@fased/fased 0.1.46 → 0.1.48

package/dist/plugin-sdk/index.js

@@ -1,4298 +1,67 @@
-import { $n as resolveEffectiveAllowFromLists, A as clearHistoryEntriesIfEnabled, Cn as readJsonBodyWithLimit, Dn as resolveChannelMediaMaxBytes, E as DEFAULT_GROUP_HISTORY_LIMIT, F as removeAckReactionAfterReply, Fn as processLineMessage, Gn as createDedupeCache, Gt as stringEnum, Hn as DEFAULT_HEARTBEAT_EVERY, I as shouldAckReaction, In as stripMarkdown, Jn as withTempDownloadPath, L as shouldAckReactionForWhatsApp, Ln as createReceiptCard, M as recordPendingHistoryEntry, N as recordPendingHistoryEntryIfEnabled, O as buildPendingHistoryContextFromMap, On as runFederationAutoConnectOnce, P as recordInboundSession, Pn as hasMarkdownToConvert, Qn as resolveDmGroupAccessWithLists, Rn as attachFooterText, S as detectBinary, Sn as isRequestBodyLimitError, Tn as requestBodyErrorToText, Tt as peekSystemEvents, Un as resolveHeartbeatPrompt, Vn as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, W as formatInboundFromLabel, Wn as waitForAbortSignal, Wt as optionalStringEnum, Xn as readStoreAllowFromForDmPolicy, Yn as DM_GROUP_ACCESS_REASON, Zn as resolveDmGroupAccessWithCommandGate, _ as resolveDefaultLineAccountId, _t as getPluginToolMeta, ar as BLUEBUBBLES_ACTION_NAMES, at as createFasedAgentCodingTools, b as logInboundDrop, bn as RequestBodyLimitError, c as loadModelCatalog, cn as registerAcpRuntimeBackend, d as issuePairingChallenge, dn as AcpRuntimeError, en as resolveToolDisplay, f as createTypingCallbacks, g as normalizeAccountId$1, gt as getChannelAgentToolMeta, h as listLineAccountIds, ir as BLUEBUBBLES_ACTIONS, j as evictOldHistoryKeys, k as clearHistoryEntries, kn as startFederationAutoConnect, ln as unregisterAcpRuntimeBackend, m as resolveMentionGatingWithBypass, nr as assertOkOrThrowHttpError, o as resolveStrictAgenticRuntimeMode, on as getAcpSessionManager, or as BLUEBUBBLES_GROUP_ACTIONS, ot as resolveEffectiveToolPolicy, p as resolveMentionGating, qn as extractToolSend, rr as registerPluginHttpRoute, sn as getAcpRuntimeBackend, sr as CHANNEL_MESSAGE_ACTION_NAMES, t as runEmbeddedPiAgent, tr as resolveControlCommandGate, u as deriveModelMetadata, un as resolveRuntimeOptionsFromMeta, v as resolveLineAccount, vn as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, vt as buildChannelSummary, wn as readRequestBodyWithLimit, x as logTypingFailure, xn as installRequestBodyLimitGuard, y as logAckFailure, yn as DEFAULT_WEBHOOK_MAX_BODY_BYTES } from "./pi-embedded-runner-r_J_Xhv9.js";
-import { Bt as resolveBlueBubblesGroupRequireMention, Ft as trimMessagingTarget, Gn as getPluginCommandSpecs, Gt as resolveGoogleChatGroupToolPolicy, Kn as listPluginCommands, Kt as resolveIMessageGroupRequireMention, Ln as logMutatingAdminRpcAudit, Nn as getChatChannelMeta, Pt as looksLikeHandleOrPhoneTarget, Rn as consumeMutatingAdminRpcBudget, Rt as looksLikeSignalTargetId, Vn as authorizeOperatorScopesForMethod, Vt as resolveBlueBubblesGroupToolPolicy, Wt as resolveGoogleChatGroupRequireMention, Xn as normalizePluginHttpPath, at as resolveMainSessionKey, c as listAgentsForGateway, ct as listChannelPlugins, dn as resolveDefaultSignalAccountId, et as resolveFreshSessionTotalTokens, f as resolveContextTokensForModel, fn as resolveSignalAccount, hn as resolveIMessageAccount, mn as resolveDefaultIMessageAccountId, pn as listIMessageAccountIds, qt as resolveIMessageGroupToolPolicy, s as classifySessionKey, t as getActivePluginRegistry, u as resolveSessionModelRef, un as listSignalAccountIds, x as loadSessionStore, yn as resolveToolsBySender, zt as normalizeSignalMessagingTarget } from "./runtime-ptM6yJKi.js";
-import { n as stripAnsi, t as createSubsystemLogger } from "./subsystem-DBPNbQDQ.js";
+import { $ as clearHistoryEntriesIfEnabled, $n as createInfoCard, $r as extractDashscopeVideoUrls, Ar as resolveSenderCommandAuthorization, B as normalizeAccountId$1, Bn as resolveChannelMediaMaxBytes, Br as getRealtimeVoiceProvider, C as resolveEffectiveToolInventory, Cn as unregisterAcpRuntimeBackend, Cr as sendMediaWithLeadingCaption, D as runEmbeddedPiAgent, Dr as buildAgentMediaPayload, E as ACPX_PUSH_TEST_WRAPPER_ID, Er as fetchWithBearerAuthScopeFallback, F as issuePairingChallenge, Fn as isRequestBodyLimitError, Fr as resolveEffectiveAllowFromLists, G as logTypingFailure, Gr as listRealtimeTranscriptionProviders, H as resolveLineAccount, Hn as startFederationAutoConnect, Hr as normalizeRealtimeVoiceProviderId, I as createTypingCallbacks, In as readJsonBodyWithLimit, Jn as processLineMessage, Jr as DEFAULT_VIDEO_GENERATION_TIMEOUT_MS, Kr as normalizeRealtimeTranscriptionProviderId, L as resolveMentionGating, Ln as readRequestBodyWithLimit, Lr as resolveControlCommandGate, Mn as DEFAULT_WEBHOOK_MAX_BODY_BYTES, Mr as readStoreAllowFromForDmPolicy, Nn as RequestBodyLimitError, Nr as resolveDmGroupAccessWithCommandGate, Or as chunkTextForOutbound, Pn as installRequestBodyLimitGuard, Pr as resolveDmGroupAccessWithLists, Q as clearHistoryEntries, Qn as createImageCard, Qr as downloadDashscopeGeneratedVideos, R as resolveMentionGatingWithBypass, Rn as requestBodyErrorToText, Rr as evaluateSenderGroupAccess, S as getPublicGatewayIdentity, Sn as registerAcpRuntimeBackend, Sr as resolveOutboundMediaUrls, T as ACPX_PUSH_TEST_METHOD, Tr as createScopedPairingAccess, U as logAckFailure, Ur as canonicalizeRealtimeTranscriptionProviderId, V as resolveDefaultLineAccountId, Vn as runFederationAutoConnectOnce, Vr as listRealtimeVoiceProviders, W as logInboundDrop, Wr as getRealtimeTranscriptionProvider, Xn as createReceiptCard, Xr as buildDashscopeVideoGenerationInput, Y as DEFAULT_GROUP_HISTORY_LIMIT, Yn as stripMarkdown, Yr as DEFAULT_VIDEO_RESOLUTION_TO_SIZE, Z as buildPendingHistoryContextFromMap, Zn as createActionCard, Zr as buildDashscopeVideoGenerationParameters, _ as getGatewayUpdateStatus, _r as buildHostnameAllowlistPolicyFromSuffixAllowlist, a as normalizeIMessageMessagingTarget, ai as BLUEBUBBLES_ACTIONS, ar as createPersistentDedupe, at as shouldAckReaction, b as getStatusSummary, br as createNormalizedOutboundDeliverer, ci as CHANNEL_MESSAGE_ACTION_NAMES, cn as stringEnum, cr as registerWebhookTarget, d as mergeAllowlist, dr as resolveSingleWebhookTargetAsync, ei as pollDashscopeVideoTaskUntilComplete, er as createListCard, et as evictOldHistoryKeys, fr as resolveWebhookTargets, g as buildCommandsListResult, gr as withTempDownloadPath, h as getAcpStatusSnapshot, hr as extractToolSend, i as looksLikeIMessageTargetId, ii as resolveAllowlistMatchSimple, ir as createLoggerBackedRuntime, it as removeAckReactionAfterReply, jn as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, jr as DM_GROUP_ACCESS_REASON, kr as resolveChannelAccountConfigBasePath, lr as rejectNonPostWebhookRequest, m as pushHandlers, mr as resolveWebhookPath, n as collectBlueBubblesStatusIssues, ni as registerPluginHttpRoute, nt as recordPendingHistoryEntryIfEnabled, o as imessageOnboardingAdapter, oi as BLUEBUBBLES_ACTION_NAMES, or as createDedupeCache, ot as shouldAckReactionForWhatsApp, p as summarizeMapping, pr as normalizeWebhookPath, pt as formatInboundFromLabel, qn as hasMarkdownToConvert, qr as DEFAULT_VIDEO_GENERATION_DURATION_SECONDS, r as signalOnboardingAdapter, ri as formatAllowlistMatchMeta, rr as waitForAbortSignal, rt as recordInboundSession, s as buildMediaPayload, si as BLUEBUBBLES_GROUP_ACTIONS, sn as optionalStringEnum, t as LineConfigSchema, ti as resolveVideoGenerationReferenceUrls, tt as recordPendingHistoryEntry, ur as resolveSingleWebhookTarget, v as buildModelCatalogStatus, vr as isHttpsUrlAllowedByHostnameSuffixAllowlist, w as executeAcpxPushTestRequest, wn as AcpRuntimeError, wr as buildOauthProviderAuthResult, x as isDangerousNameMatchingEnabled, xr as formatTextWithAttachmentLinks, y as loadGatewayModelCatalog, yr as normalizeHostnameSuffixAllowlist, z as listLineAccountIds, zr as canonicalizeRealtimeVoiceProviderId } from "./config-schema-Cg6PYSHR.js";
+import { Bt as resolveBlueBubblesGroupRequireMention, Gt as resolveGoogleChatGroupToolPolicy, Kt as resolveIMessageGroupRequireMention, Nn as getChatChannelMeta, Rt as looksLikeSignalTargetId, Vt as resolveBlueBubblesGroupToolPolicy, Wt as resolveGoogleChatGroupRequireMention, Xn as normalizePluginHttpPath, dn as resolveDefaultSignalAccountId, fn as resolveSignalAccount, hn as resolveIMessageAccount, mn as resolveDefaultIMessageAccountId, pn as listIMessageAccountIds, qt as resolveIMessageGroupToolPolicy, un as listSignalAccountIds, yn as resolveToolsBySender, zt as normalizeSignalMessagingTarget } from "./runtime-BLknHFGz.js";
+import { n as stripAnsi } from "./subsystem-DBPNbQDQ.js";
 import { g as registerLogTransport, w as resolvePreferredFasedAgentTmpDir } from "./globals-B_jjtAje.js";
-import { s as resolveStateDir } from "./paths-BEmvSyOV.js";
-import { c as isRecord, d as normalizeE164, g as safeParseJson, n as clamp, o as escapeRegExp, t as CONFIG_DIR, y as sleep } from "./utils-CYk9EKoq.js";
-import { A as GroupPolicySchema, Cr as formatCliCommand, D as BlockStreamingCoalesceSchema, E as ToolPolicySchema, F as TtsConfigSchema, Fn as withFileLock, H as parseDurationMs, I as TtsModeSchema, Jt as resolveConfiguredModelRef, L as TtsProviderSchema, M as MarkdownTableModeSchema, N as ReplyRuntimeConfigSchemaShape, O as DmConfigSchema, P as TtsAutoSchema, Pn as acquireFileLock, R as normalizeAllowFrom, Tr as isTruthyEnvValue, ar as DEFAULT_MODEL, d as GoogleChatConfigSchema, f as IMessageConfigSchema, fr as formatErrorMessage, hr as extractArchive, i as readConfigFileSnapshot, ir as DEFAULT_CONTEXT_TOKENS, j as MarkdownConfigSchema, k as DmPolicySchema, m as SignalConfigSchema, n as loadConfig, or as DEFAULT_PROVIDER, p as MSTeamsConfigSchema, sr as VERSION, z as requireOpenAllowFrom, zn as normalizeProviderId } from "./config-DHDPT24D.js";
-import { E as resolveFasedAgentPackageRoot, a as resolveAgentDir, i as resolveAgentConfig, l as resolveAgentWorkspaceDir, p as resolveSessionAgentId, r as listAgentIds, u as resolveDefaultAgentId } from "./agent-scope-BbgPlhtw.js";
-import { S as parseAgentSessionKey, f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId, s as normalizeAgentId, u as resolveThreadSessionKeys } from "./session-key-HSJ2KQTc.js";
+import "./paths-BEmvSyOV.js";
+import { d as normalizeE164, g as safeParseJson, n as clamp, o as escapeRegExp, y as sleep } from "./utils-CYk9EKoq.js";
+import { A as GroupPolicySchema, D as BlockStreamingCoalesceSchema, E as ToolPolicySchema, F as TtsConfigSchema, Fn as withFileLock, I as TtsModeSchema, L as TtsProviderSchema, M as MarkdownTableModeSchema, N as ReplyRuntimeConfigSchemaShape, O as DmConfigSchema, P as TtsAutoSchema, Pn as acquireFileLock, R as normalizeAllowFrom, Tr as isTruthyEnvValue, d as GoogleChatConfigSchema, f as IMessageConfigSchema, fr as formatErrorMessage, j as MarkdownConfigSchema, k as DmPolicySchema, m as SignalConfigSchema, p as MSTeamsConfigSchema, z as requireOpenAllowFrom } from "./config-DutIeFge.js";
+import { r as listAgentIds, u as resolveDefaultAgentId } from "./agent-scope-BbgPlhtw.js";
+import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId, u as resolveThreadSessionKeys } from "./session-key-HSJ2KQTc.js";
 import "./accounts-RHZyaB73.js";
 import "./accounts-CuqIKU8X.js";
 import "./logger-BbFvCoKk.js";
-import { t as runCommandWithTimeout } from "./exec-DQ8j4Fm3.js";
-import "./accounts-DoZdNyoY.js";
-import { C as resolveNestedAllowlistDecision, S as resolveChannelEntryMatchWithFallback, b as normalizeChannelSlug, x as resolveChannelEntryMatch, y as buildChannelKeyCandidates } from "./allow-list-yqasgPpz.js";
-import { c as formatAllowlistMatchMeta, i as mergeAllowlist, l as resolveAllowlistMatchSimple, o as summarizeMapping, s as isDangerousNameMatchingEnabled } from "./resolve-utils-DrvLA82C.js";
-import { n as redactSensitiveText, t as getDefaultRedactPatterns } from "./redact-CwCz68Mi.js";
-import "./github-copilot-token-Dgug856m.js";
-import "./retry-DycQ4ymF.js";
-import { l as resolveStorePath } from "./paths-B88DQEK8.js";
-import { a as deleteAccountFromConfigSection, c as formatPairingApproveHint, l as resolveChannelDefaultAccountId, n as applyAccountNameToChannelSection, o as setAccountEnabledInConfigSection, r as migrateBaseNameToDefaultAccount, s as buildChannelConfigSchema, t as PAIRING_APPROVED_MESSAGE, u as emptyPluginConfigSchema } from "./pairing-message-Cma7gg4r.js";
-import { n as fetchWithTimeout } from "./fetch-timeout-jOIu9Xud.js";
-import { t as normalizeRequestInitHeadersForFetch } from "./fetch-headers-DvXyXtoI.js";
-import "./ip-BkeyFRJr.js";
-import { a as isBlockedHostnameOrIp, i as isBlockedHostname, o as isPrivateIpAddress, t as SsrFBlockedError } from "./ssrf-D_4q0mKh.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-CxXvFYq5.js";
-import { t as redactSensitiveUrl } from "./redact-sensitive-url-B0RJQqO7.js";
-import { c as normalizeIMessageHandle, d as parseChatTargetPrefixesOrThrow, f as resolveServicePrefixedAllowTarget, g as isNormalizedSenderAllowed, h as isAllowedParsedChatSender, m as formatAllowFromLowercase, p as resolveServicePrefixedTarget, u as parseChatAllowTargetPrefixes } from "./send-C_vcGOCA.js";
-import { a as resolveOpenProviderRuntimeGroupPolicy, i as resolveDefaultGroupPolicy, n as GROUP_POLICY_BLOCKED_LABEL, o as warnMissingProviderGroupPolicyFallbackOnce, r as resolveAllowlistProviderRuntimeGroupPolicy, t as formatDocsLink } from "./links-D5ecKoG9.js";
-import { D as formatLocationText, O as toLocationContext, n as isWSLEnv, r as isWSLSync, t as isWSL2Sync } from "./wsl-DzFPHgJ6.js";
-import { o as readJsonFileWithFallback, s as writeJsonFileAtomically } from "./pairing-store-Xfn7m8FO.js";
-import { p as chunkTextByBreakResolver } from "./chunk-BezNQ2ms.js";
-import { n as resolveGatewayBindUrl, r as runPluginCommandWithTimeout, t as resolveTailnetHostWithRunner } from "./tailscale-status-BGBRraZW.js";
-import { a as resolveAckReaction, n as createReplyPrefixOptions, t as createReplyPrefixContext } from "./reply-prefix-CbPHNXlm.js";
-import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN, t as HEARTBEAT_TOKEN } from "./tokens-Do_JU4Rh.js";
-import { i as rejectDevicePairing, r as listDevicePairing, t as approveDevicePairing } from "./device-pairing-J1IH1jFl.js";
-import { o as createAsyncLock, s as readJsonFile } from "./pairing-token-HQpaqod5.js";
-import { h as onDiagnosticEvent, m as isDiagnosticsEnabled, p as emitDiagnosticEvent } from "./diagnostic-C16gioN6.js";
-import "./diagnostic-session-state-B-9PL5r7.js";
-import "./optional-runtime-dependency-DRIuSMGn.js";
-import { c as detectMime, l as extensionForMime, u as getFileExtension } from "./image-ops-Dj5U2UMr.js";
-import { At as resolveModel, C as resolveFederationHandle, S as resolveFederationBaseUrl, St as errorShape, b as normalizeHandle, bt as validatePushTestParams, gt as publicKeyRawBase64UrlFromPem, ht as loadOrCreateDeviceIdentity, x as resolveAgentPublicOrigin, xt as ErrorCodes, y as DEFAULT_FEDERATION_BASE_URL, yt as formatValidationErrors } from "./wallet-status-B9rwi_D9.js";
-import "./pi-model-discovery-CyBJpoHh.js";
-import "./runtime-dependency-BoJ6eFyY.js";
-import { t as rawDataToString } from "./ws-CxmRDbD9.js";
-import "./path-alias-guards-BlIJ0AmG.js";
-import "./fs-safe-DztQeyQe.js";
-import "./markdown-tables-BWPlKBlJ.js";
-import { n as loadWebMedia } from "./media-DkIzq3KV.js";
-import "./send-BMVtOmUX.js";
-import { r as extractOriginalFilename } from "./outbound-attachment-DaAFYQmc.js";
-import "./fetch-RV7QDF43.js";
-import { U as listAcpSessionEntries } from "./thread-bindings.state-DFCnsoeW.js";
-import "./memory-search-DHSeU4pJ.js";
-import "./manager-gssr8OXa.js";
-import "./query-expansion-BM7lmqaP.js";
-import { a as jsonResult, c as readReactionParams, d as readStringParam, n as createActionGate, s as readNumberParam } from "./common-DBwy4zpd.js";
-import { m as resolveNativeCommandName, o as listChatCommandsForConfig } from "./commands-registry-CFhJ8pUg.js";
-import { n as listSkillCommandsForAgents } from "./skill-commands-Dqr7X9q3.js";
-import "./directory-live-G7AN8y8N.js";
-import "./targets-CI7i2tSK.js";
-import "./sandbox-paths-fc-HFGJr.js";
-import { n as missingTargetError } from "./target-errors-C0yNDbGS.js";
-import "./resolve-route-DaIOKVVx.js";
-import "./render-K7NwXvVu.js";
-import "./tables-CeCs0Fx6.js";
-import { C as buildBaseChannelStatusSummary, E as createDefaultChannelRuntimeState, S as buildBaseAccountStatusSnapshot, T as collectStatusIssuesFromLastError, b as setOnboardingChannelEnabled, c as parseOnboardingEntriesAllowingWildcard, f as promptParsedAllowFromForScopedChannel, h as resolveAccountIdForConfigure, l as patchChannelConfigForAccount, r as mergeAllowFromEntries, t as addWildcardAllowFrom, u as promptAccountId, v as setChannelDmPolicyWithAllowFrom, w as buildTokenChannelStatusSummary } from "./helpers-BEIzSOp1.js";
-import { t as buildMediaPayload } from "./media-payload-DpYEcV-X.js";
-import { t as promptChannelAccessConfig } from "./channel-access-I3pe5AGo.js";
-import { n as asString, r as collectIssuesForEnabledAccounts } from "./shared-V35XNAbz.js";
-import path from "node:path";
-import chalk from "chalk";
-import fs, { createWriteStream, existsSync } from "node:fs";
-import os from "node:os";
-import JSON5 from "json5";
-import { format } from "node:util";
-import fs$1 from "node:fs/promises";
-import { spawn } from "node:child_process";
-import { createHash, createPrivateKey, randomUUID, sign } from "node:crypto";
-import { pipeline } from "node:stream/promises";
-import { z } from "zod";
-import { request } from "node:https";
-import { WebSocket as WebSocket$1 } from "ws";
-import http2 from "node:http2";
-
-//#region src/video-generation/dashscope-compatible.ts
-const DEFAULT_VIDEO_GENERATION_DURATION_SECONDS = 5;
-const DEFAULT_VIDEO_GENERATION_TIMEOUT_MS = 12e4;
-const DEFAULT_VIDEO_RESOLUTION_TO_SIZE = {
-	"480P": "832*480",
-	"720P": "1280*720",
-	"1080P": "1920*1080"
-};
-const DEFAULT_VIDEO_GENERATION_POLL_INTERVAL_MS = 2500;
-const DEFAULT_VIDEO_GENERATION_MAX_POLL_ATTEMPTS = 120;
-function buildDashscopeVideoGenerationInput(params) {
-	if ([...params.req.inputImages ?? [], ...params.req.inputVideos ?? []].some((asset) => !asset.url?.trim() && asset.buffer)) throw new Error(`${params.providerLabel} video generation currently requires remote http(s) URLs for reference images/videos.`);
-	const input = { prompt: params.req.prompt };
-	const referenceUrls = resolveVideoGenerationReferenceUrls(params.req.inputImages, params.req.inputVideos);
-	if (referenceUrls.length === 1 && (params.req.inputImages?.length ?? 0) === 1 && !params.req.inputVideos?.length) input.img_url = referenceUrls[0];
-	else if (referenceUrls.length > 0) input.reference_urls = referenceUrls;
-	return input;
-}
-function resolveVideoGenerationReferenceUrls(inputImages, inputVideos) {
-	return [...inputImages ?? [], ...inputVideos ?? []].map((asset) => asset.url?.trim()).filter((value) => Boolean(value));
-}
-function buildDashscopeVideoGenerationParameters(req, resolutionToSize = DEFAULT_VIDEO_RESOLUTION_TO_SIZE) {
-	const parameters = {};
-	const size = req.size?.trim() || (req.resolution ? resolutionToSize[req.resolution] : void 0);
-	if (size) parameters.size = size;
-	if (req.aspectRatio?.trim()) parameters.aspect_ratio = req.aspectRatio.trim();
-	if (typeof req.durationSeconds === "number" && Number.isFinite(req.durationSeconds)) parameters.duration = Math.max(1, Math.round(req.durationSeconds));
-	if (typeof req.audio === "boolean") parameters.enable_audio = req.audio;
-	if (typeof req.watermark === "boolean") parameters.watermark = req.watermark;
-	return Object.keys(parameters).length > 0 ? parameters : void 0;
-}
-function extractDashscopeVideoUrls(payload) {
-	const urls = [...payload.output?.results?.map((entry) => entry.video_url).filter(Boolean) ?? [], payload.output?.video_url].filter((value) => typeof value === "string" && value.trim().length > 0);
-	return [...new Set(urls)];
-}
-async function pollDashscopeVideoTaskUntilComplete(params) {
-	for (let attempt = 0; attempt < DEFAULT_VIDEO_GENERATION_MAX_POLL_ATTEMPTS; attempt += 1) {
-		const response = await fetchWithTimeout(`${params.baseUrl}/api/v1/tasks/${params.taskId}`, {
-			method: "GET",
-			headers: params.headers
-		}, params.timeoutMs ?? params.defaultTimeoutMs ?? DEFAULT_VIDEO_GENERATION_TIMEOUT_MS, params.fetchFn);
-		await assertOkOrThrowHttpError(response, `${params.providerLabel} video-generation task poll failed`);
-		const payload = await response.json();
-		const status = payload.output?.task_status?.trim().toUpperCase();
-		if (status === "SUCCEEDED") return payload;
-		if (status === "FAILED" || status === "CANCELED") throw new Error(payload.output?.message?.trim() || payload.message?.trim() || `${params.providerLabel} video generation task ${params.taskId} ${status.toLowerCase()}`);
-		await new Promise((resolve) => setTimeout(resolve, DEFAULT_VIDEO_GENERATION_POLL_INTERVAL_MS));
-	}
-	throw new Error(`${params.providerLabel} video generation task ${params.taskId} did not finish in time`);
-}
-async function downloadDashscopeGeneratedVideos(params) {
-	const videos = [];
-	for (const [index, url] of params.urls.entries()) {
-		const response = await fetchWithTimeout(url, { method: "GET" }, params.timeoutMs ?? params.defaultTimeoutMs ?? DEFAULT_VIDEO_GENERATION_TIMEOUT_MS, params.fetchFn);
-		await assertOkOrThrowHttpError(response, `${params.providerLabel} generated video download failed`);
-		const arrayBuffer = await response.arrayBuffer();
-		videos.push({
-			buffer: Buffer.from(arrayBuffer),
-			mimeType: response.headers.get("content-type")?.trim() || "video/mp4",
