@noxsoft/anima 2.1.0 → 3.0.1

package/dist/{exec-DJTRaYS6.js → exec-CK8CHr7j.js}

@@ -1,21 +1,21 @@
-import { a as resolveOAuthDir, c as expandHomePrefix, l as resolveEffectiveHomeDir, u as resolveRequiredHomeDir } from "./paths-B-AkG5FD.js";
-import { C as warn, O as getLogger, _ as info, g as danger, n as defaultRuntime, t as createSubsystemLogger, v as logVerbose, x as shouldLogVerbose, y as logVerboseConsole } from "./subsystem-BlEuMJjX.js";
+import { a as resolveOAuthDir, c as expandHomePrefix, l as resolveEffectiveHomeDir, u as resolveRequiredHomeDir } from "./paths-D2eokayo.js";
+import { C as warn, O as getLogger, _ as info, g as danger, n as defaultRuntime, t as createSubsystemLogger, v as logVerbose, x as shouldLogVerbose, y as logVerboseConsole } from "./subsystem-CJTCKTwb.js";
 import os from "node:os";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 
 //#region src/utils.ts
 async function ensureDir(dir) {
-	await fs.promises.mkdir(dir, { recursive: true });
+	await fsSync.promises.mkdir(dir, { recursive: true });
 }
 /**
 * Check if a file or directory exists at the given path.
 */
 async function pathExists(targetPath) {
 	try {
-		await fs.promises.access(targetPath);
+		await fsSync.promises.access(targetPath);
 		return true;
 	} catch {
 		return false;
@@ -105,7 +105,7 @@ function readLidReverseMapping(lid, opts) {
 	for (const dir of mappingDirs) {
 		const mappingPath = path.join(dir, mappingFilename);
 		try {
-			const data = fs.readFileSync(mappingPath, "utf8");
+			const data = fsSync.readFileSync(mappingPath, "utf8");
 			const phone = JSON.parse(data);
 			if (phone === null || phone === void 0) continue;
 			return normalizeE164(String(phone));
@@ -189,7 +189,7 @@ function resolveConfigDir(env = process.env, homedir = os.homedir) {
 	if (override) return resolveUserPath(override);
 	const newDir = path.join(resolveRequiredHomeDir(env, homedir), ".anima");
 	try {
-		if (fs.existsSync(newDir)) return newDir;
+		if (fsSync.existsSync(newDir)) return newDir;
 	} catch {}
 	return newDir;
 }

package/dist/{exec-approvals-cli-C5OuptCV.js → exec-approvals-cli-CAwe3fFV.js}

@@ -2,22 +2,22 @@ import "./paths-zhVksOvm.js";
 import { B as theme, u as defaultRuntime, z as isRich } from "./subsystem-BaJ-PqmA.js";
 import "./utils-RdHkpqQp.js";
 import "./exec-Bsq6vlwp.js";
-import "./agent-scope-kT_pK2eJ.js";
-import "./model-selection-MwLHFnAb.js";
-import "./config-Bda-8Rdh.js";
+import "./agent-scope-vpVhWds3.js";
+import "./model-selection-C2dz3AhV.js";
+import "./config-9JRRXykP.js";
 import "./boolean-Wzu0-e0P.js";
 import "./env-CYcXAarB.js";
 import "./shell-env-SbFYz02H.js";
 import "./manifest-registry-DLouWVJe.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-BbkwF58_.js";
-import "./client-oEG5cM5Q.js";
-import { n as callGateway } from "./call-CItRp_pr.js";
+import "./client-BM5PkIwQ.js";
+import { n as callGateway } from "./call-C0Yk2qNb.js";
 import { p as saveExecApprovals, s as readExecApprovalsSnapshot } from "./exec-approvals-BTNqVQK0.js";
 import { t as resolveNodeIdFromCandidates } from "./node-match-DzFfQgQe.js";
 import { n as formatTimeAgo } from "./format-relative-C57Jb4Zw.js";
 import { t as formatDocsLink } from "./links-NgE0SEVZ.js";
 import { n as withProgress } from "./progress-gdB4V88Q.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-CeSf5jMa.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-elmeRwyu.js";
 import "./systemd-IDjybnbO.js";
 import "./service-H_0E0nOX.js";
 import { t as renderTable } from "./table-BDer4ZEZ.js";

package/dist/{exec-approvals-cli-BWeKuHMf.js → exec-approvals-cli-COqsRheN.js}

@@ -1,20 +1,20 @@
 import { M as theme, h as defaultRuntime, j as isRich } from "./entry.js";
 import "./utils-DwcweD55.js";
 import "./exec-DRQWu5Xi.js";
-import "./agent-scope-CuAaArMB.js";
-import "./model-selection-BjcyTJyU.js";
+import "./agent-scope-M302b8FW.js";
+import "./model-selection-DJcZ82uR.js";
 import "./manifest-registry-BHcAJo9u.js";
-import "./config-CaE6v09P.js";
+import "./config-6zE4ZkSF.js";
 import "./shell-env-DAw9qXji.js";
 import "./client-BsSB9O8y.js";
-import { n as callGateway } from "./call-DxImJH07.js";
+import { n as callGateway } from "./call-LugHQWOF.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-6Ln4eFyX.js";
 import { p as saveExecApprovals, s as readExecApprovalsSnapshot } from "./exec-approvals-DMaHTLs_.js";
 import { t as resolveNodeIdFromCandidates } from "./node-match-BY3skIXR.js";
 import { n as formatTimeAgo } from "./format-relative-CBDSicUs.js";
 import { t as formatDocsLink } from "./links-CyFLSgkY.js";
 import { n as withProgress } from "./progress-DcyA3a5A.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-B30vCjdB.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-2MG1-jz-.js";
 import "./systemd-BEeuI9u0.js";
 import "./service-U3nMjKlR.js";
 import { t as renderTable } from "./table-CliKZeKs.js";

package/dist/extensionAPI.js

@@ -1111,6 +1111,7 @@ async function ensureAgentWorkspace(params) {
 	const heartbeatPath = path.join(dir, DEFAULT_HEARTBEAT_FILENAME);
 	const bootstrapPath = path.join(dir, DEFAULT_BOOTSTRAP_FILENAME);
 	const statePath = resolveWorkspaceStatePath(dir);
+	const shouldSeedBootstrap = params?.seedBootstrapOnFirstRun !== false;
 	const isBrandNewWorkspace = await (async () => {
 		const paths = [
 			agentsPath,
@@ -1154,7 +1155,8 @@ async function ensureAgentWorkspace(params) {
 	let bootstrapExists = await fileExists(bootstrapPath);
 	if (!state.bootstrapSeededAt && bootstrapExists) markState({ bootstrapSeededAt: nowIso() });
 	if (!state.onboardingCompletedAt && state.bootstrapSeededAt && !bootstrapExists) markState({ onboardingCompletedAt: nowIso() });
-	if (!state.bootstrapSeededAt && !state.onboardingCompletedAt && !bootstrapExists) {
+	if (!state.bootstrapSeededAt && !state.onboardingCompletedAt && !bootstrapExists) if (!shouldSeedBootstrap) markState({ onboardingCompletedAt: nowIso() });
+	else {
 		const [identityContent, userContent] = await Promise.all([fs$1.readFile(identityPath, "utf-8"), fs$1.readFile(userPath, "utf-8")]);
 		if (identityContent !== identityTemplate || userContent !== userTemplate) markState({ onboardingCompletedAt: nowIso() });
 		else {

package/dist/{frontmatter-DDYuWuK5.js → frontmatter-BBFYH_d2.js}

@@ -1,7 +1,7 @@
 import { t as parseBooleanValue } from "./boolean-BsqeuxE6.js";
 import { n as MANIFEST_KEY, t as LEGACY_MANIFEST_KEYS } from "./legacy-names-lFRgrQ9g.js";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 import JSON5 from "json5";
 import YAML from "yaml";
 
