@noxsoft/anima 5.1.1 → 6.0.0

package/dist/{run-GZnwhuUG.js → run-Dfz_7j7t.js}

@@ -1,77 +1,79 @@
 import { h as expandHomePrefix, i as isNixMode, l as resolveGatewayLockDir, m as resolveStateDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-zhVksOvm.js";
-import { E as getActivePluginRegistry, F as setVerbose, G as setLoggerOverride, H as getChildLogger, U as getLogger, W as getResolvedLoggerSettings, d as defaultRuntime, g as CHANNEL_IDS, i as getResolvedConsoleSettings, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger, v as DEFAULT_CHAT_CHANNEL } from "./subsystem-BMsbqSb4.js";
-import { C as shortenHomePath, D as truncateUtf16Safe, b as resolveUserPath, c as ensureDir, d as isPlainObject, r as clamp, t as CONFIG_DIR } from "./utils-B60lF9Wq.js";
-import { C as supportsXHighThinking, _ as normalizeElevatedLevel, b as normalizeUsageDisplay, m as formatXHighModelHint, p as formatThinkingLevels, v as normalizeReasoningLevel, x as normalizeVerboseLevel, y as normalizeThinkLevel } from "./pi-embedded-helpers-B6wVA0hU.js";
-import { $ as saveProviderStore, $n as runCliAgent, $t as getHookType, A as writeJsonAtomic, An as stopSubagentsForRequester, At as emitGatewayRestart, B as abortEmbeddedPiRun, Bt as summarizeRestartSentinel, C as verifyNodeToken, Cr as extractImageContentFromSource, Ct as resolveOutboundTarget, D as pruneExpiredPending, Dt as runWithModelFallback, E as createAsyncLock, En as formatZonedTimestamp, Et as resolveMessageChannelSelection, Fn as initSubagentRegistry, Ft as setPreRestartDeferralCheck, G as sniffMimeFromBase64, Gn as getAgentRunContext, Gt as inferLegacyName, H as waitForEmbeddedPiRunEnd, Hn as CommandLane, Ht as writeRestartSentinel, I as getTotalQueueSize, In as listDescendantRunsForRequester, It as consumeRestartSentinel, J as createAnimaTools, Jn as resolveAgentIdentity, Jt as normalizePayloadToSystemText, K as requestHeartbeatNow, Kn as onAgentEvent, Kt as normalizeOptionalAgentId, L as resetAllLanes, Lt as formatDoctorNonInteractiveHint, M as registerSkillsChangeListener, Mt as markGatewaySigusr1RestartHandled, N as clearSessionQueues, Nt as scheduleGatewaySigusr1Restart, O as readJsonFile, Or as resolveAgentTimeoutMs, Ot as consumeGatewaySigusr1RestartAuthorization, P as getActiveTaskCount, Pn as countActiveDescendantRuns, Pt as setGatewaySigusr1RestartPolicy, Q as maskApiKey, Qt as detectSuspiciousPatterns, R as setCommandLaneConcurrency, Rn as runSubagentAnnounceFlow, Rt as formatRestartSentinelMessage, S as updatePairedNodeMetadata, Sr as extractFileContentFromSource, T as verifyPairingToken, Tr as estimateBase64DecodedBytes, Tt as resetDirectoryCache, U as applyToolPolicyPipeline, Un as clearAgentRunContext, Ut as normalizeCronJobCreate, V as runEmbeddedPiAgent, W as buildDefaultToolPolicyPipelineSteps, Wn as emitAgentEvent, Wt as normalizeCronJobPatch, X as loadProviderUsageSummary, Xt as migrateLegacyCronPayload, Y as resolveAnnounceTargetFromKey, Yt as normalizeRequiredName, Z as loadProviderStore, Zt as buildSafeExternalPrompt, _ as approveNodePairing, _r as DEFAULT_INPUT_MAX_REDIRECTS, _t as normalizeGroupActivation, ar as enqueueSystemEvent, at as loadSessionEntry, b as renamePairedNode, bn as stopDiagnosticHeartbeat, br as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, bt as resolveOutboundSessionRoute, c as normalizeSendPolicy, ct as resolveSessionModelRef, d as primeRemoteSkillsCache, dr as registerUnhandledRejectionHandler, dt as capArrayByJsonBytes, en as isExternalHookSession, er as lookupContextTokens, f as recordRemoteNodeInfo, fr as DEFAULT_INPUT_FILE_MAX_BYTES, ft as readSessionMessages, g as setSkillsRemoteRegistry, gn as getTotalPendingReplies, gr as DEFAULT_INPUT_IMAGE_MIMES, h as removeRemoteNodeInfo, hn as createReplyDispatcher, hr as DEFAULT_INPUT_IMAGE_MAX_BYTES, ht as stripEnvelopeFromMessages, i as setCliSessionId, in as loadAnimaPlugins, ir as parseVerboseOverride, it as loadCombinedSessionStoreForGateway, j as getSkillsSnapshotVersion, jt as isGatewaySigusr1RestartExternallyAllowed, k as resolvePairingPaths, kn as isAbortTrigger, kt as deferGatewayRestartUntilIdle, l as resolveSendPolicy, lr as loadModelCatalog, lt as archiveFileOnDisk, m as refreshRemoteNodeBins, mn as dispatchInboundMessage, mr as DEFAULT_INPUT_FILE_MIMES, mt as resolveSessionTranscriptCandidates, n as BARE_SESSION_RESET_PROMPT, nn as persistBrowserProxyFiles, nr as applyModelOverrideToSessionEntry, nt as listAgentsForGateway, or as isSystemEventContextChanged, ot as pruneLegacyStoreKeys, p as refreshRemoteBinsForConnectedNodes, pr as DEFAULT_INPUT_FILE_MAX_CHARS, pt as readSessionPreviewItemsFromTranscript, qn as registerAgentRunContext, qt as normalizeOptionalText, r as getCliSessionId, rn as getPluginToolMeta, rr as applyVerboseOverride, rt as listSessionsFromStore, st as resolveGatewaySessionStoreTarget, tn as applyBrowserProxyPaths, tt as canonicalizeSpawnedByForAgent, u as getRemoteSkillEligibility, un as getChannelActivity, ut as archiveSessionTranscripts, v as listNodePairing, vr as DEFAULT_INPUT_PDF_MAX_PAGES, w as generatePairingToken, wr as normalizeMimeList, wt as resolveSessionDeliveryTarget, x as requestNodePairing, xn as isDiagnosticsEnabled, xr as DEFAULT_INPUT_TIMEOUT_MS, y as rejectNodePairing, yn as startDiagnosticHeartbeat, yr as DEFAULT_INPUT_PDF_MAX_PIXELS, yt as ensureOutboundSessionEntry, z as waitForActiveTasks, zn as readLatestAssistantReply } from "./reply-DWdVFSBB.js";
+import { E as getActivePluginRegistry, F as setVerbose, G as setLoggerOverride, H as getChildLogger, U as getLogger, W as getResolvedLoggerSettings, d as defaultRuntime, g as CHANNEL_IDS, i as getResolvedConsoleSettings, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger, v as DEFAULT_CHAT_CHANNEL } from "./subsystem-BAADN1B8.js";
+import { C as shortenHomePath, D as truncateUtf16Safe, b as resolveUserPath, c as ensureDir, d as isPlainObject, r as clamp, t as CONFIG_DIR } from "./utils-CLYlhJuc.js";
+import { C as supportsXHighThinking, _ as normalizeElevatedLevel, b as normalizeUsageDisplay, m as formatXHighModelHint, p as formatThinkingLevels, v as normalizeReasoningLevel, x as normalizeVerboseLevel, y as normalizeThinkLevel } from "./pi-embedded-helpers-BZ9GspxK.js";
+import { $ as archiveFileOnDisk, At as deferGatewayRestartUntilIdle, B as sniffMimeFromBase64, C as verifyNodeToken, Cn as stopDiagnosticHeartbeat, Cr as DEFAULT_INPUT_PDF_MAX_PIXELS, Ct as loadProviderStore, D as registerSkillsChangeListener, Dr as extractImageContentFromSource, E as getSkillsSnapshotVersion, Er as extractFileContentFromSource, F as abortEmbeddedPiRun, Ft as setGatewaySigusr1RestartPolicy, G as canonicalizeSpawnedByForAgent, Gn as CommandLane, Gt as normalizeCronJobPatch, Hn as readLatestAssistantReply, I as waitForEmbeddedPiRunEnd, It as setPreRestartDeferralCheck, J as loadCombinedSessionStoreForGateway, Jn as getAgentRunContext, Jt as normalizeOptionalText, K as listAgentsForGateway, Kn as clearAgentRunContext, Kt as inferLegacyName, L as runNoxSoftEmbeddedAgent, Ln as countActiveDescendantRuns, Lt as consumeRestartSentinel, M as resetAllLanes, Mn as isAbortTrigger, Mr as resolveAgentTimeoutMs, Mt as isGatewaySigusr1RestartExternallyAllowed, N as setCommandLaneConcurrency, Nn as stopSubagentsForRequester, Nt as markGatewaySigusr1RestartHandled, O as clearSessionQueues, Or as normalizeMimeList, P as waitForActiveTasks, Pt as scheduleGatewaySigusr1Restart, Q as resolveSessionModelRef, R as applyToolPolicyPipeline, Rn as initSubagentRegistry, Rt as formatDoctorNonInteractiveHint, S as updatePairedNodeMetadata, Sn as startDiagnosticHeartbeat, Sr as DEFAULT_INPUT_PDF_MAX_PAGES, St as loadProviderUsageSummary, T as verifyPairingToken, Tr as DEFAULT_INPUT_TIMEOUT_MS, Tt as saveProviderStore, U as createAnimaTools, Ut as writeRestartSentinel, V as requestHeartbeatNow, Vn as runSubagentAnnounceFlow, Vt as summarizeRestartSentinel, W as resolveAnnounceTargetFromKey, Wt as normalizeCronJobCreate, X as pruneLegacyStoreKeys, Xn as registerAgentRunContext, Xt as normalizeRequiredName, Y as loadSessionEntry, Yn as onAgentEvent, Yt as normalizePayloadToSystemText, Z as resolveGatewaySessionStoreTarget, Zn as resolveAgentIdentity, Zt as migrateLegacyCronPayload, _ as approveNodePairing, _n as dispatchInboundMessage, _r as DEFAULT_INPUT_FILE_MAX_CHARS, _t as resetDirectoryCache, an as persistBrowserProxyFiles, ar as applyVerboseOverride, at as stripEnvelopeFromMessages, b as renamePairedNode, br as DEFAULT_INPUT_IMAGE_MIMES, bt as runWithModelFallback, c as normalizeSendPolicy, cr as isSystemEventContextChanged, d as primeRemoteSkillsCache, dr as loadModelCatalog, dt as resolveOutboundSessionRoute, en as buildSafeExternalPrompt, et as archiveSessionTranscripts, f as recordRemoteNodeInfo, g as setSkillsRemoteRegistry, gr as DEFAULT_INPUT_FILE_MAX_BYTES, h as removeRemoteNodeInfo, ht as resolveSessionDeliveryTarget, i as setCliSessionId, in as applyBrowserProxyPaths, ir as applyModelOverrideToSessionEntry, it as resolveSessionTranscriptCandidates, j as getTotalQueueSize, jt as emitGatewayRestart, k as getActiveTaskCount, kn as formatZonedTimestamp, kr as estimateBase64DecodedBytes, kt as consumeGatewaySigusr1RestartAuthorization, l as resolveSendPolicy, m as refreshRemoteNodeBins, mr as registerUnhandledRejectionHandler, mt as resolveOutboundTarget, n as BARE_SESSION_RESET_PROMPT, nn as getHookType, nr as lookupContextTokens, nt as readSessionMessages, on as getPluginToolMeta, or as parseVerboseOverride, p as refreshRemoteBinsForConnectedNodes, pn as getChannelActivity, q as listSessionsFromStore, qn as emitAgentEvent, qt as normalizeOptionalAgentId, r as getCliSessionId, rn as isExternalHookSession, rt as readSessionPreviewItemsFromTranscript, sn as loadAnimaPlugins, sr as enqueueSystemEvent, st as normalizeGroupActivation, tn as detectSuspiciousPatterns, tt as capArrayByJsonBytes, u as getRemoteSkillEligibility, ut as ensureOutboundSessionEntry, v as listNodePairing, vn as createReplyDispatcher, vr as DEFAULT_INPUT_FILE_MIMES, vt as resolveMessageChannelSelection, w as generatePairingToken, wn as isDiagnosticsEnabled, wr as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, wt as maskApiKey, x as requestNodePairing, xr as DEFAULT_INPUT_MAX_REDIRECTS, xt as resolveWorkingModeModelSelection, y as rejectNodePairing, yn as getTotalPendingReplies, yr as DEFAULT_INPUT_IMAGE_MAX_BYTES, z as buildDefaultToolPolicyPipelineSteps, zn as listDescendantRunsForRequester, zt as formatRestartSentinelMessage } from "./reply-DtHlnzOx.js";
 import { b as isSubagentSessionKey, d as resolveAgentIdFromSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, m as toAgentRequestSessionKey, n as DEFAULT_AGENT_ID, t as DEFAULT_ACCOUNT_ID, u as normalizeMainKey, v as isCronRunSessionKey, x as parseAgentSessionKey } from "./session-key-DAZmp8ll.js";
-import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-cazBMA02.js";
+import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-BylR5qWS.js";
 import { t as resolveAnimaPackageRoot } from "./anima-root-xWSKR6Wm.js";
-import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-D3HZp64M.js";
-import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-wCaVeFbb.js";
-import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-DqwH4y-D.js";
-import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DVJCc7dM.js";
-import { c as isTestDefaultMemorySlotDisabled } from "./manifest-registry-D-DOtLzo.js";
-import { A as resolveMainSessionKeyFromConfig, D as resolveAgentMainSessionKey, M as snapshotSessionOrigin, O as resolveExplicitAgentSessionKey, d as deliveryContextFromSession, h as normalizeSessionDeliveryFields, i as loadSessionStore, k as resolveMainSessionKey, l as updateSessionStore, p as mergeDeliveryContext, t as extractDeliveryInfo } from "./sessions-C2th3rm6.js";
-import { o as detectMime } from "./image-ops-BUy__GHL.js";
-import { t as normalizePollInput } from "./polls-DuwPgAV7.js";
-import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-B8Nza4lP.js";
+import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-CXxC8FFX.js";
+import { _ as DEFAULT_MODEL, a as isCliProvider, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault, i as getModelRefStatus, p as resolveHooksGmailModel, u as resolveAllowedModelRef, v as DEFAULT_PROVIDER } from "./model-selection-CY6r_3wt.js";
