@fased/fased 0.1.55 → 0.1.56

package/dist/plugin-sdk/slack.js

@@ -1,28 +1,28 @@
-import { Jt as resolveSlackGroupRequireMention, Nn as getChatChannelMeta, Yt as resolveSlackGroupToolPolicy, _t as listWhatsAppDirectoryPeersFromConfig, cn as buildSlackThreadingToolContext, dt as listDiscordDirectoryPeersFromConfig, ft as listSlackDirectoryGroupsFromConfig, gt as listWhatsAppDirectoryGroupsFromConfig, ht as listTelegramDirectoryPeersFromConfig, mt as listTelegramDirectoryGroupsFromConfig, pt as listSlackDirectoryPeersFromConfig, ut as listDiscordDirectoryGroupsFromConfig, vt as looksLikeSlackTargetId, yt as normalizeSlackMessagingTarget } from "./runtime-CgOkQe0w.js";
+import { Jt as resolveSlackGroupRequireMention, Nn as getChatChannelMeta, Yt as resolveSlackGroupToolPolicy, _t as listWhatsAppDirectoryPeersFromConfig, cn as buildSlackThreadingToolContext, dt as listDiscordDirectoryPeersFromConfig, ft as listSlackDirectoryGroupsFromConfig, gt as listWhatsAppDirectoryGroupsFromConfig, ht as listTelegramDirectoryPeersFromConfig, mt as listTelegramDirectoryGroupsFromConfig, pt as listSlackDirectoryPeersFromConfig, ut as listDiscordDirectoryGroupsFromConfig, vt as looksLikeSlackTargetId, yt as normalizeSlackMessagingTarget } from "./runtime-Dy420wBu.js";
 import "./subsystem-DBPNbQDQ.js";
 import "./globals-B_jjtAje.js";
 import "./paths-BEmvSyOV.js";
 import { d as normalizeE164 } from "./utils-CYk9EKoq.js";
-import { h as SlackConfigSchema } from "./config-CYDETqcF.js";
+import { h as SlackConfigSchema } from "./config-Bt5GhnA-.js";
 import "./agent-scope-BbgPlhtw.js";
 import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-HSJ2KQTc.js";
 import "./accounts-RHZyaB73.js";
 import { a as resolveSlackReplyToMode, i as resolveSlackAccount, n as listSlackAccountIds, r as resolveDefaultSlackAccountId, t as listEnabledSlackAccounts } from "./accounts-CuqIKU8X.js";
 import "./logger-BbFvCoKk.js";
 import "./exec-DQ8j4Fm3.js";
-import "./accounts-CeRNo5Ae.js";
+import "./accounts-DzWlKv1U.js";
 import "./redact-Bm8vu_ju.js";
 import "./github-copilot-token-CUK__1s1.js";
 import "./retry-DstNBhDW.js";
 import "./paths-CTZ2RS_E.js";
-import { a as deleteAccountFromConfigSection, c as formatPairingApproveHint, n as applyAccountNameToChannelSection, o as setAccountEnabledInConfigSection, r as migrateBaseNameToDefaultAccount, s as buildChannelConfigSchema, t as PAIRING_APPROVED_MESSAGE, u as emptyPluginConfigSchema } from "./pairing-message-e4D4eBDA.js";
-import { A as resolveDefaultGroupPolicy, D as formatDocsLink, _ as setAccountGroupPolicyForChannel, a as noteChannelLookupFailure, b as setOnboardingChannelEnabled, d as promptLegacyChannelAllowFrom, g as resolveOnboardingAccountId, h as resolveAccountIdForConfigure, j as resolveOpenProviderRuntimeGroupPolicy, k as resolveAllowlistProviderRuntimeGroupPolicy, l as patchChannelConfigForAccount, o as noteChannelLookupSummary, s as parseMentionOrPrefixedId, w as buildTokenChannelStatusSummary, y as setLegacyChannelDmPolicyWithAllowFrom } from "./helpers-BuEwju6y.js";
-import "./optional-runtime-dependency-CbYjAC2b.js";
-import "./image-ops-C66HPeAZ.js";
-import { d as readStringParam, n as createActionGate, s as readNumberParam } from "./common-CWvfeiX0.js";
-import "./channel-core-BOkyXXLa.js";
-import { t as configureChannelAccessWithAllowlist } from "./channel-access-configure-B6IAGlE0.js";
-import { t as parseSlackBlocksInput } from "./blocks-input-Dcitfh7h.js";
+import { a as deleteAccountFromConfigSection, c as formatPairingApproveHint, n as applyAccountNameToChannelSection, o as setAccountEnabledInConfigSection, r as migrateBaseNameToDefaultAccount, s as buildChannelConfigSchema, t as PAIRING_APPROVED_MESSAGE, u as emptyPluginConfigSchema } from "./pairing-message-ClqhfCUk.js";
+import { A as resolveDefaultGroupPolicy, D as formatDocsLink, _ as setAccountGroupPolicyForChannel, a as noteChannelLookupFailure, b as setOnboardingChannelEnabled, d as promptLegacyChannelAllowFrom, g as resolveOnboardingAccountId, h as resolveAccountIdForConfigure, j as resolveOpenProviderRuntimeGroupPolicy, k as resolveAllowlistProviderRuntimeGroupPolicy, l as patchChannelConfigForAccount, o as noteChannelLookupSummary, s as parseMentionOrPrefixedId, w as buildTokenChannelStatusSummary, y as setLegacyChannelDmPolicyWithAllowFrom } from "./helpers-CluGKuIV.js";
+import "./optional-runtime-dependency-DKmk9PZa.js";
+import "./image-ops-CUaLtIFj.js";
+import { d as readStringParam, n as createActionGate, s as readNumberParam } from "./common-CbfckC19.js";
+import "./channel-core-CFRs8LPy.js";
+import { t as configureChannelAccessWithAllowlist } from "./channel-access-configure-CD4QDN5E.js";
+import { t as parseSlackBlocksInput } from "./blocks-input-Bg-8S2pl.js";
 
