@noxsoft/anima 5.0.2 → 5.0.3

package/dist/{routes-CNSdZAkl.js → routes-cdfVFYMI.js}

@@ -1,9 +1,9 @@
 import { a as parseBooleanValue, et as resolvePreferredAnimaTmpDir } from "./entry.js";
 import { g as resolveConfigDir } from "./utils-D1VGbO3C.js";
-import { i as loadConfig, l as writeConfigFile } from "./config-D6D_ieel.js";
-import { T as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, a as resolveAnimaUserDataDir, b as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, c as captureScreenshot, f as snapshotAria, s as resolveBrowserExecutableForPlatform, x as DEFAULT_AI_SNAPSHOT_MAX_CHARS, y as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH } from "./chrome-CB6uZMvl.js";
-import { c as allocateColor, d as isValidProfileName, f as deriveDefaultBrowserCdpPortRange, i as parseHttpUrl, l as getUsedColors, o as resolveProfile, p as getPwAiModule$1, r as movePathToTrash, s as allocateCdpPort, u as getUsedPorts } from "./server-context-IfJbmK25.js";
-import { a as resizeToJpeg, n as getImageMetadata, o as detectMime, s as extensionForMime } from "./image-ops-BsXjYj1e.js";
+import { i as loadConfig, l as writeConfigFile } from "./config-Ofh9gKvs.js";
+import { T as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, a as resolveAnimaUserDataDir, b as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, c as captureScreenshot, f as snapshotAria, s as resolveBrowserExecutableForPlatform, x as DEFAULT_AI_SNAPSHOT_MAX_CHARS, y as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH } from "./chrome-B2-33FWf.js";
+import { c as allocateColor, d as isValidProfileName, f as deriveDefaultBrowserCdpPortRange, i as parseHttpUrl, l as getUsedColors, o as resolveProfile, p as getPwAiModule$1, r as movePathToTrash, s as allocateCdpPort, u as getUsedPorts } from "./server-context-C-usQ5Np.js";
+import { a as resizeToJpeg, n as getImageMetadata, o as detectMime, s as extensionForMime } from "./image-ops-BVtm-rU-.js";
 import path from "node:path";
 import fs, { createWriteStream } from "node:fs";
 import fs$1 from "node:fs/promises";

package/dist/{run-DgtaDzEe.js → run-DE6EaeE3.js}

@@ -1,82 +1,82 @@
 import { h as expandHomePrefix, i as isNixMode, l as resolveGatewayLockDir, m as resolveStateDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-zhVksOvm.js";
-import { E as getActivePluginRegistry, F as setVerbose, G as setLoggerOverride, H as getChildLogger, U as getLogger, W as getResolvedLoggerSettings, d as defaultRuntime, g as CHANNEL_IDS, i as getResolvedConsoleSettings, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger, v as DEFAULT_CHAT_CHANNEL } from "./subsystem-Cn6bJV8Z.js";
-import { C as shortenHomePath, D as truncateUtf16Safe, b as resolveUserPath, c as ensureDir, d as isPlainObject, r as clamp, t as CONFIG_DIR } from "./utils-dWKYjULE.js";
-import { C as supportsXHighThinking, _ as normalizeElevatedLevel, b as normalizeUsageDisplay, m as formatXHighModelHint, p as formatThinkingLevels, v as normalizeReasoningLevel, x as normalizeVerboseLevel, y as normalizeThinkLevel } from "./pi-embedded-helpers-iju5zIIA.js";
-import { G as getActiveTaskCount, J as resetAllLanes, L as resolveAgentIdentity, U as clearSessionQueues, X as waitForActiveTasks, Y as setCommandLaneConcurrency, a as listDescendantRunsForRequester, et as startDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, p as runSubagentAnnounceFlow, q as getTotalQueueSize, rt as isDiagnosticsEnabled, tt as stopDiagnosticHeartbeat } from "./subagent-registry-7qo93ip8.js";
-import { At as DEFAULT_INPUT_IMAGE_MAX_BYTES, B as normalizeRequiredName, Bt as estimateBase64DecodedBytes, C as markGatewaySigusr1RestartHandled, D as consumeRestartSentinel, Dt as DEFAULT_INPUT_FILE_MAX_BYTES, E as setPreRestartDeferralCheck, Et as registerUnhandledRejectionHandler, F as normalizeCronJobPatch, Ft as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, G as isExternalHookSession, H as buildSafeExternalPrompt, I as inferLegacyName, It as DEFAULT_INPUT_TIMEOUT_MS, J as getPluginToolMeta, K as applyBrowserProxyPaths, L as normalizeOptionalAgentId, Lt as extractFileContentFromSource, Mt as DEFAULT_INPUT_MAX_REDIRECTS, N as writeRestartSentinel, Nt as DEFAULT_INPUT_PDF_MAX_PAGES, O as formatDoctorNonInteractiveHint, Ot as DEFAULT_INPUT_FILE_MAX_CHARS, P as normalizeCronJobCreate, Pt as DEFAULT_INPUT_PDF_MAX_PIXELS, R as normalizeOptionalText, Rt as extractImageContentFromSource, S as isGatewaySigusr1RestartExternallyAllowed, T as setGatewaySigusr1RestartPolicy, U as detectSuspiciousPatterns, V as migrateLegacyCronPayload, W as getHookType, Y as loadAnimaPlugins, _ as resetDirectoryCache, _t as formatZonedTimestamp, a as sniffMimeFromBase64, at as dispatchInboundMessage, b as deferGatewayRestartUntilIdle, c as loadProviderUsageSummary, d as saveProviderStore, g as resolveOutboundSessionRoute, gt as stopSubagentsForRequester, h as ensureOutboundSessionEntry, ht as isAbortTrigger, i as buildDefaultToolPolicyPipelineSteps, j as summarizeRestartSentinel, jt as DEFAULT_INPUT_IMAGE_MIMES, k as formatRestartSentinelMessage, kt as DEFAULT_INPUT_FILE_MIMES, l as loadProviderStore, n as BARE_SESSION_RESET_PROMPT, o as createAnimaTools, ot as createReplyDispatcher, p as normalizeGroupActivation, q as persistBrowserProxyFiles, r as applyToolPolicyPipeline, s as resolveAnnounceTargetFromKey, st as getTotalPendingReplies, tt as getChannelActivity, u as maskApiKey, v as resolveMessageChannelSelection, w as scheduleGatewaySigusr1Restart, x as emitGatewayRestart, y as consumeGatewaySigusr1RestartAuthorization, z as normalizePayloadToSystemText, zt as normalizeMimeList } from "./reply-Dd3EmI4M.js";
+import { E as getActivePluginRegistry, F as setVerbose, G as setLoggerOverride, H as getChildLogger, U as getLogger, W as getResolvedLoggerSettings, d as defaultRuntime, g as CHANNEL_IDS, i as getResolvedConsoleSettings, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger, v as DEFAULT_CHAT_CHANNEL } from "./subsystem-BMsbqSb4.js";
+import { C as shortenHomePath, D as truncateUtf16Safe, b as resolveUserPath, c as ensureDir, d as isPlainObject, r as clamp, t as CONFIG_DIR } from "./utils-B60lF9Wq.js";
+import { C as supportsXHighThinking, _ as normalizeElevatedLevel, b as normalizeUsageDisplay, m as formatXHighModelHint, p as formatThinkingLevels, v as normalizeReasoningLevel, x as normalizeVerboseLevel, y as normalizeThinkLevel } from "./pi-embedded-helpers-B6wVA0hU.js";
+import { G as getActiveTaskCount, J as resetAllLanes, L as resolveAgentIdentity, U as clearSessionQueues, X as waitForActiveTasks, Y as setCommandLaneConcurrency, a as listDescendantRunsForRequester, et as startDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, p as runSubagentAnnounceFlow, q as getTotalQueueSize, rt as isDiagnosticsEnabled, tt as stopDiagnosticHeartbeat } from "./subagent-registry-DfCDq9hk.js";
