)
 			err := c.bus.PublishAudioChunk(ctx, chunk)
 			cancel()
 			if err != nil {
 				logger.ErrorCF("discord", "Failed to publish audio chunk", map[string]any{
 					"guild":     guildID,
 					"sessionID": sessionID,
 					"sequence":  sequence,
 					"error":     err.Error(),
 				})
 			}
 		}
 	}
 }
--- a/pkg/channels/feishu/common.go
+++ b/pkg/channels/feishu/common.go
@ -6,6 +6,8 @@ import (
 	"strings"
 	larkim "github.com/larksuite/oapi-sdk-go/v3/service/im/v1"
 	"github.com/sipeed/picoclaw/pkg/channels"
 )
 // mentionPlaceholderRegex matches @_user_N placeholders inserted by Feishu for mentions.
@ -145,3 +147,8 @@ func extractImageKeysRecursive(v any, feishuKeys, externalURLs *[]string) {
 		}
 	}
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *FeishuChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/feishu/feishu_32.go
+++ b/pkg/channels/feishu/feishu_32.go
@ -36,8 +36,8 @@ func (c *FeishuChannel) Stop(ctx context.Context) error {
 }
 // Send is a stub method to satisfy the Channel interface
-func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
-	return errUnsupported
+	return nil, errUnsupported
 }
 // EditMessage is a stub method to satisfy MessageEditor
@ -56,6 +56,6 @@ func (c *FeishuChannel) ReactToMessage(ctx context.Context, chatID, messageID st
 }
 // SendMedia is a stub method to satisfy MediaSender
-func (c *FeishuChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *FeishuChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
-	return errUnsupported
+	return nil, errUnsupported
 }
--- a/pkg/channels/feishu/feishu_64.go
+++ b/pkg/channels/feishu/feishu_64.go
@ -131,26 +131,26 @@ func (c *FeishuChannel) Stop(ctx context.Context) error {
 // Send sends a message using Interactive Card format for markdown rendering.
 // Falls back to plain text message if card sending fails (e.g., table limit exceeded).
-func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	if msg.ChatID == "" {
-		return fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
 	}
 	// Build interactive card with markdown content
 	cardContent, err := buildMarkdownCard(msg.Content)
 	if err != nil {
 		// If card build fails, fall back to plain text
-		return c.sendText(ctx, msg.ChatID, msg.Content)
+		return nil, c.sendText(ctx, msg.ChatID, msg.Content)
 	}
 	// First attempt: try sending as interactive card
 	err = c.sendCard(ctx, msg.ChatID, cardContent)
 	if err == nil {
-		return nil
+		return nil, nil
 	}
 	// Check if error is due to card table limit (error code 11310)
@ -167,14 +167,14 @@ func (c *FeishuChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 		// Second attempt: fall back to plain text message
 		textErr := c.sendText(ctx, msg.ChatID, msg.Content)
 		if textErr == nil {
-			return nil
+			return nil, nil
 		}
 		// If text also fails, return the text error
-		return textErr
+		return nil, textErr
 	}
 	// For other errors, return the original card error
-	return err
+	return nil, err
 }
 // EditMessage implements channels.MessageEditor.
@ -310,27 +310,27 @@ func (c *FeishuChannel) ReactToMessage(ctx context.Context, chatID, messageID st
 // SendMedia implements channels.MediaSender.
 // Uploads images/files via Feishu API then sends as messages.
-func (c *FeishuChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *FeishuChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	if msg.ChatID == "" {
-		return fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	for _, part := range msg.Parts {
 		if err := c.sendMediaPart(ctx, msg.ChatID, part, store); err != nil {
-			return err
+			return nil, err
 		}
 	}
-	return nil
+	return nil, nil
 }
 // sendMediaPart resolves and sends a single media part.
--- a/pkg/channels/irc/irc.go
+++ b/pkg/channels/irc/irc.go
@ -130,18 +130,18 @@ func (c *IRCChannel) Stop(ctx context.Context) error {
 }
 // Send sends a message to an IRC channel or user.
-func (c *IRCChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *IRCChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	target := msg.ChatID
 	if target == "" {
-		return fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("chat ID is empty: %w", channels.ErrSendFailed)
 	}
 	if strings.TrimSpace(msg.Content) == "" {
-		return nil
+		return nil, nil
 	}
 	// Send each line separately (IRC is line-oriented)
@ -158,7 +158,7 @@ func (c *IRCChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
 		"target": target,
 		"lines":  len(lines),
 	})
-	return nil
+	return nil, nil
 }
 // StartTyping implements channels.TypingCapable using IRCv3 +typing client tag.
--- a/pkg/channels/line/line.go
+++ b/pkg/channels/line/line.go
@ -496,9 +496,9 @@ func (c *LINEChannel) resolveChatID(source lineSource) string {
 // Send sends a message to LINE. It first tries the Reply API (free)
 // using a cached reply token, then falls back to the Push API.
-func (c *LINEChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *LINEChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	// Load and consume quote token for this chat
@ -516,28 +516,28 @@ func (c *LINEChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
 					"chat_id": msg.ChatID,
 					"quoted":  quoteToken != "",
 				})
-				return nil
+				return nil, nil
 			}
 			logger.DebugC("line", "Reply API failed, falling back to Push API")
 		}
 	}
 	// Fall back to Push API
-	return c.sendPush(ctx, msg.ChatID, msg.Content, quoteToken)
+	return nil, c.sendPush(ctx, msg.ChatID, msg.Content, quoteToken)
 }
 // SendMedia implements the channels.MediaSender interface.
 // LINE requires media to be accessible via public URL; since we only have local files,
 // we fall back to sending a text message with the filename/caption.
 // For full support, an external file hosting service would be needed.
-func (c *LINEChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *LINEChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	// LINE Messaging API requires publicly accessible URLs for media messages.
@ -549,11 +549,11 @@ func (c *LINEChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessag
 		}
 		if err := c.sendPush(ctx, msg.ChatID, caption, ""); err != nil {
-			return err
+			return nil, err
 		}
 	}
-	return nil
+	return nil, nil
 }
 // buildTextMessage creates a text message object, optionally with quoteToken.
@ -684,3 +684,8 @@ func (c *LINEChannel) downloadContent(messageID, filename string) string {
 		},
 	})
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *LINEChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/maixcam/maixcam.go
+++ b/pkg/channels/maixcam/maixcam.go
@ -240,15 +240,15 @@ func (c *MaixCamChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	// Check ctx before entering write path
 	select {
 	case <-ctx.Done():
-		return ctx.Err()
+		return nil, ctx.Err()
 	default:
 	}
@ -257,7 +257,7 @@ func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) erro
 	if len(c.clients) == 0 {
 		logger.WarnC("maixcam", "No MaixCam devices connected")
-		return fmt.Errorf("no connected MaixCam devices")
+		return nil, fmt.Errorf("no connected MaixCam devices")
 	}
 	response := map[string]any{
@ -269,7 +269,7 @@ func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) erro
 	data, err := json.Marshal(response)
 	if err != nil {
-		return fmt.Errorf("failed to marshal response: %w", err)
+		return nil, fmt.Errorf("failed to marshal response: %w", err)
 	}
 	var sendErr error
@ -285,5 +285,5 @@ func (c *MaixCamChannel) Send(ctx context.Context, msg bus.OutboundMessage) erro
 		_ = conn.SetWriteDeadline(time.Time{})
 	}
-	return sendErr
+	return nil, sendErr
 }
--- a/pkg/channels/manager.go
+++ b/pkg/channels/manager.go
@ -12,6 +12,7 @@ import (
 	"fmt"
 	"math"
 	"net/http"
 	"sort"
 	"sync"
 	"time"
@ -158,8 +159,8 @@ func (m *Manager) RecordReactionUndo(channel, chatID string, undo func()) {
 }
 // preSend handles typing stop, reaction undo, and placeholder editing before sending a message.
-// Returns true if the message was already delivered (skip Send).
+// Returns the delivered message IDs and true when delivery completed before a normal Send.
-func (m *Manager) preSend(ctx context.Context, name string, msg bus.OutboundMessage, ch Channel) bool {
+func (m *Manager) preSend(ctx context.Context, name string, msg bus.OutboundMessage, ch Channel) ([]string, bool) {
 	key := name + ":" + msg.ChatID
 	// 1. Stop typing
@ -188,7 +189,7 @@ func (m *Manager) preSend(ctx context.Context, name string, msg bus.OutboundMess
 				}
 			}
 		}
-		return true
+		return nil, true
 	}
 	// 4. Try editing placeholder
@ -196,14 +197,14 @@ func (m *Manager) preSend(ctx context.Context, name string, msg bus.OutboundMess
 		if entry, ok := v.(placeholderEntry); ok && entry.id != "" {
 			if editor, ok := ch.(MessageEditor); ok {
 				if err := editor.EditMessage(ctx, msg.ChatID, entry.id, msg.Content); err == nil {
-					return true // edited successfully, skip Send
+					return []string{entry.id}, true
 				}
 				// edit failed → fall through to normal Send
 			}
 		}
 	}
-	return false
+	return nil, false
 }
 // preSendMedia handles typing stop, reaction undo, and placeholder cleanup
@ -513,6 +514,8 @@ func (m *Manager) StartAll(ctx context.Context) error {
 	dispatchCtx, cancel := context.WithCancel(ctx)
 	m.dispatchTask = &asyncTask{cancel: cancel}
 	failedStarts := make([]error, 0, len(m.channels))
 	failedNames := make([]string, 0, len(m.channels))
 	for name, channel := range m.channels {
 		logger.InfoCF("channels", "Starting channel", map[string]any{
@ -523,6 +526,8 @@ func (m *Manager) StartAll(ctx context.Context) error {
 				"channel": name,
 				"error":   err.Error(),
 			})
 			failedStarts = append(failedStarts, fmt.Errorf("channel %s: %w", name, err))
 			failedNames = append(failedNames, name)
 			continue
 		}
 		// Lazily create worker only after channel starts successfully
@ -532,6 +537,36 @@ func (m *Manager) StartAll(ctx context.Context) error {
 		go m.runMediaWorker(dispatchCtx, name, w)
 	}
 	if len(m.channels) > 0 && len(m.workers) == 0 {
 		if m.dispatchTask != nil {
 			m.dispatchTask.cancel()
 			m.dispatchTask = nil
 		}
 		sort.Strings(failedNames)
 		if len(failedStarts) == 0 {
 			return fmt.Errorf("failed to start any enabled channels")
 		}
 		logger.ErrorCF("channels", "All enabled channels failed to start", map[string]any{
 			"failed":          len(failedNames),
 			"total":           len(m.channels),
 			"failed_channels": failedNames,
 		})
 		return fmt.Errorf("failed to start any enabled channels: %w", errors.Join(failedStarts...))
