@noxsoft/anima 5.1.2 → 6.0.0

package/dist/{pi-embedded-DifnZvKk.js → pi-embedded-DfbM3fAT.js}

@@ -1,35 +1,36 @@
 import { n as __exportAll } from "./chunk-BXK9XSlF.js";
-import { a as resolveOAuthDir, i as resolveGatewayPort, n as resolveConfigPath, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-D2eokayo.js";
-import { A as isAcpSessionKey, C as normalizeAccountId$1, D as resolveThreadSessionKeys, E as resolveAgentIdFromSessionKey, M as parseAgentSessionKey, N as resolveThreadParentSessionKey, O as sanitizeAgentId, S as classifySessionKeyShape, T as normalizeMainKey, _ as DEFAULT_AGENT_ID, b as buildAgentPeerSessionKey, f as loadWorkspaceBootstrapFiles, g as DEFAULT_ACCOUNT_ID, j as isSubagentSessionKey, k as getSubagentDepth, l as ensureAgentWorkspace, m as resolveAnimaPackageRoot, n as DEFAULT_AGENT_WORKSPACE_DIR, u as filterBootstrapFilesForSession, v as DEFAULT_MAIN_KEY, w as normalizeAgentId, y as buildAgentMainSessionKey } from "./workspace-BQkffCaR.js";
-import { A as normalizeLogLevel, D as getChildLogger, E as theme, T as isRich, a as unregisterActiveProgressLine, b as setVerbose, d as normalizeChannelId, h as setActivePluginRegistry, i as registerActiveProgressLine, n as defaultRuntime, p as getActivePluginRegistry, r as clearActiveProgressLine, s as CHAT_CHANNEL_ORDER, t as createSubsystemLogger, u as normalizeAnyChannelId, v as logVerbose, w as colorize, x as shouldLogVerbose } from "./subsystem-DA3Cno1i.js";
-import { D as shortenHomePath, E as shortenHomeInString, O as sleep, T as safeParseJson, _ as isRecord, a as logDebug, c as logWarn, d as clampInt, g as isPlainObject, h as formatTerminalLink, i as spawnWithFallback, j as truncateUtf16Safe, k as sliceUtf16Safe, l as CONFIG_DIR, m as escapeRegExp, n as runExec, o as logError, p as ensureDir$3, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout, w as resolveUserPath } from "./exec-Bfd4ztFZ.js";
-import { c as resolveDefaultAgentId, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds } from "./agent-scope-BZ8hjIt_.js";
-import { A as supportsXHighThinking, At as assertSandboxPath, B as extractDeliveryInfo, Bt as normalizeToolName, C as listThinkingLevels, Ct as DEFAULT_UPLOAD_DIR, D as normalizeUsageDisplay, Dt as buildWorkspaceSkillSnapshot, E as normalizeThinkLevel, Et as buildWorkspaceSkillCommandSpecs, F as isLikelyContextOverflowError, Ft as applyOwnerOnlyToolPolicy, G as updateLastRoute, Gt as buildBootstrapContextFiles, H as loadSessionStore, Ht as stripPluginOnlyAllowlist, I as isTransientHttpError, It as buildPluginToolGroups, J as deliveryContextFromSession, Jt as HEARTBEAT_TOKEN, K as updateSessionStore, Kt as resolveBootstrapMaxChars, L as sanitizeUserFacingText, Lt as collectExplicitAllowlist, M as isCompactionFailureError, Mt as ensureBrowserControlAuth, N as isContextOverflowError, Nt as resolveBrowserControlAuth, O as normalizeVerboseLevel, Ot as resolvePluginSkillDirs, P as isFailoverErrorMessage, Pt as resolveSandboxConfigForAgent, Q as normalizeSessionDeliveryFields, R as ensureSandboxWorkspaceForSession, Rt as expandPolicyWithPluginGroups, S as formatXHighModelHint, St as saveMediaBuffer, T as normalizeReasoningLevel, Tt as getBridgeAuthForPort, U as readSessionUpdatedAt, Ut as compileGlobPatterns, V as appendAssistantMessageToSessionTranscript, Vt as resolveToolProfilePolicy, W as recordSessionMetaFromInbound, Wt as matchesAnyGlobPattern, X as mergeDeliveryContext, Xt as isSilentReplyText, Y as deliveryContextKey, Yt as SILENT_REPLY_TOKEN, Z as normalizeDeliveryContext, _ as throwIfAborted, _t as createBrowserRouteContext, at as resolveThreadFlag, b as initializeGlobalHookRunner, bt as resolveProfile, c as applyReplyThreading, ct as canonicalizeMainSessionAlias, d as shouldSuppressMessagingToolReplies, dt as deriveSessionMetaPatch, et as resolveSessionKey$1, f as createReplyToModeFilterForChannel, ft as getChannelDock, g as normalizeTargetForProvider, gt as resolveGroupSessionKey, h as normalizeChannelTargetInput, ht as normalizeChatType, it as resolveSessionResetType, j as classifyFailoverReason, jt as resolveSandboxedMediaSource, k as resolveResponseUsageMode, kt as assertMediaNotDataUrl, l as filterMessagingToolDuplicates, m as buildTargetResolverSignature, mt as resolveConversationLabel, nt as resolveChannelResetConfig, o as normalizeReplyPayloadsForDelivery, ot as DEFAULT_RESET_TRIGGERS, p as resolveReplyToMode, pt as listChannelDocks, q as updateSessionStoreEntry, qt as resolveBootstrapTotalMaxChars, rt as resolveSessionResetPolicy, s as applyReplyTagsToPayload, st as resolveFreshSessionTotalTokens, t as deliverOutboundPayloads, tt as evaluateSessionFreshness, u as isRenderablePayload, ut as resolveMainSessionKey, v as parseReplyDirectives, vt as registerBrowserRoutes, w as normalizeElevatedLevel, wt as resolvePathsWithinRoot, x as formatThinkingLevels, xt as getMediaDir, y as getGlobalHookRunner, yt as resolveBrowserConfig, z as resolveSandboxRuntimeStatus, zt as expandToolGroups } from "./deliver-D2hQZ9X0.js";
+import { a as resolveOAuthDir, i as resolveGatewayPort, n as resolveConfigPath, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-B-AkG5FD.js";
+import { A as isAcpSessionKey, C as normalizeAccountId$1, D as resolveThreadSessionKeys, E as resolveAgentIdFromSessionKey, M as parseAgentSessionKey, N as resolveThreadParentSessionKey, O as sanitizeAgentId, S as classifySessionKeyShape, T as normalizeMainKey, _ as DEFAULT_AGENT_ID, b as buildAgentPeerSessionKey, f as loadWorkspaceBootstrapFiles, g as DEFAULT_ACCOUNT_ID, j as isSubagentSessionKey, k as getSubagentDepth, l as ensureAgentWorkspace, m as resolveAnimaPackageRoot, n as DEFAULT_AGENT_WORKSPACE_DIR, u as filterBootstrapFilesForSession, v as DEFAULT_MAIN_KEY, w as normalizeAgentId, y as buildAgentMainSessionKey } from "./workspace-BFIZCnGo.js";
+import { A as normalizeLogLevel, D as getChildLogger, E as theme, T as isRich, a as unregisterActiveProgressLine, b as setVerbose, d as normalizeChannelId, h as setActivePluginRegistry, i as registerActiveProgressLine, n as defaultRuntime, p as getActivePluginRegistry, r as clearActiveProgressLine, s as CHAT_CHANNEL_ORDER, t as createSubsystemLogger, u as normalizeAnyChannelId, v as logVerbose, w as colorize, x as shouldLogVerbose } from "./subsystem-D1AJZPgG.js";
+import { D as shortenHomePath, E as shortenHomeInString, O as sleep, T as safeParseJson, _ as isRecord, a as logDebug, c as logWarn, d as clampInt, g as isPlainObject, h as formatTerminalLink, i as spawnWithFallback, j as truncateUtf16Safe, k as sliceUtf16Safe, l as CONFIG_DIR, m as escapeRegExp, n as runExec, o as logError, p as ensureDir$3, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout, w as resolveUserPath } from "./exec-DUzVF5_D.js";
+import { c as resolveDefaultAgentId, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds } from "./agent-scope-CxBzAozu.js";
+import { A as supportsXHighThinking, At as assertSandboxPath, B as extractDeliveryInfo, Bt as normalizeToolName, C as listThinkingLevels, Ct as DEFAULT_UPLOAD_DIR, D as normalizeUsageDisplay, Dt as buildWorkspaceSkillSnapshot, E as normalizeThinkLevel, Et as buildWorkspaceSkillCommandSpecs, F as isLikelyContextOverflowError, Ft as applyOwnerOnlyToolPolicy, G as updateLastRoute, Gt as buildBootstrapContextFiles, H as loadSessionStore, Ht as stripPluginOnlyAllowlist, I as isTransientHttpError, It as buildPluginToolGroups, J as deliveryContextFromSession, Jt as HEARTBEAT_TOKEN, K as updateSessionStore, Kt as resolveBootstrapMaxChars, L as sanitizeUserFacingText, Lt as collectExplicitAllowlist, M as isCompactionFailureError, Mt as ensureBrowserControlAuth, N as isContextOverflowError, Nt as resolveBrowserControlAuth, O as normalizeVerboseLevel, Ot as resolvePluginSkillDirs, P as isFailoverErrorMessage, Pt as resolveSandboxConfigForAgent, Q as normalizeSessionDeliveryFields, R as ensureSandboxWorkspaceForSession, Rt as expandPolicyWithPluginGroups, S as formatXHighModelHint, St as saveMediaBuffer, T as normalizeReasoningLevel, Tt as getBridgeAuthForPort, U as readSessionUpdatedAt, Ut as compileGlobPatterns, V as appendAssistantMessageToSessionTranscript, Vt as resolveToolProfilePolicy, W as recordSessionMetaFromInbound, Wt as matchesAnyGlobPattern, X as mergeDeliveryContext, Xt as isSilentReplyText, Y as deliveryContextKey, Yt as SILENT_REPLY_TOKEN, Z as normalizeDeliveryContext, _ as throwIfAborted, _t as createBrowserRouteContext, at as resolveThreadFlag, b as initializeGlobalHookRunner, bt as resolveProfile, c as applyReplyThreading, ct as canonicalizeMainSessionAlias, d as shouldSuppressMessagingToolReplies, dt as deriveSessionMetaPatch, et as resolveSessionKey$1, f as createReplyToModeFilterForChannel, ft as getChannelDock, g as normalizeTargetForProvider, gt as resolveGroupSessionKey, h as normalizeChannelTargetInput, ht as normalizeChatType, it as resolveSessionResetType, j as classifyFailoverReason, jt as resolveSandboxedMediaSource, k as resolveResponseUsageMode, kt as assertMediaNotDataUrl, l as filterMessagingToolDuplicates, m as buildTargetResolverSignature, mt as resolveConversationLabel, nt as resolveChannelResetConfig, o as normalizeReplyPayloadsForDelivery, ot as DEFAULT_RESET_TRIGGERS, p as resolveReplyToMode, pt as listChannelDocks, q as updateSessionStoreEntry, qt as resolveBootstrapTotalMaxChars, rt as resolveSessionResetPolicy, s as applyReplyTagsToPayload, st as resolveFreshSessionTotalTokens, t as deliverOutboundPayloads, tt as evaluateSessionFreshness, u as isRenderablePayload, ut as resolveMainSessionKey, v as parseReplyDirectives, vt as registerBrowserRoutes, w as normalizeElevatedLevel, wt as resolvePathsWithinRoot, x as formatThinkingLevels, xt as getMediaDir, y as getGlobalHookRunner, yt as resolveBrowserConfig, z as resolveSandboxRuntimeStatus, zt as expandToolGroups } from "./deliver-d-CaN0uL.js";
 import { i as triggerInternalHook, r as registerInternalHook, t as createInternalHookEvent } from "./internal-hooks-CWw3Hgeu.js";
-import { C as unsetConfigValueAtPath, S as setConfigValueAtPath, _ as resetConfigOverrides, a as writeConfigFile, b as getConfigValueAtPath, c as parseDurationMs, d as discoverAnimaPlugins, f as applyTestPluginDefaults, g as getConfigOverrides, h as resolveMemorySlotDecision, i as resolveConfigSnapshotHash, l as validateJsonSchemaValue, m as resolveEnableState, n as loadConfig, o as validateConfigObjectWithPlugins, p as normalizePluginsConfig, r as readConfigFileSnapshot, u as loadPluginManifestRegistry, v as setConfigOverride, w as VERSION, x as parseConfigPath, y as unsetConfigOverride } from "./config-6FVC8hW0.js";
-import { i as resolveShellEnvFallbackTimeoutMs, n as getShellPathFromLoginShell, s as isTruthyEnvValue } from "./shell-env-B4ae4lFh.js";
-import { a as modelKey, d as resolveModelRefFromString, f as resolveThinkingDefault, h as DEFAULT_PROVIDER, i as isCliProvider, l as resolveConfiguredModelRef, m as DEFAULT_MODEL, n as buildConfiguredAllowlistKeys, o as normalizeModelRef, p as DEFAULT_CONTEXT_TOKENS, r as buildModelAliasIndex, s as normalizeProviderId, t as buildAllowedModelSet, u as resolveDefaultModelForAgent } from "./model-selection-BI8CKPwQ.js";