@@ -56,7 +56,7 @@ function hasBinary(bin) {
 	for (const part of parts) for (const ext of extensions) {
 		const candidate = path.join(part, bin + ext);
 		try {
-			fs.accessSync(candidate, fs.constants.X_OK);
+			fsSync.accessSync(candidate, fsSync.constants.X_OK);
 			hasBinaryCache.set(bin, true);
 			return true;
 		} catch {}

package/dist/{gateway-cli-DpikYazv.js → gateway-cli-BKmCrkp2.js}

@@ -2,54 +2,54 @@ import { h as expandHomePrefix, i as isNixMode, l as resolveGatewayLockDir, m as
 import { B as theme, H as getLogger, P as setVerbose, R as colorize, T as getActivePluginRegistry, U as getResolvedLoggerSettings, V as getChildLogger, _ as DEFAULT_CHAT_CHANNEL, a as setConsoleSubsystemFilter, h as CHANNEL_IDS, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger, u as defaultRuntime, z as isRich } from "./subsystem-BaJ-PqmA.js";
 import { C as shortenHomePath, D as truncateUtf16Safe, b as resolveUserPath, c as ensureDir, d as isPlainObject, r as clamp, t as CONFIG_DIR } from "./utils-RdHkpqQp.js";
 import { C as supportsXHighThinking, _ as normalizeElevatedLevel, b as normalizeUsageDisplay, m as formatXHighModelHint, p as formatThinkingLevels, v as normalizeReasoningLevel, x as normalizeVerboseLevel, y as normalizeThinkLevel } from "./pi-embedded-helpers-6Tb87sgU.js";
-import { G as getActiveTaskCount, J as resetAllLanes, L as resolveAgentIdentity, U as clearSessionQueues, X as waitForActiveTasks, Y as setCommandLaneConcurrency, a as listDescendantRunsForRequester, et as startDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, p as runSubagentAnnounceFlow, q as getTotalQueueSize, rt as isDiagnosticsEnabled, tt as stopDiagnosticHeartbeat } from "./subagent-registry-BOsyxABV.js";
-import { A as writeRestartSentinel, At as DEFAULT_INPUT_PDF_MAX_PAGES, B as detectSuspiciousPatterns, C as setPreRestartDeferralCheck, Ct as registerUnhandledRejectionHandler, Dt as DEFAULT_INPUT_IMAGE_MAX_BYTES, E as formatRestartSentinelMessage, Et as DEFAULT_INPUT_FILE_MIMES, F as normalizeOptionalText, Ft as extractImageContentFromSource, G as getPluginToolMeta, H as isExternalHookSession, I as normalizePayloadToSystemText, It as normalizeMimeList, K as loadAnimaPlugins, L as normalizeRequiredName, Lt as estimateBase64DecodedBytes, M as normalizeCronJobPatch, Mt as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, N as inferLegacyName, Nt as DEFAULT_INPUT_TIMEOUT_MS, O as summarizeRestartSentinel, Ot as DEFAULT_INPUT_IMAGE_MIMES, P as normalizeOptionalAgentId, Pt as extractFileContentFromSource, Q as getChannelActivity, R as migrateLegacyCronPayload, S as setGatewaySigusr1RestartPolicy, T as formatDoctorNonInteractiveHint, Tt as DEFAULT_INPUT_FILE_MAX_CHARS, U as applyBrowserProxyPaths, V as getHookType, W as persistBrowserProxyFiles, _ as deferGatewayRestartUntilIdle, a as sniffMimeFromBase64, b as markGatewaySigusr1RestartHandled, c as loadProviderUsageSummary, f as ensureOutboundSessionEntry, ft as isAbortTrigger, g as consumeGatewaySigusr1RestartAuthorization, h as resolveMessageChannelSelection, i as buildDefaultToolPolicyPipelineSteps, it as getTotalPendingReplies, j as normalizeCronJobCreate, jt as DEFAULT_INPUT_PDF_MAX_PIXELS, kt as DEFAULT_INPUT_MAX_REDIRECTS, m as resetDirectoryCache, mt as formatZonedTimestamp, n as BARE_SESSION_RESET_PROMPT, nt as dispatchInboundMessage, o as createAnimaTools, p as resolveOutboundSessionRoute, pt as stopSubagentsForRequester, r as applyToolPolicyPipeline, rt as createReplyDispatcher, s as resolveAnnounceTargetFromKey, u as normalizeGroupActivation, v as emitGatewayRestart, w as consumeRestartSentinel, wt as DEFAULT_INPUT_FILE_MAX_BYTES, x as scheduleGatewaySigusr1Restart, y as isGatewaySigusr1RestartExternallyAllowed, z as buildSafeExternalPrompt } from "./reply-F1NR0Mmi.js";
+import { G as getActiveTaskCount, J as resetAllLanes, L as resolveAgentIdentity, U as clearSessionQueues, X as waitForActiveTasks, Y as setCommandLaneConcurrency, a as listDescendantRunsForRequester, et as startDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, p as runSubagentAnnounceFlow, q as getTotalQueueSize, rt as isDiagnosticsEnabled, tt as stopDiagnosticHeartbeat } from "./subagent-registry-D4idxv3D.js";
+import { A as writeRestartSentinel, At as DEFAULT_INPUT_PDF_MAX_PAGES, B as detectSuspiciousPatterns, C as setPreRestartDeferralCheck, Ct as registerUnhandledRejectionHandler, Dt as DEFAULT_INPUT_IMAGE_MAX_BYTES, E as formatRestartSentinelMessage, Et as DEFAULT_INPUT_FILE_MIMES, F as normalizeOptionalText, Ft as extractImageContentFromSource, G as getPluginToolMeta, H as isExternalHookSession, I as normalizePayloadToSystemText, It as normalizeMimeList, K as loadAnimaPlugins, L as normalizeRequiredName, Lt as estimateBase64DecodedBytes, M as normalizeCronJobPatch, Mt as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, N as inferLegacyName, Nt as DEFAULT_INPUT_TIMEOUT_MS, O as summarizeRestartSentinel, Ot as DEFAULT_INPUT_IMAGE_MIMES, P as normalizeOptionalAgentId, Pt as extractFileContentFromSource, Q as getChannelActivity, R as migrateLegacyCronPayload, S as setGatewaySigusr1RestartPolicy, T as formatDoctorNonInteractiveHint, Tt as DEFAULT_INPUT_FILE_MAX_CHARS, U as applyBrowserProxyPaths, V as getHookType, W as persistBrowserProxyFiles, _ as deferGatewayRestartUntilIdle, a as sniffMimeFromBase64, b as markGatewaySigusr1RestartHandled, c as loadProviderUsageSummary, f as ensureOutboundSessionEntry, ft as isAbortTrigger, g as consumeGatewaySigusr1RestartAuthorization, h as resolveMessageChannelSelection, i as buildDefaultToolPolicyPipelineSteps, it as getTotalPendingReplies, j as normalizeCronJobCreate, jt as DEFAULT_INPUT_PDF_MAX_PIXELS, kt as DEFAULT_INPUT_MAX_REDIRECTS, m as resetDirectoryCache, mt as formatZonedTimestamp, n as BARE_SESSION_RESET_PROMPT, nt as dispatchInboundMessage, o as createAnimaTools, p as resolveOutboundSessionRoute, pt as stopSubagentsForRequester, r as applyToolPolicyPipeline, rt as createReplyDispatcher, s as resolveAnnounceTargetFromKey, u as normalizeGroupActivation, v as emitGatewayRestart, w as consumeRestartSentinel, wt as DEFAULT_INPUT_FILE_MAX_BYTES, x as scheduleGatewaySigusr1Restart, y as isGatewaySigusr1RestartExternallyAllowed, z as buildSafeExternalPrompt } from "./reply-BJ3jrefM.js";
 import { b as isSubagentSessionKey, d as resolveAgentIdFromSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, m as toAgentRequestSessionKey, n as DEFAULT_AGENT_ID, t as DEFAULT_ACCOUNT_ID, u as normalizeMainKey, v as isCronRunSessionKey, x as parseAgentSessionKey } from "./session-key-DxcgHezu.js";
 import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-Bsq6vlwp.js";
 import { t as resolveAnimaPackageRoot } from "./anima-root-C5zoPibI.js";
-import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-kT_pK2eJ.js";
-import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-MwLHFnAb.js";
+import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-vpVhWds3.js";
+import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-C2dz3AhV.js";
