@fased/fased 0.1.36 → 0.1.37

package/dist/plugin-sdk/command-status.js

@@ -1,4 +1,4 @@
-import "./config-TFokWwvO.js";
+import "./config-CgwTaper.js";
 import "./paths-GdhK5mV_.js";
 import "./globals-BtKmaIS3.js";
 import "./utils-LGKVujSU.js";
@@ -7,43 +7,43 @@ import "./agent-scope-BuTbywla.js";
 import "./redact-Ck-wgswc.js";
 import "./github-copilot-token-Djqpy66R.js";
 import "./retry-Cq65ROXv.js";
-import "./registry-B4HvWzob.js";
+import "./registry-DNkJsNsz.js";
 import "./accounts-BJFheJNv.js";
 import "./accounts-BRbbLNW_.js";
-import "./accounts-VqAX3HJ0.js";
+import "./accounts-BwkH5bTD.js";
 import "./tokens-BK5rrwBB.js";
 import "./allow-list-CBtbuDI8.js";
 import "./paths-DTurNPnO.js";
-import { n as buildCommandsMessagePaginated, r as buildHelpMessage, t as buildCommandsMessage } from "./status-DoxnzyMC.js";
-import "./paths-DW-U2r7Y.js";
-import "./ssrf-u0Ul7okY.js";
-import "./skill-commands-CLXAG5sU.js";
-import "./pi-model-discovery-D51L5E9I.js";
+import { n as buildCommandsMessagePaginated, r as buildHelpMessage, t as buildCommandsMessage } from "./status-CIiBeb9B.js";
+import "./runtime-dependency-B-1u41Ph.js";
+import "./ssrf-Cce6LubA.js";
+import "./skill-commands-hyZA0LE3.js";
+import "./pi-model-discovery-DadlvsZW.js";
 import "./reply-prefix-Y14LY6Rn.js";
-import "./media-D7ZkWU-A.js";
+import "./media-C7YT4DeU.js";
 import "./path-alias-guards-C76pC928.js";
 import "./fs-safe-BDnJzutp.js";
 import "./diagnostic-DpyvOvs2.js";
-import "./chunk-skAJZWCT.js";
-import "./markdown-tables-9rJDQ1X-.js";
-import "./send-DaaAscWj.js";
-import "./fetch-guard-DPMynms8.js";
-import "./outbound-attachment-ClMvNW17.js";
+import "./chunk-KCxbJLsV.js";
+import "./markdown-tables-DWUNvLrc.js";
+import "./send-BBYcgXA4.js";
+import "./fetch-guard-BLdujDnt.js";
+import "./outbound-attachment-D6tj5Y5H.js";
 import "./fetch-xfeOsibm.js";
-import "./common-BiF0sTnY.js";
-import "./commands-registry-CoLAT03J.js";
-import "./thread-bindings.state-DG5cBaRn.js";
+import "./common-DJWrErdE.js";
+import "./commands-registry-DoWdYAJd.js";
+import "./thread-bindings.state-D8kN2X6H.js";
 import "./memory-search-B-0Fwnrp.js";
-import "./manager-BytwRIfK.js";
+import "./manager-9see0IX5.js";
 import "./query-expansion-DjJAUtDU.js";
 import "./diagnostic-session-state-CT36_PCE.js";
-import "./wsl-B2euLEc2.js";
+import "./wsl-DcM2PgSS.js";
 import "./sandbox-paths-DMnFyOaA.js";
 import "./directory-live-8umGGN7a.js";
 import "./targets-t1hbjHdJ.js";
-import "./send-Dl88ZKq2.js";
-import "./resolve-route-DlHzggnG.js";
+import "./send-D3836_UN.js";
+import "./resolve-route-DO0WR4nB.js";
 import "./render-C9LkRUhd.js";
-import "./tables-RBtf8G4P.js";
+import "./tables-BD7H5ug-.js";
 
 export { buildCommandsMessage, buildCommandsMessagePaginated, buildHelpMessage };

package/dist/plugin-sdk/{commands-registry-5J619bQ2.js → commands-registry-CdT-nl7v.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { dt as listChannelDocks, lt as normalizeChannelId, t as getActivePluginRegistry } from "./runtime-Dd0sswuW.js";
+import { dt as listChannelDocks, lt as normalizeChannelId, t as getActivePluginRegistry } from "./runtime-BPyuAmka.js";
 import { C as isPlainObject, o as escapeRegExp } from "./utils-CYk9EKoq.js";
-import { Wt as resolveConfiguredModelRef, Xn as listThinkingLevels, nr as DEFAULT_PROVIDER, tr as DEFAULT_MODEL } from "./config-DXlISPlx.js";
+import { Wt as resolveConfiguredModelRef, Xn as listThinkingLevels, nr as DEFAULT_PROVIDER, tr as DEFAULT_MODEL } from "./config-DtqAN2L3.js";
 
 //#region src/config/commands.ts
 function resolveAutoDefault(providerId) {

package/dist/plugin-sdk/{commands-registry-CoLAT03J.js → commands-registry-DoWdYAJd.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { Hn as DEFAULT_MODEL, Ln as listThinkingLevels, Un as DEFAULT_PROVIDER, wt as resolveConfiguredModelRef } from "./config-TFokWwvO.js";
+import { Hn as DEFAULT_MODEL, Ln as listThinkingLevels, Un as DEFAULT_PROVIDER, wt as resolveConfiguredModelRef } from "./config-CgwTaper.js";
 import { C as isPlainObject, o as escapeRegExp } from "./utils-LGKVujSU.js";
-import { a as getActivePluginRegistry, lt as listChannelDocks, st as normalizeChannelId } from "./registry-B4HvWzob.js";
+import { a as getActivePluginRegistry, lt as listChannelDocks, st as normalizeChannelId } from "./registry-DNkJsNsz.js";
 
 //#region src/auto-reply/thinking.ts
 function normalizeOnOffFullLevel(raw) {

package/dist/plugin-sdk/{common-CSTxewqY.js → common-Cpw-vuuM.js}

@@ -1,5 +1,5 @@
 import { t as createSubsystemLogger } from "./subsystem-DBPNbQDQ.js";
-import { a as buildImageResizeSideGrid, g as detectMime, i as IMAGE_REDUCE_QUALITY_STEPS, o as getImageMetadata, s as resizeToJpeg } from "./media-C6C2c9a4.js";
+import { a as buildImageResizeSideGrid, g as detectMime, i as IMAGE_REDUCE_QUALITY_STEPS, o as getImageMetadata, s as resizeToJpeg } from "./media-Cxw-xLGU.js";
 import fs from "node:fs/promises";
 
 //#region src/media/base64.ts

package/dist/plugin-sdk/{common-BiF0sTnY.js → common-DJWrErdE.js}

@@ -1,5 +1,5 @@
 import { t as createSubsystemLogger } from "./subsystem-BmpnSVOu.js";
-import { a as buildImageResizeSideGrid, g as detectMime, i as IMAGE_REDUCE_QUALITY_STEPS, o as getImageMetadata, s as resizeToJpeg } from "./media-D7ZkWU-A.js";
+import { a as buildImageResizeSideGrid, g as detectMime, i as IMAGE_REDUCE_QUALITY_STEPS, o as getImageMetadata, s as resizeToJpeg } from "./media-C7YT4DeU.js";
 import fs from "node:fs/promises";
 