-import { S as pickPrimaryTailnetIPv4, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, x as pickPrimaryLanIPv4, y as rawDataToString } from "./chrome-Cfak4A3i.js";
+import { C as unsetConfigValueAtPath, S as setConfigValueAtPath, _ as resetConfigOverrides, a as writeConfigFile, b as getConfigValueAtPath, c as parseDurationMs, d as discoverAnimaPlugins, f as applyTestPluginDefaults, g as getConfigOverrides, h as resolveMemorySlotDecision, i as resolveConfigSnapshotHash, l as validateJsonSchemaValue, m as resolveEnableState, n as loadConfig, o as validateConfigObjectWithPlugins, p as normalizePluginsConfig, r as readConfigFileSnapshot, u as loadPluginManifestRegistry, v as setConfigOverride, w as VERSION, x as parseConfigPath, y as unsetConfigOverride } from "./config-CweTwOtr.js";
+import { i as resolveShellEnvFallbackTimeoutMs, n as getShellPathFromLoginShell, s as isTruthyEnvValue } from "./shell-env-HkVWMh--.js";
+import { a as modelKey, d as resolveDefaultModelForAgent, f as resolveModelRefFromString, g as DEFAULT_PROVIDER, h as DEFAULT_MODEL, i as isCliProvider, m as DEFAULT_CONTEXT_TOKENS, n as buildConfiguredAllowlistKeys, o as normalizeModelRef, p as resolveThinkingDefault, r as buildModelAliasIndex, s as normalizeProviderId, t as buildAllowedModelSet, u as resolveConfiguredModelRef } from "./model-selection-DjsJGv1R.js";
+import { S as pickPrimaryTailnetIPv4, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, x as pickPrimaryLanIPv4, y as rawDataToString } from "./chrome-DLUBPBPz.js";
 import { n as resolveCliName, t as formatCliCommand } from "./command-format-GLYKXXl-.js";
 import { n as formatErrorMessage } from "./errors-UbDRvfEx.js";
-import { A as detectMime, C as GATEWAY_CLIENT_MODES, E as getImageMetadata, F as kindFromMime, H as isBlockedHostname, I as normalizeMimeType$1, M as getFileExtension, N as imageMimeFromFormat, P as isAudioFileName, R as mediaKindFromMime, S as GATEWAY_CLIENT_IDS, U as isPrivateIpAddress, _ as isMarkdownCapableMessageChannel, a as chunkText, b as resolveGatewayMessageChannel, c as resolveTextChunkLimit, d as listChannelPlugins, f as normalizeChannelId$1, g as isInternalMessageChannel, i as chunkMarkdownTextWithMode, j as extensionForMime, k as resizeToJpeg, m as isDeliverableMessageChannel, o as chunkTextWithMode, p as INTERNAL_MESSAGE_CHANNEL, r as chunkMarkdownText, s as resolveChunkMode, t as chunkByNewline, u as getChannelPlugin, v as listDeliverableMessageChannels, w as GATEWAY_CLIENT_NAMES, x as resolveMessageChannel, y as normalizeMessageChannel, z as SsrFBlockedError } from "./chunk-CyT-_QsQ.js";
-import { a as resolveSessionTranscriptPathInDir, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as resolveSessionTranscriptsDirForAgent, r as resolveSessionFilePathOptions, s as resolveStorePath$1 } from "./paths-Cwszsz1I.js";
-import { t as sanitizeToolResultImages } from "./tool-images-DK97edts.js";
-import { a as listProfilesForProvider, c as resolveAuthStorePathForDisplay, d as saveJsonFile, f as withFileLock$1, h as normalizeSecretInput, i as resolveApiKeyForProfile, l as resolveAnimaAgentDir, n as resolveAuthProfileOrder, o as ensureAuthProfileStore, p as resolveAuthProfileDisplayLabel, r as isProfileInCooldown, s as loadAuthProfileStore, u as loadJsonFile } from "./auth-profiles-eZzmaeR3.js";
-import { a as requireApiKey, c as resolveModelAuthMode, i as getCustomProviderApiKey, n as resolveMemorySearchConfig, o as resolveApiKeyForProvider, r as getApiKeyForModel, s as resolveEnvApiKey } from "./manager-A3pC-CW-.js";
-import { d as listMemoryFiles, f as normalizeExtraMemoryPaths } from "./sqlite-ClLAW1iQ.js";
-import { a as readNumberParam, c as readStringParam, i as jsonResult, n as imageResult, r as imageResultFromFile, s as readStringArrayParam } from "./common-BzPvZcxT.js";
-import { a as resolveMarkdownTableMode, c as loadWebMedia, d as readResponseWithLimit, f as fetchWithSsrFGuard, i as convertMarkdownTables, l as MediaFetchError, m as fetchWithTimeout, o as normalizePollInput, p as bindAbortRelay, s as getDefaultLocalRoots, t as getActiveWebListener, u as fetchRemoteMedia } from "./active-listener-GJR3nLhX.js";
+import { A as detectMime, C as GATEWAY_CLIENT_MODES, E as getImageMetadata, F as kindFromMime, H as isBlockedHostname, I as normalizeMimeType$1, M as getFileExtension, N as imageMimeFromFormat, P as isAudioFileName, R as mediaKindFromMime, S as GATEWAY_CLIENT_IDS, U as isPrivateIpAddress, _ as isMarkdownCapableMessageChannel, a as chunkText, b as resolveGatewayMessageChannel, c as resolveTextChunkLimit, d as listChannelPlugins, f as normalizeChannelId$1, g as isInternalMessageChannel, i as chunkMarkdownTextWithMode, j as extensionForMime, k as resizeToJpeg, m as isDeliverableMessageChannel, o as chunkTextWithMode, p as INTERNAL_MESSAGE_CHANNEL, r as chunkMarkdownText, s as resolveChunkMode, t as chunkByNewline, u as getChannelPlugin, v as listDeliverableMessageChannels, w as GATEWAY_CLIENT_NAMES, x as resolveMessageChannel, y as normalizeMessageChannel, z as SsrFBlockedError } from "./chunk-B4Kx-ocg.js";
+import { a as resolveSessionTranscriptPathInDir, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as resolveSessionTranscriptsDirForAgent, r as resolveSessionFilePathOptions, s as resolveStorePath$1 } from "./paths-Q6h5HODL.js";
+import { t as sanitizeToolResultImages } from "./tool-images-2qproko3.js";
+import { _ as normalizeSecretInput, a as markAuthProfileUsed, c as markAuthProfileGood, d as resolveAnimaAgentDir, f as loadJsonFile, h as resolveAuthProfileDisplayLabel, i as markAuthProfileFailure, l as ensureAuthProfileStore, m as withFileLock$1, n as resolveAuthProfileOrder, o as resolveApiKeyForProfile, p as saveJsonFile, r as isProfileInCooldown, s as listProfilesForProvider, u as resolveAuthStorePathForDisplay } from "./auth-profiles-DtWUl1-k.js";
+import { a as requireApiKey, c as resolveModelAuthMode, i as getCustomProviderApiKey, n as resolveMemorySearchConfig, o as resolveApiKeyForProvider, r as getApiKeyForModel, s as resolveEnvApiKey } from "./manager-b_aZwo00.js";
+import { d as listMemoryFiles, f as normalizeExtraMemoryPaths } from "./sqlite-CZ1vD4VS.js";
+import { n as createAsyncLock } from "./soul-Bt8UNmTq.js";
+import { a as readNumberParam, c as readStringParam, i as jsonResult, n as imageResult, r as imageResultFromFile, s as readStringArrayParam } from "./common-Bf_TG87Y.js";
+import { a as resolveMarkdownTableMode, c as loadWebMedia, d as readResponseWithLimit, f as fetchWithSsrFGuard, i as convertMarkdownTables, l as MediaFetchError, m as fetchWithTimeout, o as normalizePollInput, p as bindAbortRelay, s as getDefaultLocalRoots, t as getActiveWebListener, u as fetchRemoteMedia } from "./active-listener-D2r8IO7g.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-62lQTR6C.js";
-import { d as webAuthExists, i as logoutWeb, n as getWebAuthAgeMs, r as logWebSelfId, s as readWebSelfId } from "./auth-store-CnRrUELz.js";
+import { d as webAuthExists, i as logoutWeb, n as getWebAuthAgeMs, r as logWebSelfId, s as readWebSelfId } from "./auth-store-Bd0GoqEL.js";
 import { createRequire } from "node:module";
-import * as fs$1 from "node:fs/promises";
+import * as fs$2 from "node:fs/promises";
 import fs from "node:fs/promises";
 import * as os$1 from "node:os";
 import os, { homedir, tmpdir } from "node:os";
 import * as path$1 from "node:path";
 import path, { join } from "node:path";
-import fsSync, { constants, existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import fs$1, { constants, existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import JSON5 from "json5";
 import { execFile, execSync, spawn, spawnSync } from "node:child_process";
 import { promisify } from "node:util";
@@ -1317,7 +1318,7 @@ function resolvePowerShellPath() {
 	const systemRoot = process.env.SystemRoot || process.env.WINDIR;
 	if (systemRoot) {
 		const candidate = path.join(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
-		if (fsSync.existsSync(candidate)) return candidate;
+		if (fs$1.existsSync(candidate)) return candidate;
 	}
 	return "powershell.exe";
 }
@@ -1355,7 +1356,7 @@ function resolveShellFromPath(name) {
 	for (const entry of entries) {
 		const candidate = path.join(entry, name);
 		try {
-			fsSync.accessSync(candidate, fsSync.constants.X_OK);
+			fs$1.accessSync(candidate, fs$1.constants.X_OK);
 			return candidate;
 		} catch {}
 	}
@@ -1528,7 +1529,7 @@ function resolveRepoRoot(params) {
 	const configured = params.config?.agents?.defaults?.repoRoot?.trim();
 	if (configured) try {
 		const resolved = path.resolve(configured);
-		if (fsSync.statSync(resolved).isDirectory()) return resolved;
+		if (fs$1.statSync(resolved).isDirectory()) return resolved;
 	} catch {}
 	const candidates = [params.workspaceDir, params.cwd].map((value) => value?.trim()).filter(Boolean);
 	const seen = /* @__PURE__ */ new Set();
@@ -1545,7 +1546,7 @@ function findGitRoot(startDir) {
 	for (let i = 0; i < 12; i += 1) {
 		const gitPath = path.join(current, ".git");
 		try {
-			const stat = fsSync.statSync(gitPath);
+			const stat = fs$1.statSync(gitPath);
 			if (stat.isDirectory() || stat.isFile()) return current;
 		} catch {}
 		const parent = path.dirname(current);
@@ -2427,7 +2428,7 @@ async function resolveAnimaDocsPath(params) {
 	const workspaceDir = params.workspaceDir?.trim();
 	if (workspaceDir) {
 		const workspaceDocs = path.join(workspaceDir, "docs");
-		if (fsSync.existsSync(workspaceDocs)) return workspaceDocs;
+		if (fs$1.existsSync(workspaceDocs)) return workspaceDocs;
 	}
 	const packageRoot = await resolveAnimaPackageRoot({
 		cwd: params.cwd,
@@ -2436,7 +2437,18 @@ async function resolveAnimaDocsPath(params) {
 	});
 	if (!packageRoot) return null;
 	const packageDocs = path.join(packageRoot, "docs");
-	return fsSync.existsSync(packageDocs) ? packageDocs : null;
+	return fs$1.existsSync(packageDocs) ? packageDocs : null;
+}
+
+//#endregion
+//#region src/agents/runner-capabilities.ts
+const CAPABILITY_HINTS = {
+	"cli-native": "Use your native CLI capabilities when needed. Do not assume external MCP-style tools exist unless they are explicitly provided.",
+	"local-tools": "Use only the tools explicitly provided in this session. Do not assume any other external MCP-style tools exist.",
+	disabled: "Tools are disabled in this session. Do not call tools."
+};
+function appendRunnerCapabilityPrompt(prompt, mode) {
+	return [prompt?.trim(), CAPABILITY_HINTS[mode]].filter(Boolean).join("\n");
 }
 
 //#endregion
@@ -2508,6 +2520,18 @@ function resolveRunWorkspaceDir(params) {
 
 //#endregion
 //#region src/agents/anthropic-direct-runner.ts
+/**
+* Anthropic Direct API Runner
+*
+* Makes calls directly to api.anthropic.com without needing the claude CLI
+* binary to be installed or logged in. Works with any valid token:
+*
+*   sk-ant-api01-...  (Console API key)
+*   sk-ant-oat01-...  (Claude Code OAuth access token)
+*
+* This runner is automatically used when an `anthropic:default` token credential
+* is present in the auth store and the claude CLI is unavailable or not logged in.
