@signetai/core 0.214.41 → 0.216.4

package/dist/index.js

@@ -7129,7 +7129,7 @@ var require_keyring = __commonJS((exports, module) => {
   var __filename = "/home/runner/work/signetai/signetai/node_modules/.bun/@napi-rs+keyring@1.3.0/node_modules/@napi-rs/keyring/index.js";
   var { createRequire: createRequire2 } = __require("node:module");
   __require = createRequire2(__filename);
-  var { readFileSync: readFileSync2 } = __require("node:fs");
+  var { readFileSync: readFileSync3 } = __require("node:fs");
   var nativeBinding = null;
   var loadErrors = [];
   var isMusl = () => {
@@ -7148,7 +7148,7 @@ var require_keyring = __commonJS((exports, module) => {
   var isFileMusl = (f) => f.includes("libc.musl-") || f.includes("ld-musl-");
   var isMuslFromFilesystem = () => {
     try {
-      return readFileSync2("/usr/bin/ldd", "utf-8").includes("musl");
+      return readFileSync3("/usr/bin/ldd", "utf-8").includes("musl");
     } catch {
       return null;
     }
@@ -11148,7 +11148,12 @@ var PIPELINE_MODEL_CATALOG = {
   acpx: [
     { value: "haiku", label: "Claude Code · haiku", tier: "low", source: "harness" },
     { value: "gpt-5.4-mini", label: "Codex CLI · gpt-5.4-mini", tier: "low", source: "harness" },
-    { value: "google/gemini-2.5-flash", label: "OpenCode · google/gemini-2.5-flash", tier: "low", source: "harness" }
+    {
+      value: "opencode/gemini-3-flash",
+      label: "OpenCode · opencode/gemini-3-flash",
+      tier: "low",
+      source: "harness"
+    }
   ],
   "llama-cpp": [
     { value: "qwen3:4b", label: "qwen3:4b", tier: "low", source: "local" },
@@ -11164,27 +11169,35 @@ var PIPELINE_MODEL_CATALOG = {
     { value: "opus", label: "Opus", tier: "high", source: "harness" }
   ],
   codex: [
+    { value: "gpt-5.3-codex-spark", label: "gpt-5.3-codex-spark", tier: "low", source: "harness" },
     { value: "gpt-5.4-mini", label: "gpt-5.4-mini", tier: "low", source: "harness" },
     { value: "gpt-5.4", label: "gpt-5.4", tier: "mid", source: "harness" },
     { value: "gpt-5.5", label: "gpt-5.5", tier: "high", source: "harness" },
-    { value: "gpt-5.3-codex", label: "gpt-5.3-codex", tier: "mid", source: "harness" },
-    { value: "gpt-5.3-codex-spark", label: "gpt-5.3-codex-spark", tier: "low", source: "harness" },
-    { value: "gpt-5.2", label: "gpt-5.2", tier: "mid", source: "harness" }
+    { value: "gpt-5.6-luna", label: "gpt-5.6-luna", tier: "high", source: "harness" },
+    { value: "gpt-5.6-sol", label: "gpt-5.6-sol", tier: "high", source: "harness" },
+    { value: "gpt-5.6-terra", label: "gpt-5.6-terra", tier: "high", source: "harness" }
   ],
   opencode: [
-    { value: "google/gemini-2.5-flash", label: "google/gemini-2.5-flash", tier: "low", source: "harness" },
-    { value: "openai/gpt-5.4-mini", label: "openai/gpt-5.4-mini", tier: "low", source: "harness" },
-    { value: "openai/gpt-5.4", label: "openai/gpt-5.4", tier: "mid", source: "harness" }
+    { value: "opencode/gemini-3-flash", label: "opencode/gemini-3-flash", tier: "low", source: "harness" },
+    { value: "opencode/gpt-5.4-mini", label: "opencode/gpt-5.4-mini", tier: "low", source: "harness" },
+    { value: "opencode/gpt-5.5", label: "opencode/gpt-5.5", tier: "mid", source: "harness" }
   ],
   anthropic: [
-    { value: "claude-3-5-haiku-20241022", label: "Claude 3.5 Haiku", tier: "low", source: "provider" },
-    { value: "claude-sonnet-4-20250514", label: "Claude Sonnet 4", tier: "mid", source: "provider" }
+    { value: "claude-haiku-4-5", label: "Claude Haiku 4.5", tier: "low", source: "provider" },
+    { value: "claude-sonnet-4-6", label: "Claude Sonnet 4.6", tier: "mid", source: "provider" },
+    { value: "claude-opus-4-6", label: "Claude Opus 4.6", tier: "high", source: "provider" }
   ],
   openrouter: [
-    { value: "openai/gpt-4o-mini", label: "openai/gpt-4o-mini", tier: "low", source: "provider" },
     { value: "openai/gpt-5.4-mini", label: "openai/gpt-5.4-mini", tier: "low", source: "provider" },
-    { value: "anthropic/claude-3.5-haiku", label: "anthropic/claude-3.5-haiku", tier: "low", source: "provider" },
-    { value: "google/gemini-2.5-flash", label: "google/gemini-2.5-flash", tier: "low", source: "provider" }
+    { value: "openai/gpt-5.4", label: "openai/gpt-5.4", tier: "mid", source: "provider" },
+    { value: "anthropic/claude-sonnet-4.6", label: "anthropic/claude-sonnet-4.6", tier: "mid", source: "provider" },
+    {
+      value: "google/gemini-3.1-pro-preview",
+      label: "google/gemini-3.1-pro-preview",
+      tier: "high",
+      source: "provider"
+    },
+    { value: "deepseek/deepseek-v4-pro", label: "deepseek/deepseek-v4-pro", tier: "high", source: "provider" }
   ],
   "openai-compatible": [
     { value: "gpt-4o-mini", label: "gpt-4o-mini", tier: "low", source: "provider" },
@@ -11199,14 +11212,14 @@ var MODEL_DEFAULTS = {
   ollama: "qwen3:4b",
   "claude-code": "haiku",
   codex: "gpt-5.4-mini",
-  opencode: "google/gemini-2.5-flash",
-  anthropic: "claude-3-5-haiku-20241022",
-  openrouter: "openai/gpt-4o-mini",
+  opencode: "opencode/gemini-3-flash",
+  anthropic: "claude-haiku-4-5",
+  openrouter: "openai/gpt-5.4-mini",
   "openai-compatible": "gpt-4o-mini",
   command: ""
 };
 function modelPresetsForProvider(provider) {
-  return Object.prototype.hasOwnProperty.call(PIPELINE_MODEL_CATALOG, provider) ? PIPELINE_MODEL_CATALOG[provider] : [];
+  return Object.hasOwn(PIPELINE_MODEL_CATALOG, provider) ? PIPELINE_MODEL_CATALOG[provider] : [];
 }
 function modelDefaultForProvider(provider) {
   return MODEL_DEFAULTS[provider];
@@ -18683,10 +18696,24 @@ function rowToJob(row) {
 var import_yaml = __toESM(require_dist(), 1);
 
 // src/constants.ts
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { existsSync as existsSync2, readFileSync } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { join as join2, resolve } from "node:path";
 function resolveDefaultBasePath() {
-  return process.env.SIGNET_PATH || join2(homedir2(), ".agents");
+  const envPath = process.env.SIGNET_PATH?.trim() || process.env.SIGNET_WORKSPACE?.trim();
+  if (envPath)
+    return resolve(expandHome(envPath));
+  const home = homedir2();
+  const configHome = process.env.XDG_CONFIG_HOME?.trim() ? resolve(expandHome(process.env.XDG_CONFIG_HOME.trim(), home)) : join2(home, ".config");
+  const configPath = join2(configHome, "signet", "workspace.json");
+  if (existsSync2(configPath)) {
+    try {
+      const value = JSON.parse(readFileSync(configPath, "utf8"));
+      if (typeof value.workspace === "string" && value.workspace.trim())
+        return resolve(expandHome(value.workspace, home));
+    } catch {}
+  }
+  return join2(home, ".agents");
 }
 function expandHome(p, home = homedir2()) {
   if (p === "~")
@@ -18854,7 +18881,7 @@ function generateMemory() {
 }
 
 // src/signet.ts
-import { existsSync as existsSync2, readFileSync, writeFileSync, mkdirSync } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync, mkdirSync } from "fs";
 import { join as join3 } from "path";
 
 class Signet {
@@ -18870,7 +18897,7 @@ class Signet {
   }
   async init(name) {
     const basePath = this.getBasePath();
-    if (!existsSync2(basePath)) {
+    if (!existsSync3(basePath)) {
       mkdirSync(basePath, { recursive: true });
     }
     const manifest = {
@@ -18892,25 +18919,25 @@ class Signet {
     await this.db.init();
     this.agent = {
       manifest,
-      soul: readFileSync(join3(basePath, "soul.md"), "utf-8"),
-      memory: readFileSync(join3(basePath, "memory.md"), "utf-8"),
+      soul: readFileSync2(join3(basePath, "soul.md"), "utf-8"),
+      memory: readFileSync2(join3(basePath, "memory.md"), "utf-8"),
       dbPath: join3(basePath, "agent.db")
     };
     return this.agent;
   }
   async load() {
     const basePath = this.getBasePath();
-    if (!existsSync2(join3(basePath, "agent.yaml"))) {
+    if (!existsSync3(join3(basePath, "agent.yaml"))) {
       throw new Error(`No agent found at ${basePath}. Run 'signet init' first.`);
     }
-    const manifestYaml = readFileSync(join3(basePath, "agent.yaml"), "utf-8");
+    const manifestYaml = readFileSync2(join3(basePath, "agent.yaml"), "utf-8");
     const manifest = parseManifest(manifestYaml);
     this.db = new Database(join3(basePath, "agent.db"));
     await this.db.init();
     this.agent = {
       manifest,