 //#region src/media/base64.ts

package/dist/plugin-sdk/{config-BxVjLTIv.js → config-C0qggNKQ.js}

@@ -4,7 +4,7 @@ import path from "node:path";
 import chalk, { Chalk } from "chalk";
 import { Logger } from "tslog";
 import os from "node:os";
-import json5 from "json5";
+import JSON5 from "json5";
 import { isDeepStrictEqual, promisify } from "node:util";
 import fs$1 from "node:fs/promises";
 import { execFile, execFileSync } from "node:child_process";
@@ -433,7 +433,7 @@ function readLoggingConfig() {
 	try {
 		if (!fs.existsSync(configPath)) return;
 		const raw = fs.readFileSync(configPath, "utf-8");
-		const logging = json5.parse(raw)?.logging;
+		const logging = JSON5.parse(raw)?.logging;
 		if (!logging || typeof logging !== "object" || Array.isArray(logging)) return;
 		return logging;
 	} catch {
@@ -2795,7 +2795,7 @@ function loadPluginManifest(rootDir) {
 	}
 	let raw;
 	try {
-		raw = json5.parse(fs.readFileSync(opened.fd, "utf-8"));
+		raw = JSON5.parse(fs.readFileSync(opened.fd, "utf-8"));
 	} catch (err) {
 		return {
 			ok: false,
@@ -13235,7 +13235,7 @@ const defaultResolver = {
 		resolvedPath,
 		rootRealDir
 	}),
-	parseJson: (raw) => json5.parse(raw)
+	parseJson: (raw) => JSON5.parse(raw)
 };
 /**
 * Resolves all $include directives in a parsed config object.
@@ -19848,7 +19848,7 @@ function resolveConfigPathForDeps(deps) {
 function normalizeDeps(overrides = {}) {
 	return {
 		fs: overrides.fs ?? fs,
-		json5: overrides.json5 ?? json5,
+		json5: overrides.json5 ?? JSON5,
 		env: overrides.env ?? process.env,
 		homedir: overrides.homedir ?? (() => resolveRequiredHomeDir(overrides.env ?? process.env, os.homedir)),
 		configPath: overrides.configPath ?? "",
@@ -19859,11 +19859,11 @@ function maybeLoadDotEnvForConfig(env) {
 	if (env !== process.env) return;
 	loadDotEnv({ quiet: true });
 }
-function parseConfigJson5(raw, json5$1 = json5) {
+function parseConfigJson5(raw, json5 = JSON5) {
 	try {
 		return {
 			ok: true,
-			parsed: json5$1.parse(raw)
+			parsed: json5.parse(raw)
 		};
 	} catch (err) {
 		return {

package/dist/plugin-sdk/{config-TFokWwvO.js → config-CgwTaper.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { c as expandHomePrefix, n as resolveConfigPath, o as resolveOAuthPath, r as resolveDefaultConfigCandidates, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-GdhK5mV_.js";
-import { C as isPlainObject$2, c as isRecord$3, h as resolveUserPath, p as resolveConfigDir } from "./utils-LGKVujSU.js";
+import { C as isPlainObject$2, c as isRecord$3, h as resolveUserPath, p as resolveConfigDir, t as CONFIG_DIR } from "./utils-LGKVujSU.js";
 import { d as normalizeChatChannelId, l as CORE_RUNTIME_CHANNEL_IDS, s as CHANNEL_IDS, t as createSubsystemLogger } from "./subsystem-BmpnSVOu.js";
 import { $ as isPathInside$2, B as openBoundaryFileSync, D as resolveFasedAgentPackageRootSync, F as resolveAgentModelFallbackValues, I as resolveAgentModelPrimaryValue, K as runExec, L as toAgentModelListLike, P as MAX_AGENT_MODEL_FALLBACKS, R as canUseBoundaryFileOpen, i as resolveAgentConfig, l as resolveAgentWorkspaceDir, o as resolveAgentEffectiveModelPrimary, u as resolveDefaultAgentId } from "./agent-scope-BuTbywla.js";
 import { t as redactSensitiveText } from "./redact-Ck-wgswc.js";
@@ -828,6 +828,28 @@ const DEFAULT_MAX_EXTRACTED_BYTES = 512 * 1024 * 1024;
 const DEFAULT_MAX_ENTRY_BYTES = 256 * 1024 * 1024;
 const OPEN_WRITE_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC | (process.platform !== "win32" && "O_NOFOLLOW" in constants ? constants.O_NOFOLLOW : 0);
 
+//#endregion
+//#region src/infra/install-safe-path.ts
+function safeDirName(input) {
+	const trimmed = input.trim();
+	if (!trimmed) return trimmed;
+	return trimmed.replaceAll("/", "__").replaceAll("\\", "__");
+}
+function resolveSafeInstallDir(params) {
+	const targetDir = path.join(params.baseDir, safeDirName(params.id));
+	const resolvedBase = path.resolve(params.baseDir);
+	const resolvedTarget = path.resolve(targetDir);
+	const relative = path.relative(resolvedBase, resolvedTarget);
+	if (!relative || relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) return {
+		ok: false,
+		error: params.invalidNameMessage
+	};
+	return {
+		ok: true,
+		path: targetDir
+	};
+}
+
 //#endregion
 //#region src/security/scan-paths.ts
 function isPathInside$1(basePath, candidatePath) {
@@ -1122,6 +1144,27 @@ function getPackageManifestMetadata(manifest) {
 	return manifest[MANIFEST_KEY];
 }
 
+//#endregion
+//#region src/plugins/install.ts
+function validatePluginId(pluginId) {
+	if (!pluginId) return "invalid plugin name: missing";
+	if (pluginId === "." || pluginId === "..") return "invalid plugin name: reserved path segment";
+	if (pluginId.includes("/") || pluginId.includes("\\")) return "invalid plugin name: path separators not allowed";
+	return null;
+}
+function resolvePluginInstallDir(pluginId, extensionsDir) {
+	const extensionsBase = extensionsDir ? resolveUserPath(extensionsDir) : path.join(CONFIG_DIR, "extensions");
+	const pluginIdError = validatePluginId(pluginId);
+	if (pluginIdError) throw new Error(pluginIdError);
+	const targetDirResult = resolveSafeInstallDir({
+		baseDir: extensionsBase,
+		id: pluginId,
+		invalidNameMessage: "invalid plugin name: path traversal detected"
+	});
+	if (!targetDirResult.ok) throw new Error(targetDirResult.error);
+	return targetDirResult.path;
+}
+
 //#endregion
 //#region src/plugins/slots.ts
 const DEFAULT_SLOT_BY_KEY = { memory: "memory-core" };
@@ -22859,4 +22902,4 @@ async function writeConfigFile(cfg, options = {}) {
 }
 
