@fased/fased 0.1.55 → 0.1.57

package/dist/plugin-sdk/{runtime-dependency-DvdRNMvs.js → runtime-dependency-DlqVSsSs.js}

@@ -1,12 +1,11 @@
 import { t as createSubsystemLogger } from "./subsystem-DBPNbQDQ.js";
 import { w as resolvePreferredFasedAgentTmpDir } from "./globals-B_jjtAje.js";
 import { t as CONFIG_DIR } from "./utils-CYk9EKoq.js";
-import { br as isErrno, n as loadConfig } from "./config-CYDETqcF.js";
-import { F as isNotFoundPathError, I as isPathInside } from "./agent-scope-BbgPlhtw.js";
-import { s as resolvePinnedHostnameWithPolicy } from "./ssrf-BZG8Ztod.js";
-import { t as importOptionalRuntimeDependency } from "./optional-runtime-dependency-CbYjAC2b.js";
-import { n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString } from "./ws-CocpWGhl.js";
-import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-BG-VzVkL.js";
+import { n as loadConfig, ua as isErrno } from "./config-Dbxj_jUP.js";
+import { I as isNotFoundPathError, L as isPathInside } from "./agent-scope-CCjfjKoO.js";
+import { d as normalizeIpAddress, l as isIpInCidr, s as resolvePinnedHostnameWithPolicy, u as isLoopbackIpAddress } from "./ssrf-fG4UHKBw.js";
+import { t as importOptionalRuntimeDependency } from "./optional-runtime-dependency-BlTVkcAg.js";
+import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-g4g7GT02.js";
 import path from "node:path";
 import fs from "node:fs";
 import os from "node:os";
@@ -14,9 +13,118 @@ import fs$1 from "node:fs/promises";
 import { execFileSync, spawn } from "node:child_process";
 import { createHmac } from "node:crypto";
 import { createServer } from "node:http";
+import WebSocket$1, { WebSocketServer } from "ws";
+import { Buffer as Buffer$1 } from "node:buffer";
 import net from "node:net";
-import WebSocket, { WebSocketServer } from "ws";
 