 	}
 	if len(failedNames) > 0 {
 		sort.Strings(failedNames)
 		logger.WarnCF("channels", "Some channels failed to start", map[string]any{
 			"failed":          len(failedNames),
 			"started":         len(m.workers),
 			"total":           len(m.channels),
 			"failed_channels": failedNames,
 		})
 	}
 	// Start the dispatcher that reads from the bus and routes to workers
 	go m.dispatchOutbound(dispatchCtx)
 	go m.dispatchOutboundMedia(dispatchCtx)
@ -553,7 +588,11 @@ func (m *Manager) StartAll(ctx context.Context) error {
 		}()
 	}
-	logger.InfoC("channels", "All channels started")
+	logger.InfoCF("channels", "Channel startup completed", map[string]any{
 		"started": len(m.workers),
 		"failed":  len(failedNames),
 		"total":   len(m.channels),
 	})
 	return nil
 }
@ -699,23 +738,29 @@ func splitByLength(content string, maxLen int) []string {
 //   - ErrNotRunning / ErrSendFailed: permanent, no retry
 //   - ErrRateLimit: fixed delay retry
 //   - ErrTemporary / unknown: exponential backoff retry
-func (m *Manager) sendWithRetry(ctx context.Context, name string, w *channelWorker, msg bus.OutboundMessage) {
+func (m *Manager) sendWithRetry(
 	ctx context.Context,
 	name string,
 	w *channelWorker,
 	msg bus.OutboundMessage,
 ) ([]string, bool) {
 	// Rate limit: wait for token
 	if err := w.limiter.Wait(ctx); err != nil {
 		// ctx canceled, shutting down
-		return
+		return nil, false
 	}
 	// Pre-send: stop typing and try to edit placeholder
-	if m.preSend(ctx, name, msg, w.ch) {
+	if msgIDs, handled := m.preSend(ctx, name, msg, w.ch); handled {
-		return // placeholder was edited successfully, skip Send
+		return msgIDs, true
 	}
 	var lastErr error
 	var msgIDs []string
 	for attempt := 0; attempt <= maxRetries; attempt++ {
-		lastErr = w.ch.Send(ctx, msg)
+		msgIDs, lastErr = w.ch.Send(ctx, msg)
 		if lastErr == nil {
-			return
+			return msgIDs, true
 		}
 		// Permanent failures — don't retry
@ -734,7 +779,7 @@ func (m *Manager) sendWithRetry(ctx context.Context, name string, w *channelWork
 			case <-time.After(rateLimitDelay):
 				continue
 			case <-ctx.Done():
-				return
+				return nil, false
 			}
 		}
@ -743,7 +788,7 @@ func (m *Manager) sendWithRetry(ctx context.Context, name string, w *channelWork
 		select {
 		case <-time.After(backoff):
 		case <-ctx.Done():
-			return
+			return nil, false
 		}
 	}
@ -754,6 +799,8 @@ func (m *Manager) sendWithRetry(ctx context.Context, name string, w *channelWork
 		"error":   lastErr.Error(),
 		"retries": maxRetries,
 	})
 	return nil, false
 }
 func dispatchLoop[M any](
@ -855,7 +902,7 @@ func (m *Manager) runMediaWorker(ctx context.Context, name string, w *channelWor
 			if !ok {
 				return
 			}
-			_ = m.sendMediaWithRetry(ctx, name, w, msg)
+			_, _ = m.sendMediaWithRetry(ctx, name, w, msg)
 		case <-ctx.Done():
 			return
 		}
@ -863,14 +910,14 @@ func (m *Manager) runMediaWorker(ctx context.Context, name string, w *channelWor
 }
 // sendMediaWithRetry sends a media message through the channel with rate limiting and
-// retry logic. It returns nil on success, or the last error after retries,
+// retry logic. It returns the message IDs and nil on success, or nil and the last error
-// including when the channel does not support MediaSender.
+// after retries, including when the channel does not support MediaSender.
 func (m *Manager) sendMediaWithRetry(
 	ctx context.Context,
 	name string,
 	w *channelWorker,
 	msg bus.OutboundMediaMessage,
-) error {
+) ([]string, error) {
 	ms, ok := w.ch.(MediaSender)
 	if !ok {
 		err := fmt.Errorf("channel %q does not support media sending", name)
@ -878,22 +925,23 @@ func (m *Manager) sendMediaWithRetry(
 			"channel": name,
 			"error":   err.Error(),
 		})
-		return err
+		return nil, err
 	}
 	// Rate limit: wait for token
 	if err := w.limiter.Wait(ctx); err != nil {
-		return err
+		return nil, err
 	}
 	// Pre-send: stop typing and clean up any placeholder before sending media.
 	m.preSendMedia(ctx, name, msg, w.ch)
 	var lastErr error
 	var msgIDs []string
 	for attempt := 0; attempt <= maxRetries; attempt++ {
-		lastErr = ms.SendMedia(ctx, msg)
+		msgIDs, lastErr = ms.SendMedia(ctx, msg)
 		if lastErr == nil {
-			return nil
+			return msgIDs, nil
 		}
 		// Permanent failures — don't retry
@ -912,7 +960,7 @@ func (m *Manager) sendMediaWithRetry(
 			case <-time.After(rateLimitDelay):
 				continue
 			case <-ctx.Done():
-				return ctx.Err()
+				return nil, ctx.Err()
 			}
 		}
@ -921,7 +969,7 @@ func (m *Manager) sendMediaWithRetry(
 		select {
 		case <-time.After(backoff):
 		case <-ctx.Done():
-			return ctx.Err()
+			return nil, ctx.Err()
 		}
 	}
@ -932,7 +980,7 @@ func (m *Manager) sendMediaWithRetry(
 		"error":   lastErr.Error(),
 		"retries": maxRetries,
 	})
-	return lastErr
+	return nil, lastErr
 }
 // runTTLJanitor periodically scans the typingStops and placeholders maps
@ -1166,7 +1214,8 @@ func (m *Manager) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) e
 		return fmt.Errorf("channel %s has no active worker", msg.Channel)
 	}
-	return m.sendMediaWithRetry(ctx, msg.Channel, w, msg)
+	_, err := m.sendMediaWithRetry(ctx, msg.Channel, w, msg)
 	return err
 }
 func (m *Manager) SendToChannel(ctx context.Context, channelName, chatID, content string) error {
@ -1196,5 +1245,6 @@ func (m *Manager) SendToChannel(ctx context.Context, channelName, chatID, conten
 	// Fallback: direct send (should not happen)
 	channel, _ := m.channels[channelName]
-	return channel.Send(ctx, msg)
+	_, err := channel.Send(ctx, msg)
 	return err
 }
--- a/pkg/channels/manager_test.go
+++ b/pkg/channels/manager_test.go
@ -19,19 +19,35 @@ import (
 type mockChannel struct {
 	BaseChannel
 	sendFn            func(ctx context.Context, msg bus.OutboundMessage) error
 	startFn           func(ctx context.Context) error
 	stopFn            func(ctx context.Context) error
 	sentMessages      []bus.OutboundMessage
 	placeholdersSent  int
 	editedMessages    int
 	lastPlaceholderID string
 }
-func (m *mockChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (m *mockChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	m.sentMessages = append(m.sentMessages, msg)
-	return m.sendFn(ctx, msg)
+	if m.sendFn == nil {
 		return nil, nil
 	}
 	return nil, m.sendFn(ctx, msg)
 }
-func (m *mockChannel) Start(ctx context.Context) error { return nil }
+func (m *mockChannel) Start(ctx context.Context) error {
-func (m *mockChannel) Stop(ctx context.Context) error  { return nil }
+	if m.startFn != nil {
 		return m.startFn(ctx)
 	}
 	return nil
 }
 func (m *mockChannel) Stop(ctx context.Context) error {
 	if m.stopFn != nil {
 		return m.stopFn(ctx)
 	}
 	return nil
 }
 func (m *mockChannel) SendPlaceholder(ctx context.Context, chatID string) (string, error) {
 	m.placeholdersSent++
@ -46,16 +62,16 @@ func (m *mockChannel) EditMessage(ctx context.Context, chatID, messageID, conten
 type mockMediaChannel struct {
 	mockChannel
-	sendMediaFn       func(ctx context.Context, msg bus.OutboundMediaMessage) error
+	sendMediaFn       func(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error)
 	sentMediaMessages []bus.OutboundMediaMessage
 }
-func (m *mockMediaChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (m *mockMediaChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	m.sentMediaMessages = append(m.sentMediaMessages, msg)
 	if m.sendMediaFn != nil {
 		return m.sendMediaFn(ctx, msg)
 	}
-	return nil
+	return nil, nil
 }
 type mockDeletingMediaChannel struct {
@ -83,6 +99,101 @@ func newTestManager() *Manager {
 	return &Manager{
 		channels: make(map[string]Channel),
 		workers:  make(map[string]*channelWorker),
 		bus:      bus.NewMessageBus(),
 	}
 }
 func TestStartAll_AllChannelsFail_ReturnsJoinedError(t *testing.T) {
 	m := newTestManager()
 	errA := errors.New("channel-a start failed")
 	errB := errors.New("channel-b start failed")
 	m.channels["a"] = &mockChannel{
 		startFn: func(_ context.Context) error { return errA },
 	}
 	m.channels["b"] = &mockChannel{
 		startFn: func(_ context.Context) error { return errB },
 	}
 	err := m.StartAll(t.Context())
 	if err == nil {
 		t.Fatal("expected StartAll to fail when all channels fail")
 	}
 	if !strings.Contains(err.Error(), "failed to start any enabled channels") {