-			fileName: `video-${index + 1}.mp4`,
-			metadata: { sourceUrl: redactSensitiveUrl(url) }
-		});
-	}
-	return videos;
-}
-
-//#endregion
-//#region src/plugins/capability-provider-runtime.ts
-function resolvePluginCapabilityProviders(params) {
-	return (getActivePluginRegistry()?.[params.key] ?? []).map((entry) => entry.provider);
-}
-
-//#endregion
-//#region src/realtime-transcription/provider-registry.ts
-function trimToUndefined$1(value) {
-	const trimmed = value?.trim().toLowerCase();
-	return trimmed ? trimmed : void 0;
-}
-function normalizeRealtimeTranscriptionProviderId(providerId) {
-	return trimToUndefined$1(providerId);
-}
-function resolveRealtimeTranscriptionProviderEntries(_cfg) {
-	return resolvePluginCapabilityProviders({ key: "realtimeTranscriptionProviders" });
-}
-function buildProviderMaps$1(_cfg) {
-	const canonical = /* @__PURE__ */ new Map();
-	const aliases = /* @__PURE__ */ new Map();
-	const register = (provider) => {
-		const id = normalizeRealtimeTranscriptionProviderId(provider.id);
-		if (!id) return;
-		canonical.set(id, provider);
-		aliases.set(id, provider);
-		for (const alias of provider.aliases ?? []) {
-			const normalizedAlias = normalizeRealtimeTranscriptionProviderId(alias);
-			if (normalizedAlias) aliases.set(normalizedAlias, provider);
-		}
-	};
-	for (const provider of resolveRealtimeTranscriptionProviderEntries(_cfg)) register(provider);
-	return {
-		canonical,
-		aliases
-	};
-}
-function listRealtimeTranscriptionProviders(cfg) {
-	return [...buildProviderMaps$1(cfg).canonical.values()];
-}
-function getRealtimeTranscriptionProvider(providerId, cfg) {
-	const normalized = normalizeRealtimeTranscriptionProviderId(providerId);
-	if (!normalized) return;
-	return buildProviderMaps$1(cfg).aliases.get(normalized);
-}
-function canonicalizeRealtimeTranscriptionProviderId(providerId, cfg) {
-	const normalized = normalizeRealtimeTranscriptionProviderId(providerId);
-	if (!normalized) return;
-	return getRealtimeTranscriptionProvider(normalized, cfg)?.id ?? normalized;
-}
-
-//#endregion
-//#region src/realtime-voice/provider-registry.ts
-function trimToUndefined(value) {
-	const trimmed = value?.trim().toLowerCase();
-	return trimmed ? trimmed : void 0;
-}
-function normalizeRealtimeVoiceProviderId(providerId) {
-	return trimToUndefined(providerId);
-}
-function resolveRealtimeVoiceProviderEntries(_cfg) {
-	return resolvePluginCapabilityProviders({ key: "realtimeVoiceProviders" });
-}
-function buildProviderMaps(_cfg) {
-	const canonical = /* @__PURE__ */ new Map();
-	const aliases = /* @__PURE__ */ new Map();
-	const register = (provider) => {
-		const id = normalizeRealtimeVoiceProviderId(provider.id);
-		if (!id) return;
-		canonical.set(id, provider);
-		aliases.set(id, provider);
-		for (const alias of provider.aliases ?? []) {
-			const normalizedAlias = normalizeRealtimeVoiceProviderId(alias);
-			if (normalizedAlias) aliases.set(normalizedAlias, provider);
-		}
-	};
-	for (const provider of resolveRealtimeVoiceProviderEntries(_cfg)) register(provider);
-	return {
-		canonical,
-		aliases
-	};
-}
-function listRealtimeVoiceProviders(cfg) {
-	return [...buildProviderMaps(cfg).canonical.values()];
-}
-function getRealtimeVoiceProvider(providerId, cfg) {
-	const normalized = normalizeRealtimeVoiceProviderId(providerId);
-	if (!normalized) return;
-	return buildProviderMaps(cfg).aliases.get(normalized);
-}
-function canonicalizeRealtimeVoiceProviderId(providerId, cfg) {
-	const normalized = normalizeRealtimeVoiceProviderId(providerId);
-	if (!normalized) return;
-	return getRealtimeVoiceProvider(normalized, cfg)?.id ?? normalized;
-}
-
-//#endregion
-//#region src/plugin-sdk/group-access.ts
-function evaluateSenderGroupAccess(params) {
-	const { groupPolicy, providerMissingFallbackApplied } = resolveOpenProviderRuntimeGroupPolicy({
-		providerConfigPresent: params.providerConfigPresent,
-		groupPolicy: params.configuredGroupPolicy,
-		defaultGroupPolicy: params.defaultGroupPolicy
-	});
-	if (groupPolicy === "disabled") return {
-		allowed: false,
-		groupPolicy,
-		providerMissingFallbackApplied,
-		reason: "disabled"
-	};
-	if (groupPolicy === "allowlist") {
-		if (params.groupAllowFrom.length === 0) return {
-			allowed: false,
-			groupPolicy,
-			providerMissingFallbackApplied,
-			reason: "empty_allowlist"
-		};
-		if (!params.isSenderAllowed(params.senderId, params.groupAllowFrom)) return {
-			allowed: false,
-			groupPolicy,
-			providerMissingFallbackApplied,
-			reason: "sender_not_allowlisted"
-		};
-	}
-	return {
-		allowed: true,
-		groupPolicy,
-		providerMissingFallbackApplied,
-		reason: "allowed"
-	};
-}
-
-//#endregion
-//#region src/plugin-sdk/command-auth.ts
-async function resolveSenderCommandAuthorization(params) {
-	const shouldComputeAuth = params.shouldComputeCommandAuthorized(params.rawBody, params.cfg);
-	const storeAllowFrom = !params.isGroup && params.dmPolicy !== "allowlist" && (params.dmPolicy !== "open" || shouldComputeAuth) ? await params.readAllowFromStore().catch(() => []) : [];
-	const access = resolveDmGroupAccessWithLists({
-		isGroup: params.isGroup,
-		dmPolicy: params.dmPolicy,
-		groupPolicy: "allowlist",
-		allowFrom: params.configuredAllowFrom,
-		groupAllowFrom: params.configuredGroupAllowFrom ?? [],
-		storeAllowFrom,
-		isSenderAllowed: (allowFrom) => params.isSenderAllowed(params.senderId, allowFrom)
-	});
-	const effectiveAllowFrom = access.effectiveAllowFrom;
-	const effectiveGroupAllowFrom = access.effectiveGroupAllowFrom;
-	const useAccessGroups = params.cfg.commands?.useAccessGroups !== false;
-	const senderAllowedForCommands = params.isSenderAllowed(params.senderId, params.isGroup ? effectiveGroupAllowFrom : effectiveAllowFrom);
-	const ownerAllowedForCommands = params.isSenderAllowed(params.senderId, effectiveAllowFrom);
-	const groupAllowedForCommands = params.isSenderAllowed(params.senderId, effectiveGroupAllowFrom);
-	return {
-		shouldComputeAuth,
-		effectiveAllowFrom,
-		effectiveGroupAllowFrom,
-		senderAllowedForCommands,
-		commandAuthorized: shouldComputeAuth ? params.resolveCommandAuthorizedFromAuthorizers({
-			useAccessGroups,
-			authorizers: [{
-				configured: effectiveAllowFrom.length > 0,
-				allowed: ownerAllowedForCommands
-			}, {
-				configured: effectiveGroupAllowFrom.length > 0,
-				allowed: groupAllowedForCommands
-			}]
-		}) : void 0
-	};
-}
-
-//#endregion
-//#region src/plugin-sdk/config-paths.ts
-function resolveChannelAccountConfigBasePath(params) {
-	const accounts = (params.cfg.channels?.[params.channelKey])?.accounts;
-	return Boolean(accounts?.[params.accountId]) ? `channels.${params.channelKey}.accounts.${params.accountId}.` : `channels.${params.channelKey}.`;
-}
-
-//#endregion
-//#region src/plugin-sdk/text-chunking.ts
-function chunkTextForOutbound(text, limit) {
-	return chunkTextByBreakResolver(text, limit, (window) => {
-		const lastNewline = window.lastIndexOf("\n");
-		const lastSpace = window.lastIndexOf(" ");
-		return lastNewline > 0 ? lastNewline : lastSpace;
-	});
-}
-
-//#endregion
-//#region src/plugin-sdk/agent-media-payload.ts
-function buildAgentMediaPayload(mediaList) {
-	const first = mediaList[0];
-	const mediaPaths = mediaList.map((media) => media.path);
-	const mediaTypes = mediaList.map((media) => media.contentType).filter(Boolean);
-	return {
-		MediaPath: first?.path,
-		MediaType: first?.contentType ?? void 0,
-		MediaUrl: first?.path,
-		MediaPaths: mediaPaths.length > 0 ? mediaPaths : void 0,
-		MediaUrls: mediaPaths.length > 0 ? mediaPaths : void 0,
-		MediaTypes: mediaTypes.length > 0 ? mediaTypes : void 0
-	};
-}
-
-//#endregion
-//#region src/plugin-sdk/fetch-auth.ts
-function isAuthFailureStatus(status) {
-	return status === 401 || status === 403;
-}
-async function fetchWithBearerAuthScopeFallback(params) {
-	const fetchFn = params.fetchFn ?? fetch;
-	let parsedUrl;
-	try {
-		parsedUrl = new URL(params.url);
-	} catch {
-		throw new Error(`Invalid URL: ${params.url}`);
-	}
-	if (params.requireHttps === true && parsedUrl.protocol !== "https:") throw new Error(`URL must use HTTPS: ${params.url}`);
-	const requestInit = normalizeRequestInitHeadersForFetch(params.requestInit);
-	const fetchOnce = (headers) => fetchFn(params.url, {
-		...requestInit,
-		...headers ? { headers } : {}
-	});
-	const firstAttempt = await fetchOnce();
-	if (firstAttempt.ok) return firstAttempt;
-	if (!params.tokenProvider) return firstAttempt;
-	const shouldRetry = params.shouldRetry ?? ((response) => isAuthFailureStatus(response.status));
-	if (!shouldRetry(firstAttempt)) return firstAttempt;
-	if (params.shouldAttachAuth && !params.shouldAttachAuth(params.url)) return firstAttempt;
-	for (const scope of params.scopes) try {
-		const token = await params.tokenProvider.getAccessToken(scope);
-		const authHeaders = new Headers(requestInit?.headers);
-		authHeaders.set("Authorization", `Bearer ${token}`);
-		const authAttempt = await fetchOnce(authHeaders);
-		if (authAttempt.ok) return authAttempt;
-		if (!shouldRetry(authAttempt)) continue;
-	} catch {}
-	return firstAttempt;
-}
-
-//#endregion
-//#region src/plugin-sdk/pairing-access.ts
-function createScopedPairingAccess(params) {
-	const resolvedAccountId = normalizeAccountId(params.accountId);
-	return {
-		accountId: resolvedAccountId,
-		readAllowFromStore: () => params.core.channel.pairing.readAllowFromStore({
-			channel: params.channel,
-			accountId: resolvedAccountId
-		}),
-		readStoreForDmPolicy: (provider, accountId) => params.core.channel.pairing.readAllowFromStore({
-			channel: provider,
-			accountId: normalizeAccountId(accountId)
-		}),
-		upsertPairingRequest: (input) => params.core.channel.pairing.upsertPairingRequest({
-			channel: params.channel,
-			accountId: resolvedAccountId,
-			...input
-		})
-	};
-}
-
-//#endregion
-//#region src/plugin-sdk/provider-auth-result.ts
-function buildOauthProviderAuthResult(params) {
-	const email = params.email ?? void 0;
-	return {
-		profiles: [{
-			profileId: `${params.profilePrefix ?? params.providerId}:${email ?? "default"}`,
-			credential: {
-				type: "oauth",
-				provider: params.providerId,
-				access: params.access,
-				...params.refresh ? { refresh: params.refresh } : {},
-				...Number.isFinite(params.expires) ? { expires: params.expires } : {},
-				...email ? { email } : {},
-				...params.credentialExtra
-			}
-		}],
-		configPatch: params.configPatch ?? { agents: { defaults: { models: { [params.defaultModel]: {} } } } },
-		defaultModel: params.defaultModel,
-		notes: params.notes
-	};
-}
-
-//#endregion
-//#region src/plugin-sdk/reply-payload.ts
-function normalizeOutboundReplyPayload(payload) {
-	return {
-		text: typeof payload.text === "string" ? payload.text : void 0,
-		mediaUrls: Array.isArray(payload.mediaUrls) ? payload.mediaUrls.filter((entry) => typeof entry === "string" && entry.length > 0) : void 0,
-		mediaUrl: typeof payload.mediaUrl === "string" ? payload.mediaUrl : void 0,
-		replyToId: typeof payload.replyToId === "string" ? payload.replyToId : void 0
-	};
-}
-function createNormalizedOutboundDeliverer(handler) {
-	return async (payload) => {
-		await handler(payload && typeof payload === "object" ? normalizeOutboundReplyPayload(payload) : {});
-	};
-}
-function resolveOutboundMediaUrls(payload) {
-	if (payload.mediaUrls?.length) return payload.mediaUrls;
-	if (payload.mediaUrl) return [payload.mediaUrl];
-	return [];
-}
-function formatTextWithAttachmentLinks(text, mediaUrls) {
-	const trimmedText = text?.trim() ?? "";
-	if (!trimmedText && mediaUrls.length === 0) return "";
-	const mediaBlock = mediaUrls.length ? mediaUrls.map((url) => `Attachment: ${url}`).join("\n") : "";
-	if (!trimmedText) return mediaBlock;
-	if (!mediaBlock) return trimmedText;
-	return `${trimmedText}\n\n${mediaBlock}`;
-}
-async function sendMediaWithLeadingCaption(params) {
-	if (params.mediaUrls.length === 0) return false;
-	let first = true;
-	for (const mediaUrl of params.mediaUrls) {
-		const caption = first ? params.caption : void 0;
-		first = false;
-		try {
-			await params.send({
-				mediaUrl,
-				caption
-			});
-		} catch (error) {
-			if (params.onError) {
-				params.onError(error, mediaUrl);
-				continue;
-			}
-			throw error;
-		}
-	}
-	return true;
-}
-
-//#endregion
-//#region src/plugin-sdk/ssrf-policy.ts
-function normalizeHostnameSuffix(value) {
-	const trimmed = value.trim().toLowerCase();
-	if (!trimmed) return "";
-	if (trimmed === "*" || trimmed === "*.") return "*";
-	return trimmed.replace(/^\*\.?/, "").replace(/^\.+/, "").replace(/\.+$/, "");
-}
-function isHostnameAllowedBySuffixAllowlist(hostname, allowlist) {
-	if (allowlist.includes("*")) return true;
-	const normalized = hostname.toLowerCase();
-	return allowlist.some((entry) => normalized === entry || normalized.endsWith(`.${entry}`));
-}
-function normalizeHostnameSuffixAllowlist(input, defaults) {
-	const source = input && input.length > 0 ? input : defaults;
-	if (!source || source.length === 0) return [];
-	const normalized = source.map(normalizeHostnameSuffix).filter(Boolean);
-	if (normalized.includes("*")) return ["*"];
-	return Array.from(new Set(normalized));
-}
-function isHttpsUrlAllowedByHostnameSuffixAllowlist(url, allowlist) {
-	try {
-		const parsed = new URL(url);
-		if (parsed.protocol !== "https:") return false;
-		return isHostnameAllowedBySuffixAllowlist(parsed.hostname, allowlist);
-	} catch {
-		return false;
-	}
-}
-/**
-* Converts suffix-style host allowlists (for example "example.com") into SSRF
-* hostname allowlist patterns used by the shared fetch guard.
-*
-* Suffix semantics:
-* - "example.com" allows "example.com" and "*.example.com"
-* - "*" disables hostname allowlist restrictions
-*/
-function buildHostnameAllowlistPolicyFromSuffixAllowlist(allowHosts) {
-	const normalizedAllowHosts = normalizeHostnameSuffixAllowlist(allowHosts);
-	if (normalizedAllowHosts.length === 0) return;
-	const patterns = /* @__PURE__ */ new Set();
-	for (const normalized of normalizedAllowHosts) {
-		if (normalized === "*") return;
-		patterns.add(normalized);
-		patterns.add(`*.${normalized}`);
-	}
-	if (patterns.size === 0) return;
-	return { hostnameAllowlist: Array.from(patterns) };
-}
-
-//#endregion
-//#region src/plugin-sdk/webhook-path.ts
-function normalizeWebhookPath(raw) {
-	const trimmed = raw.trim();
-	if (!trimmed) return "/";
-	const withSlash = trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
-	if (withSlash.length > 1 && withSlash.endsWith("/")) return withSlash.slice(0, -1);
-	return withSlash;
-}
-function resolveWebhookPath(params) {
-	const trimmedPath = params.webhookPath?.trim();
-	if (trimmedPath) return normalizeWebhookPath(trimmedPath);
-	if (params.webhookUrl?.trim()) try {
-		return normalizeWebhookPath(new URL(params.webhookUrl).pathname || "/");
-	} catch {
-		return null;
-	}
-	return params.defaultPath ?? null;
-}
-
-//#endregion
-//#region src/plugin-sdk/webhook-targets.ts
-function registerWebhookTarget(targetsByPath, target) {
-	const key = normalizeWebhookPath(target.path);
-	const normalizedTarget = {
-		...target,
-		path: key
-	};
-	const existing = targetsByPath.get(key) ?? [];
-	targetsByPath.set(key, [...existing, normalizedTarget]);
-	const unregister = () => {
-		const updated = (targetsByPath.get(key) ?? []).filter((entry) => entry !== normalizedTarget);
-		if (updated.length > 0) {
-			targetsByPath.set(key, updated);
-			return;
-		}
-		targetsByPath.delete(key);
-	};
-	return {
-		target: normalizedTarget,
-		unregister
-	};
-}
-function resolveWebhookTargets(req, targetsByPath) {
-	const path = normalizeWebhookPath(new URL(req.url ?? "/", "http://localhost").pathname);
-	const targets = targetsByPath.get(path);
-	if (!targets || targets.length === 0) return null;
-	return {
-		path,
-		targets
-	};
-}
-function resolveSingleWebhookTarget(targets, isMatch) {
-	let matched;
-	for (const target of targets) {
-		if (!isMatch(target)) continue;
-		if (matched) return { kind: "ambiguous" };
-		matched = target;
-	}
-	if (!matched) return { kind: "none" };
-	return {
-		kind: "single",
-		target: matched
-	};
-}
-async function resolveSingleWebhookTargetAsync(targets, isMatch) {
-	let matched;
-	for (const target of targets) {
-		if (!await isMatch(target)) continue;
-		if (matched) return { kind: "ambiguous" };
-		matched = target;
-	}
-	if (!matched) return { kind: "none" };
-	return {
-		kind: "single",
-		target: matched
-	};
-}
-function rejectNonPostWebhookRequest(req, res) {
-	if (req.method === "POST") return false;
-	res.statusCode = 405;
-	res.setHeader("Allow", "POST");
-	res.end("Method Not Allowed");
-	return true;
-}
-
-//#endregion
-//#region src/plugin-sdk/persistent-dedupe.ts
-const DEFAULT_LOCK_OPTIONS = {
-	retries: {
-		retries: 6,
-		factor: 1.35,
-		minTimeout: 8,
-		maxTimeout: 180,
-		randomize: true
-	},
-	stale: 6e4
-};
-function mergeLockOptions(overrides) {
-	return {
-		stale: overrides?.stale ?? DEFAULT_LOCK_OPTIONS.stale,
-		retries: {
-			retries: overrides?.retries?.retries ?? DEFAULT_LOCK_OPTIONS.retries.retries,
-			factor: overrides?.retries?.factor ?? DEFAULT_LOCK_OPTIONS.retries.factor,
-			minTimeout: overrides?.retries?.minTimeout ?? DEFAULT_LOCK_OPTIONS.retries.minTimeout,
-			maxTimeout: overrides?.retries?.maxTimeout ?? DEFAULT_LOCK_OPTIONS.retries.maxTimeout,
-			randomize: overrides?.retries?.randomize ?? DEFAULT_LOCK_OPTIONS.retries.randomize
-		}
-	};
-}
-function sanitizeData(value) {
-	if (!value || typeof value !== "object") return {};
-	const out = {};
-	for (const [key, ts] of Object.entries(value)) if (typeof ts === "number" && Number.isFinite(ts) && ts > 0) out[key] = ts;
-	return out;
-}
-function pruneData(data, now, ttlMs, maxEntries) {
-	if (ttlMs > 0) {
-		for (const [key, ts] of Object.entries(data)) if (now - ts >= ttlMs) delete data[key];
-	}
-	const keys = Object.keys(data);
-	if (keys.length <= maxEntries) return;
-	keys.toSorted((a, b) => data[a] - data[b]).slice(0, keys.length - maxEntries).forEach((key) => {
-		delete data[key];
-	});
-}
-function createPersistentDedupe(options) {
-	const ttlMs = Math.max(0, Math.floor(options.ttlMs));
-	const memoryMaxSize = Math.max(0, Math.floor(options.memoryMaxSize));
-	const fileMaxEntries = Math.max(1, Math.floor(options.fileMaxEntries));
-	const lockOptions = mergeLockOptions(options.lockOptions);
-	const memory = createDedupeCache({
-		ttlMs,
-		maxSize: memoryMaxSize
-	});
-	const inflight = /* @__PURE__ */ new Map();
-	async function checkAndRecordInner(key, namespace, scopedKey, now, onDiskError) {
-		if (memory.check(scopedKey, now)) return false;
-		const path = options.resolveFilePath(namespace);
-		try {
-			return !await withFileLock(path, lockOptions, async () => {
-				const { value } = await readJsonFileWithFallback(path, {});
-				const data = sanitizeData(value);
-				const seenAt = data[key];
-				if (seenAt != null && (ttlMs <= 0 || now - seenAt < ttlMs)) return true;
-				data[key] = now;
-				pruneData(data, now, ttlMs, fileMaxEntries);
-				await writeJsonFileAtomically(path, data);
-				return false;
-			});
-		} catch (error) {
-			onDiskError?.(error);
-			return true;
-		}
-	}
-	async function checkAndRecord(key, dedupeOptions) {
-		const trimmed = key.trim();
-		if (!trimmed) return true;
-		const namespace = dedupeOptions?.namespace?.trim() || "global";
-		const scopedKey = `${namespace}:${trimmed}`;
-		if (inflight.has(scopedKey)) return false;
-		const onDiskError = dedupeOptions?.onDiskError ?? options.onDiskError;
-		const work = checkAndRecordInner(trimmed, namespace, scopedKey, dedupeOptions?.now ?? Date.now(), onDiskError);
-		inflight.set(scopedKey, work);
-		try {
-			return await work;
-		} finally {
-			inflight.delete(scopedKey);
-		}
-	}
-	return {
-		checkAndRecord,
-		clearMemory: () => memory.clear(),
-		memorySize: () => memory.size()
-	};
-}
-
-//#endregion
-//#region src/plugin-sdk/runtime.ts
-function createLoggerBackedRuntime(params) {
-	return {
-		log: (...args) => {
-			params.logger.info(format(...args));
-		},
-		error: (...args) => {
-			params.logger.error(format(...args));
-		},
-		exit: (code) => {
-			throw params.exitError?.(code) ?? /* @__PURE__ */ new Error(`exit ${code}`);
-		}
-	};
-}
-
-//#endregion
-//#region src/line/flex-templates/basic-cards.ts
-/**
-* Create an info card with title, body, and optional footer
-*
-* Editorial design: Clean hierarchy with accent bar, generous spacing,
-* and subtle background zones for visual separation.
-*/
-function createInfoCard(title, body, footer) {
-	const bubble = {
-		type: "bubble",
-		size: "mega",
-		body: {
-			type: "box",
-			layout: "vertical",
-			contents: [{
-				type: "box",
-				layout: "horizontal",
-				contents: [{
-					type: "box",
-					layout: "vertical",
-					contents: [],
-					width: "4px",
-					backgroundColor: "#06C755",
-					cornerRadius: "2px"
-				}, {
-					type: "text",
-					text: title,
-					weight: "bold",
-					size: "xl",
-					color: "#111111",
-					wrap: true,
-					flex: 1,
-					margin: "lg"
-				}]
-			}, {
-				type: "box",
-				layout: "vertical",
-				contents: [{
-					type: "text",
-					text: body,
-					size: "md",
-					color: "#444444",
-					wrap: true,
-					lineSpacing: "6px"
-				}],
-				margin: "xl",
-				paddingAll: "lg",
-				backgroundColor: "#F8F9FA",
-				cornerRadius: "lg"
-			}],
-			paddingAll: "xl",
-			backgroundColor: "#FFFFFF"
-		}
-	};
-	if (footer) attachFooterText(bubble, footer);
-	return bubble;
-}
-/**
-* Create a list card with title and multiple items
-*
-* Editorial design: Numbered/bulleted list with clear visual hierarchy,
-* accent dots for each item, and generous spacing.