+//#region src/infra/ws.ts
+function rawDataToString(data, encoding = "utf8") {
+	if (typeof data === "string") return data;
+	if (Buffer$1.isBuffer(data)) return data.toString(encoding);
+	if (Array.isArray(data)) return Buffer$1.concat(data).toString(encoding);
+	if (data instanceof ArrayBuffer) return Buffer$1.from(data).toString(encoding);
+	return Buffer$1.from(String(data)).toString(encoding);
+}
+
+//#endregion
+//#region src/gateway/net.ts
+function isLoopbackAddress(ip) {
+	return isLoopbackIpAddress(ip);
+}
+function normalizeIp(ip) {
+	return normalizeIpAddress(ip);
+}
+function stripOptionalPort(ip) {
+	if (ip.startsWith("[")) {
+		const end = ip.indexOf("]");
+		if (end !== -1) return ip.slice(1, end);
+	}
+	if (net.isIP(ip)) return ip;
+	const lastColon = ip.lastIndexOf(":");
+	if (lastColon > -1 && ip.includes(".") && ip.indexOf(":") === lastColon) {
+		const candidate = ip.slice(0, lastColon);
+		if (net.isIP(candidate) === 4) return candidate;
+	}
+	return ip;
+}
+function parseIpLiteral(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return;
+	const normalized = normalizeIp(stripOptionalPort(trimmed));
+	if (!normalized || net.isIP(normalized) === 0) return;
+	return normalized;
+}
+function parseRealIp(realIp) {
+	return parseIpLiteral(realIp);
+}
+function resolveForwardedClientIp(params) {
+	const { forwardedFor, trustedProxies } = params;
+	if (!trustedProxies?.length) return;
+	const forwardedChain = [];
+	for (const entry of forwardedFor?.split(",") ?? []) {
+		const normalized = parseIpLiteral(entry);
+		if (normalized) forwardedChain.push(normalized);
+	}
+	if (forwardedChain.length === 0) return;
+	for (let index = forwardedChain.length - 1; index >= 0; index -= 1) {
+		const hop = forwardedChain[index];
+		if (!isTrustedProxyAddress(hop, trustedProxies)) return hop;
+	}
+}
+function isTrustedProxyAddress(ip, trustedProxies) {
+	const normalized = normalizeIp(ip);
+	if (!normalized || !trustedProxies || trustedProxies.length === 0) return false;
+	return trustedProxies.some((proxy) => {
+		const candidate = proxy.trim();
+		if (!candidate) return false;
+		return isIpInCidr(normalized, candidate);
+	});
+}
+function resolveClientIp(params) {
+	const remote = normalizeIp(params.remoteAddr);
+	if (!remote) return;
+	if (!isTrustedProxyAddress(remote, params.trustedProxies)) return remote;
+	const forwardedIp = resolveForwardedClientIp({
+		forwardedFor: params.forwardedFor,
+		trustedProxies: params.trustedProxies
+	});
+	if (forwardedIp) return forwardedIp;
+	if (params.allowRealIpFallback) return parseRealIp(params.realIp);
+}
+/**
+* Check if a hostname or IP refers to the local machine.
+* Handles: localhost, 127.x.x.x, ::1, [::1], ::ffff:127.x.x.x
+* Note: 0.0.0.0 and :: are NOT loopback - they bind to all interfaces.
+*/
+function isLoopbackHost(host) {
+	if (!host) return false;
+	const h = host.trim().toLowerCase();
+	if (h === "localhost") return true;
+	return isLoopbackAddress(h.startsWith("[") && h.endsWith("]") ? h.slice(1, -1) : h);
+}
+/**
+* Security check for WebSocket URLs (CWE-319: Cleartext Transmission of Sensitive Information).
+*
+* Returns true if the URL is secure for transmitting data:
+* - wss:// (TLS) is always secure
+* - ws:// is only secure for loopback addresses (localhost, 127.x.x.x, ::1)
+*
+* All other ws:// URLs are considered insecure because both credentials
+* AND chat/conversation data would be exposed to network interception.
+*/
+function isSecureWebSocketUrl(url) {
+	let parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		return false;
+	}
+	if (parsed.protocol === "wss:") return true;
+	if (parsed.protocol !== "ws:") return false;
+	return isLoopbackHost(parsed.hostname);
+}
+
+//#endregion
 //#region src/browser/constants.ts
 const DEFAULT_FASED_BROWSER_ENABLED = true;
 const DEFAULT_BROWSER_EVALUATE_ENABLED = true;
@@ -167,7 +275,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 		let extensionWs = null;
 		const cdpClients = /* @__PURE__ */ new Set();
 		const connectedTargets = /* @__PURE__ */ new Map();
-		const extensionConnected = () => extensionWs?.readyState === WebSocket.OPEN;
+		const extensionConnected = () => extensionWs?.readyState === WebSocket$1.OPEN;
 		let extensionDisconnectCleanupTimer = null;
 		const extensionReconnectWaiters = /* @__PURE__ */ new Set();
 		const flushExtensionReconnectWaiters = (connected) => {
@@ -218,7 +326,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 		let nextExtensionId = 1;
 		const sendToExtension = async (payload) => {
 			const ws = extensionWs;
-			if (!ws || ws.readyState !== WebSocket.OPEN) throw new Error("Chrome extension not connected");
+			if (!ws || ws.readyState !== WebSocket$1.OPEN) throw new Error("Chrome extension not connected");
 			ws.send(JSON.stringify(payload));
 			return await new Promise((resolve, reject) => {
 				const timer = setTimeout(() => {
@@ -235,12 +343,12 @@ async function ensureChromeExtensionRelayServer(opts) {
 		const broadcastToCdpClients = (evt) => {
 			const msg = JSON.stringify(evt);
 			for (const ws of cdpClients) {
-				if (ws.readyState !== WebSocket.OPEN) continue;
+				if (ws.readyState !== WebSocket$1.OPEN) continue;
 				ws.send(msg);
 			}
 		};
 		const sendResponseToCdp = (ws, res) => {
-			if (ws.readyState !== WebSocket.OPEN) return;
+			if (ws.readyState !== WebSocket$1.OPEN) return;
 			ws.send(JSON.stringify(res));
 		};
 		const ensureTargetEventsForClient = (ws, mode) => {
@@ -450,7 +558,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 					rejectUpgrade(socket, 401, "Unauthorized");
 					return;
 				}
-				if (extensionWs && extensionWs.readyState !== WebSocket.OPEN) {
+				if (extensionWs && extensionWs.readyState !== WebSocket$1.OPEN) {
 					try {
 						extensionWs.terminate();
 					} catch {}
@@ -487,7 +595,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 			clearExtensionDisconnectCleanupTimer();
 			flushExtensionReconnectWaiters(true);
 			const ping = setInterval(() => {
-				if (ws.readyState !== WebSocket.OPEN) return;
+				if (ws.readyState !== WebSocket$1.OPEN) return;
 				ws.send(JSON.stringify({ method: "ping" }));
 			}, 5e3);
 			ws.on("message", (data) => {
@@ -829,7 +937,7 @@ async function fetchOk(url, timeoutMs = 1500, init) {
 }
 async function withCdpSocket(wsUrl, fn, opts) {
 	const headers = getHeadersWithAuth(wsUrl, opts?.headers ?? {});
-	const ws = new WebSocket(wsUrl, {
+	const ws = new WebSocket$1(wsUrl, {
 		handshakeTimeout: typeof opts?.handshakeTimeoutMs === "number" && Number.isFinite(opts.handshakeTimeoutMs) ? Math.max(1, Math.floor(opts.handshakeTimeoutMs)) : 5e3,
 		...Object.keys(headers).length ? { headers } : {}
 	});
@@ -1755,7 +1863,7 @@ async function getChromeWebSocketUrl(cdpUrl, timeoutMs = 500) {
 async function canOpenWebSocket(wsUrl, timeoutMs = 800) {
 	return await new Promise((resolve) => {
 		const headers = getHeadersWithAuth(wsUrl);
-		const ws = new WebSocket(wsUrl, {
+		const ws = new WebSocket$1(wsUrl, {
 			handshakeTimeout: timeoutMs,
 			...Object.keys(headers).length ? { headers } : {}
 		});
@@ -2107,4 +2215,4 @@ async function loadLinkedom() {
 }
 