-      soul: readFileSync(join3(basePath, "soul.md"), "utf-8"),
-      memory: readFileSync(join3(basePath, "memory.md"), "utf-8"),
+      soul: readFileSync2(join3(basePath, "soul.md"), "utf-8"),
+      memory: readFileSync2(join3(basePath, "memory.md"), "utf-8"),
       dbPath: join3(basePath, "agent.db")
     };
     return this.agent;
@@ -18929,7 +18956,7 @@ class Signet {
   }
   static detect(basePath) {
     const path = basePath || resolveDefaultBasePath();
-    return existsSync2(join3(path, "agent.yaml"));
+    return existsSync3(join3(path, "agent.yaml"));
   }
   static getDefaultPath() {
     return resolveDefaultBasePath();
@@ -18941,11 +18968,11 @@ import { randomBytes, randomUUID } from "node:crypto";
 import {
   chmodSync,
   closeSync,
-  existsSync as existsSync3,
+  existsSync as existsSync4,
   fsyncSync,
   mkdirSync as mkdirSync2,
   openSync,
-  readFileSync as readFileSync2,
+  readFileSync as readFileSync3,
   readdirSync as readdirSync2,
   renameSync,
   rmdirSync,
@@ -19153,7 +19180,7 @@ function resolveMachineId() {
     const candidates = ["/etc/machine-id", "/var/lib/dbus/machine-id"];
     for (const p2 of candidates) {
       try {
-        const id = readFileSync2(p2, "utf-8").trim();
+        const id = readFileSync3(p2, "utf-8").trim();
         if (id)
           return id;
       } catch {}
@@ -19199,7 +19226,7 @@ class SecretKeyringError extends Error {
 }
 function readPersistedMachineId() {
   try {
-    const persisted = readFileSync2(getMachineIdFile(), "utf-8").trim();
+    const persisted = readFileSync3(getMachineIdFile(), "utf-8").trim();
     if (!persisted)
       throw new Error("persisted machine identity is empty");
     return persisted;
@@ -19247,7 +19274,7 @@ function getMachineId() {
       machineIdSelection = { id: `${hostname()}-${username}`, source: "fallback" };
     }
   }
-  if (!existsSync3(getSecretsFile())) {
+  if (!existsSync4(getSecretsFile())) {
     const persistedId = persistMachineId(machineIdSelection.id);
     machineIdSelection = { id: persistedId, source: "persisted" };
   }
@@ -19346,13 +19373,13 @@ async function resolveMasterKey(store) {
   }
   if (result.state === "found") {
     const nativeKey = decodeKeyringValue(result);
-    if (existsSync3(getSecretsFile()))
+    if (existsSync4(getSecretsFile()))
       await migrateLegacyStore(store, await getLegacyMasterKey(), nativeKey);
     return { key: nativeKey, provider: "native-keyring" };
   }
   if (result.state === "missing") {
     const nativeKey = randomBytes(32);
-    const legacyKey = existsSync3(getSecretsFile()) ? await getLegacyMasterKey() : undefined;
+    const legacyKey = existsSync4(getSecretsFile()) ? await getLegacyMasterKey() : undefined;
     const saved = await keyring.set(Buffer.from(nativeKey).toString("base64"));
     if (saved.state === "found") {
       if (legacyKey)
@@ -19384,7 +19411,7 @@ async function decryptWithKey(ciphertext, key) {
   return new TextDecoder().decode(message);
 }
 async function anchorLegacyMachineIdAfterVerification(key) {
-  if (!machineIdSelection || machineIdSelection.source === "persisted" || existsSync3(getMachineIdFile()) || !existsSync3(getSecretsFile())) {
+  if (!machineIdSelection || machineIdSelection.source === "persisted" || existsSync4(getMachineIdFile()) || !existsSync4(getSecretsFile())) {
     return;
   }
   const store = loadStore();
@@ -19433,11 +19460,11 @@ function cleanupStaleSecretStoreTemps() {
 function loadStore() {
   cleanupStaleSecretStoreTemps();
   const file = getSecretsFile();
-  if (!existsSync3(file)) {
+  if (!existsSync4(file)) {
     return { version: 1, secrets: {} };
   }
   try {
-    return parseSecretsStore(JSON.parse(readFileSync2(file, "utf-8")));
+    return parseSecretsStore(JSON.parse(readFileSync3(file, "utf-8")));
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     throw new Error(`Failed to read secrets store: ${message}`);
@@ -19503,14 +19530,14 @@ function isSecretStoreLockDirectory() {
 }
 function readSecretStoreLockOwner() {
   try {
-    const owner = readFileSync2(getSecretStoreLockOwnerFile(), "utf-8").trim();
+    const owner = readFileSync3(getSecretStoreLockOwnerFile(), "utf-8").trim();
     return owner || null;
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return isSecretStoreLockDirectory() ? null : undefined;
     }
     if (error instanceof Error && "code" in error && error.code === "ENOTDIR") {
-      const owner = readFileSync2(getSecretStoreLockFile(), "utf-8").trim();
+      const owner = readFileSync3(getSecretStoreLockFile(), "utf-8").trim();
       return owner || null;
     }
     throw error;
@@ -19537,7 +19564,7 @@ function tryAcquireSecretStoreLock(owner) {
   const ownerFile = join4(tempDirectory, SECRET_STORE_LOCK_OWNER_FILE);
   let fd = null;
   try {
-    if (existsSync3(`${lockFile}.${SECRET_STORE_LOCK_STALE_CLAIM_FILE}`))
+    if (existsSync4(`${lockFile}.${SECRET_STORE_LOCK_STALE_CLAIM_FILE}`))
       return false;
     mkdirSync2(tempDirectory, { mode: 448 });
     fd = openSync(ownerFile, "wx", 384);
@@ -19662,7 +19689,7 @@ async function acquireSecretStoreLock() {
     const existingOwner = readSecretStoreLockOwner();
     if (existingOwner !== undefined && removeStaleSecretStoreLock(existingOwner))
       continue;
-    await new Promise((resolve) => setTimeout(resolve, SECRET_STORE_LOCK_WAIT_MS));
+    await new Promise((resolve2) => setTimeout(resolve2, SECRET_STORE_LOCK_WAIT_MS));
   }
   throw new Error("Timed out waiting for the secrets store lock");
 }
@@ -19679,7 +19706,7 @@ async function putLocalSecret(name, value) {
     const localName = parseLocalSecretName(name);
     const store = loadStore();
     const resolution = await resolveMasterKey(store);
-    if (resolution.provider === "legacy-obfuscated" && existsSync3(getSecretsFile()) && !existsSync3(getMachineIdFile()) && machineIdResolverForTests !== null && !machineIdResolverForTests()?.trim()) {
+    if (resolution.provider === "legacy-obfuscated" && existsSync4(getSecretsFile()) && !existsSync4(getMachineIdFile()) && machineIdResolverForTests !== null && !machineIdResolverForTests()?.trim()) {
       throw new Error("Existing secrets store could not be verified: unable to resolve its machine identity");
     }
     await anchorLegacyMachineIdAfterVerification(resolution.key);
@@ -19795,7 +19822,7 @@ function healthForKeyringState(result) {
 function getLocalSecretProviderHealth() {
   try {
     const store = loadStore();
-    if (existsSync3(join4(getSecretsDir(), DEGRADED_WARNING_FILE))) {
+    if (existsSync4(join4(getSecretsDir(), DEGRADED_WARNING_FILE))) {
       return {
         status: "degraded",
         message: "Using legacy machine-id-obfuscated secrets encryption because no native keyring is available",
@@ -19886,7 +19913,7 @@ async function execWithSecrets(command, secretRefs, options = {}) {
     envVars: Object.keys(secretRefs),
     timeoutMs
   });
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const useProcessGroup = process.platform !== "win32";
     const proc = spawn(cmd[0], cmd.slice(1), {
       detached: useProcessGroup,
@@ -19985,7 +20012,7 @@ async function execWithSecrets(command, secretRefs, options = {}) {
         secretCount: secretValues.length,
         timedOut
       });
-      resolve({
+      resolve2({
         stdout,
         stderr,
         code: finalCode,
@@ -20292,7 +20319,7 @@ function resolveNetworkBinding(mode) {
   };
 }
 // src/harness-config.ts
-import { existsSync as existsSync4, readFileSync as readFileSync3 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
 import { join as join5 } from "node:path";
 
 // src/yaml.ts
@@ -20323,10 +20350,10 @@ var CONFIG_FILES = ["agent.yaml", "AGENT.yaml", "config.yaml"];
 function loadConfiguredHarnesses(agentsDir) {
   for (const name of CONFIG_FILES) {
     const path = join5(agentsDir, name);
-    if (!existsSync4(path))
+    if (!existsSync5(path))
       continue;
     try {
-      const parsed = parseSimpleYaml(readFileSync3(path, "utf-8"));
+      const parsed = parseSimpleYaml(readFileSync4(path, "utf-8"));
       if (!isRecord4(parsed))
         return [];
       return parseHarnessList(parsed.harnesses);
@@ -20767,18 +20794,18 @@ class StreamingMemoryContextScrubber {
 import { randomUUID as randomUUID2 } from "node:crypto";
 import {
   closeSync as closeSync2,