+import { At as DEFAULT_INPUT_IMAGE_MAX_BYTES, B as normalizeRequiredName, Bt as estimateBase64DecodedBytes, C as markGatewaySigusr1RestartHandled, D as consumeRestartSentinel, Dt as DEFAULT_INPUT_FILE_MAX_BYTES, E as setPreRestartDeferralCheck, Et as registerUnhandledRejectionHandler, F as normalizeCronJobPatch, Ft as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, G as isExternalHookSession, H as buildSafeExternalPrompt, I as inferLegacyName, It as DEFAULT_INPUT_TIMEOUT_MS, J as getPluginToolMeta, K as applyBrowserProxyPaths, L as normalizeOptionalAgentId, Lt as extractFileContentFromSource, Mt as DEFAULT_INPUT_MAX_REDIRECTS, N as writeRestartSentinel, Nt as DEFAULT_INPUT_PDF_MAX_PAGES, O as formatDoctorNonInteractiveHint, Ot as DEFAULT_INPUT_FILE_MAX_CHARS, P as normalizeCronJobCreate, Pt as DEFAULT_INPUT_PDF_MAX_PIXELS, R as normalizeOptionalText, Rt as extractImageContentFromSource, S as isGatewaySigusr1RestartExternallyAllowed, T as setGatewaySigusr1RestartPolicy, U as detectSuspiciousPatterns, V as migrateLegacyCronPayload, W as getHookType, Y as loadAnimaPlugins, _ as resetDirectoryCache, _t as formatZonedTimestamp, a as sniffMimeFromBase64, at as dispatchInboundMessage, b as deferGatewayRestartUntilIdle, c as loadProviderUsageSummary, d as saveProviderStore, g as resolveOutboundSessionRoute, gt as stopSubagentsForRequester, h as ensureOutboundSessionEntry, ht as isAbortTrigger, i as buildDefaultToolPolicyPipelineSteps, j as summarizeRestartSentinel, jt as DEFAULT_INPUT_IMAGE_MIMES, k as formatRestartSentinelMessage, kt as DEFAULT_INPUT_FILE_MIMES, l as loadProviderStore, n as BARE_SESSION_RESET_PROMPT, o as createAnimaTools, ot as createReplyDispatcher, p as normalizeGroupActivation, q as persistBrowserProxyFiles, r as applyToolPolicyPipeline, s as resolveAnnounceTargetFromKey, st as getTotalPendingReplies, tt as getChannelActivity, u as maskApiKey, v as resolveMessageChannelSelection, w as scheduleGatewaySigusr1Restart, x as emitGatewayRestart, y as consumeGatewaySigusr1RestartAuthorization, z as normalizePayloadToSystemText, zt as normalizeMimeList } from "./reply-CwV-5jE0.js";
 import { b as isSubagentSessionKey, d as resolveAgentIdFromSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, m as toAgentRequestSessionKey, n as DEFAULT_AGENT_ID, t as DEFAULT_ACCOUNT_ID, u as normalizeMainKey, v as isCronRunSessionKey, x as parseAgentSessionKey } from "./session-key-DxcgHezu.js";
-import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-DbnX_71w.js";
+import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-Bo7Vwe77.js";
 import { t as resolveAnimaPackageRoot } from "./anima-root-Bot0EbzI.js";
-import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-BLiq3nK_.js";
-import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-C2dAUmK_.js";
-import { S as resolveAgentTimeoutMs, _ as runCliAgent, a as getAgentRunContext, c as CommandLane, g as waitForEmbeddedPiRunEnd, h as runEmbeddedPiAgent, i as emitAgentEvent, l as abortEmbeddedPiRun, o as onAgentEvent, r as clearAgentRunContext, s as registerAgentRunContext } from "./lanes-4_8h1ZQO.js";
-import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-CG7uuHNE.js";
-import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-T3-raV4i.js";
-import { c as isTestDefaultMemorySlotDisabled } from "./manifest-registry-BiGCvMJ8.js";
-import { A as resolveMainSessionKeyFromConfig, D as resolveAgentMainSessionKey, M as snapshotSessionOrigin, O as resolveExplicitAgentSessionKey, d as deliveryContextFromSession, h as normalizeSessionDeliveryFields, i as loadSessionStore, k as resolveMainSessionKey, l as updateSessionStore, p as mergeDeliveryContext, t as extractDeliveryInfo } from "./sessions-kJgmpWtv.js";
-import { o as detectMime } from "./image-ops-B7tKwzpV.js";
-import { t as normalizePollInput } from "./polls-Cuv4dsX_.js";
-import { n as formatErrorMessage } from "./errors-DjZBTJJ3.js";
-import { t as formatCliCommand } from "./command-format-B1WxXbeU.js";
-import { T as normalizeSecretInput } from "./auth-profiles-BhZX2spm.js";
-import { $ as registerSkillsChangeListener, A as getRemoteSkillEligibility, B as renamePairedNode, E as requestHeartbeatNow, F as removeRemoteNodeInfo, G as verifyPairingToken, H as updatePairedNodeMetadata, I as setSkillsRemoteRegistry, J as readJsonFile, K as createAsyncLock, L as approveNodePairing, M as recordRemoteNodeInfo, N as refreshRemoteBinsForConnectedNodes, O as normalizeSendPolicy, P as refreshRemoteNodeBins, Q as getSkillsSnapshotVersion, R as listNodePairing, T as runWithModelFallback, U as verifyNodeToken, V as requestNodePairing, W as generatePairingToken, X as writeJsonAtomic, Y as resolvePairingPaths, _ as stripEnvelopeFromMessages, a as listSessionsFromStore, at as parseVerboseOverride, b as resolveOutboundTarget, c as pruneLegacyStoreKeys, ct as isSystemEventContextChanged, d as archiveFileOnDisk, et as lookupContextTokens, f as archiveSessionTranscripts, ft as loadModelCatalog, g as resolveSessionTranscriptCandidates, h as readSessionPreviewItemsFromTranscript, i as listAgentsForGateway, it as applyVerboseOverride, j as primeRemoteSkillsCache, k as resolveSendPolicy, l as resolveGatewaySessionStoreTarget, m as readSessionMessages, n as setCliSessionId, o as loadCombinedSessionStoreForGateway, p as capArrayByJsonBytes, q as pruneExpiredPending, r as canonicalizeSpawnedByForAgent, rt as applyModelOverrideToSessionEntry, s as loadSessionEntry, st as enqueueSystemEvent, t as getCliSessionId, u as resolveSessionModelRef, x as resolveSessionDeliveryTarget, z as rejectNodePairing } from "./cli-session-CczB2Dni.js";
-import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-k_R7Y792.js";
-import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-BwUo1b0I.js";
-import { a as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, c as safeEqualSecret, d as enableTailscaleFunnel, f as enableTailscaleServe, i as resolveGatewayAuth, l as disableTailscaleFunnel, m as getTailnetHostname, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, r as isLocalDirectRequest, s as createAuthRateLimiter, t as assertGatewayAuthConfigured, u as disableTailscaleServe } from "./auth-Cs_c5TKt.js";
-import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-CjJJHjPU.js";
-import { a as isTrustedProxyAddress, c as pickPrimaryLanIPv4, d as resolveGatewayListenHosts, i as isPrivateOrLoopbackAddress, l as resolveGatewayBindHost, n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString, u as resolveGatewayClientIp } from "./ws-CQYP0dWu.js";
-import { r as movePathToTrash } from "./server-context-efO1YgXk.js";
-import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot, x as hasBinary } from "./skills-ppB3qrZU.js";
-import { a as inspectPortUsage, s as formatPortDiagnostics } from "./ports-DOiSDgNp.js";
-import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, i as isGatewayMessageChannel, l as normalizeMessageChannel, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-DuxJGOJz.js";
-import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-BmYfBGLM.js";
-import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-BvY3CbW0.js";
-import { $ as stripHeartbeatToken, A as isTtsProviderConfigured, B as setTtsEnabled, D as getTtsProvider, F as resolveTtsConfig, G as OPENAI_TTS_MODELS, H as setTtsProvider, I as resolveTtsPrefsPath, K as OPENAI_TTS_VOICES, L as resolveTtsProviderOrder, N as resolveTtsApiKey, P as resolveTtsAutoMode, U as textToSpeech, Y as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, at as triggerInternalHook, b as resolveUserTimezone, it as registerInternalHook, k as isTtsEnabled, nt as clearInternalHooks, rt as createInternalHookEvent } from "./anthropic-direct-runner--MPTWkYA.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-B2p9Fke_.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CN78I2yN.js";