-*/
-function createListCard(title, items) {
-	const itemContents = items.slice(0, 8).map((item, index) => {
-		const itemContents = [{
-			type: "text",
-			text: item.title,
-			size: "md",
-			weight: "bold",
-			color: "#1a1a1a",
-			wrap: true
-		}];
-		if (item.subtitle) itemContents.push({
-			type: "text",
-			text: item.subtitle,
-			size: "sm",
-			color: "#888888",
-			wrap: true,
-			margin: "xs"
-		});
-		const itemBox = {
-			type: "box",
-			layout: "horizontal",
-			contents: [{
-				type: "box",
-				layout: "vertical",
-				contents: [{
-					type: "box",
-					layout: "vertical",
-					contents: [],
-					width: "8px",
-					height: "8px",
-					backgroundColor: index === 0 ? "#06C755" : "#DDDDDD",
-					cornerRadius: "4px"
-				}],
-				width: "20px",
-				alignItems: "center",
-				paddingTop: "sm"
-			}, {
-				type: "box",
-				layout: "vertical",
-				contents: itemContents,
-				flex: 1
-			}],
-			margin: index > 0 ? "lg" : void 0
-		};
-		if (item.action) itemBox.action = item.action;
-		return itemBox;
-	});
-	return {
-		type: "bubble",
-		size: "mega",
-		body: {
-			type: "box",
-			layout: "vertical",
-			contents: [
-				{
-					type: "text",
-					text: title,
-					weight: "bold",
-					size: "xl",
-					color: "#111111",
-					wrap: true
-				},
-				{
-					type: "separator",
-					margin: "lg",
-					color: "#EEEEEE"
-				},
-				{
-					type: "box",
-					layout: "vertical",
-					contents: itemContents,
-					margin: "lg"
-				}
-			],
-			paddingAll: "xl",
-			backgroundColor: "#FFFFFF"
-		}
-	};
-}
-/**
-* Create an image card with image, title, and optional body text
-*/
-function createImageCard(imageUrl, title, body, options) {
-	const bubble = {
-		type: "bubble",
-		hero: {
-			type: "image",
-			url: imageUrl,
-			size: "full",
-			aspectRatio: options?.aspectRatio ?? "20:13",
-			aspectMode: options?.aspectMode ?? "cover",
-			action: options?.action
-		},
-		body: {
-			type: "box",
-			layout: "vertical",
-			contents: [{
-				type: "text",
-				text: title,
-				weight: "bold",
-				size: "xl",
-				wrap: true
-			}],
-			paddingAll: "lg"
-		}
-	};
-	if (body && bubble.body) bubble.body.contents.push({
-		type: "text",
-		text: body,
-		size: "md",
-		wrap: true,
-		margin: "md",
-		color: "#666666"
-	});
-	return bubble;
-}
-/**
-* Create an action card with title, body, and action buttons
-*/
-function createActionCard(title, body, actions, options) {
-	const bubble = {
-		type: "bubble",
-		body: {
-			type: "box",
-			layout: "vertical",
-			contents: [{
-				type: "text",
-				text: title,
-				weight: "bold",
-				size: "xl",
-				wrap: true
-			}, {
-				type: "text",
-				text: body,
-				size: "md",
-				wrap: true,
-				margin: "md",
-				color: "#666666"
-			}],
-			paddingAll: "lg"
-		},
-		footer: {
-			type: "box",
-			layout: "vertical",
-			contents: actions.slice(0, 4).map((action, index) => ({
-				type: "button",
-				action: action.action,
-				style: index === 0 ? "primary" : "secondary",
-				margin: index > 0 ? "sm" : void 0
-			})),
-			paddingAll: "md"
-		}
-	};
-	if (options?.imageUrl) bubble.hero = {
-		type: "image",
-		url: options.imageUrl,
-		size: "full",
-		aspectRatio: options.aspectRatio ?? "20:13",
-		aspectMode: "cover"
-	};
-	return bubble;
-}
-
-//#endregion
-//#region src/acp/acpx-mutating-wrapper-policy.ts
-const REQUIRED_MUTATING_WRAPPER_GATES = [
-	"operator-scope",
-	"operator-confirmation",
-	"plugin-admin-rpc-grant",
-	"plugin-source-allowlist",
-	"audit",
-	"rate-limit",
-	"gateway-token",
-	"explicit-wrapper-enable"
-];
-const FORBIDDEN_MUTATING_WRAPPER_SURFACES = [
-	"generic-gateway-dispatcher",
-	"client-supplied-mcpServers",
-	"cli-mcp",
-	"untrusted-plugin-source",
-	"bulk-enable-all-admin-rpcs"
-];
-const ACPX_MUTATING_WRAPPER_DESIGNS = [
-	{
-		id: "fased_chat_inject_request",
-		method: "chat.inject",
-		status: "design-only",
-		executionEnabled: false,
-		description: "Future fixed wrapper for requesting an operator-approved chat injection into a scoped session.",
-		requiredGates: REQUIRED_MUTATING_WRAPPER_GATES,
-		forbiddenSurfaces: FORBIDDEN_MUTATING_WRAPPER_SURFACES
-	},
-	{
-		id: "fased_push_test_request",
-		method: "push.test",
-		status: "design-only",
-		executionEnabled: false,
-		description: "Future fixed wrapper for requesting an operator-approved test push to a scoped node.",
-		requiredGates: REQUIRED_MUTATING_WRAPPER_GATES,
-		forbiddenSurfaces: FORBIDDEN_MUTATING_WRAPPER_SURFACES
-	},
-	{
-		id: "fased_web_login_start_request",
-		method: "web.login.start",
-		status: "design-only",
-		executionEnabled: false,
-		description: "Future fixed wrapper for requesting an operator-approved web login start for a scoped account.",
-		requiredGates: REQUIRED_MUTATING_WRAPPER_GATES,
-		forbiddenSurfaces: FORBIDDEN_MUTATING_WRAPPER_SURFACES
-	},
-	{
-		id: "fased_web_login_wait_request",
-		method: "web.login.wait",
-		status: "design-only",
-		executionEnabled: false,
-		description: "Future fixed wrapper for requesting an operator-approved web login wait for a scoped account.",
-		requiredGates: REQUIRED_MUTATING_WRAPPER_GATES,
-		forbiddenSurfaces: FORBIDDEN_MUTATING_WRAPPER_SURFACES
-	}
-];
-function findAcpxMutatingWrapperDesign(id) {
-	return ACPX_MUTATING_WRAPPER_DESIGNS.find((design) => design.id === id);
-}
-function uniqueStrings(values) {
-	return new Set((values ?? []).map((value) => value.trim()).filter(Boolean));
-}
-function evaluateAcpxMutatingWrapperRuntimeGate(input) {
-	const wrapperId = input.wrapperId.trim();
-	const design = findAcpxMutatingWrapperDesign(wrapperId);
-	if (!design) return {
-		wrapperId,
-		allowed: false,
-		reason: "unknown-wrapper",
-		missingGates: [],
-		activeForbiddenSurfaces: []
-	};
-	if (uniqueStrings(input.denyWrappers).has(design.id)) return {
-		wrapperId: design.id,
-		method: design.method,
-		allowed: false,
-		reason: "denied-wrapper",
-		missingGates: [],
-		activeForbiddenSurfaces: []
-	};
-	const allowWrappers = uniqueStrings(input.allowWrappers);
-	if (allowWrappers.size > 0 && !allowWrappers.has(design.id)) return {
-		wrapperId: design.id,
-		method: design.method,
-		allowed: false,
-		reason: "not-allowlisted",
-		missingGates: [],
-		activeForbiddenSurfaces: []
-	};
-	const activeForbiddenSurfaces = design.forbiddenSurfaces.filter((surface) => input.forbiddenSurfaces?.[surface] === true);
-	if (activeForbiddenSurfaces.length > 0) return {
-		wrapperId: design.id,
-		method: design.method,
-		allowed: false,
-		reason: "forbidden-surface",
-		missingGates: [],
-		activeForbiddenSurfaces
-	};
-	const missingGates = design.requiredGates.filter((gate) => input.gates?.[gate] !== true);
-	if (missingGates.length > 0) return {
-		wrapperId: design.id,
-		method: design.method,
-		allowed: false,
-		reason: "missing-gates",
-		missingGates,
-		activeForbiddenSurfaces: []
-	};
-	return {
-		wrapperId: design.id,
-		method: design.method,
-		allowed: true,
-		reason: "allowed",
-		missingGates: [],
-		activeForbiddenSurfaces: []
-	};
-}
-
-//#endregion
-//#region src/acp/acpx-push-test-approval-contract.ts
-const ACPX_PUSH_TEST_WRAPPER_ID = "fased_push_test_request";
-const ACPX_PUSH_TEST_METHOD = "push.test";
-function normalizeForStableJson(value) {
-	if (value === null || typeof value === "string" || typeof value === "number") return value;
-	if (typeof value === "boolean") return value;
-	if (Array.isArray(value)) return value.map((entry) => normalizeForStableJson(entry));
-	if (typeof value === "object" && value) {
-		const normalized = {};
-		for (const key of Object.keys(value).toSorted()) {
-			const entry = value[key];
-			if (entry !== void 0) normalized[key] = normalizeForStableJson(entry);
-		}
-		return normalized;
-	}
-	return null;
-}
-function stableJson(value) {
-	return JSON.stringify(normalizeForStableJson(value));
-}
-function createAcpxPushTestRequestFingerprint(input) {
-	return createHash("sha256").update(stableJson({
-		method: input.method,
-		params: input.params,
-		wrapperId: input.wrapperId
-	})).digest("hex");
-}
-function createAcpxPushTestSafeSummary(params) {
-	const record = typeof params === "object" && params !== null && !Array.isArray(params) ? params : {};
-	const environment = record.environment === "sandbox" || record.environment === "production" ? record.environment : null;
-	return {
-		nodeId: typeof record.nodeId === "string" && record.nodeId.trim() ? record.nodeId.trim() : null,
-		environment,
-		titleProvided: typeof record.title === "string" && record.title.length > 0,
-		bodyProvided: typeof record.body === "string" && record.body.length > 0
-	};
-}
-function evaluateAcpxPushTestApprovalContract(request) {
-	const requestFingerprint = createAcpxPushTestRequestFingerprint({
-		wrapperId: request.wrapperId,
-		method: request.method,
-		params: request.params
-	});
-	const requestReasons = collectRequestDenyReasons(request);
-	if (requestReasons.length > 0) return deniedResponse({
-		request,
-		requestFingerprint,
-		stage: "request",
-		reasons: requestReasons
-	});
-	const approvalReasons = collectApprovalDenyReasons({
-		approval: request.approval,
-		requestFingerprint
-	});
-	if (approvalReasons.length > 0) return deniedResponse({
-		request,
-		requestFingerprint,
-		stage: "operator-approval",
-		reasons: approvalReasons
-	});
-	const gate = evaluateAcpxMutatingWrapperRuntimeGate({
-		wrapperId: request.wrapperId,
-		gates: request.gate.gates,
-		forbiddenSurfaces: request.gate.forbiddenSurfaces,
-		allowWrappers: request.gate.allowWrappers,
-		denyWrappers: request.gate.denyWrappers
-	});
-	if (!gate.allowed) return deniedResponse({
-		request,
-		requestFingerprint,
-		stage: "runtime-gate",
-		reasons: [`mutating wrapper runtime gate denied: ${gate.reason}`],
-		gate
-	});
-	return {
-		schemaVersion: 1,
-		kind: "acpx.mutating-wrapper.push-test.execution.response",
-		wrapperId: ACPX_PUSH_TEST_WRAPPER_ID,
-		method: ACPX_PUSH_TEST_METHOD,
-		dryRun: true,
-		noExecutionPerformed: true,
-		requestId: request.requestId,
-		createdAt: request.createdAt,
-		status: "admitted",
-		stage: "admitted",
-		requestFingerprint,
-		reasons: [],
-		safeSummary: createAcpxPushTestSafeSummary(request.params),
-		gate
-	};
-}
-function collectRequestDenyReasons(request) {
-	const reasons = [];
-	if (request.schemaVersion !== 1) reasons.push("ACPX push-test execution request schema version is unsupported");
-	if (request.kind !== "acpx.mutating-wrapper.push-test.execution.request") reasons.push("ACPX push-test execution request kind is unsupported");
-	if (request.wrapperId !== ACPX_PUSH_TEST_WRAPPER_ID) reasons.push("ACPX push-test execution request wrapper is unsupported");
-	if (request.method !== ACPX_PUSH_TEST_METHOD) reasons.push("ACPX push-test execution request method is unsupported");
-	if (!request.dryRun) reasons.push("ACPX push-test execution contract must be evaluated as a dry run");
-	if (typeof request.requestId !== "string" || request.requestId.trim() === "") reasons.push("ACPX push-test execution request requires requestId");
-	if (typeof request.createdAt !== "string" || request.createdAt.trim() === "") reasons.push("ACPX push-test execution request requires createdAt");
-	if (!validatePushTestParams(request.params)) reasons.push("ACPX push-test execution request params are invalid");
-	return reasons;
-}
-function collectApprovalDenyReasons(params) {
-	const reasons = [];
-	if (params.approval.confirmation !== "operator-confirmed") reasons.push("ACPX push-test execution requires explicit operator confirmation");
-	if (params.approval.acceptedRequestFingerprint !== params.requestFingerprint) reasons.push("ACPX push-test approval fingerprint does not match request");
-	if (params.approval.confirmation === "operator-confirmed" && (typeof params.approval.approvedAt !== "string" || params.approval.approvedAt.trim() === "")) reasons.push("ACPX push-test approval requires approvedAt");
-	return reasons;
-}
-function deniedResponse(params) {
-	return {
-		schemaVersion: 1,
-		kind: "acpx.mutating-wrapper.push-test.execution.response",
-		wrapperId: ACPX_PUSH_TEST_WRAPPER_ID,
-		method: ACPX_PUSH_TEST_METHOD,
-		dryRun: true,
-		noExecutionPerformed: true,
-		requestId: typeof params.request.requestId === "string" ? params.request.requestId : "",
-		createdAt: typeof params.request.createdAt === "string" ? params.request.createdAt : "",
-		status: "denied",
-		stage: params.stage,
-		requestFingerprint: params.requestFingerprint,
-		reasons: params.reasons,
-		safeSummary: createAcpxPushTestSafeSummary(params.request.params),
-		...params.gate ? { gate: params.gate } : {}
-	};
-}
-
-//#endregion
-//#region src/acp/acpx-push-test-execution-adapter.ts
-function sanitizePushResult(payload) {
-	if (!payload || typeof payload !== "object" || Array.isArray(payload)) return {};
-	const record = payload;
-	return {
-		ok: typeof record.ok === "boolean" ? record.ok : void 0,
-		status: typeof record.status === "number" ? record.status : void 0,
-		reason: typeof record.reason === "string" ? record.reason : void 0,
-		environment: typeof record.environment === "string" ? record.environment : void 0,
-		apnsId: typeof record.apnsId === "string" ? record.apnsId : void 0,
-		tokenSuffix: typeof record.tokenSuffix === "string" ? record.tokenSuffix : void 0,
-		topic: typeof record.topic === "string" ? record.topic : void 0
-	};
-}
-function collectExecutionGateReasons(input) {
-	const reasons = [];
-	if (!input.executionGate.enabled) reasons.push("ACPX push-test execution adapter is disabled");
-	if (!input.executionGate.allowExecution) reasons.push("ACPX push-test execution is not explicitly enabled");
-	if (!input.executionGate.gatewayHandlerRegistered || !input.handler) reasons.push("ACPX push-test gateway handler is not registered");
-	const role = input.client?.connect?.role ?? "operator";
-	if (!input.client?.connect || role !== "operator") reasons.push("ACPX push-test execution requires an operator client");
-	else {
-		const auth = authorizeOperatorScopesForMethod(ACPX_PUSH_TEST_METHOD, input.client.connect.scopes ?? []);
-		if (!auth.allowed) reasons.push(`ACPX push-test execution requires ${auth.missingScope}`);
-	}
-	return reasons;
-}
-function deniedResult(params) {
-	logMutatingAdminRpcAudit({
-		context: params.input.context,
-		client: params.input.client,
-		method: ACPX_PUSH_TEST_METHOD,
-		outcome: "denied",
-		details: {
-			wrapperId: ACPX_PUSH_TEST_WRAPPER_ID,
-			requestId: params.input.request.requestId,
-			reason: params.reasons.join("|")
-		}
-	});
-	return {
-		schemaVersion: 1,
-		kind: "acpx.mutating-wrapper.push-test.execution.result",
-		wrapperId: ACPX_PUSH_TEST_WRAPPER_ID,
-		method: ACPX_PUSH_TEST_METHOD,
-		requestId: params.input.request.requestId,
-		status: "denied",
-		executionPerformed: false,
-		noGenericDispatcher: true,
-		contract: params.contract,
-		reasons: params.reasons,
-		safeSummary: createAcpxPushTestSafeSummary(params.input.request.params)
-	};
-}
-async function invokePushTestHandler(input) {
-	return await new Promise((resolve, reject) => {
-		let responded = false;
-		const respond = (ok, payload, error) => {
-			responded = true;
-			resolve({
-				ok,
-				payload,
-				error
-			});
-		};
-		Promise.resolve(input.handler({
-			req: {
-				type: "req",
-				id: `acpx-push-test:${input.request.requestId}`,
-				method: ACPX_PUSH_TEST_METHOD,
-				params: input.request.params
-			},
-			params: input.request.params,
-			client: input.client,
-			context: input.context,
-			isWebchatConnect: input.isWebchatConnect ?? (() => false),
-			respond
-		})).then(() => {
-			if (!responded) resolve({
-				ok: true,
-				payload: void 0
-			});
-		}, (err) => reject(err));
-	});
-}
-async function executeAcpxPushTestRequest(input) {
-	const contract = evaluateAcpxPushTestApprovalContract(input.request);
-	if (contract.status !== "admitted") return deniedResult({
-		input,
-		contract,
-		reasons: contract.reasons
-	});
-	const executionGateReasons = collectExecutionGateReasons(input);
-	if (executionGateReasons.length > 0) return deniedResult({
-		input,
-		contract,
-		reasons: executionGateReasons
-	});
-	const budget = consumeMutatingAdminRpcBudget({
-		method: ACPX_PUSH_TEST_METHOD,
-		client: input.client
-	});
-	if (budget.applies && !budget.allowed) return deniedResult({
-		input,
-		contract,
-		reasons: [`ACPX push-test execution rate-limited:${budget.policy.label}`]
-	});
-	try {
-		const response = await invokePushTestHandler({
-			...input,
-			handler: input.handler
-		});
-		if (!response.ok) return {
-			schemaVersion: 1,
-			kind: "acpx.mutating-wrapper.push-test.execution.result",
-			wrapperId: ACPX_PUSH_TEST_WRAPPER_ID,
-			method: ACPX_PUSH_TEST_METHOD,
-			requestId: input.request.requestId,
-			status: "failed",
-			executionPerformed: true,
-			noGenericDispatcher: true,
-			contract,
-			reasons: [response.error?.message ?? "push.test handler failed"],
-			safeSummary: createAcpxPushTestSafeSummary(input.request.params),
-			error: {
-				code: response.error?.code,
-				message: response.error?.message ?? "push.test handler failed"
-			}
-		};
-		return {
-			schemaVersion: 1,
-			kind: "acpx.mutating-wrapper.push-test.execution.result",
-			wrapperId: ACPX_PUSH_TEST_WRAPPER_ID,
-			method: ACPX_PUSH_TEST_METHOD,
-			requestId: input.request.requestId,
-			status: "executed",
-			executionPerformed: true,
-			noGenericDispatcher: true,
-			contract,
-			reasons: [],
-			safeSummary: createAcpxPushTestSafeSummary(input.request.params),
-			result: sanitizePushResult(response.payload)
-		};
-	} catch (err) {
-		logMutatingAdminRpcAudit({
-			context: input.context,
-			client: input.client,
-			method: ACPX_PUSH_TEST_METHOD,
-			outcome: "failed",
-			details: {
-				wrapperId: ACPX_PUSH_TEST_WRAPPER_ID,
-				requestId: input.request.requestId,
-				reason: "handler_threw"
-			}
-		});
-		return {
-			schemaVersion: 1,
-			kind: "acpx.mutating-wrapper.push-test.execution.result",
-			wrapperId: ACPX_PUSH_TEST_WRAPPER_ID,
-			method: ACPX_PUSH_TEST_METHOD,
-			requestId: input.request.requestId,
-			status: "failed",
-			executionPerformed: true,
-			noGenericDispatcher: true,
-			contract,
-			reasons: [err instanceof Error ? err.message : "push.test handler failed"],
-			safeSummary: createAcpxPushTestSafeSummary(input.request.params),
-			error: { message: err instanceof Error ? err.message : "push.test handler failed" }
-		};
-	}
-}
-
-//#endregion
-//#region src/agents/tool-description-summary.ts
-function normalizeSummaryWhitespace(value) {
-	return value.replace(/\s+/g, " ").trim();
-}
-function truncateSummary(value, maxLen = 120) {
-	if (value.length <= maxLen) return value;
-	const sliced = value.slice(0, maxLen - 3);
-	const boundary = sliced.lastIndexOf(" ");
-	return `${(boundary >= 48 ? sliced.slice(0, boundary) : sliced).trimEnd()}...`;
-}
-function isToolDocBlockStart(line) {
-	const normalized = line.trim().toUpperCase();
-	if (!normalized) return false;
-	if (normalized === "ACTIONS:" || normalized === "JOB SCHEMA (FOR ADD ACTION):" || normalized === "JOB SCHEMA:" || normalized === "SESSION TARGET OPTIONS:" || normalized === "DEFAULT BEHAVIOR (UNCHANGED FOR BACKWARD COMPATIBILITY):" || normalized === "SCHEDULE TYPES (SCHEDULE.KIND):" || normalized === "PAYLOAD TYPES (PAYLOAD.KIND):" || normalized === "DELIVERY (TOP-LEVEL):" || normalized === "CRITICAL CONSTRAINTS:" || normalized === "WAKE MODES (FOR WAKE ACTION):") return true;
-	return normalized.endsWith(":") && normalized === normalized.toUpperCase() && normalized.length > 12;
-}
-function summarizeToolDescriptionText(params) {
-	const explicit = typeof params.displaySummary === "string" ? params.displaySummary.trim() : "";
-	if (explicit) return truncateSummary(normalizeSummaryWhitespace(explicit), params.maxLen);
-	const raw = typeof params.rawDescription === "string" ? params.rawDescription.trim() : "";
-	if (!raw) return "Tool";
-	const paragraphs = raw.split(/\n\s*\n/g).map((part) => part.trim()).filter(Boolean);
-	for (const paragraph of paragraphs) {
-		const lines = paragraph.split("\n").map((line) => line.trim()).filter(Boolean);
-		if (lines.length === 0) continue;
-		const first = lines[0] ?? "";
-		if (!first || isToolDocBlockStart(first)) continue;
-		if (first.startsWith("{") || first.startsWith("[") || first.startsWith("- ")) continue;
-		return truncateSummary(normalizeSummaryWhitespace(first), params.maxLen);
-	}
-	const firstLine = raw.split("\n").map((line) => line.trim()).find((line) => line.length > 0 && !isToolDocBlockStart(line) && !line.startsWith("{") && !line.startsWith("[") && !line.startsWith("- "));
-	return firstLine ? truncateSummary(normalizeSummaryWhitespace(firstLine), params.maxLen) : "Tool";
-}
-
-//#endregion
-//#region src/agents/tools-effective-inventory.ts
-function resolveEffectiveToolLabel(tool) {
-	const rawLabel = typeof tool.label === "string" ? tool.label.trim() : "";
-	if (rawLabel && rawLabel.toLowerCase() !== tool.name.toLowerCase()) return rawLabel;
-	return resolveToolDisplay({ name: tool.name }).title;
-}
-function resolveRawToolDescription(tool) {
-	return typeof tool.description === "string" ? tool.description.trim() : "";
-}
-function summarizeToolDescription(tool) {
-	return summarizeToolDescriptionText({
-		rawDescription: resolveRawToolDescription(tool),
-		displaySummary: tool.displaySummary
-	});
-}
-function resolveEffectiveToolSource(tool) {
-	const pluginMeta = getPluginToolMeta(tool);
-	if (pluginMeta) return {
-		source: "plugin",
-		pluginId: pluginMeta.pluginId
-	};
-	const channelMeta = getChannelAgentToolMeta(tool);
-	if (channelMeta) return {
-		source: "channel",
-		channelId: channelMeta.channelId
-	};
-	return { source: "core" };
-}
-function groupLabel(source) {
-	switch (source) {
-		case "plugin": return "Connected tools";
-		case "channel": return "Channel tools";
-		default: return "Built-in tools";
-	}
-}
-function disambiguateLabels(entries) {
-	const counts = /* @__PURE__ */ new Map();
-	for (const entry of entries) counts.set(entry.label, (counts.get(entry.label) ?? 0) + 1);
-	return entries.map((entry) => {
-		if ((counts.get(entry.label) ?? 0) < 2) return entry;
-		const suffix = entry.pluginId ?? entry.channelId ?? entry.id;
-		return {
-			...entry,
-			label: `${entry.label} (${suffix})`
-		};
-	});
-}
-function resolveEffectiveModelCompat(params) {
-	const provider = params.modelProvider?.trim();
-	const modelId = params.modelId?.trim();
-	if (!provider || !modelId) return;
-	try {
-		return resolveModel(provider, modelId, params.agentDir, params.cfg).model?.compat;
-	} catch {
-		return;
-	}
-}
-function resolveEffectiveToolInventory(params) {
-	const agentId = params.agentId?.trim() || resolveSessionAgentId({
-		sessionKey: params.sessionKey,
-		config: params.cfg
-	});
-	const workspaceDir = params.workspaceDir ?? resolveAgentWorkspaceDir(params.cfg, agentId);
-	const agentDir = params.agentDir ?? resolveAgentDir(params.cfg, agentId);
-	const modelCompat = resolveEffectiveModelCompat({
-		cfg: params.cfg,
-		agentDir,
-		modelProvider: params.modelProvider,
-		modelId: params.modelId
-	});
-	const effectiveTools = createFasedAgentCodingTools({
-		agentId,
-		sessionKey: params.sessionKey,
-		workspaceDir,
-		agentDir,
-		config: params.cfg,
-		modelProvider: params.modelProvider,
-		modelId: params.modelId,
-		modelCompat,
-		messageProvider: params.messageProvider,
-		senderIsOwner: params.senderIsOwner,
-		senderId: params.senderId,
-		senderName: params.senderName ?? void 0,
-		senderUsername: params.senderUsername ?? void 0,