 //#endregion
-export { fetchJson as A, DEFAULT_BROWSER_EVALUATE_ENABLED as B, normalizeCdpWsUrl as C, assertBrowserNavigationResultAllowed as D, assertBrowserNavigationAllowed as E, stopChromeExtensionRelayServer as F, DEFAULT_FASED_BROWSER_ENABLED as H, DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH as I, DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS as L, getHeadersWithAuth as M, withCdpSocket as N, withBrowserNavigationPolicy as O, ensureChromeExtensionRelayServer as P, DEFAULT_AI_SNAPSHOT_MAX_CHARS as R, formatAriaSnapshot as S, InvalidBrowserNavigationUrlError as T, DEFAULT_FASED_BROWSER_PROFILE_NAME as U, DEFAULT_FASED_BROWSER_COLOR as V, stopFasedAgentChrome as _, DEFAULT_TRACE_DIR as a, captureScreenshot as b, resolveStrictExistingPathsWithinRoot as c, normalizeBrowserFormField as d, getChromeWebSocketUrl as f, resolveFasedAgentUserDataDir as g, launchFasedAgentChrome as h, DEFAULT_DOWNLOAD_DIR as i, fetchOk as j, appendCdpPath as k, resolveWritablePathWithinRoot as l, isChromeReachable as m, loadPlaywrightCore as n, DEFAULT_UPLOAD_DIR as o, isChromeCdpReady as p, loadReadability as r, resolveExistingPathsWithinRoot as s, loadLinkedom as t, DEFAULT_FILL_FIELD_TYPE as u, resolveBrowserExecutableForPlatform as v, snapshotAria as w, createTargetViaCdp as x, resolveLsofCommandSync as y, DEFAULT_BROWSER_DEFAULT_PROFILE_NAME as z };
+export { fetchJson as A, DEFAULT_BROWSER_EVALUATE_ENABLED as B, normalizeCdpWsUrl as C, assertBrowserNavigationResultAllowed as D, assertBrowserNavigationAllowed as E, stopChromeExtensionRelayServer as F, isLoopbackHost as G, DEFAULT_FASED_BROWSER_ENABLED as H, DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH as I, resolveClientIp as J, isSecureWebSocketUrl as K, DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS as L, getHeadersWithAuth as M, withCdpSocket as N, withBrowserNavigationPolicy as O, ensureChromeExtensionRelayServer as P, DEFAULT_AI_SNAPSHOT_MAX_CHARS as R, formatAriaSnapshot as S, InvalidBrowserNavigationUrlError as T, DEFAULT_FASED_BROWSER_PROFILE_NAME as U, DEFAULT_FASED_BROWSER_COLOR as V, isLoopbackAddress as W, rawDataToString as X, resolveForwardedClientIp as Y, stopFasedAgentChrome as _, DEFAULT_TRACE_DIR as a, captureScreenshot as b, resolveStrictExistingPathsWithinRoot as c, normalizeBrowserFormField as d, getChromeWebSocketUrl as f, resolveFasedAgentUserDataDir as g, launchFasedAgentChrome as h, DEFAULT_DOWNLOAD_DIR as i, fetchOk as j, appendCdpPath as k, resolveWritablePathWithinRoot as l, isChromeReachable as m, loadPlaywrightCore as n, DEFAULT_UPLOAD_DIR as o, isChromeCdpReady as p, isTrustedProxyAddress as q, loadReadability as r, resolveExistingPathsWithinRoot as s, loadLinkedom as t, DEFAULT_FILL_FIELD_TYPE as u, resolveBrowserExecutableForPlatform as v, snapshotAria as w, createTargetViaCdp as x, resolveLsofCommandSync as y, DEFAULT_BROWSER_DEFAULT_PROFILE_NAME as z };