 		t.Fatalf("unexpected error: %v", err)
 	}
 	if !errors.Is(err, errA) {
 		t.Fatalf("expected error to wrap errA, got: %v", err)
 	}
 	if !errors.Is(err, errB) {
 		t.Fatalf("expected error to wrap errB, got: %v", err)
 	}
 	if len(m.workers) != 0 {
 		t.Fatalf("expected no workers on full startup failure, got %d", len(m.workers))
 	}
 	if m.dispatchTask != nil {
 		t.Fatal("expected dispatch task to be cleared on full startup failure")
 	}
 }
 func TestStartAll_PartialFailure_StartsSuccessfulWorkers(t *testing.T) {
 	m := newTestManager()
 	errBad := errors.New("bad channel start failed")
 	processed := make(chan struct{}, 1)
 	m.channels["good"] = &mockChannel{
 		sendFn: func(_ context.Context, msg bus.OutboundMessage) error {
 			if msg.Channel == "good" {
 				select {
 				case processed <- struct{}{}:
 				default:
 				}
 			}
 			return nil
 		},
 	}
 	m.channels["bad"] = &mockChannel{
 		startFn: func(_ context.Context) error { return errBad },
 	}
 	err := m.StartAll(t.Context())
 	if err != nil {
 		t.Fatalf("expected StartAll to succeed with partial channel failures, got: %v", err)
 	}
 	if len(m.workers) != 1 {
 		t.Fatalf("expected exactly 1 active worker, got %d", len(m.workers))
 	}
 	if _, ok := m.workers["good"]; !ok {
 		t.Fatal("expected worker for successful channel 'good'")
 	}
 	if _, ok := m.workers["bad"]; ok {
 		t.Fatal("did not expect worker for failed channel 'bad'")
 	}
 	if m.dispatchTask == nil {
 		t.Fatal("expected dispatch task to run when at least one channel starts")
 	}
 	pubCtx, pubCancel := context.WithTimeout(context.Background(), 2*time.Second)
 	defer pubCancel()
 	if err := m.bus.PublishOutbound(pubCtx, bus.OutboundMessage{
 		Channel: "good",
 		ChatID:  "chat-1",
 		Content: "hello",
 	}); err != nil {
 		t.Fatalf("PublishOutbound() error = %v", err)
 	}
 	select {
 	case <-processed:
 		// worker processed outbound message as expected
 	case <-time.After(2 * time.Second):
 		t.Fatal("expected successful channel worker to process outbound message")
 	}
 	stopCtx, stopCancel := context.WithTimeout(context.Background(), 2*time.Second)
 	defer stopCancel()
 	if err := m.StopAll(stopCtx); err != nil {
 		t.Fatalf("StopAll() error = %v", err)
 	}
 }
@ -247,9 +358,9 @@ func TestSendMedia_Success(t *testing.T) {
 	m := newTestManager()
 	var callCount int
 	ch := &mockMediaChannel{
-		sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) error {
+		sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) ([]string, error) {
 			callCount++
-			return nil
+			return nil, nil
 		},
 	}
 	w := &channelWorker{
@ -275,8 +386,8 @@ func TestSendMedia_Success(t *testing.T) {
 func TestSendMedia_PropagatesFailure(t *testing.T) {
 	m := newTestManager()
 	ch := &mockMediaChannel{
-		sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) error {
+		sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) ([]string, error) {
-			return fmt.Errorf("bad upload: %w", ErrSendFailed)
+			return nil, fmt.Errorf("bad upload: %w", ErrSendFailed)
 		},
 	}
 	w := &channelWorker{
@ -330,8 +441,8 @@ func TestSendMedia_DeletesPlaceholderBeforeSending(t *testing.T) {
 	m := newTestManager()
 	ch := &mockDeletingMediaChannel{
 		mockMediaChannel: mockMediaChannel{
-			sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) error {
+			sendMediaFn: func(_ context.Context, _ bus.OutboundMediaMessage) ([]string, error) {
-				return nil
+				return nil, nil
 			},
 		},
 	}
@ -628,7 +739,7 @@ func TestPreSend_PlaceholderEditSuccess(t *testing.T) {
 	m.RecordPlaceholder("test", "123", "456")
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "123", Content: "hello"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if !edited {
 		t.Fatal("expected preSend to return true (placeholder edited)")
@ -658,7 +769,7 @@ func TestPreSend_PlaceholderEditFails_FallsThrough(t *testing.T) {
 	m.RecordPlaceholder("test", "123", "456")
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "123", Content: "hello"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if edited {
 		t.Fatal("expected preSend to return false when edit fails")
@ -734,7 +845,7 @@ func TestPreSend_NoRegisteredState(t *testing.T) {
 	}
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "123", Content: "hello"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if edited {
 		t.Fatal("expected preSend to return false with no registered state")
@ -764,7 +875,7 @@ func TestPreSend_TypingAndPlaceholder(t *testing.T) {
 	m.RecordPlaceholder("test", "123", "456")
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "123", Content: "hello"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if !stopCalled {
 		t.Fatal("expected typing stop to be called")
@ -1025,7 +1136,7 @@ func TestPreSendStillWorksWithWrappedTypes(t *testing.T) {
 	m.RecordPlaceholder("test", "chat1", "ph_id")
 	msg := bus.OutboundMessage{Channel: "test", ChatID: "chat1", Content: "response"}
-	edited := m.preSend(context.Background(), "test", msg, ch)
+	_, edited := m.preSend(context.Background(), "test", msg, ch)
 	if !stopCalled {
 		t.Fatal("expected typing stop to be called via wrapped type")
--- a/pkg/channels/matrix/matrix.go
+++ b/pkg/channels/matrix/matrix.go
@ -380,26 +380,26 @@ func markdownToHTML(md string) string {
 	return strings.TrimSpace(string(markdown.ToHTML([]byte(md), p, renderer)))
 }
-func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *MatrixChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	roomID := id.RoomID(strings.TrimSpace(msg.ChatID))
 	if roomID == "" {
-		return fmt.Errorf("matrix room ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("matrix room ID is empty: %w", channels.ErrSendFailed)
 	}
 	content := strings.TrimSpace(msg.Content)
 	if content == "" {
-		return nil
+		return nil, nil
 	}
-	_, err := c.client.SendMessageEvent(ctx, roomID, event.EventMessage, c.messageContent(content))
+	resp, err := c.client.SendMessageEvent(ctx, roomID, event.EventMessage, c.messageContent(content))
 	if err != nil {
-		return fmt.Errorf("matrix send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("matrix send: %w", channels.ErrTemporary)
 	}
-	return nil
+	return []string{resp.EventID.String()}, nil
 }
 func (c *MatrixChannel) messageContent(text string) *event.MessageEventContent {
@ -412,9 +412,9 @@ func (c *MatrixChannel) messageContent(text string) *event.MessageEventContent {
 }
 // SendMedia implements channels.MediaSender.
-func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	sendCtx := ctx
 	if sendCtx == nil {
@ -423,17 +423,18 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	roomID := id.RoomID(strings.TrimSpace(msg.ChatID))
 	if roomID == "" {
-		return fmt.Errorf("matrix room ID is empty: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("matrix room ID is empty: %w", channels.ErrSendFailed)
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	var eventIDs []string
 	for _, part := range msg.Parts {
 		if err := sendCtx.Err(); err != nil {
-			return err
+			return nil, err
 		}
 		localPath, meta, err := store.ResolveWithMeta(part.Ref)
@ -498,7 +499,7 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 				"type":  part.Type,
 				"error": err.Error(),
 			})
-			return fmt.Errorf("matrix upload media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("matrix upload media: %w", channels.ErrTemporary)
 		}
 		msgType := matrixOutboundMsgType(part.Type, filename, contentType)
@ -511,17 +512,21 @@ func (c *MatrixChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 			uploadResp.ContentURI.CUString(),
 		)
-		if _, err := c.client.SendMessageEvent(sendCtx, roomID, event.EventMessage, content); err != nil {
+		sendResp, err := c.client.SendMessageEvent(sendCtx, roomID, event.EventMessage, content)
 		if err != nil {
 			logger.ErrorCF("matrix", "Failed to send media message", map[string]any{
 				"room_id": roomID.String(),
 				"type":    msgType,
 				"error":   err.Error(),
 			})
-			return fmt.Errorf("matrix send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("matrix send media: %w", channels.ErrTemporary)
 		}
 		if sendResp != nil {
 			eventIDs = append(eventIDs, sendResp.EventID.String())
 		}
 	}
-	return nil
+	return eventIDs, nil
 }
 // StartTyping implements channels.TypingCapable.