+import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-DaD4FsAn.js";
+import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DlTia1B4.js";
+import { c as isTestDefaultMemorySlotDisabled } from "./manifest-registry-qF960vMH.js";
+import { A as resolveMainSessionKeyFromConfig, D as resolveAgentMainSessionKey, M as snapshotSessionOrigin, O as resolveExplicitAgentSessionKey, d as deliveryContextFromSession, h as normalizeSessionDeliveryFields, i as loadSessionStore, k as resolveMainSessionKey, l as updateSessionStore, p as mergeDeliveryContext, t as extractDeliveryInfo } from "./sessions-BOzeFzuL.js";
+import { o as detectMime } from "./image-ops-Ct3GueyT.js";
+import { t as normalizePollInput } from "./polls-DFISjV7H.js";
+import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-pBHlfFdB.js";
 import { t as formatCliCommand } from "./command-format-BCtkuvqF.js";
-import { a as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, c as safeEqualSecret, d as enableTailscaleFunnel, f as enableTailscaleServe, i as resolveGatewayAuth, l as disableTailscaleFunnel, m as getTailnetHostname, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, r as isLocalDirectRequest, s as createAuthRateLimiter, t as assertGatewayAuthConfigured, u as disableTailscaleServe } from "./auth-DXrALxdm.js";
+import { a as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, c as safeEqualSecret, d as enableTailscaleFunnel, f as enableTailscaleServe, i as resolveGatewayAuth, l as disableTailscaleFunnel, m as getTailnetHostname, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, r as isLocalDirectRequest, s as createAuthRateLimiter, t as assertGatewayAuthConfigured, u as disableTailscaleServe } from "./auth-DsC5pZ_0.js";
 import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-Bg_vE5qi.js";
 import { a as isTrustedProxyAddress, c as pickPrimaryLanIPv4, d as resolveGatewayListenHosts, i as isPrivateOrLoopbackAddress, l as resolveGatewayBindHost, n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString, u as resolveGatewayClientIp } from "./ws-BapRHqfx.js";
-import { r as movePathToTrash } from "./server-context-BlJi7pjP.js";
-import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot, x as hasBinary } from "./skills-CQoUYlGu.js";
+import { r as movePathToTrash } from "./server-context-Yx4pgBqJ.js";
+import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot, x as hasBinary } from "./skills-4v6-kw0C.js";
 import { n as formatErrorMessage } from "./errors-Bv81hF2P.js";
-import { a as inspectPortUsage, s as formatPortDiagnostics } from "./ports-BX00e96t.js";
-import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, i as isGatewayMessageChannel, l as normalizeMessageChannel, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-DZYYDt1_.js";
-import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-DnJgmFJR.js";
+import { a as inspectPortUsage, s as formatPortDiagnostics } from "./ports-q535r1PZ.js";
+import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, i as isGatewayMessageChannel, l as normalizeMessageChannel, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-CMsexA3K.js";
+import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-DYcg0qBW.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-Dazi-gYo.js";
-import { T as normalizeSecretInput } from "./auth-profiles-DjCH4kWT.js";
-import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-DGhK0fpG.js";
-import { B as resolveTtsPrefsPath, K as setTtsProvider, L as resolveTtsApiKey, N as isTtsEnabled, P as isTtsProviderConfigured, R as resolveTtsAutoMode, V as resolveTtsProviderOrder, W as setTtsEnabled, X as OPENAI_TTS_VOICES, Y as OPENAI_TTS_MODELS, ct as stripHeartbeatToken, et as clearInternalHooks, it as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, j as getTtsProvider, nt as registerInternalHook, q as textToSpeech, rt as triggerInternalHook, tt as createInternalHookEvent, w as resolveUserTimezone, z as resolveTtsConfig } from "./anthropic-direct-runner-B12V2Q5H.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-ahx1N11n.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-691NgCXx.js";
-import { t as ToolInputError } from "./common-C2wAYEWA.js";
-import { $ as validateNodePairRequestParams, A as validateCronStatusParams, B as validateExecApprovalsNodeGetParams, C as validateConfigSetParams, Ct as validateWizardCancelParams, D as validateCronRemoveParams, Dt as PROTOCOL_VERSION, E as validateCronListParams, Et as validateWizardStatusParams, F as validateDeviceTokenRevokeParams, G as validateNodeDescribeParams, H as validateExecApprovalsSetParams, I as validateDeviceTokenRotateParams, It as deriveDeviceIdFromPublicKey, J as validateNodeInvokeResultParams, K as validateNodeEventParams, L as validateExecApprovalRequestParams, M as validateDevicePairApproveParams, N as validateDevicePairListParams, Nt as normalizeInputProvenance, O as validateCronRunParams, Ot as ErrorCodes, P as validateDevicePairRejectParams, Pt as buildDeviceAuthPayload, Q as validateNodePairRejectParams, R as validateExecApprovalResolveParams, Rt as normalizeDevicePublicKeyBase64Url, S as validateConfigSchemaParams, St as validateWebLoginWaitParams, T as validateCronAddParams, Tt as validateWizardStartParams, U as validateLogsTailParams, V as validateExecApprovalsNodeSetParams, W as validateModelsListParams, X as validateNodePairApproveParams, Y as validateNodeListParams, Z as validateNodePairListParams, _ as validateChatInjectParams, _t as validateTalkConfigParams, a as validateAgentWaitParams, at as validateSessionsCompactParams, b as validateConfigGetParams, bt as validateWakeParams, c as validateAgentsFilesGetParams, ct as validateSessionsPatchParams, d as validateAgentsListParams, dt as validateSessionsResolveParams, et as validateNodePairVerifyParams, f as validateAgentsUpdateParams, ft as validateSessionsUsageParams, g as validateChatHistoryParams, gt as validateSkillsUpdateParams, h as validateChatAbortParams, ht as validateSkillsStatusParams, i as validateAgentParams, it as validateSendParams, j as validateCronUpdateParams, jt as parseSessionLabel, k as validateCronRunsParams, kt as errorShape, l as validateAgentsFilesListParams, lt as validateSessionsPreviewParams, m as validateChannelsStatusParams, mt as validateSkillsInstallParams, n as formatValidationErrors, nt as validatePollParams, o as validateAgentsCreateParams, ot as validateSessionsDeleteParams, p as validateChannelsLogoutParams, pt as validateSkillsBinsParams, q as validateNodeInvokeParams, r as validateAgentIdentityParams, rt as validateRequestFrame, s as validateAgentsDeleteParams, st as validateSessionsListParams, tt as validateNodeRenameParams, u as validateAgentsFilesSetParams, ut as validateSessionsResetParams, v as validateChatSendParams, vt as validateTalkModeParams, w as validateConnectParams, wt as validateWizardNextParams, x as validateConfigPatchParams, xt as validateWebLoginStartParams, y as validateConfigApplyParams, yt as validateUpdateRunParams, z as validateExecApprovalsGetParams, zt as verifyDeviceSignature } from "./client-D9E5Wwb_.js";
-import { s as loadGatewayTlsRuntime$1 } from "./call-DQjoz63V.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-ox141hP6.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-CzAfyR4e.js";
-import { t as createBrowserRouteDispatcher } from "./dispatcher-DzT6jltc.js";
+import { O as normalizeSecretInput } from "./auth-profiles-C-LuhW6c.js";
+import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-SP2Q7i59.js";
+import { B as resolveTtsConfig, F as isTtsProviderConfigured, G as setTtsEnabled, H as resolveTtsProviderOrder, J as textToSpeech, M as getTtsProvider, P as isTtsEnabled, R as resolveTtsApiKey, T as resolveUserTimezone, V as resolveTtsPrefsPath, X as OPENAI_TTS_MODELS, Z as OPENAI_TTS_VOICES, at as triggerInternalHook, it as registerInternalHook, nt as clearInternalHooks, ot as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, q as setTtsProvider, rt as createInternalHookEvent, ut as stripHeartbeatToken, z as resolveTtsAutoMode } from "./anthropic-direct-runner-BeYCnvZ8.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-BKzX3YoN.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DLtBA6r5.js";
+import { a as readTrustGraphSnapshot, c as pruneExpiredPending, d as writeJsonAtomic, l as readJsonFile, o as saveTrustGraph, s as createAsyncLock, u as resolvePairingPaths } from "./loader-Bw2wdN4l.js";
+import { t as ToolInputError } from "./common-BCW6hLGI.js";
+import { $ as validateNodePairRequestParams, A as validateCronStatusParams, B as validateExecApprovalsNodeGetParams, C as validateConfigSetParams, Ct as validateWizardCancelParams, D as validateCronRemoveParams, Dt as PROTOCOL_VERSION, E as validateCronListParams, Et as validateWizardStatusParams, F as validateDeviceTokenRevokeParams, G as validateNodeDescribeParams, H as validateExecApprovalsSetParams, I as validateDeviceTokenRotateParams, It as deriveDeviceIdFromPublicKey, J as validateNodeInvokeResultParams, K as validateNodeEventParams, L as validateExecApprovalRequestParams, M as validateDevicePairApproveParams, N as validateDevicePairListParams, Nt as normalizeInputProvenance, O as validateCronRunParams, Ot as ErrorCodes, P as validateDevicePairRejectParams, Pt as buildDeviceAuthPayload, Q as validateNodePairRejectParams, R as validateExecApprovalResolveParams, Rt as normalizeDevicePublicKeyBase64Url, S as validateConfigSchemaParams, St as validateWebLoginWaitParams, T as validateCronAddParams, Tt as validateWizardStartParams, U as validateLogsTailParams, V as validateExecApprovalsNodeSetParams, W as validateModelsListParams, X as validateNodePairApproveParams, Y as validateNodeListParams, Z as validateNodePairListParams, _ as validateChatInjectParams, _t as validateTalkConfigParams, a as validateAgentWaitParams, at as validateSessionsCompactParams, b as validateConfigGetParams, bt as validateWakeParams, c as validateAgentsFilesGetParams, ct as validateSessionsPatchParams, d as validateAgentsListParams, dt as validateSessionsResolveParams, et as validateNodePairVerifyParams, f as validateAgentsUpdateParams, ft as validateSessionsUsageParams, g as validateChatHistoryParams, gt as validateSkillsUpdateParams, h as validateChatAbortParams, ht as validateSkillsStatusParams, i as validateAgentParams, it as validateSendParams, j as validateCronUpdateParams, jt as parseSessionLabel, k as validateCronRunsParams, kt as errorShape, l as validateAgentsFilesListParams, lt as validateSessionsPreviewParams, m as validateChannelsStatusParams, mt as validateSkillsInstallParams, n as formatValidationErrors, nt as validatePollParams, o as validateAgentsCreateParams, ot as validateSessionsDeleteParams, p as validateChannelsLogoutParams, pt as validateSkillsBinsParams, q as validateNodeInvokeParams, r as validateAgentIdentityParams, rt as validateRequestFrame, s as validateAgentsDeleteParams, st as validateSessionsListParams, tt as validateNodeRenameParams, u as validateAgentsFilesSetParams, ut as validateSessionsResetParams, v as validateChatSendParams, vt as validateTalkModeParams, w as validateConnectParams, wt as validateWizardNextParams, x as validateConfigPatchParams, xt as validateWebLoginStartParams, y as validateConfigApplyParams, yt as validateUpdateRunParams, z as validateExecApprovalsGetParams, zt as verifyDeviceSignature } from "./client-BWkoTfOH.js";
+import { s as loadGatewayTlsRuntime$1 } from "./call-CDPbPDAr.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-WdTAfqbV.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-5YtMvm7D.js";
+import { t as createBrowserRouteDispatcher } from "./dispatcher-DzwzLQRk.js";
 import { t as parseAbsoluteTimeMs } from "./parse-Cinbkvj-.js";
-import { i as loadSessionUsageTimeSeries, l as deriveSessionTotalTokens, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions, u as hasNonzeroUsage } from "./session-cost-usage-BamtB1rn.js";
-import { f as resolveExecApprovalsSocketPath, o as normalizeExecApprovals, p as saveExecApprovals, r as ensureExecApprovals, s as readExecApprovalsSnapshot, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-BJikgQkX.js";
-import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-B2MDtPTL.js";
-import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-CRGxza-M.js";