-import { $ as validateNodePairRequestParams, A as validateCronStatusParams, B as validateExecApprovalsNodeGetParams, C as validateConfigSetParams, Ct as validateWizardCancelParams, D as validateCronRemoveParams, Dt as PROTOCOL_VERSION, E as validateCronListParams, Et as validateWizardStatusParams, F as validateDeviceTokenRevokeParams, G as validateNodeDescribeParams, H as validateExecApprovalsSetParams, I as validateDeviceTokenRotateParams, It as normalizeDevicePublicKeyBase64Url, J as validateNodeInvokeResultParams, K as validateNodeEventParams, L as validateExecApprovalRequestParams, Lt as verifyDeviceSignature, M as validateDevicePairApproveParams, Mt as buildDeviceAuthPayload, N as validateDevicePairListParams, O as validateCronRunParams, Ot as ErrorCodes, P as validateDevicePairRejectParams, Pt as deriveDeviceIdFromPublicKey, Q as validateNodePairRejectParams, R as validateExecApprovalResolveParams, S as validateConfigSchemaParams, St as validateWebLoginWaitParams, T as validateCronAddParams, Tt as validateWizardStartParams, U as validateLogsTailParams, V as validateExecApprovalsNodeSetParams, W as validateModelsListParams, X as validateNodePairApproveParams, Y as validateNodeListParams, Z as validateNodePairListParams, _ as validateChatInjectParams, _t as validateTalkConfigParams, a as validateAgentWaitParams, at as validateSessionsCompactParams, b as validateConfigGetParams, bt as validateWakeParams, c as validateAgentsFilesGetParams, ct as validateSessionsPatchParams, d as validateAgentsListParams, dt as validateSessionsResolveParams, et as validateNodePairVerifyParams, f as validateAgentsUpdateParams, ft as validateSessionsUsageParams, g as validateChatHistoryParams, gt as validateSkillsUpdateParams, h as validateChatAbortParams, ht as validateSkillsStatusParams, i as validateAgentParams, it as validateSendParams, j as validateCronUpdateParams, jt as parseSessionLabel, k as validateCronRunsParams, kt as errorShape, l as validateAgentsFilesListParams, lt as validateSessionsPreviewParams, m as validateChannelsStatusParams, mt as validateSkillsInstallParams, n as formatValidationErrors, nt as validatePollParams, o as validateAgentsCreateParams, ot as validateSessionsDeleteParams, p as validateChannelsLogoutParams, pt as validateSkillsBinsParams, q as validateNodeInvokeParams, r as validateAgentIdentityParams, rt as validateRequestFrame, s as validateAgentsDeleteParams, st as validateSessionsListParams, tt as validateNodeRenameParams, u as validateAgentsFilesSetParams, ut as validateSessionsResetParams, v as validateChatSendParams, vt as validateTalkModeParams, w as validateConnectParams, wt as validateWizardNextParams, x as validateConfigPatchParams, xt as validateWebLoginStartParams, y as validateConfigApplyParams, yt as validateUpdateRunParams, z as validateExecApprovalsGetParams } from "./client-BObcTF_9.js";
-import { s as loadGatewayTlsRuntime$1 } from "./call-BOwaQIXo.js";
+import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-ryeVDUKe.js";
+import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-DRIxw3do.js";
+import { S as resolveAgentTimeoutMs, _ as runCliAgent, a as getAgentRunContext, c as CommandLane, g as waitForEmbeddedPiRunEnd, h as runEmbeddedPiAgent, i as emitAgentEvent, l as abortEmbeddedPiRun, o as onAgentEvent, r as clearAgentRunContext, s as registerAgentRunContext } from "./lanes-CrNcoc6P.js";
+import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-Dk-5Mb_G.js";
+import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-CLiKFfXU.js";
+import { c as isTestDefaultMemorySlotDisabled } from "./manifest-registry-BJat2nhC.js";
+import { A as resolveMainSessionKeyFromConfig, D as resolveAgentMainSessionKey, M as snapshotSessionOrigin, O as resolveExplicitAgentSessionKey, d as deliveryContextFromSession, h as normalizeSessionDeliveryFields, i as loadSessionStore, k as resolveMainSessionKey, l as updateSessionStore, p as mergeDeliveryContext, t as extractDeliveryInfo } from "./sessions-BduC6sZj.js";
+import { o as detectMime } from "./image-ops-C_aRXc-7.js";
+import { t as normalizePollInput } from "./polls-OzE9fR2s.js";
+import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-B4-dXpqZ.js";
+import { t as formatCliCommand } from "./command-format-UwAvxtMC.js";
+import { a as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, c as safeEqualSecret, d as enableTailscaleFunnel, f as enableTailscaleServe, i as resolveGatewayAuth, l as disableTailscaleFunnel, m as getTailnetHostname, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, r as isLocalDirectRequest, s as createAuthRateLimiter, t as assertGatewayAuthConfigured, u as disableTailscaleServe } from "./auth-DQfFqQBz.js";
+import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-CabhakZ7.js";
+import { a as isTrustedProxyAddress, c as pickPrimaryLanIPv4, d as resolveGatewayListenHosts, i as isPrivateOrLoopbackAddress, l as resolveGatewayBindHost, n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString, u as resolveGatewayClientIp } from "./ws-sdRTa2sP.js";
+import { r as movePathToTrash } from "./server-context-r7wPe4ZD.js";
+import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot, x as hasBinary } from "./skills-wS8aRGeO.js";
+import { n as formatErrorMessage } from "./errors-D6Vj_xs4.js";
+import { a as inspectPortUsage, s as formatPortDiagnostics } from "./ports-CWvYU8j6.js";
+import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, i as isGatewayMessageChannel, l as normalizeMessageChannel, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-C5I8UgGH.js";
+import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-NbldDVJs.js";
+import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-CnuAkdfx.js";
+import { T as normalizeSecretInput } from "./auth-profiles-C_LmTbMb.js";
+import { $ as registerSkillsChangeListener, A as getRemoteSkillEligibility, B as renamePairedNode, E as requestHeartbeatNow, F as removeRemoteNodeInfo, G as verifyPairingToken, H as updatePairedNodeMetadata, I as setSkillsRemoteRegistry, J as readJsonFile, K as createAsyncLock, L as approveNodePairing, M as recordRemoteNodeInfo, N as refreshRemoteBinsForConnectedNodes, O as normalizeSendPolicy, P as refreshRemoteNodeBins, Q as getSkillsSnapshotVersion, R as listNodePairing, T as runWithModelFallback, U as verifyNodeToken, V as requestNodePairing, W as generatePairingToken, X as writeJsonAtomic, Y as resolvePairingPaths, _ as stripEnvelopeFromMessages, a as listSessionsFromStore, at as parseVerboseOverride, b as resolveOutboundTarget, c as pruneLegacyStoreKeys, ct as isSystemEventContextChanged, d as archiveFileOnDisk, et as lookupContextTokens, f as archiveSessionTranscripts, ft as loadModelCatalog, g as resolveSessionTranscriptCandidates, h as readSessionPreviewItemsFromTranscript, i as listAgentsForGateway, it as applyVerboseOverride, j as primeRemoteSkillsCache, k as resolveSendPolicy, l as resolveGatewaySessionStoreTarget, m as readSessionMessages, n as setCliSessionId, o as loadCombinedSessionStoreForGateway, p as capArrayByJsonBytes, q as pruneExpiredPending, r as canonicalizeSpawnedByForAgent, rt as applyModelOverrideToSessionEntry, s as loadSessionEntry, st as enqueueSystemEvent, t as getCliSessionId, u as resolveSessionModelRef, x as resolveSessionDeliveryTarget, z as rejectNodePairing } from "./cli-session-gR2abU0g.js";