 //#endregion
-export { unwrapKnownDispatchWrapperInvocation as $, isTruthyEnvValue as $n, markAuthProfileUsed as $t, setConfigOverride as A, assertSecretInputResolved as An, resolveThinkingDefault as At, normalizeTrustedSafeBinDirs as B, supportsXHighThinking as Bn, resolveModelAuthMode as Bt, isAvatarDataUrl as C, resolveMemorySlotDecision as Cn, parseModelRef as Ct, validateJsonSchemaValue as D, resolveAuthProfileDisplayLabel as Dn, resolveModelRefFromString as Dt, isSupportedLocalAvatarExtension as E, resolveCliName as En, resolveExplicitConfiguredModelRef as Et, unsetConfigValueAtPath as F, formatThinkingLevels as Fn, getApiKeyForModel as Ft, splitCommandChain as G, getPackageManifestMetadata as Gn, normalizeModelCatalogModelId as Gt, analyzeShellCommand as H, DEFAULT_MODEL as Hn, listCurrentModelCatalogRows as Ht, ensurePluginAllowlisted as I, formatXHighModelHint as In, getCustomProviderApiKey as It, resolveAllowlistCandidatePath as J, formatErrorMessage as Jn, auth_profiles_exports as Jt, DEFAULT_SAFE_BINS as K, MANIFEST_KEY as Kn, normalizeModelCatalogProviderId as Kt, getTrustedSafeBinDirs as L, listThinkingLevels as Ln, requireApiKey as Lt, getConfigValueAtPath as M, splitTrailingAuthProfile as Mn, normalizeProviders as Mt, parseConfigPath as N, isOpenAISignInRuntimeModelSupported as Nn, resolveImplicitCopilotProvider as Nt, getConfigOverrides as O, isPrivateNetworkBaseUrl as On, resolveReasoningDefault as Ot, setConfigValueAtPath as P, lookupProviderManifestModelCapability as Pn, resolveImplicitProviders as Pt, isShellWrapperExecutable as Q, resolveShellEnvFallbackTimeoutMs as Qn, markAuthProfileFailure as Qt, isTrustedSafeBinPath as R, normalizeThinkLevel as Rn, resolveApiKeyForProvider as Rt, AVATAR_MAX_BYTES as S, resolveEffectiveEnableState as Sn, normalizeProviderId as St, isPathWithinRoot as T, formatCliCommand as Tn, resolveDefaultModelForAgent as Tt, buildEnforcedShellCommand as U, DEFAULT_PROVIDER as Un, buildModelCatalogMergeKey as Ut, validateSafeBinArgv as V, DEFAULT_CONTEXT_TOKENS as Vn, CURRENT_MODEL_PROVIDER_CATALOG as Vt, isWindowsPlatform as W, VERSION as Wn, mergeModelCatalogRowsByAuthority as Wt, extractShellWrapperInlineCommand as X, isErrno as Xn, getSoonestCooldownExpiry as Xt, resolveCommandResolutionFromArgv as Y, formatUncaughtError as Yn, resolveAuthProfileOrder as Yt, isDispatchWrapperExecutable as Z, getShellPathFromLoginShell as Zn, isProfileInCooldown as Zt, normalizeScpRemoteHost as _, isPathInside as _n, findNormalizedProviderValue as _t, readConfigFileSnapshotForWrite as a, markAuthProfileGood as an, resolveOwnerDisplaySetting as ar, applyMergePatch as at, parseDurationMs as b, isPluginRuntimeSessionReadAllowed as bn, modelKey as bt, validateConfigObjectWithPlugins as c, resolveFasedAgentAgentDir as cn, resolveDiscordPreviewStreamMode as ct, resolveTelegramCustomCommands as d, resolveProcessScopedMap as dn, resolveTelegramPreviewStreamMode as dt, resolveProfilesUnavailableReason as en, parseBooleanValue as er, unwrapKnownShellMultiplexerInvocation as et, DEFAULT_IMESSAGE_ATTACHMENT_ROOTS as f, isPidAlive as fn, DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH as ft, resolveIMessageRemoteAttachmentRoots as g, discoverFasedAgentPlugins as gn, buildModelAliasIndex as gt, resolveIMessageAttachmentRoots as h, loadPluginManifestRegistry as hn, buildConfiguredAllowlistKeys as ht, readConfigFileSnapshot as i, listProvidersWithStoredCredentials as in, sanitizeHostExecEnv as ir, resolveSafeBinProfiles as it, unsetConfigOverride as j, coerceSecretRef as jn, normalizeGoogleModelId as jt, resetConfigOverrides as k, normalizeSecretInput as kn, resolveSubagentSpawnModelSelection as kt, TELEGRAM_COMMAND_NAME_PATTERN as l, resolveFasedAgentDir as ln, resolveSlackNativeStreaming as lt, mergeInboundPathRoots as m, normalizeProviderId$1 as mn, buildAllowedModelSet as mt, loadConfig as n, dedupeProfileIds as nn, isDangerousHostEnvVarName as nr, SAFE_BIN_PROFILES as nt, resolveConfigSnapshotHash as o, ensureAuthProfileStore as on, isSafeExecutableValue as ot, isInboundPathAllowed as p, findNormalizedProviderValue$1 as pn, resolveAgentMaxConcurrent as pt, matchAllowlist as q, extractErrorCode as qn, normalizeProviderCatalogRows as qt, parseConfigJson5 as r, listProfilesForProvider as rn, isDangerousHostInheritedEnvVarName as rr, normalizeSafeBinProfileFixtures as rt, writeConfigFile as s, resolveAuthStorePathForDisplay as sn, mapStreamingModeToSlackLegacyDraftStreamMode as st, createConfigIO as t, resolveApiKeyForProfile as tn, isDangerousHostEnvOverrideVarName as tr, splitShellArgs as tt, normalizeTelegramCommandName as u, withFileLock as un, resolveSlackStreamingMode as ut, MODEL_APIS as v, safeStatSync as vn, inferUniqueProviderFromConfiguredModels as vt, isAvatarHttpUrl as w, resolvePluginAdminRpcActionGrant as wn, resolveConfiguredModelRef as wt, parseByteSize as x, normalizePluginsConfig as xn, normalizeModelRef as xt, getBlockedNetworkModeReason as y, applyTestPluginDefaults as yn, isCliProvider as yt, listWritableExplicitTrustedSafeBinDirs as z, resolveModelThinkingCapability as zn, resolveEnvApiKey as zt };
+export { unwrapKnownDispatchWrapperInvocation as $, resolveShellEnvFallbackTimeoutMs as $n, markAuthProfileUsed as $t, setConfigOverride as A, assertSecretInputResolved as An, resolveThinkingDefault as At, normalizeTrustedSafeBinDirs as B, supportsXHighThinking as Bn, resolveModelAuthMode as Bt, isAvatarDataUrl as C, resolveMemorySlotDecision as Cn, parseModelRef as Ct, validateJsonSchemaValue as D, resolveAuthProfileDisplayLabel as Dn, resolveModelRefFromString as Dt, isSupportedLocalAvatarExtension as E, resolveCliName as En, resolveExplicitConfiguredModelRef as Et, unsetConfigValueAtPath as F, formatThinkingLevels as Fn, getApiKeyForModel as Ft, splitCommandChain as G, resolvePluginInstallDir as Gn, normalizeModelCatalogModelId as Gt, analyzeShellCommand as H, DEFAULT_MODEL as Hn, listCurrentModelCatalogRows as Ht, ensurePluginAllowlisted as I, formatXHighModelHint as In, getCustomProviderApiKey as It, resolveAllowlistCandidatePath as J, extractErrorCode as Jn, auth_profiles_exports as Jt, DEFAULT_SAFE_BINS as K, getPackageManifestMetadata as Kn, normalizeModelCatalogProviderId as Kt, getTrustedSafeBinDirs as L, listThinkingLevels as Ln, requireApiKey as Lt, getConfigValueAtPath as M, splitTrailingAuthProfile as Mn, normalizeProviders as Mt, parseConfigPath as N, isOpenAISignInRuntimeModelSupported as Nn, resolveImplicitCopilotProvider as Nt, getConfigOverrides as O, isPrivateNetworkBaseUrl as On, resolveReasoningDefault as Ot, setConfigValueAtPath as P, lookupProviderManifestModelCapability as Pn, resolveImplicitProviders as Pt, isShellWrapperExecutable as Q, getShellPathFromLoginShell as Qn, markAuthProfileFailure as Qt, isTrustedSafeBinPath as R, normalizeThinkLevel as Rn, resolveApiKeyForProvider as Rt, AVATAR_MAX_BYTES as S, resolveEffectiveEnableState as Sn, normalizeProviderId as St, isPathWithinRoot as T, formatCliCommand as Tn, resolveDefaultModelForAgent as Tt, buildEnforcedShellCommand as U, DEFAULT_PROVIDER as Un, buildModelCatalogMergeKey as Ut, validateSafeBinArgv as V, DEFAULT_CONTEXT_TOKENS as Vn, CURRENT_MODEL_PROVIDER_CATALOG as Vt, isWindowsPlatform as W, VERSION as Wn, mergeModelCatalogRowsByAuthority as Wt, extractShellWrapperInlineCommand as X, formatUncaughtError as Xn, getSoonestCooldownExpiry as Xt, resolveCommandResolutionFromArgv as Y, formatErrorMessage as Yn, resolveAuthProfileOrder as Yt, isDispatchWrapperExecutable as Z, isErrno as Zn, isProfileInCooldown as Zt, normalizeScpRemoteHost as _, isPathInside as _n, findNormalizedProviderValue as _t, readConfigFileSnapshotForWrite as a, markAuthProfileGood as an, sanitizeHostExecEnv as ar, applyMergePatch as at, parseDurationMs as b, isPluginRuntimeSessionReadAllowed as bn, modelKey as bt, validateConfigObjectWithPlugins as c, resolveFasedAgentAgentDir as cn, resolveDiscordPreviewStreamMode as ct, resolveTelegramCustomCommands as d, resolveProcessScopedMap as dn, resolveTelegramPreviewStreamMode as dt, resolveProfilesUnavailableReason as en, isTruthyEnvValue as er, unwrapKnownShellMultiplexerInvocation as et, DEFAULT_IMESSAGE_ATTACHMENT_ROOTS as f, isPidAlive as fn, DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH as ft, resolveIMessageRemoteAttachmentRoots as g, discoverFasedAgentPlugins as gn, buildModelAliasIndex as gt, resolveIMessageAttachmentRoots as h, loadPluginManifestRegistry as hn, buildConfiguredAllowlistKeys as ht, readConfigFileSnapshot as i, listProvidersWithStoredCredentials as in, isDangerousHostInheritedEnvVarName as ir, resolveSafeBinProfiles as it, unsetConfigOverride as j, coerceSecretRef as jn, normalizeGoogleModelId as jt, resetConfigOverrides as k, normalizeSecretInput as kn, resolveSubagentSpawnModelSelection as kt, TELEGRAM_COMMAND_NAME_PATTERN as l, resolveFasedAgentDir as ln, resolveSlackNativeStreaming as lt, mergeInboundPathRoots as m, normalizeProviderId$1 as mn, buildAllowedModelSet as mt, loadConfig as n, dedupeProfileIds as nn, isDangerousHostEnvOverrideVarName as nr, SAFE_BIN_PROFILES as nt, resolveConfigSnapshotHash as o, ensureAuthProfileStore as on, resolveOwnerDisplaySetting as or, isSafeExecutableValue as ot, isInboundPathAllowed as p, findNormalizedProviderValue$1 as pn, resolveAgentMaxConcurrent as pt, matchAllowlist as q, MANIFEST_KEY as qn, normalizeProviderCatalogRows as qt, parseConfigJson5 as r, listProfilesForProvider as rn, isDangerousHostEnvVarName as rr, normalizeSafeBinProfileFixtures as rt, writeConfigFile as s, resolveAuthStorePathForDisplay as sn, mapStreamingModeToSlackLegacyDraftStreamMode as st, createConfigIO as t, resolveApiKeyForProfile as tn, parseBooleanValue as tr, splitShellArgs as tt, normalizeTelegramCommandName as u, withFileLock as un, resolveSlackStreamingMode as ut, MODEL_APIS as v, safeStatSync as vn, inferUniqueProviderFromConfiguredModels as vt, isAvatarHttpUrl as w, resolvePluginAdminRpcActionGrant as wn, resolveConfiguredModelRef as wt, parseByteSize as x, normalizePluginsConfig as xn, normalizeModelRef as xt, getBlockedNetworkModeReason as y, applyTestPluginDefaults as yn, isCliProvider as yt, listWritableExplicitTrustedSafeBinDirs as z, resolveModelThinkingCapability as zn, resolveEnvApiKey as zt };