 //#region src/slack/message-actions.ts
 function listSlackMessageActions(cfg) {
@@ -314,7 +314,7 @@ async function promptSlackAllowFrom(params) {
 		parseId,
 		invalidWithoutTokenNote: "Slack token missing; use user ids (or mention form) only.",
 		resolveEntries: async ({ token, entries }) => {
-			const { resolveSlackUserAllowlist } = await import("./resolve-users-BTvjQuui.js").then((n) => n.n);
+			const { resolveSlackUserAllowlist } = await import("./resolve-users-Cxb5wpAQ.js").then((n) => n.n);
 			return resolveSlackUserAllowlist({
 				token,
 				entries
@@ -461,7 +461,7 @@ const slackOnboardingAdapter = {
 					accountId: slackAccountId
 				});
 				if (accountWithTokens.botToken && entries.length > 0) try {
-					const { resolveSlackChannelAllowlist } = await import("./resolve-channels-zEnvugag.js").then((n) => n.n);
+					const { resolveSlackChannelAllowlist } = await import("./resolve-channels-CwB2_019.js");
 					const resolved = await resolveSlackChannelAllowlist({
 						token: accountWithTokens.botToken,
 						entries

package/dist/plugin-sdk/{ssrf-BZG8Ztod.js → ssrf-fG4UHKBw.js}

@@ -1,8 +1,186 @@
-import { d as parseLooseIpAddress, i as isCanonicalDottedDecimalIPv4, n as isBlockedSpecialUseIpv4Address, o as isIpv4Address, r as isBlockedSpecialUseIpv6Address, s as isLegacyIpv4Literal, t as extractEmbeddedIpv4FromIpv6, u as parseCanonicalIpAddress } from "./ip-C70a-YlD.js";
 import { Agent } from "undici";
 import { lookup } from "node:dns";
 import { lookup as lookup$1 } from "node:dns/promises";
+import ipaddr from "ipaddr.js";
 
+//#region src/shared/net/ip.ts
+const BLOCKED_IPV4_SPECIAL_USE_RANGES = new Set([
+	"unspecified",
+	"broadcast",
+	"multicast",
+	"linkLocal",
+	"loopback",
+	"carrierGradeNat",
+	"private",
+	"reserved"
+]);
+const BLOCKED_IPV6_SPECIAL_USE_RANGES = new Set([
+	"unspecified",
+	"loopback",
+	"linkLocal",
+	"uniqueLocal",
+	"multicast"
+]);
+const RFC2544_BENCHMARK_PREFIX = [ipaddr.IPv4.parse("198.18.0.0"), 15];
+const EMBEDDED_IPV4_SENTINEL_RULES = [
+	{
+		matches: (parts) => parts[0] === 0 && parts[1] === 0 && parts[2] === 0 && parts[3] === 0 && parts[4] === 0 && parts[5] === 0,
+		toHextets: (parts) => [parts[6], parts[7]]
+	},
+	{
+		matches: (parts) => parts[0] === 100 && parts[1] === 65435 && parts[2] === 1 && parts[3] === 0 && parts[4] === 0 && parts[5] === 0,
+		toHextets: (parts) => [parts[6], parts[7]]
+	},
+	{
+		matches: (parts) => parts[0] === 8194,
+		toHextets: (parts) => [parts[1], parts[2]]
+	},
+	{
+		matches: (parts) => parts[0] === 8193 && parts[1] === 0,
+		toHextets: (parts) => [parts[6] ^ 65535, parts[7] ^ 65535]
+	},
+	{
+		matches: (parts) => (parts[4] & 64767) === 0 && parts[5] === 24318,
+		toHextets: (parts) => [parts[6], parts[7]]
+	}
+];
+function stripIpv6Brackets(value) {
+	if (value.startsWith("[") && value.endsWith("]")) return value.slice(1, -1);
+	return value;
+}
+function isNumericIpv4LiteralPart(value) {
+	return /^[0-9]+$/.test(value) || /^0x[0-9a-f]+$/i.test(value);
+}
+function parseIpv6WithEmbeddedIpv4(raw) {
+	if (!raw.includes(":") || !raw.includes(".")) return;
+	const match = /^(.*:)([^:%]+(?:\.[^:%]+){3})(%[0-9A-Za-z]+)?$/i.exec(raw);
+	if (!match) return;
+	const [, prefix, embeddedIpv4, zoneSuffix = ""] = match;
+	if (!ipaddr.IPv4.isValidFourPartDecimal(embeddedIpv4)) return;
+	const octets = embeddedIpv4.split(".").map((part) => Number.parseInt(part, 10));
+	const normalizedIpv6 = `${prefix}${(octets[0] << 8 | octets[1]).toString(16)}:${(octets[2] << 8 | octets[3]).toString(16)}${zoneSuffix}`;
+	if (!ipaddr.IPv6.isValid(normalizedIpv6)) return;
+	return ipaddr.IPv6.parse(normalizedIpv6);
+}
+function isIpv4Address(address) {
+	return address.kind() === "ipv4";
+}
+function isIpv6Address(address) {
+	return address.kind() === "ipv6";
+}
+function normalizeIpv4MappedAddress(address) {
+	if (!isIpv6Address(address)) return address;
+	if (!address.isIPv4MappedAddress()) return address;
+	return address.toIPv4Address();
+}
+function parseCanonicalIpAddress(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized) return;
+	if (ipaddr.IPv4.isValid(normalized)) {
+		if (!ipaddr.IPv4.isValidFourPartDecimal(normalized)) return;
+		return ipaddr.IPv4.parse(normalized);
+	}
+	if (ipaddr.IPv6.isValid(normalized)) return ipaddr.IPv6.parse(normalized);
+	return parseIpv6WithEmbeddedIpv4(normalized);
+}
+function parseLooseIpAddress(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized) return;
+	if (ipaddr.isValid(normalized)) return ipaddr.parse(normalized);
+	return parseIpv6WithEmbeddedIpv4(normalized);
+}
+function normalizeIpAddress(raw) {
+	const parsed = parseCanonicalIpAddress(raw);
+	if (!parsed) return;
+	return normalizeIpv4MappedAddress(parsed).toString().toLowerCase();
+}
+function isCanonicalDottedDecimalIPv4(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return false;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized) return false;
+	return ipaddr.IPv4.isValidFourPartDecimal(normalized);
+}
+function isLegacyIpv4Literal(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return false;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized || normalized.includes(":")) return false;
+	if (isCanonicalDottedDecimalIPv4(normalized)) return false;
+	const parts = normalized.split(".");
+	if (parts.length === 0 || parts.length > 4) return false;
+	if (parts.some((part) => part.length === 0)) return false;
+	if (!parts.every((part) => isNumericIpv4LiteralPart(part))) return false;
+	return true;
+}
+function isLoopbackIpAddress(raw) {
+	const parsed = parseCanonicalIpAddress(raw);
+	if (!parsed) return false;
+	return normalizeIpv4MappedAddress(parsed).range() === "loopback";
+}
+function isBlockedSpecialUseIpv6Address(address) {
+	if (BLOCKED_IPV6_SPECIAL_USE_RANGES.has(address.range())) return true;
+	return (address.parts[0] & 65472) === 65216;
+}
+function isBlockedSpecialUseIpv4Address(address, options = {}) {
+	const inRfc2544BenchmarkRange = address.match(RFC2544_BENCHMARK_PREFIX);
+	if (inRfc2544BenchmarkRange && options.allowRfc2544BenchmarkRange === true) return false;
+	return BLOCKED_IPV4_SPECIAL_USE_RANGES.has(address.range()) || inRfc2544BenchmarkRange;
+}
+function decodeIpv4FromHextets(high, low) {
+	const octets = [
+		high >>> 8 & 255,
+		high & 255,
+		low >>> 8 & 255,
+		low & 255
+	];
+	return ipaddr.IPv4.parse(octets.join("."));
+}
+function extractEmbeddedIpv4FromIpv6(address) {
+	if (address.isIPv4MappedAddress()) return address.toIPv4Address();
+	if (address.range() === "rfc6145") return decodeIpv4FromHextets(address.parts[6], address.parts[7]);
+	if (address.range() === "rfc6052") return decodeIpv4FromHextets(address.parts[6], address.parts[7]);
+	for (const rule of EMBEDDED_IPV4_SENTINEL_RULES) {
+		if (!rule.matches(address.parts)) continue;
+		const [high, low] = rule.toHextets(address.parts);
+		return decodeIpv4FromHextets(high, low);
+	}
+}
+function isIpInCidr(ip, cidr) {
+	const normalizedIp = parseCanonicalIpAddress(ip);
+	if (!normalizedIp) return false;
+	const candidate = cidr.trim();
+	if (!candidate) return false;
+	const comparableIp = normalizeIpv4MappedAddress(normalizedIp);
+	if (!candidate.includes("/")) {
+		const exact = parseCanonicalIpAddress(candidate);
+		if (!exact) return false;
+		const comparableExact = normalizeIpv4MappedAddress(exact);
+		return comparableIp.kind() === comparableExact.kind() && comparableIp.toString() === comparableExact.toString();
+	}
+	let parsedCidr;
+	try {
+		parsedCidr = ipaddr.parseCIDR(candidate);
+	} catch {
+		return false;
+	}
+	const [baseAddress, prefixLength] = parsedCidr;
+	const comparableBase = normalizeIpv4MappedAddress(baseAddress);
+	if (comparableIp.kind() !== comparableBase.kind()) return false;
+	try {
+		if (isIpv4Address(comparableIp) && isIpv4Address(comparableBase)) return comparableIp.match([comparableBase, prefixLength]);
+		if (isIpv6Address(comparableIp) && isIpv6Address(comparableBase)) return comparableIp.match([comparableBase, prefixLength]);
+		return false;
+	} catch {
+		return false;
+	}
+}
+
+//#endregion
 //#region src/infra/net/hostname.ts
 function normalizeHostname(hostname) {
 	const normalized = hostname.trim().toLowerCase().replace(/\.$/, "");
@@ -206,4 +384,4 @@ async function closeDispatcher(dispatcher) {
 }
 