+import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-FGW_JgKz.js";
+import { B as resolveTtsPrefsPath, K as setTtsProvider, L as resolveTtsApiKey, N as isTtsEnabled, P as isTtsProviderConfigured, R as resolveTtsAutoMode, V as resolveTtsProviderOrder, W as setTtsEnabled, X as OPENAI_TTS_VOICES, Y as OPENAI_TTS_MODELS, ct as stripHeartbeatToken, et as clearInternalHooks, it as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, j as getTtsProvider, nt as registerInternalHook, q as textToSpeech, rt as triggerInternalHook, tt as createInternalHookEvent, w as resolveUserTimezone, z as resolveTtsConfig } from "./anthropic-direct-runner-BXb24VJt.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-DvbZ8dp4.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-ChzY9kW7.js";
+import { $ as validateNodePairRequestParams, A as validateCronStatusParams, B as validateExecApprovalsNodeGetParams, C as validateConfigSetParams, Ct as validateWizardCancelParams, D as validateCronRemoveParams, Dt as PROTOCOL_VERSION, E as validateCronListParams, Et as validateWizardStatusParams, F as validateDeviceTokenRevokeParams, G as validateNodeDescribeParams, H as validateExecApprovalsSetParams, I as validateDeviceTokenRotateParams, It as normalizeDevicePublicKeyBase64Url, J as validateNodeInvokeResultParams, K as validateNodeEventParams, L as validateExecApprovalRequestParams, Lt as verifyDeviceSignature, M as validateDevicePairApproveParams, Mt as buildDeviceAuthPayload, N as validateDevicePairListParams, O as validateCronRunParams, Ot as ErrorCodes, P as validateDevicePairRejectParams, Pt as deriveDeviceIdFromPublicKey, Q as validateNodePairRejectParams, R as validateExecApprovalResolveParams, S as validateConfigSchemaParams, St as validateWebLoginWaitParams, T as validateCronAddParams, Tt as validateWizardStartParams, U as validateLogsTailParams, V as validateExecApprovalsNodeSetParams, W as validateModelsListParams, X as validateNodePairApproveParams, Y as validateNodeListParams, Z as validateNodePairListParams, _ as validateChatInjectParams, _t as validateTalkConfigParams, a as validateAgentWaitParams, at as validateSessionsCompactParams, b as validateConfigGetParams, bt as validateWakeParams, c as validateAgentsFilesGetParams, ct as validateSessionsPatchParams, d as validateAgentsListParams, dt as validateSessionsResolveParams, et as validateNodePairVerifyParams, f as validateAgentsUpdateParams, ft as validateSessionsUsageParams, g as validateChatHistoryParams, gt as validateSkillsUpdateParams, h as validateChatAbortParams, ht as validateSkillsStatusParams, i as validateAgentParams, it as validateSendParams, j as validateCronUpdateParams, jt as parseSessionLabel, k as validateCronRunsParams, kt as errorShape, l as validateAgentsFilesListParams, lt as validateSessionsPreviewParams, m as validateChannelsStatusParams, mt as validateSkillsInstallParams, n as formatValidationErrors, nt as validatePollParams, o as validateAgentsCreateParams, ot as validateSessionsDeleteParams, p as validateChannelsLogoutParams, pt as validateSkillsBinsParams, q as validateNodeInvokeParams, r as validateAgentIdentityParams, rt as validateRequestFrame, s as validateAgentsDeleteParams, st as validateSessionsListParams, tt as validateNodeRenameParams, u as validateAgentsFilesSetParams, ut as validateSessionsResetParams, v as validateChatSendParams, vt as validateTalkModeParams, w as validateConnectParams, wt as validateWizardNextParams, x as validateConfigPatchParams, xt as validateWebLoginStartParams, y as validateConfigApplyParams, yt as validateUpdateRunParams, z as validateExecApprovalsGetParams } from "./client-BT3pbXCv.js";
+import { s as loadGatewayTlsRuntime$1 } from "./call-C3CH9PNK.js";
 import { r as normalizeInputProvenance } from "./input-provenance-E74Jb_sM.js";
 import { f as resolveExecApprovalsSocketPath, o as normalizeExecApprovals, p as saveExecApprovals, r as ensureExecApprovals, s as readExecApprovalsSnapshot, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-DgqcXL_v.js";
 import { a as deriveSessionTotalTokens, o as hasNonzeroUsage } from "./transcript-tools-Do3FLqNk.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-Cl2n9UtH.js";
-import { t as ToolInputError } from "./common-Cd7BmlCQ.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-DMoq3DpT.js";
-import { t as createBrowserRouteDispatcher } from "./dispatcher-DG44QJKz.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-bA70cVlm.js";
+import { t as ToolInputError } from "./common-CSTOiddD.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-BFYEuU-S.js";
+import { t as createBrowserRouteDispatcher } from "./dispatcher-C4k9ABOv.js";
 import { t as parseAbsoluteTimeMs } from "./parse-CygGxhFt.js";
-import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-6bDLU9Pb.js";
-import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-DuRmIKOk.js";
-import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-DIoRETAD.js";
-import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-CBLy0fqA.js";
-import { t as ensureAnimaCliOnPath } from "./path-env-CsgLP0dy.js";
-import { t as forceFreePortAndWait } from "./ports-BQ0cAsGj.js";
-import { t as buildChannelUiCatalog } from "./catalog-B-pfqu76.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-B_umZ78Q.js";
+import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-LvsvRW5g.js";
+import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-CF3WzMM0.js";
+import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-BRsV1Eof.js";
+import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-CCbWMWT4.js";
+import { t as ensureAnimaCliOnPath } from "./path-env-cFxXrXB1.js";
+import { t as forceFreePortAndWait } from "./ports-Cgow804e.js";
+import { t as buildChannelUiCatalog } from "./catalog-3hzXhHxJ.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-D14GZ5WN.js";
 import { c as saveToken, i as getToken, l as whoami, n as clearToken, o as registerWithInvite, s as resolveSuggestedIdentity, t as TOKEN_PATH } from "./noxsoft-auth-D2__8j9_.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-55Gvzb6E.js";
-import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, h as resolveControlUiLinks, x as buildControlUiAvatarUrl } from "./onboard-helpers-BgsHO6fO.js";
-import { t as resolveGatewayService } from "./service-D1idQeBv.js";
+import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, h as resolveControlUiLinks, x as buildControlUiAvatarUrl } from "./onboard-helpers-CU_S0_Kf.js";
+import { t as resolveGatewayService } from "./service-DCVAkKlN.js";
 import { t as parsePort } from "./parse-port-DPWx6jyf.js";
-import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CkuHFBQy.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-DC8lQHCt.js";
-import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-DegswVkZ.js";
-import { n as getStatusSummary } from "./status-CwjUrZ7a.js";
+import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-B1TTb1v5.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Ca0NTTF0.js";
+import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-qHMf9jWY.js";
+import { n as getStatusSummary } from "./status-Uzlo7BvY.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BI1K0a4D.js";
-import { c as startHeartbeatRunner, n as getHealthSnapshot, o as runHeartbeatOnce, s as setHeartbeatsEnabled } from "./health-DoGFlPcq.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-DIWd94Po.js";