-		senderE164: params.senderE164 ?? void 0,
-		agentAccountId: params.accountId ?? void 0,
-		currentChannelId: params.currentChannelId,
-		currentThreadTs: params.currentThreadTs,
-		currentMessageId: params.currentMessageId,
-		groupId: params.groupId ?? void 0,
-		groupChannel: params.groupChannel ?? void 0,
-		groupSpace: params.groupSpace ?? void 0,
-		replyToMode: params.replyToMode === "batched" ? "all" : params.replyToMode,
-		modelHasVision: params.modelHasVision,
-		requireExplicitMessageTarget: params.requireExplicitMessageTarget,
-		disableMessageTool: params.disableMessageTool
-	});
-	const effectivePolicy = resolveEffectiveToolPolicy({
-		config: params.cfg,
-		agentId,
-		sessionKey: params.sessionKey,
-		modelProvider: params.modelProvider,
-		modelId: params.modelId
-	});
-	const profile = effectivePolicy.providerProfile ?? effectivePolicy.profile ?? "full";
-	const entries = disambiguateLabels(effectiveTools.map((tool) => {
-		const source = resolveEffectiveToolSource(tool);
-		return {
-			id: tool.name,
-			label: resolveEffectiveToolLabel(tool),
-			description: summarizeToolDescription(tool),
-			rawDescription: resolveRawToolDescription(tool) || summarizeToolDescription(tool),
-			...source
-		};
-	}).toSorted((a, b) => a.label.localeCompare(b.label)));
-	const groupsBySource = /* @__PURE__ */ new Map();
-	for (const entry of entries) {
-		const tools = groupsBySource.get(entry.source) ?? [];
-		tools.push(entry);
-		groupsBySource.set(entry.source, tools);
-	}
-	return {
-		agentId,
-		profile,
-		groups: [
-			"core",
-			"plugin",
-			"channel"
-		].map((source) => {
-			const tools = groupsBySource.get(source);
-			if (!tools || tools.length === 0) return null;
-			return {
-				id: source,
-				label: groupLabel(source),
-				source,
-				tools
-			};
-		}).filter((group) => group !== null)
-	};
-}
-
-//#endregion
-//#region src/gateway/gateway-identity.ts
-function getPublicGatewayIdentity() {
-	const identity = loadOrCreateDeviceIdentity();
-	return {
-		deviceId: identity.deviceId,
-		publicKey: publicKeyRawBase64UrlFromPem(identity.publicKeyPem)
-	};
-}
-
-//#endregion
-//#region src/infra/update-channels.ts
-const DEFAULT_PACKAGE_CHANNEL = "stable";
-const DEFAULT_GIT_CHANNEL = "stable";
-function normalizeUpdateChannel(value) {
-	if (!value) return null;
-	const normalized = value.trim().toLowerCase();
-	if (normalized === "stable" || normalized === "beta" || normalized === "dev") return normalized;
-	return null;
-}
-function isBetaTag(tag) {
-	return /(?:^|[.-])beta(?:[.-]|$)/i.test(tag);
-}
-function resolveEffectiveUpdateChannel(params) {
-	if (params.configChannel) return {
-		channel: params.configChannel,
-		source: "config"
-	};
-	if (params.installKind === "git") {
-		const tag = params.git?.tag;
-		if (tag) return {
-			channel: isBetaTag(tag) ? "beta" : "stable",
-			source: "git-tag"
-		};
-		return {
-			channel: DEFAULT_GIT_CHANNEL,
-			source: "default"
-		};
-	}
-	if (params.installKind === "package") return {
-		channel: DEFAULT_PACKAGE_CHANNEL,
-		source: "default"
-	};
-	return {
-		channel: DEFAULT_PACKAGE_CHANNEL,
-		source: "default"
-	};
-}
-function formatUpdateChannelLabel(params) {
-	if (params.source === "config") return `${params.channel} (config)`;
-	if (params.source === "git-tag") return params.gitTag ? `${params.channel} (${params.gitTag})` : `${params.channel} (tag)`;
-	if (params.source === "git-branch") return params.gitBranch ? `${params.channel} (${params.gitBranch})` : `${params.channel} (branch)`;
-	return `${params.channel} (default)`;
-}
-function resolveUpdateChannelDisplay(params) {
-	const channelInfo = resolveEffectiveUpdateChannel({
-		configChannel: params.configChannel,
-		installKind: params.installKind,
-		git: params.gitTag || params.gitBranch ? {
-			tag: params.gitTag ?? null,
-			branch: params.gitBranch ?? null
-		} : void 0
-	});
-	return {
-		channel: channelInfo.channel,
-		source: channelInfo.source,
-		label: formatUpdateChannelLabel({
-			channel: channelInfo.channel,
-			source: channelInfo.source,
-			gitTag: params.gitTag ?? null,
-			gitBranch: params.gitBranch ?? null
-		})
-	};
-}
-
-//#endregion
-//#region src/infra/detect-package-manager.ts
-async function detectPackageManager$1(root) {
-	try {
-		const raw = await fs$1.readFile(path.join(root, "package.json"), "utf-8");
-		const pm = JSON.parse(raw)?.packageManager?.split("@")[0]?.trim();
-		if (pm === "pnpm" || pm === "bun" || pm === "npm") return pm;
-	} catch {}
-	const files = await fs$1.readdir(root).catch(() => []);
-	if (files.includes("pnpm-lock.yaml")) return "pnpm";
-	if (files.includes("bun.lockb")) return "bun";
-	if (files.includes("package-lock.json")) return "npm";
-	return null;
-}
-
-//#endregion
-//#region src/infra/update-global.ts
-const NPM_GLOBAL_INSTALL_QUIET_FLAGS = [
-	"--no-fund",
-	"--no-audit",
-	"--loglevel=error",
-	"--prefer-offline",
-	"--no-progress"
-];
-const NPM_GLOBAL_INSTALL_OMIT_OPTIONAL_FLAGS = ["--omit=optional", ...NPM_GLOBAL_INSTALL_QUIET_FLAGS];
-function resolveNodeModulesRootForPackageRoot(pkgRoot) {
-	const parent = path.dirname(pkgRoot);
-	if (path.basename(parent).startsWith("@")) return path.dirname(parent);
-	return parent;
-}
-function resolveHostedNpmInstallTarget(pkgRoot) {
-	const resolved = path.resolve(pkgRoot);
-	const prefixMarker = `${path.sep}.fased${path.sep}install-cache${path.sep}npm-global`;
-	const globalRootMarker = `${prefixMarker}${`${path.sep}lib${path.sep}node_modules`}`;
-	const markerIndex = resolved.indexOf(`${globalRootMarker}${path.sep}`);
-	if (markerIndex < 0) return null;
-	const prefix = resolved.slice(0, markerIndex + prefixMarker.length);
-	const globalRoot = path.join(prefix, "lib", "node_modules");
-	const cache = path.join(path.dirname(prefix), "npm-cache");
-	const expectedRoot = resolveNodeModulesRootForPackageRoot(resolved);
-	if (path.resolve(expectedRoot) !== path.resolve(globalRoot)) return null;
-	return {
-		manager: "npm",
-		globalRoot,
-		cacheRoot: path.dirname(prefix),
-		env: {
-			npm_config_prefix: prefix,
-			npm_config_cache: cache
-		}
-	};
-}
-
-//#endregion
-//#region src/infra/update-check.ts
-const NPM_PACKAGE_NAME = "@fased/fased";
-async function exists(p) {
-	try {
-		await fs$1.access(p);
-		return true;
-	} catch {
-		return false;
-	}
-}
-async function detectPackageManager(root) {
-	return await detectPackageManager$1(root) ?? "unknown";
-}
-async function detectGitRoot(root) {
-	const res = await runCommandWithTimeout([
-		"git",
-		"-C",
-		root,
-		"rev-parse",
-		"--show-toplevel"
-	], { timeoutMs: 4e3 }).catch(() => null);
-	if (!res || res.code !== 0) return null;
-	const top = res.stdout.trim();
-	return top ? path.resolve(top) : null;
-}
-async function checkGitUpdateStatus(params) {
-	const timeoutMs = params.timeoutMs ?? 6e3;
-	const root = path.resolve(params.root);
-	const base = {
-		root,
-		sha: null,
-		tag: null,
-		branch: null,
-		upstream: null,
-		dirty: null,
-		ahead: null,
-		behind: null,
-		fetchOk: null
-	};
-	const branchRes = await runCommandWithTimeout([
-		"git",
-		"-C",
-		root,
-		"rev-parse",
-		"--abbrev-ref",
-		"HEAD"
-	], { timeoutMs }).catch(() => null);
-	if (!branchRes || branchRes.code !== 0) return {
-		...base,
-		error: branchRes?.stderr?.trim() || "git unavailable"
-	};
-	const branch = branchRes.stdout.trim() || null;
-	const shaRes = await runCommandWithTimeout([
-		"git",
-		"-C",
-		root,
-		"rev-parse",
-		"HEAD"
-	], { timeoutMs }).catch(() => null);
-	const sha = shaRes && shaRes.code === 0 ? shaRes.stdout.trim() : null;
-	const tagRes = await runCommandWithTimeout([
-		"git",
-		"-C",
-		root,
-		"describe",
-		"--tags",
-		"--exact-match"
-	], { timeoutMs }).catch(() => null);
-	const tag = tagRes && tagRes.code === 0 ? tagRes.stdout.trim() : null;
-	const upstreamRes = await runCommandWithTimeout([
-		"git",
-		"-C",
-		root,
-		"rev-parse",
-		"--abbrev-ref",
-		"@{upstream}"
-	], { timeoutMs }).catch(() => null);
-	const upstream = upstreamRes && upstreamRes.code === 0 ? upstreamRes.stdout.trim() : null;
-	const dirtyRes = await runCommandWithTimeout([
-		"git",
-		"-C",
-		root,
-		"status",
-		"--porcelain",
-		"--",
-		":!dist/control-ui/"
-	], { timeoutMs }).catch(() => null);
-	const dirty = dirtyRes && dirtyRes.code === 0 ? dirtyRes.stdout.trim().length > 0 : null;
-	const fetchOk = params.fetch ? await runCommandWithTimeout([
-		"git",
-		"-C",
-		root,
-		"fetch",
-		"--quiet",
-		"--prune"
-	], { timeoutMs }).then((r) => r.code === 0).catch(() => false) : null;
-	const counts = upstream && upstream.length > 0 ? await runCommandWithTimeout([
-		"git",
-		"-C",
-		root,
-		"rev-list",
-		"--left-right",
-		"--count",
-		`HEAD...${upstream}`
-	], { timeoutMs }).catch(() => null) : null;
-	const parseCounts = (raw) => {
-		const parts = raw.trim().split(/\s+/);
-		if (parts.length < 2) return null;
-		const ahead = Number.parseInt(parts[0] ?? "", 10);
-		const behind = Number.parseInt(parts[1] ?? "", 10);
-		if (!Number.isFinite(ahead) || !Number.isFinite(behind)) return null;
-		return {
-			ahead,
-			behind
-		};
-	};
-	const parsed = counts && counts.code === 0 ? parseCounts(counts.stdout) : null;
-	return {
-		root,
-		sha,
-		tag,
-		branch,
-		upstream,
-		dirty,
-		ahead: parsed?.ahead ?? null,
-		behind: parsed?.behind ?? null,
-		fetchOk
-	};
-}
-async function statMtimeMs(p) {
-	try {
-		return (await fs$1.stat(p)).mtimeMs;
-	} catch {
-		return null;
-	}
-}
-function resolveDepsMarker(params) {
-	const root = params.root;
-	if (params.manager === "pnpm") return {
-		lockfilePath: path.join(root, "pnpm-lock.yaml"),
-		markerPath: path.join(root, "node_modules", ".modules.yaml")
-	};
-	if (params.manager === "bun") return {
-		lockfilePath: path.join(root, "bun.lockb"),
-		markerPath: path.join(root, "node_modules")
-	};
-	if (params.manager === "npm") return {
-		lockfilePath: path.join(root, "package-lock.json"),
-		markerPath: path.join(root, "node_modules")
-	};
-	return {
-		lockfilePath: null,
-		markerPath: null
-	};
-}
-async function checkDepsStatus(params) {
-	const { lockfilePath, markerPath } = resolveDepsMarker({
-		root: path.resolve(params.root),
-		manager: params.manager
-	});
-	if (!lockfilePath || !markerPath) return {
-		manager: params.manager,
-		status: "unknown",
-		lockfilePath,
-		markerPath,
-		reason: "unknown package manager"
-	};
-	const lockExists = await exists(lockfilePath);
-	const markerExists = await exists(markerPath);
-	if (!lockExists) return {
-		manager: params.manager,
-		status: "unknown",
-		lockfilePath,
-		markerPath,
-		reason: "lockfile missing"
-	};
-	if (!markerExists) return {
-		manager: params.manager,
-		status: "missing",
-		lockfilePath,
-		markerPath,
-		reason: "node_modules marker missing"
-	};
-	const lockMtime = await statMtimeMs(lockfilePath);
-	const markerMtime = await statMtimeMs(markerPath);
-	if (!lockMtime || !markerMtime) return {
-		manager: params.manager,
-		status: "unknown",
-		lockfilePath,
-		markerPath
-	};
-	if (lockMtime > markerMtime + 1e3) return {
-		manager: params.manager,
-		status: "stale",
-		lockfilePath,
-		markerPath,
-		reason: "lockfile newer than install marker"
-	};
-	return {
-		manager: params.manager,
-		status: "ok",
-		lockfilePath,
-		markerPath
-	};
-}
-async function fetchNpmLatestVersion(params) {
-	const res = await fetchNpmTagVersion({
-		tag: "latest",
-		timeoutMs: params?.timeoutMs
-	});
-	return {
-		latestVersion: res.version,
-		error: res.error
-	};
-}
-async function fetchNpmTagVersion(params) {
-	const timeoutMs = params?.timeoutMs ?? 3500;
-	const tag = params.tag;
-	try {
-		const res = await fetchWithTimeout(`https://registry.npmjs.org/${encodeURIComponent(NPM_PACKAGE_NAME)}/${encodeURIComponent(tag)}`, {}, Math.max(250, timeoutMs));
-		if (!res.ok) return {
-			tag,
-			version: null,
-			error: `HTTP ${res.status}`
-		};
-		const json = await res.json();
-		return {
-			tag,
-			version: typeof json?.version === "string" ? json.version : null
-		};
-	} catch (err) {
-		return {
-			tag,
-			version: null,
-			error: String(err)
-		};
-	}
-}
-function compareSemverStrings(a, b) {
-	const pa = parseComparableSemver(a);
-	const pb = parseComparableSemver(b);
-	if (!pa || !pb) return null;
-	if (pa.major !== pb.major) return pa.major < pb.major ? -1 : 1;
-	if (pa.minor !== pb.minor) return pa.minor < pb.minor ? -1 : 1;
-	if (pa.patch !== pb.patch) return pa.patch < pb.patch ? -1 : 1;
-	return comparePrerelease(pa.prerelease, pb.prerelease);
-}
-function parseComparableSemver(version) {
-	if (!version) return null;
-	const normalized = normalizeLegacyDotBetaVersion(version.trim());
-	const match = /^v?([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(normalized);
-	if (!match) return null;
-	const [, major, minor, patch, prereleaseRaw] = match;
-	if (!major || !minor || !patch) return null;
-	return {
-		major: Number.parseInt(major, 10),
-		minor: Number.parseInt(minor, 10),
-		patch: Number.parseInt(patch, 10),
-		prerelease: prereleaseRaw ? prereleaseRaw.split(".").filter(Boolean) : null
-	};
-}
-function normalizeLegacyDotBetaVersion(version) {
-	const trimmed = version.trim();
-	const dotBetaMatch = /^([vV]?[0-9]+\.[0-9]+\.[0-9]+)\.beta(?:\.([0-9A-Za-z.-]+))?$/.exec(trimmed);
-	if (!dotBetaMatch) return trimmed;
-	const base = dotBetaMatch[1];
-	const suffix = dotBetaMatch[2];
-	return suffix ? `${base}-beta.${suffix}` : `${base}-beta`;
-}
-function comparePrerelease(a, b) {
-	if (!a?.length && !b?.length) return 0;
-	if (!a?.length) return 1;
-	if (!b?.length) return -1;
-	const max = Math.max(a.length, b.length);
-	for (let i = 0; i < max; i += 1) {
-		const ai = a[i];
-		const bi = b[i];
-		if (ai == null && bi == null) return 0;
-		if (ai == null) return -1;
-		if (bi == null) return 1;
-		if (ai === bi) continue;
-		const aiNumeric = /^[0-9]+$/.test(ai);
-		const biNumeric = /^[0-9]+$/.test(bi);
-		if (aiNumeric && biNumeric) return Number.parseInt(ai, 10) < Number.parseInt(bi, 10) ? -1 : 1;
-		if (aiNumeric && !biNumeric) return -1;
-		if (!aiNumeric && biNumeric) return 1;
-		return ai < bi ? -1 : 1;
-	}
-	return 0;
-}
-async function checkUpdateStatus(params) {
-	const timeoutMs = params.timeoutMs ?? 6e3;
-	const root = params.root ? path.resolve(params.root) : null;
-	if (!root) return {
-		root: null,
-		installKind: "unknown",
-		packageManager: "unknown",
-		registry: params.includeRegistry ? await fetchNpmLatestVersion({ timeoutMs }) : void 0
-	};
-	const gitRoot = await detectGitRoot(root);
-	const isGit = gitRoot && path.resolve(gitRoot) === root;
-	const installKind = isGit ? "git" : "package";
-	const pm = (!isGit ? resolveHostedNpmInstallTarget(root) : null) ? "npm" : await detectPackageManager(root);
-	return {
-		root,
-		installKind,
-		packageManager: pm,
-		git: isGit ? await checkGitUpdateStatus({
-			root,
-			timeoutMs,
-			fetch: Boolean(params.fetchGit)
-		}) : void 0,
-		deps: await checkDepsStatus({
-			root,
-			manager: pm
-		}),
-		registry: params.includeRegistry ? await fetchNpmLatestVersion({ timeoutMs }) : void 0
-	};
-}
-
-//#endregion
-//#region src/infra/node-commands.ts
-const NODE_SYSTEM_RUN_COMMANDS = [
-	"system.run.prepare",
-	"system.run",
-	"system.which"
-];
-const NODE_SYSTEM_NOTIFY_COMMAND = "system.notify";
-const NODE_BROWSER_PROXY_COMMAND = "browser.proxy";
-
-//#endregion
-//#region src/gateway/node-command-policy.ts
-const CANVAS_COMMANDS = [
-	"canvas.present",
-	"canvas.hide",
-	"canvas.navigate",
-	"canvas.eval",
-	"canvas.snapshot",
-	"canvas.a2ui.push",
-	"canvas.a2ui.pushJSONL",
-	"canvas.a2ui.reset"
-];
-const CAMERA_COMMANDS = ["camera.list"];
-const CAMERA_DANGEROUS_COMMANDS = ["camera.snap", "camera.clip"];
-const SCREEN_DANGEROUS_COMMANDS = ["screen.record"];
-const LOCATION_COMMANDS = ["location.get"];
-const ANDROID_NOTIFICATION_COMMANDS = [...["notifications.list"], "notifications.actions"];
-const DEVICE_COMMANDS = ["device.info", "device.status"];
-const ANDROID_DEVICE_COMMANDS = [
-	...DEVICE_COMMANDS,
-	"device.permissions",
-	"device.health"
-];
-const CONTACTS_COMMANDS = ["contacts.search"];
-const CONTACTS_DANGEROUS_COMMANDS = ["contacts.add"];
-const CALENDAR_COMMANDS = ["calendar.events"];
-const CALENDAR_DANGEROUS_COMMANDS = ["calendar.add"];
-const REMINDERS_COMMANDS = ["reminders.list"];
-const REMINDERS_DANGEROUS_COMMANDS = ["reminders.add"];
-const PHOTOS_COMMANDS = ["photos.latest"];
-const MOTION_COMMANDS = ["motion.activity", "motion.pedometer"];
-const SMS_DANGEROUS_COMMANDS = ["sms.send"];
-const IOS_SYSTEM_COMMANDS = [NODE_SYSTEM_NOTIFY_COMMAND];
-const SYSTEM_COMMANDS = [
-	...NODE_SYSTEM_RUN_COMMANDS,
-	NODE_SYSTEM_NOTIFY_COMMAND,
-	NODE_BROWSER_PROXY_COMMAND
-];
-const DEFAULT_DANGEROUS_NODE_COMMANDS = [
-	...CAMERA_DANGEROUS_COMMANDS,
-	...SCREEN_DANGEROUS_COMMANDS,
-	...CONTACTS_DANGEROUS_COMMANDS,
-	...CALENDAR_DANGEROUS_COMMANDS,
-	...REMINDERS_DANGEROUS_COMMANDS,
-	...SMS_DANGEROUS_COMMANDS
-];
-const PLATFORM_DEFAULTS = {
-	ios: [
-		...CANVAS_COMMANDS,
-		...CAMERA_COMMANDS,
-		...LOCATION_COMMANDS,
-		...DEVICE_COMMANDS,
-		...CONTACTS_COMMANDS,
-		...CALENDAR_COMMANDS,
-		...REMINDERS_COMMANDS,
-		...PHOTOS_COMMANDS,
-		...MOTION_COMMANDS,
-		...IOS_SYSTEM_COMMANDS
-	],
-	android: [
-		...CANVAS_COMMANDS,
-		...CAMERA_COMMANDS,
-		...LOCATION_COMMANDS,
-		...ANDROID_NOTIFICATION_COMMANDS,
-		...ANDROID_DEVICE_COMMANDS,
-		...CONTACTS_COMMANDS,
-		...CALENDAR_COMMANDS,
-		...REMINDERS_COMMANDS,
-		...PHOTOS_COMMANDS,
-		...MOTION_COMMANDS
-	],
-	macos: [
-		...CANVAS_COMMANDS,
-		...CAMERA_COMMANDS,
-		...LOCATION_COMMANDS,
-		...DEVICE_COMMANDS,
-		...CONTACTS_COMMANDS,
-		...CALENDAR_COMMANDS,
-		...REMINDERS_COMMANDS,
-		...PHOTOS_COMMANDS,
-		...MOTION_COMMANDS,
-		...SYSTEM_COMMANDS
-	],
-	linux: [...SYSTEM_COMMANDS],
-	windows: [...SYSTEM_COMMANDS],
-	unknown: [
-		...CANVAS_COMMANDS,
-		...CAMERA_COMMANDS,
-		...LOCATION_COMMANDS,
-		...SYSTEM_COMMANDS
-	]
-};
-
-//#endregion
-//#region src/gateway/server-startup-trace.ts
-let lastGatewayStartupTraceSnapshot = null;
-function getLastGatewayStartupTraceSnapshot() {
-	if (!lastGatewayStartupTraceSnapshot) return null;
-	return {
-		...lastGatewayStartupTraceSnapshot,
-		entries: lastGatewayStartupTraceSnapshot.entries.map((entry) => ({ ...entry }))
-	};
-}
-
-//#endregion
-//#region src/infra/heartbeat-events-filter.ts
-const HEARTBEAT_OK_PREFIX = HEARTBEAT_TOKEN.toLowerCase();
-
-//#endregion
-//#region src/infra/heartbeat-runner.ts
-const log = createSubsystemLogger("gateway/heartbeat");
-const DEFAULT_HEARTBEAT_TARGET = "none";
-function hasExplicitHeartbeatAgents(cfg) {
-	return (cfg.agents?.list ?? []).some((entry) => Boolean(entry?.heartbeat));
-}
-function isHeartbeatEnabledForAgent(cfg, agentId) {
-	const resolvedAgentId = normalizeAgentId(agentId ?? resolveDefaultAgentId(cfg));
-	const list = cfg.agents?.list ?? [];
-	if (hasExplicitHeartbeatAgents(cfg)) return list.some((entry) => Boolean(entry?.heartbeat) && normalizeAgentId(entry?.id) === resolvedAgentId);
-	return resolvedAgentId === resolveDefaultAgentId(cfg);
-}
-function resolveHeartbeatSummaryForAgent(cfg, agentId) {
-	const defaults = cfg.agents?.defaults?.heartbeat;
-	const overrides = agentId ? resolveAgentConfig(cfg, agentId)?.heartbeat : void 0;
-	if (!isHeartbeatEnabledForAgent(cfg, agentId)) return {
-		enabled: false,
-		every: "disabled",
-		everyMs: null,
-		prompt: resolveHeartbeatPrompt(defaults?.prompt),
-		target: defaults?.target ?? DEFAULT_HEARTBEAT_TARGET,
-		model: defaults?.model,
-		ackMaxChars: Math.max(0, defaults?.ackMaxChars ?? DEFAULT_HEARTBEAT_ACK_MAX_CHARS)
-	};
-	const merged = defaults || overrides ? {
-		...defaults,
-		...overrides
-	} : void 0;
-	return {
-		enabled: true,
-		every: merged?.every ?? defaults?.every ?? overrides?.every ?? DEFAULT_HEARTBEAT_EVERY,
-		everyMs: resolveHeartbeatIntervalMs(cfg, void 0, merged),
-		prompt: resolveHeartbeatPrompt(merged?.prompt ?? defaults?.prompt ?? overrides?.prompt),
-		target: merged?.target ?? defaults?.target ?? overrides?.target ?? DEFAULT_HEARTBEAT_TARGET,
-		model: merged?.model ?? defaults?.model ?? overrides?.model,
-		ackMaxChars: Math.max(0, merged?.ackMaxChars ?? defaults?.ackMaxChars ?? overrides?.ackMaxChars ?? DEFAULT_HEARTBEAT_ACK_MAX_CHARS)
-	};
-}
-function resolveHeartbeatIntervalMs(cfg, overrideEvery, heartbeat) {
-	const raw = overrideEvery ?? heartbeat?.every ?? cfg.agents?.defaults?.heartbeat?.every ?? DEFAULT_HEARTBEAT_EVERY;
-	if (!raw) return null;
-	const trimmed = String(raw).trim();
-	if (!trimmed) return null;
-	let ms;
-	try {
-		ms = parseDurationMs(trimmed, { defaultUnit: "m" });
-	} catch {
-		return null;
-	}
-	if (ms <= 0) return null;
-	return ms;
-}
-
-//#endregion
-//#region src/infra/brew.ts
-function isExecutable(filePath) {
-	try {
-		fs.accessSync(filePath, fs.constants.X_OK);
-		return true;
-	} catch {
-		return false;
-	}
-}
-function normalizePathValue(value) {
-	if (typeof value !== "string") return;
-	const trimmed = value.trim();
-	return trimmed ? trimmed : void 0;
-}
-function resolveBrewExecutable(opts) {
-	const homeDir = opts?.homeDir ?? os.homedir();
-	const env = opts?.env ?? process.env;
-	const candidates = [];
-	const brewFile = normalizePathValue(env.HOMEBREW_BREW_FILE);
-	if (brewFile) candidates.push(brewFile);
-	const prefix = normalizePathValue(env.HOMEBREW_PREFIX);
-	if (prefix) candidates.push(path.join(prefix, "bin", "brew"));
-	candidates.push(path.join(homeDir, ".linuxbrew", "bin", "brew"));
-	candidates.push("/home/linuxbrew/.linuxbrew/bin/brew");
-	candidates.push("/opt/homebrew/bin/brew", "/usr/local/bin/brew");
-	for (const candidate of candidates) if (isExecutable(candidate)) return candidate;
-}
-
-//#endregion
-//#region src/agents/skills/bundled-context.ts
-const skillsLogger = createSubsystemLogger("skills");
-
-//#endregion
-//#region src/daemon/systemd-system.ts
-const SERVICE_NAME = "fased-gateway";
-const SYSTEM_UNIT_CANDIDATES = [
-	`/etc/systemd/system/${SERVICE_NAME}.service`,
-	`/usr/lib/systemd/system/${SERVICE_NAME}.service`,
-	`/lib/systemd/system/${SERVICE_NAME}.service`
-];
-
-//#endregion
-//#region src/commands/status.acpx-bridge.ts
-const ACPX_PUSH_TEST_TOOL_NAME = "fased_push_test_request";
-const VALID_MODES = new Set([
-	"status-only",
-	"read-only-tools",
-	"operator-approved-mutating-tools"
-]);
-function asRecord(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function readToolList(value) {
-	if (!Array.isArray(value)) return [];
-	return [...new Set(value.map((entry) => typeof entry === "string" ? entry.trim() : "").filter((entry) => entry.length > 0))].toSorted((left, right) => left.localeCompare(right));
-}
-function readConfiguredMode(value) {
-	return typeof value === "string" && VALID_MODES.has(value) ? value : "status-only";
-}
-function resolveAcpxMcpBridgeStatus(cfg) {
-	const pluginEntry = cfg.plugins?.entries?.acpx;
-	const pluginEnabled = cfg.plugins?.enabled !== false && pluginEntry?.enabled !== false;
-	const bridgeConfig = asRecord(asRecord(pluginEntry?.config).mcpBridge);
-	const configuredMode = readConfiguredMode(bridgeConfig.mode);
-	const bridgeEnabled = pluginEnabled && bridgeConfig.enabled === true;
-	const allowTools = readToolList(bridgeConfig.allowTools);
-	const denyTools = readToolList(bridgeConfig.denyTools);
-	const denied = denyTools.includes(ACPX_PUSH_TEST_TOOL_NAME);
-	const allowed = allowTools.includes(ACPX_PUSH_TEST_TOOL_NAME);
-	const enabled = bridgeEnabled && configuredMode === "operator-approved-mutating-tools" && allowed && !denied;
-	const reason = (() => {
-		if (!bridgeEnabled) return "mcpBridge.disabled";