 //#endregion
-export { isBlockedHostnameOrIp as a, normalizeHostname as c, isBlockedHostname as i, closeDispatcher as n, isPrivateIpAddress as o, createPinnedDispatcher as r, resolvePinnedHostnameWithPolicy as s, SsrFBlockedError as t };
+export { isBlockedHostnameOrIp as a, normalizeHostname as c, normalizeIpAddress as d, isBlockedHostname as i, isIpInCidr as l, closeDispatcher as n, isPrivateIpAddress as o, createPinnedDispatcher as r, resolvePinnedHostnameWithPolicy as s, SsrFBlockedError as t, isLoopbackIpAddress as u };

package/dist/plugin-sdk/{sticker-cache-D3oDiu2u.js → sticker-cache-BvGEUas3.js}

@@ -1,7 +1,7 @@
-import { M as findModelInCatalog, N as loadModelCatalog, P as modelSupportsVision, qt as resolveAutoImageModel } from "./config-schema-CQ4EVcQG.js";
+import { Et as resolveAutoImageModel, M as findModelInCatalog, N as loadModelCatalog, P as modelSupportsVision } from "./config-schema-B9DKr6J5.js";
 import { i as logVerbose } from "./globals-B_jjtAje.js";
 import { t as STATE_DIR } from "./paths-BEmvSyOV.js";
-import { Yt as resolveDefaultModelForAgent, cn as resolveApiKeyForProvider } from "./config-CYDETqcF.js";
+import { Yt as resolveDefaultModelForAgent, cn as resolveApiKeyForProvider } from "./config-Bt5GhnA-.js";
 import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-CUK__1s1.js";
 import path from "node:path";
 import fs from "node:fs/promises";
@@ -147,7 +147,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs.readFile(imagePath);
-		const { describeImageWithModel } = await import("./config-schema-CQ4EVcQG.js").then((n) => n.on);
+		const { describeImageWithModel } = await import("./config-schema-B9DKr6J5.js").then((n) => n.zt);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",

package/dist/plugin-sdk/{tables-DS5L7lCA.js → tables-CjlQJV4r.js}

@@ -1,5 +1,5 @@
-import { l as markdownToIRWithMeta } from "./media-ByLQbEwJ.js";
-import { t as renderMarkdownWithMarkers } from "./render-Bwu_WxwA.js";
+import { l as markdownToIRWithMeta } from "./media-CA8sTmVE.js";
+import { t as renderMarkdownWithMarkers } from "./render-e7fENCYH.js";
 