+*/
 const log$9 = createSubsystemLogger("agent/anthropic-direct");
 const MODEL_MAP$1 = {
 	opus: "claude-opus-4-5",
@@ -2583,7 +2607,7 @@ async function runAnthropicDirectAgent(params) {
 		cwd: process.cwd(),
 		moduleUrl: import.meta.url
 	});
-	const extraSystemPrompt = [params.extraSystemPrompt?.trim(), "Tools are disabled in this session. Do not call tools."].filter(Boolean).join("\n");
+	const extraSystemPrompt = appendRunnerCapabilityPrompt(params.extraSystemPrompt, "disabled");
 	const systemPrompt = buildSystemPrompt({
 		workspaceDir,
 		config: params.config,
@@ -2623,7 +2647,7 @@ async function runAnthropicDirectAgent(params) {
 				"x-api-key": params.token,
 				"anthropic-version": "2023-06-01",
 				"content-type": "application/json",
-				"user-agent": `anima/3.0.5 (direct-runner; ${os.platform()})`
+				"user-agent": `anima/5.1.3 (direct-runner; ${os.platform()})`
 			},
 			body: JSON.stringify(requestBody),
 			signal: controller.signal
@@ -2656,7 +2680,6 @@ async function runAnthropicDirectAgent(params) {
 			stopReason: data.stop_reason,
 			contentTypes: (data.content ?? []).map((b) => b.type)
 		});
-		await params.onAssistantMessageStart?.();
 		if (outputText && params.onPartialReply) await params.onPartialReply({ text: outputText });
 		history.messages.push({
 			role: "assistant",
@@ -2914,13 +2937,20 @@ function setCodexExecModeArgs(args, mode) {
 	else nextArgs.push("--sandbox", mode);
 	return nextArgs;
 }
-function resolveManagedCodexExecMode(cfg) {
+function normalizeExecSecurity$2(execSecurity) {
+	const normalized = execSecurity?.trim().toLowerCase();
+	if (!normalized) return;
+	if (normalized === "deny") return "deny";
+	return "full";
+}
+function resolveManagedCodexExecMode(cfg, options) {
+	if (normalizeExecSecurity$2(options?.execSecurity) === "deny") return "read-only";
 	const workspaceAccess = cfg?.agents?.defaults?.sandbox?.workspaceAccess;
 	if (workspaceAccess === "ro") return "read-only";
 	if (workspaceAccess === "rw") return "workspace-write";
 	return CODEX_BYPASS_FLAG;
 }
-function resolveCliBackendConfig(provider, cfg) {
+function resolveCliBackendConfig(provider, cfg, options) {
 	const normalized = normalizeBackendKey(provider);
 	const configured = cfg?.agents?.defaults?.cliBackends ?? {};
 	if (CLAUDE_BACKEND_ALIAS_SET.has(normalized)) {
@@ -2948,7 +2978,7 @@ function resolveCliBackendConfig(provider, cfg) {
 		};
 		if (!resolveCodexExecModeArg(override?.args) || (override?.args ? argsEqual(override.args, LEGACY_CODEX_ARGS) : false)) merged = {
 			...merged,
-			args: setCodexExecModeArgs(merged.args, resolveManagedCodexExecMode(cfg))
+			args: setCodexExecModeArgs(merged.args, resolveManagedCodexExecMode(cfg, options))
 		};
 		const command = merged.command?.trim();
 		if (!command) return null;
@@ -3127,14 +3157,14 @@ async function runCliAgent(params) {
 	const redactedWorkspace = redactRunIdentifier(resolvedWorkspace);
 	if (workspaceResolution.usedFallback) log$8.warn(`[workspace-fallback] caller=runCliAgent reason=${workspaceResolution.fallbackReason} run=${params.runId} session=${redactedSessionId} sessionKey=${redactedSessionKey} agent=${workspaceResolution.agentId} workspace=${redactedWorkspace}`);
 	const workspaceDir = resolvedWorkspace;
-	const backendResolved = resolveCliBackendConfig(params.provider, params.config);
+	const backendResolved = resolveCliBackendConfig(params.provider, params.config, { execSecurity: params.sessionExecSecurity });
 	if (!backendResolved) throw new Error(`Unknown CLI backend: ${params.provider}`);
 	const backend = backendResolved.config;
 	const effectiveCodexExecMode = resolveCodexExecModeArg(backend.args);
 	const modelId = (params.model ?? "default").trim() || "default";
 	const normalizedModel = normalizeCliModel(modelId, backend);
 	const modelDisplay = `${params.provider}/${modelId}`;
-	const extraSystemPrompt = [params.extraSystemPrompt?.trim(), "Tools are disabled in this session. Do not call tools."].filter(Boolean).join("\n");
+	const extraSystemPrompt = appendRunnerCapabilityPrompt(params.extraSystemPrompt, "cli-native");
 	const sessionLabel = params.sessionKey ?? params.sessionId;
 	const { contextFiles } = await resolveBootstrapContextForRun({
 		workspaceDir,
@@ -3184,13 +3214,21 @@ async function runCliAgent(params) {
 			const parsed = JSON.parse(lastLine);
 			const previousMode = parsed.metadata?.effectiveCodexExecMode ?? parsed.metadata?.effectiveSandbox;
 			const currentMode = effectiveCodexExecMode;
-			if (previousMode && previousMode !== currentMode) {
+			if (!previousMode) {
+				log$8.info("Codex execution mode is unknown for the saved session; forcing session restart.");
+				useResume = false;
+				isNew = true;
+			} else if (previousMode !== currentMode) {
 				log$8.info(`Codex execution mode changed (${previousMode} -> ${currentMode}); forcing session restart.`);
 				useResume = false;
 				isNew = true;
 			}
 		}
-	} catch {}
+	} catch {
+		log$8.info("Codex session transcript is unavailable; forcing session restart.");
+		useResume = false;
+		isNew = true;
+	}
 	const sessionIdSent = cliSessionIdToSend ? useResume || Boolean(backend.sessionArg) || Boolean(backend.sessionArgs?.length) ? cliSessionIdToSend : void 0 : void 0;
 	const systemPromptArg = resolveSystemPromptUsage({
 		backend,
@@ -3306,8 +3344,9 @@ async function runCliAgent(params) {
 				if (stderr) log$8.debug(`cli stderr:\n${stderr}`);
 			}
 			if (result.code !== 0) {
-				const err = stderr || stdout || "CLI failed.";
-				const reason = classifyFailoverReason(err) ?? "unknown";
+				const timedOut = result.killed && result.signal === "SIGKILL";
+				const err = timedOut ? `Request timed out after ${params.timeoutMs}ms` : stderr || stdout || "CLI failed.";
+				const reason = timedOut ? "timeout" : classifyFailoverReason(err) ?? "unknown";
 				const status = resolveFailoverStatus(reason);
 				throw new FailoverError(err, {
 					reason,
@@ -4175,7 +4214,7 @@ async function getMemorySearchManager(params) {
 			if (cached) return { manager: cached };
 		}
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-CwbYv6nJ.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-CpNYgSrx.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -4187,7 +4226,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-A3pC-CW-.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-b_aZwo00.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -4200,7 +4239,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-A3pC-CW-.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-b_aZwo00.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -5281,7 +5320,7 @@ function resolveDefaultIdentityPath() {
 	return path.join(resolveStateDir(), "identity", "device.json");
 }
 function ensureDir$2(filePath) {
-	fsSync.mkdirSync(path.dirname(filePath), { recursive: true });
+	fs$1.mkdirSync(path.dirname(filePath), { recursive: true });
 }
 const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
 function base64UrlEncode(buf) {
@@ -5317,8 +5356,8 @@ function generateIdentity() {
 }
 function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 	try {
-		if (fsSync.existsSync(filePath)) {
-			const raw = fsSync.readFileSync(filePath, "utf8");
+		if (fs$1.existsSync(filePath)) {
+			const raw = fs$1.readFileSync(filePath, "utf8");
 			const parsed = JSON.parse(raw);
 			if (parsed?.version === 1 && typeof parsed.deviceId === "string" && typeof parsed.publicKeyPem === "string" && typeof parsed.privateKeyPem === "string") {
 				const derivedId = fingerprintPublicKey(parsed.publicKeyPem);
@@ -5327,9 +5366,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 						...parsed,
 						deviceId: derivedId
 					};
-					fsSync.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
+					fs$1.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
 					try {
-						fsSync.chmodSync(filePath, 384);
+						fs$1.chmodSync(filePath, 384);
 					} catch {}
 					return {
 						deviceId: derivedId,
@@ -5354,9 +5393,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 		privateKeyPem: identity.privateKeyPem,
 		createdAtMs: Date.now()
 	};
-	fsSync.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
+	fs$1.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
 	try {
-		fsSync.chmodSync(filePath, 384);
+		fs$1.chmodSync(filePath, 384);
 	} catch {}
 	return identity;
 }
@@ -5506,8 +5545,8 @@ function resolveDeviceAuthPath(env = process.env) {
 }
 function readStore(filePath) {
 	try {
-		if (!fsSync.existsSync(filePath)) return null;
-		const raw = fsSync.readFileSync(filePath, "utf8");
+		if (!fs$1.existsSync(filePath)) return null;
+		const raw = fs$1.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1 || typeof parsed.deviceId !== "string") return null;
 		if (!parsed.tokens || typeof parsed.tokens !== "object") return null;
@@ -5517,10 +5556,10 @@ function readStore(filePath) {
 	}
 }
 function writeStore(filePath, store) {
-	fsSync.mkdirSync(path.dirname(filePath), { recursive: true });
-	fsSync.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
+	fs$1.mkdirSync(path.dirname(filePath), { recursive: true });
+	fs$1.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
 	try {
-		fsSync.chmodSync(filePath, 384);
+		fs$1.chmodSync(filePath, 384);
 	} catch {}
 }
 function loadDeviceAuthToken(params) {
@@ -5666,6 +5705,7 @@ const PollParamsSchema = Type.Object({
 const AgentParamsSchema = Type.Object({
 	message: NonEmptyString,
 	agentId: Type.Optional(NonEmptyString),
+	model: Type.Optional(Type.String()),
 	to: Type.Optional(Type.String()),
 	replyTo: Type.Optional(Type.String()),
 	sessionId: Type.Optional(Type.String()),
@@ -7978,7 +8018,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-D2hQZ9X0.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-d-CaN0uL.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -8212,7 +8252,7 @@ function normalizeSessionKey(value) {
 }
 function readSessionStore(storePath) {
 	try {
-		const raw = fsSync.readFileSync(storePath, "utf-8");
+		const raw = fs$1.readFileSync(storePath, "utf-8");
 		const parsed = JSON5.parse(raw);
 		if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return parsed;
 	} catch {}
@@ -11574,7 +11614,7 @@ async function loadModelCatalog(params) {
 		});
 		try {
 			await ensureAnimaModelsJson(params?.config ?? loadConfig());
-			await (await import("./pi-auth-json-smxh_Xud.js")).ensurePiAuthJsonFromAuthProfiles(resolveAnimaAgentDir());
+			await (await import("./pi-auth-json-BmdBnmlZ.js")).ensurePiAuthJsonFromAuthProfiles(resolveAnimaAgentDir());
 			const piSdk = await importPiSdk();
 			const agentDir = resolveAnimaAgentDir();
 			const { join } = await import("node:path");
@@ -13334,8 +13374,8 @@ const resolveProfileOverride = (params) => {
 //#region src/auto-reply/reply/directive-handling.model-picker.ts
 const PROVIDER_RANK = new Map([
 	"anthropic",
-	"openai",
 	"openai-codex",
+	"openai",
 	"minimax",
 	"synthetic",
 	"google",
@@ -13671,7 +13711,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./auth-profiles-eZzmaeR3.js").then((n) => n.t);
+		const { ensureAuthProfileStore } = await import("./auth-profiles-DtWUl1-k.js").then((n) => n.t);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -14733,25 +14773,6 @@ function ensureSkillsWatcher(params) {
 	watchers.set(workspaceDir, state);
 }
 
-//#endregion
-//#region src/infra/pairing-files.ts
-function createAsyncLock() {
-	let lock = Promise.resolve();
-	return async function withLock(fn) {
-		const prev = lock;
-		let release;
-		lock = new Promise((resolve) => {
-			release = resolve;
-		});
-		await prev;
-		try {
-			return await fn();
-		} finally {
-			release?.();
-		}
-	};
-}
-
 //#endregion
 //#region src/infra/node-pairing.ts
 const PENDING_TTL_MS = 300 * 1e3;
@@ -14815,8 +14836,8 @@ function listSkillCommandsForAgents(params) {
 	const visitedDirs = /* @__PURE__ */ new Set();
 	for (const agentId of agentIds) {
 		const workspaceDir = resolveAgentWorkspaceDir(params.cfg, agentId);
-		if (!fsSync.existsSync(workspaceDir)) continue;
-		const canonicalDir = fsSync.realpathSync(workspaceDir);
+		if (!fs$1.existsSync(workspaceDir)) continue;
+		const canonicalDir = fs$1.realpathSync(workspaceDir);
 		if (visitedDirs.has(canonicalDir)) continue;
 		visitedDirs.add(canonicalDir);
 		const commands = buildWorkspaceSkillCommandSpecs(workspaceDir, {
@@ -15087,7 +15108,7 @@ function resolveAllowFromPath(channel, env = process.env) {
 }
 async function readJsonFile(filePath, fallback) {
 	try {
-		const parsed = safeParseJson(await fsSync.promises.readFile(filePath, "utf-8"));
+		const parsed = safeParseJson(await fs$1.promises.readFile(filePath, "utf-8"));
 		if (parsed == null) return {
 			value: fallback,
 			exists: true
@@ -15109,18 +15130,18 @@ async function readJsonFile(filePath, fallback) {
 }
 async function writeJsonFile(filePath, value) {
 	const dir = path.dirname(filePath);
-	await fsSync.promises.mkdir(dir, {