-import { a as resolveControlUiRootOverrideSync, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync } from "./health-format-Ojy0hLp3.js";
+import { c as startHeartbeatRunner, n as getHealthSnapshot, o as runHeartbeatOnce, s as setHeartbeatsEnabled } from "./health-DKC8u4W8.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-f05JE-GF.js";
+import { a as resolveControlUiRootOverrideSync, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync } from "./health-format-DHYaqzgj.js";
 import { n as validateSystemRunCommandConsistency, r as getMachineDisplayName, t as formatExecCommand } from "./system-run-command-D0lTrhbv.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channels-status-issues-DenKLCLq.js";
-import { t as WizardCancelledError } from "./prompts-DjKZfP5R.js";
-import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-DR_WkhpR.js";
-import { t as runOnboardingWizard } from "./onboarding-BINruD5r.js";
-import { a as setGatewayWsLogStyle, i as summarizeAgentEventForWsLog, n as logWs, r as shouldLogWs, t as formatForLog } from "./ws-log-B-xsUQys.js";
-import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-B4oMbrOI.js";
-import { a as createOutboundSendDeps$1, i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-CWQdTmzC.js";
-import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Bqr5rrkV.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channels-status-issues-D5XAOSaj.js";
+import { t as WizardCancelledError } from "./prompts-DH_nIROF.js";
+import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-CfvVr6eJ.js";
+import { t as runOnboardingWizard } from "./onboarding-DP2NlqhA.js";
+import { a as setGatewayWsLogStyle, i as summarizeAgentEventForWsLog, n as logWs, r as shouldLogWs, t as formatForLog } from "./ws-log-De7GACYn.js";
+import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-B-LgbK-5.js";
+import { a as createOutboundSendDeps$1, i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-fG1PVmNy.js";
+import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DmF0fsB6.js";
 import { t as migrateFromCoherence } from "./migrate-DuohB_ur.js";
-import { t as installSkill } from "./skills-install-BKz5WLq4.js";
-import { t as runGatewayUpdate } from "./update-runner-OPbRGUfX.js";
+import { t as installSkill } from "./skills-install-B2m10oTm.js";
+import { t as runGatewayUpdate } from "./update-runner-U2WcWGfd.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
 import fs, { constants } from "node:fs";
@@ -11425,7 +11425,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-BG4e9Ws7.js");
+			const { handleNodeEvent } = await import("./server-node-events-GTSQEd_U.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -12838,7 +12838,7 @@ const usageHandlers = {
 		const resolved = resolveSessionUsageFileOrRespond(key, respond);
 		if (!resolved) return;
 		const { config, entry, agentId, sessionId, sessionFile } = resolved;
-		const { loadSessionLogs } = await import("./session-cost-usage-6bDLU9Pb.js").then((n) => n.a);
+		const { loadSessionLogs } = await import("./session-cost-usage-LvsvRW5g.js").then((n) => n.a);
 		respond(true, { logs: await loadSessionLogs({
 			sessionId,
 			sessionEntry: entry,
@@ -14311,7 +14311,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.ANIMA_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.ANIMA_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-DMoq3DpT.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-BFYEuU-S.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -19351,7 +19351,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-CQi61CMr.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-B2p9Fke_.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-DvbZ8dp4.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),

package/dist/{run--R4y3YlU.js → run-S0Cw3Fyy.js}

@@ -1,80 +1,80 @@
 import { $ as resolveStateDir, B as CONFIG_PATH, D as setVerbose, F as getLogger, G as resolveConfigPath, H as STATE_DIR, I as getResolvedLoggerSettings, J as resolveGatewayLockDir, L as setLoggerOverride, P as getChildLogger, Tt as expandHomePrefix, U as isNixMode, Y as resolveGatewayPort, d as setConsoleSubsystemFilter, dt as getActivePluginRegistry, f as setConsoleTimestampPrefix, g as defaultRuntime, l as getResolvedConsoleSettings, n as isTruthyEnvValue, o as createSubsystemLogger, r as logAcceptedEnvOption, rt as DEFAULT_CHAT_CHANNEL, s as runtimeForLogger, tt as CHANNEL_IDS } from "./entry.js";
-import { x as normalizeSecretInput } from "./auth-profiles-k5IOWaG2.js";
+import { x as normalizeSecretInput } from "./auth-profiles-BF5x9Ej0.js";
 import { t as formatCliCommand } from "./command-format-kLw3YIIu.js";
 import { b as isSubagentSessionKey, d as resolveAgentIdFromSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, m as toAgentRequestSessionKey, n as DEFAULT_AGENT_ID, t as DEFAULT_ACCOUNT_ID, u as normalizeMainKey, v as isCronRunSessionKey, x as parseAgentSessionKey } from "./session-key-DP2WHl90.js";
 import { E as truncateUtf16Safe, S as shortenHomePath, n as clamp, s as ensureDir, t as CONFIG_DIR, u as isPlainObject, y as resolveUserPath } from "./utils-D1VGbO3C.js";
 import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-BtBJICHE.js";
 import { t as resolveAnimaPackageRoot } from "./anima-root-CxtpOklc.js";
 import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-Dm8IL1Ks.js";
-import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-BKFF7fDb.js";
+import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-DFbDH9o2.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot, x as hasBinary } from "./skills-DtoVe1dS.js";
 import { o as isTestDefaultMemorySlotDisabled } from "./manifest-registry-W_OfCIRP.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-DuLjkX2E.js";
-import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-D6D_ieel.js";
+import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-Ofh9gKvs.js";
 import { $ as validateNodePairRequestParams, A as validateCronStatusParams, B as validateExecApprovalsNodeGetParams, C as validateConfigSetParams, Ct as validateWizardCancelParams, D as validateCronRemoveParams, Dt as PROTOCOL_VERSION, E as validateCronListParams, Et as validateWizardStatusParams, F as validateDeviceTokenRevokeParams, G as validateNodeDescribeParams, H as validateExecApprovalsSetParams, I as validateDeviceTokenRotateParams, It as normalizeDevicePublicKeyBase64Url, J as validateNodeInvokeResultParams, K as validateNodeEventParams, L as validateExecApprovalRequestParams, Lt as verifyDeviceSignature, M as validateDevicePairApproveParams, Mt as buildDeviceAuthPayload, N as validateDevicePairListParams, O as validateCronRunParams, Ot as ErrorCodes, P as validateDevicePairRejectParams, Pt as deriveDeviceIdFromPublicKey, Q as validateNodePairRejectParams, R as validateExecApprovalResolveParams, S as validateConfigSchemaParams, St as validateWebLoginWaitParams, T as validateCronAddParams, Tt as validateWizardStartParams, U as validateLogsTailParams, V as validateExecApprovalsNodeSetParams, W as validateModelsListParams, X as validateNodePairApproveParams, Y as validateNodeListParams, Z as validateNodePairListParams, _ as validateChatInjectParams, _t as validateTalkConfigParams, a as validateAgentWaitParams, at as validateSessionsCompactParams, b