 //#region src/markdown/tables.ts
 const MARKDOWN_STYLE_MARKERS = {

package/dist/plugin-sdk/{device-pairing-D2Yq-_U6.js → tailscale-status-DwpNdO3Z.js}

@@ -1,6 +1,37 @@
-import { a as resolvePairingPaths, c as writeJsonAtomic, i as pruneExpiredPending, o as createAsyncLock, r as rejectPendingPairingRequest, s as readJsonFile, t as generatePairingToken } from "./pairing-token-N_6Jbt1L.js";
+import { t as runCommandWithTimeout } from "./exec-DQ8j4Fm3.js";
+import { a as resolvePairingPaths, c as writeJsonAtomic, i as pruneExpiredPending, o as createAsyncLock, r as rejectPendingPairingRequest, s as readJsonFile, t as generatePairingToken } from "./pairing-token-Cs3BRKc0.js";
 import { randomUUID } from "node:crypto";
 
+//#region src/plugin-sdk/run-command.ts
+async function runPluginCommandWithTimeout(options) {
+	const [command] = options.argv;
+	if (!command) return {
+		code: 1,
+		stdout: "",
+		stderr: "command is required"
+	};
+	try {
+		const result = await runCommandWithTimeout(options.argv, {
+			timeoutMs: options.timeoutMs,
+			cwd: options.cwd,
+			env: options.env
+		});
+		const timedOut = result.termination === "timeout" || result.termination === "no-output-timeout";
+		return {
+			code: result.code ?? 1,
+			stdout: result.stdout,
+			stderr: timedOut ? result.stderr || `command timed out after ${options.timeoutMs}ms` : result.stderr
+		};
+	} catch (error) {
+		return {
+			code: 1,
+			stdout: "",
+			stderr: error instanceof Error ? error.message : String(error)
+		};
+	}
+}
+
+//#endregion
 //#region src/shared/device-auth.ts
 function normalizeDeviceAuthRole(role) {
 	return role.trim();
@@ -153,4 +184,75 @@ async function clearDevicePairing(deviceId, baseDir) {
 }
 
 //#endregion
-export { normalizeDeviceAuthRole as a, rejectDevicePairing as i, clearDevicePairing as n, normalizeDeviceAuthScopes as o, listDevicePairing as r, approveDevicePairing as t };
+//#region src/shared/gateway-bind-url.ts
+function resolveGatewayBindUrl(params) {
+	const bind = params.bind ?? "loopback";
+	if (bind === "custom") {
+		const host = params.customBindHost?.trim();
+		if (host) return {
+			url: `${params.scheme}://${host}:${params.port}`,
+			source: "gateway.bind=custom"
+		};
+		return { error: "gateway.bind=custom requires gateway.customBindHost." };
+	}
+	if (bind === "tailnet") {
+		const host = params.pickTailnetHost();
+		if (host) return {
+			url: `${params.scheme}://${host}:${params.port}`,
+			source: "gateway.bind=tailnet"
+		};
+		return { error: "gateway.bind=tailnet set, but no tailnet IP was found." };
+	}
+	if (bind === "lan") {
+		const host = params.pickLanHost();
+		if (host) return {
+			url: `${params.scheme}://${host}:${params.port}`,
+			source: "gateway.bind=lan"
+		};
+		return { error: "gateway.bind=lan set, but no private LAN IP was found." };
+	}
+	return null;
+}
+
+//#endregion
+//#region src/shared/tailscale-status.ts
+const TAILSCALE_STATUS_COMMAND_CANDIDATES = ["tailscale", "/Applications/Tailscale.app/Contents/MacOS/Tailscale"];
+function parsePossiblyNoisyJsonObject(raw) {
+	const start = raw.indexOf("{");
+	const end = raw.lastIndexOf("}");
+	if (start === -1 || end <= start) return {};
+	try {
+		return JSON.parse(raw.slice(start, end + 1));
+	} catch {
+		return {};
+	}
+}
+function extractTailnetHostFromStatusJson(raw) {
+	const parsed = parsePossiblyNoisyJsonObject(raw);
+	const self = typeof parsed.Self === "object" && parsed.Self !== null ? parsed.Self : void 0;
+	const dns = typeof self?.DNSName === "string" ? self.DNSName : void 0;
+	if (dns && dns.length > 0) return dns.replace(/\.$/, "");
+	const ips = Array.isArray(self?.TailscaleIPs) ? self.TailscaleIPs : [];
+	return ips.length > 0 ? ips[0] ?? null : null;
+}
+async function resolveTailnetHostWithRunner(runCommandWithTimeout) {
+	if (!runCommandWithTimeout) return null;
+	for (const candidate of TAILSCALE_STATUS_COMMAND_CANDIDATES) try {
+		const result = await runCommandWithTimeout([
+			candidate,
+			"status",
+			"--json"
+		], { timeoutMs: 5e3 });
+		if (result.code !== 0) continue;
+		const raw = result.stdout.trim();
+		if (!raw) continue;
+		const host = extractTailnetHostFromStatusJson(raw);
+		if (host) return host;
+	} catch {
+		continue;
+	}
+	return null;
+}
+
+//#endregion
+export { listDevicePairing as a, normalizeDeviceAuthScopes as c, clearDevicePairing as i, runPluginCommandWithTimeout as l, resolveGatewayBindUrl as n, rejectDevicePairing as o, approveDevicePairing as r, normalizeDeviceAuthRole as s, resolveTailnetHostWithRunner as t };

package/dist/plugin-sdk/{targets-D6lUomJc.js → targets-QfP164Dh.js}

@@ -1,5 +1,5 @@
-import { Ct as ensureTargetId, Et as requireTargetKind, St as buildMessagingTarget, Tt as parseTargetPrefixes, wt as parseTargetMention } from "./runtime-CgOkQe0w.js";
-import { n as listDiscordDirectoryPeersLive } from "./directory-live-DatqU-eS.js";
+import { Ct as ensureTargetId, Et as requireTargetKind, St as buildMessagingTarget, Tt as parseTargetPrefixes, wt as parseTargetMention } from "./runtime-Dy420wBu.js";
+import { n as listDiscordDirectoryPeersLive } from "./directory-live-CSuYxdwk.js";
 