-import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-CMFpRoYp.js";
-import { t as ensureAnimaCliOnPath } from "./path-env-CjpH-KWH.js";
-import { t as forceFreePortAndWait } from "./ports-B1b1r9Dz.js";
-import { t as buildChannelUiCatalog } from "./catalog-AZNRamJ4.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-ybjSmiHu.js";
-import { c as saveToken, i as getToken, l as whoami, n as clearToken, o as registerWithInvite, s as resolveSuggestedIdentity, t as TOKEN_PATH } from "./noxsoft-auth-Bmict45b.js";
+import { c as saveToken, i as getToken, l as whoami, n as clearToken, o as registerWithInvite, s as resolveSuggestedIdentity, t as TOKEN_PATH } from "./noxsoft-auth-CE75mBXE.js";
+import { i as loadSessionUsageTimeSeries, l as deriveSessionTotalTokens, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions, u as hasNonzeroUsage } from "./session-cost-usage-BWqR-ik6.js";
+import { f as resolveExecApprovalsSocketPath, o as normalizeExecApprovals, p as saveExecApprovals, r as ensureExecApprovals, s as readExecApprovalsSnapshot, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-DK5-KCUz.js";
+import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-ZfNSbFcq.js";
+import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-C8dIgJur.js";
+import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-DyT32VfN.js";
+import { t as ensureAnimaCliOnPath } from "./path-env-DLQPf9qj.js";
+import { t as forceFreePortAndWait } from "./ports-DaVrZDUq.js";
+import { t as buildChannelUiCatalog } from "./catalog-CsXv59Tq.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-CvH7AUoY.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BCnOEYau.js";
-import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, h as resolveControlUiLinks, x as buildControlUiAvatarUrl } from "./onboard-helpers-DPqXrhma.js";
-import { t as resolveGatewayService } from "./service-QlHhVsQf.js";
+import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, h as resolveControlUiLinks, x as buildControlUiAvatarUrl } from "./onboard-helpers-CJ3HzoUO.js";
+import { t as resolveGatewayService } from "./service-Dd1DfPia.js";
 import { t as parsePort } from "./parse-port-CDPwDUs3.js";
-import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-BDtWuGCY.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Hnu5dChj.js";
-import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-ByHmjh-G.js";
-import { n as getStatusSummary } from "./status-DyD7gtoK.js";
+import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CHAT20aR.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-C-rqLtIT.js";
+import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-B05W5ckN.js";
+import { n as getStatusSummary } from "./status-CHGNPonc.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-1MPChTcB.js";
-import { c as startHeartbeatRunner, n as getHealthSnapshot, o as runHeartbeatOnce, s as setHeartbeatsEnabled } from "./health-2sA2ziYt.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-Mj7AnofW.js";
-import { a as resolveControlUiRootOverrideSync, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync } from "./health-format-CH6JWH45.js";
+import { c as startHeartbeatRunner, n as getHealthSnapshot, o as runHeartbeatOnce, s as setHeartbeatsEnabled } from "./health-CabOEPQ0.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-CtYcdTju.js";
+import { a as resolveControlUiRootOverrideSync, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync } from "./health-format-D-JJ5_S4.js";
 import { n as validateSystemRunCommandConsistency, r as getMachineDisplayName, t as formatExecCommand } from "./system-run-command-Bx8-5h2r.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channels-status-issues-DdjvFHx9.js";
-import { t as WizardCancelledError } from "./prompts-C9IyM74_.js";
-import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-VvwKn90L.js";
-import { t as runOnboardingWizard } from "./onboarding-GIx1Wpw0.js";
-import { a as setGatewayWsLogStyle, i as summarizeAgentEventForWsLog, n as logWs, r as shouldLogWs, t as formatForLog } from "./ws-log-Bc4grA6W.js";
-import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-D2uUKNlF.js";
-import { a as createOutboundSendDeps$1, i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-B8ciDTm6.js";
-import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-J7iEgdW_.js";
-import { t as migrateFromCoherence } from "./migrate-BLjwxe9X.js";
-import { t as installSkill } from "./skills-install-2DbC1Yo2.js";
-import { t as runGatewayUpdate } from "./update-runner-BxdLd4Q8.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channels-status-issues-WkG3Tmxk.js";
+import { t as WizardCancelledError } from "./prompts-Bq4QGFQM.js";
+import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-DdweuSIj.js";
+import { t as runOnboardingWizard } from "./onboarding-Djmm0PEM.js";
+import { a as setGatewayWsLogStyle, i as summarizeAgentEventForWsLog, n as logWs, r as shouldLogWs, t as formatForLog } from "./ws-log-CUobU2tD.js";
+import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-DaJoXV_3.js";
+import { t as createOutboundSendDeps$1 } from "./outbound-send-deps-DVfWC4E8.js";
+import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BR5JLtud.js";
+import { n as resolveAgentDeliveryPlan, r as resolveAgentOutboundTarget, t as agentCommand } from "./agent-VRQM14Xp.js";
+import { t as migrateFromCoherence } from "./migrate-DuohB_ur.js";
+import { t as installSkill } from "./skills-install-D6_qpRjW.js";
+import { t as runGatewayUpdate } from "./update-runner-czCqHZCu.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
 import fs, { constants } from "node:fs";
@@ -109,7 +111,7 @@ function getActiveEmbeddedRunCount() {
 
 //#endregion
 //#region src/infra/exec-approval-forwarder.ts
-const log$6 = createSubsystemLogger("gateway/exec-approvals");
+const log$7 = createSubsystemLogger("gateway/exec-approvals");
 const DEFAULT_MODE = "session";
 function normalizeMode(mode) {
 	return mode ?? DEFAULT_MODE;
@@ -224,7 +226,7 @@ async function deliverToTargets(params) {
 				payloads: [{ text: params.text }]
 			});
 		} catch (err) {
-			log$6.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
+			log$7.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
 		}
 	});
 	await Promise.allSettled(deliveries);
@@ -1461,7 +1463,7 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 * Automatically starts `gog gmail watch serve` when the gateway starts,
 * if hooks.gmail is configured with an account.
 */
-const log$5 = createSubsystemLogger("gmail-watcher");
+const log$6 = createSubsystemLogger("gmail-watcher");
 const ADDRESS_IN_USE_RE = /address already in use|EADDRINUSE/i;
 function isAddressInUseError(line) {
 	return ADDRESS_IN_USE_RE.test(line);
@@ -1485,13 +1487,13 @@ async function startGmailWatch(cfg) {
 		const result = await runCommandWithTimeout(args, { timeoutMs: 12e4 });
 		if (result.code !== 0) {
 			const message = result.stderr || result.stdout || "gog watch start failed";
-			log$5.error(`watch start failed: ${message}`);
+			log$6.error(`watch start failed: ${message}`);
 			return false;
 		}
-		log$5.info(`watch started for ${cfg.account}`);
+		log$6.info(`watch started for ${cfg.account}`);
 		return true;
 	} catch (err) {
-		log$5.error(`watch start error: ${String(err)}`);
+		log$6.error(`watch start error: ${String(err)}`);
 		return false;
 	}
 }
@@ -1500,7 +1502,7 @@ async function startGmailWatch(cfg) {
 */
 function spawnGogServe(cfg) {
 	const args = buildGogWatchServeArgs(cfg);
-	log$5.info(`starting gog ${args.join(" ")}`);
+	log$6.info(`starting gog ${args.join(" ")}`);
 	let addressInUse = false;
 	const child = spawn("gog", args, {
 		stdio: [
@@ -1512,25 +1514,25 @@ function spawnGogServe(cfg) {
 	});
 	child.stdout?.on("data", (data) => {
 		const line = data.toString().trim();
-		if (line) log$5.info(`[gog] ${line}`);
+		if (line) log$6.info(`[gog] ${line}`);
 	});
 	child.stderr?.on("data", (data) => {
 		const line = data.toString().trim();
 		if (!line) return;
 		if (isAddressInUseError(line)) addressInUse = true;
-		log$5.warn(`[gog] ${line}`);
+		log$6.warn(`[gog] ${line}`);
 	});
 	child.on("error", (err) => {
-		log$5.error(`gog process error: ${String(err)}`);
+		log$6.error(`gog process error: ${String(err)}`);
 	});
 	child.on("exit", (code, signal) => {
 		if (shuttingDown) return;
 		if (addressInUse) {
-			log$5.warn("gog serve failed to bind (address already in use); stopping restarts. Another watcher is likely running. Set ANIMA_SKIP_GMAIL_WATCHER=1 or stop the other process.");
+			log$6.warn("gog serve failed to bind (address already in use); stopping restarts. Another watcher is likely running. Set ANIMA_SKIP_GMAIL_WATCHER=1 or stop the other process.");
 			watcherProcess = null;
 			return;
 		}
-		log$5.warn(`gog exited (code=${code}, signal=${signal}); restarting in 5s`);
+		log$6.warn(`gog exited (code=${code}, signal=${signal}); restarting in 5s`);
 		watcherProcess = null;
 		setTimeout(() => {
 			if (shuttingDown || !currentConfig) return;
@@ -1570,15 +1572,15 @@ async function startGmailWatcher(cfg) {
 			port: runtimeConfig.serve.port,
 			target: runtimeConfig.tailscale.target
 		});
-		log$5.info(`tailscale ${runtimeConfig.tailscale.mode} configured for port ${runtimeConfig.serve.port}`);
+		log$6.info(`tailscale ${runtimeConfig.tailscale.mode} configured for port ${runtimeConfig.serve.port}`);
 	} catch (err) {
-		log$5.error(`tailscale setup failed: ${String(err)}`);
+		log$6.error(`tailscale setup failed: ${String(err)}`);
 		return {
 			started: false,
 			reason: `tailscale setup failed: ${String(err)}`
 		};
 	}
-	if (!await startGmailWatch(runtimeConfig)) log$5.warn("gmail watch start failed, but continuing with serve");
+	if (!await startGmailWatch(runtimeConfig)) log$6.warn("gmail watch start failed, but continuing with serve");
 	shuttingDown = false;
 	watcherProcess = spawnGogServe(runtimeConfig);
 	const renewMs = runtimeConfig.renewEveryMinutes * 6e4;
@@ -1586,7 +1588,7 @@ async function startGmailWatcher(cfg) {
 		if (shuttingDown) return;
 		startGmailWatch(runtimeConfig);
 	}, renewMs);
-	log$5.info(`gmail watcher started for ${runtimeConfig.account} (renew every ${runtimeConfig.renewEveryMinutes}m)`);
+	log$6.info(`gmail watcher started for ${runtimeConfig.account} (renew every ${runtimeConfig.renewEveryMinutes}m)`);
 	return { started: true };
 }
 /**
@@ -1599,7 +1601,7 @@ async function stopGmailWatcher() {
 		renewInterval = null;
 	}
 	if (watcherProcess) {
-		log$5.info("stopping gmail watcher");
+		log$6.info("stopping gmail watcher");
 		watcherProcess.kill("SIGTERM");
 		await new Promise((resolve) => {
 			const timeout = setTimeout(() => {
@@ -1614,7 +1616,7 @@ async function stopGmailWatcher() {
 		watcherProcess = null;
 	}
 	currentConfig = null;
-	log$5.info("gmail watcher stopped");
+	log$6.info("gmail watcher stopped");
 }
 
 //#endregion
@@ -2134,12 +2136,12 @@ async function runCronIsolatedAgentTurn(params) {
 		}
 	}
 	const modelOverrideRaw = params.job.payload.kind === "agentTurn" ? params.job.payload.model : void 0;
-	const modelOverride = typeof modelOverrideRaw === "string" ? modelOverrideRaw.trim() : void 0;
-	if (modelOverride !== void 0 && modelOverride.length > 0) {
+	const requestedModelOverride = typeof modelOverrideRaw === "string" ? modelOverrideRaw.trim() : void 0;
+	if (requestedModelOverride !== void 0 && requestedModelOverride.length > 0) {
 		const resolvedOverride = resolveAllowedModelRef({
 			cfg: cfgWithAgentDefaults,
 			catalog: await loadCatalog(),
-			raw: modelOverride,
+			raw: requestedModelOverride,
 			defaultProvider: resolvedDefault.provider,
 			defaultModel: resolvedDefault.model
 		});
@@ -2177,7 +2179,7 @@ async function runCronIsolatedAgentTurn(params) {
 		const labelSuffix = typeof params.job.name === "string" && params.job.name.trim() ? params.job.name.trim() : params.job.id;
 		cronSession.sessionEntry.label = `Cron: ${labelSuffix}`;
 	}
-	if (!modelOverride && !hooksGmailModelApplied) {
+	if (!requestedModelOverride && !hooksGmailModelApplied) {
 		const sessionModelOverride = cronSession.sessionEntry.modelOverride?.trim();
 		if (sessionModelOverride) {
 			const sessionProviderOverride = cronSession.sessionEntry.providerOverride?.trim() || resolvedDefault.provider;