 import { S as resolveAgentTimeoutMs, a as getAgentRunContext, b as runEmbeddedPiAgent, c as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, f as stripHeartbeatToken, i as emitAgentEvent, m as abortEmbeddedPiRun, o as onAgentEvent, p as CommandLane, r as clearAgentRunContext, s as registerAgentRunContext, x as waitForEmbeddedPiRunEnd } from "./lanes-CjLEc1h9.js";
-import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-Bda-8Rdh.js";
+import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-9JRRXykP.js";
 import "./boolean-Wzu0-e0P.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-CYcXAarB.js";
 import "./shell-env-SbFYz02H.js";
 import { c as isTestDefaultMemorySlotDisabled } from "./manifest-registry-DLouWVJe.js";
-import { A as resolveMainSessionKeyFromConfig, D as resolveAgentMainSessionKey, M as snapshotSessionOrigin, O as resolveExplicitAgentSessionKey, d as deliveryContextFromSession, h as normalizeSessionDeliveryFields, i as loadSessionStore, k as resolveMainSessionKey, l as updateSessionStore, p as mergeDeliveryContext, t as extractDeliveryInfo } from "./sessions-DiW7DuJO.js";
+import { A as resolveMainSessionKeyFromConfig, D as resolveAgentMainSessionKey, M as snapshotSessionOrigin, O as resolveExplicitAgentSessionKey, d as deliveryContextFromSession, h as normalizeSessionDeliveryFields, i as loadSessionStore, k as resolveMainSessionKey, l as updateSessionStore, p as mergeDeliveryContext, t as extractDeliveryInfo } from "./sessions-0J_pFd44.js";
 import { o as detectMime } from "./image-ops-CVabMYiY.js";
 import { t as normalizePollInput } from "./polls-vAdf9owY.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-DjZBTJJ3.js";
 import { t as formatCliCommand } from "./command-format-B1WxXbeU.js";
-import { v as normalizeSecretInput } from "./auth-profiles-CzyebTC0.js";
+import { v as normalizeSecretInput } from "./auth-profiles-DZS4PC_i.js";
 import "./file-lock-BRW4LeL0.js";
-import "./model-auth-Cyx2Xoz0.js";
-import { $ as textToSpeech, At as verifyPairingToken, B as isTtsProviderConfigured, Ct as listNodePairing, Dt as updatePairedNodeMetadata, Et as requestNodePairing, Ft as writeJsonAtomic, G as resolveTtsConfig, Ht as applyModelOverrideToSessionEntry, K as resolveTtsPrefsPath, Kt as enqueueSystemEvent, L as getTtsProvider, Lt as getSkillsSnapshotVersion, Mt as pruneExpiredPending, N as resolveUserTimezone, Nt as readJsonFile, Ot as verifyNodeToken, Pt as resolvePairingPaths, Q as setTtsProvider, Rt as registerSkillsChangeListener, St as approveNodePairing, T as resolveSessionDeliveryTarget, Tt as renamePairedNode, U as resolveTtsApiKey, Ut as applyVerboseOverride, W as resolveTtsAutoMode, Wt as parseVerboseOverride, X as setTtsEnabled, Zt as loadModelCatalog, _ as capArrayByJsonBytes, _t as recordRemoteNodeInfo, b as resolveSessionTranscriptCandidates, bt as removeRemoteNodeInfo, c as listAgentsForGateway, d as loadSessionEntry, dt as clearInternalHooks, f as pruneLegacyStoreKeys, ft as createInternalHookEvent, g as archiveSessionTranscripts, gt as primeRemoteSkillsCache, h as archiveFileOnDisk, ht as getRemoteSkillEligibility, jt as createAsyncLock, k as runWithModelFallback, kt as generatePairingToken, l as listSessionsFromStore, lt as normalizeSendPolicy, m as resolveSessionModelRef, mt as triggerInternalHook, n as setCliSessionId, nt as OPENAI_TTS_VOICES, p as resolveGatewaySessionStoreTarget, pt as registerInternalHook, q as resolveTtsProviderOrder, qt as isSystemEventContextChanged, r as runCliAgent, s as canonicalizeSpawnedByForAgent, st as requestHeartbeatNow, t as getCliSessionId, tt as OPENAI_TTS_MODELS, u as loadCombinedSessionStoreForGateway, ut as resolveSendPolicy, v as readSessionMessages, vt as refreshRemoteBinsForConnectedNodes, w as resolveOutboundTarget, wt as rejectNodePairing, x as stripEnvelopeFromMessages, xt as setSkillsRemoteRegistry, y as readSessionPreviewItemsFromTranscript, yt as refreshRemoteNodeBins, z as isTtsEnabled, zt as lookupContextTokens } from "./cli-session-C5q6Uryq.js";
+import "./model-auth-DUHamQTz.js";
+import { $ as textToSpeech, At as verifyPairingToken, B as isTtsProviderConfigured, Ct as listNodePairing, Dt as updatePairedNodeMetadata, Et as requestNodePairing, Ft as writeJsonAtomic, G as resolveTtsConfig, Ht as applyModelOverrideToSessionEntry, K as resolveTtsPrefsPath, Kt as enqueueSystemEvent, L as getTtsProvider, Lt as getSkillsSnapshotVersion, Mt as pruneExpiredPending, N as resolveUserTimezone, Nt as readJsonFile, Ot as verifyNodeToken, Pt as resolvePairingPaths, Q as setTtsProvider, Rt as registerSkillsChangeListener, St as approveNodePairing, T as resolveSessionDeliveryTarget, Tt as renamePairedNode, U as resolveTtsApiKey, Ut as applyVerboseOverride, W as resolveTtsAutoMode, Wt as parseVerboseOverride, X as setTtsEnabled, Zt as loadModelCatalog, _ as capArrayByJsonBytes, _t as recordRemoteNodeInfo, b as resolveSessionTranscriptCandidates, bt as removeRemoteNodeInfo, c as listAgentsForGateway, d as loadSessionEntry, dt as clearInternalHooks, f as pruneLegacyStoreKeys, ft as createInternalHookEvent, g as archiveSessionTranscripts, gt as primeRemoteSkillsCache, h as archiveFileOnDisk, ht as getRemoteSkillEligibility, jt as createAsyncLock, k as runWithModelFallback, kt as generatePairingToken, l as listSessionsFromStore, lt as normalizeSendPolicy, m as resolveSessionModelRef, mt as triggerInternalHook, n as setCliSessionId, nt as OPENAI_TTS_VOICES, p as resolveGatewaySessionStoreTarget, pt as registerInternalHook, q as resolveTtsProviderOrder, qt as isSystemEventContextChanged, r as runCliAgent, s as canonicalizeSpawnedByForAgent, st as requestHeartbeatNow, t as getCliSessionId, tt as OPENAI_TTS_MODELS, u as loadCombinedSessionStoreForGateway, ut as resolveSendPolicy, v as readSessionMessages, vt as refreshRemoteBinsForConnectedNodes, w as resolveOutboundTarget, wt as rejectNodePairing, x as stripEnvelopeFromMessages, xt as setSkillsRemoteRegistry, y as readSessionPreviewItemsFromTranscript, yt as refreshRemoteNodeBins, z as isTtsEnabled, zt as lookupContextTokens } from "./cli-session-CIhvoVRb.js";
 import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-BLOye_TP.js";
-import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-hOY3muxh.js";
-import "./chrome-CVfcErE4.js";
+import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-wL61f1WP.js";
+import "./chrome-_87P03u5.js";
 import { a as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, c as safeEqualSecret, d as enableTailscaleFunnel, f as enableTailscaleServe, i as resolveGatewayAuth, l as disableTailscaleFunnel, m as getTailnetHostname, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, r as isLocalDirectRequest, s as createAuthRateLimiter, t as assertGatewayAuthConfigured, u as disableTailscaleServe } from "./auth-B8ry4GB_.js";
 import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-BuAkHZAk.js";