 //#region src/discord/targets.ts
 function parseDiscordTarget(raw, options = {}) {

package/dist/plugin-sdk/{telegram-actions-MSFkDn0m.js → telegram-actions-CwYjV6Db.js}

@@ -1,68 +1,64 @@
-import { nr as resolveTelegramInlineButtonsScope, tr as resolveTelegramReactionLevel } from "./config-schema-CQ4EVcQG.js";
-import { an as resolveTelegramToken, en as createTelegramActionGate } from "./runtime-CgOkQe0w.js";
+import { Hr as resolveTelegramReactionLevel, Ur as resolveTelegramInlineButtonsScope } from "./config-schema-B9DKr6J5.js";
+import { an as resolveTelegramToken, en as createTelegramActionGate } from "./runtime-Dy420wBu.js";
 import "./subsystem-DBPNbQDQ.js";
 import "./globals-B_jjtAje.js";
 import "./paths-BEmvSyOV.js";
 import "./utils-CYk9EKoq.js";
-import "./config-CYDETqcF.js";
+import "./config-Bt5GhnA-.js";
 import "./agent-scope-BbgPlhtw.js";
 import "./accounts-RHZyaB73.js";
 import "./accounts-CuqIKU8X.js";
 import "./logger-BbFvCoKk.js";
 import "./exec-DQ8j4Fm3.js";
-import "./accounts-CeRNo5Ae.js";
-import "./allow-list-BYeKk0Sy.js";
+import "./accounts-DzWlKv1U.js";
+import "./allow-list-DyAxs4yw.js";
 import "./redact-Bm8vu_ju.js";
 import "./github-copilot-token-CUK__1s1.js";
 import "./retry-DstNBhDW.js";
 import "./paths-CTZ2RS_E.js";
-import "./ip-C70a-YlD.js";
-import "./ssrf-BZG8Ztod.js";
-import "./fetch-guard-BuYrl6q2.js";
-import "./send-Cr-dj6S-.js";
-import "./helpers-BuEwju6y.js";
-import "./wsl-Biw7Mj39.js";
-import "./pairing-store-T3IGoGZg.js";
-import "./chunk-CD76Byie.js";
-import "./tailscale-status-ClsquRGs.js";
-import "./reply-prefix-Bqzm6DC1.js";
-import "./tokens-BvtlOzVP.js";
-import "./device-pairing-D2Yq-_U6.js";
-import "./pairing-token-N_6Jbt1L.js";
-import "./diagnostic-Dfn1iERm.js";
-import "./diagnostic-session-state-HO94DMou.js";
-import { i as resolveTelegramTargetChatType } from "./targets-BDvvnlph.js";
-import "./optional-runtime-dependency-CbYjAC2b.js";
-import "./image-ops-C66HPeAZ.js";
-import "./wallet-status-f0HagNeO.js";
-import "./pi-model-discovery-DvAG_Png.js";
-import "./runtime-dependency-DvdRNMvs.js";
-import "./ws-CocpWGhl.js";
-import "./path-alias-guards-Dg3gU-MA.js";
-import "./fs-safe-BG-VzVkL.js";
-import "./markdown-tables-DmQ7oXOm.js";
-import "./media-ByLQbEwJ.js";
-import "./send-eTxqFFsw.js";
-import "./outbound-attachment-DmZmUqFP.js";
-import "./fetch-Cu-ahkie.js";
-import "./thread-bindings.state-C0stmvNk.js";
-import "./memory-search-C3C0bD2H.js";
-import "./manager-Bvpq49BI.js";
-import "./query-expansion-Zr9qQixm.js";
-import { a as jsonResult, c as readReactionParams, d as readStringParam, s as readNumberParam, u as readStringOrNumberParam } from "./common-CWvfeiX0.js";
-import "./commands-registry-DgS55tNj.js";
-import "./skill-commands-Rm5by9S8.js";
-import "./directory-live-DatqU-eS.js";
-import "./targets-D6lUomJc.js";
-import "./sandbox-paths-lj7_EVuA.js";
-import "./resolve-route-DJN-SUSt.js";
-import "./render-Bwu_WxwA.js";
-import "./tables-DS5L7lCA.js";
-import "./shared-clhhbWN3.js";
-import "./retry-policy-CY1qY6d7.js";
-import { a as reactMessageTelegram, i as editMessageTelegram, n as createForumTopicTelegram, o as sendMessageTelegram, r as deleteMessageTelegram, s as sendStickerTelegram } from "./send-BG3RWyil.js";
-import "./proxy-7xs_rsnV.js";
-import { a as searchStickers, r as getCacheStats } from "./sticker-cache-D3oDiu2u.js";
+import "./ssrf-fG4UHKBw.js";
+import "./fetch-guard-CeG6u6ld.js";
+import "./send-DPJIIYAs.js";
+import "./helpers-CluGKuIV.js";
+import "./wsl-B_ojyEtC.js";
+import "./pairing-store-B01mCSct.js";
+import "./chunk-B8EZkwiT.js";
+import "./tailscale-status-DwpNdO3Z.js";
+import "./reply-prefix-ClpxvL_w.js";
+import "./tokens-BbnqfVuu.js";
+import "./pairing-token-Cs3BRKc0.js";
+import "./diagnostic-DLL_zekv.js";
+import "./diagnostic-session-state-DqgfGYqZ.js";
+import { i as resolveTelegramTargetChatType } from "./targets-CoMJ1ry1.js";
+import "./optional-runtime-dependency-DKmk9PZa.js";
+import "./image-ops-CUaLtIFj.js";
+import "./memory-search-VFll-AIb.js";
+import "./manager-oHAvZCT3.js";
+import "./query-expansion-CAI2kKLQ.js";
+import { a as jsonResult, c as readReactionParams, d as readStringParam, s as readNumberParam, u as readStringOrNumberParam } from "./common-CbfckC19.js";
+import "./commands-registry-BfEa4tFA.js";
+import "./runtime-dependency-CIw9t7-k.js";
+import "./path-alias-guards-BJZD5JMJ.js";
+import "./fs-safe-xBqok6yR.js";
+import "./markdown-tables-Mkx7k92Y.js";
+import "./media-CA8sTmVE.js";
+import "./send-J4JWKP62.js";
+import "./outbound-attachment-DdVkqUzE.js";
+import "./fetch-BtmoPIlf.js";
+import "./thread-bindings.state-BgYWFjNF.js";
+import "./skill-commands-B7wx9ax8.js";
+import "./sandbox-paths-w64tYl0v.js";
+import "./directory-live-CSuYxdwk.js";
+import "./targets-QfP164Dh.js";
+import "./pi-model-discovery-Buz0JC1Y.js";
+import "./resolve-route-CkNIKKEW.js";
+import "./render-e7fENCYH.js";
+import "./tables-CjlQJV4r.js";
+import "./shared-CBgp_GBw.js";
+import "./retry-policy-9ybIh4Fq.js";
+import { a as reactMessageTelegram, i as editMessageTelegram, n as createForumTopicTelegram, o as sendMessageTelegram, r as deleteMessageTelegram, s as sendStickerTelegram } from "./send-Dqes9tdU.js";
+import "./proxy-DWpYcsvR.js";
+import { a as searchStickers, r as getCacheStats } from "./sticker-cache-BvGEUas3.js";
 