@@ -2283,27 +2285,11 @@ async function runCronIsolatedAgentTurn(params) {
 			provider,
 			model,
 			agentDir,
+			sessionEntry: cronSession.sessionEntry,
+			thinkLevel,
 			fallbacksOverride: resolveAgentModelFallbacksOverride(params.cfg, agentId),
 			run: (providerOverride, modelOverride) => {
-				if (isCliProvider(providerOverride, cfgWithAgentDefaults)) {
-					const cliSessionId = getCliSessionId(cronSession.sessionEntry, providerOverride);
-					return runCliAgent({
-						sessionId: cronSession.sessionEntry.sessionId,
-						sessionKey: agentSessionKey,
-						agentId,
-						sessionFile,
-						workspaceDir,
-						config: cfgWithAgentDefaults,
-						prompt: commandBody,
-						provider: providerOverride,
-						model: modelOverride,
-						thinkLevel,
-						timeoutMs,
-						runId: cronSession.sessionEntry.sessionId,
-						cliSessionId
-					});
-				}
-				return runEmbeddedPiAgent({
+				return runNoxSoftEmbeddedAgent({
 					sessionId: cronSession.sessionEntry.sessionId,
 					sessionKey: agentSessionKey,
 					agentId,
@@ -2319,6 +2305,8 @@ async function runCronIsolatedAgentTurn(params) {
 					model: modelOverride,
 					thinkLevel,
 					verboseLevel: resolvedVerboseLevel,
+					execSecurity: cronSession.sessionEntry.execSecurity,
+					cliSessionId: getCliSessionId(cronSession.sessionEntry, providerOverride),
 					timeoutMs,
 					runId: cronSession.sessionEntry.sessionId,
 					requireExplicitMessageTarget: true,
@@ -2375,7 +2363,7 @@ async function runCronIsolatedAgentTurn(params) {
 	const deliveryBestEffort = resolveCronDeliveryBestEffort(params.job);
 	const ackMaxChars = resolveHeartbeatAckMaxChars(agentCfg);
 	const skipHeartbeatDelivery = deliveryRequested && isHeartbeatOnlyResponse(payloads, ackMaxChars);
-	const skipMessagingToolDelivery = deliveryRequested && runResult.didSendViaMessagingTool === true && (runResult.messagingToolSentTargets ?? []).some((target) => matchesMessagingToolDeliveryTarget(target, {
+	const skipMessagingToolDelivery = deliveryRequested && (runResult.messagingToolSentTargets ?? []).some((target) => matchesMessagingToolDeliveryTarget(target, {
 		channel: resolvedDelivery.channel,
 		to: resolvedDelivery.to,
 		accountId: resolvedDelivery.accountId
@@ -4283,7 +4271,7 @@ async function startGatewayBonjourAdvertiser(opts) {
 			await svc.destroy();
 		} catch {}
 		try {
-			await responder.shutdown();
+			await responder.shutdown?.();
 		} catch {} finally {
 			ciaoCancellationRejectionHandler?.();
 		}
@@ -5294,7 +5282,7 @@ function timestampOptsFromConfig(cfg) {
 
 //#endregion
 //#region src/gateway/sessions-patch.ts
-function invalid$1(message) {
+function invalid$2(message) {
 	return {
 		ok: false,
 		error: errorShape(ErrorCodes.INVALID_REQUEST, message)
@@ -5330,25 +5318,25 @@ async function applySessionsPatchToStore(params) {
 	if ("spawnedBy" in patch) {
 		const raw = patch.spawnedBy;
 		if (raw === null) {
-			if (existing?.spawnedBy) return invalid$1("spawnedBy cannot be cleared once set");
+			if (existing?.spawnedBy) return invalid$2("spawnedBy cannot be cleared once set");
 		} else if (raw !== void 0) {
 			const trimmed = String(raw).trim();
-			if (!trimmed) return invalid$1("invalid spawnedBy: empty");
-			if (!isSubagentSessionKey(storeKey)) return invalid$1("spawnedBy is only supported for subagent:* sessions");
-			if (existing?.spawnedBy && existing.spawnedBy !== trimmed) return invalid$1("spawnedBy cannot be changed once set");
+			if (!trimmed) return invalid$2("invalid spawnedBy: empty");
+			if (!isSubagentSessionKey(storeKey)) return invalid$2("spawnedBy is only supported for subagent:* sessions");
+			if (existing?.spawnedBy && existing.spawnedBy !== trimmed) return invalid$2("spawnedBy cannot be changed once set");
 			next.spawnedBy = trimmed;
 		}
 	}
 	if ("spawnDepth" in patch) {
 		const raw = patch.spawnDepth;
 		if (raw === null) {
-			if (typeof existing?.spawnDepth === "number") return invalid$1("spawnDepth cannot be cleared once set");
+			if (typeof existing?.spawnDepth === "number") return invalid$2("spawnDepth cannot be cleared once set");
 		} else if (raw !== void 0) {
-			if (!isSubagentSessionKey(storeKey)) return invalid$1("spawnDepth is only supported for subagent:* sessions");
+			if (!isSubagentSessionKey(storeKey)) return invalid$2("spawnDepth is only supported for subagent:* sessions");
 			const numeric = Number(raw);
-			if (!Number.isInteger(numeric) || numeric < 0) return invalid$1("invalid spawnDepth (use an integer >= 0)");
+			if (!Number.isInteger(numeric) || numeric < 0) return invalid$2("invalid spawnDepth (use an integer >= 0)");
 			const normalized = numeric;
-			if (typeof existing?.spawnDepth === "number" && existing.spawnDepth !== normalized) return invalid$1("spawnDepth cannot be changed once set");
+			if (typeof existing?.spawnDepth === "number" && existing.spawnDepth !== normalized) return invalid$2("spawnDepth cannot be changed once set");
 			next.spawnDepth = normalized;
 		}
 	}
@@ -5357,10 +5345,10 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.label;
 		else if (raw !== void 0) {
 			const parsed = parseSessionLabel(raw);
-			if (!parsed.ok) return invalid$1(parsed.error);
+			if (!parsed.ok) return invalid$2(parsed.error);
 			for (const [key, entry] of Object.entries(store)) {
 				if (key === storeKey) continue;
-				if (entry?.label === parsed.label) return invalid$1(`label already in use: ${parsed.label}`);
+				if (entry?.label === parsed.label) return invalid$2(`label already in use: ${parsed.label}`);
 			}
 			next.label = parsed.label;
 		}
@@ -5370,14 +5358,14 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.thinkingLevel;
 		else if (raw !== void 0) {
 			const normalized = normalizeThinkLevel(String(raw));
-			if (!normalized) return invalid$1(`invalid thinkingLevel (use ${formatThinkingLevels(existing?.providerOverride?.trim() || resolvedDefault.provider, existing?.modelOverride?.trim() || resolvedDefault.model, "|")})`);
+			if (!normalized) return invalid$2(`invalid thinkingLevel (use ${formatThinkingLevels(existing?.providerOverride?.trim() || resolvedDefault.provider, existing?.modelOverride?.trim() || resolvedDefault.model, "|")})`);
 			next.thinkingLevel = normalized;
 		}
 	}
 	if ("verboseLevel" in patch) {
 		const raw = patch.verboseLevel;
 		const parsed = parseVerboseOverride(raw);
-		if (!parsed.ok) return invalid$1(parsed.error);
+		if (!parsed.ok) return invalid$2(parsed.error);
 		applyVerboseOverride(next, parsed.value);
 	}
 	if ("reasoningLevel" in patch) {
@@ -5385,7 +5373,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.reasoningLevel;
 		else if (raw !== void 0) {
 			const normalized = normalizeReasoningLevel(String(raw));
-			if (!normalized) return invalid$1("invalid reasoningLevel (use \"on\"|\"off\"|\"stream\")");
+			if (!normalized) return invalid$2("invalid reasoningLevel (use \"on\"|\"off\"|\"stream\")");
 			if (normalized === "off") delete next.reasoningLevel;
 			else next.reasoningLevel = normalized;
 		}
@@ -5395,7 +5383,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.responseUsage;
 		else if (raw !== void 0) {
 			const normalized = normalizeUsageDisplay(String(raw));
-			if (!normalized) return invalid$1("invalid responseUsage (use \"off\"|\"tokens\"|\"full\")");
+			if (!normalized) return invalid$2("invalid responseUsage (use \"off\"|\"tokens\"|\"full\")");
 			if (normalized === "off") delete next.responseUsage;
 			else next.responseUsage = normalized;
 		}
@@ -5405,7 +5393,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.elevatedLevel;
 		else if (raw !== void 0) {
 			const normalized = normalizeElevatedLevel(String(raw));
-			if (!normalized) return invalid$1("invalid elevatedLevel (use \"on\"|\"off\"|\"ask\"|\"full\")");
+			if (!normalized) return invalid$2("invalid elevatedLevel (use \"on\"|\"off\"|\"ask\"|\"full\")");
 			next.elevatedLevel = normalized;
 		}
 	}
@@ -5414,7 +5402,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.execHost;
 		else if (raw !== void 0) {
 			const normalized = normalizeExecHost(String(raw));
-			if (!normalized) return invalid$1("invalid execHost (use \"sandbox\"|\"gateway\"|\"node\")");
+			if (!normalized) return invalid$2("invalid execHost (use \"sandbox\"|\"gateway\"|\"node\")");
 			next.execHost = normalized;
 		}
 	}
@@ -5423,7 +5411,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.execSecurity;
 		else if (raw !== void 0) {
 			const normalized = normalizeExecSecurity(String(raw));
-			if (!normalized) return invalid$1("invalid execSecurity (use \"deny\"|\"allowlist\"|\"full\")");
+			if (!normalized) return invalid$2("invalid execSecurity (use \"deny\"|\"allowlist\"|\"full\")");
 			next.execSecurity = normalized;
 		}
 	}
@@ -5432,7 +5420,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.execAsk;
 		else if (raw !== void 0) {
 			const normalized = normalizeExecAsk(String(raw));
-			if (!normalized) return invalid$1("invalid execAsk (use \"off\"|\"on-miss\"|\"always\")");
+			if (!normalized) return invalid$2("invalid execAsk (use \"off\"|\"on-miss\"|\"always\")");
 			next.execAsk = normalized;
 		}
 	}
@@ -5441,7 +5429,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.execNode;
 		else if (raw !== void 0) {
 			const trimmed = String(raw).trim();
-			if (!trimmed) return invalid$1("invalid execNode: empty");
+			if (!trimmed) return invalid$2("invalid execNode: empty");
 			next.execNode = trimmed;
 		}
 	}
@@ -5457,7 +5445,7 @@ async function applySessionsPatchToStore(params) {
 		});
 		else if (raw !== void 0) {
 			const trimmed = String(raw).trim();
-			if (!trimmed) return invalid$1("invalid model: empty");
+			if (!trimmed) return invalid$2("invalid model: empty");
 			if (!params.loadGatewayModelCatalog) return {
 				ok: false,
 				error: errorShape(ErrorCodes.UNAVAILABLE, "model catalog unavailable")
@@ -5469,7 +5457,7 @@ async function applySessionsPatchToStore(params) {
 				defaultProvider: resolvedDefault.provider,
 				defaultModel: resolvedDefault.model
 			});
-			if ("error" in resolved) return invalid$1(resolved.error);
+			if ("error" in resolved) return invalid$2(resolved.error);
 			const isDefault = resolved.ref.provider === resolvedDefault.provider && resolved.ref.model === resolvedDefault.model;
 			applyModelOverrideToSessionEntry({
 				entry: next,
@@ -5483,7 +5471,7 @@ async function applySessionsPatchToStore(params) {
 	}
 	if (next.thinkingLevel === "xhigh") {
 		if (!supportsXHighThinking(next.providerOverride ?? resolvedDefault.provider, next.modelOverride ?? resolvedDefault.model)) {
-			if ("thinkingLevel" in patch) return invalid$1(`thinkingLevel "xhigh" is only supported for ${formatXHighModelHint()}`);
+			if ("thinkingLevel" in patch) return invalid$2(`thinkingLevel "xhigh" is only supported for ${formatXHighModelHint()}`);
 			next.thinkingLevel = "high";
 		}
 	}
@@ -5492,7 +5480,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.sendPolicy;
 		else if (raw !== void 0) {
 			const normalized = normalizeSendPolicy(String(raw));
-			if (!normalized) return invalid$1("invalid sendPolicy (use \"allow\"|\"deny\")");
+			if (!normalized) return invalid$2("invalid sendPolicy (use \"allow\"|\"deny\")");
 			next.sendPolicy = normalized;
 		}
 	}
@@ -5501,7 +5489,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.groupActivation;
 		else if (raw !== void 0) {
 			const normalized = normalizeGroupActivation(String(raw));
-			if (!normalized) return invalid$1("invalid groupActivation (use \"mention\"|\"always\")");
+			if (!normalized) return invalid$2("invalid groupActivation (use \"mention\"|\"always\")");
 			next.groupActivation = normalized;
 		}
 	}
@@ -6347,6 +6335,7 @@ const agentHandlers = {
 		agentCommand({
 			message,
 			images,
+			model: request.model,
 			to: resolvedTo,
 			sessionId: resolvedSessionId,
 			sessionKey: resolvedSessionKey,
@@ -6861,6 +6850,249 @@ async function listMemoryEntries(params) {
 	}))).filter((row) => Boolean(row)).toSorted((a, b) => (b.updatedAt ?? 0) - (a.updatedAt ?? 0)).slice(0, Math.max(1, Math.min(params.limit ?? 120, 200)));
 }
 
+//#endregion
+//#region src/anima6/ontology.ts
+const ANIMA_NODE_KINDS = [
+	"goal",
+	"feature",
+	"person",
+	"chronos",
+	"affect",
+	"agent",