package/dist/plugin-sdk/{runtime-CgOkQe0w.js → runtime-nVJl3PlS.js}

@@ -3,15 +3,15 @@ import { c as CHANNEL_IDS, d as normalizeChannelKey, f as normalizeChatChannelId
 import { i as logVerbose } from "./globals-B_jjtAje.js";
 import { s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-BEmvSyOV.js";
 import { c as isRecord$1, d as normalizeE164, h as resolveUserPath, o as escapeRegExp } from "./utils-CYk9EKoq.js";
-import { Fr as normalizePluginsConfig, G as isAvatarDataUrl, H as parseDurationMs, Ht as inferUniqueProviderFromConfiguredModels, Jt as resolveConfiguredModelRef, K as isAvatarHttpUrl, Kt as normalizeProviderId, Ln as resolveProcessScopedMap, Pn as resolveFasedAgentDir, Pr as isPluginRuntimeSessionReadAllowed, Rn as isPidAlive, Rr as resolvePluginAdminRpcActionGrant, U as parseByteSize, W as AVATAR_MAX_BYTES, X as resolveAvatarMime, Xt as resolveExplicitConfiguredModelRef, Y as isWorkspaceRelativeAvatarPath, Yt as resolveDefaultModelForAgent, dr as DEFAULT_MODEL, fr as DEFAULT_PROVIDER, in as resolveImplicitProviders, jr as isTruthyEnvValue, n as loadConfig, nn as normalizeProviders, q as isPathWithinRoot, qt as parseModelRef, rn as resolveImplicitCopilotProvider, ur as DEFAULT_CONTEXT_TOKENS } from "./config-CYDETqcF.js";
-import { A as openBoundaryFileSync, G as normalizeHyphenSlug, W as normalizeAtHashSlug, l as resolveAgentWorkspaceDir, u as resolveDefaultAgentId } from "./agent-scope-BbgPlhtw.js";
+import { $i as DEFAULT_CONTEXT_TOKENS, G as isAvatarDataUrl, H as parseDurationMs, Ht as inferUniqueProviderFromConfiguredModels, Jt as resolveConfiguredModelRef, K as isAvatarHttpUrl, Kt as normalizeProviderId, Ln as resolveProcessScopedMap, Oa as resolvePluginAdminRpcActionGrant, Pn as resolveFasedAgentDir, Rn as isPidAlive, Ta as normalizePluginsConfig, U as parseByteSize, W as AVATAR_MAX_BYTES, X as resolveAvatarMime, Xt as resolveExplicitConfiguredModelRef, Y as isWorkspaceRelativeAvatarPath, Yt as resolveDefaultModelForAgent, ea as DEFAULT_MODEL, in as resolveImplicitProviders, n as loadConfig, nn as normalizeProviders, q as isPathWithinRoot, qt as parseModelRef, rn as resolveImplicitCopilotProvider, ta as DEFAULT_PROVIDER, wa as isPluginRuntimeSessionReadAllowed, xa as isTruthyEnvValue } from "./config-Dbxj_jUP.js";
+import { G as normalizeAtHashSlug, K as normalizeHyphenSlug, j as openBoundaryFileSync, l as resolveAgentWorkspaceDir, u as resolveDefaultAgentId } from "./agent-scope-CCjfjKoO.js";
 import { t as normalizeChatType } from "./chat-type-C0osVllE.js";
 import { n as resolveConversationLabel } from "./conversation-label-BoVqak2R.js";
 import { n as resolveAccountEntry, t as createAccountListHelpers } from "./account-helpers-Bdfws46K.js";
 import { S as parseAgentSessionKey, c as normalizeMainKey, f as DEFAULT_ACCOUNT_ID, l as resolveAgentIdFromSessionKey, m as normalizeOptionalAccountId, p as normalizeAccountId$1, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, y as isCronRunSessionKey } from "./session-key-HSJ2KQTc.js";
 import { a as resolveDiscordAccount, o as createAccountActionGate } from "./accounts-RHZyaB73.js";
 import { a as resolveSlackReplyToMode, i as resolveSlackAccount } from "./accounts-CuqIKU8X.js";
-import { i as resolveWhatsAppAccount } from "./accounts-CeRNo5Ae.js";
+import { i as resolveWhatsAppAccount } from "./accounts-CmMwe9Dt.js";
 import { a as resolveSessionTranscriptPath, c as resolveSessionTranscriptsDirForAgent, i as resolveSessionFilePathOptions, l as resolveStorePath, n as resolveDefaultSessionStorePath, o as resolveSessionTranscriptPathInDir, r as resolveSessionFilePath, s as resolveSessionTranscriptsDir, t as SAFE_SESSION_ID_RE, u as validateSessionId } from "./paths-CTZ2RS_E.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-BJQWUdmU.js";
 import path from "node:path";
@@ -5411,7 +5411,7 @@ async function loadContextCache() {
 		await ensureFasedModelsJson(cfg);
 	} catch {}
 	try {
-		const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-runtime-NjkUgjIf.js");
+		const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-runtime-DwNdFaz-.js");
 		const agentDir = resolveFasedAgentDir();
 		const modelRegistry = discoverModels(discoverAuthStorage(agentDir), agentDir);
 		applyDiscoveredContextWindows({

package/dist/plugin-sdk/{sandbox-paths-lj7_EVuA.js → sandbox-paths-Dx2lUqCu.js}

@@ -1,6 +1,6 @@
 import { w as resolvePreferredFasedAgentTmpDir } from "./globals-B_jjtAje.js";
-import { I as isPathInside } from "./agent-scope-BbgPlhtw.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-Dg3gU-MA.js";
+import { L as isPathInside } from "./agent-scope-CCjfjKoO.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-DjgDArrp.js";
 import path from "node:path";
 import os from "node:os";
 import { URL, fileURLToPath } from "node:url";