@ -1295,3 +1300,8 @@ func stripUserMentionWithRegexp(text string, userID id.UserID, mentionR *regexp.
 	cleaned = strings.TrimLeft(cleaned, ",:; ")
 	return strings.TrimSpace(cleaned)
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *MatrixChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/media.go
+++ b/pkg/channels/media.go
@ -11,5 +11,5 @@ import (
 // Manager discovers channels implementing this interface via type
 // assertion and routes OutboundMediaMessage to them.
 type MediaSender interface {
-	SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error
+	SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error)
 }
--- a/pkg/channels/onebot/onebot.go
+++ b/pkg/channels/onebot/onebot.go
@ -391,15 +391,15 @@ func (c *OneBotChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	// Check ctx before entering write path
 	select {
 	case <-ctx.Done():
-		return ctx.Err()
+		return nil, ctx.Err()
 	default:
 	}
@ -408,12 +408,12 @@ func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 	c.mu.Unlock()
 	if conn == nil {
-		return fmt.Errorf("OneBot WebSocket not connected")
+		return nil, fmt.Errorf("OneBot WebSocket not connected")
 	}
 	action, params, err := c.buildSendRequest(msg)
 	if err != nil {
-		return err
+		return nil, err
 	}
 	echo := fmt.Sprintf("send_%d", atomic.AddInt64(&c.echoCounter, 1))
@ -426,7 +426,7 @@ func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 	data, err := json.Marshal(req)
 	if err != nil {
-		return fmt.Errorf("failed to marshal OneBot request: %w", err)
+		return nil, fmt.Errorf("failed to marshal OneBot request: %w", err)
 	}
 	c.writeMu.Lock()
@ -439,21 +439,21 @@ func (c *OneBotChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 		logger.ErrorCF("onebot", "Failed to send message", map[string]any{
 			"error": err.Error(),
 		})
-		return fmt.Errorf("onebot send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("onebot send: %w", channels.ErrTemporary)
 	}
-	return nil
+	return nil, nil
 }
 // SendMedia implements the channels.MediaSender interface.
-func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	select {
 	case <-ctx.Done():
-		return ctx.Err()
+		return nil, ctx.Err()
 	default:
 	}
@ -462,12 +462,12 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	c.mu.Unlock()
 	if conn == nil {
-		return fmt.Errorf("OneBot WebSocket not connected")
+		return nil, fmt.Errorf("OneBot WebSocket not connected")
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	// Build media segments
@ -508,7 +508,7 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	}
 	if len(segments) == 0 {
-		return nil
+		return nil, nil
 	}
 	chatID := msg.ChatID
@ -524,7 +524,7 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	id, err := strconv.ParseInt(rawID, 10, 64)
 	if err != nil {
-		return fmt.Errorf("invalid %s in chatID: %s: %w", idKey, chatID, channels.ErrSendFailed)
+		return nil, fmt.Errorf("invalid %s in chatID: %s: %w", idKey, chatID, channels.ErrSendFailed)
 	}
 	echo := fmt.Sprintf("send_%d", atomic.AddInt64(&c.echoCounter, 1))
@ -537,7 +537,7 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 	data, err := json.Marshal(req)
 	if err != nil {
-		return fmt.Errorf("failed to marshal OneBot request: %w", err)
+		return nil, fmt.Errorf("failed to marshal OneBot request: %w", err)
 	}
 	c.writeMu.Lock()
@ -550,10 +550,10 @@ func (c *OneBotChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMess
 		logger.ErrorCF("onebot", "Failed to send media message", map[string]any{
 			"error": err.Error(),
 		})
-		return fmt.Errorf("onebot send media: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("onebot send media: %w", channels.ErrTemporary)
 	}
-	return nil
+	return nil, nil
 }
 func (c *OneBotChannel) buildMessageSegments(chatID, content string) []oneBotMessageSegment {
@ -1104,3 +1104,8 @@ func truncate(s string, n int) string {
 	}
 	return string(runes[:n]) + "..."
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *OneBotChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/pico/client.go
+++ b/pkg/channels/pico/client.go
@ -273,22 +273,22 @@ func (c *PicoClientChannel) handleServerMessage(pc *picoConn, msg PicoMessage) {
 }
 // Send sends a message to the remote server.
-func (c *PicoClientChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *PicoClientChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	c.mu.Lock()
 	pc := c.conn
 	c.mu.Unlock()
 	if pc == nil || pc.closed.Load() {
-		return channels.ErrSendFailed
+		return nil, channels.ErrSendFailed
 	}
 	outMsg := newMessage(TypeMessageSend, map[string]any{
 		"content": msg.Content,
 	})
 	outMsg.SessionID = strings.TrimPrefix(msg.ChatID, "pico_client:")
-	return pc.writeJSON(outMsg)
+	return nil, pc.writeJSON(outMsg)
 }
 // StartTyping implements channels.TypingCapable.
--- a/pkg/channels/pico/client_test.go
+++ b/pkg/channels/pico/client_test.go
@ -46,7 +46,7 @@ func TestSend_NotRunning(t *testing.T) {
 	if err != nil {
 		t.Fatal(err)
 	}
-	err = ch.Send(context.Background(), bus.OutboundMessage{Content: "hi"})
+	_, err = ch.Send(context.Background(), bus.OutboundMessage{Content: "hi"})
 	if !errors.Is(err, channels.ErrNotRunning) {
 		t.Fatalf("expected ErrNotRunning, got %v", err)
 	}
@ -124,7 +124,7 @@ func TestClientChannel_ConnectAndSend(t *testing.T) {
 	defer ch.Stop(ctx)
 	// Send a message
-	err = ch.Send(ctx, bus.OutboundMessage{
+	_, err = ch.Send(ctx, bus.OutboundMessage{
 		ChatID:  "pico_client:sess-1",
 		Content: "hello",
 	})
@ -179,7 +179,7 @@ func TestClientChannel_ReceivesServerMessage(t *testing.T) {
 	defer ch.Stop(ctx)
 	// Send a message; the echo server replies with message.create
-	err = ch.Send(ctx, bus.OutboundMessage{
+	_, err = ch.Send(ctx, bus.OutboundMessage{
 		ChatID:  "pico_client:sess-echo",
 		Content: "ping",
 	})
@ -252,7 +252,7 @@ func TestSend_ClosedConnection(t *testing.T) {
 	ch.conn.close()
 	ch.mu.Unlock()
-	err = ch.Send(ctx, bus.OutboundMessage{
+	_, err = ch.Send(ctx, bus.OutboundMessage{
 		ChatID:  "pico_client:sess-close",
 		Content: "should fail",
 	})
--- a/pkg/channels/pico/pico.go
+++ b/pkg/channels/pico/pico.go
@ -234,16 +234,16 @@ func (c *PicoChannel) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 }
 // Send implements Channel — sends a message to the appropriate WebSocket connection.
-func (c *PicoChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *PicoChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	outMsg := newMessage(TypeMessageCreate, map[string]any{
 		"content": msg.Content,
 	})
-	return c.broadcastToSession(msg.ChatID, outMsg)
+	return nil, c.broadcastToSession(msg.ChatID, outMsg)
 }
 // EditMessage implements channels.MessageEditor.
--- a/pkg/channels/qq/qq.go
+++ b/pkg/channels/qq/qq.go
@ -200,9 +200,9 @@ func (c *QQChannel) getChatKind(chatID string) string {
 	return "group"
 }
-func (c *QQChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *QQChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	chatKind := c.getChatKind(msg.ChatID)
@ -236,11 +236,14 @@ func (c *QQChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
 	}
 	// Route to group or C2C.
-	var err error
+	var (
 		sentMsg *dto.Message
 		err     error
 	)
 	if chatKind == "group" {
-		_, err = c.api.PostGroupMessage(ctx, msg.ChatID, msgToCreate)
+		sentMsg, err = c.api.PostGroupMessage(ctx, msg.ChatID, msgToCreate)
 	} else {
-		_, err = c.api.PostC2CMessage(ctx, msg.ChatID, msgToCreate)
+		sentMsg, err = c.api.PostC2CMessage(ctx, msg.ChatID, msgToCreate)
 	}
 	if err != nil {
@ -249,10 +252,13 @@ func (c *QQChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
 			"chat_kind": chatKind,
 			"error":     err.Error(),
 		})
-		return fmt.Errorf("qq send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("qq send: %w", channels.ErrTemporary)
 	}
-	return nil
+	if sentMsg == nil {
 		return nil, nil
 	}
 	return []string{sentMsg.ID}, nil
 }
 // StartTyping implements channels.TypingCapable.
@ -319,13 +325,14 @@ func (c *QQChannel) StartTyping(ctx context.Context, chatID string) (func(), err
 // QQ group/C2C media sending is a two-step flow:
 // 1. Upload media to /files using a remote URL or base64-encoded local bytes.
 // 2. Send a msg_type=7 message using the returned file_info.