-  existsSync as existsSync5,
+  existsSync as existsSync6,
   fsyncSync as fsyncSync2,
   mkdirSync as mkdirSync3,
   openSync as openSync2,
-  readFileSync as readFileSync4,
+  readFileSync as readFileSync5,
   renameSync as renameSync2,
   rmSync,
   statSync as statSync3,
   writeSync
 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { dirname as dirname3, join as join7, resolve } from "node:path";
+import { dirname as dirname3, join as join7, resolve as resolve2 } from "node:path";
 var defaultWorkspaceFileSystem = {
   closeSync: closeSync2,
   fsyncSync: fsyncSync2,
@@ -20790,7 +20817,7 @@ var defaultWorkspaceFileSystem = {
 var WORKSPACE_ENV_KEYS = ["SIGNET_PATH", "SIGNET_WORKSPACE"];
 var DEFAULT_AGENTS_DIRNAME = ".agents";
 function normalizeWorkspacePath(pathValue, home = homedir4()) {
-  return resolve(expandHome(pathValue.trim(), home));
+  return resolve2(expandHome(pathValue.trim(), home));
 }
 function readTrimmedEnv(env, name) {
   const value = env[name];
@@ -20822,11 +20849,11 @@ function getWorkspaceConfigPath(env = process.env, home = homedir4()) {
 function readConfiguredWorkspacePath(env = process.env, home = homedir4(), options = {}) {
   const strict = options.strict ?? true;
   const configPath = getWorkspaceConfigPath(env, home);
-  if (!existsSync5(configPath))
+  if (!existsSync6(configPath))
     return null;
   let raw;
   try {
-    raw = JSON.parse(readFileSync4(configPath, "utf-8"));
+    raw = JSON.parse(readFileSync5(configPath, "utf-8"));
   } catch (err) {
     if (!strict)
       return null;
@@ -20885,7 +20912,7 @@ function writeConfiguredWorkspacePath(pathValue, env = process.env, home = homed
 }
 function clearConfiguredWorkspacePath(env = process.env) {
   const configPath = getWorkspaceConfigPath(env);
-  if (!existsSync5(configPath))
+  if (!existsSync6(configPath))
     return;
   rmSync(configPath, { force: true });
 }
@@ -20920,6 +20947,50 @@ function resolveWorkspacePath(options = {}) {
     configuredPath: configValue
   };
 }
+function preflightWorkspace(options = {}) {
+  const env = options.env ?? process.env;
+  const home = options.home ?? homedir4();
+  let resolution;
+  try {
+    resolution = resolveWorkspacePath({ ...options, strict: true });
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    return {
+      path: join7(home, DEFAULT_AGENTS_DIRNAME),
+      source: "default",
+      configPath: getWorkspaceConfigPath(env, home),
+      configuredPath: null,
+      status: "incomplete",
+      reasons: [detail]
+    };
+  }
+  const reasons = [];
+  const hasExplicitConfiguration = resolution.source === "env" || resolution.configuredPath !== null;
+  if (!isExistingDirectory(resolution.path)) {
+    if (hasExplicitConfiguration) {
+      reasons.push("configured workspace directory is missing");
+      return { ...resolution, status: "missing", reasons };
+    }
+    return { ...resolution, status: "fresh", reasons };
+  }
+  const hasAgentConfig = existsSync6(join7(resolution.path, "agent.yaml")) || existsSync6(join7(resolution.path, "config.yaml"));
+  const hasMemoryDb = existsSync6(join7(resolution.path, "memory", "memories.db"));
+  if (hasAgentConfig && hasMemoryDb) {
+    return { ...resolution, status: "ready", reasons };
+  }
+  if (!hasExplicitConfiguration && !hasAgentConfig && !hasMemoryDb) {
+    return { ...resolution, status: "fresh", reasons };
+  }
+  if (!hasAgentConfig)
+    reasons.push("workspace configuration is missing (agent.yaml or config.yaml)");
+  if (!hasMemoryDb)
+    reasons.push("workspace database is missing (memory/memories.db)");
+  return { ...resolution, status: "incomplete", reasons };
+}
+function formatWorkspacePreflightError(preflight) {
+  const detail = preflight.reasons.length > 0 ? ` ${preflight.reasons.join("; ")}.` : "";
+  return `Signet cannot start: ${preflight.status} workspace at ${preflight.path}.${detail} Restore the configured workspace or run explicit setup; Signet will not recreate it.`;
+}
 function resolveEnvWorkspace(env, home, requireExisting) {
   for (const key of WORKSPACE_ENV_KEYS) {
     const raw = readTrimmedEnv(env, key);
@@ -21766,9 +21837,9 @@ var SIGNET_PLUGIN_REGISTRY_DIR = ".daemon/plugins";
 var SIGNET_PLUGIN_REGISTRY_FILE = "registry-v1.json";
 var SIGNET_PLUGIN_REGISTRY_VERSION = 1;
 // src/graphiq.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync5, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync4, readFileSync as readFileSync6, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname4, join as join8, resolve as resolve2 } from "node:path";
+import { dirname as dirname4, join as join8, resolve as resolve3 } from "node:path";
 var SIGNET_GRAPHIQ_STATE_FILE = ".daemon/graphiq/state.json";
 var GRAPHIQ_SYNCED_VERSION = "4.3.3";
 var GRAPHIQ_DEFAULT_INSTALL_DIR = join8(homedir5(), ".local", "bin");
@@ -21776,7 +21847,7 @@ function getGraphiqStatePath(basePath) {
   return join8(basePath, SIGNET_GRAPHIQ_STATE_FILE);
 }
 function getGraphiqProjectDbPath(projectPath) {
-  return join8(resolve2(projectPath), ".graphiq", "graphiq.db");
+  return join8(resolve3(projectPath), ".graphiq", "graphiq.db");
 }
 function emptyGraphiqState(now = new Date) {
   return {
@@ -21789,10 +21860,10 @@ function emptyGraphiqState(now = new Date) {
 }
 function readGraphiqState(basePath) {
   const path = getGraphiqStatePath(basePath);
-  if (!existsSync6(path))
+  if (!existsSync7(path))
     return emptyGraphiqState();
   try {
-    const parsed = JSON.parse(readFileSync5(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync6(path, "utf-8"));
     return parseGraphiqState(parsed);
   } catch {
     return emptyGraphiqState();
@@ -21846,7 +21917,7 @@ function setGraphiqActiveProject(basePath, activeProject) {
 function updateGraphiqActiveProject(basePath, input) {
   const current = readGraphiqState(basePath);
   const indexedAt = input.indexedAt ?? new Date;
-  const projectPath = resolve2(input.projectPath);
+  const projectPath = resolve3(input.projectPath);
   const project = {
     path: projectPath,
     dbPath: getGraphiqProjectDbPath(projectPath),
@@ -21934,8 +22005,8 @@ function isRecord6(value) {
 }
 // src/workspace-source-repo.ts
 import { spawn as spawn2, spawnSync } from "node:child_process";
-import { closeSync as closeSync3, existsSync as existsSync7, mkdirSync as mkdirSync5, openSync as openSync3, readdirSync as readdirSync3, rmSync as rmSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join9, resolve as resolve3 } from "node:path";
+import { closeSync as closeSync3, existsSync as existsSync8, mkdirSync as mkdirSync5, openSync as openSync3, readdirSync as readdirSync3, rmSync as rmSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join9, resolve as resolve4 } from "node:path";
 var SIGNET_SOURCE_CHECKOUT_DIRNAME = "signetai";
 var SIGNET_SOURCE_REMOTE_URL = "https://github.com/Signet-AI/signetai.git";
 var DEFAULT_GIT_TIMEOUT_MS = 60000;
@@ -21943,7 +22014,7 @@ var SOURCE_REPO_SYNC_LOCK_FILENAME = "source-repo-sync.lock";
 var SOURCE_REPO_SYNC_LOCK_STALE_MS = 5 * 60000;
 var SOURCE_REPO_SYNC_LOCK_WAIT_MS = 15000;
 function resolveWorkspaceSourceRepoPath(workspaceDir, repoDirName = SIGNET_SOURCE_CHECKOUT_DIRNAME) {
-  return join9(resolve3(workspaceDir), repoDirName);
+  return join9(resolve4(workspaceDir), repoDirName);
 }
 function syncWorkspaceSourceRepo(workspaceDir, options = {}) {
   const timeoutMs = options.gitTimeoutMs ?? DEFAULT_GIT_TIMEOUT_MS;
@@ -21992,7 +22063,7 @@ async function syncWorkspaceSourceRepoAsync(workspaceDir, options = {}) {
   }
 }
 function syncWorkspaceSourceRepoLocked(run, workspaceDir, repoPath, remoteUrl, timeoutMs) {
-  if (!existsSync7(repoPath) || isEmptyDirectory(repoPath)) {
+  if (!existsSync8(repoPath) || isEmptyDirectory(repoPath)) {
     const workspaceReady = ensureWorkspaceDir(workspaceDir);
     if (workspaceReady.ok === false) {
       return errorResult(repoPath, workspaceReady.message);
@@ -22087,7 +22158,7 @@ function runGit(args, cwd, timeoutMs) {
   };
 }
 async function runGitAsync(args, cwd, timeoutMs) {
-  return await new Promise((resolve4) => {
+  return await new Promise((resolve5) => {
     const proc = spawn2("git", args, {
       cwd,
       stdio: ["ignore", "pipe", "pipe"],
@@ -22108,7 +22179,7 @@ async function runGitAsync(args, cwd, timeoutMs) {
         clearTimeout(killTimer);
       if (fallbackTimer)