 //#region src/agents/tools/telegram-actions.ts
 const TELEGRAM_BUTTON_STYLES = [

package/dist/plugin-sdk/telegram.d.ts

@@ -1,9 +1,9 @@
 import { n as DEFAULT_ACCOUNT_ID, r as normalizeAccountId } from "./session-key--_1zVBRB.js";
-import { At as FasedAgentConfig, F as ChannelAccountSnapshot, Gt as TelegramAccountConfig, J as ChannelMessageActionAdapter, it as ChannelStatusIssue, n as ChannelPlugin, r as ChannelOnboardingAdapter, u as ChannelMessageActionName, ut as getChatChannelMeta } from "./types.plugin-BiHPaDTF.js";
-import { Bt as resolveDefaultGroupPolicy, Cn as readStringParam, Gt as listSlackDirectoryGroupsFromConfig, Jt as listTelegramDirectoryPeersFromConfig, Kt as listSlackDirectoryPeersFromConfig, Lt as TelegramProbe, Ut as listDiscordDirectoryGroupsFromConfig, Vt as resolveOpenProviderRuntimeGroupPolicy, Wt as listDiscordDirectoryPeersFromConfig, Xt as listWhatsAppDirectoryPeersFromConfig, Yt as listWhatsAppDirectoryGroupsFromConfig, _ as FasedAgentPluginApi, qt as listTelegramDirectoryGroupsFromConfig, t as PluginRuntime, yn as createActionGate, zt as resolveAllowlistProviderRuntimeGroupPolicy } from "./types-DVTIpopt.js";
-import { D as normalizeE164 } from "./types-DKvBJHfH.js";
-import { a as buildChannelConfigSchema, c as emptyPluginConfigSchema, i as setAccountEnabledInConfigSection, n as formatPairingApproveHint, o as applyAccountNameToChannelSection, r as deleteAccountFromConfigSection, s as migrateBaseNameToDefaultAccount, t as PAIRING_APPROVED_MESSAGE } from "./pairing-message-D0-UWGFJ.js";
-import { _ as buildTokenChannelStatusSummary, d as resolveTelegramGroupRequireMention, f as resolveTelegramGroupToolPolicy } from "./group-mentions-BxDgHCgj.js";
+import { At as FasedAgentConfig, F as ChannelAccountSnapshot, J as ChannelMessageActionAdapter, Kt as TelegramAccountConfig, it as ChannelStatusIssue, n as ChannelPlugin, r as ChannelOnboardingAdapter, u as ChannelMessageActionName, ut as getChatChannelMeta } from "./types.plugin-_fbu40Re.js";
+import { Bt as resolveDefaultGroupPolicy, Cn as readStringParam, Gt as listSlackDirectoryGroupsFromConfig, Jt as listTelegramDirectoryPeersFromConfig, Kt as listSlackDirectoryPeersFromConfig, Lt as TelegramProbe, Ut as listDiscordDirectoryGroupsFromConfig, Vt as resolveOpenProviderRuntimeGroupPolicy, Wt as listDiscordDirectoryPeersFromConfig, Xt as listWhatsAppDirectoryPeersFromConfig, Yt as listWhatsAppDirectoryGroupsFromConfig, _ as FasedAgentPluginApi, qt as listTelegramDirectoryGroupsFromConfig, t as PluginRuntime, yn as createActionGate, zt as resolveAllowlistProviderRuntimeGroupPolicy } from "./types-BYDL6dQj.js";
+import { D as normalizeE164 } from "./types-CLIvQaVg.js";
+import { a as buildChannelConfigSchema, c as emptyPluginConfigSchema, i as setAccountEnabledInConfigSection, n as formatPairingApproveHint, o as applyAccountNameToChannelSection, r as deleteAccountFromConfigSection, s as migrateBaseNameToDefaultAccount, t as PAIRING_APPROVED_MESSAGE } from "./pairing-message-BMkkS038.js";
+import { _ as buildTokenChannelStatusSummary, d as resolveTelegramGroupRequireMention, f as resolveTelegramGroupToolPolicy } from "./group-mentions-BHRff6j8.js";
 import { s as TelegramConfigSchema } from "./zod-schema.providers-core-CIzCjXH9.js";
 