-func (c *QQChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *QQChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	chatKind := c.getChatKind(msg.ChatID)
 	var messageIDs []string
 	for _, part := range msg.Parts {
 		fileInfo, err := c.uploadMedia(ctx, chatKind, msg.ChatID, part)
 		if err != nil {
@ -335,22 +342,26 @@ func (c *QQChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage)
 				"error":   err.Error(),
 			})
 			if errors.Is(err, channels.ErrSendFailed) {
-				return err
+				return nil, err
 			}
-			return fmt.Errorf("qq send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("qq send media: %w", channels.ErrTemporary)
 		}
-		if err := c.sendUploadedMedia(ctx, chatKind, msg.ChatID, part, fileInfo); err != nil {
+		sentMsg, err := c.sendUploadedMedia(ctx, chatKind, msg.ChatID, part, fileInfo)
 		if err != nil {
 			logger.ErrorCF("qq", "Failed to send media", map[string]any{
 				"type":    part.Type,
 				"chat_id": msg.ChatID,
 				"error":   err.Error(),
 			})
-			return fmt.Errorf("qq send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("qq send media: %w", channels.ErrTemporary)
 		}
 		if sentMsg != nil && sentMsg.ID != "" {
 			messageIDs = append(messageIDs, sentMsg.ID)
 		}
 	}
-	return nil
+	return messageIDs, nil
 }
 type qqMediaUpload struct {
@ -517,7 +528,7 @@ func (c *QQChannel) sendUploadedMedia(
 	chatKind, chatID string,
 	part bus.MediaPart,
 	fileInfo []byte,
-) error {
+) (*dto.Message, error) {
 	msg := &dto.MessageToCreate{
 		Content: part.Caption,
 		MsgType: dto.RichMediaMsg,
@ -532,11 +543,11 @@ func (c *QQChannel) sendUploadedMedia(
 	}
 	if chatKind == "group" {
-		_, err := c.api.PostGroupMessage(ctx, chatID, msg)
+		sentMsg, err := c.api.PostGroupMessage(ctx, chatID, msg)
-		return err
+		return sentMsg, err
 	}
-	_, err := c.api.PostC2CMessage(ctx, chatID, msg)
+	sentMsg, err := c.api.PostC2CMessage(ctx, chatID, msg)
-	return err
+	return sentMsg, err
 }
 func (c *QQChannel) applyPassiveReplyMetadata(chatID string, msg *dto.MessageToCreate) {
@ -991,3 +1002,8 @@ func sanitizeURLs(text string) string {
 		return scheme + domain + path
 	})
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *QQChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/qq/qq_test.go
+++ b/pkg/channels/qq/qq_test.go
@ -209,7 +209,7 @@ func TestSendMedia_UploadsLocalFileAsBase64(t *testing.T) {
 	ch.lastMsgID.Store("group-1", "msg-1")
 	ch.msgSeqCounters.Store("group-1", new(atomic.Uint64))
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type:    "image",
@ -303,7 +303,7 @@ func assertAudioWAVUploadType(t *testing.T, duration time.Duration, wantFileType
 	ch.SetMediaStore(store)
 	ch.chatType.Store("group-1", "group")
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type: "audio",
@ -337,7 +337,7 @@ func TestSendMedia_RemoteAudioFallsBackToFileUpload(t *testing.T) {
 	ch.SetRunning(true)
 	ch.chatType.Store("user-1", "direct")
-	err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "user-1",
 		Parts: []bus.MediaPart{{
 			Type: "audio",
@ -383,7 +383,7 @@ func TestSendMedia_LocalAudioWithUnknownDurationFallsBackToFileUpload(t *testing
 	ch.SetMediaStore(store)
 	ch.chatType.Store("group-1", "group")
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type: "audio",
@ -417,7 +417,7 @@ func TestSendMedia_UsesRemoteURLUploadForC2C(t *testing.T) {
 	ch.SetRunning(true)
 	ch.chatType.Store("user-1", "direct")
-	err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "user-1",
 		Parts: []bus.MediaPart{{
 			Type: "file",
@ -490,7 +490,7 @@ func TestSendMedia_LocalFileUploadIncludesStoredFilename(t *testing.T) {
 	ch.SetMediaStore(store)
 	ch.chatType.Store("user-1", "direct")
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "user-1",
 		Parts: []bus.MediaPart{{
 			Type: "file",
@ -528,7 +528,7 @@ func TestSendMedia_ReturnsSendFailedWithoutMediaStore(t *testing.T) {
 	ch.SetRunning(true)
 	ch.chatType.Store("group-1", "group")
-	err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err := ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type: "image",
@ -578,7 +578,7 @@ func TestSendMedia_ReturnsSendFailedWhenLocalFileExceedsBase64MiBLimit(t *testin
 	ch.SetMediaStore(store)
 	ch.chatType.Store("group-1", "group")
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "group-1",
 		Parts: []bus.MediaPart{{
 			Type: "file",
--- a/pkg/channels/slack/slack.go
+++ b/pkg/channels/slack/slack.go
@ -108,14 +108,14 @@ func (c *SlackChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *SlackChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *SlackChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	channelID, threadTS := parseSlackChatID(msg.ChatID)
 	if channelID == "" {
-		return fmt.Errorf("invalid slack chat ID: %s", msg.ChatID)
+		return nil, fmt.Errorf("invalid slack chat ID: %s", msg.ChatID)
 	}
 	opts := []slack.MsgOption{
@ -130,9 +130,9 @@ func (c *SlackChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 		opts = append(opts, slack.MsgOptionTS(threadTS))
 	}
-	_, _, err := c.api.PostMessageContext(ctx, channelID, opts...)
+	_, ts, err := c.api.PostMessageContext(ctx, channelID, opts...)
 	if err != nil {
-		return fmt.Errorf("slack send: %w", channels.ErrTemporary)
+		return nil, fmt.Errorf("slack send: %w", channels.ErrTemporary)
 	}
 	if ref, ok := c.pendingAcks.LoadAndDelete(msg.ChatID); ok {
@ -148,23 +148,23 @@ func (c *SlackChannel) Send(ctx context.Context, msg bus.OutboundMessage) error
 		"thread_ts":  threadTS,
 	})
-	return nil
+	return []string{ts}, nil
 }
 // SendMedia implements the channels.MediaSender interface.
-func (c *SlackChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *SlackChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	channelID, _ := parseSlackChatID(msg.ChatID)
 	if channelID == "" {
-		return fmt.Errorf("invalid slack chat ID: %s", msg.ChatID)
+		return nil, fmt.Errorf("invalid slack chat ID: %s", msg.ChatID)
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	for _, part := range msg.Parts {
@ -198,11 +198,13 @@ func (c *SlackChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessa
 				"filename": filename,
 				"error":    err.Error(),
 			})
-			return fmt.Errorf("slack send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("slack send media: %w", channels.ErrTemporary)
 		}
 	}
-	return nil
+	// UploadFileV2 does not expose the posted message timestamp in its
 	// response; returning nil avoids conflating file IDs with message IDs.
 	return nil, nil
 }
 // ReactToMessage implements channels.ReactionCapable.
--- a/pkg/channels/telegram/parser_markdown_to_html.go
+++ b/pkg/channels/telegram/parser_markdown_to_html.go
@ -16,14 +16,15 @@ func markdownToTelegramHTML(text string) string {
 	inlineCodes := extractInlineCodes(text)
 	text = inlineCodes.text
 	links := extractLinks(text)
 	text = links.text
 	text = reHeading.ReplaceAllString(text, "$1")
 	text = reBlockquote.ReplaceAllString(text, "$1")
 	text = escapeHTML(text)
 	text = reLink.ReplaceAllString(text, `<a href="$2">$1</a>`)
 	text = reBoldStar.ReplaceAllString(text, "<b>$1</b>")
 	text = reBoldUnder.ReplaceAllString(text, "<b>$1</b>")
@ -40,6 +41,12 @@ func markdownToTelegramHTML(text string) string {
 	text = reListItem.ReplaceAllString(text, "• ")
 	for i, lnk := range links.links {
 		label := escapeHTML(lnk[0])
 		url := lnk[1]
 		text = strings.ReplaceAll(text, fmt.Sprintf("\x00LK%d\x00", i), fmt.Sprintf(`<a href="%s">%s</a>`, url, label))
 	}
 	for i, code := range inlineCodes.codes {
 		escaped := escapeHTML(code)
 		text = strings.ReplaceAll(text, fmt.Sprintf("\x00IC%d\x00", i), fmt.Sprintf("<code>%s</code>", escaped))
@ -57,6 +64,29 @@ func markdownToTelegramHTML(text string) string {
 	return text
 }
 type linkMatch struct {
 	text  string
 	links [][2]string // [label, url]
 }
 func extractLinks(text string) linkMatch {
 	matches := reLink.FindAllStringSubmatch(text, -1)
 	extracted := make([][2]string, 0, len(matches))
 	for _, match := range matches {
 		extracted = append(extracted, [2]string{match[1], match[2]})
 	}
 	i := 0
 	text = reLink.ReplaceAllStringFunc(text, func(m string) string {
 		placeholder := fmt.Sprintf("\x00LK%d\x00", i)
 		i++
 		return placeholder
 	})
 	return linkMatch{text: text, links: extracted}
 }
 type codeBlockMatch struct {
 	text  string
 	codes []string
--- a/pkg/channels/telegram/parser_markdown_to_html_test.go
+++ b/pkg/channels/telegram/parser_markdown_to_html_test.go
@ -0,0 +1,66 @@
 package telegram
 import (
 	"testing"
 	"github.com/stretchr/testify/require"
 )
 func Test_markdownToTelegramHTML(t *testing.T) {
 	cases := []struct {
 		name     string
 		input    string
 		expected string
 	}{
 		{
 			name:     "plain text",
 			input:    "hello world",
 			expected: "hello world",
 		},
 		{
 			name:     "bold",
 			input:    "**bold text**",
 			expected: "<b>bold text</b>",
 		},
 		{
 			name:     "italic",
 			input:    "_italic text_",
 			expected: "<i>italic text</i>",
 		},
 		{
 			name:     "link without underscores in URL",
 			input:    "[click here](https://example.com/path)",
 			expected: `<a href="https://example.com/path">click here</a>`,
 		},
 		{
 			name: "link with underscores in URL is not corrupted by italic regex",
 			// Google Flights URLs use URL-safe base64 with underscores in the tfs param.