         clearTimeout(fallbackTimer);
-      resolve4(result);
+      resolve5(result);
     };
     const timer = setTimeout(() => {
       stderr += `
@@ -22156,10 +22227,10 @@ function killGitProcessTree(proc, signal) {
   } catch {}
 }
 function hasGitMetadata(path) {
-  return existsSync7(join9(path, ".git"));
+  return existsSync8(join9(path, ".git"));
 }
 function isEmptyDirectory(path) {
-  if (!existsSync7(path)) {
+  if (!existsSync8(path)) {
     return true;
   }
   try {
@@ -22238,7 +22309,7 @@ function readErrorCode(err) {
   return typeof maybeErrno.code === "string" ? maybeErrno.code : null;
 }
 function sourceRepoSyncLockPath(workspaceDir) {
-  return join9(resolve3(workspaceDir), ".daemon", SOURCE_REPO_SYNC_LOCK_FILENAME);
+  return join9(resolve4(workspaceDir), ".daemon", SOURCE_REPO_SYNC_LOCK_FILENAME);
 }
 function clearStaleSourceRepoSyncLock(path) {
   try {
@@ -22304,7 +22375,7 @@ function releaseSourceRepoSyncLock(lock) {
   rmSync3(lock.path, { force: true });
 }
 async function sleep(ms) {
-  await new Promise((resolve4) => setTimeout(resolve4, ms));
+  await new Promise((resolve5) => setTimeout(resolve5, ms));
 }
 function unsafeRemoteResult(repoPath) {
   return {
@@ -22343,7 +22414,7 @@ function sourceRepoSyncLockErrorResult(repoPath, detail) {
   };
 }
 function ensureDaemonDir(workspaceDir) {
-  const daemonDir = join9(resolve3(workspaceDir), ".daemon");
+  const daemonDir = join9(resolve4(workspaceDir), ".daemon");
   try {
     mkdirSync5(daemonDir, { recursive: true });
     return { ok: true };
@@ -22670,9 +22741,9 @@ function escapeRegExp(value) {
 }
 // src/sources-config.ts
 import { createHash as createHash4, randomUUID as randomUUID3 } from "node:crypto";
-import { existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync6, renameSync as renameSync4, rmSync as rmSync4, statSync as statSync5, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync7, renameSync as renameSync4, rmSync as rmSync4, statSync as statSync5, writeFileSync as writeFileSync5 } from "node:fs";
 import { homedir as homedir6, platform as platform2 } from "node:os";
-import { basename, dirname as dirname5, resolve as resolve4 } from "node:path";
+import { basename, dirname as dirname5, resolve as resolve5 } from "node:path";
 var DEFAULT_OBSIDIAN_EXCLUDE_GLOBS = [
   "**/.obsidian/**",
   "**/.trash/**",
@@ -22711,11 +22782,11 @@ function saveSourcesConfig(config, agentsDir = getAgentsDir2()) {
 }
 function loadSourcesConfigForWrite(agentsDir = getAgentsDir2()) {
   const path = getSourcesConfigPath(agentsDir);
-  if (!existsSync8(path))
+  if (!existsSync9(path))
     return emptyConfig();
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync6(path, "utf8"));
+    parsed = JSON.parse(readFileSync7(path, "utf8"));
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
     throw new Error(`Sources config is not readable JSON; refusing to overwrite ${path}: ${detail}`);
@@ -22737,12 +22808,46 @@ function normalizeSourceEntry(source) {
 function addObsidianSource(input, agentsDir = getAgentsDir2()) {
   return withSourcesConfigLock(agentsDir, () => addObsidianSourceUnlocked(input, agentsDir));
 }
+function addWebSource(input, agentsDir = getAgentsDir2()) {
+  return withSourcesConfigLock(agentsDir, () => addWebSourceUnlocked(input, agentsDir));
+}
 function addDiscordSource(input, agentsDir = getAgentsDir2()) {
   return withSourcesConfigLock(agentsDir, () => addDiscordSourceUnlocked(input, agentsDir));
 }
 function addGitHubSource(input, agentsDir = getAgentsDir2()) {
   return withSourcesConfigLock(agentsDir, () => addGitHubSourceUnlocked(input, agentsDir));
 }
+function addWebSourceUnlocked(input, agentsDir = getAgentsDir2()) {
+  try {
+    const url = normalizePublicWebUrl(input.url);
+    if (!url)
+      return { ok: false, error: "Web page URL must be a public http(s) URL" };
+    const now = input.now ?? new Date().toISOString();
+    const config = loadSourcesConfigForWrite(agentsDir);
+    const sourceId = `web:${createHash4("sha256").update(url).digest("hex").slice(0, 16)}`;
+    const existing = config.sources.find((source2) => source2.id === sourceId);
+    const source = {
+      id: sourceId,
+      generation: existing?.generation ?? newSourceGeneration(),
+      kind: "web",
+      name: cleanName(input.name) ?? existing?.name ?? new URL(url).hostname,
+      root: url,
+      enabled: true,
+      mode: "read-only",
+      createdAt: existing?.createdAt ?? now,
+      updatedAt: now,
+      providerSettings: { url }
+    };
+    saveSourcesConfig({
+      version: SOURCES_CONFIG_VERSION,
+      sources: existing ? config.sources.map((entry) => entry.id === existing.id ? source : entry) : [...config.sources, source]
+    }, agentsDir);
+    return { ok: true, source, created: !existing };
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    return { ok: false, error: detail };
+  }
+}
 function addImportedSource(input, agentsDir = getAgentsDir2()) {
   return withSourcesConfigLock(agentsDir, () => {
     const fileName = input.fileName.trim();
@@ -22932,6 +23037,15 @@ function parseGitHubSettings(raw) {
     maxItemsPerRepo: cleanPositiveInteger(raw?.maxItemsPerRepo, MAX_GITHUB_MAX_ITEMS_PER_REPO) ?? DEFAULT_GITHUB_MAX_ITEMS_PER_REPO
   };
 }
+function parseWebSettings(raw) {
+  const value = raw?.url;
+  if (typeof value !== "string")
+    throw new Error("Web source has no URL");
+  const url = normalizePublicWebUrl(value);
+  if (!url)
+    throw new Error("Web source URL must be a public http(s) URL");
+  return { url };
+}
 function buildDiscordSettings(input) {
   if (input.syncMode && !isDiscordSyncMode(input.syncMode))
     return { error: `Unsupported Discord sync mode: ${input.syncMode}` };
@@ -23099,8 +23213,8 @@ function addObsidianSourceChecked(input, agentsDir = getAgentsDir2()) {
   const trimmedRoot = input.root.trim();
   if (!trimmedRoot)
     return { ok: false, error: "Obsidian vault path is required" };
-  const root = resolve4(trimmedRoot);
-  if (!existsSync8(root))
+  const root = resolve5(trimmedRoot);
+  if (!existsSync9(root))
     return { ok: false, error: `Obsidian vault path does not exist: ${root}` };
   try {
     if (!statSync5(root).isDirectory())
@@ -23227,6 +23341,156 @@ function cleanName(value) {
   const trimmed = value?.trim();
   return trimmed && trimmed.length > 0 ? trimmed : null;
 }
+function normalizePublicWebUrl(value) {
+  const trimmed = value.trim();
+  if (!trimmed || trimmed.length > 2048)
+    return null;
+  let parsed;
+  try {
+    parsed = new URL(trimmed);
+  } catch {
+    return null;
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:")
+    return null;
+  if (parsed.username || parsed.password || !parsed.hostname)
+    return null;
+  const host = parsed.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (host === "localhost" || host.endsWith(".localhost") || host === "local" || host === "broadcasthost" || host.endsWith(".local") || host.endsWith(".internal") || host.endsWith(".home.arpa") || host.endsWith(".test") || host.endsWith(".invalid") || host === "metadata.google.internal" || host === "metadata.google.com" || isUnsafeWebIp(host))
+    return null;
+  parsed.hostname = host;
+  parsed.hash = "";
+  return parsed.toString();
+}
+var NON_GLOBAL_IPV4_RANGES = [
+  [0, 16777215],
+  [167772160, 184549375],
+  [1681915904, 1686110207],
+  [2130706432, 2147483647],
+  [2851995648, 2852061183],
+  [2886729728, 2887778303],
+  [3221225472, 3221225727],
+  [3221225984, 3221226239],
+  [3223307264, 3223307519],
+  [3224682752, 3224683007],
+  [3227017984, 3227018239],
+  [3232235520, 3232301055],
+  [3232706560, 3232706815],
+  [3323068416, 3323199487],
+  [3325256704, 3325256959],
+  [3405803776, 3405804031],
+  [3758096384, 4294967295]
+];
+var NON_GLOBAL_IPV6_RANGES = [
+  ["::", 96],
+  ["::ffff:0:0", 96],
+  ["100::", 64],
+  ["100:0:0:1::", 64],
+  ["2001::", 23],
+  ["2001:0::", 32],
+  ["2001:1::", 32],
+  ["2001:2::", 48],
+  ["2001:3::", 32],
+  ["2001:4:112::", 48],
+  ["2001:8::", 32],
+  ["2001:10::", 28],
+  ["2001:20::", 28],
+  ["2001:30::", 28],
+  ["2001:db8::", 32],
+  ["3fff::", 20],
+  ["64:ff9b::", 96],
+  ["64:ff9b:1::", 48],
+  ["2620:4f:8000::", 48],
+  ["fc00::", 7],
+  ["fe80::", 10],
+  ["fec0::", 10],
+  ["ff00::", 8]
+];
+function isUnsafeWebIp(host) {
+  if (/^[0-9.]+$/.test(host)) {