package/dist/plugin-sdk/{config-DXlISPlx.js → config-DtqAN2L3.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { c as CHANNEL_IDS, f as normalizeChatChannelId, t as createSubsystemLogger, u as CORE_RUNTIME_CHANNEL_IDS } from "./subsystem-DBPNbQDQ.js";
 import { c as expandHomePrefix, n as resolveConfigPath, o as resolveOAuthPath, r as resolveDefaultConfigCandidates, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-BEmvSyOV.js";
-import { C as isPlainObject$2, c as isRecord$3, h as resolveUserPath, p as resolveConfigDir } from "./utils-CYk9EKoq.js";
+import { C as isPlainObject$2, c as isRecord$3, h as resolveUserPath, p as resolveConfigDir, t as CONFIG_DIR } from "./utils-CYk9EKoq.js";
 import { D as resolveFasedAgentPackageRootSync, F as canUseBoundaryFileOpen, H as isNotFoundPathError, J as resolveAgentModelFallbackValues, L as openBoundaryFileSync, U as isPathInside$2, W as isSymlinkOpenError, X as toAgentModelListLike, Y as resolveAgentModelPrimaryValue, i as resolveAgentConfig, k as runExec, l as resolveAgentWorkspaceDir, o as resolveAgentEffectiveModelPrimary, q as MAX_AGENT_MODEL_FALLBACKS, u as resolveDefaultAgentId } from "./agent-scope-kIJqg5PA.js";
 import { h as isBlockedObjectKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID } from "./session-key-HSJ2KQTc.js";
 import { n as redactSensitiveText } from "./redact-CwCz68Mi.js";
@@ -1472,6 +1472,28 @@ async function extractArchive(params) {
 	}), params.timeoutMs, label);
 }
 
+//#endregion
+//#region src/infra/install-safe-path.ts
+function safeDirName(input) {
+	const trimmed = input.trim();
+	if (!trimmed) return trimmed;
+	return trimmed.replaceAll("/", "__").replaceAll("\\", "__");
+}
+function resolveSafeInstallDir(params) {
+	const targetDir = path.join(params.baseDir, safeDirName(params.id));
+	const resolvedBase = path.resolve(params.baseDir);
+	const resolvedTarget = path.resolve(targetDir);
+	const relative = path.relative(resolvedBase, resolvedTarget);
+	if (!relative || relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) return {
+		ok: false,
+		error: params.invalidNameMessage
+	};
+	return {
+		ok: true,
+		path: targetDir
+	};
+}
+
 //#endregion
 //#region src/security/scan-paths.ts
 function isPathInside$1(basePath, candidatePath) {
@@ -1766,6 +1788,27 @@ function getPackageManifestMetadata(manifest) {
 	return manifest[MANIFEST_KEY];
 }
 
+//#endregion
+//#region src/plugins/install.ts
+function validatePluginId(pluginId) {
+	if (!pluginId) return "invalid plugin name: missing";
+	if (pluginId === "." || pluginId === "..") return "invalid plugin name: reserved path segment";
+	if (pluginId.includes("/") || pluginId.includes("\\")) return "invalid plugin name: path separators not allowed";
+	return null;
+}
+function resolvePluginInstallDir(pluginId, extensionsDir) {
+	const extensionsBase = extensionsDir ? resolveUserPath(extensionsDir) : path.join(CONFIG_DIR, "extensions");
+	const pluginIdError = validatePluginId(pluginId);
+	if (pluginIdError) throw new Error(pluginIdError);
+	const targetDirResult = resolveSafeInstallDir({
+		baseDir: extensionsBase,
+		id: pluginId,
+		invalidNameMessage: "invalid plugin name: path traversal detected"
+	});
+	if (!targetDirResult.ok) throw new Error(targetDirResult.error);
+	return targetDirResult.path;
+}
+
 //#endregion
 //#region src/plugins/uninstall.ts
 /**
@@ -23203,4 +23246,4 @@ async function writeConfigFile(cfg, options = {}) {
 }
 