 			// Previously reItalic ran after reLink, matching _text_ inside href and injecting
 			// <i> tags into the URL, which broke the link in Telegram.
 			input:    "[3 → 10 сентября — от $202](https://www.google.com/travel/flights/search?tfs=CBwQAho_EgoyURL_safe_base64)",
 			expected: `<a href="https://www.google.com/travel/flights/search?tfs=CBwQAho_EgoyURL_safe_base64">3 → 10 сентября — от $202</a>`,
 		},
 		{
 			name:     "multiple links all survive",
 			input:    "[first](https://a.com/path_one) and [second](https://b.com/path_two_x)",
 			expected: `<a href="https://a.com/path_one">first</a> and <a href="https://b.com/path_two_x">second</a>`,
 		},
 		{
 			name:     "link label with HTML special chars is escaped",
 			input:    "[a & b](https://example.com)",
 			expected: `<a href="https://example.com">a &amp; b</a>`,
 		},
 		{
 			name:     "HTML special chars in plain text are escaped",
 			input:    "a & b < c > d",
 			expected: "a &amp; b &lt; c &gt; d",
 		},
 	}
 	for _, tc := range cases {
 		t.Run(tc.name, func(t *testing.T) {
 			actual := markdownToTelegramHTML(tc.input)
 			require.Equal(t, tc.expected, actual)
 		})
 	}
 }
--- a/pkg/channels/telegram/telegram.go
+++ b/pkg/channels/telegram/telegram.go
@ -4,6 +4,7 @@ import (
 	"context"
 	"crypto/rand"
 	"encoding/binary"
 	"errors"
 	"fmt"
 	"io"
 	"net/http"
@ -168,26 +169,27 @@ func (c *TelegramChannel) Stop(ctx context.Context) error {
 	return nil
 }
-func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) error {
+func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	useMarkdownV2 := c.config.Channels.Telegram.UseMarkdownV2
 	chatID, threadID, err := parseTelegramChatID(msg.ChatID)
 	if err != nil {
-		return fmt.Errorf("invalid chat ID %s: %w", msg.ChatID, channels.ErrSendFailed)
+		return nil, fmt.Errorf("invalid chat ID %s: %w", msg.ChatID, channels.ErrSendFailed)
 	}
 	if msg.Content == "" {
-		return nil
+		return nil, nil
 	}
 	// The Manager already splits messages to ≤4000 chars (WithMaxMessageLength),
 	// so msg.Content is guaranteed to be within that limit. We still need to
 	// check if HTML expansion pushes it beyond Telegram's 4096-char API limit.
 	replyToID := msg.ReplyToMessageID
 	var messageIDs []string
 	queue := []string{msg.Content}
 	for len(queue) > 0 {
 		chunk := queue[0]
@ -206,16 +208,18 @@ func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) err
 			}
 			if smallerLen <= 0 {
-				if err := c.sendChunk(ctx, sendChunkParams{
+				msgID, err := c.sendChunk(ctx, sendChunkParams{
 					chatID:        chatID,
 					threadID:      threadID,
 					content:       content,
 					replyToID:     replyToID,
 					mdFallback:    chunk,
 					useMarkdownV2: useMarkdownV2,
-				}); err != nil {
+				})
-					return err
+				if err != nil {
 					return nil, err
 				}
 				messageIDs = append(messageIDs, msgID)
 				replyToID = ""
 				continue
 			}
@ -244,21 +248,23 @@ func (c *TelegramChannel) Send(ctx context.Context, msg bus.OutboundMessage) err
 			continue
 		}
-		if err := c.sendChunk(ctx, sendChunkParams{
+		msgID, err := c.sendChunk(ctx, sendChunkParams{
 			chatID:        chatID,
 			threadID:      threadID,
 			content:       content,
 			replyToID:     replyToID,
 			mdFallback:    chunk,
 			useMarkdownV2: useMarkdownV2,
-		}); err != nil {
+		})
-			return err
+		if err != nil {
 			return nil, err
 		}
 		messageIDs = append(messageIDs, msgID)
 		// Only the first chunk should be a reply; subsequent chunks are normal messages.
 		replyToID = ""
 	}
-	return nil
+	return messageIDs, nil
 }
 type sendChunkParams struct {
@ -275,7 +281,7 @@ type sendChunkParams struct {
 func (c *TelegramChannel) sendChunk(
 	ctx context.Context,
 	params sendChunkParams,
-) error {
+) (string, error) {
 	tgMsg := tu.Message(tu.ID(params.chatID), params.content)
 	tgMsg.MessageThreadID = params.threadID
 	if params.useMarkdownV2 {
@ -292,17 +298,19 @@ func (c *TelegramChannel) sendChunk(
 		}
 	}
-	if _, err := c.bot.SendMessage(ctx, tgMsg); err != nil {
+	pMsg, err := c.bot.SendMessage(ctx, tgMsg)
 	if err != nil {
 		logParseFailed(err, params.useMarkdownV2)
 		tgMsg.Text = params.mdFallback
 		tgMsg.ParseMode = ""
-		if _, err = c.bot.SendMessage(ctx, tgMsg); err != nil {
+		pMsg, err = c.bot.SendMessage(ctx, tgMsg)
-			return fmt.Errorf("telegram send: %w", channels.ErrTemporary)
+		if err != nil {
 			return "", fmt.Errorf("telegram send: %w", channels.ErrTemporary)
 		}
 	}
-	return nil
+	return strconv.Itoa(pMsg.MessageID), nil
 }
 // maxTypingDuration limits how long the typing indicator can run.
@ -370,9 +378,39 @@ func (c *TelegramChannel) EditMessage(ctx context.Context, chatID string, messag
 	}
 	_, err = c.bot.EditMessageText(ctx, editMsg)
 	if err != nil {
 		// If it failed because it was already modified (likely from a previous
 		// attempt that timed out on our end but landed on Telegram), we treat
 		// it as success to prevent the Manager from sending a duplicate message.
 		if strings.Contains(err.Error(), "message is not modified") {
 			return nil
 		}
 		// Only fallback to plain text if the error looks like a parsing failure (Bad Request).
 		// Network errors or timeouts should NOT trigger a retry with different content.
 		if strings.Contains(err.Error(), "Bad Request") {
 			logParseFailed(err, useMarkdownV2)
 			_, err = c.bot.EditMessageText(ctx, tu.EditMessageText(tu.ID(cid), mid, content))
 		}
 	}
 	if err != nil {
 		if strings.Contains(err.Error(), "message is not modified") {
 			return nil
 		}
 		if isPostConnectError(err) {
 			logger.WarnCF(
 				"telegram",
 				"EditMessage likely landed but result is unknown; swallowing error to prevent duplicate",
 				map[string]any{
 					"chat_id": chatID,
 					"mid":     mid,
 					"error":   err.Error(),
 				},
 			)
 			return nil // Swallow to prevent Manager fallback to a new SendMessage
 		}
 	}
 	return err
 }
@ -420,21 +458,22 @@ func (c *TelegramChannel) SendPlaceholder(ctx context.Context, chatID string) (s
 }
 // SendMedia implements the channels.MediaSender interface.