+    const address = parseIpv4Address(host);
+    return address === null || isNonGlobalIpv4(address);
+  }
+  if (host.includes(":")) {
+    const address = parseIpv6Address(host);
+    return address === null || isNonGlobalIpv6(address);
+  }
+  return false;
+}
+function parseIpv4Address(host) {
+  const octets = host.split(".");
+  if (octets.length !== 4)
+    return null;
+  let address = 0;
+  for (const octet of octets) {
+    if (!/^\d{1,3}$/.test(octet))
+      return null;
+    const value = Number(octet);
+    if (value > 255)
+      return null;
+    address = address * 256 + value;
+  }
+  return address;
+}
+function isNonGlobalIpv4(address) {
+  return NON_GLOBAL_IPV4_RANGES.some(([start, end]) => address >= start && address <= end);
+}
+function parseIpv6Address(host) {
+  const normalized = host.toLowerCase();
+  if (normalized.includes("%"))
+    return null;
+  const sections = normalized.split("::");
+  if (sections.length > 2)
+    return null;
+  const head = sections[0] ? parseIpv6Sections(sections[0].split(":"), sections.length === 1) : [];
+  const tail = sections.length === 2 && sections[1] ? parseIpv6Sections(sections[1].split(":"), true) : [];
+  if (head === null || tail === null)
+    return null;
+  const words = sections.length === 2 ? [...head, ...Array.from({ length: 8 - head.length - tail.length }, () => 0), ...tail] : [...head];
+  if (words.length !== 8)
+    return null;
+  return words.reduce((address, word) => address * 0x10000n + BigInt(word), 0n);
+}
+function parseIpv6Sections(sections, allowIpv4Tail) {
+  const words = [];
+  for (const [index, section] of sections.entries()) {
+    if (section.includes(".")) {
+      if (!allowIpv4Tail || index !== sections.length - 1)
+        return null;
+      const ipv4 = parseIpv4Address(section);
+      if (ipv4 === null)
+        return null;
+      words.push(Math.floor(ipv4 / 65536), ipv4 % 65536);
+      continue;
+    }
+    if (!/^[0-9a-f]{1,4}$/.test(section))
+      return null;
+    words.push(Number.parseInt(section, 16));
+  }
+  return words;
+}
+function isNonGlobalIpv6(address) {
+  const globalUnicastStart = 0x20000000000000000000000000000000n;
+  const globalUnicastEnd = 0x3fffffffffffffffffffffffffffffffn;
+  if (address < globalUnicastStart || address > globalUnicastEnd)
+    return true;
+  if (NON_GLOBAL_IPV6_RANGES.some(([network, prefix]) => matchesIpv6Cidr(address, network, prefix)))
+    return true;
+  if (matchesIpv6Cidr(address, "2002::", 16)) {
+    const embeddedIpv4 = Number(address >> 80n & 0xffffffffn);
+    if (isNonGlobalIpv4(embeddedIpv4))
+      return true;
+  }
+  return false;
+}
+function matchesIpv6Cidr(address, network, prefix) {
+  const parsedNetwork = parseIpv6Address(network);
+  if (parsedNetwork === null)
+    return false;
+  const hostBits = 128 - prefix;
+  const mask = (1n << 128n) - 1n ^ (1n << BigInt(hostBits)) - 1n;
+  return (address & mask) === (parsedNetwork & mask);
+}
 function cleanExcludeGlobs(values) {
   if (!values)
     return null;
@@ -23241,7 +23505,7 @@ function cleanDiscordChannelFilter(values) {
 }
 function cleanLocalPath(value) {
   const trimmed = value?.trim();
-  return trimmed ? resolve4(trimmed.replace(/^~(?=$|\/|\\)/, homedir6())) : undefined;
+  return trimmed ? resolve5(trimmed.replace(/^~(?=$|\/|\\)/, homedir6())) : undefined;
 }
 function cleanGitHubRepos(values) {
   return Array.from(new Set(values.filter((value) => typeof value === "string").map((value) => value.trim()).filter(Boolean)));
@@ -23289,11 +23553,11 @@ function isDiscordSyncMode(value) {
 function defaultDiscordDesktopCachePath() {
   switch (platform2()) {
     case "darwin":
-      return resolve4(homedir6(), "Library", "Application Support", "discord");
+      return resolve5(homedir6(), "Library", "Application Support", "discord");
     case "win32":
-      return resolve4(process.env.APPDATA || resolve4(homedir6(), "AppData", "Roaming"), "discord");
+      return resolve5(process.env.APPDATA || resolve5(homedir6(), "AppData", "Roaming"), "discord");
     default:
-      return resolve4(process.env.XDG_CONFIG_HOME || resolve4(homedir6(), ".config"), "discord");
+      return resolve5(process.env.XDG_CONFIG_HOME || resolve5(homedir6(), ".config"), "discord");
   }
 }
 function looksLikeDiscordDesktopCacheRoot(value) {
@@ -23352,7 +23616,7 @@ function isJsonValue(value) {
 var SOURCE_CHUNK_SOURCE_TYPE = "source_chunk";
 var LEGACY_OBSIDIAN_CHUNK_SOURCE_TYPE = "source_obsidian_chunk";
 // src/export.ts
-import { existsSync as existsSync9, readFileSync as readFileSync7, readdirSync as readdirSync4, statSync as statSync6 } from "node:fs";
+import { existsSync as existsSync10, readFileSync as readFileSync8, readdirSync as readdirSync4, statSync as statSync6 } from "node:fs";
 import { join as join10 } from "node:path";
 function recordImportedMemoryContentSafety(db, memoryId, content) {
   if (db.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get("memory_content_safety") == null) {
@@ -23381,14 +23645,14 @@ var IDENTITY_FILE_NAMES = [
 function collectExportData(agentsDir, db, options = {}) {
   let agentYaml = null;
   const yamlPath = join10(agentsDir, "agent.yaml");
-  if (existsSync9(yamlPath)) {
-    agentYaml = readFileSync7(yamlPath, "utf-8");
+  if (existsSync10(yamlPath)) {
+    agentYaml = readFileSync8(yamlPath, "utf-8");
   }
   const identityFiles = [];
   for (const name of IDENTITY_FILE_NAMES) {
     const path = join10(agentsDir, name);
-    if (existsSync9(path)) {
-      identityFiles.push({ name, content: readFileSync7(path, "utf-8") });
+    if (existsSync10(path)) {
+      identityFiles.push({ name, content: readFileSync8(path, "utf-8") });
     }
   }
   const memories = db.prepare(`SELECT id, content, type, category, confidence, source_type,
@@ -23407,7 +23671,7 @@ function collectExportData(agentsDir, db, options = {}) {
   const skills = [];
   if (options.includeSkills !== false) {
     const skillsDir = join10(agentsDir, "skills");
-    if (existsSync9(skillsDir)) {
+    if (existsSync10(skillsDir)) {
       try {
         const entries = readdirSync4(skillsDir, { withFileTypes: true });
         for (const entry of entries) {
@@ -23453,7 +23717,7 @@ function collectSkillFiles(dir, prefix, out) {
         if (stat.size > 1e6)
           continue;
         try {
-          out.push({ path: relPath, content: readFileSync7(fullPath, "utf-8") });
+          out.push({ path: relPath, content: readFileSync8(fullPath, "utf-8") });
         } catch {}
       }
     }
@@ -23588,14 +23852,14 @@ function importRelations(db, relationsJsonl) {
 }
 // src/identity.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync12, readFileSync as readFileSync10, readdirSync as readdirSync5, realpathSync, statSync as statSync7 } from "node:fs";
+import { existsSync as existsSync13, readFileSync as readFileSync11, readdirSync as readdirSync5, realpathSync, statSync as statSync7 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
 import { dirname as dirname8, join as join13 } from "node:path";
 
 // src/oh-my-pi.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync8, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "node:fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync7, readFileSync as readFileSync9, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { dirname as dirname6, join as join11, resolve as resolve5 } from "node:path";
+import { dirname as dirname6, join as join11, resolve as resolve6 } from "node:path";
 function readTrimmed(env, name) {
   const raw = env[name];
   if (typeof raw !== "string")
@@ -23604,7 +23868,7 @@ function readTrimmed(env, name) {
   return trimmed.length > 0 ? trimmed : null;
 }
 function normalizePath(pathValue) {
-  return resolve5(expandHome(pathValue.trim()));
+  return resolve6(expandHome(pathValue.trim()));
 }
 function readConfigHome2(env) {
   const configured = readTrimmed(env, "XDG_CONFIG_HOME");
@@ -23615,10 +23879,10 @@ function getOhMyPiConfigPath(env = process.env) {
 }
 function readConfiguredOhMyPiAgentDir(env = process.env) {
   const configPath = getOhMyPiConfigPath(env);
-  if (!existsSync10(configPath))
+  if (!existsSync11(configPath))
     return null;
   try {
-    const raw = JSON.parse(readFileSync8(configPath, "utf-8"));
+    const raw = JSON.parse(readFileSync9(configPath, "utf-8"));