package/dist/plugin-sdk/sat-runtime.d.ts

@@ -1,6 +1,6 @@
-import { At as FasedAgentConfig, Bt as WalletRuntimeKind, Ht as WalletToolAccessMode, It as WalletAuthMode, Lt as WalletChain, Rt as WalletExecutionMode, Vt as WalletRuntimeMode, _n as GatewayClientName, gn as GatewayClientMode, s as loadConfig, zt as WalletProviderId } from "./types.plugin-BiHPaDTF.js";
-import { A as createSubsystemLogger, V as resolveGatewayPort, g as ErrorShape, i as OperatorScope, n as AuthProfileStore, u as RespondFn } from "./types-DKvBJHfH.js";
-import { a as resolveAgentDir, i as resolveAgentConfig, n as fetchWithSsrFGuard$1, o as resolveAgentEffectiveModelPrimary, s as resolveDefaultAgentId, t as resolvePreferredFasedAgentTmpDir } from "./tmp-fased-dir-D91GExk4.js";
+import { At as FasedAgentConfig, Bt as WalletProviderId, Ht as WalletRuntimeMode, Lt as WalletAuthMode, Rt as WalletChain, Ut as WalletToolAccessMode, Vt as WalletRuntimeKind, _n as GatewayClientMode, s as loadConfig, vn as GatewayClientName, zt as WalletExecutionMode } from "./types.plugin-_fbu40Re.js";
+import { A as createSubsystemLogger, V as resolveGatewayPort, g as ErrorShape, i as OperatorScope, n as AuthProfileStore, u as RespondFn } from "./types-dWZFX1fk.js";
+import { a as resolveAgentDir, i as resolveAgentConfig, n as fetchWithSsrFGuard$1, o as resolveAgentEffectiveModelPrimary, s as resolveDefaultAgentId, t as resolvePreferredFasedAgentTmpDir } from "./tmp-fased-dir-Ouj58axY.js";
 import { Api, Model } from "@mariozechner/pi-ai";
 import { AuthStorage, ModelRegistry } from "@mariozechner/pi-coding-agent";
 import * as _sinclair_typebox0 from "@sinclair/typebox";

package/dist/plugin-sdk/sat-runtime.js

@@ -1,29 +1,63 @@
-import "./runtime-CgOkQe0w.js";
+import { $n as enforceWalletCustodyForAutonomousSend, Ar as loadOrCreateDeviceIdentity, Er as callGatewayScoped, Kn as readWalletStatusSnapshot, Mr as signDevicePayload, Nr as verifyDeviceSignature, Or as ErrorCodes, Sr as tryResolveSatRuntimeIds, _r as SAT_RUNTIME_DEFAULTS, ar as readWalletProviderRegistry, br as resolveSatMintProgramIdFromEnv, cr as callLocalSocketSigner, dr as resolveLocalSignerSocketPath, er as createWalletProviderAdapter, fr as resolveWalletRuntimeConfig, gr as syncSatMainnetRuntimeIds, hr as getSatMainnetSyncStatus, ir as resolveWalletRolePolicyProfile, j as resolveModel, jr as publicKeyRawBase64UrlFromPem, kr as errorShape, lr as probeLocalSocketSignerHealth, mr as buildAttestation, nr as loadWalletProviderSecret, or as resolveWalletUserRole, pr as fetchSolanaWalletAssetsViaRpc, qn as createOrExecuteWalletSend, rr as resolveWalletPolicyConfig, sr as upsertNamedWallet, tr as resolveWalletProviderId, ur as requireLocalSocketSignerPath, vr as resolveSatBondProgramIdFromEnv, xr as resolveSatProgramIdFromEnv, yr as resolveSatMintAddressFromEnv } from "./config-schema-aKPMn6ML.js";
+import "./runtime-nVJl3PlS.js";
 import { t as createSubsystemLogger } from "./subsystem-DBPNbQDQ.js";
 import { w as resolvePreferredFasedAgentTmpDir } from "./globals-B_jjtAje.js";
 import { i as resolveGatewayPort } from "./paths-BEmvSyOV.js";
 import "./utils-CYk9EKoq.js";
-import { Bt as buildModelAliasIndex, Jt as resolveConfiguredModelRef, Yt as resolveDefaultModelForAgent, Zt as resolveModelRefFromString, an as getApiKeyForModel, fr as DEFAULT_PROVIDER, n as loadConfig, sn as requireApiKey } from "./config-CYDETqcF.js";
-import { a as resolveAgentDir, i as resolveAgentConfig, o as resolveAgentEffectiveModelPrimary, u as resolveDefaultAgentId } from "./agent-scope-BbgPlhtw.js";
+import { Bt as buildModelAliasIndex, Jt as resolveConfiguredModelRef, Yt as resolveDefaultModelForAgent, Zt as resolveModelRefFromString, an as getApiKeyForModel, n as loadConfig, sn as requireApiKey, ta as DEFAULT_PROVIDER } from "./config-Dbxj_jUP.js";
+import { a as resolveAgentDir, i as resolveAgentConfig, o as resolveAgentEffectiveModelPrimary, u as resolveDefaultAgentId } from "./agent-scope-CCjfjKoO.js";
 import "./accounts-RHZyaB73.js";
 import "./accounts-CuqIKU8X.js";
 import "./logger-BbFvCoKk.js";
 import "./exec-DQ8j4Fm3.js";
-import "./accounts-CeRNo5Ae.js";
+import "./accounts-CmMwe9Dt.js";
+import "./allow-list-DyAxs4yw.js";
 import "./redact-Bm8vu_ju.js";
 import "./github-copilot-token-CUK__1s1.js";
 import "./retry-DstNBhDW.js";
 import "./paths-CTZ2RS_E.js";
-import "./ip-C70a-YlD.js";
-import "./device-pairing-D2Yq-_U6.js";
-import "./pairing-token-N_6Jbt1L.js";
-import { At as resolveModel, B as resolveWalletUserRole, D as resolveWalletProviderId, Dt as resolveSatMintProgramIdFromEnv, Et as resolveSatMintAddressFromEnv, F as resolveWalletRolePolicyProfile, G as requireLocalSocketSignerPath, J as resolveWalletRuntimeConfig, M as resolveWalletPolicyConfig, O as loadWalletProviderSecret, Ot as resolveSatProgramIdFromEnv, R as readWalletProviderRegistry, St as errorShape, T as createWalletProviderAdapter, Tt as resolveSatBondProgramIdFromEnv, U as callLocalSocketSigner, V as upsertNamedWallet, W as probeLocalSocketSignerHealth, _t as signDevicePayload, at as getSatMainnetSyncStatus, gt as publicKeyRawBase64UrlFromPem, ht as loadOrCreateDeviceIdentity, kt as tryResolveSatRuntimeIds, n as createOrExecuteWalletSend, nt as buildAttestation, ot as syncSatMainnetRuntimeIds, q as resolveLocalSignerSocketPath, t as readWalletStatusSnapshot, tt as fetchSolanaWalletAssetsViaRpc, ut as callGatewayScoped, vt as verifyDeviceSignature, w as enforceWalletCustodyForAutonomousSend, wt as SAT_RUNTIME_DEFAULTS, xt as ErrorCodes } from "./wallet-status-f0HagNeO.js";
-import "./pi-model-discovery-DvAG_Png.js";
-import "./ws-CocpWGhl.js";
+import "./ssrf-fG4UHKBw.js";
+import "./fetch-guard-CeG6u6ld.js";
+import "./send-BHokB4TR.js";
+import "./helpers-CDo2XBSr.js";
+import "./wsl-BtMDzMv5.js";
+import "./pairing-store-uPnLfGgB.js";
+import "./chunk-CF8nvZNj.js";
+import "./tailscale-status-DwpNdO3Z.js";
+import "./reply-prefix-CeVw7Mn2.js";
+import "./tokens-BbnqfVuu.js";
+import "./pairing-token-Cs3BRKc0.js";
+import "./diagnostic-DLL_zekv.js";
+import "./diagnostic-session-state-DqgfGYqZ.js";
+import "./optional-runtime-dependency-BlTVkcAg.js";
+import "./image-ops-DbeBxbn4.js";
+import "./memory-search-DTjIMw8J.js";
+import "./manager-CbiFFLKS.js";
+import "./query-expansion-CAI2kKLQ.js";
+import "./common-Cky4hpqr.js";
+import "./commands-registry-CK4KmMG0.js";
+import "./runtime-dependency-DlqVSsSs.js";
+import "./path-alias-guards-DjgDArrp.js";
+import "./fs-safe-g4g7GT02.js";
+import "./markdown-tables-Bskt9r8i.js";
+import "./media-B3aAg5rh.js";
+import "./send-D3DQOg2a.js";
+import "./outbound-attachment-2RckWqrk.js";
+import "./fetch-BtmoPIlf.js";
+import "./thread-bindings.state-D7xG1GHu.js";
+import "./skill-commands-CmdoKLh_.js";
+import "./sandbox-paths-Dx2lUqCu.js";
+import "./directory-live-CSuYxdwk.js";
+import "./targets-BeGUCGWK.js";
+import "./pi-model-discovery-BpEilAym.js";
+import "./resolve-route-B8fOfihG.js";
+import "./render-e7fENCYH.js";
+import "./tables-EX4Hy-a-.js";
+import "./shared-CBgp_GBw.js";
 