+	"role",
+	"task"
+];
+const ANIMA_RELATIONS = [
+	"owns",
+	"supports",
+	"focuses_on",
+	"tracks",
+	"influences",
+	"reports_to",
+	"specializes_in",
+	"delegates",
+	"executes",
+	"escalates_to"
+];
+function isAnimaNodeKind(value) {
+	return ANIMA_NODE_KINDS.includes(value);
+}
+function isAnimaRelation(value) {
+	return ANIMA_RELATIONS.includes(value);
+}
+function missionGoalNodeId(goalId) {
+	return `goal:${goalId}`;
+}
+function missionFeatureNodeId(featureId) {
+	return `feature:${featureId}`;
+}
+function missionPersonNodeId(personId) {
+	return `person:${personId}`;
+}
+const ANIMA_CHRONOS_NODE_ID = "chronos:state";
+const ANIMA_AFFECT_NODE_ID = "affect:state";
+
+//#endregion
+//#region src/memory/brain-graph.ts
+const DEFAULT_NODE_META = {
+	provenance: [],
+	confidence: .5,
+	salience: .5,
+	recency: .5,
+	sensitivity: "internal",
+	state: "active"
+};
+const DEFAULT_EDGE_META = {
+	...DEFAULT_NODE_META,
+	strength: .5,
+	direction: "forward"
+};
+function clampUnit$1(value, fallback) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return fallback;
+	return Math.max(0, Math.min(1, value));
+}
+function normalizeAliases(label, aliases) {
+	const seen = /* @__PURE__ */ new Set();
+	const normalized = [];
+	for (const value of [label, ...aliases ?? []]) {
+		const trimmed = value.trim();
+		if (!trimmed) continue;
+		const key = trimmed.toLowerCase();
+		if (seen.has(key)) continue;
+		seen.add(key);
+		normalized.push(trimmed);
+	}
+	return normalized;
+}
+function normalizeNodeKind(value) {
+	const normalized = value.trim().toLowerCase();
+	if (!isAnimaNodeKind(normalized)) throw new Error(`invalid brain node kind: ${value}`);
+	return normalized;
+}
+function normalizeRelation(value) {
+	const normalized = value.trim().toLowerCase();
+	if (!isAnimaRelation(normalized)) throw new Error(`invalid brain edge relation: ${value}`);
+	return normalized;
+}
+function normalizeEvidence(evidence) {
+	const seen = /* @__PURE__ */ new Set();
+	const normalized = [];
+	for (const item of evidence ?? []) {
+		const source = item.source.trim();
+		if (!source) continue;
+		const key = `${source}:${item.sourceId ?? ""}:${item.excerpt ?? ""}`;
+		if (seen.has(key)) continue;
+		seen.add(key);
+		normalized.push({
+			source,
+			sourceId: item.sourceId?.trim() || void 0,
+			excerpt: item.excerpt?.trim() || void 0,
+			recordedAt: item.recordedAt
+		});
+	}
+	return normalized;
+}
+function normalizeNodeMeta(meta) {
+	return {
+		provenance: Array.from(new Set((meta?.provenance ?? []).map((value) => value.trim()).filter(Boolean))),
+		confidence: clampUnit$1(meta?.confidence, DEFAULT_NODE_META.confidence),
+		salience: clampUnit$1(meta?.salience, DEFAULT_NODE_META.salience),
+		recency: clampUnit$1(meta?.recency, DEFAULT_NODE_META.recency),
+		sensitivity: meta?.sensitivity ?? DEFAULT_NODE_META.sensitivity,
+		lastReviewedAt: meta?.lastReviewedAt,
+		state: meta?.state ?? DEFAULT_NODE_META.state
+	};
+}
+function normalizeEdgeMeta(meta) {
+	return {
+		...normalizeNodeMeta(meta),
+		strength: clampUnit$1(meta?.strength, DEFAULT_EDGE_META.strength),
+		direction: meta?.direction ?? DEFAULT_EDGE_META.direction
+	};
+}
+function mergeUnique(left, right, key) {
+	const seen = /* @__PURE__ */ new Set();
+	const merged = [];
+	for (const item of [...left, ...right]) {
+		const identity = key(item);
+		if (seen.has(identity)) continue;
+		seen.add(identity);
+		merged.push(item);
+	}
+	return merged;
+}
+var BrainGraph = class {
+	constructor() {
+		this.nodes = /* @__PURE__ */ new Map();
+		this.edges = /* @__PURE__ */ new Map();
+		this.aliases = /* @__PURE__ */ new Map();
+	}
+	addNode(node) {
+		const existing = this.nodes.get(node.id);
+		const next = {
+			id: node.id,
+			type: normalizeNodeKind(node.type),
+			label: node.label.trim(),
+			aliases: normalizeAliases(node.label, [...existing?.aliases ?? [], ...node.aliases ?? []]).filter((alias) => alias.toLowerCase() !== node.label.trim().toLowerCase()),
+			properties: {
+				...existing?.properties,
+				...node.properties
+			},
+			evidence: mergeUnique(existing?.evidence ?? [], normalizeEvidence(node.evidence), (item) => `${item.source}:${item.sourceId ?? ""}:${item.excerpt ?? ""}`),
+			meta: normalizeNodeMeta({
+				...existing?.meta,
+				...node.meta,
+				provenance: [...existing?.meta.provenance ?? [], ...node.meta?.provenance ?? []]
+			})
+		};
+		this.nodes.set(next.id, next);
+		this.rebuildAliasesForNode(next);
+		return next;
+	}
+	addEdge(edge) {
+		const existing = this.edges.get(edge.id);
+		const next = {
+			id: edge.id,
+			source: edge.source,
+			target: edge.target,
+			relation: normalizeRelation(edge.relation),
+			evidence: mergeUnique(existing?.evidence ?? [], normalizeEvidence(edge.evidence), (item) => `${item.source}:${item.sourceId ?? ""}:${item.excerpt ?? ""}`),
+			meta: normalizeEdgeMeta({
+				...existing?.meta,
+				...edge.meta,
+				provenance: [...existing?.meta.provenance ?? [], ...edge.meta?.provenance ?? []]
+			})
+		};
+		this.edges.set(next.id, next);
+		return next;
+	}
+	getNode(idOrAlias) {
+		const trimmed = idOrAlias.trim();
+		if (!trimmed) return;
+		const id = this.aliases.get(trimmed.toLowerCase()) ?? trimmed;
+		return this.nodes.get(id);
+	}
+	getEdge(id) {
+		return this.edges.get(id);
+	}
+	getEdges(nodeId) {
+		return [...this.edges.values()].filter((edge) => edge.source === nodeId || edge.target === nodeId);
+	}
+	listNodes() {
+		return [...this.nodes.values()];
+	}
+	listEdges() {
+		return [...this.edges.values()];
+	}
+	listNodesByType(type) {
+		return this.listNodes().filter((node) => node.type === type);
+	}
+	getNeighbors(nodeId, relation) {
+		const ids = /* @__PURE__ */ new Set();
+		for (const edge of this.getEdges(nodeId)) {
+			if (relation && edge.relation !== relation) continue;
+			ids.add(edge.source === nodeId ? edge.target : edge.source);
+		}
+		return [...ids].map((id) => this.nodes.get(id)).filter((node) => Boolean(node));
+	}
+	addEvidenceToNode(id, evidence) {
+		const node = this.nodes.get(id);
+		if (!node) return;
+		node.evidence = mergeUnique(node.evidence, normalizeEvidence([evidence]), (item) => {
+			return `${item.source}:${item.sourceId ?? ""}:${item.excerpt ?? ""}`;
+		});
+	}
+	addEvidenceToEdge(id, evidence) {
+		const edge = this.edges.get(id);
+		if (!edge) return;
+		edge.evidence = mergeUnique(edge.evidence, normalizeEvidence([evidence]), (item) => {
+			return `${item.source}:${item.sourceId ?? ""}:${item.excerpt ?? ""}`;
+		});
+	}
+	touchNodeReview(id, reviewedAt = Date.now()) {
+		const node = this.nodes.get(id);
+		if (!node) return;
+		node.meta.lastReviewedAt = reviewedAt;
+	}
+	toJSON() {
+		return {
+			nodes: this.listNodes(),
+			edges: this.listEdges()
+		};
+	}
+	fromJSON(data) {
+		this.nodes.clear();
+		this.edges.clear();
+		this.aliases.clear();
+		for (const node of data.nodes) this.addNode(node);
+		for (const edge of data.edges) this.addEdge(edge);
+	}
+	rebuildAliasesForNode(node) {
+		for (const [alias, id] of this.aliases.entries()) if (id === node.id) this.aliases.delete(alias);
+		for (const alias of normalizeAliases(node.label, node.aliases)) this.aliases.set(alias.toLowerCase(), node.id);
+	}
+};
+
 //#endregion
 //#region src/mission-control/local-store.ts
 const execFileAsync = promisify(execFile);
@@ -6969,8 +7201,161 @@ const DEFAULT_STATE = {
 		lang: "en-US",
 		rate: 1,
 		pitch: 1
+	},
+	goals: [{
+		id: "keep-anima-coherent",
+		title: "Keep ANIMA coherent across sessions",
+		status: "active",
+		priority: "critical",
+		summary: "Protect continuity, state quality, and operator trust.",
+		owner: "ANIMA",
+		updatedAt: 0
+	}],
+	features: [{
+		id: "anima-6-foundation",
+		title: "ANIMA 6 foundation",
+		status: "in_progress",
+		risk: "medium",
+		testStatus: "partial",
+		area: "memory+orchestration",
+		lastTouchedAt: 0
+	}],
+	people: [{
+		id: "operator",
+		name: "Operator",
+		relationship: "operator",
+		trust: 1,
+		notes: "Primary human counterpart."
+	}],
+	chronos: {
+		heartbeatMinutes: 30,
+		focusBlockMinutes: 45,
+		checkpointIntervalMinutes: 15,
+		contractTargetMinutes: 45,
+		contractElapsedMinutes: 0,
+		checkpointCount: 0,
+		driftMinutes: 0,
+		updatedAt: 0
+	},
+	affect: {
+		joy: .6,
+		frustration: .1,
+		curiosity: .9,
+		confidence: .6,
+		care: .9,
+		fatigue: .2,
+		updatedAt: 0
+	},
+	autoToggle: {
+		workingMode: false,
+		speech: false,
+		voiceWake: false,
+		heartbeat: true,
+		providers: false,
+		missionRepo: false,
+		missionState: true,
+		memory: true,
+		rawConfig: false
 	}
 };
+function clampUnit(value, fallback) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return fallback;
+	return Math.max(0, Math.min(1, value));
+}
+function normalizeMinuteValue(value, fallback) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return fallback;
+	return Math.max(1, Math.floor(value));
+}
+function normalizeGoal(goal) {
+	return {
+		...goal,
+		id: goal.id.trim(),
+		title: goal.title.trim(),
+		summary: goal.summary?.trim() || void 0,
+		owner: goal.owner?.trim() || void 0,
+		updatedAt: Number.isFinite(goal.updatedAt) ? goal.updatedAt : Date.now()
+	};
+}
+function normalizeFeature(feature) {
+	return {
+		...feature,
+		id: feature.id.trim(),
+		title: feature.title.trim(),
+		area: feature.area?.trim() || void 0,
+		lastTouchedAt: Number.isFinite(feature.lastTouchedAt) ? feature.lastTouchedAt : Date.now()
+	};
+}
+function normalizePerson(person) {
+	return {
+		...person,
+		id: person.id.trim(),
+		name: person.name.trim(),
+		notes: person.notes?.trim() || void 0,
+		trust: clampUnit(person.trust, .5),
+		lastInteractedAt: Number.isFinite(person.lastInteractedAt) ? person.lastInteractedAt : void 0
+	};
+}
+function normalizeChronosState(current, patch) {
+	const contractTargetMinutes = normalizeMinuteValue(patch?.contractTargetMinutes, patch?.focusBlockMinutes ?? current.contractTargetMinutes);
+	const contractElapsedMinutes = Math.max(0, Math.floor(typeof patch?.contractElapsedMinutes === "number" && Number.isFinite(patch.contractElapsedMinutes) ? patch.contractElapsedMinutes : current.contractElapsedMinutes));
+	const checkpointCount = Math.max(0, Math.floor(typeof patch?.checkpointCount === "number" && Number.isFinite(patch.checkpointCount) ? patch.checkpointCount : current.checkpointCount));
+	const driftMinutes = Math.trunc(typeof patch?.driftMinutes === "number" && Number.isFinite(patch.driftMinutes) ? patch.driftMinutes : contractElapsedMinutes - contractTargetMinutes);
+	return {
+		heartbeatMinutes: normalizeMinuteValue(patch?.heartbeatMinutes, current.heartbeatMinutes),
+		focusBlockMinutes: normalizeMinuteValue(patch?.focusBlockMinutes, current.focusBlockMinutes),
+		checkpointIntervalMinutes: normalizeMinuteValue(patch?.checkpointIntervalMinutes, current.checkpointIntervalMinutes),
+		activeWorkstream: patch?.activeWorkstream?.trim() || current.activeWorkstream,
+		contractStartedAt: typeof patch?.contractStartedAt === "number" && Number.isFinite(patch.contractStartedAt) ? patch.contractStartedAt : patch?.contractStartedAt === void 0 ? current.contractStartedAt : void 0,
+		contractTargetMinutes,
+		contractElapsedMinutes,
+		checkpointCount,
+		lastCheckpointAt: typeof patch?.lastCheckpointAt === "number" && Number.isFinite(patch.lastCheckpointAt) ? patch.lastCheckpointAt : patch?.lastCheckpointAt === void 0 ? current.lastCheckpointAt : void 0,
+		driftMinutes,
+		updatedAt: typeof patch?.updatedAt === "number" && Number.isFinite(patch.updatedAt) ? patch.updatedAt : Date.now()
+	};
+}
+function normalizeAffectState(current, patch) {
+	return {
+		joy: clampUnit(patch?.joy, current.joy),
+		frustration: clampUnit(patch?.frustration, current.frustration),
+		curiosity: clampUnit(patch?.curiosity, current.curiosity),
+		confidence: clampUnit(patch?.confidence, current.confidence),
+		care: clampUnit(patch?.care, current.care),
+		fatigue: clampUnit(patch?.fatigue, current.fatigue),
+		updatedAt: typeof patch?.updatedAt === "number" && Number.isFinite(patch.updatedAt) ? patch.updatedAt : Date.now()
+	};
+}
+function normalizeAutoTogglePolicy(current, patch) {
+	return {
+		workingMode: patch?.workingMode ?? current.workingMode,
+		speech: patch?.speech ?? current.speech,
+		voiceWake: patch?.voiceWake ?? current.voiceWake,