     if (typeof raw !== "object" || raw === null)
       return null;
     const agentDir = Reflect.get(raw, "agentDir");
@@ -23650,7 +23914,7 @@ function listOhMyPiAgentDirCandidates(env = process.env) {
 function writeConfiguredOhMyPiAgentDir(pathValue, env = process.env) {
   const agentDir = normalizePath(pathValue);
   const configPath = getOhMyPiConfigPath(env);
-  if (readConfiguredOhMyPiAgentDir(env) === agentDir && existsSync10(configPath)) {
+  if (readConfiguredOhMyPiAgentDir(env) === agentDir && existsSync11(configPath)) {
     return configPath;
   }
   mkdirSync7(dirname6(configPath), { recursive: true });
@@ -23665,7 +23929,7 @@ function writeConfiguredOhMyPiAgentDir(pathValue, env = process.env) {
 }
 function clearConfiguredOhMyPiAgentDir(env = process.env) {
   const configPath = getOhMyPiConfigPath(env);
-  if (!existsSync10(configPath))
+  if (!existsSync11(configPath))
     return;
   try {
     rmSync5(configPath, { force: true });
@@ -23673,9 +23937,9 @@ function clearConfiguredOhMyPiAgentDir(env = process.env) {
 }
 
 // src/pi.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync9, rmSync as rmSync6, writeFileSync as writeFileSync7 } from "node:fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync10, rmSync as rmSync6, writeFileSync as writeFileSync7 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { dirname as dirname7, join as join12, resolve as resolve6 } from "node:path";
+import { dirname as dirname7, join as join12, resolve as resolve7 } from "node:path";
 function readTrimmed2(env, name) {
   const raw = env[name];
   if (typeof raw !== "string")
@@ -23694,7 +23958,7 @@ function expandUserPath(pathValue) {
   return trimmed;
 }
 function normalizePath2(pathValue) {
-  return resolve6(expandUserPath(pathValue));
+  return resolve7(expandUserPath(pathValue));
 }
 function readConfigHome3(env) {
   const configured = readTrimmed2(env, "XDG_CONFIG_HOME");
@@ -23705,10 +23969,10 @@ function getPiConfigPath(env = process.env) {
 }
 function readConfiguredPiAgentDir(env = process.env) {
   const configPath = getPiConfigPath(env);
-  if (!existsSync11(configPath))
+  if (!existsSync12(configPath))
     return null;
   try {
-    const raw = JSON.parse(readFileSync9(configPath, "utf-8"));
+    const raw = JSON.parse(readFileSync10(configPath, "utf-8"));
     if (typeof raw !== "object" || raw === null)
       return null;
     const agentDir = Reflect.get(raw, "agentDir");
@@ -23740,7 +24004,7 @@ function listPiAgentDirCandidates(env = process.env) {
 function writeConfiguredPiAgentDir(pathValue, env = process.env) {
   const agentDir = normalizePath2(pathValue);
   const configPath = getPiConfigPath(env);
-  if (readConfiguredPiAgentDir(env) === agentDir && existsSync11(configPath)) {
+  if (readConfiguredPiAgentDir(env) === agentDir && existsSync12(configPath)) {
     return configPath;
   }
   mkdirSync8(dirname7(configPath), { recursive: true });
@@ -23755,7 +24019,7 @@ function writeConfiguredPiAgentDir(pathValue, env = process.env) {
 }
 function clearConfiguredPiAgentDir(env = process.env) {
   const configPath = getPiConfigPath(env);
-  if (!existsSync11(configPath))
+  if (!existsSync12(configPath))
     return;
   try {
     rmSync6(configPath, { force: true });
@@ -23874,10 +24138,10 @@ function isSignetManagedOhMyPiInstall() {
     const extensionsDir = join13(agentDir, "extensions");
     for (const filename of [OH_MY_PI_MANAGED_EXTENSION_FILENAME, OH_MY_PI_LEGACY_MANAGED_EXTENSION_FILENAME]) {
       const extensionPath = join13(extensionsDir, filename);
-      if (!existsSync12(extensionPath))
+      if (!existsSync13(extensionPath))
         continue;
       try {
-        const content = readFileSync10(extensionPath, "utf8");
+        const content = readFileSync11(extensionPath, "utf8");
         if (content.includes(OH_MY_PI_MANAGED_MARKER))
           return true;
       } catch {}
@@ -23890,10 +24154,10 @@ function isSignetManagedPiInstall() {
     const extensionsDir = join13(agentDir, "extensions");
     for (const filename of [PI_MANAGED_EXTENSION_FILENAME, PI_LEGACY_MANAGED_EXTENSION_FILENAME]) {
       const extensionPath = join13(extensionsDir, filename);
-      if (!existsSync12(extensionPath))
+      if (!existsSync13(extensionPath))
         continue;
       try {
-        const content = readFileSync10(extensionPath, "utf8");
+        const content = readFileSync11(extensionPath, "utf8");
         if (content.includes(PI_MANAGED_MARKER))
           return true;
       } catch {}
@@ -23913,15 +24177,15 @@ function resolveKimiHomePath() {
     return legacyOverride;
   const currentHome = join13(userHome(), ".kimi");
   const legacyHome = join13(userHome(), ".kimi-code");
-  if (existsSync12(currentHome))
+  if (existsSync13(currentHome))
     return currentHome;
-  if (existsSync12(legacyHome))
+  if (existsSync13(legacyHome))
     return legacyHome;
   return currentHome;
 }
 function isBinaryOnPath(bin) {
   const separator = process.platform === "win32" ? ";" : ":";
-  return (process.env.PATH ?? "").split(separator).some((directory) => directory.length > 0 && existsSync12(join13(directory, bin)));
+  return (process.env.PATH ?? "").split(separator).some((directory) => directory.length > 0 && existsSync13(join13(directory, bin)));
 }
 var HERMES_PROFILE_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 function resolveHermesHomePath() {
@@ -23955,11 +24219,11 @@ function hermesAgentCandidateDirs() {
 }
 function resolveHermesRepoPath() {
   const hermesRepo = process.env.HERMES_REPO?.trim();
-  if (hermesRepo && existsSync12(join13(hermesRepo, "plugins", "memory"))) {
+  if (hermesRepo && existsSync13(join13(hermesRepo, "plugins", "memory"))) {
     return hermesRepo;
   }
   for (const base of hermesAgentCandidateDirs()) {
-    if (existsSync12(join13(base, "plugins", "memory")))
+    if (existsSync13(join13(base, "plugins", "memory")))
       return base;
   }
   try {
@@ -23970,7 +24234,7 @@ function resolveHermesRepoPath() {
     }).trim();
     if (hermesPath) {
       const repoDir = dirname8(realpathSync(hermesPath));
-      if (existsSync12(join13(repoDir, "plugins", "memory")))
+      if (existsSync13(join13(repoDir, "plugins", "memory")))
         return repoDir;
     }
   } catch {}
@@ -23981,7 +24245,7 @@ function resolveHermesRepoPluginPath() {
   const hermesRepo = resolveHermesRepoPath();
   if (hermesRepo !== null) {
     const candidate = join13(hermesRepo, pluginFile);
-    if (existsSync12(candidate))
+    if (existsSync13(candidate))
       return candidate;
   }
   return null;
@@ -23990,13 +24254,13 @@ function detectExistingSetup(basePath) {
   const identityFileNames = Object.values(IDENTITY_FILES).map((spec) => spec.path);
   const foundFiles = [];
   for (const fileName of identityFileNames) {
-    if (existsSync12(join13(basePath, fileName))) {
+    if (existsSync13(join13(basePath, fileName))) {
       foundFiles.push(fileName);
     }
   }
   const memoryDir = join13(basePath, "memory");
   let memoryLogCount = 0;
-  if (existsSync12(memoryDir)) {
+  if (existsSync13(memoryDir)) {
     try {
       const files = readdirSync5(memoryDir);
       memoryLogCount = files.filter((f2) => f2.endsWith(".md") && !f2.startsWith("TEMPLATE")).length;
@@ -24005,27 +24269,27 @@ function detectExistingSetup(basePath) {
   const home = homedir9();
   return {
     basePath,
-    agentsDir: existsSync12(basePath),
-    agentYaml: existsSync12(join13(basePath, "agent.yaml")),
-    agentsMd: existsSync12(join13(basePath, "AGENTS.md")),
-    configYaml: existsSync12(join13(basePath, "config.yaml")),
-    memoryDb: existsSync12(join13(basePath, "memory", "memories.db")),
+    agentsDir: existsSync13(basePath),
+    agentYaml: existsSync13(join13(basePath, "agent.yaml")),
+    agentsMd: existsSync13(join13(basePath, "AGENTS.md")),
+    configYaml: existsSync13(join13(basePath, "config.yaml")),
+    memoryDb: existsSync13(join13(basePath, "memory", "memories.db")),
     identityFiles: foundFiles,
-    hasMemoryDir: existsSync12(memoryDir),
+    hasMemoryDir: existsSync13(memoryDir),
     memoryLogCount,
-    hasClawdhub: existsSync12(join13(basePath, ".clawdhub", "lock.json")),
-    hasClaudeSkills: existsSync12(join13(home, ".claude", "skills")),
+    hasClawdhub: existsSync13(join13(basePath, ".clawdhub", "lock.json")),
+    hasClaudeSkills: existsSync13(join13(home, ".claude", "skills")),