-func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) error {
+func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMessage) ([]string, error) {
 	if !c.IsRunning() {
-		return channels.ErrNotRunning
+		return nil, channels.ErrNotRunning
 	}
 	chatID, threadID, err := parseTelegramChatID(msg.ChatID)
 	if err != nil {
-		return fmt.Errorf("invalid chat ID %s: %w", msg.ChatID, channels.ErrSendFailed)
+		return nil, fmt.Errorf("invalid chat ID %s: %w", msg.ChatID, channels.ErrSendFailed)
 	}
 	store := c.GetMediaStore()
 	if store == nil {
-		return fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
+		return nil, fmt.Errorf("no media store available: %w", channels.ErrSendFailed)
 	}
 	var messageIDs []string
 	for _, part := range msg.Parts {
 		localPath, err := store.Resolve(part.Ref)
 		if err != nil {
@ -454,6 +493,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 			continue
 		}
 		var tgResult *telego.Message
 		switch part.Type {
 		case "image":
 			params := &telego.SendPhotoParams{
@ -462,11 +502,11 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 				Photo:           telego.InputFile{File: file},
 				Caption:         part.Caption,
 			}
-			_, err = c.bot.SendPhoto(ctx, params)
+			tgResult, err = c.bot.SendPhoto(ctx, params)
 			if err != nil && strings.Contains(err.Error(), "PHOTO_INVALID_DIMENSIONS") {
 				if _, seekErr := file.Seek(0, io.SeekStart); seekErr != nil {
 					file.Close()
-					return fmt.Errorf("telegram rewind media after photo failure: %w", channels.ErrTemporary)
+					return nil, fmt.Errorf("telegram rewind media after photo failure: %w", channels.ErrTemporary)
 				}
 				docParams := &telego.SendDocumentParams{
@ -475,7 +515,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 					Document:        telego.InputFile{File: file},
 					Caption:         part.Caption,
 				}
-				_, err = c.bot.SendDocument(ctx, docParams)
+				tgResult, err = c.bot.SendDocument(ctx, docParams)
 			}
 		case "audio":
 			// Send OGG files with "voice" in the filename as Telegram voice
@ -488,7 +528,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 					Voice:           telego.InputFile{File: file},
 					Caption:         part.Caption,
 				}
-				_, err = c.bot.SendVoice(ctx, vparams)
+				tgResult, err = c.bot.SendVoice(ctx, vparams)
 			} else {
 				params := &telego.SendAudioParams{
 					ChatID:          tu.ID(chatID),
@ -496,7 +536,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 					Audio:           telego.InputFile{File: file},
 					Caption:         part.Caption,
 				}
-				_, err = c.bot.SendAudio(ctx, params)
+				tgResult, err = c.bot.SendAudio(ctx, params)
 			}
 		case "video":
 			params := &telego.SendVideoParams{
@ -505,7 +545,7 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 				Video:           telego.InputFile{File: file},
 				Caption:         part.Caption,
 			}
-			_, err = c.bot.SendVideo(ctx, params)
+			tgResult, err = c.bot.SendVideo(ctx, params)
 		default: // "file" or unknown types
 			params := &telego.SendDocumentParams{
 				ChatID:          tu.ID(chatID),
@ -513,9 +553,12 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 				Document:        telego.InputFile{File: file},
 				Caption:         part.Caption,
 			}
-			_, err = c.bot.SendDocument(ctx, params)
+			tgResult, err = c.bot.SendDocument(ctx, params)
 		}
 		if tgResult != nil {
 			messageIDs = append(messageIDs, strconv.Itoa(tgResult.MessageID))
 		}
 		file.Close()
 		if err != nil {
@ -523,11 +566,11 @@ func (c *TelegramChannel) SendMedia(ctx context.Context, msg bus.OutboundMediaMe
 				"type":  part.Type,
 				"error": err.Error(),
 			})
-			return fmt.Errorf("telegram send media: %w", channels.ErrTemporary)
+			return nil, fmt.Errorf("telegram send media: %w", channels.ErrTemporary)
 		}
 	}
-	return nil
+	return messageIDs, nil
 }
 func (c *TelegramChannel) handleMessage(ctx context.Context, message *telego.Message) error {
@ -660,6 +703,23 @@ func (c *TelegramChannel) handleMessage(ctx context.Context, message *telego.Mes
 		content = cleaned
 	}
 	if message.ReplyToMessage != nil {
 		quotedMedia := quotedTelegramMediaRefs(
 			message.ReplyToMessage,
 			func(fileID, ext, filename string) string {
 				localPath := c.downloadFile(ctx, fileID, ext)
 				if localPath == "" {
 					return ""
 				}
 				return storeMedia(localPath, filename)
 			},
 		)
 		if len(quotedMedia) > 0 {
 			mediaPaths = append(quotedMedia, mediaPaths...)
 		}
 		content = c.prependTelegramQuotedReply(content, message.ReplyToMessage)
 	}
 	// For forum topics, embed the thread ID as "chatID/threadID" so replies
 	// route to the correct topic and each topic gets its own session.
 	// Only forum groups (IsForum) are handled; regular group reply threads
@ -693,6 +753,9 @@ func (c *TelegramChannel) handleMessage(ctx context.Context, message *telego.Mes
 		"first_name": user.FirstName,
 		"is_group":   fmt.Sprintf("%t", message.Chat.Type != "private"),
 	}
 	if message.ReplyToMessage != nil {
 		metadata["reply_to_message_id"] = fmt.Sprintf("%d", message.ReplyToMessage.MessageID)
 	}
 	// Set parent_peer metadata for per-topic agent binding.
 	if message.Chat.IsForum && threadID != 0 {
@ -713,6 +776,122 @@ func (c *TelegramChannel) handleMessage(ctx context.Context, message *telego.Mes
 	return nil
 }
 func (c *TelegramChannel) prependTelegramQuotedReply(content string, reply *telego.Message) string {
 	quoted := strings.TrimSpace(telegramQuotedContent(reply))
 	if quoted == "" {
 		return content
 	}
 	author := telegramQuotedAuthor(reply)
 	role := c.telegramQuotedRole(reply)
 	if strings.TrimSpace(content) == "" {
 		return fmt.Sprintf("[quoted %s message from %s]: %s", role, author, quoted)
 	}
 	return fmt.Sprintf("[quoted %s message from %s]: %s\n\n%s", role, author, quoted, content)
 }
 func (c *TelegramChannel) telegramQuotedRole(message *telego.Message) string {
 	if message == nil {
 		return "unknown"
 	}
 	if message.From != nil {
 		if !message.From.IsBot {
 			return "user"
 		}
 		if c.isOwnBotUser(message.From) {
 			return "assistant"
 		}
 		return "bot"
 	}
 	if message.SenderChat != nil {
 		return "chat"
 	}
 	return "unknown"
 }
 func (c *TelegramChannel) isOwnBotUser(user *telego.User) bool {
 	if c == nil || c.bot == nil || user == nil || !user.IsBot {
 		return false
 	}
 	if botID := c.bot.ID(); botID != 0 && user.ID == botID {
 		return true
 	}
 	botUsername := strings.TrimPrefix(strings.TrimSpace(c.bot.Username()), "@")
 	if botUsername == "" {
 		return false
 	}
 	return strings.EqualFold(strings.TrimPrefix(strings.TrimSpace(user.Username), "@"), botUsername)
 }
 func telegramQuotedAuthor(message *telego.Message) string {
 	if message == nil || message.From == nil {
 		return "unknown"
 	}
 	if username := strings.TrimSpace(message.From.Username); username != "" {
 		return username
 	}
 	if firstName := strings.TrimSpace(message.From.FirstName); firstName != "" {
 		return firstName
 	}
 	return "unknown"
 }
 func telegramQuotedContent(message *telego.Message) string {
 	if message == nil {
 		return ""
 	}
 	var parts []string
 	if text := strings.TrimSpace(message.Text); text != "" {
 		parts = append(parts, text)
 	}
 	if caption := strings.TrimSpace(message.Caption); caption != "" {
 		parts = append(parts, caption)
 	}
 	switch {
 	case len(message.Photo) > 0:
 		parts = append(parts, "[image: photo]")
 	}
 	switch {
 	case message.Voice != nil:
 		parts = append(parts, "[voice]")
 	case message.Audio != nil:
 		parts = append(parts, "[audio]")
 	}
 	if message.Document != nil {
 		parts = append(parts, "[file]")
 	}
 	return strings.Join(parts, "\n")
 }
 func quotedTelegramMediaRefs(
 	message *telego.Message,
 	resolve func(fileID, ext, filename string) string,
 ) []string {
 	if message == nil || resolve == nil {
 		return nil
 	}
 	var refs []string
 	if message.Voice != nil {
 		if ref := resolve(message.Voice.FileID, ".ogg", "voice.ogg"); ref != "" {
 			refs = append(refs, ref)
 		}
 	}
 	if message.Audio != nil {
 		if ref := resolve(message.Audio.FileID, ".mp3", "audio.mp3"); ref != "" {
 			refs = append(refs, ref)
 		}
 	}
 	return refs
 }
 func (c *TelegramChannel) downloadPhoto(ctx context.Context, fileID string) string {
 	file, err := c.bot.GetFile(ctx, &telego.GetFileParams{FileID: fileID})
 	if err != nil {
@ -985,3 +1164,32 @@ func cryptoRandInt() int {
 	_, _ = rand.Read(b[:])
 	return int(binary.BigEndian.Uint32(b[:])) | 1 // ensure non-zero
 }
 // isPostConnectError identifies network errors that likely occurred after
 // the request was transmitted to Telegram (e.g. dropped connection while
 // waiting for response). Swallowing these for edits prevents duplicate
 // fallbacks, at the small risk of leaving a stale placeholder if the
 // edit never actually reached the server.
 func isPostConnectError(err error) bool {
 	if err == nil {
 		return false
 	}
 	// Context errors (timeout/canceled) are too broad; they can be triggered
 	// locally before any data is sent. Never swallow them.
 	if errors.Is(err, context.DeadlineExceeded) || errors.Is(err, context.Canceled) {
 		return false
 	}
 	msg := strings.ToLower(err.Error())
 	// Narrowly target connection dropouts where the request likely landed.
 	return strings.Contains(msg, "connection reset by peer") ||
 		strings.Contains(msg, "unexpected eof") ||
 		strings.Contains(msg, "connection closed by foreign host") ||
 		strings.Contains(msg, "broken pipe")
 }
 // VoiceCapabilities returns the voice capabilities of the channel.