 import { a as isTrustedProxyAddress, c as pickPrimaryLanIPv4, d as resolveGatewayListenHosts, i as isPrivateOrLoopbackAddress, l as resolveGatewayBindHost, n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString, u as resolveGatewayClientIp } from "./ws-ebl3urqL.js";
-import { r as movePathToTrash } from "./server-context-C0YSbjOv.js";
+import { r as movePathToTrash } from "./server-context-CcPmRFx_.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot, x as hasBinary } from "./skills-DsdcfeyV.js";
-import "./routes-TJ5bwx27.js";
+import "./routes-CNqS9gOj.js";
 import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-CmAt9mb6.js";
 import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-BbkwF58_.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CFb1gJ4N.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-CqMZNi-M.js";
 import "./tool-images-C4cophRS.js";
-import "./parse-timeout-PImvLfCF.js";
+import "./parse-timeout-qnHqZvCW.js";
 import "./chunk-DprzQA5H.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-TokuvSTy.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BntNhXqZ.js";
-import { $ as validateNodePairRequestParams, A as validateCronStatusParams, B as validateExecApprovalsNodeGetParams, C as validateConfigSetParams, Ct as validateWizardCancelParams, D as validateCronRemoveParams, Dt as PROTOCOL_VERSION, E as validateCronListParams, Et as validateWizardStatusParams, F as validateDeviceTokenRevokeParams, G as validateNodeDescribeParams, H as validateExecApprovalsSetParams, I as validateDeviceTokenRotateParams, It as normalizeDevicePublicKeyBase64Url, J as validateNodeInvokeResultParams, K as validateNodeEventParams, L as validateExecApprovalRequestParams, Lt as verifyDeviceSignature, M as validateDevicePairApproveParams, Mt as buildDeviceAuthPayload, N as validateDevicePairListParams, O as validateCronRunParams, Ot as ErrorCodes, P as validateDevicePairRejectParams, Pt as deriveDeviceIdFromPublicKey, Q as validateNodePairRejectParams, R as validateExecApprovalResolveParams, S as validateConfigSchemaParams, St as validateWebLoginWaitParams, T as validateCronAddParams, Tt as validateWizardStartParams, U as validateLogsTailParams, V as validateExecApprovalsNodeSetParams, W as validateModelsListParams, X as validateNodePairApproveParams, Y as validateNodeListParams, Z as validateNodePairListParams, _ as validateChatInjectParams, _t as validateTalkConfigParams, a as validateAgentWaitParams, at as validateSessionsCompactParams, b as validateConfigGetParams, bt as validateWakeParams, c as validateAgentsFilesGetParams, ct as validateSessionsPatchParams, d as validateAgentsListParams, dt as validateSessionsResolveParams, et as validateNodePairVerifyParams, f as validateAgentsUpdateParams, ft as validateSessionsUsageParams, g as validateChatHistoryParams, gt as validateSkillsUpdateParams, h as validateChatAbortParams, ht as validateSkillsStatusParams, i as validateAgentParams, it as validateSendParams, j as validateCronUpdateParams, jt as parseSessionLabel, k as validateCronRunsParams, kt as errorShape, l as validateAgentsFilesListParams, lt as validateSessionsPreviewParams, m as validateChannelsStatusParams, mt as validateSkillsInstallParams, n as formatValidationErrors, nt as validatePollParams, o as validateAgentsCreateParams, ot as validateSessionsDeleteParams, p as validateChannelsLogoutParams, pt as validateSkillsBinsParams, q as validateNodeInvokeParams, r as validateAgentIdentityParams, rt as validateRequestFrame, s as validateAgentsDeleteParams, st as validateSessionsListParams, tt as validateNodeRenameParams, u as validateAgentsFilesSetParams, ut as validateSessionsResetParams, v as validateChatSendParams, vt as validateTalkModeParams, w as validateConnectParams, wt as validateWizardNextParams, x as validateConfigPatchParams, xt as validateWebLoginStartParams, y as validateConfigApplyParams, yt as validateUpdateRunParams, z as validateExecApprovalsGetParams } from "./client-oEG5cM5Q.js";
-import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-CItRp_pr.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-tQREYhAr.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BoWzLBtH.js";
+import { $ as validateNodePairRequestParams, A as validateCronStatusParams, B as validateExecApprovalsNodeGetParams, C as validateConfigSetParams, Ct as validateWizardCancelParams, D as validateCronRemoveParams, Dt as PROTOCOL_VERSION, E as validateCronListParams, Et as validateWizardStatusParams, F as validateDeviceTokenRevokeParams, G as validateNodeDescribeParams, H as validateExecApprovalsSetParams, I as validateDeviceTokenRotateParams, It as normalizeDevicePublicKeyBase64Url, J as validateNodeInvokeResultParams, K as validateNodeEventParams, L as validateExecApprovalRequestParams, Lt as verifyDeviceSignature, M as validateDevicePairApproveParams, Mt as buildDeviceAuthPayload, N as validateDevicePairListParams, O as validateCronRunParams, Ot as ErrorCodes, P as validateDevicePairRejectParams, Pt as deriveDeviceIdFromPublicKey, Q as validateNodePairRejectParams, R as validateExecApprovalResolveParams, S as validateConfigSchemaParams, St as validateWebLoginWaitParams, T as validateCronAddParams, Tt as validateWizardStartParams, U as validateLogsTailParams, V as validateExecApprovalsNodeSetParams, W as validateModelsListParams, X as validateNodePairApproveParams, Y as validateNodeListParams, Z as validateNodePairListParams, _ as validateChatInjectParams, _t as validateTalkConfigParams, a as validateAgentWaitParams, at as validateSessionsCompactParams, b as validateConfigGetParams, bt as validateWakeParams, c as validateAgentsFilesGetParams, ct as validateSessionsPatchParams, d as validateAgentsListParams, dt as validateSessionsResolveParams, et as validateNodePairVerifyParams, f as validateAgentsUpdateParams, ft as validateSessionsUsageParams, g as validateChatHistoryParams, gt as validateSkillsUpdateParams, h as validateChatAbortParams, ht as validateSkillsStatusParams, i as validateAgentParams, it as validateSendParams, j as validateCronUpdateParams, jt as parseSessionLabel, k as validateCronRunsParams, kt as errorShape, l as validateAgentsFilesListParams, lt as validateSessionsPreviewParams, m as validateChannelsStatusParams, mt as validateSkillsInstallParams, n as formatValidationErrors, nt as validatePollParams, o as validateAgentsCreateParams, ot as validateSessionsDeleteParams, p as validateChannelsLogoutParams, pt as validateSkillsBinsParams, q as validateNodeInvokeParams, r as validateAgentIdentityParams, rt as validateRequestFrame, s as validateAgentsDeleteParams, st as validateSessionsListParams, tt as validateNodeRenameParams, u as validateAgentsFilesSetParams, ut as validateSessionsResetParams, v as validateChatSendParams, vt as validateTalkModeParams, w as validateConnectParams, wt as validateWizardNextParams, x as validateConfigPatchParams, xt as validateWebLoginStartParams, y as validateConfigApplyParams, yt as validateUpdateRunParams, z as validateExecApprovalsGetParams } from "./client-BM5PkIwQ.js";
+import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-C0Yk2qNb.js";