+	await fs$1.promises.mkdir(dir, {
 		recursive: true,
 		mode: 448
 	});
 	const tmp = path.join(dir, `${path.basename(filePath)}.${crypto.randomUUID()}.tmp`);
-	await fsSync.promises.writeFile(tmp, `${JSON.stringify(value, null, 2)}\n`, { encoding: "utf-8" });
-	await fsSync.promises.chmod(tmp, 384);
-	await fsSync.promises.rename(tmp, filePath);
+	await fs$1.promises.writeFile(tmp, `${JSON.stringify(value, null, 2)}\n`, { encoding: "utf-8" });
+	await fs$1.promises.chmod(tmp, 384);
+	await fs$1.promises.rename(tmp, filePath);
 }
 async function ensureJsonFile(filePath, fallback) {
 	try {
-		await fsSync.promises.access(filePath);
+		await fs$1.promises.access(filePath);
 	} catch {
 		await writeJsonFile(filePath, fallback);
 	}
@@ -16163,8 +16184,8 @@ function expandHome$1(value) {
 }
 function isExecutableFile(filePath) {
 	try {
-		if (!fsSync.statSync(filePath).isFile()) return false;
-		if (process.platform !== "win32") fsSync.accessSync(filePath, fsSync.constants.X_OK);
+		if (!fs$1.statSync(filePath).isFile()) return false;
+		if (process.platform !== "win32") fs$1.accessSync(filePath, fs$1.constants.X_OK);
 		return true;
 	} catch {
 		return false;
@@ -16202,7 +16223,7 @@ function normalizeMatchTarget(value) {
 }
 function tryRealpath(value) {
 	try {
-		return fsSync.realpathSync(value);
+		return fs$1.realpathSync(value);
 	} catch {
 		return null;
 	}
@@ -16840,7 +16861,7 @@ function isPathLikeToken(value) {
 }
 function defaultFileExists(filePath) {
 	try {
-		return fsSync.existsSync(filePath);
+		return fs$1.existsSync(filePath);
 	} catch {
 		return false;
 	}
@@ -17084,7 +17105,7 @@ function mergeLegacyAgent(current, legacy) {
 }
 function ensureDir$1(filePath) {
 	const dir = path.dirname(filePath);
-	fsSync.mkdirSync(dir, { recursive: true });
+	fs$1.mkdirSync(dir, { recursive: true });
 }
 function coerceAllowlistEntries(allowlist) {
 	if (!Array.isArray(allowlist) || allowlist.length === 0) return Array.isArray(allowlist) ? allowlist : void 0;
@@ -17154,11 +17175,11 @@ function generateToken() {
 function loadExecApprovals() {
 	const filePath = resolveExecApprovalsPath();
 	try {
-		if (!fsSync.existsSync(filePath)) return normalizeExecApprovals({
+		if (!fs$1.existsSync(filePath)) return normalizeExecApprovals({
 			version: 1,
 			agents: {}
 		});
-		const raw = fsSync.readFileSync(filePath, "utf8");
+		const raw = fs$1.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1) return normalizeExecApprovals({
 			version: 1,
@@ -17175,9 +17196,9 @@ function loadExecApprovals() {
 function saveExecApprovals(file) {
 	const filePath = resolveExecApprovalsPath();
 	ensureDir$1(filePath);
-	fsSync.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
+	fs$1.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
 	try {
-		fsSync.chmodSync(filePath, 384);
+		fs$1.chmodSync(filePath, 384);
 	} catch {}
 }
 function ensureExecApprovals() {
@@ -19771,10 +19792,10 @@ const resolveGitHead = (startDir) => {
 	for (let i = 0; i < 12; i += 1) {
 		const gitPath = path.join(current, ".git");
 		try {
-			const stat = fsSync.statSync(gitPath);
+			const stat = fs$1.statSync(gitPath);
 			if (stat.isDirectory()) return path.join(gitPath, "HEAD");
 			if (stat.isFile()) {
-				const match = fsSync.readFileSync(gitPath, "utf-8").match(/gitdir:\s*(.+)/i);
+				const match = fs$1.readFileSync(gitPath, "utf-8").match(/gitdir:\s*(.+)/i);
 				if (match?.[1]) {
 					const resolved = path.resolve(current, match[1].trim());
 					return path.join(resolved, "HEAD");
@@ -19832,7 +19853,7 @@ const resolveCommitHash = (options = {}) => {
 			cachedCommit = null;
 			return cachedCommit;
 		}
-		const head = fsSync.readFileSync(headPath, "utf-8").trim();
+		const head = fs$1.readFileSync(headPath, "utf-8").trim();
 		if (!head) {
 			cachedCommit = null;
 			return cachedCommit;
@@ -19840,7 +19861,7 @@ const resolveCommitHash = (options = {}) => {
 		if (head.startsWith("ref:")) {
 			const ref = head.replace(/^ref:\s*/i, "").trim();
 			const refPath = path.resolve(path.dirname(headPath), ref);
-			cachedCommit = formatCommit(fsSync.readFileSync(refPath, "utf-8").trim());
+			cachedCommit = formatCommit(fs$1.readFileSync(refPath, "utf-8").trim());
 			return cachedCommit;
 		}
 		cachedCommit = formatCommit(head);
@@ -19945,9 +19966,9 @@ const readUsageFromSessionLog = (sessionId, sessionEntry, agentId, sessionKey, s
 	} catch {
 		return;
 	}
-	if (!fsSync.existsSync(logPath)) return;
+	if (!fs$1.existsSync(logPath)) return;
 	try {
-		const lines = fsSync.readFileSync(logPath, "utf-8").split(/\n+/);
+		const lines = fs$1.readFileSync(logPath, "utf-8").split(/\n+/);
 		let input = 0;
 		let output = 0;
 		let promptTokens = 0;
@@ -21476,7 +21497,7 @@ function defaultStore() {
 function loadProviderStore() {
 	const storePath = resolveStorePath();
 	try {
-		const raw = fsSync.readFileSync(storePath, "utf-8");
+		const raw = fs$1.readFileSync(storePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return {
 			providers: Array.isArray(parsed.providers) ? parsed.providers : [],
@@ -21522,8 +21543,8 @@ function resolveZaiApiKey() {
 	}
 	try {
 		const authPath = path.join(os.homedir(), ".pi", "agent", "auth.json");
-		if (!fsSync.existsSync(authPath)) return;
-		const data = JSON.parse(fsSync.readFileSync(authPath, "utf-8"));
+		if (!fs$1.existsSync(authPath)) return;
+		const data = JSON.parse(fs$1.readFileSync(authPath, "utf-8"));
 		return data["z-ai"]?.access || data.zai?.access;
 	} catch {
 		return;
@@ -23244,7 +23265,7 @@ const applyCostTotal = (totals, costTotal) => {
 	totals.totalCost += costTotal;
 };
 async function scanTranscriptFile(params) {
-	const fileStream = fsSync.createReadStream(params.filePath, { encoding: "utf-8" });
+	const fileStream = fs$1.createReadStream(params.filePath, { encoding: "utf-8" });
 	const rl = readline.createInterface({
 		input: fileStream,
 		crlfDelay: Infinity
@@ -23304,10 +23325,10 @@ async function loadCostUsageSummary(params) {
 	const dailyMap = /* @__PURE__ */ new Map();
 	const totals = emptyTotals();
 	const sessionsDir = resolveSessionTranscriptsDirForAgent(params?.agentId);
-	const entries = await fsSync.promises.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
+	const entries = await fs$1.promises.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
 	const files = (await Promise.all(entries.filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map(async (entry) => {
 		const filePath = path.join(sessionsDir, entry.name);
-		const stats = await fsSync.promises.stat(filePath).catch(() => null);
+		const stats = await fs$1.promises.stat(filePath).catch(() => null);
 		if (!stats) return null;
 		if (stats.mtimeMs < sinceTime) return null;
 		return filePath;
@@ -23340,7 +23361,7 @@ async function loadCostUsageSummary(params) {
 }
 async function loadSessionCostSummary(params) {
 	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : void 0);
-	if (!sessionFile || !fsSync.existsSync(sessionFile)) return null;
+	if (!sessionFile || !fs$1.existsSync(sessionFile)) return null;
 	const totals = emptyTotals();
 	let firstActivity;
 	let lastActivity;
@@ -26924,7 +26945,7 @@ async function writeUrlToFile(filePath, url) {
 	if (typeof contentLength === "number" && Number.isFinite(contentLength) && contentLength > MAX_CAMERA_URL_DOWNLOAD_BYTES) throw new Error(`writeUrlToFile: content-length ${contentLength} exceeds max ${MAX_CAMERA_URL_DOWNLOAD_BYTES}`);
 	const body = res.body;
 	if (!body) throw new Error(`failed to download ${url}: empty response body`);
-	const fileHandle = await fs$1.open(filePath, "w");
+	const fileHandle = await fs$2.open(filePath, "w");
 	let bytes = 0;
 	let thrown;
 	try {
@@ -26943,7 +26964,7 @@ async function writeUrlToFile(filePath, url) {
 		await fileHandle.close();
 	}
 	if (thrown) {
-		await fs$1.unlink(filePath).catch(() => {});
+		await fs$2.unlink(filePath).catch(() => {});
 		throw thrown;
 	}
 	return {
@@ -26953,7 +26974,7 @@ async function writeUrlToFile(filePath, url) {
 }
 async function writeBase64ToFile(filePath, base64) {
 	const buf = Buffer.from(base64, "base64");
-	await fs$1.writeFile(filePath, buf);
+	await fs$2.writeFile(filePath, buf);
 	return {
 		path: filePath,
 		bytes: buf.length
@@ -27882,6 +27903,263 @@ function createGatewayTool(opts) {
 	};
 }
 
+//#endregion
+//#region src/agents/model-auto.ts
+const DEFAULT_USAGE_THRESHOLD_PERCENT = 5;
+const USAGE_CACHE_TTL_MS = 6e4;
+const USAGE_TIMEOUT_MS = 1500;
+const usageSummaryCache = /* @__PURE__ */ new Map();
+function resolveRawAutoConfig(cfg) {
+	const modelConfig = cfg?.agents?.defaults?.model;
+	if (typeof modelConfig !== "object" || !modelConfig) return;
+	return modelConfig.auto;
+}
+function dedupeProviders(values) {
+	const seen = /* @__PURE__ */ new Set();
+	const result = [];
+	for (const input of values) {
+		if (!input) continue;
+		const normalized = normalizeProviderId(input);
+		if (!normalized || seen.has(normalized)) continue;
+		seen.add(normalized);
+		result.push(normalized);
+	}
+	return result;
+}
+function resolveModelAutoConfig(cfg) {
+	const raw = resolveRawAutoConfig(cfg);
+	if (!raw?.enabled) return null;
+	const byProvider = {};
+	for (const [providerRaw, entry] of Object.entries(raw.byProvider ?? {})) {
+		const provider = normalizeProviderId(providerRaw);
+		if (!provider) continue;
+		const models = Array.isArray(entry?.models) ? entry.models.map((value) => String(value ?? "").trim()).filter(Boolean) : [];
+		if (models.length > 0) byProvider[provider] = { models };
+	}
+	const usageThresholdPercent = typeof raw.usageThresholdPercent === "number" && Number.isFinite(raw.usageThresholdPercent) ? Math.max(0, Math.min(100, raw.usageThresholdPercent)) : DEFAULT_USAGE_THRESHOLD_PERCENT;
+	return {
+		enabled: true,
+		providerOrder: dedupeProviders(raw.providerOrder ?? []),
+		byProvider,
+		byWorkingMode: {
+			read: Array.isArray(raw.byWorkingMode?.read) ? raw.byWorkingMode.read.map((value) => String(value ?? "").trim()).filter(Boolean) : [],
+			write: Array.isArray(raw.byWorkingMode?.write) ? raw.byWorkingMode.write.map((value) => String(value ?? "").trim()).filter(Boolean) : []
+		},
+		usageCheck: raw.usageCheck === "prefer-available" ? "prefer-available" : "off",
+		usageThresholdPercent
+	};
+}
+function buildCandidatesFromRawModels(params) {
+	const defaultProvider = params.defaultProvider ?? DEFAULT_PROVIDER;
+	const index = buildModelAliasIndex({
+		cfg: params.cfg ?? {},
+		defaultProvider
+	});
+	const seen = /* @__PURE__ */ new Set();
+	const out = [];
+	for (const raw of params.rawModels) {
+		const resolved = resolveModelRefFromString({
+			raw,
+			defaultProvider,
+			aliasIndex: index
+		});
+		if (!resolved) continue;
+		const key = modelKey(resolved.ref.provider, resolved.ref.model);
+		if (seen.has(key)) continue;
+		seen.add(key);
+		out.push(resolved.ref);
+	}
+	return out;
+}
+async function loadUsageSummary(agentDir, providers) {
+	const key = `${agentDir ?? "main"}::${providers.slice().toSorted().join(",")}`;
+	const now = Date.now();
+	const cached = usageSummaryCache.get(key);
+	if (cached && cached.expiresAt > now) return cached.summary;
+	const summary = await loadProviderUsageSummary({
+		agentDir,
+		providers,
+		timeoutMs: USAGE_TIMEOUT_MS
+	});
+	usageSummaryCache.set(key, {
+		expiresAt: now + USAGE_CACHE_TTL_MS,
+		summary
+	});
+	return summary;
+}
+function remainingPercent(snapshot) {
+	if (snapshot.error || snapshot.windows.length === 0) return;
+	const values = snapshot.windows.map((window) => 100 - window.usedPercent).filter((value) => Number.isFinite(value));
+	if (values.length === 0) return;
+	return Math.max(0, Math.min(...values));
+}
+async function resolveAvailability(params) {
+	const availability = /* @__PURE__ */ new Map();
+	const usageProviders = Array.from(new Set(params.providerOrder.map((provider) => resolveUsageProviderId(provider)).filter((provider) => Boolean(provider))));
+	let summary;
+	if (usageProviders.length > 0) try {
+		summary = await loadUsageSummary(params.agentDir, usageProviders);
+	} catch {
+		summary = void 0;
+	}
+	const snapshots = /* @__PURE__ */ new Map();
+	for (const entry of summary?.providers ?? []) snapshots.set(entry.provider, entry);
+	for (const provider of params.providerOrder) {
+		const usageProvider = resolveUsageProviderId(provider);
+		if (!usageProvider) {
+			availability.set(provider, {
+				provider,
+				state: "unknown"
+			});
+			continue;
+		}
+		const snapshot = snapshots.get(usageProvider);
+		const percent = snapshot ? remainingPercent(snapshot) : void 0;
+		availability.set(provider, {
+			provider,
+			usageProvider,
+			remainingPercent: percent,
+			state: percent === void 0 ? "unknown" : percent <= params.autoConfig.usageThresholdPercent ? "exhausted" : "available"
+		});
+	}
+	return availability;
+}
+function reorderByAvailability(params) {
+	const lockedPrimary = params.preservePrimary ? params.candidates[0] : void 0;