 //#region src/plugin-sdk/sat-runtime.ts
 async function fetchWithSsrFGuard(params) {
-	return (await import("./fetch-guard-BuYrl6q2.js").then((n) => n.n)).fetchWithSsrFGuard(params);
+	return (await import("./fetch-guard-CeG6u6ld.js").then((n) => n.n)).fetchWithSsrFGuard(params);
 }
 
 //#endregion

package/dist/plugin-sdk/{send-2ITqny2W.js → send-BCJ4hi3t.js}

@@ -1,17 +1,17 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { w as resolvePreferredFasedAgentTmpDir } from "./globals-B_jjtAje.js";
-import { n as loadConfig } from "./config-CYDETqcF.js";
+import { n as loadConfig } from "./config-Dbxj_jUP.js";
 import { a as resolveDiscordAccount } from "./accounts-RHZyaB73.js";
 import { t as normalizeDiscordToken } from "./token-D4-H0ByG.js";
-import { c as resolveChunkMode, i as chunkMarkdownTextWithMode } from "./chunk-CD76Byie.js";
-import { _ as maxBytesForKind, l as extensionForMime } from "./image-ops-C66HPeAZ.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-DmQ7oXOm.js";
-import { n as loadWebMedia, r as loadWebMediaRaw } from "./media-ByLQbEwJ.js";
-import { r as resolveDiscordTarget, t as parseDiscordTarget } from "./targets-D6lUomJc.js";
-import { n as normalizePollInput, t as normalizePollDurationHours } from "./polls-DQrR-qT3.js";
-import { t as convertMarkdownTables } from "./tables-DS5L7lCA.js";
-import { n as recordChannelActivity } from "./channel-activity-Cg1xRoc2.js";
-import { t as createDiscordRetryRunner } from "./retry-policy-CY1qY6d7.js";
+import { c as resolveChunkMode, i as chunkMarkdownTextWithMode } from "./chunk-CF8nvZNj.js";
+import { _ as maxBytesForKind, l as extensionForMime } from "./image-ops-DbeBxbn4.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-Bskt9r8i.js";
+import { n as loadWebMedia, r as loadWebMediaRaw } from "./media-B3aAg5rh.js";
+import { r as resolveDiscordTarget, t as parseDiscordTarget } from "./targets-BeGUCGWK.js";
+import { n as normalizePollInput, t as normalizePollDurationHours } from "./polls-DKQXVfJp.js";
+import { t as convertMarkdownTables } from "./tables-EX4Hy-a-.js";
+import { n as recordChannelActivity } from "./channel-activity-DBDMQ3yI.js";
+import { t as createDiscordRetryRunner } from "./retry-policy-B6GQldxB.js";
 import path from "node:path";
 import { promisify } from "node:util";
 import fs from "node:fs/promises";