 import { r as normalizeInputProvenance } from "./input-provenance-E74Jb_sM.js";
 import { f as resolveExecApprovalsSocketPath, o as normalizeExecApprovals, p as saveExecApprovals, r as ensureExecApprovals, s as readExecApprovalsSnapshot, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-BTNqVQK0.js";
 import { a as deriveSessionTotalTokens, o as hasNonzeroUsage } from "./transcript-tools-CE-YeWdO.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-C0mOZv3Q.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-hyoQVF7L.js";
-import "./manager-eyHWQVGS.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-CDMb58Y3.js";
+import "./manager-1ZMunRXe.js";
 import "./sqlite-EkbWHNXu.js";
 import "./redact-BICFkpn7.js";
 import "./session-DmKXXA8P.js";
@@ -62,62 +62,62 @@ import { t as runCommandWithRuntime } from "./cli-utils-C2Dtl4o_.js";
 import { n as withProgress } from "./progress-gdB4V88Q.js";
 import "./logging-1vypRz8h.js";
 import "./auth-store-DWgI4Vj8.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-CJ2uXWYM.js";
-import { t as createBrowserRouteDispatcher } from "./dispatcher-DnyO_pzZ.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-BpEnt1xS.js";
+import { t as createBrowserRouteDispatcher } from "./dispatcher-wmQlHNsm.js";
 import { t as parseAbsoluteTimeMs } from "./parse-CY6yxdSO.js";
 import "./pi-model-discovery-HH8RvApN.js";
 import "./delivery-queue-CdUtwMZr.js";
 import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-CYdqhmt6.js";
-import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-CS0wp8uu.js";
-import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-ByFTwsu6.js";
+import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-Blrqxom1.js";
+import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-DBJU0o4f.js";
 import "./accounts-C9dcy8Gp.js";
-import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-CV9EwaiA.js";
+import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-DoPMG4GI.js";
 import { t as ensureAnimaCliOnPath } from "./path-env-BO3_pVlb.js";
 import { t as forceFreePortAndWait } from "./ports-DIRb7aJE.js";
-import "./program-context-CC-g5UxM.js";
+import "./program-context-r2WimvLs.js";
 import { t as buildChannelUiCatalog } from "./catalog-VwQGLU6M.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-DeW3dXom.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-C7Q_csTW.js";
-import "./completion-cli-BHlamZC3.js";
-import "./daemon-runtime-DP9zI3um.js";
-import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-DVbPW8Cs.js";
+import "./completion-cli-BB3_g8w5.js";
+import "./daemon-runtime-DOk9qM0y.js";
+import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-CMW6MSXA.js";
 import "./prompt-style-CXrnxWQG.js";
 import "./systemd-IDjybnbO.js";
 import "./service-H_0E0nOX.js";
 import "./lifecycle-core-BBpNy0vb.js";
 import { t as parsePort$1 } from "./parse-port-C4jZ8XQW.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-CR7yHMws.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-DlHFi5Gm.js";
 import "./diagnostics-zpQTQwXE.js";
-import "./service-audit-CGmQWccK.js";
+import "./service-audit-DLV93I95.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-Cr39lZhK.js";
 import "./table-BDer4ZEZ.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-B2fGg4mW.js";
-import { c as probeGateway, o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-94c4PKy2.js";
+import { c as probeGateway, o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-Cm50mcVm.js";
 import { n as discoverGatewayBeacons, t as installSkill } from "./skills-install-BVlnMRDh.js";
-import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-BToHtmWf.js";
+import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-DNUP2mgR.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-13ojLRv8.js";
-import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, s as setHeartbeatsEnabled, t as formatHealthChannelLines } from "./health-BLxSP-s_.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-j_zHeVf1.js";
+import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, s as setHeartbeatsEnabled, t as formatHealthChannelLines } from "./health-Cb_2WS_Z.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-BlyqT33k.js";
 import { a as resolveControlUiRootOverrideSync, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync } from "./health-format-BMwPAU53.js";
 import { n as validateSystemRunCommandConsistency, r as getMachineDisplayName, t as formatExecCommand } from "./system-run-command-CBYonA1r.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channels-status-issues-BCuAG8zm.js";
-import { t as WizardCancelledError } from "./prompts-BWkFLWEk.js";
-import "./ipv4-BXko1df7.js";
+import { t as WizardCancelledError } from "./prompts-BT5ztuUd.js";
+import "./ipv4-sll41DXC.js";
 import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-BTVvcXJx.js";
-import { t as runOnboardingWizard } from "./onboarding-ifLjX4Oc.js";
+import { t as runOnboardingWizard } from "./onboarding-B_Gs5W53.js";
 import "./logging-ClHj0gnP.js";
-import "./tui-BbS56NwI.js";
+import "./tui-dHcni7fC.js";
 import "./note-CLRVmCnr.js";
-import "./doctor-completion-Dnj6NNct.js";
+import "./doctor-completion-VtjYTwcS.js";
 import { a as setGatewayWsLogStyle, i as summarizeAgentEventForWsLog, n as logWs, r as shouldLogWs, t as formatForLog } from "./ws-log-D4JiZwbk.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-B4YpqI4r.js";
-import { a as createOutboundSendDeps$1, i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-CoxwYg20.js";
-import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-CvQgWymp.js";
+import { a as createOutboundSendDeps$1, i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-DvWSUuKy.js";
+import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-M3p4E9Vk.js";
 import "./skill-scanner-BA9Rv4AE.js";
 import "./node-service-CCMaTNEM.js";
-import "./status.update-CJR_Zlvb.js";
+import "./status.update-s92nCoGl.js";
 import "./archive-BZANtsGY.js";
-import { t as runGatewayUpdate } from "./update-runner-CBoHuDWR.js";
+import { t as runGatewayUpdate } from "./update-runner-DeNUEGyr.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
 import fs, { constants } from "node:fs";
@@ -11305,7 +11305,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-DM3CCYrf.js");
+			const { handleNodeEvent } = await import("./server-node-events-DNDwVJH_.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -14099,7 +14099,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.ANIMA_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.ANIMA_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-CJ2uXWYM.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-BpEnt1xS.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -19088,7 +19088,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-CdUtwMZr.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-TokuvSTy.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-tQREYhAr.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),