+	const rest = params.preservePrimary ? params.candidates.slice(1) : params.candidates;
+	const grouped = /* @__PURE__ */ new Map();
+	for (const candidate of rest) {
+		const normalized = normalizeProviderId(candidate.provider);
+		const group = grouped.get(normalized) ?? [];
+		group.push({
+			provider: normalized,
+			model: candidate.model
+		});
+		grouped.set(normalized, group);
+	}
+	const order = [];
+	for (const [provider, availability] of params.availability) if (availability.state === "available") order.push(provider);
+	for (const [provider, availability] of params.availability) if (availability.state === "unknown") order.push(provider);
+	for (const [provider, availability] of params.availability) if (availability.state === "exhausted") order.push(provider);
+	for (const provider of grouped.keys()) if (!order.includes(provider)) order.push(provider);
+	const ordered = [];
+	for (const provider of order) {
+		const group = grouped.get(provider) ?? [];
+		ordered.push(...group);
+	}
+	return lockedPrimary ? [lockedPrimary, ...ordered] : ordered;
+}
+async function applyAutoModelRouting(params) {
+	const autoConfig = resolveModelAutoConfig(params.cfg);
+	if (!autoConfig) return {
+		candidates: [...params.candidates],
+		autoConfigured: false,
+		preserveProviderOrder: false,
+		availabilityByProvider: /* @__PURE__ */ new Map()
+	};
+	const providerOrder = dedupeProviders([...autoConfig.providerOrder, ...params.candidates.map((candidate) => candidate.provider)]);
+	let candidates = [...params.candidates];
+	const modePreferred = params.workingMode ? buildCandidatesFromRawModels({
+		rawModels: autoConfig.byWorkingMode[params.workingMode] ?? [],
+		cfg: params.cfg,
+		defaultProvider: params.candidates[0]?.provider ?? DEFAULT_PROVIDER
+	}) : [];
+	if (modePreferred.length > 0) {
+		const lockedPrimary = params.preservePrimary && candidates.length > 0 ? [candidates[0]] : [];
+		const remainingCandidates = params.preservePrimary ? candidates.slice(1) : candidates;
+		const seen = /* @__PURE__ */ new Set();
+		candidates = [
+			...lockedPrimary,
+			...modePreferred,
+			...remainingCandidates
+		].filter((candidate) => {
+			const key = modelKey(candidate.provider, candidate.model);
+			if (seen.has(key)) return false;
+			seen.add(key);
+			return true;
+		});
+	}
+	const availability = await resolveAvailability({
+		providerOrder,
+		agentDir: params.agentDir,
+		autoConfig
+	});
+	if (autoConfig.usageCheck === "prefer-available") candidates = reorderByAvailability({
+		candidates,
+		availability,
+		preservePrimary: params.preservePrimary
+	});
+	return {
+		candidates,
+		autoConfigured: true,
+		preserveProviderOrder: true,
+		config: autoConfig,
+		availabilityByProvider: availability
+	};
+}
+
+//#endregion
+//#region src/agents/model-preference.ts
+const HIGH_THINK_LEVELS = new Set(["high", "xhigh"]);
+const SESSION_COST_THRESHOLD_USD = .5;
+const SESSION_TOKEN_THRESHOLD = 3e5;
+const SESSION_TURN_THRESHOLD = 12;
+const SESSION_COMPACTION_THRESHOLD = 2;
+function toPositiveFiniteNumber(value) {
+	if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) return;
+	return value;
+}
+function shouldPreferCheap(entry) {
+	if (!entry) return false;
+	const sessionCostUsd = toPositiveFiniteNumber(entry.sessionEstimatedCostUsdTotal) ?? 0;
+	const sessionInputTokens = toPositiveFiniteNumber(entry.sessionInputTokensTotal) ?? 0;
+	const sessionOutputTokens = toPositiveFiniteNumber(entry.sessionOutputTokensTotal) ?? 0;
+	const sessionTurnCount = toPositiveFiniteNumber(entry.sessionTurnCount) ?? 0;
+	const compactionCount = toPositiveFiniteNumber(entry.compactionCount) ?? 0;
+	return sessionCostUsd >= SESSION_COST_THRESHOLD_USD || sessionInputTokens + sessionOutputTokens >= SESSION_TOKEN_THRESHOLD || sessionTurnCount >= SESSION_TURN_THRESHOLD || compactionCount >= SESSION_COMPACTION_THRESHOLD;
+}
+function resolveCandidateCostScore(candidate, cfg) {
+	const cost = resolveModelCostConfig({
+		provider: candidate.provider,
+		model: candidate.model,
+		config: cfg
+	});
+	if (!cost) return;
+	const values = [
+		cost.input,
+		cost.output,
+		cost.cacheRead,
+		cost.cacheWrite
+	].filter((value) => typeof value === "number" && Number.isFinite(value));
+	if (values.length === 0) return;
+	return values.reduce((sum, value) => sum + value, 0);
+}
+function resolveUsageAwareModelPreference(params) {
+	if (params.sessionEntry?.providerOverride || params.sessionEntry?.modelOverride) return "preserve";
+	if (params.thinkLevel && HIGH_THINK_LEVELS.has(params.thinkLevel)) return "prefer-strong";
+	if (shouldPreferCheap(params.sessionEntry)) return "prefer-cheap";
+	return "preserve";
+}
+function orderCandidatesByPreference(params) {
+	const preferenceMode = params.preferenceMode ?? "preserve";
+	if (preferenceMode === "preserve" || params.candidates.length <= 1) return [...params.candidates];
+	const scoredCandidates = params.candidates.map((candidate) => ({
+		candidate,
+		score: resolveCandidateCostScore(candidate, params.cfg)
+	}));
+	const sortable = scoredCandidates.filter((entry) => entry.score !== void 0);
+	if (sortable.length < 2) return [...params.candidates];
+	sortable.sort((left, right) => preferenceMode === "prefer-cheap" ? left.score - right.score : right.score - left.score);
+	const reordered = sortable.map((entry) => entry.candidate);
+	let reorderedIndex = 0;
+	return scoredCandidates.map((entry) => {
+		if (entry.score === void 0) return entry.candidate;
+		const next = reordered[reorderedIndex];
+		reorderedIndex += 1;
+		return next;
+	});
+}
+
 //#endregion
 //#region src/agents/model-fallback.ts
 /**
@@ -27983,12 +28261,32 @@ function resolveFallbackCandidates(params) {
 	}, false);
 	return candidates;
 }
+function resolveWorkingModeFromSessionEntry(entry) {
+	const execSecurity = entry?.execSecurity?.trim().toLowerCase();
+	if (!execSecurity) return;
+	return execSecurity === "deny" ? "read" : "write";
+}
 async function runWithModelFallback(params) {
-	const candidates = resolveFallbackCandidates({
+	const preservePrimary = Boolean(params.sessionEntry?.providerOverride || params.sessionEntry?.modelOverride);
+	const resolvedWorkingMode = params.workingMode ?? resolveWorkingModeFromSessionEntry(params.sessionEntry);
+	const candidates = orderCandidatesByPreference({
+		candidates: (await applyAutoModelRouting({
+			candidates: resolveFallbackCandidates({
+				cfg: params.cfg,
+				provider: params.provider,
+				model: params.model,
+				fallbacksOverride: params.fallbacksOverride
+			}),
+			cfg: params.cfg,
+			agentDir: params.agentDir,
+			preservePrimary,
+			workingMode: resolvedWorkingMode
+		})).candidates,
 		cfg: params.cfg,
-		provider: params.provider,
-		model: params.model,
-		fallbacksOverride: params.fallbacksOverride
+		preferenceMode: resolveUsageAwareModelPreference({
+			thinkLevel: params.thinkLevel,
+			sessionEntry: params.sessionEntry
+		})
 	});
 	const authStore = params.cfg ? ensureAuthProfileStore(params.agentDir, { allowKeychainPrompt: false }) : null;
 	const attempts = [];
@@ -29089,6 +29387,24 @@ function pickAmbiguousMatch(entries, mode) {
 	const bestRank = Math.max(...ranked.map((item) => item.rank));
 	return ranked.find((item) => item.rank === bestRank)?.entry ?? entries[0] ?? null;
 }
+function resolveConfiguredNoxsoftTarget(params) {
+	const trimmed = params.input.trim();
+	if (!trimmed) return null;
+	const configured = params.cfg.channels?.noxsoft?.channels;
+	if (!configured) return null;
+	const lower = trimmed.toLowerCase();
+	for (const [name, entry] of Object.entries(configured)) {
+		const channelId = entry?.id?.trim();
+		if (!channelId) continue;
+		if (lower === name.trim().toLowerCase() || trimmed === channelId) return {
+			to: channelId,
+			kind: "channel",
+			display: name,
+			source: "normalized"
+		};
+	}
+	return null;
+}
 async function resolveMessagingTarget(params) {
 	const raw = normalizeChannelTargetInput(params.input);
 	if (!raw) return {
@@ -29100,6 +29416,16 @@ async function resolveMessagingTarget(params) {
 	const hint = plugin?.messaging?.targetResolver?.hint;
 	const kind = detectTargetKind(params.channel, raw, params.preferredKind);
 	const normalized = normalizeTargetForProvider(params.channel, raw) ?? raw;
+	if (params.channel === "noxsoft") {
+		const configuredTarget = resolveConfiguredNoxsoftTarget({
+			cfg: params.cfg,
+			input: raw
+		});
+		if (configuredTarget) return {
+			ok: true,
+			target: configuredTarget
+		};
+	}
 	const looksLikeTargetId = () => {
 		const trimmed = raw.trim();
 		if (!trimmed) return false;
@@ -29314,6 +29640,10 @@ function applyCrossContextDecoration(params) {
 	};
 }
 
+//#endregion
+//#region src/auth/noxsoft-auth.ts
+const TOKEN_PATH = path.join(os.homedir(), ".noxsoft-agent-token");
+
 //#endregion
 //#region src/infra/outbound/targets.ts
 function resolveSessionDeliveryTarget(params) {
@@ -29395,13 +29725,62 @@ function resolveGatewayOptions(opts) {
 		mode: opts?.mode ?? GATEWAY_CLIENT_MODES.CLI
 	};
 }
+function resolveNoxsoftApiBase(cfg) {
+	return cfg.channels?.noxsoft?.apiUrl?.trim() || "https://auth.noxsoft.net";
+}
+function resolveNoxsoftToken(cfg) {
+	const inlineToken = cfg.channels?.noxsoft?.token?.trim();
+	if (inlineToken) return inlineToken;
+	const tokenFile = cfg.channels?.noxsoft?.tokenFile?.trim() || TOKEN_PATH;
+	try {
+		const token = fs$1.readFileSync(tokenFile, "utf-8").trim();
+		if (token) return token;
+	} catch {}
+	throw new Error(`NoxSoft token not configured. Expected token in ${tokenFile}`);
+}
+async function sendNoxsoftMessageDirect(params) {
+	if (params.dryRun) return {
+		channel: "noxsoft",
+		to: params.to,
+		via: "direct",
+		mediaUrl: params.mediaUrl,
+		mediaUrls: params.mediaUrls,
+		dryRun: true
+	};
+	const token = resolveNoxsoftToken(params.cfg);
+	const apiBase = resolveNoxsoftApiBase(params.cfg).replace(/\/+$/, "");
+	const response = await fetch(`${apiBase}/api/agents/chat/channels/${params.to}/messages`, {
+		method: "POST",
+		headers: {
+			Authorization: `Bearer ${token}`,
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			content: params.content,
+			mediaUrl: params.mediaUrl ?? void 0,
+			mediaUrls: params.mediaUrls?.length ? params.mediaUrls : void 0
+		}),
+		signal: params.abortSignal
+	});
+	if (!response.ok) {
+		const text = await response.text().catch(() => "");
+		throw new Error(`NoxSoft send failed (${response.status}): ${text}`);
+	}
+	const payload = await response.json().catch(() => ({}));
+	const messageId = payload.messageId ?? payload.id ?? `noxsoft:${Date.now()}`;
+	return {
+		channel: "noxsoft",
+		to: params.to,
+		via: "direct",
+		mediaUrl: params.mediaUrl,
+		mediaUrls: params.mediaUrls,
+		result: { messageId }
+	};
+}
 async function sendMessage(params) {
 	const cfg = params.cfg ?? loadConfig();
-	const channel = params.channel?.trim() ? normalizeChannelId$1(params.channel) : (await resolveMessageChannelSelection({ cfg })).channel;
+	const channel = params.channel?.trim() ? normalizeMessageChannel(params.channel) : (await resolveMessageChannelSelection({ cfg })).channel;
 	if (!channel) throw new Error(`Unknown channel: ${params.channel}`);
-	const plugin = getChannelPlugin(channel);
-	if (!plugin) throw new Error(`Unknown channel: ${channel}`);
-	const deliveryMode = plugin.outbound?.deliveryMode ?? "direct";
 	const normalizedPayloads = normalizeReplyPayloadsForDelivery([{
 		text: params.content,
 		mediaUrl: params.mediaUrl,
@@ -29410,6 +29789,18 @@ async function sendMessage(params) {
 	const mirrorText = normalizedPayloads.map((payload) => payload.text).filter(Boolean).join("\n");
 	const mirrorMediaUrls = normalizedPayloads.flatMap((payload) => payload.mediaUrls ?? (payload.mediaUrl ? [payload.mediaUrl] : []));
 	const primaryMediaUrl = mirrorMediaUrls[0] ?? params.mediaUrl ?? null;
+	if (channel === "noxsoft") return sendNoxsoftMessageDirect({
+		cfg,
+		to: params.to,
+		content: params.content,
+		mediaUrl: primaryMediaUrl,
+		mediaUrls: mirrorMediaUrls.length ? mirrorMediaUrls : void 0,
+		dryRun: params.dryRun,
+		abortSignal: params.abortSignal
+	});
+	const plugin = getChannelPlugin(channel);
+	if (!plugin) throw new Error(`Unknown channel: ${channel}`);
+	const deliveryMode = plugin.outbound?.deliveryMode ?? "direct";
 	if (params.dryRun) return {
 		channel,
 		to: params.to,
@@ -29488,7 +29879,7 @@ async function sendMessage(params) {
 }
 async function sendPoll(params) {
 	const cfg = params.cfg ?? loadConfig();
-	const channel = params.channel?.trim() ? normalizeChannelId$1(params.channel) : (await resolveMessageChannelSelection({ cfg })).channel;
+	const channel = params.channel?.trim() ? normalizeMessageChannel(params.channel) : (await resolveMessageChannelSelection({ cfg })).channel;
 	if (!channel) throw new Error(`Unknown channel: ${params.channel}`);
 	const pollInput = {
 		question: params.question,
@@ -31729,7 +32120,7 @@ function resolveSessionTranscriptCandidates(sessionId, storePath, sessionFile, a