package/dist/plugin-sdk/{send-Cr-dj6S-.js → send-BHokB4TR.js}

@@ -1,11 +1,11 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { hn as resolveIMessageAccount } from "./runtime-CgOkQe0w.js";
+import { hn as resolveIMessageAccount } from "./runtime-nVJl3PlS.js";
 import { d as normalizeE164, h as resolveUserPath } from "./utils-CYk9EKoq.js";
-import { n as loadConfig } from "./config-CYDETqcF.js";
-import { v as mediaKindFromMime } from "./image-ops-C66HPeAZ.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-DmQ7oXOm.js";
-import { t as resolveOutboundAttachmentFromUrl } from "./outbound-attachment-DmZmUqFP.js";
-import { t as convertMarkdownTables } from "./tables-DS5L7lCA.js";
+import { n as loadConfig } from "./config-Dbxj_jUP.js";
+import { v as mediaKindFromMime } from "./image-ops-DbeBxbn4.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-Bskt9r8i.js";
+import { t as resolveOutboundAttachmentFromUrl } from "./outbound-attachment-2RckWqrk.js";
+import { t as convertMarkdownTables } from "./tables-EX4Hy-a-.js";
 import { spawn } from "node:child_process";
 import { createInterface } from "node:readline";
 

package/dist/plugin-sdk/{send-BAz22RZr.js → send-CPK_HlYW.js}

@@ -1,15 +1,15 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { bt as parseSlackTarget } from "./runtime-CgOkQe0w.js";
+import { bt as parseSlackTarget } from "./runtime-nVJl3PlS.js";
 import { i as logVerbose } from "./globals-B_jjtAje.js";
-import { n as loadConfig } from "./config-CYDETqcF.js";
+import { n as loadConfig } from "./config-Dbxj_jUP.js";
 import { i as resolveSlackAccount, s as resolveSlackBotToken } from "./accounts-CuqIKU8X.js";
-import { c as resolveChunkMode, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit } from "./chunk-CD76Byie.js";
-import { i as isSilentReplyText } from "./tokens-BvtlOzVP.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-DmQ7oXOm.js";
-import { c as markdownToIR, n as loadWebMedia, s as chunkMarkdownIR } from "./media-ByLQbEwJ.js";
-import { t as renderMarkdownWithMarkers } from "./render-Bwu_WxwA.js";
-import { n as validateSlackBlocksArray } from "./blocks-input-Dcitfh7h.js";
-import { n as createSlackWebClient } from "./client-D2N7hqVu.js";
+import { c as resolveChunkMode, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit } from "./chunk-CF8nvZNj.js";
+import { i as isSilentReplyText } from "./tokens-BbnqfVuu.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-Bskt9r8i.js";
+import { c as markdownToIR, n as loadWebMedia, s as chunkMarkdownIR } from "./media-B3aAg5rh.js";
+import { t as renderMarkdownWithMarkers } from "./render-e7fENCYH.js";
+import { n as validateSlackBlocksArray } from "./blocks-input-Bg-8S2pl.js";
+import { n as createSlackWebClient } from "./client-pI228AVT.js";
 
 //#region src/slack/blocks-fallback.ts
 function cleanCandidate(value) {

package/dist/plugin-sdk/{send-eTxqFFsw.js → send-D3DQOg2a.js}

@@ -1,13 +1,13 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { fn as resolveSignalAccount } from "./runtime-CgOkQe0w.js";
-import { n as loadConfig } from "./config-CYDETqcF.js";
+import { fn as resolveSignalAccount } from "./runtime-nVJl3PlS.js";
+import { n as loadConfig } from "./config-Dbxj_jUP.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-l_6RdoMw.js";
-import { n as generateSecureUuid } from "./secure-random-Bl-AVLVb.js";
-import { v as mediaKindFromMime } from "./image-ops-C66HPeAZ.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-DmQ7oXOm.js";
-import { c as markdownToIR, s as chunkMarkdownIR } from "./media-ByLQbEwJ.js";
-import { t as resolveOutboundAttachmentFromUrl } from "./outbound-attachment-DmZmUqFP.js";
-import { t as resolveFetch } from "./fetch-Cu-ahkie.js";
+import { n as generateSecureUuid } from "./secure-random-BIkG-k4s.js";
+import { v as mediaKindFromMime } from "./image-ops-DbeBxbn4.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-Bskt9r8i.js";
+import { c as markdownToIR, s as chunkMarkdownIR } from "./media-B3aAg5rh.js";
+import { t as resolveOutboundAttachmentFromUrl } from "./outbound-attachment-2RckWqrk.js";
+import { t as resolveFetch } from "./fetch-BtmoPIlf.js";
 