     harnesses: {
-      claudeCode: existsSync12(join13(home, ".claude", "settings.json")),
-      openclaw: existsSync12(join13(home, ".openclaw", "openclaw.json")) || existsSync12(join13(home, ".clawdbot", "clawdbot.json")),
-      opencode: existsSync12(join13(home, ".config", "opencode", "config.json")),
-      forge: existsSync12(join13(home, ".forge", ".mcp.json")) || existsSync12(join13(home, "forge", ".mcp.json")) || existsSync12(join13(home, ".forge", ".forge.toml")) || existsSync12(join13(home, "forge", ".forge.toml")),
-      codex: existsSync12(join13(home, ".codex", "config.toml")) || existsSync12(join13(home, ".config", "signet", "bin", "codex")),
-      kimi: existsSync12(join13(resolveKimiHomePath(), "config.toml")) || existsSync12(join13(home, ".kimi-code", "config.toml")) || isBinaryOnPath("kimi"),
-      ohMyPi: isSignetManagedOhMyPiInstall() || existsSync12(resolveOhMyPiAgentDir()),
-      pi: isSignetManagedPiInstall() || existsSync12(resolvePiAgentDir()),
+      claudeCode: existsSync13(join13(home, ".claude", "settings.json")),
+      openclaw: existsSync13(join13(home, ".openclaw", "openclaw.json")) || existsSync13(join13(home, ".clawdbot", "clawdbot.json")),
+      opencode: existsSync13(join13(home, ".config", "opencode", "config.json")),
+      forge: existsSync13(join13(home, ".forge", ".mcp.json")) || existsSync13(join13(home, "forge", ".mcp.json")) || existsSync13(join13(home, ".forge", ".forge.toml")) || existsSync13(join13(home, "forge", ".forge.toml")),
+      codex: existsSync13(join13(home, ".codex", "config.toml")) || existsSync13(join13(home, ".config", "signet", "bin", "codex")),
+      kimi: existsSync13(join13(resolveKimiHomePath(), "config.toml")) || existsSync13(join13(home, ".kimi-code", "config.toml")) || isBinaryOnPath("kimi"),
+      ohMyPi: isSignetManagedOhMyPiInstall() || existsSync13(resolveOhMyPiAgentDir()),
+      pi: isSignetManagedPiInstall() || existsSync13(resolvePiAgentDir()),
       hermesAgent: resolveHermesRepoPath() !== null,
-      gemini: existsSync12(join13(home, ".gemini", "settings.json"))
+      gemini: existsSync13(join13(home, ".gemini", "settings.json"))
     }
   };
 }
@@ -24033,9 +24297,9 @@ async function loadIdentityFiles(basePath) {
   const result = {};
   for (const [key, spec] of Object.entries(IDENTITY_FILES)) {
     const filePath = join13(basePath, spec.path);
-    if (existsSync12(filePath)) {
+    if (existsSync13(filePath)) {
       try {
-        const content = readFileSync10(filePath, "utf-8");
+        const content = readFileSync11(filePath, "utf-8");
         const stats = statSync7(filePath);
         result[key] = {
           path: spec.path,
@@ -24058,9 +24322,9 @@ function loadIdentityFilesSync(basePath) {
   const result = {};
   for (const [key, spec] of Object.entries(IDENTITY_FILES)) {
     const filePath = join13(basePath, spec.path);
-    if (existsSync12(filePath)) {
+    if (existsSync13(filePath)) {
       try {
-        const content = readFileSync10(filePath, "utf-8");
+        const content = readFileSync11(filePath, "utf-8");
         const stats = statSync7(filePath);
         result[key] = {
           path: spec.path,
@@ -24084,7 +24348,7 @@ function hasValidIdentity(basePath) {
   if (mode !== "managed")
     return true;
   for (const path of resolveRequiredIdentityPaths(basePath)) {
-    if (!existsSync12(join13(basePath, path))) {
+    if (!existsSync13(join13(basePath, path))) {
       return false;
     }
   }
@@ -24096,7 +24360,7 @@ function getMissingIdentityFiles(basePath) {
     return [];
   const missing = [];
   for (const path of resolveRequiredIdentityPaths(basePath)) {
-    if (!existsSync12(join13(basePath, path))) {
+    if (!existsSync13(join13(basePath, path))) {
       missing.push(path);
     }
   }
@@ -24105,10 +24369,10 @@ function getMissingIdentityFiles(basePath) {
 function resolveRequiredIdentityPaths(basePath) {
   const legacyRequired = () => REQUIRED_IDENTITY_KEYS.map((key) => IDENTITY_FILES[key].path);
   const agentYaml = join13(basePath, "agent.yaml");
-  if (!existsSync12(agentYaml))
+  if (!existsSync13(agentYaml))
     return legacyRequired();
   try {
-    const config = parseSimpleYaml(readFileSync10(agentYaml, "utf-8"));
+    const config = parseSimpleYaml(readFileSync11(agentYaml, "utf-8"));
     const identity = readRecord(readRecord(config).identity);
     const configured = readIdentityEntryList(readRecord(identity.startup).load);
     if (configured.length > 0)
@@ -24166,10 +24430,10 @@ function resolveIdentityModeFromConfig(config) {
 }
 function loadIdentityMode(agentsDir) {
   const agentYaml = join13(agentsDir, "agent.yaml");
-  if (!existsSync12(agentYaml))
+  if (!existsSync13(agentYaml))
     return "managed";
   try {
-    return resolveIdentityModeFromConfig(parseSimpleYaml(readFileSync10(agentYaml, "utf-8")));
+    return resolveIdentityModeFromConfig(parseSimpleYaml(readFileSync11(agentYaml, "utf-8")));
   } catch {
     return "managed";
   }
@@ -24221,10 +24485,10 @@ function identityHeaderFor(path, role) {
 }
 function resolveStartupIdentityFiles(agentsDir) {
   const agentYaml = join13(agentsDir, "agent.yaml");
-  if (!existsSync12(agentYaml))
+  if (!existsSync13(agentYaml))
     return STATIC_BUDGETS.map(({ file, budget }) => ({ path: file, budget }));
   try {
-    const config = parseSimpleYaml(readFileSync10(agentYaml, "utf-8"));
+    const config = parseSimpleYaml(readFileSync11(agentYaml, "utf-8"));
     if (!identityModeReadsFiles(resolveIdentityModeFromConfig(config)))
       return [];
     const identity = readRecord(config.identity);
@@ -24241,11 +24505,11 @@ function resolveStartupIdentityFiles(agentsDir) {
 }
 function resolveSpecialIdentityFiles(agentsDir, kind) {
   const agentYaml = join13(agentsDir, "agent.yaml");
-  if (!existsSync12(agentYaml)) {
+  if (!existsSync13(agentYaml)) {
     return IDENTITY_PRESETS.minimal.special.filter((entry) => entry.kind === kind);
   }
   try {
-    const config = parseSimpleYaml(readFileSync10(agentYaml, "utf-8"));
+    const config = parseSimpleYaml(readFileSync11(agentYaml, "utf-8"));
     if (!identityModeReadsFiles(resolveIdentityModeFromConfig(config)))
       return [];
     const identity = readRecord(config.identity);
@@ -24282,17 +24546,17 @@ function resolvePromptSubmitTimeoutMs(raw) {
   return ms;
 }
 function readStaticIdentity(agentsDir, status = STATIC_IDENTITY_OFFLINE_STATUS) {
-  if (!existsSync12(agentsDir))
+  if (!existsSync13(agentsDir))
     return null;
   if (!identityModeReadsFiles(loadIdentityMode(agentsDir)))
     return null;
   const parts = [];
   for (const entry of resolveStartupIdentityFiles(agentsDir)) {
     const path = join13(agentsDir, entry.path);
-    if (!existsSync12(path))
+    if (!existsSync13(path))
       continue;
     try {
-      const raw = readFileSync10(path, "utf-8").trim();
+      const raw = readFileSync11(path, "utf-8").trim();
       if (!raw)
         continue;
       const budget = entry.budget ?? STATIC_BUDGETS.find((candidate) => candidate.file === entry.path)?.budget ?? 4000;
@@ -24327,7 +24591,7 @@ function summarizeIdentity(identity) {
 `);
 }
 // src/agents.ts
-import { existsSync as existsSync13, mkdirSync as mkdirSync9, readdirSync as readdirSync6, writeFileSync as writeFileSync8 } from "node:fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync9, readdirSync as readdirSync6, writeFileSync as writeFileSync8 } from "node:fs";
 import { join as join14 } from "node:path";
 function resolveAgentMemoryPolicy(readPolicy, policyGroup) {
   if (readPolicy !== "isolated" && readPolicy !== "shared" && readPolicy !== "group") {
@@ -24354,22 +24618,22 @@ var IDENTITY_FILES2 = [
 ];
 function discoverAgents(agentsDir) {
   const root = join14(agentsDir, "agents");
-  if (!existsSync13(root))
+  if (!existsSync14(root))
     return [];
   return readdirSync6(root, { withFileTypes: true }).filter((d2) => d2.isDirectory()).map((d2) => ({ name: d2.name }));
 }
 function scaffoldAgent(name, agentsDir) {
   const dir = join14(agentsDir, "agents", name);
-  if (!existsSync13(dir))
+  if (!existsSync14(dir))
     mkdirSync9(dir, { recursive: true });
   const soul = join14(dir, "SOUL.md");
-  if (!existsSync13(soul))
+  if (!existsSync14(soul))
     writeFileSync8(soul, `# Soul
 
 Add ${name}'s personality here.