as validateConfigGetParams, bt as validateWakeParams, c as validateAgentsFilesGetParams, ct as validateSessionsPatchParams, d as validateAgentsListParams, dt as validateSessionsResolveParams, et as validateNodePairVerifyParams, f as validateAgentsUpdateParams, ft as validateSessionsUsageParams, g as validateChatHistoryParams, gt as validateSkillsUpdateParams, h as validateChatAbortParams, ht as validateSkillsStatusParams, i as validateAgentParams, it as validateSendParams, j as validateCronUpdateParams, jt as parseSessionLabel, k as validateCronRunsParams, kt as errorShape, l as validateAgentsFilesListParams, lt as validateSessionsPreviewParams, m as validateChannelsStatusParams, mt as validateSkillsInstallParams, n as formatValidationErrors, nt as validatePollParams, o as validateAgentsCreateParams, ot as validateSessionsDeleteParams, p as validateChannelsLogoutParams, pt as validateSkillsBinsParams, q as validateNodeInvokeParams, r as validateAgentIdentityParams, rt as validateRequestFrame, s as validateAgentsDeleteParams, st as validateSessionsListParams, tt as validateNodeRenameParams, u as validateAgentsFilesSetParams, ut as validateSessionsResetParams, v as validateChatSendParams, vt as validateTalkModeParams, w as validateConnectParams, wt as validateWizardNextParams, x as validateConfigPatchParams, xt as validateWebLoginStartParams, y as validateConfigApplyParams, yt as validateUpdateRunParams, z as validateExecApprovalsGetParams } from "./client-tKWDYo7c.js";
 import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-DpzsRR75.js";
-import { s as loadGatewayTlsRuntime$1 } from "./call-Z_GCO8CL.js";
+import { s as loadGatewayTlsRuntime$1 } from "./call-BKsdSTVf.js";
 import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, i as isGatewayMessageChannel, l as normalizeMessageChannel, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-DdOBO6Qm.js";
 import { c as resolveGatewayBindHost, d as rawDataToString, i as isTrustedProxyAddress, l as resolveGatewayClientIp, n as isLoopbackHost, r as isPrivateOrLoopbackAddress, s as pickPrimaryLanIPv4, t as isLoopbackAddress, u as resolveGatewayListenHosts } from "./net-CRsiP49R.js";
 import { r as normalizeInputProvenance } from "./input-provenance-BaQjTV0-.js";
-import { S as registerAgentRunContext, a as abortEmbeddedPiRun, b as getAgentRunContext, d as runEmbeddedPiAgent, f as waitForEmbeddedPiRunEnd, i as CommandLane, p as runCliAgent, t as resolveAgentTimeoutMs, v as clearAgentRunContext, x as onAgentEvent, y as emitAgentEvent } from "./timeout-B0mCaCG5.js";
-import { C as resolveMainSessionKeyFromConfig, I as normalizeSessionDeliveryFields, M as deliveryContextFromSession, P as mergeDeliveryContext, S as resolveMainSessionKey, T as snapshotSessionOrigin, b as resolveAgentMainSessionKey, i as loadSessionStore, l as updateSessionStore, t as extractDeliveryInfo, x as resolveExplicitAgentSessionKey } from "./sessions-C3bteMLZ.js";
-import { G as getActiveTaskCount, J as resetAllLanes, L as resolveAgentIdentity, U as clearSessionQueues, X as waitForActiveTasks, Y as setCommandLaneConcurrency, a as listDescendantRunsForRequester, et as startDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, p as runSubagentAnnounceFlow, q as getTotalQueueSize, rt as isDiagnosticsEnabled, tt as stopDiagnosticHeartbeat } from "./subagent-registry-EoZxIEKl.js";
-import { A as isTtsProviderConfigured, B as setTtsEnabled, D as getTtsProvider, F as resolveTtsConfig, G as OPENAI_TTS_MODELS, H as setTtsProvider, I as resolveTtsPrefsPath, K as OPENAI_TTS_VOICES, L as resolveTtsProviderOrder, N as resolveTtsApiKey, P as resolveTtsAutoMode, U as textToSpeech, X as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, at as registerInternalHook, b as resolveUserTimezone, et as stripHeartbeatToken, it as createInternalHookEvent, k as isTtsEnabled, ot as triggerInternalHook, rt as clearInternalHooks } from "./anthropic-direct-runner-_uCPWuBb.js";
-import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./pi-embedded-helpers-CWl0I3Qm.js";
-import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-BoNWDo4X.js";
-import { a as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, c as safeEqualSecret, d as enableTailscaleFunnel, f as enableTailscaleServe, i as resolveGatewayAuth, l as disableTailscaleFunnel, m as getTailnetHostname, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, r as isLocalDirectRequest, s as createAuthRateLimiter, t as assertGatewayAuthConfigured, u as disableTailscaleServe } from "./auth-DK-0XxZU.js";
-import { r as movePathToTrash } from "./server-context-IfJbmK25.js";
-import { n as formatErrorMessage } from "./errors-B9FgVZ2s.js";
-import { o as detectMime } from "./image-ops-BsXjYj1e.js";
-import { i as formatPortDiagnostics, n as inspectPortUsage } from "./ports-Bv3sZ3bd.js";
-import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-BDSP0cT6.js";
-import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-CxBUgtZS.js";
-import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-QjoPADtG.js";
-import { f as normalizePollInput } from "./media-BLVMhFB3.js";
-import { t as ToolInputError } from "./common-C5mWuFve.js";
+import { S as registerAgentRunContext, a as abortEmbeddedPiRun, b as getAgentRunContext, d as runEmbeddedPiAgent, f as waitForEmbeddedPiRunEnd, i as CommandLane, p as runCliAgent, t as resolveAgentTimeoutMs, v as clearAgentRunContext, x as onAgentEvent, y as emitAgentEvent } from "./timeout-Cl8rWNWO.js";
+import { C as resolveMainSessionKeyFromConfig, I as normalizeSessionDeliveryFields, M as deliveryContextFromSession, P as mergeDeliveryContext, S as resolveMainSessionKey, T as snapshotSessionOrigin, b as resolveAgentMainSessionKey, i as loadSessionStore, l as updateSessionStore, t as extractDeliveryInfo, x as resolveExplicitAgentSessionKey } from "./sessions-CAiEkTKb.js";
+import { G as getActiveTaskCount, J as resetAllLanes, L as resolveAgentIdentity, U as clearSessionQueues, X as waitForActiveTasks, Y as setCommandLaneConcurrency, a as listDescendantRunsForRequester, et as startDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, p as runSubagentAnnounceFlow, q as getTotalQueueSize, rt as isDiagnosticsEnabled, tt as stopDiagnosticHeartbeat } from "./subagent-registry-ZIpC5W-9.js";
+import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-DLpZ8RFH.js";
+import { B as resolveTtsPrefsPath, K as setTtsProvider, L as resolveTtsApiKey, N as isTtsEnabled, P as isTtsProviderConfigured, R as resolveTtsAutoMode, V as resolveTtsProviderOrder, W as setTtsEnabled, X as OPENAI_TTS_VOICES, Y as OPENAI_TTS_MODELS, at as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, it as triggerInternalHook, j as getTtsProvider, lt as stripHeartbeatToken, nt as createInternalHookEvent, q as textToSpeech, rt as registerInternalHook, tt as clearInternalHooks, w as resolveUserTimezone, z as resolveTtsConfig } from "./anthropic-direct-runner-BJosFvVm.js";
+import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./pi-embedded-helpers-Cxzk0pra.js";
+import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-DhcoWMaN.js";
+import { a as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, c as safeEqualSecret, d as enableTailscaleFunnel, f as enableTailscaleServe, i as resolveGatewayAuth, l as disableTailscaleFunnel, m as getTailnetHostname, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, r as isLocalDirectRequest, s as createAuthRateLimiter, t as assertGatewayAuthConfigured, u as disableTailscaleServe } from "./auth-DuBZWd74.js";