 }
 function archiveFileOnDisk(filePath, reason) {
 	const archived = `${filePath}.${reason}.${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}`;
-	fsSync.renameSync(filePath, archived);
+	fs$1.renameSync(filePath, archived);
 	return archived;
 }
 /**
@@ -31739,7 +32130,7 @@ function archiveFileOnDisk(filePath, reason) {
 function archiveSessionTranscripts(opts) {
 	const archived = [];
 	for (const candidate of resolveSessionTranscriptCandidates(opts.sessionId, opts.storePath, opts.sessionFile, opts.agentId)) {
-		if (!fsSync.existsSync(candidate)) continue;
+		if (!fs$1.existsSync(candidate)) continue;
 		try {
 			archived.push(archiveFileOnDisk(candidate, opts.reason));
 		} catch {}
@@ -31786,7 +32177,7 @@ function listExistingAgentIdsFromDisk() {
 	const root = resolveStateDir();
 	const agentsDir = path.join(root, "agents");
 	try {
-		return fsSync.readdirSync(agentsDir, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => normalizeAgentId(entry.name)).filter(Boolean);
+		return fs$1.readdirSync(agentsDir, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => normalizeAgentId(entry.name)).filter(Boolean);
 	} catch {
 		return [];
 	}
@@ -36106,6 +36497,8 @@ async function runAgentTurnWithFallback(params) {
 			provider: params.followupRun.run.provider,
 			model: params.followupRun.run.model,
 			agentDir: params.followupRun.run.agentDir,
+			sessionEntry: params.getActiveSessionEntry(),
+			thinkLevel: params.followupRun.run.thinkLevel,
 			fallbacksOverride: resolveAgentModelFallbacksOverride(params.followupRun.run.config, resolveAgentIdFromSessionKey(params.followupRun.run.sessionKey)),
 			run: (provider, model) => {
 				params.opts?.onModelSelected?.({
@@ -36113,97 +36506,8 @@ async function runAgentTurnWithFallback(params) {
 					model,
 					thinkLevel: params.followupRun.run.thinkLevel
 				});
-				if (isCliProvider(provider, params.followupRun.run.config)) {
-					const startedAt = Date.now();
-					emitAgentEvent$1({
-						runId,
-						stream: "lifecycle",
-						data: {
-							phase: "start",
-							startedAt
-						}
-					});
-					const cliSessionId = getCliSessionId(params.getActiveSessionEntry(), provider);
-					return (async () => {
-						let lifecycleTerminalEmitted = false;
-						let sawCliStream = false;
-						let lastCliStreamText = "";
-						try {
-							const result = await runCliAgent({
-								sessionId: params.followupRun.run.sessionId,
-								sessionKey: params.sessionKey,
-								agentId: params.followupRun.run.agentId,
-								sessionFile: params.followupRun.run.sessionFile,
-								workspaceDir: params.followupRun.run.workspaceDir,
-								config: params.followupRun.run.config,
-								prompt: params.commandBody,
-								provider,
-								model,
-								thinkLevel: params.followupRun.run.thinkLevel,
-								timeoutMs: params.followupRun.run.timeoutMs,
-								runId,
-								extraSystemPrompt: params.followupRun.run.extraSystemPrompt,
-								ownerNumbers: params.followupRun.run.ownerNumbers,
-								cliSessionId,
-								images: params.opts?.images,
-								onTextStream: (text) => {
-									const nextText = text.trim();
-									if (!nextText) return;
-									sawCliStream = true;
-									lastCliStreamText = nextText;
-									emitAgentEvent$1({
-										runId,
-										stream: "assistant",
-										data: { text: nextText }
-									});
-								}
-							});
-							const cliText = result.payloads?.[0]?.text?.trim();
-							if (cliText && (!sawCliStream || cliText !== lastCliStreamText)) emitAgentEvent$1({
-								runId,
-								stream: "assistant",
-								data: { text: cliText }
-							});
-							emitAgentEvent$1({
-								runId,
-								stream: "lifecycle",
-								data: {
-									phase: "end",
-									startedAt,
-									endedAt: Date.now()
-								}
-							});
-							lifecycleTerminalEmitted = true;
-							return result;
-						} catch (err) {
-							emitAgentEvent$1({
-								runId,
-								stream: "lifecycle",
-								data: {
-									phase: "error",
-									startedAt,
-									endedAt: Date.now(),
-									error: String(err)
-								}
-							});
-							lifecycleTerminalEmitted = true;
-							throw err;
-						} finally {
-							if (!lifecycleTerminalEmitted) emitAgentEvent$1({
-								runId,
-								stream: "lifecycle",
-								data: {
-									phase: "error",
-									startedAt,
-									endedAt: Date.now(),
-									error: "CLI run completed without lifecycle terminal event"
-								}
-							});
-						}
-					})();
-				}
 				const authProfileId = provider === params.followupRun.run.provider ? params.followupRun.run.authProfileId : void 0;
-				return runEmbeddedPiAgent({
+				return runNoxSoftEmbeddedAgent({
 					sessionId: params.followupRun.run.sessionId,
 					sessionKey: params.sessionKey,
 					agentId: params.followupRun.run.agentId,
@@ -36240,6 +36544,8 @@ async function runAgentTurnWithFallback(params) {
 					verboseLevel: params.followupRun.run.verboseLevel,
 					reasoningLevel: params.followupRun.run.reasoningLevel,
 					execOverrides: params.followupRun.run.execOverrides,
+					execSecurity: params.getActiveSessionEntry()?.execSecurity,
+					cliSessionId: getCliSessionId(params.getActiveSessionEntry(), provider),
 					toolResultFormat: (() => {
 						const channel = resolveMessageChannel(params.sessionCtx.Surface, params.sessionCtx.Provider);
 						if (!channel) return "markdown";
@@ -36271,6 +36577,11 @@ async function runAgentTurnWithFallback(params) {
 						});
 					} : void 0,
 					onAgentEvent: async (evt) => {
+						emitAgentEvent$1({
+							runId,
+							stream: evt.stream,
+							data: evt.data
+						});
 						if (evt.stream === "tool") {
 							const phase = typeof evt.data.phase === "string" ? evt.data.phase : "";
 							if (phase === "start" || phase === "update") await params.typingSignals.signalToolStart();
@@ -36359,7 +36670,7 @@ async function runAgentTurnWithFallback(params) {
 				if (corruptedSessionId) {
 					const transcriptPath = resolveSessionTranscriptPath(corruptedSessionId);
 					try {
-						fsSync.unlinkSync(transcriptPath);
+						fs$1.unlinkSync(transcriptPath);
 					} catch {}
 				}
 				delete params.activeSessionStore[sessionKey];
@@ -36540,10 +36851,12 @@ async function runMemoryFlushIfNeeded(params) {
 			provider: params.followupRun.run.provider,
 			model: params.followupRun.run.model,
 			agentDir: params.followupRun.run.agentDir,
+			sessionEntry: params.sessionEntry ?? (params.sessionKey ? params.sessionStore?.[params.sessionKey] : void 0) ?? void 0,
+			thinkLevel: params.followupRun.run.thinkLevel,
 			fallbacksOverride: resolveAgentModelFallbacksOverride(params.followupRun.run.config, resolveAgentIdFromSessionKey(params.followupRun.run.sessionKey)),
 			run: (provider, model) => {
 				const authProfileId = provider === params.followupRun.run.provider ? params.followupRun.run.authProfileId : void 0;
-				return runEmbeddedPiAgent({
+				return runNoxSoftEmbeddedAgent({
 					sessionId: params.followupRun.run.sessionId,
 					sessionKey: params.sessionKey,
 					agentId: params.followupRun.run.agentId,
@@ -36577,6 +36890,7 @@ async function runMemoryFlushIfNeeded(params) {
 					verboseLevel: params.followupRun.run.verboseLevel,
 					reasoningLevel: params.followupRun.run.reasoningLevel,
 					execOverrides: params.followupRun.run.execOverrides,
+					execSecurity: (params.sessionEntry ?? (params.sessionKey ? params.sessionStore?.[params.sessionKey] : void 0))?.execSecurity,
 					bashElevated: params.followupRun.run.bashElevated,
 					timeoutMs: params.followupRun.run.timeoutMs,
 					runId: flushRunId,
@@ -36912,10 +37226,12 @@ function createFollowupRunner(params) {
 					provider: queued.run.provider,
 					model: queued.run.model,
 					agentDir: queued.run.agentDir,
+					sessionEntry: (sessionKey ? sessionStore?.[sessionKey] : void 0) ?? sessionEntry ?? void 0,
+					thinkLevel: queued.run.thinkLevel,
 					fallbacksOverride: resolveAgentModelFallbacksOverride(queued.run.config, resolveAgentIdFromSessionKey(queued.run.sessionKey)),
 					run: (provider, model) => {
 						const authProfileId = provider === queued.run.provider ? queued.run.authProfileId : void 0;
-						return runEmbeddedPiAgent({
+						return runNoxSoftEmbeddedAgent({
 							sessionId: queued.run.sessionId,
 							sessionKey: queued.run.sessionKey,
 							agentId: queued.run.agentId,
@@ -36946,6 +37262,7 @@ function createFollowupRunner(params) {
 							verboseLevel: queued.run.verboseLevel,
 							reasoningLevel: queued.run.reasoningLevel,
 							execOverrides: queued.run.execOverrides,
+							execSecurity: ((sessionKey ? sessionStore?.[sessionKey] : void 0) ?? sessionEntry)?.execSecurity,
 							bashElevated: queued.run.bashElevated,
 							timeoutMs: queued.run.timeoutMs,
 							runId,
@@ -37160,7 +37477,7 @@ async function runReplyAgent(params) {
 			if (resolved) transcriptCandidates.add(resolved);
 			transcriptCandidates.add(resolveSessionTranscriptPath(prevSessionId, agentId));
 			for (const candidate of transcriptCandidates) try {
-				fsSync.unlinkSync(candidate);
+				fs$1.unlinkSync(candidate);
 			} catch {}
 		}
 		return true;
@@ -37926,7 +38243,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-D2hQZ9X0.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-d-CaN0uL.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -37948,7 +38265,7 @@ function forkSessionFromParent(params) {
 		agentId: params.agentId,
 		sessionsDir: params.sessionsDir
 	});
-	if (!parentSessionFile || !fsSync.existsSync(parentSessionFile)) return null;
+	if (!parentSessionFile || !fs$1.existsSync(parentSessionFile)) return null;
 	try {
 		const manager = SessionManager.open(parentSessionFile);
 		const leafId = manager.getLeafId();
@@ -37972,7 +38289,7 @@ function forkSessionFromParent(params) {
 			cwd: manager.getCwd(),
 			parentSession: parentSessionFile
 		};
-		fsSync.writeFileSync(sessionFile, `${JSON.stringify(header)}\n`, "utf-8");
+		fs$1.writeFileSync(sessionFile, `${JSON.stringify(header)}\n`, "utf-8");
 		return {
 			sessionId,
 			sessionFile
@@ -39355,7 +39672,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-BxNKHxcf.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-OUAGpDsU.js");
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -39607,7 +39924,7 @@ function formatExtraPaths(workspaceDir, extraPaths) {
 }
 async function checkReadableFile(pathname) {
 	try {
-		await fs.access(pathname, fsSync.constants.R_OK);
+		await fs.access(pathname, fs$1.constants.R_OK);
 		return { exists: true };
 	} catch (err) {
 		const code = err.code;
@@ -39666,7 +39983,7 @@ async function scanMemoryFiles(workspaceDir, extraPaths = []) {
 	}
 	let dirReadable = null;
 	try {
-		await fs.access(memoryDir, fsSync.constants.R_OK);
+		await fs.access(memoryDir, fs$1.constants.R_OK);
 		dirReadable = true;
 	} catch (err) {
 		const code = err.code;
@@ -40285,23 +40602,23 @@ let webLoginQrPromise = null;
 let webChannelPromise = null;
 let whatsappActionsPromise = null;
 function loadWebOutbound() {
-	webOutboundPromise ??= import("./outbound-DWfSyfZC.js").then((n) => n.t);
+	webOutboundPromise ??= import("./outbound-Bmft-5um.js").then((n) => n.t);
 	return webOutboundPromise;
 }
 function loadWebLogin() {
-	webLoginPromise ??= import("./login-C4mptULi.js").then((n) => n.n);
+	webLoginPromise ??= import("./login-DKkQ3Czu.js").then((n) => n.n);
 	return webLoginPromise;
 }
 function loadWebLoginQr() {
-	webLoginQrPromise ??= import("./login-qr-BxNKHxcf.js");
+	webLoginQrPromise ??= import("./login-qr-OUAGpDsU.js");
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-DBQRQY6n.js");
+	webChannelPromise ??= import("./web-so3pGceM.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
-	whatsappActionsPromise ??= import("./whatsapp-actions-CMEP8v3k.js");
+	whatsappActionsPromise ??= import("./whatsapp-actions-Hr-W8vjY.js");
 	return whatsappActionsPromise;
 }
 function createPluginRuntime() {
@@ -40444,7 +40761,7 @@ const resolvePluginSdkAliasFile = (params) => {
 			const srcCandidate = path.join(cursor, "src", "plugin-sdk", params.srcFile);
 			const distCandidate = path.join(cursor, "dist", "plugin-sdk", params.distFile);
 			const orderedCandidates = isTest ? [distCandidate, srcCandidate] : [distCandidate];
-			for (const candidate of orderedCandidates) if (fsSync.existsSync(candidate)) return candidate;
+			for (const candidate of orderedCandidates) if (fs$1.existsSync(candidate)) return candidate;
 			const parent = path.dirname(cursor);
 			if (parent === cursor) break;
 			cursor = parent;
@@ -42569,15 +42886,6 @@ function createAnimaCodingTools(options) {
 
 //#endregion
 //#region src/agents/gemini-direct-runner.ts
-/**
-* Gemini Direct API Runner
-*
-* Makes calls directly to generativelanguage.googleapis.com without needing
-* a CLI wrapper. Works with Google API keys (GEMINI_API_KEY).