 //#endregion
-export { parseConfigPath as $, supportsXHighThinking as $n, resolveImplicitCopilotProvider as $t, TtsAutoSchema as A, acquireFileLock as An, resolveSlackStreamingMode as At, AVATAR_MAX_BYTES as B, resolveAuthProfileDisplayLabel as Bn, modelKey as Bt, BlockStreamingCoalesceSchema as C, listProfilesForProvider as Cn, isPluginRuntimeSessionReadAllowed as Cr, normalizeSafeBinProfileFixtures as Ct, MarkdownConfigSchema as D, resolveAuthStorePathForDisplay as Dn, resolvePluginAdminRpcActionGrant as Dr, mapStreamingModeToSlackLegacyDraftStreamMode as Dt, GroupPolicySchema as E, ensureAuthProfileStore as En, resolveMemorySlotDecision as Er, isSafeExecutableValue as Et, requireOpenAllowFrom as F, normalizeProviderId$1 as Fn, buildConfiguredAllowlistKeys as Ft, isWorkspaceRelativeAvatarPath as G, splitTrailingAuthProfile as Gn, resolveDefaultModelForAgent as Gt, isAvatarHttpUrl as H, normalizeSecretInput as Hn, normalizeProviderId as Ht, MODEL_APIS as I, loadPluginManifestRegistry as In, buildModelAliasIndex as It, getConfigOverrides as J, formatThinkingLevels as Jn, resolveReasoningDefault as Jt, resolveAvatarMime as K, isOpenAISignInRuntimeModelSupported as Kn, resolveExplicitConfiguredModelRef as Kt, getBlockedNetworkModeReason as L, discoverFasedAgentPlugins as Ln, findNormalizedProviderValue as Lt, TtsModeSchema as M, resolveProcessScopedMap as Mn, DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH as Mt, TtsProviderSchema as N, isPidAlive as Nn, resolveAgentMaxConcurrent as Nt, MarkdownTableModeSchema as O, resolveFasedAgentAgentDir as On, resolveDiscordPreviewStreamMode as Ot, normalizeAllowFrom as P, findNormalizedProviderValue$1 as Pn, buildAllowedModelSet as Pt, getConfigValueAtPath as Q, resolveModelThinkingCapability as Qn, normalizeProviders as Qt, parseDurationMs as R, isPathInside as Rn, inferUniqueProviderFromConfiguredModels as Rt, ToolPolicySchema as S, dedupeProfileIds as Sn, applyTestPluginDefaults as Sr, SAFE_BIN_PROFILES as St, DmPolicySchema as T, markAuthProfileGood as Tn, resolveEffectiveEnableState as Tr, applyMergePatch as Tt, isPathWithinRoot as U, assertSecretInputResolved as Un, parseModelRef as Ut, isAvatarDataUrl as V, isPrivateNetworkBaseUrl as Vn, normalizeModelRef as Vt, isSupportedLocalAvatarExtension as W, coerceSecretRef as Wn, resolveConfiguredModelRef as Wt, setConfigOverride as X, listThinkingLevels as Xn, resolveThinkingDefault as Xt, resetConfigOverrides as Y, formatXHighModelHint as Yn, resolveSubagentSpawnModelSelection as Yt, unsetConfigOverride as Z, normalizeThinkLevel as Zn, normalizeGoogleModelId as Zt, isInboundPathAllowed as _, isProfileInCooldown as _n, resolveOwnerDisplaySetting as _r, isDispatchWrapperExecutable as _t, readConfigFileSnapshotForWrite as a, resolveEnvApiKey as an, MANIFEST_KEY as ar, listWritableExplicitTrustedSafeBinDirs as at, resolveIMessageRemoteAttachmentRoots as b, resolveProfilesUnavailableReason as bn, isTruthyEnvValue as br, unwrapKnownShellMultiplexerInvocation as bt, validateConfigObjectWithPlugins as c, listCurrentModelCatalogRows as cn, formatUncaughtError as cr, analyzeShellCommand as ct, MSTeamsConfigSchema as d, normalizeModelCatalogModelId as dn, getShellPathFromLoginShell as dr, splitCommandChain as dt, resolveImplicitProviders as en, DEFAULT_CONTEXT_TOKENS as er, setConfigValueAtPath as et, SignalConfigSchema as f, normalizeModelCatalogProviderId as fn, resolveShellEnvFallbackTimeoutMs as fr, DEFAULT_SAFE_BINS as ft, DEFAULT_IMESSAGE_ATTACHMENT_ROOTS as g, getSoonestCooldownExpiry as gn, sanitizeHostExecEnv as gr, extractShellWrapperInlineCommand as gt, resolveTelegramCustomCommands as h, resolveAuthProfileOrder as hn, isDangerousHostInheritedEnvVarName as hr, resolveCommandResolutionFromArgv as ht, readConfigFileSnapshot as i, resolveApiKeyForProvider as in, getPackageManifestMetadata as ir, isTrustedSafeBinPath as it, TtsConfigSchema as j, withFileLock as jn, resolveTelegramPreviewStreamMode as jt, ReplyRuntimeConfigSchemaShape as k, resolveFasedAgentDir as kn, resolveSlackNativeStreaming as kt, GoogleChatConfigSchema as l, buildModelCatalogMergeKey as ln, isErrno as lr, buildEnforcedShellCommand as lt, normalizeTelegramCommandName as m, auth_profiles_exports as mn, isDangerousHostEnvVarName as mr, resolveAllowlistCandidatePath as mt, loadConfig as n, getCustomProviderApiKey as nn, DEFAULT_PROVIDER as nr, ensurePluginAllowlisted as nt, resolveConfigSnapshotHash as o, resolveModelAuthMode as on, extractErrorCode as or, normalizeTrustedSafeBinDirs as ot, TELEGRAM_COMMAND_NAME_PATTERN as p, normalizeProviderCatalogRows as pn, isDangerousHostEnvOverrideVarName as pr, matchAllowlist as pt, validateJsonSchemaValue as q, lookupProviderManifestModelCapability as qn, resolveModelRefFromString as qt, parseConfigJson5 as r, requireApiKey as rn, VERSION as rr, getTrustedSafeBinDirs as rt, writeConfigFile as s, CURRENT_MODEL_PROVIDER_CATALOG as sn, formatErrorMessage as sr, validateSafeBinArgv as st, createConfigIO as t, getApiKeyForModel as tn, DEFAULT_MODEL as tr, unsetConfigValueAtPath as tt, IMessageConfigSchema as u, mergeModelCatalogRowsByAuthority as un, extractArchive as ur, isWindowsPlatform as ut, mergeInboundPathRoots as v, markAuthProfileFailure as vn, formatCliCommand as vr, isShellWrapperExecutable as vt, DmConfigSchema as w, listProvidersWithStoredCredentials as wn, normalizePluginsConfig as wr, resolveSafeBinProfiles as wt, normalizeScpRemoteHost as x, resolveApiKeyForProfile as xn, parseBooleanValue as xr, splitShellArgs as xt, resolveIMessageAttachmentRoots as y, markAuthProfileUsed as yn, resolveCliName as yr, unwrapKnownDispatchWrapperInvocation as yt, parseByteSize as z, safeStatSync as zn, isCliProvider as zt };