 //#region src/telegram/accounts.d.ts

package/dist/plugin-sdk/telegram.js

@@ -1,28 +1,28 @@
-import { Nn as getChatChannelMeta, Xt as resolveTelegramGroupRequireMention, Zt as resolveTelegramGroupToolPolicy, _t as listWhatsAppDirectoryPeersFromConfig, dt as listDiscordDirectoryPeersFromConfig, ft as listSlackDirectoryGroupsFromConfig, gt as listWhatsAppDirectoryGroupsFromConfig, ht as listTelegramDirectoryPeersFromConfig, in as resolveTelegramAccount, mt as listTelegramDirectoryGroupsFromConfig, nn as listTelegramAccountIds, pt as listSlackDirectoryPeersFromConfig, rn as resolveDefaultTelegramAccountId, ut as listDiscordDirectoryGroupsFromConfig } from "./runtime-CgOkQe0w.js";
+import { Nn as getChatChannelMeta, Xt as resolveTelegramGroupRequireMention, Zt as resolveTelegramGroupToolPolicy, _t as listWhatsAppDirectoryPeersFromConfig, dt as listDiscordDirectoryPeersFromConfig, ft as listSlackDirectoryGroupsFromConfig, gt as listWhatsAppDirectoryGroupsFromConfig, ht as listTelegramDirectoryPeersFromConfig, in as resolveTelegramAccount, mt as listTelegramDirectoryGroupsFromConfig, nn as listTelegramAccountIds, pt as listSlackDirectoryPeersFromConfig, rn as resolveDefaultTelegramAccountId, ut as listDiscordDirectoryGroupsFromConfig } from "./runtime-Dy420wBu.js";
 import "./subsystem-DBPNbQDQ.js";
 import "./globals-B_jjtAje.js";
 import "./paths-BEmvSyOV.js";
 import { c as isRecord, d as normalizeE164 } from "./utils-CYk9EKoq.js";
-import { g as TelegramConfigSchema, kr as formatCliCommand } from "./config-CYDETqcF.js";
+import { _a as formatCliCommand, g as TelegramConfigSchema } from "./config-Bt5GhnA-.js";
 import "./agent-scope-BbgPlhtw.js";
 import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-HSJ2KQTc.js";
 import "./accounts-RHZyaB73.js";
 import "./accounts-CuqIKU8X.js";
 import "./logger-BbFvCoKk.js";
 import "./exec-DQ8j4Fm3.js";
-import "./accounts-CeRNo5Ae.js";
+import "./accounts-DzWlKv1U.js";
 import "./redact-Bm8vu_ju.js";
 import "./github-copilot-token-CUK__1s1.js";
 import "./retry-DstNBhDW.js";
 import "./paths-CTZ2RS_E.js";
-import { a as deleteAccountFromConfigSection, c as formatPairingApproveHint, n as applyAccountNameToChannelSection, o as setAccountEnabledInConfigSection, r as migrateBaseNameToDefaultAccount, s as buildChannelConfigSchema, t as PAIRING_APPROVED_MESSAGE, u as emptyPluginConfigSchema } from "./pairing-message-e4D4eBDA.js";
-import { A as resolveDefaultGroupPolicy, D as formatDocsLink, b as setOnboardingChannelEnabled, g as resolveOnboardingAccountId, h as resolveAccountIdForConfigure, j as resolveOpenProviderRuntimeGroupPolicy, k as resolveAllowlistProviderRuntimeGroupPolicy, l as patchChannelConfigForAccount, m as promptSingleChannelToken, n as applySingleTokenPromptResult, p as promptResolvedAllowFrom, v as setChannelDmPolicyWithAllowFrom, w as buildTokenChannelStatusSummary, x as splitOnboardingEntries } from "./helpers-BuEwju6y.js";
-import { n as normalizeTelegramLookupTarget, r as parseTelegramTarget } from "./targets-BDvvnlph.js";
-import "./optional-runtime-dependency-CbYjAC2b.js";
-import "./image-ops-C66HPeAZ.js";
-import { d as readStringParam, n as createActionGate } from "./common-CWvfeiX0.js";
-import { i as resolveEnabledConfiguredAccountId, n as asString, t as appendMatchMetadata } from "./shared-clhhbWN3.js";
-import "./channel-core-BOkyXXLa.js";
+import { a as deleteAccountFromConfigSection, c as formatPairingApproveHint, n as applyAccountNameToChannelSection, o as setAccountEnabledInConfigSection, r as migrateBaseNameToDefaultAccount, s as buildChannelConfigSchema, t as PAIRING_APPROVED_MESSAGE, u as emptyPluginConfigSchema } from "./pairing-message-ClqhfCUk.js";
+import { A as resolveDefaultGroupPolicy, D as formatDocsLink, b as setOnboardingChannelEnabled, g as resolveOnboardingAccountId, h as resolveAccountIdForConfigure, j as resolveOpenProviderRuntimeGroupPolicy, k as resolveAllowlistProviderRuntimeGroupPolicy, l as patchChannelConfigForAccount, m as promptSingleChannelToken, n as applySingleTokenPromptResult, p as promptResolvedAllowFrom, v as setChannelDmPolicyWithAllowFrom, w as buildTokenChannelStatusSummary, x as splitOnboardingEntries } from "./helpers-CluGKuIV.js";
+import { n as normalizeTelegramLookupTarget, r as parseTelegramTarget } from "./targets-CoMJ1ry1.js";
+import "./optional-runtime-dependency-DKmk9PZa.js";
+import "./image-ops-CUaLtIFj.js";
+import { d as readStringParam, n as createActionGate } from "./common-CbfckC19.js";
+import { i as resolveEnabledConfiguredAccountId, n as asString, t as appendMatchMetadata } from "./shared-CBgp_GBw.js";
+import "./channel-core-CFRs8LPy.js";
 
 //#region src/channels/telegram/api.ts
 async function fetchTelegramChatId(params) {

package/dist/plugin-sdk/{thread-bindings.lifecycle-Ry6Vcgw3.js → thread-bindings.lifecycle-DU4iX_Jr.js}