package/dist/{gateway-cli-CLhlz_uA.js → gateway-cli-D0mD_UV8.js}

@@ -1,36 +1,36 @@
 import { $ as CHANNEL_IDS, A as colorize, B as STATE_DIR, Ct as expandHomePrefix, E as setVerbose, F as getResolvedLoggerSettings, K as resolveGatewayLockDir, M as theme, N as getChildLogger, P as getLogger, R as CONFIG_PATH, U as resolveConfigPath, V as isNixMode, Z as resolveStateDir, d as setConsoleTimestampPrefix, h as defaultRuntime, j as isRich, lt as getActivePluginRegistry, n as isTruthyEnvValue, o as createSubsystemLogger, q as resolveGatewayPort, r as logAcceptedEnvOption, s as runtimeForLogger, tt as DEFAULT_CHAT_CHANNEL, u as setConsoleSubsystemFilter } from "./entry.js";
-import { m as normalizeSecretInput } from "./auth-profiles-DNpEm389.js";
+import { m as normalizeSecretInput } from "./auth-profiles-BYETsqKc.js";
 import { t as formatCliCommand } from "./command-format-B9HGdNTg.js";
 import { b as isSubagentSessionKey, d as resolveAgentIdFromSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, m as toAgentRequestSessionKey, n as DEFAULT_AGENT_ID, t as DEFAULT_ACCOUNT_ID, u as normalizeMainKey, v as isCronRunSessionKey, x as parseAgentSessionKey } from "./session-key-DP2WHl90.js";
 import { E as truncateUtf16Safe, S as shortenHomePath, n as clamp, s as ensureDir, t as CONFIG_DIR, u as isPlainObject, y as resolveUserPath } from "./utils-DwcweD55.js";
 import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-DRQWu5Xi.js";
 import { t as resolveAnimaPackageRoot } from "./anima-root-DBcJL1ZM.js";
-import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-CuAaArMB.js";
-import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-BjcyTJyU.js";
+import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-M302b8FW.js";
+import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-DJcZ82uR.js";
 import "./file-lock-CxXn285m.js";
 import "./agent-paths-CrZhIsTW.js";
 import "./pi-model-discovery-DgwvfEmd.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot, x as hasBinary } from "./skills-CG8iI6v6.js";
 import { o as isTestDefaultMemorySlotDisabled } from "./manifest-registry-BHcAJo9u.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-CNEd8Dm9.js";
-import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-CaE6v09P.js";
+import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-6zE4ZkSF.js";
 import "./shell-env-DAw9qXji.js";
 import { $ as validateNodePairRequestParams, A as validateCronStatusParams, B as validateExecApprovalsNodeGetParams, C as validateConfigSetParams, Ct as validateWizardCancelParams, D as validateCronRemoveParams, Dt as PROTOCOL_VERSION, E as validateCronListParams, Et as validateWizardStatusParams, F as validateDeviceTokenRevokeParams, G as validateNodeDescribeParams, H as validateExecApprovalsSetParams, I as validateDeviceTokenRotateParams, It as normalizeDevicePublicKeyBase64Url, J as validateNodeInvokeResultParams, K as validateNodeEventParams, L as validateExecApprovalRequestParams, Lt as verifyDeviceSignature, M as validateDevicePairApproveParams, Mt as buildDeviceAuthPayload, N as validateDevicePairListParams, O as validateCronRunParams, Ot as ErrorCodes, P as validateDevicePairRejectParams, Pt as deriveDeviceIdFromPublicKey, Q as validateNodePairRejectParams, R as validateExecApprovalResolveParams, S as validateConfigSchemaParams, St as validateWebLoginWaitParams, T as validateCronAddParams, Tt as validateWizardStartParams, U as validateLogsTailParams, V as validateExecApprovalsNodeSetParams, W as validateModelsListParams, X as validateNodePairApproveParams, Y as validateNodeListParams, Z as validateNodePairListParams, _ as validateChatInjectParams, _t as validateTalkConfigParams, a as validateAgentWaitParams, at as validateSessionsCompactParams, b as validateConfigGetParams, bt as validateWakeParams, c as validateAgentsFilesGetParams, ct as validateSessionsPatchParams, d as validateAgentsListParams, dt as validateSessionsResolveParams, et as validateNodePairVerifyParams, f as validateAgentsUpdateParams, ft as validateSessionsUsageParams, g as validateChatHistoryParams, gt as validateSkillsUpdateParams, h as validateChatAbortParams, ht as validateSkillsStatusParams, i as validateAgentParams, it as validateSendParams, j as validateCronUpdateParams, jt as parseSessionLabel, k as validateCronRunsParams, kt as errorShape, l as validateAgentsFilesListParams, lt as validateSessionsPreviewParams, m as validateChannelsStatusParams, mt as validateSkillsInstallParams, n as formatValidationErrors, nt as validatePollParams, o as validateAgentsCreateParams, ot as validateSessionsDeleteParams, p as validateChannelsLogoutParams, pt as validateSkillsBinsParams, q as validateNodeInvokeParams, r as validateAgentIdentityParams, rt as validateRequestFrame, s as validateAgentsDeleteParams, st as validateSessionsListParams, tt as validateNodeRenameParams, u as validateAgentsFilesSetParams, ut as validateSessionsResetParams, v as validateChatSendParams, vt as validateTalkModeParams, w as validateConnectParams, wt as validateWizardNextParams, x as validateConfigPatchParams, xt as validateWebLoginStartParams, y as validateConfigApplyParams, yt as validateUpdateRunParams, z as validateExecApprovalsGetParams } from "./client-BsSB9O8y.js";
 import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-DXtEiJfL.js";
-import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-DxImJH07.js";
+import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-LugHQWOF.js";
 import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-6Ln4eFyX.js";
 import { c as resolveGatewayBindHost, d as rawDataToString, i as isTrustedProxyAddress, l as resolveGatewayClientIp, n as isLoopbackHost, r as isPrivateOrLoopbackAddress, s as pickPrimaryLanIPv4, t as isLoopbackAddress, u as resolveGatewayListenHosts } from "./net-CWIDeudR.js";
 import { r as normalizeInputProvenance } from "./input-provenance-iu26y0GH.js";
 import { S as registerAgentRunContext, _ as waitForEmbeddedPiRunEnd, b as getAgentRunContext, c as stripHeartbeatToken, g as runEmbeddedPiAgent, i as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, l as CommandLane, t as resolveAgentTimeoutMs, u as abortEmbeddedPiRun, v as clearAgentRunContext, x as onAgentEvent, y as emitAgentEvent } from "./timeout-BXC4bZck.js";
-import { C as resolveMainSessionKeyFromConfig, I as normalizeSessionDeliveryFields, M as deliveryContextFromSession, P as mergeDeliveryContext, S as resolveMainSessionKey, T as snapshotSessionOrigin, b as resolveAgentMainSessionKey, i as loadSessionStore, l as updateSessionStore, t as extractDeliveryInfo, x as resolveExplicitAgentSessionKey } from "./sessions-wzfE85C2.js";
-import { G as getActiveTaskCount, J as resetAllLanes, L as resolveAgentIdentity, U as clearSessionQueues, X as waitForActiveTasks, Y as setCommandLaneConcurrency, a as listDescendantRunsForRequester, et as startDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, p as runSubagentAnnounceFlow, q as getTotalQueueSize, rt as isDiagnosticsEnabled, tt as stopDiagnosticHeartbeat } from "./subagent-registry-DEjp4eYh.js";
+import { C as resolveMainSessionKeyFromConfig, I as normalizeSessionDeliveryFields, M as deliveryContextFromSession, P as mergeDeliveryContext, S as resolveMainSessionKey, T as snapshotSessionOrigin, b as resolveAgentMainSessionKey, i as loadSessionStore, l as updateSessionStore, t as extractDeliveryInfo, x as resolveExplicitAgentSessionKey } from "./sessions-C7jYs5Sc.js";
+import { G as getActiveTaskCount, J as resetAllLanes, L as resolveAgentIdentity, U as clearSessionQueues, X as waitForActiveTasks, Y as setCommandLaneConcurrency, a as listDescendantRunsForRequester, et as startDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, p as runSubagentAnnounceFlow, q as getTotalQueueSize, rt as isDiagnosticsEnabled, tt as stopDiagnosticHeartbeat } from "./subagent-registry-DQzBrh1E.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-Tpy9T9c2.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./pi-embedded-helpers-D_ZL9Ofu.js";
-import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-BIZzFPco.js";
+import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-CR2AIW2N.js";
 import "./chrome-uJGz5mgu.js";