+import { r as movePathToTrash } from "./server-context-C-usQ5Np.js";
+import { n as formatErrorMessage } from "./errors-l_q3lLBC.js";
+import { o as detectMime } from "./image-ops-BVtm-rU-.js";
+import { i as formatPortDiagnostics, n as inspectPortUsage } from "./ports-COy7Yg_k.js";
+import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CFBEoAN4.js";
+import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-B_RPJLsn.js";
+import { f as normalizePollInput } from "./media-IIqSkFpd.js";
+import { t as ToolInputError } from "./common-FlJ-8clz.js";
 import { c as saveToken, i as getToken, l as whoami, n as clearToken, o as registerWithInvite, s as resolveSuggestedIdentity, t as TOKEN_PATH } from "./noxsoft-auth-By_nLRaY.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-D3rS-Yd1.js";
-import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-BOyU9ccw.js";
-import { A as formatDoctorNonInteractiveHint, At as DEFAULT_INPUT_FILE_MAX_CHARS, B as normalizeOptionalText, Bt as extractImageContentFromSource, C as emitGatewayRestart, D as setGatewaySigusr1RestartPolicy, E as scheduleGatewaySigusr1Restart, F as writeRestartSentinel, Ft as DEFAULT_INPUT_PDF_MAX_PAGES, G as detectSuspiciousPatterns, H as normalizeRequiredName, Ht as estimateBase64DecodedBytes, I as normalizeCronJobCreate, It as DEFAULT_INPUT_PDF_MAX_PIXELS, J as applyBrowserProxyPaths, K as getHookType, L as normalizeCronJobPatch, Lt as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, Mt as DEFAULT_INPUT_IMAGE_MAX_BYTES, N as summarizeRestartSentinel, Nt as DEFAULT_INPUT_IMAGE_MIMES, O as setPreRestartDeferralCheck, Ot as registerUnhandledRejectionHandler, Pt as DEFAULT_INPUT_MAX_REDIRECTS, R as inferLegacyName, Rt as DEFAULT_INPUT_TIMEOUT_MS, S as deferGatewayRestartUntilIdle, T as markGatewaySigusr1RestartHandled, U as migrateLegacyCronPayload, V as normalizePayloadToSystemText, Vt as normalizeMimeList, W as buildSafeExternalPrompt, X as getPluginToolMeta, Y as persistBrowserProxyFiles, Z as loadAnimaPlugins, _ as ensureOutboundSessionEntry, _t as isAbortTrigger, a as sniffMimeFromBase64, b as resolveMessageChannelSelection, c as loadProviderUsageSummary, ct as createReplyDispatcher, d as saveProviderStore, h as normalizeGroupActivation, i as buildDefaultToolPolicyPipelineSteps, j as formatRestartSentinelMessage, jt as DEFAULT_INPUT_FILE_MIMES, k as consumeRestartSentinel, kt as DEFAULT_INPUT_FILE_MAX_BYTES, l as loadProviderStore, lt as getTotalPendingReplies, n as BARE_SESSION_RESET_PROMPT, o as createAnimaTools, q as isExternalHookSession, r as applyToolPolicyPipeline, rt as getChannelActivity, s as resolveAnnounceTargetFromKey, st as dispatchInboundMessage, u as maskApiKey, v as resolveOutboundSessionRoute, vt as stopSubagentsForRequester, w as isGatewaySigusr1RestartExternallyAllowed, x as consumeGatewaySigusr1RestartAuthorization, y as resetDirectoryCache, yt as formatZonedTimestamp, z as normalizeOptionalAgentId, zt as extractFileContentFromSource } from "./reply-Bw4torMz.js";
-import { t as lookupContextTokens } from "./context-Cau0zD3W.js";
-import { $ as registerSkillsChangeListener, A as getRemoteSkillEligibility, B as renamePairedNode, E as requestHeartbeatNow, F as removeRemoteNodeInfo, G as verifyPairingToken, H as updatePairedNodeMetadata, I as setSkillsRemoteRegistry, J as readJsonFile, K as createAsyncLock, L as approveNodePairing, M as recordRemoteNodeInfo, N as refreshRemoteBinsForConnectedNodes, O as normalizeSendPolicy, P as refreshRemoteNodeBins, Q as getSkillsSnapshotVersion, R as listNodePairing, T as runWithModelFallback, U as verifyNodeToken, V as requestNodePairing, W as generatePairingToken, X as writeJsonAtomic, Y as resolvePairingPaths, _ as stripEnvelopeFromMessages, a as listSessionsFromStore, b as resolveOutboundTarget, c as pruneLegacyStoreKeys, d as archiveFileOnDisk, dt as loadModelCatalog, f as archiveSessionTranscripts, g as resolveSessionTranscriptCandidates, h as readSessionPreviewItemsFromTranscript, i as listAgentsForGateway, it as parseVerboseOverride, j as primeRemoteSkillsCache, k as resolveSendPolicy, l as resolveGatewaySessionStoreTarget, m as readSessionMessages, n as setCliSessionId, nt as applyModelOverrideToSessionEntry, o as loadCombinedSessionStoreForGateway, ot as enqueueSystemEvent, p as capArrayByJsonBytes, q as pruneExpiredPending, r as canonicalizeSpawnedByForAgent, rt as applyVerboseOverride, s as loadSessionEntry, st as isSystemEventContextChanged, t as getCliSessionId, u as resolveSessionModelRef, x as resolveSessionDeliveryTarget, z as rejectNodePairing } from "./cli-session-8PeURiwF.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-BhezvxNA.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-Dtytaq21.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-DUF4hGd3.js";
+import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-CUKC8xqZ.js";
+import { A as formatDoctorNonInteractiveHint, At as DEFAULT_INPUT_FILE_MAX_CHARS, B as normalizeOptionalText, Bt as extractImageContentFromSource, C as emitGatewayRestart, D as setGatewaySigusr1RestartPolicy, E as scheduleGatewaySigusr1Restart, F as writeRestartSentinel, Ft as DEFAULT_INPUT_PDF_MAX_PAGES, G as detectSuspiciousPatterns, H as normalizeRequiredName, Ht as estimateBase64DecodedBytes, I as normalizeCronJobCreate, It as DEFAULT_INPUT_PDF_MAX_PIXELS, J as applyBrowserProxyPaths, K as getHookType, L as normalizeCronJobPatch, Lt as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, Mt as DEFAULT_INPUT_IMAGE_MAX_BYTES, N as summarizeRestartSentinel, Nt as DEFAULT_INPUT_IMAGE_MIMES, O as setPreRestartDeferralCheck, Ot as registerUnhandledRejectionHandler, Pt as DEFAULT_INPUT_MAX_REDIRECTS, R as inferLegacyName, Rt as DEFAULT_INPUT_TIMEOUT_MS, S as deferGatewayRestartUntilIdle, T as markGatewaySigusr1RestartHandled, U as migrateLegacyCronPayload, V as normalizePayloadToSystemText, Vt as normalizeMimeList, W as buildSafeExternalPrompt, X as getPluginToolMeta, Y as persistBrowserProxyFiles, Z as loadAnimaPlugins, _ as ensureOutboundSessionEntry, _t as isAbortTrigger, a as sniffMimeFromBase64, b as resolveMessageChannelSelection, c as loadProviderUsageSummary, ct as createReplyDispatcher, d as saveProviderStore, h as normalizeGroupActivation, i as buildDefaultToolPolicyPipelineSteps, j as formatRestartSentinelMessage, jt as DEFAULT_INPUT_FILE_MIMES, k as consumeRestartSentinel, kt as DEFAULT_INPUT_FILE_MAX_BYTES, l as loadProviderStore, lt as getTotalPendingReplies, n as BARE_SESSION_RESET_PROMPT, o as createAnimaTools, q as isExternalHookSession, r as applyToolPolicyPipeline, rt as getChannelActivity, s as resolveAnnounceTargetFromKey, st as dispatchInboundMessage, u as maskApiKey, v as resolveOutboundSessionRoute, vt as stopSubagentsForRequester, w as isGatewaySigusr1RestartExternallyAllowed, x as consumeGatewaySigusr1RestartAuthorization, y as resetDirectoryCache, yt as formatZonedTimestamp, z as normalizeOptionalAgentId, zt as extractFileContentFromSource } from "./reply-DAGmjvs-.js";
+import { t as lookupContextTokens } from "./context-BZV-msqG.js";