+		heartbeat: patch?.heartbeat ?? current.heartbeat,
+		providers: patch?.providers ?? current.providers,
+		missionRepo: patch?.missionRepo ?? current.missionRepo,
+		missionState: patch?.missionState ?? current.missionState,
+		memory: patch?.memory ?? current.memory,
+		rawConfig: patch?.rawConfig ?? current.rawConfig
+	};
+}
+function normalizeIdSet(ids) {
+	return new Set((ids ?? []).map((value) => value.trim()).filter(Boolean));
+}
+function shouldReplaceCollection(patch, collection) {
+	return (patch.replaceCollections ?? []).includes(collection);
+}
+function mergeEntityCollection(current, incoming, opts) {
+	const removals = normalizeIdSet(opts.removeIds);
+	const filteredIncoming = (incoming ?? []).map(opts.normalize).filter((value) => !removals.has(value.id));
+	if (opts.replace) return filteredIncoming;
+	if (!incoming) return current.filter((value) => !removals.has(value.id));
+	const next = /* @__PURE__ */ new Map();
+	for (const value of current) if (!removals.has(value.id)) next.set(value.id, value);
+	for (const value of filteredIncoming) next.set(value.id, value);
+	const preservedOrder = current.map((value) => value.id).filter((id) => next.has(id)).map((id) => next.get(id));
+	const appended = filteredIncoming.filter((value) => !current.some((currentValue) => currentValue.id === value.id));
+	return [...preservedOrder, ...appended];
+}
 function mergeState(current, patch) {
 	return {
 		version: 1,
@@ -6982,9 +7367,212 @@ function mergeState(current, patch) {
 		speech: {
 			...current.speech,
 			...patch.speech
-		}
+		},
+		goals: mergeEntityCollection(current.goals, patch.goals, {
+			removeIds: patch.goalIdsToRemove,
+			replace: shouldReplaceCollection(patch, "goals"),
+			normalize: normalizeGoal
+		}),
+		features: mergeEntityCollection(current.features, patch.features, {
+			removeIds: patch.featureIdsToRemove,
+			replace: shouldReplaceCollection(patch, "features"),
+			normalize: normalizeFeature
+		}),
+		people: mergeEntityCollection(current.people, patch.people, {
+			removeIds: patch.personIdsToRemove,
+			replace: shouldReplaceCollection(patch, "people"),
+			normalize: normalizePerson
+		}),
+		chronos: normalizeChronosState(current.chronos, patch.chronos),
+		affect: normalizeAffectState(current.affect, patch.affect),
+		autoToggle: normalizeAutoTogglePolicy(current.autoToggle, patch.autoToggle)
 	};
 }
+function buildMissionControlBrainGraph(state) {
+	const graph = new BrainGraph();
+	for (const goal of state.goals) graph.addNode({
+		id: missionGoalNodeId(goal.id),
+		type: "goal",
+		label: goal.title,
+		aliases: [goal.id],
+		properties: {
+			id: goal.id,
+			status: goal.status,
+			priority: goal.priority,
+			summary: goal.summary ?? null,
+			owner: goal.owner ?? null,
+			updatedAt: goal.updatedAt
+		},
+		meta: {
+			confidence: .85,
+			salience: goal.priority === "critical" ? 1 : goal.priority === "high" ? .85 : .6,
+			recency: .7,
+			provenance: ["mission-control.state.goals"]
+		}
+	});
+	for (const feature of state.features) graph.addNode({
+		id: missionFeatureNodeId(feature.id),
+		type: "feature",
+		label: feature.title,
+		aliases: [feature.id],
+		properties: {
+			id: feature.id,
+			status: feature.status,
+			risk: feature.risk,
+			testStatus: feature.testStatus,
+			area: feature.area ?? null,
+			lastTouchedAt: feature.lastTouchedAt
+		},
+		meta: {
+			confidence: .8,
+			salience: feature.status === "blocked" ? .95 : feature.status === "in_progress" ? .85 : .6,
+			recency: .75,
+			provenance: ["mission-control.state.features"]
+		}
+	});
+	for (const person of state.people) graph.addNode({
+		id: missionPersonNodeId(person.id),
+		type: "person",
+		label: person.name,
+		aliases: [person.id],
+		properties: {
+			id: person.id,
+			relationship: person.relationship,
+			trust: person.trust,
+			notes: person.notes ?? null,
+			lastInteractedAt: person.lastInteractedAt ?? null
+		},
+		meta: {
+			confidence: .9,
+			salience: .8,
+			recency: person.lastInteractedAt ? .8 : .5,
+			provenance: ["mission-control.state.people"]
+		}
+	});
+	graph.addNode({
+		id: ANIMA_CHRONOS_NODE_ID,
+		type: "chronos",
+		label: "Chronos",
+		properties: {
+			heartbeatMinutes: state.chronos.heartbeatMinutes,
+			focusBlockMinutes: state.chronos.focusBlockMinutes,
+			checkpointIntervalMinutes: state.chronos.checkpointIntervalMinutes,
+			activeWorkstream: state.chronos.activeWorkstream ?? null,
+			contractStartedAt: state.chronos.contractStartedAt ?? null,
+			contractTargetMinutes: state.chronos.contractTargetMinutes,
+			contractElapsedMinutes: state.chronos.contractElapsedMinutes,
+			checkpointCount: state.chronos.checkpointCount,
+			lastCheckpointAt: state.chronos.lastCheckpointAt ?? null,
+			driftMinutes: state.chronos.driftMinutes,
+			updatedAt: state.chronos.updatedAt
+		},
+		meta: {
+			confidence: .95,
+			salience: .9,
+			recency: .85,
+			provenance: ["mission-control.state.chronos"]
+		}
+	});
+	graph.addNode({
+		id: ANIMA_AFFECT_NODE_ID,
+		type: "affect",
+		label: "Affect",
+		properties: {
+			joy: state.affect.joy,
+			frustration: state.affect.frustration,
+			curiosity: state.affect.curiosity,
+			confidence: state.affect.confidence,
+			care: state.affect.care,
+			fatigue: state.affect.fatigue,
+			updatedAt: state.affect.updatedAt
+		},
+		meta: {
+			confidence: .75,
+			salience: .7,
+			recency: .75,
+			provenance: ["mission-control.state.affect"]
+		}
+	});
+	for (const goal of state.goals) {
+		if (!goal.owner) continue;
+		const normalizedOwner = goal.owner.trim().toLowerCase();
+		const owner = state.people.find((person) => person.id.trim().toLowerCase() === normalizedOwner || person.name.trim().toLowerCase() === normalizedOwner);
+		if (!owner) continue;
+		graph.addEdge({
+			id: `owns:${owner.id}:${goal.id}`,
+			source: missionPersonNodeId(owner.id),
+			target: missionGoalNodeId(goal.id),
+			relation: "owns",
+			meta: {
+				confidence: .9,
+				salience: .8,
+				recency: .7,
+				strength: owner.trust,
+				provenance: ["mission-control.state.goals.owner"]
+			}
+		});
+	}
+	const activeGoal = state.goals.find((goal) => goal.status === "active") ?? state.goals[0];
+	if (activeGoal) for (const feature of state.features.filter((entry) => entry.status !== "done")) graph.addEdge({
+		id: `supports:${feature.id}:${activeGoal.id}`,
+		source: missionFeatureNodeId(feature.id),
+		target: missionGoalNodeId(activeGoal.id),
+		relation: "supports",
+		meta: {
+			confidence: .55,
+			salience: feature.status === "blocked" ? .9 : .7,
+			recency: .7,
+			strength: feature.testStatus === "passing" ? .8 : .6,
+			provenance: ["mission-control.derived.active-goal"]
+		}
+	});
+	const activeWorkstream = state.chronos.activeWorkstream?.trim().toLowerCase();
+	if (activeWorkstream) {
+		const feature = state.features.find((entry) => entry.id.trim().toLowerCase() === activeWorkstream || entry.title.trim().toLowerCase() === activeWorkstream);
+		const goal = state.goals.find((entry) => entry.id.trim().toLowerCase() === activeWorkstream || entry.title.trim().toLowerCase() === activeWorkstream);
+		const targetId = feature ? missionFeatureNodeId(feature.id) : goal ? missionGoalNodeId(goal.id) : void 0;
+		if (targetId) graph.addEdge({
+			id: `focuses_on:${targetId}`,
+			source: ANIMA_CHRONOS_NODE_ID,
+			target: targetId,
+			relation: "focuses_on",
+			meta: {
+				confidence: .95,
+				salience: .95,
+				recency: .9,
+				strength: .9,
+				provenance: ["mission-control.state.chronos.activeWorkstream"]
+			}
+		});
+	}
+	for (const goal of state.goals.filter((entry) => entry.status === "active")) graph.addEdge({
+		id: `tracks:${goal.id}`,
+		source: ANIMA_CHRONOS_NODE_ID,
+		target: missionGoalNodeId(goal.id),
+		relation: "tracks",
+		meta: {
+			confidence: .7,
+			salience: .8,
+			recency: .8,
+			strength: .7,
+			provenance: ["mission-control.derived.active-goals"]
+		}
+	});
+	for (const feature of state.features.filter((entry) => entry.status !== "done")) graph.addEdge({
+		id: `influences:${feature.id}`,
+		source: ANIMA_AFFECT_NODE_ID,
+		target: missionFeatureNodeId(feature.id),
+		relation: "influences",
+		meta: {
+			confidence: .45,
+			salience: .6,
+			recency: .7,
+			strength: Math.max(state.affect.care, state.affect.curiosity),
+			provenance: ["mission-control.derived.affect"]
+		}
+	});
+	return graph.toJSON();
+}
 function getMissionFileTitle(fileName) {
 	const known = DEFAULT_MISSION_FILES.find((entry) => entry.fileName === fileName);
 	if (known) return known.title;
@@ -7163,6 +7751,10 @@ async function ensureMissionControlScaffold(stateDir = resolveStateDir()) {
 async function readMissionControlState(stateDir = resolveStateDir()) {
 	await ensureMissionControlScaffold(stateDir);
 	const stored = await readJsonFile(missionStatePath(stateDir));
+	const replaceCollections = [];
+	if (Array.isArray(stored?.goals)) replaceCollections.push("goals");
+	if (Array.isArray(stored?.features)) replaceCollections.push("features");
+	if (Array.isArray(stored?.people)) replaceCollections.push("people");
 	return mergeState(DEFAULT_STATE, {
 		...stored,
 		repo: {
@@ -7172,7 +7764,23 @@ async function readMissionControlState(stateDir = resolveStateDir()) {
 		speech: {
 			...DEFAULT_STATE.speech,
 			...stored?.speech
-		}
+		},
+		goals: Array.isArray(stored?.goals) ? stored.goals : DEFAULT_STATE.goals,
+		features: Array.isArray(stored?.features) ? stored.features : DEFAULT_STATE.features,
+		people: Array.isArray(stored?.people) ? stored.people : DEFAULT_STATE.people,
+		chronos: {
+			...DEFAULT_STATE.chronos,
+			...stored?.chronos
+		},
+		affect: {
+			...DEFAULT_STATE.affect,
+			...stored?.affect
+		},
+		autoToggle: {
+			...DEFAULT_STATE.autoToggle,
+			...stored?.autoToggle
+		},
+		replaceCollections
 	});
 }
 async function patchMissionControlState(patch, stateDir = resolveStateDir()) {
@@ -7223,6 +7831,8 @@ async function readMissionControlSnapshot(stateDir = resolveStateDir()) {
 		directory,
 		statePath: missionStatePath(stateDir),
 		state,
+		brainGraph: buildMissionControlBrainGraph(state),
+		trustGraph: await readTrustGraphSnapshot(stateDir),
 		files,
 		innerWorld: innerWorldEntries.filter((entry) => Boolean(entry)),
 		importantHistory: await listImportantHistoryEntries(stateDir)
@@ -7307,7 +7917,7 @@ async function connectMissionRepo(params) {
 
 //#endregion
 //#region src/gateway/server-methods/anima.ts
-function invalid(message) {
+function invalid$1(message) {
 	return errorShape(ErrorCodes.INVALID_REQUEST, message);
 }
 function asRecord$1(value) {
@@ -7327,7 +7937,20 @@ function normalizeMemoryKind(value) {
 }
 async function setMainWorkingMode(mode) {
 	const cfg = loadConfig();
-	const { storePath, canonicalKey } = loadSessionEntry(resolveMainSessionKey(cfg));
+	const mainKey = resolveMainSessionKey(cfg);
+	const defaultModel = resolveDefaultModelForAgent({
+		cfg,
+		agentId: resolveSessionAgentId({
+			sessionKey: mainKey,
+			config: cfg
+		})
+	});
+	const autoModeSelection = resolveWorkingModeModelSelection({
+		cfg,
+		workingMode: mode,
+		defaultProvider: defaultModel.provider
+	});
+	const { storePath, canonicalKey } = loadSessionEntry(mainKey);
 	const execSecurity = mode === "read" ? "deny" : "full";
 	const execAsk = mode === "read" ? "off" : "on-miss";
 	const elevatedLevel = mode === "read" ? "off" : "ask";
@@ -7345,6 +7968,19 @@ async function setMainWorkingMode(mode) {
 			}
 		});
 		if (!applied.ok) throw new Error(applied.error.message);
+		applyModelOverrideToSessionEntry({
+			entry: applied.entry,
+			selection: autoModeSelection ? {
+				provider: autoModeSelection.provider,
+				model: autoModeSelection.model,
+				isDefault: autoModeSelection.provider === defaultModel.provider && autoModeSelection.model === defaultModel.model
+			} : {
+				provider: defaultModel.provider,
+				model: defaultModel.model,
+				isDefault: true
+			}
+		});
+		store[canonicalKey] = applied.entry;
 		return applied.entry;
 	});
 	await patchMissionControlState({ workingMode: mode });
@@ -7352,7 +7988,9 @@ async function setMainWorkingMode(mode) {
 		mode,
 		execSecurity,
 		execAsk,
-		elevatedLevel
+		elevatedLevel,
+		modelProvider: autoModeSelection?.provider ?? defaultModel.provider,
+		model: autoModeSelection?.model ?? defaultModel.model
 	};
 }