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { i as logVerbose } from "./globals-B_jjtAje.js";
 import { l as resolveAgentIdFromSessionKey, p as normalizeAccountId } from "./session-key-HSJ2KQTc.js";
-import { A as DEFAULT_THREAD_BINDING_MAX_AGE_MS, C as resolveThreadBindingMaxAgeMs, D as shouldPersistBindingMutations, E as shouldDefaultPersist, F as resolveThreadBindingIntroText, H as unregisterSessionBindingAdapter, I as resolveThreadBindingThreadName, L as SYSTEM_MARK, M as THREAD_BINDINGS_SWEEP_INTERVAL_MS, O as toReusableWebhookKey, P as resolveThreadBindingFarewellText, S as resolveThreadBindingMaxAgeExpiresAt, T as setBindingRecord, V as registerSessionBindingAdapter, W as readAcpSessionEntry, _ as removeBindingRecord, a as THREAD_BINDING_TOUCH_PERSIST_MIN_INTERVAL_MS, b as resolveThreadBindingIdleTimeoutMs, d as normalizeTargetKind, f as normalizeThreadBindingDurationMs, g as rememberThreadBindingToken, h as rememberReusableWebhook, i as REUSABLE_WEBHOOKS_BY_ACCOUNT_CHANNEL, j as DISCORD_UNKNOWN_CHANNEL_ERROR_CODE, k as DEFAULT_THREAD_BINDING_IDLE_TIMEOUT_MS, l as getThreadBindingToken, m as rememberRecentUnboundWebhookEcho, n as MANAGERS_BY_ACCOUNT_ID, o as ensureBindingsLoaded, p as normalizeThreadId, r as PERSIST_BY_ACCOUNT_ID, s as forgetThreadBindingToken, t as BINDINGS_BY_THREAD_ID, v as resolveBindingIdsForSession, w as saveBindingsToDisk, x as resolveThreadBindingInactivityExpiresAt, y as resolveBindingRecordKey } from "./thread-bindings.state-C0stmvNk.js";
-import { t as parseDiscordTarget } from "./targets-D6lUomJc.js";
-import { b as sendWebhookMessageDiscord, g as sendMessageDiscord, nt as createDiscordRestClient, x as createThreadDiscord } from "./send-2ITqny2W.js";
+import { A as DEFAULT_THREAD_BINDING_MAX_AGE_MS, C as resolveThreadBindingMaxAgeMs, D as shouldPersistBindingMutations, E as shouldDefaultPersist, F as resolveThreadBindingIntroText, H as unregisterSessionBindingAdapter, I as resolveThreadBindingThreadName, L as SYSTEM_MARK, M as THREAD_BINDINGS_SWEEP_INTERVAL_MS, O as toReusableWebhookKey, P as resolveThreadBindingFarewellText, S as resolveThreadBindingMaxAgeExpiresAt, T as setBindingRecord, V as registerSessionBindingAdapter, W as readAcpSessionEntry, _ as removeBindingRecord, a as THREAD_BINDING_TOUCH_PERSIST_MIN_INTERVAL_MS, b as resolveThreadBindingIdleTimeoutMs, d as normalizeTargetKind, f as normalizeThreadBindingDurationMs, g as rememberThreadBindingToken, h as rememberReusableWebhook, i as REUSABLE_WEBHOOKS_BY_ACCOUNT_CHANNEL, j as DISCORD_UNKNOWN_CHANNEL_ERROR_CODE, k as DEFAULT_THREAD_BINDING_IDLE_TIMEOUT_MS, l as getThreadBindingToken, m as rememberRecentUnboundWebhookEcho, n as MANAGERS_BY_ACCOUNT_ID, o as ensureBindingsLoaded, p as normalizeThreadId, r as PERSIST_BY_ACCOUNT_ID, s as forgetThreadBindingToken, t as BINDINGS_BY_THREAD_ID, v as resolveBindingIdsForSession, w as saveBindingsToDisk, x as resolveThreadBindingInactivityExpiresAt, y as resolveBindingRecordKey } from "./thread-bindings.state-BgYWFjNF.js";
+import { t as parseDiscordTarget } from "./targets-QfP164Dh.js";
+import { b as sendWebhookMessageDiscord, g as sendMessageDiscord, nt as createDiscordRestClient, x as createThreadDiscord } from "./send-BQUtCJFW.js";
 import { ChannelType, Routes } from "discord-api-types/v10";
 
 //#region src/discord/monitor/thread-bindings.persona.ts

package/dist/plugin-sdk/{thread-bindings.state-C0stmvNk.js → thread-bindings.state-BgYWFjNF.js}

@@ -1,6 +1,6 @@
-import { $ as mergeSessionEntry, T as updateSessionStore, x as loadSessionStore } from "./runtime-CgOkQe0w.js";
+import { $ as mergeSessionEntry, T as updateSessionStore, x as loadSessionStore } from "./runtime-Dy420wBu.js";
 import { s as resolveStateDir } from "./paths-BEmvSyOV.js";
-import { n as loadConfig } from "./config-CYDETqcF.js";
+import { n as loadConfig } from "./config-Bt5GhnA-.js";
 import { S as parseAgentSessionKey, l as resolveAgentIdFromSessionKey, p as normalizeAccountId } from "./session-key-HSJ2KQTc.js";
 import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-CUK__1s1.js";
 import { l as resolveStorePath } from "./paths-CTZ2RS_E.js";

package/dist/plugin-sdk/{tmp-fased-dir-D91GExk4.d.ts → tmp-fased-dir-BdFQvrvw.d.ts}

@@ -1,5 +1,5 @@
-import { At as FasedAgentConfig, l as AgentDefaultsConfig } from "./types.plugin-BiHPaDTF.js";
-import { M as LookupFn, P as SsrFPolicy } from "./types-DKvBJHfH.js";
+import { At as FasedAgentConfig, l as AgentDefaultsConfig } from "./types.plugin-_fbu40Re.js";
+import { M as LookupFn, P as SsrFPolicy } from "./types-CLIvQaVg.js";
 
 //#region src/agents/agent-scope.d.ts
 type AgentEntry = NonNullable<NonNullable<FasedAgentConfig["agents"]>["list"]>[number];