 func (c *TelegramChannel) VoiceCapabilities() channels.VoiceCapabilities {
 	return channels.VoiceCapabilities{ASR: true, TTS: true}
 }
--- a/pkg/channels/telegram/telegram_test.go
+++ b/pkg/channels/telegram/telegram_test.go
@ -7,6 +7,7 @@ import (
 	"io"
 	"os"
 	"path/filepath"
 	"strconv"
 	"strings"
 	"testing"
@ -104,6 +105,13 @@ func successResponse(t *testing.T) *ta.Response {
 	return &ta.Response{Ok: true, Result: b}
 }
 func successUserResponse(t *testing.T, user *telego.User) *ta.Response {
 	t.Helper()
 	b, err := json.Marshal(user)
 	require.NoError(t, err)
 	return &ta.Response{Ok: true, Result: b}
 }
 // newTestChannel creates a TelegramChannel with a mocked bot for unit testing.
 func newTestChannel(t *testing.T, caller *stubCaller) *TelegramChannel {
 	return newTestChannelWithConstructor(t, caller, &stubConstructor{})
@ -168,7 +176,7 @@ func TestSendMedia_ImageFallbacksToDocumentOnInvalidDimensions(t *testing.T) {
 	)
 	require.NoError(t, err)
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "12345",
 		Parts: []bus.MediaPart{{
 			Type:    "image",
@ -206,7 +214,7 @@ func TestSendMedia_ImageNonDimensionErrorDoesNotFallback(t *testing.T) {
 	ref, err := store.Store(localPath, media.MediaMeta{Filename: "image.png", ContentType: "image/png"}, "scope-1")
 	require.NoError(t, err)
-	err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
+	_, err = ch.SendMedia(context.Background(), bus.OutboundMediaMessage{
 		ChatID: "12345",
 		Parts: []bus.MediaPart{{
 			Type: "image",
@ -231,7 +239,7 @@ func TestSend_EmptyContent(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "",
 	})
@ -248,7 +256,7 @@ func TestSend_ShortMessage_SingleCall(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "Hello, world!",
 	})
@ -271,7 +279,7 @@ func TestSend_LongMessage_SingleCall(t *testing.T) {
 	longContent := strings.Repeat("a", 4000)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: longContent,
 	})
@ -294,7 +302,7 @@ func TestSend_HTMLFallback_PerChunk(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "Hello **world**",
 	})
@ -312,7 +320,7 @@ func TestSend_HTMLFallback_BothFail(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "Hello",
 	})
@ -334,7 +342,7 @@ func TestSend_LongMessage_HTMLFallback_StopsOnError(t *testing.T) {
 	longContent := strings.Repeat("x", 4001)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: longContent,
 	})
@ -364,7 +372,7 @@ func TestSend_MarkdownShortButHTMLLong_MultipleCalls(t *testing.T) {
 		"HTML expansion must exceed Telegram limit for this test to be meaningful",
 	)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: markdownContent,
 	})
@ -399,7 +407,7 @@ func TestSend_HTMLOverflow_WordBoundary(t *testing.T) {
 	// Ensure the test content matches the intended boundary conditions.
 	assert.LessOrEqual(t, len([]rune(content)), 4000, "markdown content must not exceed chunk size for this test")
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "123456",
 		Content: content,
 	})
@ -435,7 +443,7 @@ func TestSend_NotRunning(t *testing.T) {
 	ch := newTestChannel(t, caller)
 	ch.SetRunning(false)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "12345",
 		Content: "Hello",
 	})
@ -453,7 +461,7 @@ func TestSend_InvalidChatID(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "not-a-number",
 		Content: "Hello",
 	})
@ -510,7 +518,7 @@ func TestSend_WithForumThreadID(t *testing.T) {
 	}
 	ch := newTestChannel(t, caller)
-	err := ch.Send(context.Background(), bus.OutboundMessage{
+	_, err := ch.Send(context.Background(), bus.OutboundMessage{
 		ChatID:  "-1001234567890/42",
 		Content: "Hello from topic",
 	})
@ -642,6 +650,181 @@ func TestHandleMessage_ReplyThread_NonForum_NoIsolation(t *testing.T) {
 	assert.Empty(t, inbound.Metadata["parent_peer_id"])
 }
 func assertHandleMessageQuotedUserReply(
 	t *testing.T,
 	chatID int64,
 	messageID int,
 	userID int64,
 	userName string,
 	userText string,
 	replyMessageID int,
 	replyText string,
 	replyCaption string,
 	replyAuthorID int64,
 	replyAuthorName string,
 	expectedContent string,
 ) {
 	t.Helper()
 	messageBus := bus.NewMessageBus()
 	ch := &TelegramChannel{
 		BaseChannel: channels.NewBaseChannel("telegram", nil, messageBus, nil),
 		chatIDs:     make(map[string]int64),
 		ctx:         context.Background(),
 	}
 	msg := &telego.Message{
 		Text:      userText,
 		MessageID: messageID,
 		Chat: telego.Chat{
 			ID:   chatID,
 			Type: "private",
 		},
 		From: &telego.User{
 			ID:        userID,
 			FirstName: userName,
 		},
 		ReplyToMessage: &telego.Message{
 			MessageID: replyMessageID,
 			Text:      replyText,
 			Caption:   replyCaption,
 			From: &telego.User{
 				ID:        replyAuthorID,
 				FirstName: replyAuthorName,
 			},
 		},
 	}
 	err := ch.handleMessage(context.Background(), msg)
 	require.NoError(t, err)
 	inbound, ok := <-messageBus.InboundChan()
 	require.True(t, ok)
 	assert.Equal(t, strconv.Itoa(replyMessageID), inbound.Metadata["reply_to_message_id"])
 	assert.Equal(t, expectedContent, inbound.Content)
 }
 func TestHandleMessage_ReplyToMessage_PrependsQuotedTextAndMetadata(t *testing.T) {
 	assertHandleMessageQuotedUserReply(
 		t,
 		456,
 		21,
 		11,
 		"Alice",
 		"follow up",
 		99,
 		"old context",
 		"",
 		12,
 		"Bob",
 		"[quoted user message from Bob]: old context\n\nfollow up",
 	)
 }
 func TestHandleMessage_ReplyToMessage_UsesCaptionWhenQuotedTextMissing(t *testing.T) {
 	assertHandleMessageQuotedUserReply(
 		t,
 		789,
 		22,
 		13,
 		"Carol",
 		"answer this",
 		100,
 		"",
 		"caption context",
 		14,
 		"Dave",
 		"[quoted user message from Dave]: caption context\n\nanswer this",
 	)
 }
 func TestHandleMessage_ReplyToOwnBotMessage_UsesAssistantRole(t *testing.T) {
 	messageBus := bus.NewMessageBus()
 	caller := &stubCaller{
 		callFn: func(ctx context.Context, url string, data *ta.RequestData) (*ta.Response, error) {
 			if strings.Contains(url, "getMe") {
 				return successUserResponse(t, &telego.User{
 					ID:        42,
 					IsBot:     true,
 					FirstName: "Pico",
 					Username:  "afjcjsbx_picoclaw_bot",
 				}), nil
 			}
 			t.Fatalf("unexpected API call: %s", url)
 			return nil, nil
 		},
 	}
 	ch := newTestChannel(t, caller)
 	ch.BaseChannel = channels.NewBaseChannel("telegram", nil, messageBus, nil)
 	ch.ctx = context.Background()
 	msg := &telego.Message{
 		Text:      "ti ricordi questo file?",
 		MessageID: 23,
 		Chat: telego.Chat{
 			ID:   999,
 			Type: "private",
 		},
 		From: &telego.User{
 			ID:        15,
 			FirstName: "Eve",
 		},
 		ReplyToMessage: &telego.Message{
 			MessageID: 101,
 			Text:      "Fatto! Ho creato il file notizie_2026_03_28.md",
 			From: &telego.User{
 				ID:        42,
 				IsBot:     true,
 				FirstName: "Pico",
 				Username:  "afjcjsbx_picoclaw_bot",
 			},
 		},
 	}
 	err := ch.handleMessage(context.Background(), msg)
 	require.NoError(t, err)
 	inbound, ok := <-messageBus.InboundChan()
 	require.True(t, ok)
 	assert.Equal(t, "101", inbound.Metadata["reply_to_message_id"])
 	assert.Equal(
 		t,
 		"[quoted assistant message from afjcjsbx_picoclaw_bot]: Fatto! Ho creato il file notizie_2026_03_28.md\n\nti ricordi questo file?",
 		inbound.Content,
 	)
 }
 func TestTelegramQuotedContent_IncludesVoiceMarkerAlongsideCaption(t *testing.T) {
 	msg := &telego.Message{
 		Caption: "listen to this",
 		Voice: &telego.Voice{
 			FileID: "voice-file",
 		},
 	}
 	assert.Equal(t, "listen to this\n[voice]", telegramQuotedContent(msg))
 }
 func TestQuotedTelegramMediaRefs_ResolvesQuotedAudioInOrder(t *testing.T) {
 	msg := &telego.Message{
 		Voice: &telego.Voice{FileID: "voice-file"},
 		Audio: &telego.Audio{FileID: "audio-file"},
 	}
 	var calls []string
 	refs := quotedTelegramMediaRefs(msg, func(fileID, ext, filename string) string {
 		calls = append(calls, fileID+"|"+ext+"|"+filename)
 		return "ref://" + filename
 	})
 	assert.Equal(
 		t,
 		[]string{"voice-file|.ogg|voice.ogg", "audio-file|.mp3|audio.mp3"},
 		calls,
 	)
 	assert.Equal(t, []string{"ref://voice.ogg", "ref://audio.mp3"}, refs)
 }
 func TestHandleMessage_EmptyContent_Ignored(t *testing.T) {
 	messageBus := bus.NewMessageBus()
 	ch := &TelegramChannel{
--- a/Show more
+++ b/Show more