 //#region src/signal/format.ts
 function normalizeUrlForComparison(url) {

package/dist/plugin-sdk/{send-BG3RWyil.js → send-hSu1HWms.js}

@@ -1,20 +1,20 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { in as resolveTelegramAccount } from "./runtime-CgOkQe0w.js";
+import { in as resolveTelegramAccount } from "./runtime-nVJl3PlS.js";
 import { t as createSubsystemLogger } from "./subsystem-DBPNbQDQ.js";
 import { i as logVerbose, t as danger } from "./globals-B_jjtAje.js";
-import { _r as extractErrorCode, a as readConfigFileSnapshotForWrite, jr as isTruthyEnvValue, n as loadConfig, s as writeConfigFile, vr as formatErrorMessage, yr as formatUncaughtError } from "./config-CYDETqcF.js";
+import { a as readConfigFileSnapshotForWrite, ca as formatErrorMessage, la as formatUncaughtError, n as loadConfig, s as writeConfigFile, sa as extractErrorCode, xa as isTruthyEnvValue } from "./config-Dbxj_jUP.js";
 import { n as redactSensitiveText } from "./redact-Bm8vu_ju.js";
-import { A as resolveCronStorePath, M as isTelegramVoiceCompatibleAudio, j as saveCronStore, k as loadCronStore, t as isWSL2Sync, u as buildTelegramThreadParams } from "./wsl-Biw7Mj39.js";
-import { n as normalizeTelegramLookupTarget, r as parseTelegramTarget, t as normalizeTelegramChatId } from "./targets-BDvvnlph.js";
-import { p as isGifMedia, v as mediaKindFromMime } from "./image-ops-C66HPeAZ.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-DmQ7oXOm.js";
-import { c as markdownToIR, n as loadWebMedia, s as chunkMarkdownIR } from "./media-ByLQbEwJ.js";
-import { t as resolveFetch } from "./fetch-Cu-ahkie.js";
-import { n as normalizePollInput } from "./polls-DQrR-qT3.js";
-import { t as renderMarkdownWithMarkers } from "./render-Bwu_WxwA.js";
-import { n as recordChannelActivity } from "./channel-activity-Cg1xRoc2.js";
-import { n as createTelegramRetryRunner } from "./retry-policy-CY1qY6d7.js";
-import { t as makeProxyFetch } from "./proxy-7xs_rsnV.js";
+import { M as isTelegramVoiceCompatibleAudio, a as resolveCronStorePath, i as loadCronStore, o as saveCronStore, p as buildTelegramThreadParams, t as isWSL2Sync } from "./wsl-BtMDzMv5.js";
+import { n as normalizeTelegramLookupTarget, r as parseTelegramTarget, t as normalizeTelegramChatId } from "./targets-CoMJ1ry1.js";
+import { p as isGifMedia, v as mediaKindFromMime } from "./image-ops-DbeBxbn4.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-Bskt9r8i.js";
+import { c as markdownToIR, n as loadWebMedia, s as chunkMarkdownIR } from "./media-B3aAg5rh.js";
+import { t as resolveFetch } from "./fetch-BtmoPIlf.js";
+import { n as normalizePollInput } from "./polls-DKQXVfJp.js";
+import { t as renderMarkdownWithMarkers } from "./render-e7fENCYH.js";
+import { n as recordChannelActivity } from "./channel-activity-DBDMQ3yI.js";
+import { n as createTelegramRetryRunner } from "./retry-policy-B6GQldxB.js";
+import { t as makeProxyFetch } from "./proxy-DWpYcsvR.js";
 import process$1 from "node:process";
 import { Agent, setGlobalDispatcher } from "undici";
 import * as dns from "node:dns";

package/dist/plugin-sdk/{session-C8nJmmVE.js → session-DQ4Dr-mf.js}

@@ -1,9 +1,9 @@
 import { _ as toPinoLikeLogger, c as success, p as getChildLogger, t as danger } from "./globals-B_jjtAje.js";
 import { a as ensureDir, h as resolveUserPath } from "./utils-CYk9EKoq.js";
-import { kr as formatCliCommand, pr as VERSION } from "./config-CYDETqcF.js";
-import { f as readCredsJsonRaw, g as resolveWebCredsPath, h as resolveWebCredsBackupPath, m as resolveDefaultWebAuthDir, u as maybeRestoreCredsFromBackup } from "./accounts-CeRNo5Ae.js";
+import { na as VERSION, ya as formatCliCommand } from "./config-Dbxj_jUP.js";
+import { f as readCredsJsonRaw, g as resolveWebCredsPath, h as resolveWebCredsBackupPath, m as resolveDefaultWebAuthDir, u as maybeRestoreCredsFromBackup } from "./accounts-CmMwe9Dt.js";
 import { n as redactSensitiveText } from "./redact-Bm8vu_ju.js";
-import { n as redactSensitiveUrlLikeString } from "./redact-sensitive-url-dPvnFFsK.js";
+import { n as redactSensitiveUrlLikeString } from "./redact-sensitive-url-g-ukZjwA.js";
 import fs from "node:fs";
 import { randomUUID } from "node:crypto";
 import { DisconnectReason, fetchLatestBaileysVersion, makeCacheableSignalKeyStore, makeWASocket, useMultiFileAuthState } from "@whiskeysockets/baileys";