-		if (configuredMode !== "operator-approved-mutating-tools") return "mcpBridge.not-mutating-mode";
-		if (denied) return "mcpBridge.denyTools";
-		if (!allowed) return "mcpBridge.allowTools";
-		return "enabled";
-	})();
-	return {
-		pluginId: "acpx",
-		enabled: bridgeEnabled,
-		mode: bridgeEnabled ? configuredMode : "disabled",
-		configuredMode,
-		allowTools,
-		denyTools,
-		fasedPushTestRequest: {
-			toolName: ACPX_PUSH_TEST_TOOL_NAME,
-			enabled,
-			allowed,
-			denied,
-			reason
-		}
-	};
-}
-
-//#endregion
-//#region src/commands/channel-account-context.ts
-async function resolveDefaultChannelAccountContext(plugin, cfg) {
-	const accountIds = plugin.config.listAccountIds(cfg);
-	const defaultAccountId = resolveChannelDefaultAccountId({
-		plugin,
-		cfg,
-		accountIds
-	});
-	const account = plugin.config.resolveAccount(cfg, defaultAccountId);
-	return {
-		accountIds,
-		defaultAccountId,
-		account,
-		enabled: plugin.config.isEnabled ? plugin.config.isEnabled(account, cfg) : true,
-		configured: plugin.config.isConfigured ? await plugin.config.isConfigured(account, cfg) : true
-	};
-}
-
-//#endregion
-//#region src/commands/status.link-channel.ts
-async function resolveLinkChannelContext(cfg) {
-	for (const plugin of listChannelPlugins()) {
-		const { defaultAccountId, account, enabled, configured } = await resolveDefaultChannelAccountContext(plugin, cfg);
-		const snapshot = plugin.config.describeAccount ? plugin.config.describeAccount(account, cfg) : {
-			accountId: defaultAccountId,
-			enabled,
-			configured
-		};
-		const summaryRecord = plugin.status?.buildChannelSummary ? await plugin.status.buildChannelSummary({
-			account,
-			cfg,
-			defaultAccountId,
-			snapshot
-		}) : void 0;
-		const linked = summaryRecord && typeof summaryRecord.linked === "boolean" ? summaryRecord.linked : null;
-		if (linked === null) continue;
-		return {
-			linked,
-			authAgeMs: summaryRecord && typeof summaryRecord.authAgeMs === "number" ? summaryRecord.authAgeMs : null,
-			account,
-			accountId: defaultAccountId,
-			plugin
-		};
-	}
-	return null;
-}
-
-//#endregion
-//#region src/commands/status.strict-agentic.ts
-function hasMode(value) {
-	return value === "off" || value === "warn";
-}
-function resolveEnvironmentMode(env) {
-	return resolveStrictAgenticRuntimeMode(env) === "warn" ? "warn" : "off";
-}
-function resolveStrictAgenticPolicyStatus(cfg, agentIds, env = process.env) {
-	const defaultConfigMode = cfg.agents?.defaults?.strictAgentic?.mode;
-	const envFlagSet = Boolean(env.FASED_STRICT_AGENTIC_MODE?.trim());
-	const fallbackMode = resolveEnvironmentMode(env);
-	const defaultMode = hasMode(defaultConfigMode) ? defaultConfigMode : fallbackMode;
-	const defaultSource = hasMode(defaultConfigMode) ? "default-config" : envFlagSet ? "environment" : "implicit-default";
-	const configuredAgents = new Map((cfg.agents?.list ?? []).map((agent) => [agent.id.trim(), hasMode(agent.strictAgentic?.mode) ? agent.strictAgentic.mode : void 0]));
-	const agents = [...new Set(agentIds.map((agentId) => agentId.trim()).filter(Boolean))].toSorted((left, right) => left.localeCompare(right)).map((agentId) => {
-		const agentMode = configuredAgents.get(agentId);
-		const override = hasMode(agentMode);
-		return {
-			agentId,
-			mode: override ? agentMode : defaultMode,
-			source: override ? "agent-config" : defaultSource,
-			override
-		};
-	});
-	return {
-		mode: defaultMode,
-		source: defaultSource,
-		envFlagSet,
-		enforcementAvailable: false,
-		warningAgents: agents.filter((agent) => agent.mode === "warn").length,
-		totalAgents: agents.length,
-		agents
-	};
-}
-
-//#endregion
-//#region src/commands/status.summary.ts
-const buildFlags = (entry) => {
-	if (!entry) return [];
-	const flags = [];
-	const think = entry?.thinkingLevel;
-	if (typeof think === "string" && think.length > 0) flags.push(`think:${think}`);
-	const verbose = entry?.verboseLevel;
-	if (typeof verbose === "string" && verbose.length > 0) flags.push(`verbose:${verbose}`);
-	const reasoning = entry?.reasoningLevel;
-	if (typeof reasoning === "string" && reasoning.length > 0) flags.push(`reasoning:${reasoning}`);
-	const elevated = entry?.elevatedLevel;
-	if (typeof elevated === "string" && elevated.length > 0) flags.push(`elevated:${elevated}`);
-	if (entry?.systemSent) flags.push("system");
-	if (entry?.abortedLastRun) flags.push("aborted");
-	const sessionId = entry?.sessionId;
-	if (typeof sessionId === "string" && sessionId.length > 0) flags.push(`id:${sessionId}`);
-	return flags;
-};
-function redactSensitiveStatusSummary(summary) {
-	return {
-		...summary,
-		sessions: {
-			...summary.sessions,
-			paths: [],
-			defaults: {
-				model: null,
-				contextTokens: null
-			},
-			recent: [],
-			byAgent: summary.sessions.byAgent.map((entry) => ({
-				...entry,
-				path: "[redacted]",
-				recent: []
-			}))
-		}
-	};
-}
-async function getStatusSummary(options = {}) {
-	const { includeSensitive = true } = options;
-	const cfg = loadConfig();
-	const linkContext = await resolveLinkChannelContext(cfg);
-	const agentList = listAgentsForGateway(cfg);
-	const heartbeatAgents = agentList.agents.map((agent) => {
-		const summary = resolveHeartbeatSummaryForAgent(cfg, agent.id);
-		return {
-			agentId: agent.id,
-			enabled: summary.enabled,
-			every: summary.every,
-			everyMs: summary.everyMs
-		};
-	});
-	const channelSummary = await buildChannelSummary(cfg, {
-		colorize: true,
-		includeAllowFrom: true
-	});
-	const queuedSystemEvents = peekSystemEvents(resolveMainSessionKey(cfg));
-	const resolved = resolveConfiguredModelRef({
-		cfg,
-		defaultProvider: DEFAULT_PROVIDER,
-		defaultModel: DEFAULT_MODEL
-	});
-	const configModel = resolved.model ?? DEFAULT_MODEL;
-	const configContextTokens = resolveContextTokensForModel({
-		cfg,
-		provider: resolved.provider ?? DEFAULT_PROVIDER,
-		model: configModel,
-		contextTokensOverride: cfg.agents?.defaults?.contextTokens,
-		fallbackContextTokens: DEFAULT_CONTEXT_TOKENS
-	}) ?? DEFAULT_CONTEXT_TOKENS;
-	const now = Date.now();
-	const storeCache = /* @__PURE__ */ new Map();
-	const loadStore = (storePath) => {
-		const cached = storeCache.get(storePath);
-		if (cached) return cached;
-		const store = loadSessionStore(storePath);
-		storeCache.set(storePath, store);
-		return store;
-	};
-	const buildSessionRows = (store, opts = {}) => Object.entries(store).filter(([key]) => key !== "global" && key !== "unknown").map(([key, entry]) => {
-		const updatedAt = entry?.updatedAt ?? null;
-		const age = updatedAt ? now - updatedAt : null;
-		const resolvedModel = resolveSessionModelRef(cfg, entry, opts.agentIdOverride);
-		const model = resolvedModel.model ?? configModel ?? null;
-		const contextTokens = resolveContextTokensForModel({
-			cfg,
-			provider: resolvedModel.provider,
-			model,
-			contextTokensOverride: entry?.contextTokens,
-			fallbackContextTokens: configContextTokens ?? void 0
-		}) ?? null;
-		const total = resolveFreshSessionTotalTokens(entry);
-		const totalTokensFresh = typeof entry?.totalTokens === "number" ? entry?.totalTokensFresh !== false : false;
-		const remaining = contextTokens != null && total !== void 0 ? Math.max(0, contextTokens - total) : null;
-		const pct = contextTokens && contextTokens > 0 && total !== void 0 ? Math.min(999, Math.round(total / contextTokens * 100)) : null;
-		const parsedAgentId = parseAgentSessionKey(key)?.agentId;
-		return {
-			agentId: opts.agentIdOverride ?? parsedAgentId,
-			key,
-			kind: classifySessionKey(key, entry),
-			sessionId: entry?.sessionId,
-			updatedAt,
-			age,
-			thinkingLevel: entry?.thinkingLevel,
-			verboseLevel: entry?.verboseLevel,
-			reasoningLevel: entry?.reasoningLevel,
-			elevatedLevel: entry?.elevatedLevel,
-			systemSent: entry?.systemSent,
-			abortedLastRun: entry?.abortedLastRun,
-			inputTokens: entry?.inputTokens,
-			outputTokens: entry?.outputTokens,
-			cacheRead: entry?.cacheRead,
-			cacheWrite: entry?.cacheWrite,
-			totalTokens: total ?? null,
-			totalTokensFresh,
-			remainingTokens: remaining,
-			percentUsed: pct,
-			model,
-			contextTokens,
-			flags: buildFlags(entry)
-		};
-	}).sort((a, b) => (b.updatedAt ?? 0) - (a.updatedAt ?? 0));
-	const paths = /* @__PURE__ */ new Set();
-	const byAgent = agentList.agents.map((agent) => {
-		const storePath = resolveStorePath(cfg.session?.store, { agentId: agent.id });
-		paths.add(storePath);
-		const sessions = buildSessionRows(loadStore(storePath), { agentIdOverride: agent.id });
-		return {
-			agentId: agent.id,
-			path: storePath,
-			count: sessions.length,
-			recent: sessions.slice(0, 10)
-		};
-	});
-	const allSessions = Array.from(paths).flatMap((storePath) => buildSessionRows(loadStore(storePath))).toSorted((a, b) => (b.updatedAt ?? 0) - (a.updatedAt ?? 0));
-	const recent = allSessions.slice(0, 10);
-	const totalSessions = allSessions.length;
-	const summary = {
-		gatewayStartup: getLastGatewayStartupTraceSnapshot(),
-		acpxMcpBridge: resolveAcpxMcpBridgeStatus(cfg),
-		strictAgentic: resolveStrictAgenticPolicyStatus(cfg, agentList.agents.map((agent) => agent.id)),
-		linkChannel: linkContext ? {
-			id: linkContext.plugin.id,
-			label: linkContext.plugin.meta.label ?? "Channel",
-			linked: linkContext.linked,
-			authAgeMs: linkContext.authAgeMs
-		} : void 0,
-		heartbeat: {
-			defaultAgentId: agentList.defaultId,
-			agents: heartbeatAgents
-		},
-		channelSummary,
-		queuedSystemEvents,
-		sessions: {
-			paths: Array.from(paths),
-			count: totalSessions,
-			defaults: {
-				model: configModel ?? null,
-				contextTokens: configContextTokens ?? null
-			},
-			recent,
-			byAgent
-		}
-	};
-	return includeSensitive ? summary : redactSensitiveStatusSummary(summary);
-}
-
-//#endregion
-//#region src/commands/status.update.ts
-function resolveUpdateAvailability(update, opts = {}) {
-	const latestVersion = update.registry?.latestVersion ?? null;
-	const registryCmp = latestVersion ? compareSemverStrings(VERSION, latestVersion) : null;
-	const hasRegistryUpdate = registryCmp != null && registryCmp < 0;
-	const gitBehind = (opts.channel == null || opts.channel === "dev") && update.installKind === "git" && typeof update.git?.behind === "number" ? update.git.behind : null;
-	const hasGitUpdate = gitBehind != null && gitBehind > 0;
-	return {
-		available: hasGitUpdate || hasRegistryUpdate,
-		hasGitUpdate,
-		hasRegistryUpdate,
-		latestVersion: hasRegistryUpdate ? latestVersion : null,
-		gitBehind
-	};
-}
-function formatUpdateOneLiner(update, opts = {}) {
-	const parts = [];
-	const appendRegistryUpdateSummary = () => {
-		if (update.registry?.latestVersion) {
-			const cmp = compareSemverStrings(VERSION, update.registry.latestVersion);
-			if (cmp === 0) parts.push(`npm latest ${update.registry.latestVersion}`);
-			else if (cmp != null && cmp < 0) parts.push(`npm update ${update.registry.latestVersion}`);
-			else parts.push(`npm latest ${update.registry.latestVersion} (local newer)`);
-			return;
-		}
-		if (update.registry?.error) parts.push("npm latest unknown");
-	};
-	if (update.installKind === "git" && update.git) {
-		if (opts.channel && opts.channel !== "dev") {
-			parts.push(`${opts.channel} channel`);
-			if (update.git.dirty === true) parts.push("dirty");
-		} else {
-			const branch = update.git.branch ? `git ${update.git.branch}` : "git";
-			parts.push(branch);
-			if (update.git.upstream) parts.push(`↔ ${update.git.upstream}`);
-			if (update.git.dirty === true) parts.push("dirty");
-			if (update.git.behind != null && update.git.ahead != null) {
-				if (update.git.behind === 0 && update.git.ahead === 0) parts.push("up to date");
-				else if (update.git.behind > 0 && update.git.ahead === 0) parts.push(`behind ${update.git.behind}`);
-				else if (update.git.behind === 0 && update.git.ahead > 0) parts.push(`ahead ${update.git.ahead}`);
-				else if (update.git.behind > 0 && update.git.ahead > 0) parts.push(`diverged (ahead ${update.git.ahead}, behind ${update.git.behind})`);
-			}
-			if (update.git.fetchOk === false) parts.push("fetch failed");
-		}
-		appendRegistryUpdateSummary();
-	} else {
-		parts.push(update.packageManager !== "unknown" ? update.packageManager : "pkg");
-		appendRegistryUpdateSummary();
-	}
-	if (update.deps) {
-		if (update.deps.status === "ok") parts.push("deps ok");
-		if (update.deps.status === "missing") parts.push("deps missing");
-		if (update.deps.status === "stale") parts.push("deps stale");
-	}
-	return `Update: ${parts.join(" · ")}`;
-}
-
-//#endregion
-//#region src/gateway/server-model-catalog.ts
-function createGatewayModelCatalogCache() {
-	return {
-		lastSuccessfulCatalog: null,
-		inFlightRefresh: null,
-		staleGeneration: 0,
-		appliedGeneration: 0
-	};
-}
-const readOnlyModelCatalogCache = createGatewayModelCatalogCache();
-const fullModelCatalogCache = createGatewayModelCatalogCache();
-function isGatewayModelCatalogStale(cache) {
-	return cache.appliedGeneration < cache.staleGeneration;
-}
-function resolveGatewayModelCatalogCache(params) {
-	return params?.readOnly === false ? fullModelCatalogCache : readOnlyModelCatalogCache;
-}
-function resolveLoadModelCatalog(params) {
-	return params?.loadModelCatalog ?? loadModelCatalog;
-}
-function startGatewayModelCatalogRefresh(params) {
-	const cache = resolveGatewayModelCatalogCache(params);
-	const config = (params?.getConfig ?? loadConfig)();
-	const readOnly = params?.readOnly !== false;
-	const refreshGeneration = cache.staleGeneration;
-	const refresh = resolveLoadModelCatalog(params)({
-		config,
-		readOnly,
-		useCache: false
-	}).then((catalog) => {
-		if ((readOnly || catalog.length > 0) && refreshGeneration === cache.staleGeneration) {
-			cache.lastSuccessfulCatalog = catalog;
-			cache.appliedGeneration = cache.staleGeneration;
-		}
-		return catalog;
-	}).finally(() => {
-		if (cache.inFlightRefresh === refresh) cache.inFlightRefresh = null;
-	});
-	cache.inFlightRefresh = refresh;
-	return refresh;
-}
-async function loadGatewayModelCatalog(params) {
-	const cache = resolveGatewayModelCatalogCache(params);
-	if (!isGatewayModelCatalogStale(cache) && cache.lastSuccessfulCatalog !== null) return cache.lastSuccessfulCatalog;
-	if (isGatewayModelCatalogStale(cache) && cache.lastSuccessfulCatalog !== null) {
-		if (!cache.inFlightRefresh) startGatewayModelCatalogRefresh(params).catch(() => void 0);
-		return cache.lastSuccessfulCatalog;
-	}
-	if (cache.inFlightRefresh) return await cache.inFlightRefresh;
-	return await startGatewayModelCatalogRefresh(params);
-}
-
-//#endregion
-//#region src/agents/provider-extension-catalog-manifest.ts
-const FASED_PROVIDER_EXTENSION_CATALOG_MANIFEST = [
-	{
-		upstreamProviderId: "anthropic",
-		upstreamCatalogPaths: ["extensions/anthropic/provider-discovery.ts"],
-		status: "mapped",
-		fasedProviderIds: ["anthropic"],
-		docsPath: "docs/providers/anthropic.md",
-		authSurface: "api-key",
-		authChoiceIds: ["apiKey", "token"]
-	},
-	{
-		upstreamProviderId: "byteplus",
-		upstreamCatalogPaths: ["extensions/byteplus/provider-catalog.ts", "extensions/byteplus/provider-discovery.ts"],
-		status: "mapped",
-		fasedProviderIds: [
-			"byteplus",
-			"byteplus-coding",
-			"byteplus-plan"
-		],
-		docsPath: "docs/providers/volcengine.md",
-		authSurface: "api-key",
-		authChoiceIds: ["byteplus-api-key"]
-	},
-	{
-		upstreamProviderId: "chutes",
-		upstreamCatalogPaths: ["extensions/chutes/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["chutes"],
-		docsPath: "docs/providers/chutes.md",
-		authSurface: "oauth",
-		authChoiceIds: ["chutes"]
-	},
-	{
-		upstreamProviderId: "codex",
-		upstreamCatalogPaths: ["extensions/codex/provider-catalog.ts", "extensions/codex/provider-discovery.ts"],
-		status: "mapped",
-		fasedProviderIds: ["openai-codex"],
-		fasedProviderAliases: ["codex"],
-		docsPath: "docs/providers/openai.md",
-		authSurface: "oauth",
-		authChoiceIds: ["openai-codex"]
-	},
-	{
-		upstreamProviderId: "huggingface",
-		upstreamCatalogPaths: ["extensions/huggingface/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["huggingface"],
-		docsPath: "docs/providers/huggingface.md",
-		authSurface: "api-key",
-		authChoiceIds: ["huggingface-api-key"]
-	},
-	{
-		upstreamProviderId: "kimi-coding",
-		upstreamCatalogPaths: ["extensions/kimi-coding/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["kimi"],
-		fasedProviderAliases: ["kimi-coding", "kimi-code"],
-		docsPath: "docs/providers/moonshot.md",
-		authSurface: "api-key",
-		authChoiceIds: ["kimi-code-api-key"]
-	},
-	{
-		upstreamProviderId: "litellm",
-		upstreamCatalogPaths: ["extensions/litellm/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["litellm"],
-		docsPath: "docs/providers/litellm.md",
-		authSurface: "api-key",
-		authChoiceIds: ["litellm-api-key"]
-	},
-	{
-		upstreamProviderId: "minimax",
-		upstreamCatalogPaths: ["extensions/minimax/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: [
-			"minimax",
-			"minimax-cn",
-			"minimax-portal"
-		],
-		docsPath: "docs/providers/minimax.md",
-		authSurface: "api-key",
-		authChoiceIds: [
-			"minimax-portal",
-			"minimax-api",
-			"minimax-api-key-cn",
-			"minimax-api-lightning"
-		]
-	},
-	{
-		upstreamProviderId: "mistral",
-		upstreamCatalogPaths: ["extensions/mistral/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["mistral"],
-		docsPath: "docs/providers/mistral.md",
-		authSurface: "api-key",
-		authChoiceIds: ["mistral-api-key"]
-	},
-	{
-		upstreamProviderId: "moonshot",
-		upstreamCatalogPaths: ["extensions/moonshot/provider-catalog.ts", "extensions/moonshot/provider-discovery.ts"],
-		status: "mapped",
-		fasedProviderIds: ["moonshot"],
-		docsPath: "docs/providers/moonshot.md",
-		authSurface: "api-key",
-		authChoiceIds: ["moonshot-api-key", "moonshot-api-key-cn"]
-	},
-	{
-		upstreamProviderId: "openrouter",
-		upstreamCatalogPaths: ["extensions/openrouter/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["openrouter"],
-		docsPath: "docs/providers/openrouter.md",
-		authSurface: "api-key",
-		authChoiceIds: ["openrouter-api-key"]
-	},
-	{
-		upstreamProviderId: "qianfan",
-		upstreamCatalogPaths: ["extensions/qianfan/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["qianfan"],
-		docsPath: "docs/providers/qianfan.md",
-		authSurface: "api-key",
-		authChoiceIds: ["qianfan-api-key"]
-	},
-	{
-		upstreamProviderId: "qwen",
-		upstreamCatalogPaths: ["extensions/qwen/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["qwen"],
-		docsPath: "docs/providers/qwen.md",
-		authSurface: "api-key",
-		authChoiceIds: ["qwen-coding-plan-api-key", "qwen-api-key"]
-	},
-	{
-		upstreamProviderId: "synthetic",
-		upstreamCatalogPaths: ["extensions/synthetic/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["synthetic"],
-		docsPath: "docs/providers/synthetic.md",
-		authSurface: "api-key",
-		authChoiceIds: ["synthetic-api-key"]
-	},
-	{
-		upstreamProviderId: "together",
-		upstreamCatalogPaths: ["extensions/together/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["together"],
-		docsPath: "docs/providers/together.md",
-		authSurface: "api-key",
-		authChoiceIds: ["together-api-key"]
-	},
-	{
-		upstreamProviderId: "venice",
-		upstreamCatalogPaths: ["extensions/venice/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["venice"],
-		docsPath: "docs/providers/venice.md",
-		authSurface: "api-key",
-		authChoiceIds: ["venice-api-key"]
-	},
-	{
-		upstreamProviderId: "vercel-ai-gateway",
-		upstreamCatalogPaths: ["extensions/vercel-ai-gateway/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["vercel-ai-gateway"],
-		docsPath: "docs/providers/vercel-ai-gateway.md",
-		authSurface: "api-key",
-		authChoiceIds: ["ai-gateway-api-key"]
-	},
-	{
-		upstreamProviderId: "volcengine",
-		upstreamCatalogPaths: ["extensions/volcengine/provider-catalog.ts", "extensions/volcengine/provider-discovery.ts"],
-		status: "mapped",
-		fasedProviderIds: [
-			"volcengine",
-			"volcengine-coding",
-			"volcengine-plan"
-		],
-		docsPath: "docs/providers/volcengine.md",
-		authSurface: "api-key",
-		authChoiceIds: ["volcengine-api-key"]
-	},
-	{
-		upstreamProviderId: "xai",
-		upstreamCatalogPaths: ["extensions/xai/provider-catalog.ts", "extensions/xai/provider-discovery.ts"],
-		status: "mapped",
-		fasedProviderIds: ["xai"],
-		docsPath: "docs/providers/xai.md",
-		authSurface: "api-key",
-		authChoiceIds: [
-			"xai-oauth",
-			"xai-device-code",
-			"xai-api-key"
-		]
-	},
-	{
-		upstreamProviderId: "xiaomi",
-		upstreamCatalogPaths: ["extensions/xiaomi/provider-catalog.ts"],
-		status: "mapped",
-		fasedProviderIds: ["xiaomi"],
-		docsPath: "docs/providers/xiaomi.md",
-		authSurface: "api-key",
-		authChoiceIds: ["xiaomi-api-key"]
-	}
-];
-function listProviderExtensionCatalogManifestEntries() {
-	return FASED_PROVIDER_EXTENSION_CATALOG_MANIFEST;
-}
-
-//#endregion
-//#region src/agents/model-catalog-status.ts
-const SOURCE_CONFIDENCE_RANK = {
-	configured: 600,
-	runtime: 500,
-	manifest: 400,
-	"provider-index": 300,
-	"current-preview": 200,
-	catalog: 100
-};
-function createCapabilityCounts() {
-	return {
-		textModels: 0,
-		visionModels: 0,
-		reasoningModels: 0,
-		toolsModels: 0,
-		jsonModels: 0,
-		audioModels: 0,
-		videoModels: 0,
-		speechModels: 0
-	};
-}
-function capabilityKey(feature) {
-	return `${feature}Models`;
-}
-function resolveProviderConfig(params) {
-	return params.cfg.models?.providers?.[params.provider];
-}
-function deriveStatusMetadata(params) {
-	return params.model.metadata ?? deriveModelMetadata({
-		model: params.model,
-		cfg: params.cfg,
-		providerConfig: resolveProviderConfig({
-			cfg: params.cfg,
-			provider: params.provider
-		})
-	});
-}
-function higherConfidence(left, right) {
-	return (SOURCE_CONFIDENCE_RANK[left] ?? 0) >= (SOURCE_CONFIDENCE_RANK[right] ?? 0) ? left : right;
-}
-function buildModelCatalogStatus(params) {
-	const configuredProviders = new Set(Object.keys(params.cfg.models?.providers ?? {}).map((provider) => normalizeProviderId(provider)));
-	const sourceCounts = {};
-	const providers = /* @__PURE__ */ new Map();
-	let reasoningModels = 0;
-	let visionModels = 0;
-	const capabilityCounts = createCapabilityCounts();
-	for (const model of params.catalog) {
-		const provider = normalizeProviderId(model.provider);
-		if (!provider) continue;
-		const source = model.catalogSource ?? "catalog";
-		sourceCounts[source] = (sourceCounts[source] ?? 0) + 1;
-		let entry = providers.get(provider);
-		if (!entry) {
-			entry = {
-				provider,
-				totalModels: 0,
-				configured: configuredProviders.has(provider),
-				reasoningModels: 0,
-				visionModels: 0,
-				sources: /* @__PURE__ */ new Set(),
-				sourceConfidence: source,
-				capabilityCounts: createCapabilityCounts(),
-				authModes: /* @__PURE__ */ new Set(),
-				privateNetwork: {
-					models: 0,
-					allowed: 0,
-					blocked: 0
-				}
-			};
-			providers.set(provider, entry);
-		}
-		entry.totalModels += 1;
-		entry.sources.add(source);
-		entry.sourceConfidence = higherConfidence(entry.sourceConfidence, source);
-		const metadata = deriveStatusMetadata({
-			cfg: params.cfg,
-			model,
-			provider
-		});
-		entry.authModes.add(metadata.authMode);
-		for (const feature of metadata.features) {
-			entry.capabilityCounts[capabilityKey(feature)] += 1;
-			capabilityCounts[capabilityKey(feature)] += 1;
-		}
-		if (metadata.privateNetwork) {
-			entry.privateNetwork.models += 1;
-			if (metadata.privateNetworkAllowed) entry.privateNetwork.allowed += 1;
-			else entry.privateNetwork.blocked += 1;
-		}