+export { parseConfigPath as $, supportsXHighThinking as $n, resolveImplicitCopilotProvider as $t, TtsAutoSchema as A, acquireFileLock as An, resolveSlackStreamingMode as At, AVATAR_MAX_BYTES as B, resolveAuthProfileDisplayLabel as Bn, modelKey as Bt, BlockStreamingCoalesceSchema as C, listProfilesForProvider as Cn, applyTestPluginDefaults as Cr, normalizeSafeBinProfileFixtures as Ct, MarkdownConfigSchema as D, resolveAuthStorePathForDisplay as Dn, resolveMemorySlotDecision as Dr, mapStreamingModeToSlackLegacyDraftStreamMode as Dt, GroupPolicySchema as E, ensureAuthProfileStore as En, resolveEffectiveEnableState as Er, isSafeExecutableValue as Et, requireOpenAllowFrom as F, normalizeProviderId$1 as Fn, buildConfiguredAllowlistKeys as Ft, isWorkspaceRelativeAvatarPath as G, splitTrailingAuthProfile as Gn, resolveDefaultModelForAgent as Gt, isAvatarHttpUrl as H, normalizeSecretInput as Hn, normalizeProviderId as Ht, MODEL_APIS as I, loadPluginManifestRegistry as In, buildModelAliasIndex as It, getConfigOverrides as J, formatThinkingLevels as Jn, resolveReasoningDefault as Jt, resolveAvatarMime as K, isOpenAISignInRuntimeModelSupported as Kn, resolveExplicitConfiguredModelRef as Kt, getBlockedNetworkModeReason as L, discoverFasedAgentPlugins as Ln, findNormalizedProviderValue as Lt, TtsModeSchema as M, resolveProcessScopedMap as Mn, DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH as Mt, TtsProviderSchema as N, isPidAlive as Nn, resolveAgentMaxConcurrent as Nt, MarkdownTableModeSchema as O, resolveFasedAgentAgentDir as On, resolvePluginAdminRpcActionGrant as Or, resolveDiscordPreviewStreamMode as Ot, normalizeAllowFrom as P, findNormalizedProviderValue$1 as Pn, buildAllowedModelSet as Pt, getConfigValueAtPath as Q, resolveModelThinkingCapability as Qn, normalizeProviders as Qt, parseDurationMs as R, isPathInside as Rn, inferUniqueProviderFromConfiguredModels as Rt, ToolPolicySchema as S, dedupeProfileIds as Sn, parseBooleanValue as Sr, SAFE_BIN_PROFILES as St, DmPolicySchema as T, markAuthProfileGood as Tn, normalizePluginsConfig as Tr, applyMergePatch as Tt, isPathWithinRoot as U, assertSecretInputResolved as Un, parseModelRef as Ut, isAvatarDataUrl as V, isPrivateNetworkBaseUrl as Vn, normalizeModelRef as Vt, isSupportedLocalAvatarExtension as W, coerceSecretRef as Wn, resolveConfiguredModelRef as Wt, setConfigOverride as X, listThinkingLevels as Xn, resolveThinkingDefault as Xt, resetConfigOverrides as Y, formatXHighModelHint as Yn, resolveSubagentSpawnModelSelection as Yt, unsetConfigOverride as Z, normalizeThinkLevel as Zn, normalizeGoogleModelId as Zt, isInboundPathAllowed as _, isProfileInCooldown as _n, sanitizeHostExecEnv as _r, isDispatchWrapperExecutable as _t, readConfigFileSnapshotForWrite as a, resolveEnvApiKey as an, getPackageManifestMetadata as ar, listWritableExplicitTrustedSafeBinDirs as at, resolveIMessageRemoteAttachmentRoots as b, resolveProfilesUnavailableReason as bn, resolveCliName as br, unwrapKnownShellMultiplexerInvocation as bt, validateConfigObjectWithPlugins as c, listCurrentModelCatalogRows as cn, formatErrorMessage as cr, analyzeShellCommand as ct, MSTeamsConfigSchema as d, normalizeModelCatalogModelId as dn, extractArchive as dr, splitCommandChain as dt, resolveImplicitProviders as en, DEFAULT_CONTEXT_TOKENS as er, setConfigValueAtPath as et, SignalConfigSchema as f, normalizeModelCatalogProviderId as fn, getShellPathFromLoginShell as fr, DEFAULT_SAFE_BINS as ft, DEFAULT_IMESSAGE_ATTACHMENT_ROOTS as g, getSoonestCooldownExpiry as gn, isDangerousHostInheritedEnvVarName as gr, extractShellWrapperInlineCommand as gt, resolveTelegramCustomCommands as h, resolveAuthProfileOrder as hn, isDangerousHostEnvVarName as hr, resolveCommandResolutionFromArgv as ht, readConfigFileSnapshot as i, resolveApiKeyForProvider as in, resolvePluginInstallDir as ir, isTrustedSafeBinPath as it, TtsConfigSchema as j, withFileLock as jn, resolveTelegramPreviewStreamMode as jt, ReplyRuntimeConfigSchemaShape as k, resolveFasedAgentDir as kn, resolveSlackNativeStreaming as kt, GoogleChatConfigSchema as l, buildModelCatalogMergeKey as ln, formatUncaughtError as lr, buildEnforcedShellCommand as lt, normalizeTelegramCommandName as m, auth_profiles_exports as mn, isDangerousHostEnvOverrideVarName as mr, resolveAllowlistCandidatePath as mt, loadConfig as n, getCustomProviderApiKey as nn, DEFAULT_PROVIDER as nr, ensurePluginAllowlisted as nt, resolveConfigSnapshotHash as o, resolveModelAuthMode as on, MANIFEST_KEY as or, normalizeTrustedSafeBinDirs as ot, TELEGRAM_COMMAND_NAME_PATTERN as p, normalizeProviderCatalogRows as pn, resolveShellEnvFallbackTimeoutMs as pr, matchAllowlist as pt, validateJsonSchemaValue as q, lookupProviderManifestModelCapability as qn, resolveModelRefFromString as qt, parseConfigJson5 as r, requireApiKey as rn, VERSION as rr, getTrustedSafeBinDirs as rt, writeConfigFile as s, CURRENT_MODEL_PROVIDER_CATALOG as sn, extractErrorCode as sr, validateSafeBinArgv as st, createConfigIO as t, getApiKeyForModel as tn, DEFAULT_MODEL as tr, unsetConfigValueAtPath as tt, IMessageConfigSchema as u, mergeModelCatalogRowsByAuthority as un, isErrno as ur, isWindowsPlatform as ut, mergeInboundPathRoots as v, markAuthProfileFailure as vn, resolveOwnerDisplaySetting as vr, isShellWrapperExecutable as vt, DmConfigSchema as w, listProvidersWithStoredCredentials as wn, isPluginRuntimeSessionReadAllowed as wr, resolveSafeBinProfiles as wt, normalizeScpRemoteHost as x, resolveApiKeyForProfile as xn, isTruthyEnvValue as xr, splitShellArgs as xt, resolveIMessageAttachmentRoots as y, markAuthProfileUsed as yn, formatCliCommand as yr, unwrapKnownDispatchWrapperInvocation as yt, parseByteSize as z, safeStatSync as zn, isCliProvider as zt };