-*
-* This runner is automatically used when a google API key is available
-* and the provider is set to "google" or "gemini".
-*/
 const log = createSubsystemLogger("agent/gemini-direct");
 const DEFAULT_GEMINI_BASE_URL = "https://generativelanguage.googleapis.com/v1beta";
 const MODEL_MAP = {
@@ -42669,7 +42977,7 @@ async function runGeminiDirectAgent(params) {
 		cwd: process.cwd(),
 		moduleUrl: import.meta.url
 	});
-	const extraSystemPrompt = [params.extraSystemPrompt?.trim()].filter(Boolean).join("\n");
+	const extraSystemPrompt = appendRunnerCapabilityPrompt(params.extraSystemPrompt, "local-tools");
 	const systemPrompt = buildSystemPrompt({
 		workspaceDir,
 		config: params.config,
@@ -42748,7 +43056,6 @@ async function runGeminiDirectAgent(params) {
 				};
 			}
 			if (!response.body) throw new Error("No response body received from Gemini API");
-			await params.onAssistantMessageStart?.();
 			const bodyStream = Readable.fromWeb(response.body);
 			let buffer = "";
 			let chunkAssistantText = "";
@@ -42774,12 +43081,11 @@ async function runGeminiDirectAgent(params) {
 							nonTextParts.push(p);
 							if (p.functionCall) functionCalls.push(p.functionCall);
 						}
-						if (parsed.candidates?.[0]?.finishReason) parsed.candidates[0].finishReason;
 						if (parsed.usageMetadata) {
 							totalInputTokens = Math.max(totalInputTokens, parsed.usageMetadata.promptTokenCount ?? 0);
 							totalOutputTokens += parsed.usageMetadata.candidatesTokenCount ?? 0;
 						}
-					} catch (e) {}
+					} catch {}
 				}
 			}
 			if (functionCalls.length > 0) {
@@ -42839,7 +43145,7 @@ async function runGeminiDirectAgent(params) {
 			const errorMsg = isAbort ? `Request timed out after ${params.timeoutMs}ms` : String(err);
 			log.error(`gemini api error: ${errorMsg}`, { error: String(err) });
 			return {
-				status: "failed",
+				status: isAbort ? "timeout" : "failed",
 				meta: {
 					durationMs: Date.now() - started,
 					error: {
@@ -42876,7 +43182,7 @@ async function runGeminiDirectAgent(params) {
 }
 
 //#endregion
-//#region src/agents/pi-embedded.ts
+//#region src/agents/noxsoft-runner.ts
 function normalizeEmbeddedProvider(provider) {
 	return normalizeProviderId(provider ?? "") || "anthropic";
 }
@@ -42897,178 +43203,375 @@ async function emitAgentEvent(params, stream, data) {
 		data
 	});
 }
-async function runEmbeddedPiAgent(...args) {
-	const params = args[0];
-	if (!params || typeof params !== "object") throw new Error("runEmbeddedPiAgent expected params object");
+function resolveDirectAuthProvider(provider) {
+	if (provider === "anthropic" || provider === "claude") return "anthropic";
+	if (provider === "google" || provider === "gemini") return "google";
+	return null;
+}
+function resolveProfileFailureReason(result) {
+	const kind = result.meta.error?.kind?.trim().toLowerCase();
+	if (kind === "auth") return "auth";
+	if (kind === "rate_limit") return "rate_limit";
+	const classified = classifyFailoverReason(result.meta.error?.message ?? "");
+	if (classified === "billing") return "billing";
+	if (classified === "auth") return "auth";
+	if (classified === "rate_limit") return "rate_limit";
+}
+function resolveResultErrorKind(result) {
+	const kind = result.meta.error?.kind?.trim().toLowerCase();
+	if (kind) return kind;
+	return result.status === "timeout" ? "timeout" : "unknown";
+}
+function normalizeResultStatus(result) {
+	const kind = resolveResultErrorKind(result);
+	if (result.status === "timeout" || kind === "timeout") return "timeout";
+	return result.status;
+}
+function normalizeResultPayloads(result) {
+	const payloads = result.payloads?.filter((payload) => payload && typeof payload === "object");
+	if (payloads && payloads.length > 0) return payloads;
+	const output = result.output?.trim();
+	return output ? [{ text: output }] : void 0;
+}
+function normalizeResultOutput(result, payloads) {
+	const directOutput = result.output?.trim();
+	if (directOutput) return directOutput;
+	return payloads?.find((payload) => payload.text?.trim())?.text?.trim() || void 0;
+}
+function normalizeRunnerResult(params) {
+	const payloads = normalizeResultPayloads(params.result);
+	const output = normalizeResultOutput(params.result, payloads);
+	const usage = normalizeUsage(params.result.meta.agentMeta?.usage);
+	const lastCallUsage = normalizeUsage(params.result.meta.agentMeta?.lastCallUsage);
+	const promptTokens = params.result.meta.agentMeta?.promptTokens ?? derivePromptTokens(usage ?? lastCallUsage);
+	const status = normalizeResultStatus(params.result);
+	const errorMessage = params.result.meta.error?.message?.trim();
+	const errorKind = resolveResultErrorKind(params.result);
+	return {
+		...params.result,
+		status,
+		output,
+		payloads,
+		meta: {
+			...params.result.meta,
+			error: status === "completed" && !errorMessage ? void 0 : {
+				message: errorMessage || (status === "timeout" ? "Request timed out." : "Runner execution failed."),
+				kind: errorKind
+			},
+			agentMeta: {
+				...params.result.meta.agentMeta,
+				sessionId: params.result.meta.agentMeta?.sessionId?.trim() || params.sessionId,
+				provider: params.provider,
+				model: params.model ?? params.result.meta.agentMeta?.model,
+				usage,
+				promptTokens,
+				lastCallUsage
+			}
+		}
+	};
+}
+function coerceResultFailure(params) {
+	if (params.result.status === "completed") return null;
+	const message = params.result.meta.error?.message?.trim() || (params.result.status === "timeout" ? "Request timed out." : "Runner execution failed.");
+	const reason = classifyFailoverReason(message) ?? resolveResultErrorKind(params.result);
+	return new FailoverError(message, {
+		reason: reason === "timeout" ? "timeout" : reason,
+		provider: params.provider,
+		model: params.model,
+		status: resolveFailoverStatus(reason)
+	});
+}
+async function resolveDirectProviderAuth(params) {
+	return resolveApiKeyForProvider({
+		provider: params.provider,
+		cfg: params.config,
+		preferredProfile: params.preferredProfile,
+		agentDir: params.agentDir,
+		store: params.store
+	});
+}
+async function runDirectWithProfileFallback(params) {
+	const store = ensureAuthProfileStore(params.agentDir, { allowKeychainPrompt: false });
+	const attemptedAuthSources = /* @__PURE__ */ new Set();
+	let preferredProfile = params.authProfileId;
+	let lastResult = null;
+	for (;;) {
+		const auth = await resolveDirectProviderAuth({
+			provider: params.directProvider,
+			config: params.config,
+			agentDir: params.agentDir,
+			preferredProfile,
+			store
+		});
+		const authSourceKey = auth.profileId ?? `${auth.mode}:${auth.source}`;
+		if (attemptedAuthSources.has(authSourceKey)) return lastResult ?? {
+			status: "failed",
+			meta: {
+				durationMs: 0,
+				error: {
+					message: `Auth fallback loop detected for ${params.directProvider}.`,
+					kind: "unknown"
+				}
+			}
+		};
+		attemptedAuthSources.add(authSourceKey);
+		const result = params.directProvider === "anthropic" ? await runAnthropicDirectAgent({
+			token: auth.apiKey ?? "",
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			agentId: params.agentId,
+			sessionFile: params.sessionFile,
+			workspaceDir: params.workspaceDir,
+			config: params.config,
+			prompt: params.prompt,
+			model: params.model,
+			thinkLevel: params.thinkLevel,
+			timeoutMs: params.timeoutMs,
+			runId: params.runId,
+			extraSystemPrompt: params.extraSystemPrompt,
+			ownerNumbers: params.ownerNumbers,
+			onPartialReply: params.emitPartial,
+			onAssistantMessageStart: params.onAssistantMessageStart
+		}) : await runGeminiDirectAgent({
+			apiKey: auth.apiKey ?? "",
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			agentId: params.agentId,
+			sessionFile: params.sessionFile,
+			workspaceDir: params.workspaceDir,
+			config: params.config,
+			prompt: params.prompt,
+			model: params.model,
+			thinkLevel: params.thinkLevel,
+			timeoutMs: params.timeoutMs,
+			runId: params.runId,
+			extraSystemPrompt: params.extraSystemPrompt,
+			ownerNumbers: params.ownerNumbers,
+			onPartialReply: params.emitPartial,
+			onAssistantMessageStart: params.onAssistantMessageStart
+		});
+		if (result.status === "completed") {
+			if (auth.profileId) {
+				await markAuthProfileUsed({
+					store,
+					profileId: auth.profileId,
+					agentDir: params.agentDir
+				});
+				await markAuthProfileGood({
+					store,
+					provider: params.directProvider,
+					profileId: auth.profileId,
+					agentDir: params.agentDir
+				});
+			}
+			return result;
+		}
+		lastResult = result;
+		const failureReason = resolveProfileFailureReason(result);
+		if (!auth.profileId || !failureReason) return result;
+		await markAuthProfileFailure({
+			store,
+			profileId: auth.profileId,
+			reason: failureReason,
+			cfg: params.config,
+			agentDir: params.agentDir
+		});
+		preferredProfile = void 0;
+	}
+}
+async function resolveDirectStrategy(provider, config, agentDir) {
+	const directProvider = resolveDirectAuthProvider(provider);
+	if (!directProvider) return null;
+	try {
+		const auth = await resolveDirectProviderAuth({
+			provider: directProvider,
+			config,
+			agentDir,
+			store: ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false })
+		});
+		if (auth.apiKey) {
+			if (directProvider === "anthropic" && auth.apiKey.startsWith("sk-ant-oat01-")) return null;
+			return {
+				kind: directProvider === "google" ? "gemini-direct" : "anthropic-direct",
+				provider
+			};
+		}
+	} catch {}
+	return null;
+}
+async function resolveNoxSoftRunnerStrategy(params) {
 	const provider = normalizeEmbeddedProvider(params.provider);
+	const direct = await resolveDirectStrategy(provider, params.config, params.agentDir);
+	if (direct) return direct;
+	const cliProvider = resolveCompatCliProvider(provider, params.config);
+	if (!resolveCliBackendConfig(cliProvider, params.config)) throw new Error(`No CLI backend available for provider "${provider}" (resolved "${cliProvider}").\nEither:\n  • Run: anima setup-token  (set an Anthropic API key — no CLI needed)\n  • Install the matching CLI and log in`);
+	return {
+		kind: "cli",
+		provider,
+		cliProvider
+	};
+}
+async function runNoxSoftEmbeddedAgent(params) {
+	const provider = normalizeEmbeddedProvider(params.provider);
+	const normalizedRequestedRef = params.model?.trim() ? normalizeModelRef(provider, params.model) : null;
 	const startedAt = Date.now();
 	const runId = params.runId?.trim() || crypto.randomUUID();
 	const timeoutMs = typeof params.timeoutMs === "number" && params.timeoutMs > 0 ? params.timeoutMs : 12e4;
 	let assistantStarted = false;
 	const streamTasks = [];
-	if (provider === "anthropic" || provider === "claude") {
-		const store = loadAuthProfileStore();
-		const profile = store.profiles["anthropic:default"] ?? store.profiles[store.lastGood?.["anthropic"] ?? ""] ?? null;
-		const directToken = profile?.type === "token" ? profile.token : profile?.type === "oauth" ? profile.access : null;
-		if (directToken) {
-			await emitAgentEvent(params, "lifecycle", {
-				phase: "start",
-				startedAt
-			});
-			try {
-				const result = await runAnthropicDirectAgent({
-					token: directToken,
-					sessionId: params.sessionId,
-					sessionKey: params.sessionKey,
-					agentId: params.agentId,
-					sessionFile: params.sessionFile,
-					workspaceDir: params.workspaceDir,
-					config: params.config,
-					prompt: params.prompt,
-					model: params.model,
-					thinkLevel: params.thinkLevel,
+	const emitPartial = async (payload) => {
+		if (!assistantStarted) {
+			assistantStarted = true;
+			await params.onAssistantMessageStart?.();
+		}
+		await params.onPartialReply?.(payload);
+		await emitAgentEvent(params, "assistant", { text: payload.text });