 import { a as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, c as safeEqualSecret, d as enableTailscaleFunnel, f as enableTailscaleServe, i as resolveGatewayAuth, l as disableTailscaleFunnel, m as getTailnetHostname, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, r as isLocalDirectRequest, s as createAuthRateLimiter, t as assertGatewayAuthConfigured, u as disableTailscaleServe } from "./auth-CBxE4UNz.js";
-import { r as movePathToTrash } from "./server-context-BW5BY88Y.js";
-import "./routes-DdssPiMt.js";
+import { r as movePathToTrash } from "./server-context-C2TNamEJ.js";
+import "./routes-Bifu4ATk.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-B9FgVZ2s.js";
 import { o as detectMime } from "./image-ops-CcJOy4db.js";
 import { i as formatPortDiagnostics, n as inspectPortUsage, t as ensurePortAvailable } from "./ports-Dsm-zUSt.js";
@@ -40,20 +40,20 @@ import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-RUKWFK
 import { f as normalizePollInput } from "./media-B9MUhrat.js";
 import "./chunk-Cj2sLFwd.js";
 import { t as ToolInputError } from "./common-CNiE_VZA.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-9uTsix_O.js";
-import { $ as OPENAI_TTS_MODELS, $t as resolveUserTimezone, At as createAsyncLock, Bt as applyModelOverrideToSessionEntry, Ct as rejectNodePairing, Dt as verifyNodeToken, Et as updatePairedNodeMetadata, F as getTtsProvider, G as resolveTtsProviderOrder, Gt as isSystemEventContextChanged, H as resolveTtsAutoMode, Ht as parseVerboseOverride, It as getSkillsSnapshotVersion, J as setTtsEnabled, L as isTtsEnabled, Lt as registerSkillsChangeListener, Mt as readJsonFile, Nt as resolvePairingPaths, Ot as generatePairingToken, Pt as writeJsonAtomic, R as isTtsProviderConfigured, St as listNodePairing, T as resolveSessionDeliveryTarget, Tt as requestNodePairing, U as resolveTtsConfig, V as resolveTtsApiKey, Vt as applyVerboseOverride, W as resolveTtsPrefsPath, Wt as enqueueSystemEvent, X as setTtsProvider, Yt as loadModelCatalog, Z as textToSpeech, _ as capArrayByJsonBytes, _t as refreshRemoteBinsForConnectedNodes, b as resolveSessionTranscriptCandidates, bt as setSkillsRemoteRegistry, c as listAgentsForGateway, ct as normalizeSendPolicy, d as loadSessionEntry, dt as createInternalHookEvent, et as OPENAI_TTS_VOICES, f as pruneLegacyStoreKeys, ft as registerInternalHook, g as archiveSessionTranscripts, gt as recordRemoteNodeInfo, h as archiveFileOnDisk, ht as primeRemoteSkillsCache, jt as pruneExpiredPending, k as runWithModelFallback, kt as verifyPairingToken, l as listSessionsFromStore, lt as resolveSendPolicy, m as resolveSessionModelRef, mt as getRemoteSkillEligibility, n as setCliSessionId, ot as requestHeartbeatNow, p as resolveGatewaySessionStoreTarget, pt as triggerInternalHook, r as runCliAgent, s as canonicalizeSpawnedByForAgent, t as getCliSessionId, u as loadCombinedSessionStoreForGateway, ut as clearInternalHooks, v as readSessionMessages, vt as refreshRemoteNodeBins, w as resolveOutboundTarget, wt as renamePairedNode, x as stripEnvelopeFromMessages, xt as approveNodePairing, y as readSessionPreviewItemsFromTranscript, yt as removeRemoteNodeInfo } from "./cli-session-DQ9kepDS.js";
-import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-DgxM3da_.js";
-import { A as summarizeRestartSentinel, At as DEFAULT_INPUT_IMAGE_MIMES, B as migrateLegacyCronPayload, C as scheduleGatewaySigusr1Restart, D as formatDoctorNonInteractiveHint, Dt as DEFAULT_INPUT_FILE_MAX_CHARS, E as consumeRestartSentinel, Et as DEFAULT_INPUT_FILE_MAX_BYTES, F as inferLegacyName, Ft as DEFAULT_INPUT_TIMEOUT_MS, G as applyBrowserProxyPaths, H as detectSuspiciousPatterns, I as normalizeOptionalAgentId, It as extractFileContentFromSource, J as loadAnimaPlugins, K as persistBrowserProxyFiles, L as normalizeOptionalText, Lt as extractImageContentFromSource, M as writeRestartSentinel, Mt as DEFAULT_INPUT_PDF_MAX_PAGES, N as normalizeCronJobCreate, Nt as DEFAULT_INPUT_PDF_MAX_PIXELS, O as formatRestartSentinelMessage, Ot as DEFAULT_INPUT_FILE_MIMES, P as normalizeCronJobPatch, Pt as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, R as normalizePayloadToSystemText, Rt as normalizeMimeList, S as markGatewaySigusr1RestartHandled, T as setPreRestartDeferralCheck, Tt as registerUnhandledRejectionHandler, U as getHookType, V as buildSafeExternalPrompt, W as isExternalHookSession, _ as resolveMessageChannelSelection, a as sniffMimeFromBase64, at as createReplyDispatcher, b as emitGatewayRestart, c as loadProviderUsageSummary, et as getChannelActivity, f as normalizeGroupActivation, g as resetDirectoryCache, gt as formatZonedTimestamp, h as resolveOutboundSessionRoute, ht as stopSubagentsForRequester, i as buildDefaultToolPolicyPipelineSteps, it as dispatchInboundMessage, jt as DEFAULT_INPUT_MAX_REDIRECTS, kt as DEFAULT_INPUT_IMAGE_MAX_BYTES, m as ensureOutboundSessionEntry, mt as isAbortTrigger, n as BARE_SESSION_RESET_PROMPT, o as createAnimaTools, ot as getTotalPendingReplies, q as getPluginToolMeta, r as applyToolPolicyPipeline, s as resolveAnnounceTargetFromKey, v as consumeGatewaySigusr1RestartAuthorization, w as setGatewaySigusr1RestartPolicy, x as isGatewaySigusr1RestartExternallyAllowed, y as deferGatewayRestartUntilIdle, z as normalizeRequiredName, zt as estimateBase64DecodedBytes } from "./reply-BWWaNSoB.js";
-import "./model-auth-CQNrcIIT.js";
-import { t as lookupContextTokens } from "./context-Nk3BLa3u.js";
-import "./parse-timeout-ByYuFf-D.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-ZUV32EzH.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-pvzE9Rfa.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-dAtxFV2S.js";
+import { $ as OPENAI_TTS_MODELS, $t as resolveUserTimezone, At as createAsyncLock, Bt as applyModelOverrideToSessionEntry, Ct as rejectNodePairing, Dt as verifyNodeToken, Et as updatePairedNodeMetadata, F as getTtsProvider, G as resolveTtsProviderOrder, Gt as isSystemEventContextChanged, H as resolveTtsAutoMode, Ht as parseVerboseOverride, It as getSkillsSnapshotVersion, J as setTtsEnabled, L as isTtsEnabled, Lt as registerSkillsChangeListener, Mt as readJsonFile, Nt as resolvePairingPaths, Ot as generatePairingToken, Pt as writeJsonAtomic, R as isTtsProviderConfigured, St as listNodePairing, T as resolveSessionDeliveryTarget, Tt as requestNodePairing, U as resolveTtsConfig, V as resolveTtsApiKey, Vt as applyVerboseOverride, W as resolveTtsPrefsPath, Wt as enqueueSystemEvent, X as setTtsProvider, Yt as loadModelCatalog, Z as textToSpeech, _ as capArrayByJsonBytes, _t as refreshRemoteBinsForConnectedNodes, b as resolveSessionTranscriptCandidates, bt as setSkillsRemoteRegistry, c as listAgentsForGateway, ct as normalizeSendPolicy, d as loadSessionEntry, dt as createInternalHookEvent, et as OPENAI_TTS_VOICES, f as pruneLegacyStoreKeys, ft as registerInternalHook, g as archiveSessionTranscripts, gt as recordRemoteNodeInfo, h as archiveFileOnDisk, ht as primeRemoteSkillsCache, jt as pruneExpiredPending, k as runWithModelFallback, kt as verifyPairingToken, l as listSessionsFromStore, lt as resolveSendPolicy, m as resolveSessionModelRef, mt as getRemoteSkillEligibility, n as setCliSessionId, ot as requestHeartbeatNow, p as resolveGatewaySessionStoreTarget, pt as triggerInternalHook, r as runCliAgent, s as canonicalizeSpawnedByForAgent, t as getCliSessionId, u as loadCombinedSessionStoreForGateway, ut as clearInternalHooks, v as readSessionMessages, vt as refreshRemoteNodeBins, w as resolveOutboundTarget, wt as renamePairedNode, x as stripEnvelopeFromMessages, xt as approveNodePairing, y as readSessionPreviewItemsFromTranscript, yt as removeRemoteNodeInfo } from "./cli-session-CJ4_a3AU.js";
+import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-CDRbkOeP.js";