package/dist/plugin-sdk/{config-DgD5T-Ui.js → config-g1MG9Bet.js}

@@ -4,7 +4,7 @@ import chalk, { Chalk } from "chalk";
 import fs, { constants } from "node:fs";
 import { Logger } from "tslog";
 import os from "node:os";
-import JSON5 from "json5";
+import json5 from "json5";
 import util, { isDeepStrictEqual, promisify } from "node:util";
 import fs$1 from "node:fs/promises";
 import { execFile, execFileSync } from "node:child_process";
@@ -325,7 +325,7 @@ function readLoggingConfig() {
 	try {
 		if (!fs.existsSync(configPath)) return;
 		const raw = fs.readFileSync(configPath, "utf-8");
-		const logging = JSON5.parse(raw)?.logging;
+		const logging = json5.parse(raw)?.logging;
 		if (!logging || typeof logging !== "object" || Array.isArray(logging)) return;
 		return logging;
 	} catch {
@@ -3028,7 +3028,7 @@ function loadPluginManifest(rootDir) {
 	}
 	let raw;
 	try {
-		raw = JSON5.parse(fs.readFileSync(opened.fd, "utf-8"));
+		raw = json5.parse(fs.readFileSync(opened.fd, "utf-8"));
 	} catch (err) {
 		return {
 			ok: false,
@@ -13468,7 +13468,7 @@ const defaultResolver = {
 		resolvedPath,
 		rootRealDir
 	}),
-	parseJson: (raw) => JSON5.parse(raw)
+	parseJson: (raw) => json5.parse(raw)
 };
 /**
 * Resolves all $include directives in a parsed config object.
@@ -20081,7 +20081,7 @@ function resolveConfigPathForDeps(deps) {
 function normalizeDeps(overrides = {}) {
 	return {
 		fs: overrides.fs ?? fs,
-		json5: overrides.json5 ?? JSON5,
+		json5: overrides.json5 ?? json5,
 		env: overrides.env ?? process.env,
 		homedir: overrides.homedir ?? (() => resolveRequiredHomeDir(overrides.env ?? process.env, os.homedir)),
 		configPath: overrides.configPath ?? "",
@@ -20092,11 +20092,11 @@ function maybeLoadDotEnvForConfig(env) {
 	if (env !== process.env) return;
 	loadDotEnv({ quiet: true });
 }
-function parseConfigJson5(raw, json5 = JSON5) {
+function parseConfigJson5(raw, json5$1 = json5) {
 	try {
 		return {
 			ok: true,
-			parsed: json5.parse(raw)
+			parsed: json5$1.parse(raw)
 		};
 	} catch (err) {
 		return {

package/dist/plugin-sdk/discord.js

@@ -1,6 +1,7 @@
 import { a as resolveImplicitCopilotProvider, c as resolveFasedAgentDir, d as saveJsonFile, f as formatCliCommand, g as normalizeChatChannelId, h as createSubsystemLogger, i as normalizeProviders, l as resolveProcessScopedMap, m as isTruthyEnvValue, n as DiscordConfigSchema, o as resolveImplicitProviders, p as resolveDefaultAgentId, t as loadConfig, u as loadJsonFile } from "./config-BULEb5QB.js";
 import { A as expandHomePrefix, D as resolveOAuthDir, a as resolveAgentIdFromSessionKey, d as normalizeE164, g as logVerbose, i as normalizeAgentId, j as resolveRequiredHomeDir, k as resolveStateDir, l as formatTerminalLink, o as DEFAULT_ACCOUNT_ID, p as resolveUserPath, s as normalizeAccountId, u as isRecord } from "./retry-CB29XXbz.js";
 import { i as resolveDiscordToken, r as normalizeDiscordToken, t as normalizeDiscordSlug$1 } from "./allow-list-Cgjx0Mc-.js";
+import { createRequire } from "node:module";
 import path from "node:path";
 import fs, { constants } from "node:fs";
 import os from "node:os";
@@ -10,7 +11,6 @@ import { execFile } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import crypto from "node:crypto";
 import "@mariozechner/pi-coding-agent";
-import "file-type";
 import { ChannelType, PermissionFlagsBits, Routes } from "discord-api-types/v10";
 import { RequestClient } from "@buape/carbon";
 import "discord-api-types/payloads/v10";
@@ -112,6 +112,7 @@ const METHOD_SCOPE_GROUPS = {
 		"commands.list",
 		"tools.catalog",
 		"tools.effective",
+		"services.capabilities",
 		"services.webSearch.providers",
 		"services.webSearch.test",
 		"tasks.list",

package/dist/plugin-sdk/{fetch-guard-DPMynms8.js → fetch-guard-BLdujDnt.js}

@@ -1,5 +1,5 @@
 import { Z as logWarn } from "./agent-scope-BuTbywla.js";
-import { a as resolvePinnedHostnameWithPolicy, n as closeDispatcher, r as createPinnedDispatcher, t as SsrFBlockedError } from "./ssrf-u0Ul7okY.js";
+import { a as resolvePinnedHostnameWithPolicy, n as closeDispatcher, r as createPinnedDispatcher, t as SsrFBlockedError } from "./ssrf-Cce6LubA.js";
 import { t as bindAbortRelay } from "./fetch-timeout-Dyj5Y_Ss.js";
 import { t as normalizeRequestInitHeadersForFetch } from "./fetch-headers-BTcaUCW6.js";
 import { EnvHttpProxyAgent } from "undici";

package/dist/plugin-sdk/{fetch-guard-COLmW2TM.js → fetch-guard-DTKgMN9f.js}

@@ -1,7 +1,7 @@
 import { P as logWarn } from "./agent-scope-kIJqg5PA.js";
 import { t as bindAbortRelay } from "./fetch-timeout-l_6RdoMw.js";
 import { t as normalizeRequestInitHeadersForFetch } from "./fetch-headers-my7hgV2G.js";
-import { n as closeDispatcher, r as createPinnedDispatcher, s as resolvePinnedHostnameWithPolicy, t as SsrFBlockedError } from "./ssrf-fG4UHKBw.js";
+import { c as resolvePinnedHostnameWithPolicy, i as createPinnedDispatcher, n as SsrFBlockedError, r as closeDispatcher } from "./optional-runtime-dependency-szS49voX.js";
 import { EnvHttpProxyAgent } from "undici";
 