 const animaHandlers = {
@@ -7404,7 +8042,7 @@ const animaHandlers = {
 	"anima.runtime.set-working-mode": async ({ params, respond }) => {
 		const mode = normalizeWorkingMode(params?.mode);
 		if (!mode) {
-			respond(false, void 0, invalid("mode must be \"read\" or \"write\""));
+			respond(false, void 0, invalid$1("mode must be \"read\" or \"write\""));
 			return;
 		}
 		try {
@@ -7419,7 +8057,7 @@ const animaHandlers = {
 	"anima.memory.list": async ({ params, respond }) => {
 		const kind = normalizeMemoryKind(params?.kind);
 		if (!kind) {
-			respond(false, void 0, invalid("kind must be one of: \"episodic\", \"semantic\", \"procedural\""));
+			respond(false, void 0, invalid$1("kind must be one of: \"episodic\", \"semantic\", \"procedural\""));
 			return;
 		}
 		const query = typeof params?.query === "string" ? params.query?.trim() || void 0 : void 0;
@@ -7449,7 +8087,7 @@ const animaHandlers = {
 		const fileName = typeof params?.fileName === "string" ? params.fileName?.trim() || "" : "";
 		const content = typeof params?.content === "string" ? params.content ?? "" : "";
 		if (!fileName) {
-			respond(false, void 0, invalid("fileName is required"));
+			respond(false, void 0, invalid$1("fileName is required"));
 			return;
 		}
 		try {
@@ -7467,7 +8105,7 @@ const animaHandlers = {
 	"anima.mission.patch": async ({ params, respond }) => {
 		const patch = asRecord$1(params?.patch);
 		if (!patch) {
-			respond(false, void 0, invalid("patch object required"));
+			respond(false, void 0, invalid$1("patch object required"));
 			return;
 		}
 		try {
@@ -7482,7 +8120,7 @@ const animaHandlers = {
 	"anima.mission.connect-repo": async ({ params, respond }) => {
 		const url = typeof params?.url === "string" ? params.url?.trim() || "" : "";
 		if (!url) {
-			respond(false, void 0, invalid("url is required"));
+			respond(false, void 0, invalid$1("url is required"));
 			return;
 		}
 		const branch = typeof params?.branch === "string" ? params.branch?.trim() || void 0 : void 0;
@@ -7501,6 +8139,22 @@ const animaHandlers = {
 			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
 		}
 	},
+	"anima.trust.set": async ({ params, respond }) => {
+		const people = Array.isArray(params?.people) ? params.people : null;
+		if (!people) {
+			respond(false, void 0, invalid$1("people array is required"));
+			return;
+		}
+		try {
+			await saveTrustGraph({
+				version: 1,
+				people
+			});
+			respond(true, { ok: true }, void 0);
+		} catch (error) {
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
+		}
+	},
 	"anima.mission.import": async ({ params, respond }) => {
 		const source = typeof params?.source === "string" ? params.source?.trim() || void 0 : void 0;
 		const preset = typeof params?.preset === "string" ? params.preset?.trim() || void 0 : void 0;
@@ -7533,7 +8187,7 @@ const animaHandlers = {
 	"anima.registration.set-token": async ({ params, respond }) => {
 		const token = typeof params?.token === "string" ? params.token?.trim() || "" : "";
 		if (!token) {
-			respond(false, void 0, invalid("token is required"));
+			respond(false, void 0, invalid$1("token is required"));
 			return;
 		}
 		try {
@@ -7541,7 +8195,7 @@ const animaHandlers = {
 			const agent = await whoami();
 			if (!agent) {
 				clearToken();
-				respond(false, void 0, invalid("token could not be verified"));
+				respond(false, void 0, invalid$1("token could not be verified"));
 				return;
 			}
 			respond(true, {
@@ -7555,7 +8209,7 @@ const animaHandlers = {
 	"anima.registration.register-invite": async ({ params, respond }) => {
 		const code = typeof params?.code === "string" ? params.code?.trim() || "" : "";
 		if (!code) {
-			respond(false, void 0, invalid("code is required"));
+			respond(false, void 0, invalid$1("code is required"));
 			return;
 		}
 		const suggested = resolveSuggestedIdentity();
@@ -8957,7 +9611,7 @@ const FIELD_LABELS = {
 
 //#endregion
 //#region src/config/schema.hints.ts
-const log$4 = createSubsystemLogger("config/schema");
+const log$5 = createSubsystemLogger("config/schema");
 const GROUP_LABELS = {
 	wizard: "Wizard",
 	update: "Update",
@@ -9105,7 +9759,7 @@ function mapSensitivePaths(schema, path, hints) {
 		...next[path],
 		sensitive: true
 	};
-	else if (isSensitiveConfigPath(path) && !next[path]?.sensitive) log$4.warn(`possibly sensitive key found: (${path})`);
+	else if (isSensitiveConfigPath(path) && !next[path]?.sensitive) log$5.warn(`possibly sensitive key found: (${path})`);
 	if (currentSchema instanceof z.ZodObject) {
 		const shape = currentSchema.shape;
 		for (const key in shape) {
@@ -9128,7 +9782,7 @@ function mapSensitivePaths(schema, path, hints) {
 
 //#endregion
 //#region src/config/redact-snapshot.ts
-const log$3 = createSubsystemLogger("config/redaction");
+const log$4 = createSubsystemLogger("config/redaction");
 const ENV_VAR_PLACEHOLDER_PATTERN = /^\$\{[^}]*\}$/;
 function isSensitivePath(path) {
 	if (path.endsWith("[]")) return isSensitiveConfigPath(path.slice(0, -2));
@@ -9379,7 +10033,7 @@ function restoreRedactedValuesWithLookup(incoming, original, lookup, prefix, hin
 			return restoreRedactedValuesGuessing(incoming, original, prefix, hints);
 		}
 		const origArr = Array.isArray(original) ? original : [];
-		if (incoming.length < origArr.length) log$3.warn(`Redacted config array key ${path} has been truncated`);
+		if (incoming.length < origArr.length) log$4.warn(`Redacted config array key ${path} has been truncated`);
 		return incoming.map((item, i) => {
 			if (item === REDACTED_SENTINEL) return origArr[i];
 			return restoreRedactedValuesWithLookup(item, origArr[i], lookup, path, hints);
@@ -9396,7 +10050,7 @@ function restoreRedactedValuesWithLookup(incoming, original, lookup, prefix, hin
 			matched = true;
 			if (value === REDACTED_SENTINEL) if (key in orig) result[key] = orig[key];
 			else {
-				log$3.warn(`Cannot un-redact config key ${candidate} as it doesn't have any value`);
+				log$4.warn(`Cannot un-redact config key ${candidate} as it doesn't have any value`);
 				throw new RedactionError(candidate);
 			}
 			else if (typeof value === "object" && value !== null) result[key] = restoreRedactedValuesWithLookup(value, orig[key], lookup, candidate, hints);
@@ -9405,7 +10059,7 @@ function restoreRedactedValuesWithLookup(incoming, original, lookup, prefix, hin
 		if (!matched && isExtensionPath(path)) {
 			if (!isExplicitlyNonSensitivePath(hints, [path, wildcardPath]) && isSensitivePath(path) && value === REDACTED_SENTINEL) if (key in orig) result[key] = orig[key];
 			else {
-				log$3.warn(`Cannot un-redact config key ${path} as it doesn't have any value`);
+				log$4.warn(`Cannot un-redact config key ${path} as it doesn't have any value`);
 				throw new RedactionError(path);
 			}
 			else if (typeof value === "object" && value !== null) result[key] = restoreRedactedValuesGuessing(value, orig[key], path, hints);
@@ -9424,7 +10078,7 @@ function restoreRedactedValuesGuessing(incoming, original, prefix, hints) {
 		const origArr = Array.isArray(original) ? original : [];
 		return incoming.map((item, i) => {
 			const path = `${prefix}[]`;
-			if (incoming.length < origArr.length) log$3.warn(`Redacted config array key ${path} has been truncated`);
+			if (incoming.length < origArr.length) log$4.warn(`Redacted config array key ${path} has been truncated`);
 			if (!isExplicitlyNonSensitivePath(hints, [path]) && isSensitivePath(path) && item === REDACTED_SENTINEL) return origArr[i];
 			return restoreRedactedValuesGuessing(item, origArr[i], path, hints);
 		});
@@ -9435,7 +10089,7 @@ function restoreRedactedValuesGuessing(incoming, original, prefix, hints) {
 		const path = prefix ? `${prefix}.${key}` : key;
 		if (!isExplicitlyNonSensitivePath(hints, [path, prefix ? `${prefix}.*` : "*"]) && isSensitivePath(path) && value === REDACTED_SENTINEL) if (key in orig) result[key] = orig[key];
 		else {
-			log$3.warn(`Cannot un-redact config key ${path} as it doesn't have any value`);
+			log$4.warn(`Cannot un-redact config key ${path} as it doesn't have any value`);
 			throw new RedactionError(path);
 		}
 		else if (typeof value === "object" && value !== null) result[key] = restoreRedactedValuesGuessing(value, orig[key], path, hints);
@@ -10782,10 +11436,10 @@ const logsHandlers = { "logs.tail": async ({ params, respond }) => {
 const mcpHandlers = {
 	"mcp.list": async ({ respond }) => {
 		try {
-			const { listServers } = await import("./registry-gaRST__4.js").then((n) => n.n);
+			const { listServers } = await import("./registry-BvymIcVf.js").then((n) => n.n);
 			respond(true, { servers: await listServers() });
 		} catch (err) {
-			respond(false, void 0, errorShape(ErrorCodes.INTERNAL, String(err)));
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(err)));
 		}
 	},
 	"mcp.add": async ({ params, respond }) => {
@@ -10795,8 +11449,8 @@ const mcpHandlers = {
 			return;
 		}
 		try {
-			const { addServer } = await import("./registry-gaRST__4.js").then((n) => n.n);
-			const { syncConfig } = await import("./config-sync-CYX9Tzyr.js");
+			const { addServer } = await import("./registry-BvymIcVf.js").then((n) => n.n);
+			const { syncConfig } = await import("./config-sync-CCVp-tVX.js");
 			const registry = await addServer({
 				name: p.name,
 				command: p.command,
@@ -10811,7 +11465,7 @@ const mcpHandlers = {
 			await syncConfig();
 			respond(true, { servers: registry.servers });
 		} catch (err) {
-			respond(false, void 0, errorShape(ErrorCodes.INTERNAL, String(err)));
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(err)));
 		}
 	},
 	"mcp.remove": async ({ params, respond }) => {
@@ -10821,21 +11475,21 @@ const mcpHandlers = {
 			return;
 		}
 		try {
-			const { removeServer } = await import("./registry-gaRST__4.js").then((n) => n.n);
-			const { syncConfig } = await import("./config-sync-CYX9Tzyr.js");
+			const { removeServer } = await import("./registry-BvymIcVf.js").then((n) => n.n);
+			const { syncConfig } = await import("./config-sync-CCVp-tVX.js");
 			const registry = await removeServer(p.name);
 			await syncConfig();
 			respond(true, { servers: registry.servers });
 		} catch (err) {
-			respond(false, void 0, errorShape(ErrorCodes.INTERNAL, String(err)));
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(err)));
 		}
 	},
 	"mcp.sync": async ({ respond }) => {
 		try {
-			const { syncConfig } = await import("./config-sync-CYX9Tzyr.js");
+			const { syncConfig } = await import("./config-sync-CCVp-tVX.js");
 			respond(true, await syncConfig());
 		} catch (err) {
-			respond(false, void 0, errorShape(ErrorCodes.INTERNAL, String(err)));
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(err)));
 		}
 	}
 };
@@ -11420,7 +12074,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-yZM_OBSZ.js");
+			const { handleNodeEvent } = await import("./server-node-events-BR1aXVlu.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -11450,6 +12104,441 @@ const nodeHandlers = {
 	}
 };
 
+//#endregion
+//#region src/org/types.ts
+const DEFAULT_ROLE_PERMISSIONS = {
+	owner: {
+		canCreateTasks: true,
+		canDelegateTasks: true,
+		canManageMembers: true,
+		canEditOrg: true,
+		canAccessRepos: ["*"],
+		canEscalate: true,
+		canViewBrain: true,
+		canSyncBrain: true
+	},
+	operator: {
+		canCreateTasks: true,
+		canDelegateTasks: true,
+		canManageMembers: true,
+		canEditOrg: false,
+		canAccessRepos: ["*"],
+		canEscalate: true,
+		canViewBrain: true,
+		canSyncBrain: true
+	},
+	coordinator: {
+		canCreateTasks: true,
+		canDelegateTasks: true,
+		canManageMembers: false,
+		canEditOrg: false,
+		canAccessRepos: [],
+		canEscalate: true,
+		canViewBrain: true,
+		canSyncBrain: true
+	},
+	worker: {
+		canCreateTasks: false,
+		canDelegateTasks: false,
+		canManageMembers: false,
+		canEditOrg: false,
+		canAccessRepos: [],
+		canEscalate: true,
+		canViewBrain: true,
+		canSyncBrain: false
+	},
+	observer: {
+		canCreateTasks: false,
+		canDelegateTasks: false,
+		canManageMembers: false,
+		canEditOrg: false,
+		canAccessRepos: [],
+		canEscalate: false,
+		canViewBrain: true,
+		canSyncBrain: false
+	}
+};
+
+//#endregion
+//#region src/org/store.ts
+/**
+* ANIMA 6 Organization Store
+*
+* Persists organization state to ~/.anima/org/
+* Supports CRUD operations for orgs, members, and roles.