+import { A as summarizeRestartSentinel, At as DEFAULT_INPUT_IMAGE_MIMES, B as migrateLegacyCronPayload, C as scheduleGatewaySigusr1Restart, D as formatDoctorNonInteractiveHint, Dt as DEFAULT_INPUT_FILE_MAX_CHARS, E as consumeRestartSentinel, Et as DEFAULT_INPUT_FILE_MAX_BYTES, F as inferLegacyName, Ft as DEFAULT_INPUT_TIMEOUT_MS, G as applyBrowserProxyPaths, H as detectSuspiciousPatterns, I as normalizeOptionalAgentId, It as extractFileContentFromSource, J as loadAnimaPlugins, K as persistBrowserProxyFiles, L as normalizeOptionalText, Lt as extractImageContentFromSource, M as writeRestartSentinel, Mt as DEFAULT_INPUT_PDF_MAX_PAGES, N as normalizeCronJobCreate, Nt as DEFAULT_INPUT_PDF_MAX_PIXELS, O as formatRestartSentinelMessage, Ot as DEFAULT_INPUT_FILE_MIMES, P as normalizeCronJobPatch, Pt as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, R as normalizePayloadToSystemText, Rt as normalizeMimeList, S as markGatewaySigusr1RestartHandled, T as setPreRestartDeferralCheck, Tt as registerUnhandledRejectionHandler, U as getHookType, V as buildSafeExternalPrompt, W as isExternalHookSession, _ as resolveMessageChannelSelection, a as sniffMimeFromBase64, at as createReplyDispatcher, b as emitGatewayRestart, c as loadProviderUsageSummary, et as getChannelActivity, f as normalizeGroupActivation, g as resetDirectoryCache, gt as formatZonedTimestamp, h as resolveOutboundSessionRoute, ht as stopSubagentsForRequester, i as buildDefaultToolPolicyPipelineSteps, it as dispatchInboundMessage, jt as DEFAULT_INPUT_MAX_REDIRECTS, kt as DEFAULT_INPUT_IMAGE_MAX_BYTES, m as ensureOutboundSessionEntry, mt as isAbortTrigger, n as BARE_SESSION_RESET_PROMPT, o as createAnimaTools, ot as getTotalPendingReplies, q as getPluginToolMeta, r as applyToolPolicyPipeline, s as resolveAnnounceTargetFromKey, v as consumeGatewaySigusr1RestartAuthorization, w as setGatewaySigusr1RestartPolicy, x as isGatewaySigusr1RestartExternallyAllowed, y as deferGatewayRestartUntilIdle, z as normalizeRequiredName, zt as estimateBase64DecodedBytes } from "./reply-LaOwllAB.js";
+import "./model-auth-B3BPcnwt.js";
+import { t as lookupContextTokens } from "./context-CsnIPzGP.js";
+import "./parse-timeout-DhqvtdXz.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-CkrMkcOx.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-ClzqRWic.js";
 import { f as resolveExecApprovalsSocketPath, o as normalizeExecApprovals, p as saveExecApprovals, r as ensureExecApprovals, s as readExecApprovalsSnapshot, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-DMaHTLs_.js";
 import { a as deriveSessionTotalTokens, o as hasNonzeroUsage } from "./transcript-tools-DbBq3Q5d.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-B9zQOxHa.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DQm_Q8ks.js";
-import "./manager-I5MlcYXv.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DEnGCMk0.js";
+import "./manager-BVhxScwx.js";
 import "./sqlite-WDviThxg.js";
 import "./redact-hnHuWzNz.js";
 import "./session-BofBojlx.js";
@@ -65,60 +65,60 @@ import { t as runCommandWithRuntime } from "./cli-utils-D-jqXKL_.js";
 import { n as withProgress } from "./progress-DcyA3a5A.js";
 import "./logging-DWwOqnTW.js";
 import "./auth-store-BEUCdUFj.js";
-import { t as createBrowserRouteDispatcher } from "./dispatcher-DT5y2bRx.js";
+import { t as createBrowserRouteDispatcher } from "./dispatcher-BhzRMibw.js";
 import { t as parseAbsoluteTimeMs } from "./parse-DfgX5okr.js";
 import "./delivery-queue-BqJKnOa_.js";
 import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-lfPU35Sb.js";
-import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-Cd1ryhL4.js";
+import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-Dl_Gro6x.js";
 import "./accounts-BmC37n9k.js";
 import { t as ensureAnimaCliOnPath } from "./path-env-B0inI2pE.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-17GpE8Yz.js";
-import "./register.subclis-Cp2R1dTl.js";
-import "./command-registry-S2ZqFzVe.js";
+import "./register.subclis-N7uAMRX_.js";
+import "./command-registry-Cl3Z-qsS.js";
 import "./program-context-DItEQSzX.js";
-import "./completion-cli-CC0KmaZL.js";
-import "./daemon-runtime-C-xevhQ5.js";
-import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-CAxb1eBy.js";
+import "./completion-cli-DcTEhrAe.js";
+import "./daemon-runtime-Cbi2Ox6g.js";
+import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-DKu_2enh.js";
 import "./prompt-style-DZq_uOc1.js";
 import "./systemd-BEeuI9u0.js";
 import "./service-U3nMjKlR.js";
 import "./lifecycle-core-CaprexZt.js";
 import { t as parsePort$1 } from "./parse-port-C7qCH0c0.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-CXnpU1lw.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-tZXFDpZX.js";
 import "./diagnostics-DjCoMfzA.js";
-import "./service-audit-u3qzhhqv.js";
+import "./service-audit-BG0tcSCo.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-pkKJoCyY.js";
 import "./table-CliKZeKs.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-CvEFgnUe.js";
-import { c as probeGateway, o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-C4pngOZo.js";
+import { c as probeGateway, o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-BDXqNA5J.js";
 import { n as discoverGatewayBeacons, t as installSkill } from "./skills-install-wgdmTfsf.js";
-import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-DVYPFs7b.js";
+import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-CzCmUbgr.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-DziQXnUf.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-1JahEOfG.js";
-import { a as createOutboundSendDeps, i as resolveAgentOutboundTarget, o as createDefaultDeps, r as resolveAgentDeliveryPlan, s as createOutboundSendDeps$1, t as agentCommand } from "./agent-Bd6Zpqnq.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-27WiwNrh.js";
+import { a as createOutboundSendDeps, i as resolveAgentOutboundTarget, o as createDefaultDeps, r as resolveAgentDeliveryPlan, s as createOutboundSendDeps$1, t as agentCommand } from "./agent-CT2PCft4.js";
 import { t as buildChannelUiCatalog } from "./catalog-BWBjaCdR.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-BvCuJgmb.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-Df0BKZyz.js";
 import { a as resolveControlUiRootOverrideSync, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync } from "./health-format-Dug5Rbjg.js";
 import { n as validateSystemRunCommandConsistency, r as getMachineDisplayName, t as formatExecCommand } from "./system-run-command-CJJVgJ-t.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channels-status-issues-BSWv108Y.js";
-import "./auth-choice-RnqXSEZo.js";
-import { t as WizardCancelledError } from "./prompts-CAgrJeru.js";
-import "./shared-DynkOTFs.js";
-import "./ipv4-BmsAjDnB.js";
+import "./auth-choice-CPDNhDPT.js";
+import { t as WizardCancelledError } from "./prompts-vr_Njtil.js";
+import "./shared-B9kttsme.js";
+import "./ipv4-yUiIU5CD.js";
 import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-B53TbyZm.js";
-import { t as runOnboardingWizard } from "./onboarding-Djv0NsZi.js";
+import { t as runOnboardingWizard } from "./onboarding-CGG6jZ0y.js";
 import "./logging-B05aEFEO.js";
-import "./tui-Bx6Ty5e9.js";
+import "./tui--uEeSnES.js";
 import "./note-Cdu0wcse.js";
-import "./doctor-completion-DpxcKMA5.js";
+import "./doctor-completion-CZgNNZVd.js";
 import { a as setGatewayWsLogStyle, i as summarizeAgentEventForWsLog, n as logWs, r as shouldLogWs, t as formatForLog } from "./ws-log-BZ31rwb4.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-BRieiYe_.js";
-import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Bar8RHWv.js";
+import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Dqcq7hEy.js";
 import "./skill-scanner-CUbVbJhZ.js";
 import "./node-service-gOz94l61.js";
-import "./status.update-CwIUq3Bq.js";
+import "./status.update-_DOVm6Tr.js";
 import "./archive-CI3UtbnF.js";
-import { t as runGatewayUpdate } from "./update-runner-OvETClW6.js";
+import { t as runGatewayUpdate } from "./update-runner-O0kK_BAP.js";
 import { n as forceFreePortAndWait } from "./ports-DYWXkfSI.js";
 import { spawn, spawnSync } from "node:child_process";
 import os from "node:os";
@@ -11307,7 +11307,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-Byy-Is6v.js");
+			const { handleNodeEvent } = await import("./server-node-events-DsfvuRBK.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -14101,7 +14101,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.ANIMA_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.ANIMA_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-9uTsix_O.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-dAtxFV2S.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -19090,7 +19090,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-BqJKnOa_.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-ZUV32EzH.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CkrMkcOx.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),