+import { $ as registerSkillsChangeListener, A as getRemoteSkillEligibility, B as renamePairedNode, E as requestHeartbeatNow, F as removeRemoteNodeInfo, G as verifyPairingToken, H as updatePairedNodeMetadata, I as setSkillsRemoteRegistry, J as readJsonFile, K as createAsyncLock, L as approveNodePairing, M as recordRemoteNodeInfo, N as refreshRemoteBinsForConnectedNodes, O as normalizeSendPolicy, P as refreshRemoteNodeBins, Q as getSkillsSnapshotVersion, R as listNodePairing, T as runWithModelFallback, U as verifyNodeToken, V as requestNodePairing, W as generatePairingToken, X as writeJsonAtomic, Y as resolvePairingPaths, _ as stripEnvelopeFromMessages, a as listSessionsFromStore, b as resolveOutboundTarget, c as pruneLegacyStoreKeys, d as archiveFileOnDisk, dt as loadModelCatalog, f as archiveSessionTranscripts, g as resolveSessionTranscriptCandidates, h as readSessionPreviewItemsFromTranscript, i as listAgentsForGateway, it as parseVerboseOverride, j as primeRemoteSkillsCache, k as resolveSendPolicy, l as resolveGatewaySessionStoreTarget, m as readSessionMessages, n as setCliSessionId, nt as applyModelOverrideToSessionEntry, o as loadCombinedSessionStoreForGateway, ot as enqueueSystemEvent, p as capArrayByJsonBytes, q as pruneExpiredPending, r as canonicalizeSpawnedByForAgent, rt as applyVerboseOverride, s as loadSessionEntry, st as isSystemEventContextChanged, t as getCliSessionId, u as resolveSessionModelRef, x as resolveSessionDeliveryTarget, z as rejectNodePairing } from "./cli-session-CmX1oA1T.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-CoAOvyW0.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-Bn9S3ywB.js";
 import { f as resolveExecApprovalsSocketPath, o as normalizeExecApprovals, p as saveExecApprovals, r as ensureExecApprovals, s as readExecApprovalsSnapshot, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-C93qAWaS.js";
 import { a as deriveSessionTotalTokens, o as hasNonzeroUsage } from "./transcript-tools-B_G-69Yj.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DSWsPuub.js";
-import { t as createBrowserRouteDispatcher } from "./dispatcher-Bk0gFz4b.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-B8AsIRG3.js";
+import { t as createBrowserRouteDispatcher } from "./dispatcher-N_4IYF9I.js";
 import { t as parseAbsoluteTimeMs } from "./parse-DpMxokt3.js";
-import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-lLyz71EH.js";
-import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-Dy_yxyCq.js";
+import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-vltn5akf.js";
+import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-CAsFNEP7.js";
 import { t as ensureAnimaCliOnPath } from "./path-env-DPAIJ-gH.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-CqD9pFDt.js";
-import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, h as resolveControlUiLinks, x as buildControlUiAvatarUrl } from "./onboard-helpers-BRp_xJvW.js";
+import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, h as resolveControlUiLinks, x as buildControlUiAvatarUrl } from "./onboard-helpers-tkuUrdCB.js";
 import { t as resolveGatewayService } from "./service-vHXSmNs7.js";
 import { t as parsePort } from "./parse-port-CzZhXGzo.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DvdFQF6R.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BVb_SG8Y.js";
-import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-DqjWCAbO.js";
-import { r as getStatusSummary } from "./status-C4ZTdSwA.js";
+import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-BTMmL_HS.js";
+import { r as getStatusSummary } from "./status-rt3tIYmL.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-tQqXkvd_.js";
-import { c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce } from "./health-CMIY7xAI.js";
-import { a as createOutboundSendDeps, i as resolveAgentOutboundTarget, o as createDefaultDeps, r as resolveAgentDeliveryPlan, s as createOutboundSendDeps$1, t as agentCommand } from "./agent-DiEXJmhj.js";
+import { c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce } from "./health-BVBoq6jM.js";
+import { a as createOutboundSendDeps, i as resolveAgentOutboundTarget, o as createDefaultDeps, r as resolveAgentDeliveryPlan, s as createOutboundSendDeps$1, t as agentCommand } from "./agent-B3KeHK1A.js";
 import { t as buildChannelUiCatalog } from "./catalog-BZSyH9a0.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-DLrgOd4y.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-UE1XVFcw.js";
 import { a as resolveControlUiRootOverrideSync, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync } from "./health-format-t3i7iOLf.js";
 import { n as validateSystemRunCommandConsistency, r as getMachineDisplayName, t as formatExecCommand } from "./system-run-command-DmCzNx9l.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channels-status-issues-Dqd_vE0e.js";
-import { t as WizardCancelledError } from "./prompts-NvPXbNVc.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channels-status-issues-BlmAMBCg.js";
+import { t as WizardCancelledError } from "./prompts-BfHxhlF9.js";
 import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-DOs614Y0.js";
-import { t as runOnboardingWizard } from "./onboarding-192Oe9K6.js";
+import { t as runOnboardingWizard } from "./onboarding-Caiq91Yz.js";
 import { a as setGatewayWsLogStyle, i as summarizeAgentEventForWsLog, n as logWs, r as shouldLogWs, t as formatForLog } from "./ws-log-BSIhspLx.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CHtHiqPa.js";
 import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-D_sk66EQ.js";
 import { t as migrateFromCoherence } from "./migrate-1pPd_oZa.js";
-import { t as installSkill } from "./skills-install-CC63dOs4.js";
-import { t as runGatewayUpdate } from "./update-runner-IARYjXbS.js";
-import { n as forceFreePortAndWait } from "./ports-BmSDzOHm.js";
+import { t as installSkill } from "./skills-install-D_bxdc-6.js";
+import { t as runGatewayUpdate } from "./update-runner-fvdM_Hip.js";
+import { n as forceFreePortAndWait } from "./ports-DyX87qKc.js";
 import { execFile, spawn, spawnSync } from "node:child_process";
 import os from "node:os";
 import path from "node:path";
@@ -11423,7 +11423,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-CFCwOP0n.js");
+			const { handleNodeEvent } = await import("./server-node-events-3KeQAwUo.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -12836,7 +12836,7 @@ const usageHandlers = {
 		const resolved = resolveSessionUsageFileOrRespond(key, respond);
 		if (!resolved) return;
 		const { config, entry, agentId, sessionId, sessionFile } = resolved;
-		const { loadSessionLogs } = await import("./session-cost-usage-lLyz71EH.js").then((n) => n.a);
+		const { loadSessionLogs } = await import("./session-cost-usage-vltn5akf.js").then((n) => n.a);
 		respond(true, { logs: await loadSessionLogs({
 			sessionId,
 			sessionEntry: entry,
@@ -14309,7 +14309,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.ANIMA_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.ANIMA_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-D3rS-Yd1.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-DUF4hGd3.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -19349,7 +19349,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-qVRizdA1.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-BhezvxNA.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CoAOvyW0.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),