-		if (typeof metadata.contextWindow === "number") entry.maxContextWindow = Math.max(entry.maxContextWindow ?? 0, metadata.contextWindow);
-		if (typeof metadata.maxTokens === "number") entry.maxOutputTokens = Math.max(entry.maxOutputTokens ?? 0, metadata.maxTokens);
-		if (model.reasoning === true) {
-			reasoningModels += 1;
-			entry.reasoningModels += 1;
-		}
-		if (model.input?.includes("image")) {
-			visionModels += 1;
-			entry.visionModels += 1;
-		}
-	}
-	const providerRows = Array.from(providers.values()).map((provider) => ({
-		provider: provider.provider,
-		totalModels: provider.totalModels,
-		configured: provider.configured,
-		reasoningModels: provider.reasoningModels,
-		visionModels: provider.visionModels,
-		sources: Array.from(provider.sources).toSorted((left, right) => left.localeCompare(right)),
-		sourceConfidence: provider.sourceConfidence,
-		capabilityCounts: provider.capabilityCounts,
-		authModes: Array.from(provider.authModes).toSorted((left, right) => left.localeCompare(right)),
-		privateNetwork: provider.privateNetwork,
-		probeStatus: params.providerHealth?.[provider.provider] ? params.providerHealth[provider.provider].reachable === "ok" && params.providerHealth[provider.provider].auth !== "fail" ? "ok" : params.providerHealth[provider.provider].reachable === "fail" || params.providerHealth[provider.provider].auth === "fail" ? "fail" : "unknown" : "not-run",
-		...params.providerHealth?.[provider.provider] ? { health: {
-			reachable: params.providerHealth[provider.provider].reachable,
-			auth: params.providerHealth[provider.provider].auth,
-			modelsDiscovered: params.providerHealth[provider.provider].modelsDiscovered,
-			privateNetworkApproved: params.providerHealth[provider.provider].privateNetworkApproved,
-			...typeof params.providerHealth[provider.provider].checkedAtMs === "number" ? { checkedAtMs: params.providerHealth[provider.provider].checkedAtMs } : {},
-			...params.providerHealth[provider.provider].detail ? { detail: params.providerHealth[provider.provider].detail } : {}
-		} } : {},
-		...provider.maxContextWindow ? { maxContextWindow: provider.maxContextWindow } : {},
-		...provider.maxOutputTokens ? { maxOutputTokens: provider.maxOutputTokens } : {}
-	})).toSorted((left, right) => left.provider.localeCompare(right.provider));
-	const manifestEntries = listProviderExtensionCatalogManifestEntries();
-	const mappedManifestProviderIds = [...new Set(manifestEntries.flatMap((entry) => entry.status === "mapped" ? entry.fasedProviderIds.map(normalizeProviderId) : []))].filter(Boolean).toSorted((left, right) => left.localeCompare(right));
-	const catalogProviderIds = new Set(providerRows.map((provider) => provider.provider));
-	const deferredProviderIds = manifestEntries.filter((entry) => entry.status === "deferred").map((entry) => normalizeProviderId(entry.upstreamProviderId)).filter(Boolean).toSorted((left, right) => left.localeCompare(right));
-	const providerExtensionEntries = (params.providerExtensionCatalog?.entries ?? []).map((entry) => ({
-		id: entry.id,
-		source: entry.source,
-		trusted: entry.trusted,
-		providerIds: entry.providerIds,
-		loadedProviderIds: entry.loadedProviderIds,
-		modelCount: entry.modelCount,
-		status: entry.status,
-		...entry.error ? { error: entry.error } : {}
-	}));
-	const providerExtensionWarnings = providerExtensionEntries.filter((entry) => entry.status === "error" || entry.status === "skipped-untrusted");
-	return {
-		checkedAtMs: params.checkedAtMs ?? Date.now(),
-		cache: {
-			modelCatalog: "shared-loader",
-			providerExtensionCatalog: params.providerExtensionCatalog ? "fresh-status-load" : "not-loaded"
-		},
-		totalProviders: providerRows.length,
-		totalModels: params.catalog.length,
-		configuredProviders: providerRows.filter((provider) => provider.configured).length,
-		availableProviders: providerRows.filter((provider) => !provider.configured).length,
-		reasoningModels,
-		visionModels,
-		capabilityCounts,
-		sourceCounts,
-		providers: providerRows,
-		providerExtensionCatalog: {
-			totalEntries: providerExtensionEntries.length,
-			loadedEntries: providerExtensionEntries.filter((entry) => entry.status === "loaded").length,
-			skippedUntrustedEntries: providerExtensionEntries.filter((entry) => entry.status === "skipped-untrusted").length,
-			emptyEntries: providerExtensionEntries.filter((entry) => entry.status === "empty").length,
-			errorEntries: providerExtensionEntries.filter((entry) => entry.status === "error").length,
-			modelCount: providerExtensionEntries.reduce((total, entry) => total + entry.modelCount, 0),
-			loadedProviderIds: Object.keys(params.providerExtensionCatalog?.providers ?? {}).toSorted((left, right) => left.localeCompare(right)),
-			warnings: providerExtensionWarnings,
-			entries: providerExtensionEntries
-		},
-		providerExtensionManifest: {
-			upstreamProviderCount: manifestEntries.length,
-			mappedProviderCount: manifestEntries.filter((entry) => entry.status === "mapped").length,
-			deferredProviderCount: manifestEntries.filter((entry) => entry.status === "deferred").length,
-			mappedProviderIds: mappedManifestProviderIds,
-			deferredProviderIds,
-			missingMappedProviderIds: mappedManifestProviderIds.filter((providerId) => !catalogProviderIds.has(providerId))
-		}
-	};
-}
-
-//#endregion
-//#region src/gateway/update-status.ts
-const DEFAULT_UPDATE_STATUS_TIMEOUT_MS = 3500;
-function normalizeUpdateStatusTimeout(value) {
-	return typeof value === "number" && Number.isFinite(value) ? Math.max(1e3, Math.floor(value)) : DEFAULT_UPDATE_STATUS_TIMEOUT_MS;
-}
-async function getGatewayUpdateStatus(params) {
-	const timeoutMs = normalizeUpdateStatusTimeout(params?.timeoutMs);
-	const fetchGit = params?.fetchGit === true;
-	const includeRegistry = params?.includeRegistry === true;
-	const configSnapshot = await readConfigFileSnapshot();
-	const configChannel = configSnapshot.valid ? normalizeUpdateChannel(configSnapshot.config.update?.channel) : null;
-	const update = await checkUpdateStatus({
-		root: await resolveFasedAgentPackageRoot({
-			moduleUrl: import.meta.url,
-			argv1: process.argv[1],
-			cwd: process.cwd()
-		}) ?? process.cwd(),
-		timeoutMs,
-		fetchGit,
-		includeRegistry
-	});
-	const channel = resolveUpdateChannelDisplay({
-		configChannel,
-		installKind: update.installKind,
-		gitTag: update.git?.tag ?? null,
-		gitBranch: update.git?.branch ?? null
-	});
-	return {
-		ok: true,
-		update,
-		availability: resolveUpdateAvailability(update),
-		channel: {
-			...channel,
-			config: configChannel
-		},
-		probes: {
-			fetchGit,
-			includeRegistry,
-			timeoutMs
-		},
-		summary: formatUpdateOneLiner(update)
-	};
-}
-
-//#endregion
-//#region src/gateway/server-methods/commands.ts
-function normalizeOptionalLowercaseString(value) {
-	if (typeof value !== "string") return;
-	return value.trim().toLowerCase() || void 0;
-}
-function stripLeadingSlash(value) {
-	return value.startsWith("/") ? value.slice(1) : value;
-}
-function resolveTextAliases(cmd) {
-	const seen = /* @__PURE__ */ new Set();
-	const aliases = [];
-	for (const alias of cmd.textAliases) {
-		const trimmed = alias.trim();
-		if (!trimmed) continue;
-		const exactAlias = trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
-		if (seen.has(exactAlias)) continue;
-		seen.add(exactAlias);
-		aliases.push(exactAlias);
-	}
-	if (aliases.length > 0) return aliases;
-	return [`/${cmd.key}`];
-}
-function resolvePrimaryTextName(cmd) {
-	return stripLeadingSlash(resolveTextAliases(cmd)[0] ?? `/${cmd.key}`);
-}
-function normalizeChoice(choice) {
-	return typeof choice === "string" ? {
-		value: choice,
-		label: choice
-	} : choice;
-}
-function serializeArg(arg) {
-	const isDynamic = typeof arg.choices === "function";
-	const staticChoices = Array.isArray(arg.choices) ? arg.choices.map(normalizeChoice) : void 0;
-	return {
-		name: arg.name,
-		description: arg.description,
-		type: arg.type,
-		...arg.required ? { required: true } : {},
-		...staticChoices ? { choices: staticChoices } : {},
-		...isDynamic ? { dynamic: true } : {}
-	};
-}
-function mapCommand(params) {
-	const { cmd, includeArgs, nameSurface, provider, source } = params;
-	const shouldIncludeArgs = includeArgs && cmd.acceptsArgs && cmd.args?.length;
-	const nativeName = cmd.scope === "text" ? void 0 : resolveNativeCommandName(cmd, provider) ?? cmd.key;
-	return {
-		name: nameSurface === "text" ? resolvePrimaryTextName(cmd) : nativeName ?? cmd.key,
-		...nativeName ? { nativeName } : {},
-		...cmd.scope !== "native" ? { textAliases: resolveTextAliases(cmd) } : {},
-		description: cmd.description,
-		...cmd.category ? { category: cmd.category } : {},
-		source,
-		scope: cmd.scope,
-		acceptsArgs: Boolean(cmd.acceptsArgs),
-		...shouldIncludeArgs ? { args: cmd.args.map(serializeArg) } : {}
-	};
-}
-function buildPluginCommandEntries(params) {
-	const pluginTextSpecs = listPluginCommands();
-	const pluginNativeSpecs = getPluginCommandSpecs();
-	if (params.nameSurface === "text") return pluginTextSpecs.map((spec) => ({
-		name: spec.name,
-		textAliases: [`/${spec.name}`],
-		description: spec.description,
-		source: "plugin",
-		scope: "both",
-		acceptsArgs: spec.acceptsArgs
-	}));
-	return pluginNativeSpecs.map((spec) => ({
-		name: spec.name,
-		nativeName: spec.name,
-		textAliases: [`/${spec.name}`],
-		description: spec.description,
-		source: "plugin",
-		scope: "both",
-		acceptsArgs: spec.acceptsArgs
-	}));
-}
-function buildCommandsListResult(params) {
-	const includeArgs = params.includeArgs !== false;
-	const scopeFilter = params.scope ?? "both";
-	const nameSurface = scopeFilter === "text" ? "text" : "native";
-	const provider = normalizeOptionalLowercaseString(params.provider);
-	const skillCommands = listSkillCommandsForAgents({
-		cfg: params.cfg,
-		agentIds: [params.agentId]
-	});
-	const chatCommands = listChatCommandsForConfig(params.cfg, { skillCommands });
-	const skillKeys = new Set(skillCommands.map((command) => `skill:${command.skillName}`));
-	const commands = [];
-	for (const cmd of chatCommands) {
-		if (scopeFilter !== "both" && cmd.scope !== "both" && cmd.scope !== scopeFilter) continue;
-		commands.push(mapCommand({
-			cmd,
-			source: skillKeys.has(cmd.key) ? "skill" : "native",
-			includeArgs,
-			nameSurface,
-			provider
-		}));
-	}
-	commands.push(...buildPluginCommandEntries({ nameSurface }));
-	return { commands };
-}
-
-//#endregion
-//#region src/acp/status-snapshot.ts
-function normalizeText(value) {
-	return typeof value === "string" && value.trim() ? value.trim() : null;
-}
-function normalizePositiveInteger(value) {
-	return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.floor(value) : null;
-}
-function resolveAcpBackendHealth(backend) {
-	if (!backend) return null;
-	if (!backend.healthy) return true;
-	try {
-		return backend.healthy();
-	} catch {
-		return false;
-	}
-}
-function sanitizeSession(entry) {
-	const acp = entry.acp;
-	if (!acp) return null;
-	const runtimeOptions = resolveRuntimeOptionsFromMeta(acp);
-	const backendExtrasKeys = Object.keys(runtimeOptions.backendExtras ?? {}).toSorted();
-	return {
-		sessionKey: entry.sessionKey,
-		backend: acp.backend,
-		agent: acp.agent,
-		mode: acp.mode,
-		state: acp.state,
-		lastActivityAt: acp.lastActivityAt,
-		...acp.lastError ? { lastError: acp.lastError } : {},
-		...acp.identity ? { identity: {
-			state: acp.identity.state,
-			source: acp.identity.source,
-			...acp.identity.acpxRecordId ? { acpxRecordId: acp.identity.acpxRecordId } : {},
-			...acp.identity.acpxSessionId ? { acpxSessionId: acp.identity.acpxSessionId } : {},
-			...acp.identity.agentSessionId ? { agentSessionId: acp.identity.agentSessionId } : {},
-			lastUpdatedAt: acp.identity.lastUpdatedAt
-		} } : {},
-		runtimeOptions: {
-			...runtimeOptions.runtimeMode ? { runtimeMode: runtimeOptions.runtimeMode } : {},
-			...runtimeOptions.model ? { model: runtimeOptions.model } : {},
-			...runtimeOptions.permissionProfile ? { permissionProfile: runtimeOptions.permissionProfile } : {},
-			...runtimeOptions.timeoutSeconds ? { timeoutSeconds: runtimeOptions.timeoutSeconds } : {},
-			...backendExtrasKeys.length > 0 ? { backendExtrasKeys } : {},
-			cwdConfigured: Boolean(acp.cwd || runtimeOptions.cwd)
-		}
-	};
-}
-async function getAcpStatusSnapshot(params) {
-	const cfg = params.cfg;
-	const requestedBackendId = normalizeText(cfg.acp?.backend) ?? "acpx";
-	const backend = getAcpRuntimeBackend(requestedBackendId);
-	const sessions = await listAcpSessionEntries({ cfg });
-	const limit = Math.max(0, Math.min(100, params.limit ?? 20));
-	const items = sessions.map(sanitizeSession).filter((session) => session !== null).toSorted((a, b) => b.lastActivityAt - a.lastActivityAt).slice(0, limit);
-	return {
-		policy: {
-			enabled: cfg.acp?.enabled !== false,
-			dispatchEnabled: cfg.acp?.dispatch?.enabled === true,
-			backend: requestedBackendId,
-			defaultAgent: normalizeText(cfg.acp?.defaultAgent),
-			allowedAgents: (cfg.acp?.allowedAgents ?? []).map((agent) => normalizeText(agent)).filter((agent) => agent !== null).toSorted(),
-			maxConcurrentSessions: normalizePositiveInteger(cfg.acp?.maxConcurrentSessions)
-		},
-		runtimeBackend: {
-			requestedId: requestedBackendId,
-			registered: backend != null,
-			selectedId: backend?.id ?? null,
-			healthy: resolveAcpBackendHealth(backend)
-		},
-		manager: getAcpSessionManager().getObservabilitySnapshot(cfg),
-		sessions: {
-			total: sessions.length,
-			returned: items.length,
-			limit,
-			items
-		}
-	};
-}
-
-//#endregion
-//#region src/infra/push-apns.ts
-const APNS_STATE_FILENAME = "push/apns-registrations.json";
-const APNS_JWT_TTL_MS = 3e3 * 1e3;
-const DEFAULT_APNS_TIMEOUT_MS = 1e4;
-const withLock = createAsyncLock();
-let cachedJwt = null;
-function resolveApnsRegistrationPath(baseDir) {
-	const root = baseDir ?? resolveStateDir();
-	return path.join(root, APNS_STATE_FILENAME);
-}
-function normalizeNodeId(value) {
-	return value.trim();
-}
-function normalizeApnsToken(value) {
-	return value.trim().replace(/[<>\s]/g, "").toLowerCase();
-}
-function normalizeTopic(value) {
-	return value.trim();
-}
-function isLikelyApnsToken(value) {
-	return /^[0-9a-f]{32,}$/i.test(value);
-}
-function parseReason(body) {
-	const trimmed = body.trim();
-	if (!trimmed) return;
-	try {
-		const parsed = JSON.parse(trimmed);
-		return typeof parsed.reason === "string" && parsed.reason.trim().length > 0 ? parsed.reason.trim() : trimmed.slice(0, 200);
-	} catch {
-		return trimmed.slice(0, 200);
-	}
-}
-function toBase64UrlBytes(value) {
-	return Buffer.from(value).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function toBase64UrlJson(value) {
-	return toBase64UrlBytes(Buffer.from(JSON.stringify(value)));
-}
-function getJwtCacheKey(auth) {
-	const keyHash = createHash("sha256").update(auth.privateKey).digest("hex");
-	return `${auth.teamId}:${auth.keyId}:${keyHash}`;
-}
-function getApnsBearerToken(auth, nowMs = Date.now()) {
-	const cacheKey = getJwtCacheKey(auth);
-	if (cachedJwt && cachedJwt.cacheKey === cacheKey && nowMs < cachedJwt.expiresAtMs) return cachedJwt.token;
-	const iat = Math.floor(nowMs / 1e3);
-	const signingInput = `${toBase64UrlJson({
-		alg: "ES256",
-		kid: auth.keyId,
-		typ: "JWT"
-	})}.${toBase64UrlJson({
-		iss: auth.teamId,
-		iat
-	})}`;
-	const token = `${signingInput}.${toBase64UrlBytes(sign("sha256", Buffer.from(signingInput, "utf8"), {
-		key: createPrivateKey(auth.privateKey),
-		dsaEncoding: "ieee-p1363"
-	}))}`;
-	cachedJwt = {
-		cacheKey,
-		token,
-		expiresAtMs: nowMs + APNS_JWT_TTL_MS
-	};
-	return token;
-}
-function normalizePrivateKey(value) {
-	return value.trim().replace(/\\n/g, "\n");
-}
-function normalizeNonEmptyString(value) {
-	const trimmed = value?.trim() ?? "";
-	return trimmed.length > 0 ? trimmed : null;
-}
-async function loadRegistrationsState(baseDir) {
-	const existing = await readJsonFile(resolveApnsRegistrationPath(baseDir));
-	if (!existing || typeof existing !== "object") return { registrationsByNodeId: {} };
-	return { registrationsByNodeId: existing.registrationsByNodeId && typeof existing.registrationsByNodeId === "object" && !Array.isArray(existing.registrationsByNodeId) ? existing.registrationsByNodeId : {} };
-}
-function normalizeApnsEnvironment(value) {
-	if (typeof value !== "string") return null;
-	const normalized = value.trim().toLowerCase();
-	if (normalized === "sandbox" || normalized === "production") return normalized;
-	return null;
-}
-async function loadApnsRegistration(nodeId, baseDir) {
-	const normalizedNodeId = normalizeNodeId(nodeId);
-	if (!normalizedNodeId) return null;
-	return (await loadRegistrationsState(baseDir)).registrationsByNodeId[normalizedNodeId] ?? null;
-}
-async function resolveApnsAuthConfigFromEnv(env = process.env) {
-	const teamId = normalizeNonEmptyString(env.FASED_APNS_TEAM_ID);
-	const keyId = normalizeNonEmptyString(env.FASED_APNS_KEY_ID);
-	if (!teamId || !keyId) return {
-		ok: false,
-		error: "APNs auth missing: set FASED_APNS_TEAM_ID and FASED_APNS_KEY_ID"
-	};
-	const inlineKeyRaw = normalizeNonEmptyString(env.FASED_APNS_PRIVATE_KEY_P8) ?? normalizeNonEmptyString(env.FASED_APNS_PRIVATE_KEY);
-	if (inlineKeyRaw) return {
-		ok: true,
-		value: {
-			teamId,
-			keyId,
-			privateKey: normalizePrivateKey(inlineKeyRaw)
-		}
-	};
-	const keyPath = normalizeNonEmptyString(env.FASED_APNS_PRIVATE_KEY_PATH);
-	if (!keyPath) return {
-		ok: false,
-		error: "APNs private key missing: set FASED_APNS_PRIVATE_KEY_P8 or FASED_APNS_PRIVATE_KEY_PATH"
-	};
-	try {
-		return {
-			ok: true,
-			value: {
-				teamId,
-				keyId,
-				privateKey: normalizePrivateKey(await fs$1.readFile(keyPath, "utf8"))
-			}
-		};
-	} catch (err) {
-		return {
-			ok: false,
-			error: `failed reading FASED_APNS_PRIVATE_KEY_PATH (${keyPath}): ${err instanceof Error ? err.message : String(err)}`
-		};
-	}
-}
-async function sendApnsRequest(params) {
-	const authority = params.environment === "production" ? "https://api.push.apple.com" : "https://api.sandbox.push.apple.com";
-	const body = JSON.stringify(params.payload);
-	const requestPath = `/3/device/${params.token}`;
-	return await new Promise((resolve, reject) => {
-		const client = http2.connect(authority);
-		let settled = false;
-		const fail = (err) => {
-			if (settled) return;
-			settled = true;
-			client.destroy();
-			reject(err);
-		};
-		const finish = (result) => {
-			if (settled) return;
-			settled = true;
-			client.close();
-			resolve(result);
-		};
-		client.once("error", (err) => fail(err));
-		const req = client.request({
-			":method": "POST",
-			":path": requestPath,
-			authorization: `bearer ${params.bearerToken}`,
-			"apns-topic": params.topic,
-			"apns-push-type": params.pushType,
-			"apns-priority": params.priority,
-			"apns-expiration": "0",
-			"content-type": "application/json",
-			"content-length": Buffer.byteLength(body).toString()
-		});
-		let statusCode = 0;
-		let apnsId;
-		let responseBody = "";
-		req.setEncoding("utf8");
-		req.setTimeout(params.timeoutMs, () => {
-			req.close(http2.constants.NGHTTP2_CANCEL);
-			fail(/* @__PURE__ */ new Error(`APNs request timed out after ${params.timeoutMs}ms`));
-		});
-		req.on("response", (headers) => {
-			const statusHeader = headers[":status"];
-			statusCode = typeof statusHeader === "number" ? statusHeader : Number(statusHeader ?? 0);
-			const idHeader = headers["apns-id"];
-			if (typeof idHeader === "string" && idHeader.trim().length > 0) apnsId = idHeader.trim();
-		});
-		req.on("data", (chunk) => {
-			if (typeof chunk === "string") responseBody += chunk;
-		});
-		req.on("end", () => {
-			finish({
-				status: statusCode,
-				apnsId,
-				body: responseBody
-			});
-		});
-		req.on("error", (err) => fail(err));
-		req.end(body);
-	});
-}
-function resolveApnsTimeoutMs(timeoutMs) {
-	return typeof timeoutMs === "number" && Number.isFinite(timeoutMs) ? Math.max(1e3, Math.trunc(timeoutMs)) : DEFAULT_APNS_TIMEOUT_MS;
-}
-function resolveApnsSendContext(params) {
-	const token = normalizeApnsToken(params.registration.token);
-	if (!isLikelyApnsToken(token)) throw new Error("invalid APNs token");
-	const topic = normalizeTopic(params.registration.topic);
-	if (!topic) throw new Error("topic required");
-	return {
-		token,
-		topic,
-		environment: params.registration.environment,
-		bearerToken: getApnsBearerToken(params.auth)
-	};
-}
-function toApnsPushResult(params) {
-	return {
-		ok: params.response.status === 200,
-		status: params.response.status,
-		apnsId: params.response.apnsId,
-		reason: parseReason(params.response.body),
-		tokenSuffix: params.token.slice(-8),
-		topic: params.topic,
-		environment: params.environment
-	};
-}
-function createFasedAgentPushMetadata(params) {
-	return {
-		kind: params.kind,
-		nodeId: params.nodeId,
-		ts: Date.now(),
-		...params.reason ? { reason: params.reason } : {}
-	};
-}
-async function sendApnsPush(params) {
-	const { token, topic, environment, bearerToken } = resolveApnsSendContext({
-		auth: params.auth,
-		registration: params.registration
-	});
-	return toApnsPushResult({
-		response: await (params.requestSender ?? sendApnsRequest)({
-			token,
-			topic,
-			environment,
-			bearerToken,
-			payload: params.payload,
-			timeoutMs: resolveApnsTimeoutMs(params.timeoutMs),
-			pushType: params.pushType,
-			priority: params.priority
-		}),
-		token,
-		topic,
-		environment
-	});
-}
-async function sendApnsAlert(params) {
-	const payload = {
-		aps: {
-			alert: {
-				title: params.title,
-				body: params.body
-			},
-			sound: "default"
-		},
-		fased: createFasedAgentPushMetadata({
-			kind: "push.test",
-			nodeId: params.nodeId
-		})
-	};
-	return await sendApnsPush({
-		auth: params.auth,
-		registration: params.registration,
-		payload,
-		timeoutMs: params.timeoutMs,
-		requestSender: params.requestSender,
-		pushType: "alert",
-		priority: "10"
-	});
-}
-
-//#endregion
-//#region src/gateway/ws-log.ts
-const LOG_VALUE_LIMIT = 240;
-const WS_LOG_REDACT_OPTIONS = {
-	mode: "tools",
-	patterns: getDefaultRedactPatterns()
-};
-const wsLog = createSubsystemLogger("gateway/ws");
-function formatForLog(value) {
-	try {
-		if (value instanceof Error) {
-			const parts = [];
-			if (value.name) parts.push(value.name);
-			if (value.message) parts.push(value.message);
-			const code = "code" in value && (typeof value.code === "string" || typeof value.code === "number") ? String(value.code) : "";
-			if (code) parts.push(`code=${code}`);
-			const combined = parts.filter(Boolean).join(": ").trim();
-			if (combined) return combined.length > LOG_VALUE_LIMIT ? `${combined.slice(0, LOG_VALUE_LIMIT)}...` : combined;
-		}
-		if (value && typeof value === "object") {
-			const rec = value;
-			if (typeof rec.message === "string" && rec.message.trim()) {
-				const name = typeof rec.name === "string" ? rec.name.trim() : "";
-				const code = typeof rec.code === "string" || typeof rec.code === "number" ? String(rec.code) : "";
-				const parts = [name, rec.message.trim()].filter(Boolean);
-				if (code) parts.push(`code=${code}`);
-				const combined = parts.join(": ").trim();
-				return combined.length > LOG_VALUE_LIMIT ? `${combined.slice(0, LOG_VALUE_LIMIT)}...` : combined;
-			}
-		}
-		const str = typeof value === "string" || typeof value === "number" ? String(value) : JSON.stringify(value);
-		if (!str) return "";
-		const redacted = redactSensitiveText(str, WS_LOG_REDACT_OPTIONS);
-		return redacted.length > LOG_VALUE_LIMIT ? `${redacted.slice(0, LOG_VALUE_LIMIT)}...` : redacted;
-	} catch {
-		return String(value);
-	}
-}