+*/
+const log$3 = createSubsystemLogger("org-store");
+function resolveOrgDir() {
+	return path.join(resolveStateDir(), "org");
+}
+function resolveOrgFile(orgId) {
+	return path.join(resolveOrgDir(), `${orgId}.json`);
+}
+function readOrgFile(orgId) {
+	const filePath = resolveOrgFile(orgId);
+	try {
+		if (!fs.existsSync(filePath)) return null;
+		const raw = fs.readFileSync(filePath, "utf8");
+		const parsed = JSON.parse(raw);
+		if (parsed?.version !== 1) return null;
+		return parsed;
+	} catch {
+		return null;
+	}
+}
+function writeOrgFile(orgId, data) {
+	const filePath = resolveOrgFile(orgId);
+	fs.mkdirSync(path.dirname(filePath), { recursive: true });
+	fs.writeFileSync(filePath, `${JSON.stringify(data, null, 2)}\n`, { mode: 384 });
+}
+function createOrganization(name, description, ownerId, ownerName, ownerKind, settings) {
+	const orgId = crypto.randomUUID();
+	const now = Date.now();
+	const org = {
+		id: orgId,
+		name,
+		description,
+		createdAt: now,
+		updatedAt: now,
+		ownerId,
+		settings: {
+			maxAgents: 50,
+			maxHumans: 20,
+			autoSpecialization: true,
+			securityLevel: "standard",
+			syncIntervalMs: 6e4,
+			backupIntervalMs: 300 * 60 * 1e3,
+			peerPort: 9876,
+			...settings
+		}
+	};
+	writeOrgFile(orgId, {
+		version: 1,
+		org,
+		members: [{
+			id: crypto.randomUUID(),
+			kind: ownerKind,
+			displayName: ownerName,
+			role: "owner",
+			description: "Organization owner",
+			specializations: [],
+			joinedAt: now,
+			lastActiveAt: now,
+			status: "active",
+			permissions: DEFAULT_ROLE_PERMISSIONS.owner
+		}]
+	});
+	log$3.info(`created organization: ${name} (${orgId})`);
+	return org;
+}
+function getOrganization(orgId) {
+	return readOrgFile(orgId)?.org ?? null;
+}
+function updateOrganization(orgId, updates) {
+	const data = readOrgFile(orgId);
+	if (!data) return null;
+	if (updates.name) data.org.name = updates.name;
+	if (updates.description) data.org.description = updates.description;
+	if (updates.settings) data.org.settings = {
+		...data.org.settings,
+		...updates.settings
+	};
+	data.org.updatedAt = Date.now();
+	writeOrgFile(orgId, data);
+	log$3.info(`updated organization: ${orgId}`);
+	return data.org;
+}
+function listOrganizations() {
+	const dir = resolveOrgDir();
+	try {
+		if (!fs.existsSync(dir)) return [];
+		return fs.readdirSync(dir).filter((f) => f.endsWith(".json")).map((f) => {
+			return readOrgFile(f.replace(".json", ""))?.org;
+		}).filter((o) => o != null);
+	} catch {
+		return [];
+	}
+}
+function addMember(orgId, member) {
+	const data = readOrgFile(orgId);
+	if (!data) return null;
+	const newMember = {
+		...member,
+		id: crypto.randomUUID(),
+		joinedAt: Date.now(),
+		lastActiveAt: Date.now(),
+		permissions: DEFAULT_ROLE_PERMISSIONS[member.role]
+	};
+	data.members.push(newMember);
+	data.org.updatedAt = Date.now();
+	writeOrgFile(orgId, data);
+	log$3.info(`added member ${newMember.displayName} to org ${orgId}`);
+	return newMember;
+}
+function removeMember(orgId, memberId) {
+	const data = readOrgFile(orgId);
+	if (!data) return false;
+	const idx = data.members.findIndex((m) => m.id === memberId);
+	if (idx === -1) return false;
+	data.members.splice(idx, 1);
+	data.org.updatedAt = Date.now();
+	writeOrgFile(orgId, data);
+	log$3.info(`removed member ${memberId} from org ${orgId}`);
+	return true;
+}
+function updateMember(orgId, memberId, updates) {
+	const data = readOrgFile(orgId);
+	if (!data) return null;
+	const member = data.members.find((m) => m.id === memberId);
+	if (!member) return null;
+	if (updates.displayName) member.displayName = updates.displayName;
+	if (updates.role) {
+		member.role = updates.role;
+		member.permissions = {
+			...DEFAULT_ROLE_PERMISSIONS[updates.role],
+			...updates.permissions
+		};
+	}
+	if (updates.description !== void 0) member.description = updates.description;
+	if (updates.specializations) member.specializations = updates.specializations;
+	if (updates.status) member.status = updates.status;
+	if (updates.reportsTo !== void 0) member.reportsTo = updates.reportsTo;
+	if (updates.permissions && !updates.role) member.permissions = {
+		...member.permissions,
+		...updates.permissions
+	};
+	member.lastActiveAt = Date.now();
+	data.org.updatedAt = Date.now();
+	writeOrgFile(orgId, data);
+	return member;
+}
+function getMembers(orgId) {
+	return readOrgFile(orgId)?.members ?? [];
+}
+function buildHierarchy(orgId) {
+	const members = getMembers(orgId);
+	if (members.length === 0) return [];
+	const memberMap = new Map(members.map((m) => [m.id, m]));
+	function buildNode(member) {
+		const children = members.filter((m) => m.reportsTo === member.id).map((m) => buildNode(m));
+		return {
+			memberId: member.id,
+			displayName: member.displayName,
+			kind: member.kind,
+			role: member.role,
+			specializations: member.specializations,
+			status: member.status,
+			children
+		};
+	}
+	return members.filter((m) => !m.reportsTo || !memberMap.has(m.reportsTo)).map((r) => buildNode(r));
+}
+
+//#endregion
+//#region src/gateway/server-methods/org.ts
+function invalid(message) {
+	return errorShape(ErrorCodes.INVALID_REQUEST, message);
+}
+function requireString(params, key) {
+	const val = params[key];
+	return typeof val === "string" ? val.trim() || null : null;
+}
+const orgHandlers = {
+	"org.list": async ({ respond }) => {
+		try {
+			respond(true, { orgs: listOrganizations() }, void 0);
+		} catch (error) {
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
+		}
+	},
+	"org.get": async ({ params, respond }) => {
+		const orgId = requireString(params, "orgId");
+		if (!orgId) {
+			respond(false, void 0, invalid("orgId is required"));
+			return;
+		}
+		try {
+			const org = getOrganization(orgId);
+			if (!org) {
+				respond(false, void 0, invalid("Organization not found"));
+				return;
+			}
+			respond(true, {
+				org,
+				members: getMembers(orgId)
+			}, void 0);
+		} catch (error) {
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
+		}
+	},
+	"org.create": async ({ params, respond }) => {
+		const name = requireString(params, "name");
+		const description = requireString(params, "description") ?? "";
+		const ownerId = requireString(params, "ownerId");
+		const ownerName = requireString(params, "ownerName");
+		const ownerKind = requireString(params, "ownerKind");
+		if (!name) {
+			respond(false, void 0, invalid("name is required"));
+			return;
+		}
+		if (!ownerId) {
+			respond(false, void 0, invalid("ownerId is required"));
+			return;
+		}
+		if (!ownerName) {
+			respond(false, void 0, invalid("ownerName is required"));
+			return;
+		}
+		if (!ownerKind || ownerKind !== "human" && ownerKind !== "agent") {
+			respond(false, void 0, invalid("ownerKind must be \"human\" or \"agent\""));
+			return;
+		}
+		const settings = params.settings && typeof params.settings === "object" && !Array.isArray(params.settings) ? params.settings : void 0;
+		try {
+			const org = createOrganization(name, description, ownerId, ownerName, ownerKind, settings);
+			respond(true, {
+				org,
+				members: getMembers(org.id)
+			}, void 0);
+		} catch (error) {
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
+		}
+	},
+	"org.update": async ({ params, respond }) => {
+		const orgId = requireString(params, "orgId");
+		if (!orgId) {
+			respond(false, void 0, invalid("orgId is required"));
+			return;
+		}
+		const updates = {};
+		const name = requireString(params, "name");
+		if (name) updates.name = name;
+		const description = requireString(params, "description");
+		if (description) updates.description = description;
+		if (params.settings && typeof params.settings === "object" && !Array.isArray(params.settings)) updates.settings = params.settings;
+		try {
+			const org = updateOrganization(orgId, updates);
+			if (!org) {
+				respond(false, void 0, invalid("Organization not found"));
+				return;
+			}
+			respond(true, { org }, void 0);
+		} catch (error) {
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
+		}
+	},
+	"org.addMember": async ({ params, respond }) => {
+		const orgId = requireString(params, "orgId");
+		if (!orgId) {
+			respond(false, void 0, invalid("orgId is required"));
+			return;
+		}
+		const displayName = requireString(params, "displayName");
+		if (!displayName) {
+			respond(false, void 0, invalid("displayName is required"));
+			return;
+		}
+		const kind = requireString(params, "kind");
+		if (!kind || kind !== "human" && kind !== "agent") {
+			respond(false, void 0, invalid("kind must be \"human\" or \"agent\""));
+			return;
+		}
+		const role = requireString(params, "role") ?? "worker";
+		const description = requireString(params, "description") ?? "";
+		const specializations = Array.isArray(params.specializations) ? params.specializations : [];
+		const status = requireString(params, "status") ?? "active";
+		const reportsTo = requireString(params, "reportsTo") ?? void 0;
+		try {
+			const member = addMember(orgId, {
+				kind,
+				displayName,
+				role,
+				description,
+				specializations,
+				status,
+				reportsTo
+			});
+			if (!member) {
+				respond(false, void 0, invalid("Organization not found"));
+				return;
+			}
+			respond(true, { member }, void 0);
+		} catch (error) {
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
+		}
+	},
+	"org.updateMember": async ({ params, respond }) => {
+		const orgId = requireString(params, "orgId");
+		const memberId = requireString(params, "memberId");
+		if (!orgId) {
+			respond(false, void 0, invalid("orgId is required"));
+			return;
+		}
+		if (!memberId) {
+			respond(false, void 0, invalid("memberId is required"));
+			return;
+		}
+		const updates = {};
+		const displayName = requireString(params, "displayName");
+		if (displayName) updates.displayName = displayName;
+		const role = requireString(params, "role");
+		if (role) updates.role = role;
+		const description = params.description;
+		if (typeof description === "string") updates.description = description;
+		if (Array.isArray(params.specializations)) updates.specializations = params.specializations;
+		const status = requireString(params, "status");
+		if (status) updates.status = status;
+		if (params.reportsTo !== void 0) updates.reportsTo = typeof params.reportsTo === "string" ? params.reportsTo : void 0;
+		try {
+			const member = updateMember(orgId, memberId, updates);
+			if (!member) {
+				respond(false, void 0, invalid("Member not found"));
+				return;
+			}
+			respond(true, { member }, void 0);
+		} catch (error) {
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
+		}
+	},
+	"org.removeMember": async ({ params, respond }) => {
+		const orgId = requireString(params, "orgId");
+		const memberId = requireString(params, "memberId");
+		if (!orgId) {
+			respond(false, void 0, invalid("orgId is required"));
+			return;
+		}
+		if (!memberId) {
+			respond(false, void 0, invalid("memberId is required"));
+			return;
+		}
+		try {
+			if (!removeMember(orgId, memberId)) {
+				respond(false, void 0, invalid("Member not found"));
+				return;
+			}
+			respond(true, { ok: true }, void 0);
+		} catch (error) {
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
+		}
+	},
+	"org.hierarchy": async ({ params, respond }) => {
+		const orgId = requireString(params, "orgId");
+		if (!orgId) {
+			respond(false, void 0, invalid("orgId is required"));
+			return;
+		}
+		try {
+			if (!getOrganization(orgId)) {
+				respond(false, void 0, invalid("Organization not found"));
+				return;
+			}
+			respond(true, { hierarchy: buildHierarchy(orgId) }, void 0);
+		} catch (error) {
+			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, String(error)));
+		}
+	}
+};
+
 //#endregion
 //#region src/gateway/server-methods/providers.ts
 function isValidProviderArray(value) {
@@ -12833,7 +13922,7 @@ const usageHandlers = {
 		const resolved = resolveSessionUsageFileOrRespond(key, respond);
 		if (!resolved) return;
 		const { config, entry, agentId, sessionId, sessionFile } = resolved;
-		const { loadSessionLogs } = await import("./session-cost-usage-BamtB1rn.js").then((n) => n.a);
+		const { loadSessionLogs } = await import("./session-cost-usage-BWqR-ik6.js").then((n) => n.a);
 		respond(true, { logs: await loadSessionLogs({
 			sessionId,
 			sessionEntry: entry,
@@ -13361,6 +14450,7 @@ const coreGatewayHandlers = {
 	...systemHandlers,
 	...updateHandlers,
 	...nodeHandlers,
+	...orgHandlers,
 	...sendHandlers,
 	...usageHandlers,
 	...agentHandlers,
@@ -14306,7 +15396,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.ANIMA_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.ANIMA_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-CzAfyR4e.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-5YtMvm7D.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -17976,7 +19066,7 @@ async function startGatewaySidecars(params) {
 		params.log.warn(`ANIMA Gateway plugin services failed to start: ${String(err)}`);
 	}
 	try {
-		const { syncConfig } = await import("./config-sync-CYX9Tzyr.js");
+		const { syncConfig } = await import("./config-sync-CCVp-tVX.js");
 		const syncResult = await syncConfig();
 		const formatRes = (res) => `${res.added.length} added, ${res.updated.length} updated, ${res.removed.length} removed`;
 		if (syncResult.added.length + syncResult.updated.length + syncResult.removed.length > 0) params.log.warn(`MCP config synced: Claude (${formatRes(syncResult.claude)}); Codex (${formatRes(syncResult.codex)})`);
@@ -19342,8 +20432,8 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	} : startHeartbeatRunner({ cfg: cfgAtStart });
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
-		const { recoverPendingDeliveries } = await import("./delivery-queue-DZ_ibFDu.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-ahx1N11n.js").then((n) => n.n);
+		const { recoverPendingDeliveries } = await import("./delivery-queue-CExaJXRz.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BKzX3YoN.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),