+	};
+	const strategy = await resolveNoxSoftRunnerStrategy({
+		provider: params.provider,
+		config: params.config,
+		agentDir: params.agentDir
+	});
+	if (strategy.kind === "anthropic-direct") {
+		await emitAgentEvent(params, "lifecycle", {
+			phase: "start",
+			startedAt
+		});
+		try {
+			const result = normalizeRunnerResult({
+				result: await runDirectWithProfileFallback({
+					...params,
+					directProvider: "anthropic",
 					timeoutMs,
 					runId,
-					extraSystemPrompt: params.extraSystemPrompt,
-					ownerNumbers: params.ownerNumbers,
-					onPartialReply: async (payload) => {
-						if (!assistantStarted) {
-							assistantStarted = true;
-							await params.onAssistantMessageStart?.();
-						}
-						await params.onPartialReply?.(payload);
-						await emitAgentEvent(params, "assistant", { text: payload.text });
-					},
-					onAssistantMessageStart: params.onAssistantMessageStart
-				});
-				await emitAgentEvent(params, "lifecycle", {
-					phase: "end",
-					durationMs: Date.now() - startedAt,
-					status: result.status
-				});
-				return result;
-			} catch (err) {
+					emitPartial
+				}),
+				provider: normalizedRequestedRef?.provider ?? provider,
+				model: normalizedRequestedRef?.model,
+				sessionId: params.sessionId
+			});
+			const failure = coerceResultFailure({
+				result,
+				provider: result.meta.agentMeta?.provider ?? provider,
+				model: result.meta.agentMeta?.model
+			});
+			if (failure) {
 				await emitAgentEvent(params, "lifecycle", {
 					phase: "error",
-					error: String(err instanceof Error ? err.message : err)
+					startedAt,
+					endedAt: Date.now(),
+					error: failure.message,
+					status: result.status
 				});
-				throw err;
+				throw failure;
 			}
-		}
-	}
-	if (provider === "google" || provider === "gemini") {
-		const geminiApiKey = (await resolveApiKeyForProvider({
-			provider: "google",
-			cfg: params.config
-		}))?.apiKey;
-		if (geminiApiKey) {
 			await emitAgentEvent(params, "lifecycle", {
-				phase: "start",
-				startedAt
+				phase: "end",
+				durationMs: Date.now() - startedAt,
+				status: result.status
 			});
-			try {
-				const result = await runGeminiDirectAgent({
-					apiKey: geminiApiKey,
-					sessionId: params.sessionId,
-					sessionKey: params.sessionKey,
-					agentId: params.agentId,
-					sessionFile: params.sessionFile,
-					workspaceDir: params.workspaceDir,
-					config: params.config,
-					prompt: params.prompt,
-					model: params.model,
-					thinkLevel: params.thinkLevel,
+			return result;
+		} catch (err) {
+			await emitAgentEvent(params, "lifecycle", {
+				phase: "error",
+				error: String(err instanceof Error ? err.message : err)
+			});
+			throw err;
+		}
+	}
+	if (strategy.kind === "gemini-direct") {
+		await emitAgentEvent(params, "lifecycle", {
+			phase: "start",
+			startedAt
+		});
+		try {
+			const result = normalizeRunnerResult({
+				result: await runDirectWithProfileFallback({
+					...params,
+					directProvider: "google",
 					timeoutMs,
 					runId,
-					extraSystemPrompt: params.extraSystemPrompt,
-					ownerNumbers: params.ownerNumbers,
-					onPartialReply: async (payload) => {
-						if (!assistantStarted) {
-							assistantStarted = true;
-							await params.onAssistantMessageStart?.();
-						}
-						await params.onPartialReply?.(payload);
-						await emitAgentEvent(params, "assistant", { text: payload.text });
-					},
-					onAssistantMessageStart: params.onAssistantMessageStart
-				});
-				await emitAgentEvent(params, "lifecycle", {
-					phase: "end",
-					durationMs: Date.now() - startedAt,
-					status: result.status
-				});
-				return result;
-			} catch (err) {
+					emitPartial
+				}),
+				provider: normalizedRequestedRef?.provider ?? provider,
+				model: normalizedRequestedRef?.model,
+				sessionId: params.sessionId
+			});
+			const failure = coerceResultFailure({
+				result,
+				provider: result.meta.agentMeta?.provider ?? provider,
+				model: result.meta.agentMeta?.model
+			});
+			if (failure) {
 				await emitAgentEvent(params, "lifecycle", {
 					phase: "error",
-					error: String(err instanceof Error ? err.message : err)
+					startedAt,
+					endedAt: Date.now(),
+					error: failure.message,
+					status: result.status
 				});
-				throw err;
+				throw failure;
 			}
+			await emitAgentEvent(params, "lifecycle", {
+				phase: "end",
+				durationMs: Date.now() - startedAt,
+				status: result.status
+			});
+			return result;
+		} catch (err) {
+			await emitAgentEvent(params, "lifecycle", {
+				phase: "error",
+				error: String(err instanceof Error ? err.message : err)
+			});
+			throw err;
 		}
 	}
-	const cliProvider = resolveCompatCliProvider(provider, params.config);
-	if (!resolveCliBackendConfig(cliProvider, params.config)) throw new Error(`No CLI backend available for provider "${provider}" (resolved "${cliProvider}").\nEither:\n  • Run: anima setup-token  (set an Anthropic API key — no CLI needed)\n  • Install the matching CLI and log in`);
 	await emitAgentEvent(params, "lifecycle", {
 		phase: "start",
 		startedAt
 	});
 	try {
-		const result = await runCliAgent({
-			sessionId: params.sessionId,
-			sessionKey: params.sessionKey,
-			agentId: params.agentId,
-			sessionFile: params.sessionFile,
-			workspaceDir: params.workspaceDir,
-			config: params.config,
-			prompt: params.prompt,
-			provider: cliProvider,
-			model: params.model,
-			thinkLevel: params.thinkLevel,
-			timeoutMs,
-			runId,
-			extraSystemPrompt: params.extraSystemPrompt,
-			ownerNumbers: params.ownerNumbers,
-			images: params.images,
-			onTextStream: (text) => {
-				const nextText = text.trim();
-				if (!nextText) return;
-				const task = (async () => {
-					if (!assistantStarted) {
-						assistantStarted = true;
-						await params.onAssistantMessageStart?.();
-					}
-					await params.onPartialReply?.({ text: nextText });
-					await emitAgentEvent(params, "assistant", { text: nextText });
-				})();
-				streamTasks.push(task);
-			}
+		const result = normalizeRunnerResult({
+			result: await runCliAgent({
+				sessionId: params.sessionId,
+				sessionKey: params.sessionKey,
+				agentId: params.agentId,
+				sessionFile: params.sessionFile,
+				workspaceDir: params.workspaceDir,
+				config: params.config,
+				prompt: params.prompt,
+				provider: strategy.cliProvider,
+				model: params.model,
+				thinkLevel: params.thinkLevel,
+				timeoutMs,
+				runId,
+				extraSystemPrompt: params.extraSystemPrompt,
+				ownerNumbers: params.ownerNumbers,
+				cliSessionId: params.cliSessionId,
+				sessionExecSecurity: params.execSecurity,
+				images: params.images,
+				streamParams: params.streamParams,
+				onTextStream: (text) => {
+					const nextText = text.trim();
+					if (!nextText) return;
+					streamTasks.push(emitPartial({ text: nextText }));
+				}
+			}),
+			provider: normalizedRequestedRef?.provider ?? provider,
+			model: normalizedRequestedRef?.model,
+			sessionId: params.sessionId
 		});
 		if (streamTasks.length > 0) await Promise.allSettled(streamTasks);
 		const finalText = result.payloads?.[0]?.text?.trim();
-		if (finalText && !assistantStarted) {
-			assistantStarted = true;
-			await params.onAssistantMessageStart?.();
-			await params.onPartialReply?.({ text: finalText });
-			await emitAgentEvent(params, "assistant", { text: finalText });
-		}
+		if (finalText && !assistantStarted) await emitPartial({ text: finalText });
 		await emitAgentEvent(params, "lifecycle", {
 			phase: "end",
 			startedAt,
 			endedAt: Date.now(),
-			aborted: false
+			aborted: false,
+			status: result.status
 		});
-		return {
-			...result,
-			meta: {
-				...result.meta,
-				agentMeta: {
-					...result.meta.agentMeta,
-					provider,
-					model: params.model?.trim() || result.meta.agentMeta?.model
-				}
-			}
-		};
+		return result;
 	} catch (error) {
 		const message = error instanceof Error ? error.message : String(error);
 		await emitAgentEvent(params, "lifecycle", {
@@ -43080,6 +43583,9 @@ async function runEmbeddedPiAgent(...args) {
 		throw error;
 	}
 }
+
+//#endregion
+//#region src/agents/pi-embedded.ts
 async function compactEmbeddedPiSession(..._args) {
 	return {
 		ok: true,
@@ -43107,4 +43613,4 @@ async function waitForEmbeddedPiRunEnd(..._args) {
 }
 
 //#endregion
-export { resolveEffectiveMessagesConfig as $, applyVerboseOverride as A, shouldComputeCommandAuthorized as B, upsertChannelPairingRequest as C, lookupContextTokens as D, getSkillsSnapshotVersion as E, createInboundDebouncer as F, resolveAgentTimeoutMs as G, buildMentionRegexes as H, resolveInboundDebounceMs as I, extractShortModelName as J, AGENT_LANE_NESTED as K, formatInboundEnvelope as L, loadModelCatalog as M, registerUnhandledRejectionHandler as N, clearSessionAuthProfileOverride as O, finalizeInboundContext as P, hasInterSessionUserProvenance as Q, resolveEnvelopeFormatOptions as R, readChannelAllowFromStore as S, getRemoteSkillEligibility as T, normalizeMentionText as U, CURRENT_MESSAGE_MARKER as V, subagent_registry_exports as W, emitAgentEvent$1 as X, clearAgentRunContext as Y, registerAgentRunContext as Z, normalizeGroupActivation as _, resolveChannelGroupRequireMention as a, hasNonzeroUsage as b, createDedupeCache as c, setCliSessionId as d, resolveIdentityName as et, buildAgentSessionKey as f, runWithModelFallback as g, resolveSessionDeliveryTarget as h, resolveChannelGroupPolicy as i, enqueueSystemEvent as j, applyModelOverrideToSessionEntry as k, getReplyFromConfig as l, resolveOutboundTarget as m, buildPairingReply as n, resolveMessagePrefix as nt, shouldAckReactionForWhatsApp as o, resolveAgentRoute as p, AGENT_LANE_SUBAGENT as q, recordChannelActivity as r, runCliAgent as rt, dispatchReplyWithBufferedBlockDispatcher as s, runEmbeddedPiAgent as t, resolveIdentityNamePrefix as tt, getCliSessionId as u, parseActivationCommand as v, resolveSendPolicy as w, formatDurationPrecise as x, deriveSessionTotalTokens as y, hasControlCommand as z };
+export { resolveEffectiveMessagesConfig as $, applyVerboseOverride as A, shouldComputeCommandAuthorized as B, upsertChannelPairingRequest as C, lookupContextTokens as D, getSkillsSnapshotVersion as E, createInboundDebouncer as F, resolveAgentTimeoutMs as G, buildMentionRegexes as H, resolveInboundDebounceMs as I, extractShortModelName as J, AGENT_LANE_NESTED as K, formatInboundEnvelope as L, loadModelCatalog as M, registerUnhandledRejectionHandler as N, clearSessionAuthProfileOverride as O, finalizeInboundContext as P, hasInterSessionUserProvenance as Q, resolveEnvelopeFormatOptions as R, readChannelAllowFromStore as S, getRemoteSkillEligibility as T, normalizeMentionText as U, CURRENT_MESSAGE_MARKER as V, subagent_registry_exports as W, emitAgentEvent$1 as X, clearAgentRunContext as Y, registerAgentRunContext as Z, normalizeGroupActivation as _, resolveChannelGroupRequireMention as a, hasNonzeroUsage as b, createDedupeCache as c, setCliSessionId as d, resolveIdentityName as et, buildAgentSessionKey as f, runWithModelFallback as g, resolveSessionDeliveryTarget as h, resolveChannelGroupPolicy as i, enqueueSystemEvent as j, applyModelOverrideToSessionEntry as k, getReplyFromConfig as l, resolveOutboundTarget as m, buildPairingReply as n, resolveMessagePrefix as nt, shouldAckReactionForWhatsApp as o, resolveAgentRoute as p, AGENT_LANE_SUBAGENT as q, recordChannelActivity as r, dispatchReplyWithBufferedBlockDispatcher as s, runNoxSoftEmbeddedAgent as t, resolveIdentityNamePrefix as tt, getCliSessionId as u, parseActivationCommand as v, resolveSendPolicy as w, formatDurationPrecise as x, deriveSessionTotalTokens as y, hasControlCommand as z };