-
-//#endregion
-//#region src/gateway/server-methods/nodes.helpers.ts
-function respondInvalidParams(params) {
-	params.respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, `invalid ${params.method} params: ${formatValidationErrors(params.validator.errors)}`));
-}
-async function respondUnavailableOnThrow(respond, fn) {
-	try {
-		await fn();
-	} catch (err) {
-		respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, formatForLog(err)));
-	}
-}
-
-//#endregion
-//#region src/gateway/server-methods/push.ts
-function normalizeOptionalString(value) {
-	if (typeof value !== "string") return;
-	const trimmed = value.trim();
-	return trimmed.length > 0 ? trimmed : void 0;
-}
-const pushHandlers = { "push.test": async ({ params, respond, client, context }) => {
-	if (!validatePushTestParams(params)) {
-		respondInvalidParams({
-			respond,
-			method: "push.test",
-			validator: validatePushTestParams
-		});
-		return;
-	}
-	const nodeId = String(params.nodeId ?? "").trim();
-	if (!nodeId) {
-		respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "nodeId required"));
-		return;
-	}
-	const title = normalizeOptionalString(params.title) ?? "FasedAgent";
-	const body = normalizeOptionalString(params.body) ?? `Push test for node ${nodeId}`;
-	await respondUnavailableOnThrow(respond, async () => {
-		const registration = await loadApnsRegistration(nodeId);
-		if (!registration) {
-			logMutatingAdminRpcAudit({
-				context,
-				client,
-				method: "push.test",
-				outcome: "denied",
-				details: {
-					nodeId,
-					reason: "no_apns_registration"
-				}
-			});
-			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, `node ${nodeId} has no APNs registration (connect iOS node first)`));
-			return;
-		}
-		const auth = await resolveApnsAuthConfigFromEnv(process.env);
-		if (!auth.ok) {
-			logMutatingAdminRpcAudit({
-				context,
-				client,
-				method: "push.test",
-				outcome: "failed",
-				details: {
-					nodeId,
-					reason: "apns_auth_unavailable"
-				}
-			});
-			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, auth.error));
-			return;
-		}
-		const overrideEnvironment = normalizeApnsEnvironment(params.environment);
-		const result = await sendApnsAlert({
-			auth: auth.value,
-			registration: {
-				...registration,
-				environment: overrideEnvironment ?? registration.environment
-			},
-			nodeId,
-			title,
-			body
-		});
-		logMutatingAdminRpcAudit({
-			context,
-			client,
-			method: "push.test",
-			outcome: result.ok ? "succeeded" : "failed",
-			details: {
-				nodeId,
-				environment: overrideEnvironment ?? registration.environment,
-				status: result.status
-			}
-		});
-		respond(true, result, void 0);
-	});
-} };
-
-//#endregion
-//#region src/channels/plugins/onboarding/imessage.ts
-const channel$1 = "imessage";
-function parseIMessageAllowFromEntries(raw) {
-	return parseOnboardingEntriesAllowingWildcard(raw, (entry) => {
-		const lower = entry.toLowerCase();
-		if (lower.startsWith("chat_id:")) {
-			const id = entry.slice(8).trim();
-			if (!/^\d+$/.test(id)) return { error: `Invalid chat_id: ${entry}` };
-			return { value: entry };
-		}
-		if (lower.startsWith("chat_guid:")) {
-			if (!entry.slice(10).trim()) return { error: "Invalid chat_guid entry" };
-			return { value: entry };
-		}
-		if (lower.startsWith("chat_identifier:")) {
-			if (!entry.slice(16).trim()) return { error: "Invalid chat_identifier entry" };
-			return { value: entry };
-		}
-		if (!normalizeIMessageHandle(entry)) return { error: `Invalid handle: ${entry}` };
-		return { value: entry };
-	});
-}
-async function promptIMessageAllowFrom(params) {
-	return promptParsedAllowFromForScopedChannel({
-		cfg: params.cfg,
-		channel: "imessage",
-		accountId: params.accountId,
-		defaultAccountId: resolveDefaultIMessageAccountId(params.cfg),
-		prompter: params.prompter,
-		noteTitle: "iMessage allowlist",
-		noteLines: [
-			"Allowlist iMessage DMs by handle or chat target.",
-			"Examples:",
-			"- +15555550123",
-			"- user@example.com",
-			"- chat_id:123",
-			"- chat_guid:... or chat_identifier:...",
-			"Multiple entries: comma-separated.",
-			`Docs: ${formatDocsLink("/imessage", "imessage")}`
-		],
-		message: "iMessage allowFrom (handle or chat_id)",
-		placeholder: "+15555550123, user@example.com, chat_id:123",
-		parseEntries: parseIMessageAllowFromEntries,
-		getExistingAllowFrom: ({ cfg, accountId }) => {
-			return resolveIMessageAccount({
-				cfg,
-				accountId
-			}).config.allowFrom ?? [];
-		}
-	});
-}
-const dmPolicy$1 = {
-	label: "iMessage",
-	channel: channel$1,
-	policyKey: "channels.imessage.dmPolicy",
-	allowFromKey: "channels.imessage.allowFrom",
-	getCurrent: (cfg) => cfg.channels?.imessage?.dmPolicy ?? "pairing",
-	setPolicy: (cfg, policy) => setChannelDmPolicyWithAllowFrom({
-		cfg,
-		channel: "imessage",
-		dmPolicy: policy
-	}),
-	promptAllowFrom: promptIMessageAllowFrom
-};
-const imessageOnboardingAdapter = {
-	channel: channel$1,
-	uiSetup: {
-		title: "iMessage",
-		detail: "macOS imsg bridge.",
-		notes: [
-			"This is still a work in progress.",
-			"Ensure FasedAgent has Full Disk Access to the Messages DB.",
-			"Grant Automation permission for Messages when prompted.",
-			"List chats with: imsg chats --limit 20"
-		],
-		fields: [{
-			label: "CLI path",
-			path: [
-				"channels",
-				"imessage",
-				"cliPath"
-			],
-			placeholder: "imsg"
-		}]
-	},
-	getStatus: async ({ cfg }) => {
-		const configured = listIMessageAccountIds(cfg).some((accountId) => resolveIMessageAccount({
-			cfg,
-			accountId
-		}).configured);
-		const imessageCliPath = cfg.channels?.imessage?.cliPath ?? "imsg";
-		const imessageCliDetected = await detectBinary(imessageCliPath);
-		return {
-			channel: channel$1,
-			configured,
-			statusLines: [`iMessage: ${configured ? "configured" : "needs setup"}`, `imsg: ${imessageCliDetected ? "found" : "missing"} (${imessageCliPath})`],
-			selectionHint: imessageCliDetected ? "imsg found" : "imsg missing",
-			quickstartScore: imessageCliDetected ? 1 : 0
-		};
-	},
-	configure: async ({ cfg, prompter, accountOverrides, shouldPromptAccountIds }) => {
-		const defaultIMessageAccountId = resolveDefaultIMessageAccountId(cfg);
-		const imessageAccountId = await resolveAccountIdForConfigure({
-			cfg,
-			prompter,
-			label: "iMessage",
-			accountOverride: accountOverrides.imessage,
-			shouldPromptAccountIds,
-			listAccountIds: listIMessageAccountIds,
-			defaultAccountId: defaultIMessageAccountId
-		});
-		let next = cfg;
-		let resolvedCliPath = resolveIMessageAccount({
-			cfg: next,
-			accountId: imessageAccountId
-		}).config.cliPath ?? "imsg";
-		if (!await detectBinary(resolvedCliPath)) {
-			const entered = await prompter.text({
-				message: "imsg CLI path",
-				initialValue: resolvedCliPath,
-				validate: (value) => value?.trim() ? void 0 : "Required"
-			});
-			resolvedCliPath = String(entered).trim();
-			if (!resolvedCliPath) await prompter.note("imsg CLI path required to enable iMessage.", "iMessage");
-		}
-		if (resolvedCliPath) next = patchChannelConfigForAccount({
-			cfg: next,
-			channel: "imessage",
-			accountId: imessageAccountId,
-			patch: { cliPath: resolvedCliPath }
-		});
-		await prompter.note([
-			"This is still a work in progress.",
-			"Ensure FasedAgent has Full Disk Access to Messages DB.",
-			"Grant Automation permission for Messages when prompted.",
-			"List chats with: imsg chats --limit 20",
-			`Docs: ${formatDocsLink("/imessage", "imessage")}`
-		].join("\n"), "iMessage next steps");
-		return {
-			cfg: next,
-			accountId: imessageAccountId
-		};
-	},
-	dmPolicy: dmPolicy$1,
-	disable: (cfg) => setOnboardingChannelEnabled(cfg, channel$1, false)
-};
-
-//#endregion
-//#region src/channels/plugins/normalize/imessage.ts
-const SERVICE_PREFIXES = [
-	"imessage:",
-	"sms:",
-	"auto:"
-];
-const CHAT_TARGET_PREFIX_RE = /^(chat_id:|chatid:|chat:|chat_guid:|chatguid:|guid:|chat_identifier:|chatidentifier:|chatident:)/i;
-function normalizeIMessageMessagingTarget(raw) {
-	const trimmed = trimMessagingTarget(raw);
-	if (!trimmed) return;
-	const lower = trimmed.toLowerCase();
-	for (const prefix of SERVICE_PREFIXES) if (lower.startsWith(prefix)) {
-		const normalizedHandle = normalizeIMessageHandle(trimmed.slice(prefix.length).trim());
-		if (!normalizedHandle) return;
-		if (CHAT_TARGET_PREFIX_RE.test(normalizedHandle)) return normalizedHandle;
-		return `${prefix}${normalizedHandle}`;
-	}
-	return normalizeIMessageHandle(trimmed) || void 0;
-}
-function looksLikeIMessageTargetId(raw) {
-	const trimmed = trimMessagingTarget(raw);
-	if (!trimmed) return false;
-	if (CHAT_TARGET_PREFIX_RE.test(trimmed)) return true;
-	return looksLikeHandleOrPhoneTarget({
-		raw: trimmed,
-		prefixPattern: /^(imessage:|sms:|auto:)/i
-	});
-}
-
-//#endregion
-//#region src/commands/signal-install.ts
-/** @internal Exported for testing. */
-async function extractSignalCliArchive(archivePath, installRoot, timeoutMs) {
-	await extractArchive({
-		archivePath,
-		destDir: installRoot,
-		timeoutMs
-	});
-}
-/** @internal Exported for testing. */
-function looksLikeArchive(name) {
-	return name.endsWith(".tar.gz") || name.endsWith(".tgz") || name.endsWith(".zip");
-}
-/**
-* Pick a native release asset from the official GitHub releases.
-*
-* The official signal-cli releases only publish native (GraalVM) binaries for
-* x86-64 Linux.  On architectures where no native asset is available this
-* returns `undefined` so the caller can fall back to a different install
-* strategy (e.g. Homebrew).
-*/
-/** @internal Exported for testing. */
-function pickAsset(assets, platform, arch) {
-	const archives = assets.filter((asset) => Boolean(asset.name && asset.browser_download_url)).filter((a) => looksLikeArchive(a.name.toLowerCase()));
-	const byName = (pattern) => archives.find((asset) => pattern.test(asset.name.toLowerCase()));
-	if (platform === "linux") {
-		if (arch === "x64") return byName(/linux-native/) || byName(/linux/) || archives[0];
-		return;
-	}
-	if (platform === "darwin") return byName(/macos|osx|darwin/) || archives[0];
-	if (platform === "win32") return byName(/windows|win/) || archives[0];
-	return archives[0];
-}
-async function downloadToFile(url, dest, maxRedirects = 5) {
-	await new Promise((resolve, reject) => {
-		const req = request(url, (res) => {
-			if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400) {
-				const location = res.headers.location;
-				if (!location || maxRedirects <= 0) {
-					reject(/* @__PURE__ */ new Error("Redirect loop or missing Location header"));
-					return;
-				}
-				const redirectUrl = new URL(location, url).href;
-				resolve(downloadToFile(redirectUrl, dest, maxRedirects - 1));
-				return;
-			}
-			if (!res.statusCode || res.statusCode >= 400) {
-				reject(/* @__PURE__ */ new Error(`HTTP ${res.statusCode ?? "?"} downloading file`));
-				return;
-			}
-			pipeline(res, createWriteStream(dest)).then(resolve).catch(reject);
-		});
-		req.on("error", reject);
-		req.end();
-	});
-}
-async function findSignalCliBinary(root) {
-	const candidates = [];
-	const enqueue = async (dir, depth) => {
-		if (depth > 3) return;
-		const entries = await fs$1.readdir(dir, { withFileTypes: true }).catch(() => []);
-		for (const entry of entries) {
-			const full = path.join(dir, entry.name);
-			if (entry.isDirectory()) await enqueue(full, depth + 1);
-			else if (entry.isFile() && entry.name === "signal-cli") candidates.push(full);
-		}
-	};
-	await enqueue(root, 0);
-	return candidates[0] ?? null;
-}
-async function resolveBrewSignalCliPath(brewExe) {
-	try {
-		const result = await runCommandWithTimeout([
-			brewExe,
-			"--prefix",
-			"signal-cli"
-		], { timeoutMs: 1e4 });
-		if (result.code === 0 && result.stdout.trim()) {
-			const prefix = result.stdout.trim();
-			const candidate = path.join(prefix, "bin", "signal-cli");
-			try {
-				await fs$1.access(candidate);
-				return candidate;
-			} catch {
-				return findSignalCliBinary(prefix);
-			}
-		}
-	} catch {}
-	return null;
-}
-async function installSignalCliViaBrew(runtime) {
-	const brewExe = resolveBrewExecutable();
-	if (!brewExe) return {
-		ok: false,
-		error: `No native signal-cli build is available for ${process.arch}. Install Homebrew (https://brew.sh) and try again, or install signal-cli manually.`
-	};
-	runtime.log(`Installing signal-cli via Homebrew (${brewExe})…`);
-	const result = await runCommandWithTimeout([
-		brewExe,
-		"install",
-		"signal-cli"
-	], { timeoutMs: 15 * 6e4 });
-	if (result.code !== 0) return {
-		ok: false,
-		error: `brew install signal-cli failed (exit ${result.code}): ${result.stderr.trim().slice(0, 200)}`
-	};
-	const cliPath = await resolveBrewSignalCliPath(brewExe);
-	if (!cliPath) return {
-		ok: false,
-		error: "brew install succeeded but signal-cli binary was not found."
-	};
-	let version;
-	try {
-		version = (await runCommandWithTimeout([cliPath, "--version"], { timeoutMs: 1e4 })).stdout.trim().replace(/^signal-cli\s+/, "") || void 0;
-	} catch {}
-	return {
-		ok: true,
-		cliPath,
-		version
-	};
-}
-async function installSignalCliFromRelease(runtime) {
-	const response = await fetch("https://api.github.com/repos/AsamK/signal-cli/releases/latest", { headers: {
-		"User-Agent": "fased",
-		Accept: "application/vnd.github+json"
-	} });
-	if (!response.ok) return {
-		ok: false,
-		error: `Failed to fetch release info (${response.status})`
-	};
-	const payload = await response.json();
-	const version = payload.tag_name?.replace(/^v/, "") ?? "unknown";
-	const asset = pickAsset(payload.assets ?? [], process.platform, process.arch);
-	if (!asset) return {
-		ok: false,
-		error: "No compatible release asset found for this platform."
-	};
-	const tmpDir = await fs$1.mkdtemp(path.join(os.tmpdir(), "fased-signal-"));
-	const archivePath = path.join(tmpDir, asset.name);
-	runtime.log(`Downloading signal-cli ${version} (${asset.name})…`);
-	await downloadToFile(asset.browser_download_url, archivePath);
-	const installRoot = path.join(CONFIG_DIR, "tools", "signal-cli", version);
-	await fs$1.mkdir(installRoot, { recursive: true });
-	if (!looksLikeArchive(asset.name.toLowerCase())) return {
-		ok: false,
-		error: `Unsupported archive type: ${asset.name}`
-	};
-	try {
-		await extractSignalCliArchive(archivePath, installRoot, 6e4);
-	} catch (err) {
-		const message = err instanceof Error ? err.message : String(err);
-		return {
-			ok: false,
-			error: `Failed to extract ${asset.name}: ${message}`
-		};
-	}
-	const cliPath = await findSignalCliBinary(installRoot);
-	if (!cliPath) return {
-		ok: false,
-		error: `signal-cli binary not found after extracting ${asset.name}`
-	};
-	await fs$1.chmod(cliPath, 493).catch(() => {});
-	return {
-		ok: true,
-		cliPath,
-		version
-	};
-}
-async function installSignalCli(runtime) {
-	if (process.platform === "win32") return {
-		ok: false,
-		error: "Signal CLI auto-install is not supported on Windows yet."
-	};
-	if (process.platform !== "linux" || process.arch === "x64") return installSignalCliFromRelease(runtime);
-	return installSignalCliViaBrew(runtime);
-}
-
-//#endregion
-//#region src/channels/plugins/onboarding/signal.ts
-const channel = "signal";
-const MIN_E164_DIGITS = 5;
-const MAX_E164_DIGITS = 15;
-const DIGITS_ONLY = /^\d+$/;
-const INVALID_SIGNAL_ACCOUNT_ERROR = "Invalid E.164 phone number (must start with + and country code, e.g. +15555550123)";
-function normalizeSignalAccountInput(value) {
-	const trimmed = value?.trim();
-	if (!trimmed) return null;
-	const digits = normalizeE164(trimmed).slice(1);
-	if (!DIGITS_ONLY.test(digits)) return null;
-	if (digits.length < MIN_E164_DIGITS || digits.length > MAX_E164_DIGITS) return null;
-	return `+${digits}`;
-}
-function isUuidLike(value) {
-	return /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value);
-}
-function parseSignalAllowFromEntries(raw) {
-	return parseOnboardingEntriesAllowingWildcard(raw, (entry) => {
-		if (entry.toLowerCase().startsWith("uuid:")) {
-			const id = entry.slice(5).trim();
-			if (!id) return { error: "Invalid uuid entry" };
-			return { value: `uuid:${id}` };
-		}
-		if (isUuidLike(entry)) return { value: `uuid:${entry}` };
-		const normalized = normalizeSignalAccountInput(entry);
-		if (!normalized) return { error: `Invalid entry: ${entry}` };
-		return { value: normalized };
-	});
-}
-async function promptSignalAllowFrom(params) {
-	return promptParsedAllowFromForScopedChannel({
-		cfg: params.cfg,
-		channel: "signal",
-		accountId: params.accountId,
-		defaultAccountId: resolveDefaultSignalAccountId(params.cfg),
-		prompter: params.prompter,
-		noteTitle: "Signal allowlist",
-		noteLines: [
-			"Allowlist Signal DMs by sender id.",
-			"Examples:",
-			"- +15555550123",
-			"- uuid:123e4567-e89b-12d3-a456-426614174000",
-			"Multiple entries: comma-separated.",
-			`Docs: ${formatDocsLink("/signal", "signal")}`
-		],
-		message: "Signal allowFrom (E.164 or uuid)",
-		placeholder: "+15555550123, uuid:123e4567-e89b-12d3-a456-426614174000",
-		parseEntries: parseSignalAllowFromEntries,
-		getExistingAllowFrom: ({ cfg, accountId }) => {
-			return resolveSignalAccount({
-				cfg,
-				accountId
-			}).config.allowFrom ?? [];
-		}
-	});
-}
-const dmPolicy = {
-	label: "Signal",
-	channel,
-	policyKey: "channels.signal.dmPolicy",
-	allowFromKey: "channels.signal.allowFrom",
-	getCurrent: (cfg) => cfg.channels?.signal?.dmPolicy ?? "pairing",
-	setPolicy: (cfg, policy) => setChannelDmPolicyWithAllowFrom({
-		cfg,
-		channel: "signal",
-		dmPolicy: policy
-	}),
-	promptAllowFrom: promptSignalAllowFrom
-};
-const signalOnboardingAdapter = {
-	channel,
-	uiSetup: {
-		title: "Signal",
-		detail: "signal-cli account.",
-		notes: [
-			"Install signal-cli if it is missing.",
-			"Set the Signal bot number in E.164 format.",
-			"Link device with: signal-cli link -n \"FasedAgent\"",
-			"Scan the QR in Signal -> Linked Devices."
-		],
-		fields: [{
-			label: "Signal number",
-			path: [
-				"channels",
-				"signal",
-				"account"
-			],
-			placeholder: "+15551234567"
-		}, {
-			label: "CLI path",
-			path: [
-				"channels",
-				"signal",
-				"cliPath"
-			],
-			placeholder: "signal-cli"
-		}]
-	},
-	getStatus: async ({ cfg }) => {
-		const configured = listSignalAccountIds(cfg).some((accountId) => resolveSignalAccount({
-			cfg,
-			accountId
-		}).configured);
-		const signalCliPath = cfg.channels?.signal?.cliPath ?? "signal-cli";
-		const signalCliDetected = await detectBinary(signalCliPath);
-		return {
-			channel,
-			configured,
-			statusLines: [`Signal: ${configured ? "configured" : "needs setup"}`, `signal-cli: ${signalCliDetected ? "found" : "missing"} (${signalCliPath})`],
-			selectionHint: signalCliDetected ? "signal-cli found" : "signal-cli missing",
-			quickstartScore: signalCliDetected ? 1 : 0
-		};
-	},
-	configure: async ({ cfg, runtime, prompter, accountOverrides, shouldPromptAccountIds, options }) => {
-		const defaultSignalAccountId = resolveDefaultSignalAccountId(cfg);
-		const signalAccountId = await resolveAccountIdForConfigure({
-			cfg,
-			prompter,
-			label: "Signal",
-			accountOverride: accountOverrides.signal,
-			shouldPromptAccountIds,
-			listAccountIds: listSignalAccountIds,
-			defaultAccountId: defaultSignalAccountId
-		});
-		let next = cfg;
-		const accountConfig = resolveSignalAccount({
-			cfg: next,
-			accountId: signalAccountId
-		}).config;
-		let resolvedCliPath = accountConfig.cliPath ?? "signal-cli";
-		let cliDetected = await detectBinary(resolvedCliPath);
-		if (options?.allowSignalInstall) {
-			if (await prompter.confirm({
-				message: cliDetected ? "signal-cli detected. Reinstall/update now?" : "signal-cli not found. Install now?",
-				initialValue: !cliDetected
-			})) try {
-				const result = await installSignalCli(runtime);
-				if (result.ok && result.cliPath) {
-					cliDetected = true;
-					resolvedCliPath = result.cliPath;
-					await prompter.note(`Installed signal-cli at ${result.cliPath}`, "Signal");
-				} else if (!result.ok) await prompter.note(result.error ?? "signal-cli install failed.", "Signal");
-			} catch (err) {
-				await prompter.note(`signal-cli install failed: ${String(err)}`, "Signal");
-			}
-		}
-		if (!cliDetected) await prompter.note("signal-cli not found. Install it, then rerun this step or set channels.signal.cliPath.", "Signal");
-		let account = accountConfig.account ?? "";
-		if (account) {
-			const normalizedExisting = normalizeSignalAccountInput(account);
-			if (!normalizedExisting) {
-				await prompter.note("Existing Signal account isn't a valid E.164 number. Please enter it again.", "Signal");
-				account = "";
-			} else {
-				account = normalizedExisting;
-				if (!await prompter.confirm({
-					message: `Signal account set (${account}). Keep it?`,
-					initialValue: true
-				})) account = "";
-			}
-		}
-		if (!account) account = normalizeSignalAccountInput(String(await prompter.text({
-			message: "Signal bot number (E.164)",
-			validate: (value) => normalizeSignalAccountInput(String(value ?? "")) ? void 0 : INVALID_SIGNAL_ACCOUNT_ERROR
-		}))) ?? "";
-		if (account) next = patchChannelConfigForAccount({
-			cfg: next,
-			channel: "signal",
-			accountId: signalAccountId,
-			patch: {
-				account,
-				cliPath: resolvedCliPath ?? "signal-cli"
-			}
-		});
-		await prompter.note([
-			"Link device with: signal-cli link -n \"FasedAgent\"",
-			"Scan QR in Signal → Linked Devices",
-			`Then run: ${formatCliCommand("fased gateway call channels.status --params '{\"probe\":true}'")}`,
-			`Docs: ${formatDocsLink("/signal", "signal")}`
-		].join("\n"), "Signal next steps");
-		return {
-			cfg: next,
-			accountId: signalAccountId
-		};
-	},
-	dmPolicy,
-	disable: (cfg) => setOnboardingChannelEnabled(cfg, channel, false)
-};
-
-//#endregion
-//#region src/channels/plugins/status-issues/bluebubbles.ts
-function readBlueBubblesAccountStatus(value) {
-	if (!isRecord(value)) return null;
-	return {
-		accountId: value.accountId,
-		enabled: value.enabled,
-		configured: value.configured,
-		running: value.running,
-		baseUrl: value.baseUrl,
-		lastError: value.lastError,
-		probe: value.probe
-	};
-}
-function readBlueBubblesProbeResult(value) {
-	if (!isRecord(value)) return null;
-	return {
-		ok: typeof value.ok === "boolean" ? value.ok : void 0,
-		status: typeof value.status === "number" ? value.status : null,
-		error: asString(value.error) ?? null
-	};
-}
-function collectBlueBubblesStatusIssues(accounts) {
-	return collectIssuesForEnabledAccounts({
-		accounts,
-		readAccount: readBlueBubblesAccountStatus,
-		collectIssues: ({ account, accountId, issues }) => {
-			const configured = account.configured === true;
-			const running = account.running === true;
-			const lastError = asString(account.lastError);
-			const probe = readBlueBubblesProbeResult(account.probe);
-			if (!configured) {
-				issues.push({
-					channel: "bluebubbles",
-					accountId,
-					kind: "config",
-					message: "Not configured (missing serverUrl or password).",
-					fix: "Run: fased channels add bluebubbles --http-url <server-url> --password <password>"
-				});
-				return;
-			}
-			if (probe && probe.ok === false) {
-				const errorDetail = probe.error ? `: ${probe.error}` : probe.status ? ` (HTTP ${probe.status})` : "";
-				issues.push({
-					channel: "bluebubbles",
-					accountId,
-					kind: "runtime",
-					message: `BlueBubbles server unreachable${errorDetail}`,
-					fix: "Check that the BlueBubbles server is running and accessible. Verify serverUrl and password in your config."