 //#region src/infra/net/fetch-guard.ts

package/dist/plugin-sdk/{handle-action-C-UndB8E.js → handle-action-B61D85yo.js}

@@ -1,4 +1,4 @@
-import "./config-TFokWwvO.js";
+import "./config-CgwTaper.js";
 import "./paths-GdhK5mV_.js";
 import "./globals-BtKmaIS3.js";
 import "./utils-LGKVujSU.js";
@@ -7,30 +7,30 @@ import "./agent-scope-BuTbywla.js";
 import "./redact-Ck-wgswc.js";
 import "./github-copilot-token-Djqpy66R.js";
 import "./retry-Cq65ROXv.js";
-import "./registry-B4HvWzob.js";
+import "./registry-DNkJsNsz.js";
 import { t as createDiscordActionGate } from "./accounts-BJFheJNv.js";
 import "./accounts-BRbbLNW_.js";
-import "./accounts-VqAX3HJ0.js";
+import "./accounts-BwkH5bTD.js";
 import "./allow-list-CBtbuDI8.js";
 import "./paths-DTurNPnO.js";
-import "./ssrf-u0Ul7okY.js";
-import "./media-D7ZkWU-A.js";
+import "./ssrf-Cce6LubA.js";
+import "./media-C7YT4DeU.js";
 import "./path-alias-guards-C76pC928.js";
 import "./fs-safe-BDnJzutp.js";
-import "./chunk-skAJZWCT.js";
-import "./markdown-tables-9rJDQ1X-.js";
-import "./fetch-guard-DPMynms8.js";
+import "./chunk-KCxbJLsV.js";
+import "./markdown-tables-DWUNvLrc.js";
+import "./fetch-guard-BLdujDnt.js";
 import "./fetch-xfeOsibm.js";
-import { a as jsonResult, c as readReactionParams, d as readStringParam, l as readStringArrayParam, o as parseAvailableTags, s as readNumberParam } from "./common-BiF0sTnY.js";
+import { a as jsonResult, c as readReactionParams, d as readStringParam, l as readStringArrayParam, o as parseAvailableTags, s as readNumberParam } from "./common-DJWrErdE.js";
 import { i as withNormalizedTimestamp } from "./date-time-BtRPVcm7.js";
 import { t as assertMediaNotDataUrl } from "./sandbox-paths-DMnFyOaA.js";
 import "./directory-live-8umGGN7a.js";
 import { n as resolveDiscordChannelId } from "./targets-t1hbjHdJ.js";
 import "./render-C9LkRUhd.js";
-import "./tables-RBtf8G4P.js";
-import "./retry-policy-DGLs5ebP.js";
+import "./tables-BD7H5ug-.js";
+import "./retry-policy-BLYEgIwP.js";
 import { i as getPresence, t as getGateway } from "./gateway-registry-w_Z-PHGf.js";
-import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, D as pinMessageDiscord, E as listThreadsDiscord, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, P as fetchChannelInfoDiscord, R as kickMemberDiscord, S as deleteMessageDiscord, T as listPinsDiscord, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, a as removeReactionDiscord, et as hasAnyGuildPermissionDiscord, g as sendMessageDiscord, i as removeOwnReactionsDiscord, j as addRoleDiscord, k as searchMessagesDiscord, n as fetchReactionsDiscord, o as sendDiscordComponentMessage, p as readDiscordComponentSpec, q as deleteChannelDiscord, r as reactMessageDiscord, v as sendStickerDiscord, w as fetchMessageDiscord, x as createThreadDiscord, y as sendVoiceMessageDiscord, z as listGuildChannelsDiscord } from "./send-Di9irjS-.js";
+import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, D as pinMessageDiscord, E as listThreadsDiscord, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, P as fetchChannelInfoDiscord, R as kickMemberDiscord, S as deleteMessageDiscord, T as listPinsDiscord, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, a as removeReactionDiscord, et as hasAnyGuildPermissionDiscord, g as sendMessageDiscord, i as removeOwnReactionsDiscord, j as addRoleDiscord, k as searchMessagesDiscord, n as fetchReactionsDiscord, o as sendDiscordComponentMessage, p as readDiscordComponentSpec, q as deleteChannelDiscord, r as reactMessageDiscord, v as sendStickerDiscord, w as fetchMessageDiscord, x as createThreadDiscord, y as sendVoiceMessageDiscord, z as listGuildChannelsDiscord } from "./send-C3u-F_8s.js";
 import { PermissionFlagsBits } from "discord-api-types/v10";
 
 //#region src/agents/tools/discord-actions-guild.ts

package/dist/plugin-sdk/{handle-action-hhufKxmU.js → handle-action-CjcxGzQD.js}

@@ -1,36 +1,36 @@
-import "./runtime-Dd0sswuW.js";
+import "./runtime-BPyuAmka.js";
 import "./subsystem-DBPNbQDQ.js";
 import "./globals-B_jjtAje.js";
 import "./paths-BEmvSyOV.js";
 import "./utils-CYk9EKoq.js";
-import "./config-DXlISPlx.js";
+import "./config-DtqAN2L3.js";
 import "./agent-scope-kIJqg5PA.js";
 import { t as createDiscordActionGate } from "./accounts-D7_p-Ivb.js";
 import "./accounts-DTdM1xcj.js";
-import "./accounts-Zgt0NP54.js";
+import "./accounts-RT6y7n3H.js";
 import "./allow-list-C9N6FKeC.js";
 import "./redact-CwCz68Mi.js";
 import "./github-copilot-token-Dgug856m.js";
 import "./retry-DycQ4ymF.js";
 import "./paths-B88DQEK8.js";
-import "./ssrf-fG4UHKBw.js";
-import "./fetch-guard-COLmW2TM.js";
-import "./chunk-Cjw4712g.js";
-import "./media-C6C2c9a4.js";
+import "./optional-runtime-dependency-szS49voX.js";
+import "./fetch-guard-DTKgMN9f.js";
+import "./chunk-M2d7r-Zt.js";
+import "./media-Cxw-xLGU.js";
 import "./path-alias-guards-CcQroDXQ.js";
 import "./fs-safe-BPYS6-j1.js";
-import "./markdown-tables-krKiU4cT.js";
+import "./markdown-tables-CCSD52rA.js";
 import "./fetch-D70syO9t.js";
-import { a as jsonResult, c as readReactionParams, d as readStringParam, l as readStringArrayParam, o as parseAvailableTags, s as readNumberParam } from "./common-CSTxewqY.js";
+import { a as jsonResult, c as readReactionParams, d as readStringParam, l as readStringArrayParam, o as parseAvailableTags, s as readNumberParam } from "./common-Cpw-vuuM.js";
 import "./directory-live-BxSH0XXX.js";
 import { n as resolveDiscordChannelId } from "./targets-cA134MEE.js";
 import { t as assertMediaNotDataUrl } from "./sandbox-paths-CkTERCrj.js";
 import { i as withNormalizedTimestamp } from "./date-time-Bo5FVB7G.js";
 import "./render-C9LkRUhd.js";
-import "./tables-CkxblF0u.js";
-import "./retry-policy-DaodShGa.js";
+import "./tables-CJE8kB35.js";
+import "./retry-policy-sM01QZT2.js";
 import { i as getPresence, t as getGateway } from "./gateway-registry-CtUjFG3Q.js";
-import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, D as pinMessageDiscord, E as listThreadsDiscord, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, P as fetchChannelInfoDiscord, R as kickMemberDiscord, S as deleteMessageDiscord, T as listPinsDiscord, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, a as removeReactionDiscord, et as hasAnyGuildPermissionDiscord, g as sendMessageDiscord, i as removeOwnReactionsDiscord, j as addRoleDiscord, k as searchMessagesDiscord, n as fetchReactionsDiscord, o as sendDiscordComponentMessage, p as readDiscordComponentSpec, q as deleteChannelDiscord, r as reactMessageDiscord, v as sendStickerDiscord, w as fetchMessageDiscord, x as createThreadDiscord, y as sendVoiceMessageDiscord, z as listGuildChannelsDiscord } from "./send-DFTB0cnx.js";
+import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, D as pinMessageDiscord, E as listThreadsDiscord, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, P as fetchChannelInfoDiscord, R as kickMemberDiscord, S as deleteMessageDiscord, T as listPinsDiscord, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, a as removeReactionDiscord, et as hasAnyGuildPermissionDiscord, g as sendMessageDiscord, i as removeOwnReactionsDiscord, j as addRoleDiscord, k as searchMessagesDiscord, n as fetchReactionsDiscord, o as sendDiscordComponentMessage, p as readDiscordComponentSpec, q as deleteChannelDiscord, r as reactMessageDiscord, v as sendStickerDiscord, w as fetchMessageDiscord, x as createThreadDiscord, y as sendVoiceMessageDiscord, z as listGuildChannelsDiscord } from "./send-BQXQA81e.js";
 import { PermissionFlagsBits } from "discord-api-types/v10";
 
 //#region src/agents/tools/discord-actions-guild.ts