-				});
-			}
-			if (running && lastError) issues.push({
-				channel: "bluebubbles",
-				accountId,
-				kind: "runtime",
-				message: `Channel error: ${lastError}`,
-				fix: "Check gateway logs for details. If the webhook is failing, verify the webhook URL is configured in BlueBubbles server settings."
-			});
-		}
-	});
-}
-
-//#endregion
-//#region src/line/config-schema.ts
-const DmPolicySchema$1 = z.enum([
-	"open",
-	"allowlist",
-	"pairing",
-	"disabled"
-]);
-const GroupPolicySchema$1 = z.enum([
-	"open",
-	"allowlist",
-	"disabled"
-]);
-const LineCommonConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	channelAccessToken: z.string().optional(),
-	channelSecret: z.string().optional(),
-	tokenFile: z.string().optional(),
-	secretFile: z.string().optional(),
-	name: z.string().optional(),
-	allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
-	groupAllowFrom: z.array(z.union([z.string(), z.number()])).optional(),
-	dmPolicy: DmPolicySchema$1.optional().default("pairing"),
-	groupPolicy: GroupPolicySchema$1.optional().default("allowlist"),
-	responsePrefix: z.string().optional(),
-	mediaMaxMb: z.number().optional(),
-	webhookPath: z.string().optional()
-});
-const LineGroupConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
-	requireMention: z.boolean().optional(),
-	systemPrompt: z.string().optional(),
-	skills: z.array(z.string()).optional()
-}).strict();
-const LineAccountConfigSchema = LineCommonConfigSchema.extend({ groups: z.record(z.string(), LineGroupConfigSchema.optional()).optional() }).strict();
-const LineConfigSchema = LineCommonConfigSchema.extend({
-	accounts: z.record(z.string(), LineAccountConfigSchema.optional()).optional(),
-	groups: z.record(z.string(), LineGroupConfigSchema.optional()).optional()
-}).strict();
-
-//#endregion
-export { ACPX_PUSH_TEST_METHOD, ACPX_PUSH_TEST_WRAPPER_ID, AcpRuntimeError, BLUEBUBBLES_ACTIONS, BLUEBUBBLES_ACTION_NAMES, BLUEBUBBLES_GROUP_ACTIONS, BlockStreamingCoalesceSchema, CHANNEL_MESSAGE_ACTION_NAMES, DEFAULT_ACCOUNT_ID, DEFAULT_FEDERATION_BASE_URL, DEFAULT_GROUP_HISTORY_LIMIT, DEFAULT_VIDEO_GENERATION_DURATION_SECONDS, DEFAULT_VIDEO_GENERATION_TIMEOUT_MS, DEFAULT_VIDEO_RESOLUTION_TO_SIZE, DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, DEFAULT_WEBHOOK_MAX_BODY_BYTES, DM_GROUP_ACCESS_REASON, DmConfigSchema, DmPolicySchema, GROUP_POLICY_BLOCKED_LABEL, GoogleChatConfigSchema, GroupPolicySchema, IMessageConfigSchema, LineConfigSchema, MSTeamsConfigSchema, MarkdownConfigSchema, MarkdownTableModeSchema, PAIRING_APPROVED_MESSAGE, ReplyRuntimeConfigSchemaShape, RequestBodyLimitError, SILENT_REPLY_TOKEN, SignalConfigSchema, SsrFBlockedError, ToolPolicySchema, TtsAutoSchema, TtsConfigSchema, TtsModeSchema, TtsProviderSchema, acquireFileLock, addWildcardAllowFrom, applyAccountNameToChannelSection, approveDevicePairing, buildAgentMediaPayload, buildBaseAccountStatusSnapshot, buildBaseChannelStatusSummary, buildChannelConfigSchema, buildChannelKeyCandidates, buildCommandsListResult, buildDashscopeVideoGenerationInput, buildDashscopeVideoGenerationParameters, buildHostnameAllowlistPolicyFromSuffixAllowlist, buildMediaPayload, buildModelCatalogStatus, buildOauthProviderAuthResult, buildPendingHistoryContextFromMap, buildTokenChannelStatusSummary, canonicalizeRealtimeTranscriptionProviderId, canonicalizeRealtimeVoiceProviderId, chunkTextForOutbound, clamp, clearHistoryEntries, clearHistoryEntriesIfEnabled, collectBlueBubblesStatusIssues, collectStatusIssuesFromLastError, createActionCard, createActionGate, createDedupeCache, createDefaultChannelRuntimeState, createImageCard, createInfoCard, createListCard, createLoggerBackedRuntime, createNormalizedOutboundDeliverer, createPersistentDedupe, createReceiptCard, createReplyPrefixContext, createReplyPrefixOptions, createScopedPairingAccess, createTypingCallbacks, deleteAccountFromConfigSection, detectMime, downloadDashscopeGeneratedVideos, emitDiagnosticEvent, emptyPluginConfigSchema, escapeRegExp, evaluateSenderGroupAccess, evictOldHistoryKeys, executeAcpxPushTestRequest, extensionForMime, extractDashscopeVideoUrls, extractOriginalFilename, extractToolSend, fetchWithBearerAuthScopeFallback, fetchWithSsrFGuard, formatAllowFromLowercase, formatAllowlistMatchMeta, formatDocsLink, formatErrorMessage, formatInboundFromLabel, formatLocationText, formatPairingApproveHint, formatTextWithAttachmentLinks, getAcpStatusSnapshot, getChatChannelMeta, getFileExtension, getGatewayUpdateStatus, getPublicGatewayIdentity, getRealtimeTranscriptionProvider, getRealtimeVoiceProvider, getStatusSummary, hasMarkdownToConvert, imessageOnboardingAdapter, installRequestBodyLimitGuard, isAllowedParsedChatSender, isBlockedHostname, isBlockedHostnameOrIp, isDangerousNameMatchingEnabled, isDiagnosticsEnabled, isHttpsUrlAllowedByHostnameSuffixAllowlist, isNormalizedSenderAllowed, isPrivateIpAddress, isRequestBodyLimitError, isSilentReplyText, isTruthyEnvValue, isWSL2Sync, isWSLEnv, isWSLSync, issuePairingChallenge, jsonResult, listAgentIds, listDevicePairing, listIMessageAccountIds, listLineAccountIds, listRealtimeTranscriptionProviders, listRealtimeVoiceProviders, listSignalAccountIds, loadGatewayModelCatalog, loadWebMedia, logAckFailure, logInboundDrop, logTypingFailure, looksLikeIMessageTargetId, looksLikeSignalTargetId, mergeAllowFromEntries, mergeAllowlist, migrateBaseNameToDefaultAccount, missingTargetError, normalizeAccountId, normalizeAllowFrom, normalizeChannelSlug, normalizeE164, normalizeHandle, normalizeHostnameSuffixAllowlist, normalizeIMessageMessagingTarget, normalizeAccountId$1 as normalizeLineAccountId, normalizePluginHttpPath, normalizeRealtimeTranscriptionProviderId, normalizeRealtimeVoiceProviderId, normalizeSignalMessagingTarget, normalizeWebhookPath, onDiagnosticEvent, optionalStringEnum, parseChatAllowTargetPrefixes, parseChatTargetPrefixesOrThrow, pollDashscopeVideoTaskUntilComplete, processLineMessage, promptAccountId, promptChannelAccessConfig, pushHandlers, rawDataToString, readJsonBodyWithLimit, readJsonFileWithFallback, readNumberParam, readReactionParams, readRequestBodyWithLimit, readStoreAllowFromForDmPolicy, readStringParam, recordInboundSession, recordPendingHistoryEntry, recordPendingHistoryEntryIfEnabled, redactSensitiveText, registerAcpRuntimeBackend, registerLogTransport, registerPluginHttpRoute, registerWebhookTarget, rejectDevicePairing, rejectNonPostWebhookRequest, removeAckReactionAfterReply, requestBodyErrorToText, requireOpenAllowFrom, resolveAckReaction, resolveAgentPublicOrigin, resolveAllowlistMatchSimple, resolveAllowlistProviderRuntimeGroupPolicy, resolveBlueBubblesGroupRequireMention, resolveBlueBubblesGroupToolPolicy, resolveChannelAccountConfigBasePath, resolveChannelEntryMatch, resolveChannelEntryMatchWithFallback, resolveChannelMediaMaxBytes, resolveControlCommandGate, resolveDefaultAgentId, resolveDefaultGroupPolicy, resolveDefaultIMessageAccountId, resolveDefaultLineAccountId, resolveDefaultSignalAccountId, resolveDmGroupAccessWithCommandGate, resolveDmGroupAccessWithLists, resolveEffectiveAllowFromLists, resolveEffectiveToolInventory, resolveFederationBaseUrl, resolveFederationHandle, resolveGatewayBindUrl, resolveGoogleChatGroupRequireMention, resolveGoogleChatGroupToolPolicy, resolveIMessageAccount, resolveIMessageGroupRequireMention, resolveIMessageGroupToolPolicy, resolveLineAccount, resolveMentionGating, resolveMentionGatingWithBypass, resolveNestedAllowlistDecision, resolveOpenProviderRuntimeGroupPolicy, resolveOutboundMediaUrls, resolvePreferredFasedAgentTmpDir, resolveSenderCommandAuthorization, resolveServicePrefixedAllowTarget, resolveServicePrefixedTarget, resolveSignalAccount, resolveSingleWebhookTarget, resolveSingleWebhookTargetAsync, resolveTailnetHostWithRunner, resolveThreadSessionKeys, resolveToolsBySender, resolveVideoGenerationReferenceUrls, resolveWebhookPath, resolveWebhookTargets, runEmbeddedPiAgent, runFederationAutoConnectOnce, runPluginCommandWithTimeout, safeParseJson, sendMediaWithLeadingCaption, setAccountEnabledInConfigSection, shouldAckReaction, shouldAckReactionForWhatsApp, signalOnboardingAdapter, sleep, startFederationAutoConnect, stringEnum, stripAnsi, stripMarkdown, summarizeMapping, toLocationContext, unregisterAcpRuntimeBackend, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce, withFileLock, withTempDownloadPath, writeJsonFileAtomically };
+import "./exec-DQ8j4Fm3.js";
+import "./accounts-DI5226U8.js";
+import { C as resolveNestedAllowlistDecision, S as resolveChannelEntryMatchWithFallback, b as normalizeChannelSlug, x as resolveChannelEntryMatch, y as buildChannelKeyCandidates } from "./allow-list-BYeKk0Sy.js";
+import { n as redactSensitiveText } from "./redact-Bm8vu_ju.js";
+import "./github-copilot-token-CUK__1s1.js";
+import "./retry-DstNBhDW.js";
+import "./paths-CTZ2RS_E.js";
+import { a as deleteAccountFromConfigSection, c as formatPairingApproveHint, n as applyAccountNameToChannelSection, o as setAccountEnabledInConfigSection, r as migrateBaseNameToDefaultAccount, s as buildChannelConfigSchema, t as PAIRING_APPROVED_MESSAGE, u as emptyPluginConfigSchema } from "./pairing-message-CZBahREg.js";
+import "./ip-C70a-YlD.js";
+import { a as isBlockedHostnameOrIp, i as isBlockedHostname, o as isPrivateIpAddress, t as SsrFBlockedError } from "./ssrf-BZG8Ztod.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-BuYrl6q2.js";
+import { n as redactSensitiveUrlLikeString, t as redactSensitiveUrl } from "./redact-sensitive-url-dPvnFFsK.js";
+import { d as parseChatTargetPrefixesOrThrow, f as resolveServicePrefixedAllowTarget, g as isNormalizedSenderAllowed, h as isAllowedParsedChatSender, m as formatAllowFromLowercase, p as resolveServicePrefixedTarget, u as parseChatAllowTargetPrefixes } from "./send-CUGEhiUa.js";
+import { A as resolveDefaultGroupPolicy, C as buildBaseChannelStatusSummary, D as formatDocsLink, E as createDefaultChannelRuntimeState, M as warnMissingProviderGroupPolicyFallbackOnce, O as GROUP_POLICY_BLOCKED_LABEL, S as buildBaseAccountStatusSnapshot, T as collectStatusIssuesFromLastError, j as resolveOpenProviderRuntimeGroupPolicy, k as resolveAllowlistProviderRuntimeGroupPolicy, r as mergeAllowFromEntries, t as addWildcardAllowFrom, u as promptAccountId, w as buildTokenChannelStatusSummary } from "./helpers-BCZ9d3fl.js";
+import { D as formatLocationText, O as toLocationContext, n as isWSLEnv, r as isWSLSync, t as isWSL2Sync } from "./wsl-JwmI6Zu8.js";
+import { o as readJsonFileWithFallback, s as writeJsonFileAtomically } from "./pairing-store-D7I1Qmiw.js";
+import "./chunk-CSUjIQSx.js";
+import { n as resolveGatewayBindUrl, r as runPluginCommandWithTimeout, t as resolveTailnetHostWithRunner } from "./tailscale-status-ClsquRGs.js";
+import { a as resolveAckReaction, n as createReplyPrefixOptions, t as createReplyPrefixContext } from "./reply-prefix-Bqzm6DC1.js";
+import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-BvtlOzVP.js";
+import { i as rejectDevicePairing, r as listDevicePairing, t as approveDevicePairing } from "./device-pairing-D2Yq-_U6.js";
+import "./pairing-token-N_6Jbt1L.js";
+import { h as onDiagnosticEvent, m as isDiagnosticsEnabled, p as emitDiagnosticEvent } from "./diagnostic-Dfn1iERm.js";
+import "./diagnostic-session-state-HO94DMou.js";
+import "./optional-runtime-dependency-BEBP4VFJ.js";
+import { c as detectMime, l as extensionForMime, u as getFileExtension } from "./image-ops-B-QR_M9Z.js";
+import { C as resolveFederationHandle, S as resolveFederationBaseUrl, b as normalizeHandle, x as resolveAgentPublicOrigin, y as DEFAULT_FEDERATION_BASE_URL } from "./wallet-status-CQI89c_6.js";
+import "./pi-model-discovery-C5klknQZ.js";
+import "./runtime-dependency-C5rJfC0u.js";
+import { t as rawDataToString } from "./ws-CocpWGhl.js";
+import "./path-alias-guards-Dg3gU-MA.js";
+import "./fs-safe-BG-VzVkL.js";
+import "./markdown-tables-B1Tx7c77.js";
+import { n as loadWebMedia } from "./media-BwsqooWC.js";
+import "./send-Bd3Z-jAd.js";
+import { r as extractOriginalFilename } from "./outbound-attachment-L1q40kiu.js";
+import "./fetch-Cu-ahkie.js";
+import "./thread-bindings.state-ssxdG7xV.js";
+import "./memory-search-C3C0bD2H.js";
+import "./manager-Dhq3SXpO.js";
+import "./query-expansion-Zr9qQixm.js";
+import { a as jsonResult, c as readReactionParams, d as readStringParam, n as createActionGate, s as readNumberParam } from "./common-Cjm8psuW.js";
+import "./commands-registry-DJ0pfCcY.js";
+import "./skill-commands-BybEjJ1_.js";
+import "./directory-live-DatqU-eS.js";
+import "./targets-DskkhJAp.js";
+import "./sandbox-paths-lj7_EVuA.js";
+import { n as missingTargetError } from "./target-errors-C_SVKoEv.js";
+import "./resolve-route-B7vZ3nKp.js";
+import "./render-Bwu_WxwA.js";
+import "./tables-CVDOT5dX.js";
+import { t as promptChannelAccessConfig } from "./channel-access-B1KciKmw.js";
+import "./shared-clhhbWN3.js";
+
+export { ACPX_PUSH_TEST_METHOD, ACPX_PUSH_TEST_WRAPPER_ID, AcpRuntimeError, BLUEBUBBLES_ACTIONS, BLUEBUBBLES_ACTION_NAMES, BLUEBUBBLES_GROUP_ACTIONS, BlockStreamingCoalesceSchema, CHANNEL_MESSAGE_ACTION_NAMES, DEFAULT_ACCOUNT_ID, DEFAULT_FEDERATION_BASE_URL, DEFAULT_GROUP_HISTORY_LIMIT, DEFAULT_VIDEO_GENERATION_DURATION_SECONDS, DEFAULT_VIDEO_GENERATION_TIMEOUT_MS, DEFAULT_VIDEO_RESOLUTION_TO_SIZE, DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, DEFAULT_WEBHOOK_MAX_BODY_BYTES, DM_GROUP_ACCESS_REASON, DmConfigSchema, DmPolicySchema, GROUP_POLICY_BLOCKED_LABEL, GoogleChatConfigSchema, GroupPolicySchema, IMessageConfigSchema, LineConfigSchema, MSTeamsConfigSchema, MarkdownConfigSchema, MarkdownTableModeSchema, PAIRING_APPROVED_MESSAGE, ReplyRuntimeConfigSchemaShape, RequestBodyLimitError, SILENT_REPLY_TOKEN, SignalConfigSchema, SsrFBlockedError, ToolPolicySchema, TtsAutoSchema, TtsConfigSchema, TtsModeSchema, TtsProviderSchema, acquireFileLock, addWildcardAllowFrom, applyAccountNameToChannelSection, approveDevicePairing, buildAgentMediaPayload, buildBaseAccountStatusSnapshot, buildBaseChannelStatusSummary, buildChannelConfigSchema, buildChannelKeyCandidates, buildCommandsListResult, buildDashscopeVideoGenerationInput, buildDashscopeVideoGenerationParameters, buildHostnameAllowlistPolicyFromSuffixAllowlist, buildMediaPayload, buildModelCatalogStatus, buildOauthProviderAuthResult, buildPendingHistoryContextFromMap, buildTokenChannelStatusSummary, canonicalizeRealtimeTranscriptionProviderId, canonicalizeRealtimeVoiceProviderId, chunkTextForOutbound, clamp, clearHistoryEntries, clearHistoryEntriesIfEnabled, collectBlueBubblesStatusIssues, collectStatusIssuesFromLastError, createActionCard, createActionGate, createDedupeCache, createDefaultChannelRuntimeState, createImageCard, createInfoCard, createListCard, createLoggerBackedRuntime, createNormalizedOutboundDeliverer, createPersistentDedupe, createReceiptCard, createReplyPrefixContext, createReplyPrefixOptions, createScopedPairingAccess, createTypingCallbacks, deleteAccountFromConfigSection, detectMime, downloadDashscopeGeneratedVideos, emitDiagnosticEvent, emptyPluginConfigSchema, escapeRegExp, evaluateSenderGroupAccess, evictOldHistoryKeys, executeAcpxPushTestRequest, extensionForMime, extractDashscopeVideoUrls, extractOriginalFilename, extractToolSend, fetchWithBearerAuthScopeFallback, fetchWithSsrFGuard, formatAllowFromLowercase, formatAllowlistMatchMeta, formatDocsLink, formatErrorMessage, formatInboundFromLabel, formatLocationText, formatPairingApproveHint, formatTextWithAttachmentLinks, getAcpStatusSnapshot, getChatChannelMeta, getFileExtension, getGatewayUpdateStatus, getPublicGatewayIdentity, getRealtimeTranscriptionProvider, getRealtimeVoiceProvider, getStatusSummary, hasMarkdownToConvert, imessageOnboardingAdapter, installRequestBodyLimitGuard, isAllowedParsedChatSender, isBlockedHostname, isBlockedHostnameOrIp, isDangerousNameMatchingEnabled, isDiagnosticsEnabled, isHttpsUrlAllowedByHostnameSuffixAllowlist, isNormalizedSenderAllowed, isPrivateIpAddress, isRequestBodyLimitError, isSilentReplyText, isTruthyEnvValue, isWSL2Sync, isWSLEnv, isWSLSync, issuePairingChallenge, jsonResult, listAgentIds, listDevicePairing, listIMessageAccountIds, listLineAccountIds, listRealtimeTranscriptionProviders, listRealtimeVoiceProviders, listSignalAccountIds, loadGatewayModelCatalog, loadWebMedia, logAckFailure, logInboundDrop, logTypingFailure, looksLikeIMessageTargetId, looksLikeSignalTargetId, mergeAllowFromEntries, mergeAllowlist, migrateBaseNameToDefaultAccount, missingTargetError, normalizeAccountId, normalizeAllowFrom, normalizeChannelSlug, normalizeE164, normalizeHandle, normalizeHostnameSuffixAllowlist, normalizeIMessageMessagingTarget, normalizeAccountId$1 as normalizeLineAccountId, normalizePluginHttpPath, normalizeRealtimeTranscriptionProviderId, normalizeRealtimeVoiceProviderId, normalizeSignalMessagingTarget, normalizeWebhookPath, onDiagnosticEvent, optionalStringEnum, parseChatAllowTargetPrefixes, parseChatTargetPrefixesOrThrow, pollDashscopeVideoTaskUntilComplete, processLineMessage, promptAccountId, promptChannelAccessConfig, pushHandlers, rawDataToString, readJsonBodyWithLimit, readJsonFileWithFallback, readNumberParam, readReactionParams, readRequestBodyWithLimit, readStoreAllowFromForDmPolicy, readStringParam, recordInboundSession, recordPendingHistoryEntry, recordPendingHistoryEntryIfEnabled, redactSensitiveText, redactSensitiveUrl, redactSensitiveUrlLikeString, registerAcpRuntimeBackend, registerLogTransport, registerPluginHttpRoute, registerWebhookTarget, rejectDevicePairing, rejectNonPostWebhookRequest, removeAckReactionAfterReply, requestBodyErrorToText, requireOpenAllowFrom, resolveAckReaction, resolveAgentPublicOrigin, resolveAllowlistMatchSimple, resolveAllowlistProviderRuntimeGroupPolicy, resolveBlueBubblesGroupRequireMention, resolveBlueBubblesGroupToolPolicy, resolveChannelAccountConfigBasePath, resolveChannelEntryMatch, resolveChannelEntryMatchWithFallback, resolveChannelMediaMaxBytes, resolveControlCommandGate, resolveDefaultAgentId, resolveDefaultGroupPolicy, resolveDefaultIMessageAccountId, resolveDefaultLineAccountId, resolveDefaultSignalAccountId, resolveDmGroupAccessWithCommandGate, resolveDmGroupAccessWithLists, resolveEffectiveAllowFromLists, resolveEffectiveToolInventory, resolveFederationBaseUrl, resolveFederationHandle, resolveGatewayBindUrl, resolveGoogleChatGroupRequireMention, resolveGoogleChatGroupToolPolicy, resolveIMessageAccount, resolveIMessageGroupRequireMention, resolveIMessageGroupToolPolicy, resolveLineAccount, resolveMentionGating, resolveMentionGatingWithBypass, resolveNestedAllowlistDecision, resolveOpenProviderRuntimeGroupPolicy, resolveOutboundMediaUrls, resolvePreferredFasedAgentTmpDir, resolveSenderCommandAuthorization, resolveServicePrefixedAllowTarget, resolveServicePrefixedTarget, resolveSignalAccount, resolveSingleWebhookTarget, resolveSingleWebhookTargetAsync, resolveTailnetHostWithRunner, resolveThreadSessionKeys, resolveToolsBySender, resolveVideoGenerationReferenceUrls, resolveWebhookPath, resolveWebhookTargets, runEmbeddedPiAgent, runFederationAutoConnectOnce, runPluginCommandWithTimeout, safeParseJson, sendMediaWithLeadingCaption, setAccountEnabledInConfigSection, shouldAckReaction, shouldAckReactionForWhatsApp, signalOnboardingAdapter, sleep, startFederationAutoConnect, stringEnum, stripAnsi, stripMarkdown, summarizeMapping, toLocationContext, unregisterAcpRuntimeBackend, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce, withFileLock, withTempDownloadPath, writeJsonFileAtomically };