 `);
   const identity = join14(dir, "IDENTITY.md");
-  if (!existsSync13(identity))
+  if (!existsSync14(identity))
     writeFileSync8(identity, `# Identity
 
 name: ${name}
@@ -24381,9 +24645,9 @@ function getAgentIdentityFiles(name, agentsDir) {
   for (const file of IDENTITY_FILES2) {
     const specific = join14(agentDir, file);
     const fallback = join14(agentsDir, file);
-    if (existsSync13(specific))
+    if (existsSync14(specific))
       result[file] = specific;
-    else if (existsSync13(fallback))
+    else if (existsSync14(fallback))
       result[file] = fallback;
   }
   return result;
@@ -24431,12 +24695,12 @@ function resolveAgentSkills(agentDef, allSkills) {
   return allSkills.filter((s2) => allowed.has(s2));
 }
 // src/skills.ts
-import { existsSync as existsSync15, mkdirSync as mkdirSync11, readFileSync as readFileSync11, readdirSync as readdirSync8, statSync as statSync8, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync16, mkdirSync as mkdirSync11, readFileSync as readFileSync12, readdirSync as readdirSync8, statSync as statSync8, writeFileSync as writeFileSync9 } from "node:fs";
 import { join as join16 } from "node:path";
 import { homedir as homedir10 } from "node:os";
 
 // src/symlinks.ts
-import { existsSync as existsSync14, lstatSync, mkdirSync as mkdirSync10, readdirSync as readdirSync7, symlinkSync, unlinkSync as unlinkSync2 } from "node:fs";
+import { existsSync as existsSync15, lstatSync, mkdirSync as mkdirSync10, readdirSync as readdirSync7, symlinkSync, unlinkSync as unlinkSync2 } from "node:fs";
 import { join as join15 } from "node:path";
 function linkDirSync(target, path) {
   const type = process.platform === "win32" ? "junction" : "dir";
@@ -24448,14 +24712,14 @@ function symlinkSkills(sourceDir, targetDir, options = {}) {
     skipped: [],
     errors: []
   };
-  if (!existsSync14(sourceDir)) {
+  if (!existsSync15(sourceDir)) {
     return result;
   }
   const targetParent = join15(targetDir, "..");
-  if (!existsSync14(targetParent)) {
+  if (!existsSync15(targetParent)) {
     mkdirSync10(targetParent, { recursive: true });
   }
-  if (!existsSync14(targetDir)) {
+  if (!existsSync15(targetDir)) {
     mkdirSync10(targetDir, { recursive: true });
   }
   let entries;
@@ -24512,10 +24776,10 @@ function symlinkSkills(sourceDir, targetDir, options = {}) {
   return result;
 }
 function symlinkDir(src, dest, options = {}) {
-  if (!existsSync14(src)) {
+  if (!existsSync15(src)) {
     return false;
   }
-  if (existsSync14(dest)) {
+  if (existsSync15(dest)) {
     try {
       const stat = lstatSync(dest);
       if (stat.isSymbolicLink()) {
@@ -24544,11 +24808,11 @@ function symlinkDir(src, dest, options = {}) {
 var home = homedir10();
 function loadClawdhubLock(basePath) {
   const lockPath = join16(basePath, ".clawdhub", "lock.json");
-  if (!existsSync15(lockPath)) {
+  if (!existsSync16(lockPath)) {
     return null;
   }
   try {
-    const content = readFileSync11(lockPath, "utf-8");
+    const content = readFileSync12(lockPath, "utf-8");
     return JSON.parse(content);
   } catch {
     return null;
@@ -24557,10 +24821,10 @@ function loadClawdhubLock(basePath) {
 function symlinkClaudeSkills(basePath) {
   const claudeSkillsDir = join16(home, ".claude", "skills");
   const targetSkillsDir = join16(basePath, "skills");
-  if (!existsSync15(claudeSkillsDir)) {
+  if (!existsSync16(claudeSkillsDir)) {
     return { symlinked: 0, skills: [] };
   }
-  if (!existsSync15(targetSkillsDir)) {
+  if (!existsSync16(targetSkillsDir)) {
     mkdirSync11(targetSkillsDir, { recursive: true });
   }
   const symlinkedSkills = [];
@@ -24585,7 +24849,7 @@ function symlinkClaudeSkills(basePath) {
 function writeRegistry(basePath, registry) {
   const skillsDir = join16(basePath, "skills");
   const registryPath = join16(skillsDir, "registry.json");
-  if (!existsSync15(skillsDir)) {
+  if (!existsSync16(skillsDir)) {
     mkdirSync11(skillsDir, { recursive: true });
   }
   writeFileSync9(registryPath, JSON.stringify(registry, null, 2), "utf-8");
@@ -24624,7 +24888,7 @@ async function unifySkills(basePath, config = {}) {
     }
   }
   const claudeResult = symlinkClaudeSkills(basePath);
-  if (claudeResult.symlinked > 0 || existsSync15(join16(home, ".claude", "skills"))) {
+  if (claudeResult.symlinked > 0 || existsSync16(join16(home, ".claude", "skills"))) {
     registry.sources.push({
       type: "claude-code",
       path: join16(home, ".claude", "skills")
@@ -24645,7 +24909,7 @@ async function unifySkills(basePath, config = {}) {
   }
   if (config.registries) {
     for (const reg of config.registries) {
-      if (!existsSync15(reg.path)) {
+      if (!existsSync16(reg.path)) {
         continue;
       }
       registry.sources.push({
@@ -24668,7 +24932,7 @@ async function unifySkills(basePath, config = {}) {
           }
           if (reg.symlink) {
             const targetPath = join16(basePath, "skills", entry);
-            if (!existsSync15(join16(basePath, "skills"))) {
+            if (!existsSync16(join16(basePath, "skills"))) {
               mkdirSync11(join16(basePath, "skills"), { recursive: true });
             }
             if (symlinkDir(entryPath, targetPath)) {
@@ -24785,7 +25049,7 @@ function parseTranscriptSkills(content) {
   return { records, skipped };
 }
 // src/import.ts
-import { existsSync as existsSync16, readFileSync as readFileSync12, readdirSync as readdirSync9 } from "node:fs";
+import { existsSync as existsSync17, readFileSync as readFileSync13, readdirSync as readdirSync9 } from "node:fs";
 import { join as join17 } from "node:path";
 var DATE_FILENAME_PATTERN = /^(\d{4}-\d{2}-\d{2})\.md$/;
 function estimateTokens(text) {
@@ -24994,7 +25258,7 @@ function importMemoryLogs(basePath, db) {
     errors: []
   };
   const memoryDir = join17(basePath, "memory");
-  if (!existsSync16(memoryDir)) {
+  if (!existsSync17(memoryDir)) {
     result.errors.push(`Memory directory not found: ${memoryDir}`);
     return result;
   }
@@ -25016,7 +25280,7 @@ function importMemoryLogs(basePath, db) {
     }
     let content;
     try {
-      content = readFileSync12(filePath, "utf-8");
+      content = readFileSync13(filePath, "utf-8");
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       result.errors.push(`Failed to read file ${file}: ${message}`);
@@ -26225,7 +26489,7 @@ function resolveRoutingDecision(config, request, runtimeSnapshot) {
   });
 }
 // src/pipeline-pause.ts
-import { existsSync as existsSync17, readFileSync as readFileSync13, writeFileSync as writeFileSync10 } from "node:fs";
+import { existsSync as existsSync18, readFileSync as readFileSync14, writeFileSync as writeFileSync10 } from "node:fs";
 import { join as join18 } from "node:path";
 var PIPELINE_CONFIG_FILES = ["agent.yaml", "AGENT.yaml", "config.yaml"];
 function isRecord10(value) {
@@ -26234,7 +26498,7 @@ function isRecord10(value) {
 function findPipelineConfigFile(dir) {
   for (const name of PIPELINE_CONFIG_FILES) {
     const file = join18(dir, name);
-    if (existsSync17(file)) {
+    if (existsSync18(file)) {
       return file;
     }
   }
@@ -26245,7 +26509,7 @@ function readCfg(dir) {
   if (file === null) {
     return { file: null, cfg: null };
   }
-  const parsed = parseSimpleYaml(readFileSync13(file, "utf-8"));
+  const parsed = parseSimpleYaml(readFileSync14(file, "utf-8"));
   return { file, cfg: isRecord10(parsed) ? parsed : {} };
 }
 function readMem(cfg) {
@@ -26298,7 +26562,7 @@ function setPipelinePaused(dir, paused) {
 }
 // src/package-manager.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync18, readFileSync as readFileSync14 } from "node:fs";
+import { existsSync as existsSync19, readFileSync as readFileSync15 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { join as join19 } from "node:path";
 
@@ -26401,10 +26665,10 @@ function readConfiguredPackageManager(agentsDir) {
     return null;
   const configPaths = [join19(agentsDir, "agent.yaml"), join19(agentsDir, "AGENT.yaml"), join19(agentsDir, "config.yaml")];
   for (const path of configPaths) {
-    if (!existsSync18(path))
+    if (!existsSync19(path))
       continue;
     try {
-      const yaml = parseSimpleYaml(readFileSync14(path, "utf-8"));
+      const yaml = parseSimpleYaml(readFileSync15(path, "utf-8"));
       const install = yaml.install;
       const source = install?.source;
       if (source === "fallback")
@@ -26517,7 +26781,7 @@ function resolveGlobalPackagePath(family, packageName) {
     switch (family) {
       case "bun": {
         const bunGlobal = join19(process.env.BUN_INSTALL ?? join19(homedir12(), ".bun"), "install", "global", "node_modules", packageName);
-        if (existsSync18(bunGlobal))
+        if (existsSync19(bunGlobal))
           return bunGlobal;
         return;
       }
@@ -26529,7 +26793,7 @@ function resolveGlobalPackagePath(family, packageName) {
         });
         if (result.status === 0 && result.stdout.trim()) {
           const candidate = join19(result.stdout.trim(), packageName);
-          if (existsSync18(candidate))
+          if (existsSync19(candidate))
             return candidate;
         }
         return;
@@ -26542,7 +26806,7 @@ function resolveGlobalPackagePath(family, packageName) {
         });
         if (result.status === 0 && result.stdout.trim()) {
           const candidate = join19(result.stdout.trim(), packageName);
-          if (existsSync18(candidate))
+          if (existsSync19(candidate))
             return candidate;
         }
         return;
@@ -26562,12 +26826,12 @@ function resolveGlobalPackagePath(family, packageName) {
           });
           if (result.status === 0 && result.stdout.trim()) {
             const candidate = join19(result.stdout.trim(), "node_modules", packageName);
-            if (existsSync18(candidate))
+            if (existsSync19(candidate))
               return candidate;
           }
         } else {
           const berryGlobal = join19(process.env.YARN_GLOBAL_FOLDER ?? join19(homedir12(), ".yarn", "berry", "global"), "node_modules", packageName);
-          if (existsSync18(berryGlobal))
+          if (existsSync19(berryGlobal))
             return berryGlobal;
         }
         return;
@@ -26590,7 +26854,7 @@ function getGlobalInstallCommand(family, packageName) {
   }
 }
 // src/signet-installation.ts
-import { existsSync as existsSync19, realpathSync as realpathSync2 } from "node:fs";
+import { existsSync as existsSync20, realpathSync as realpathSync2 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { posix as posix2, win32 as win322 } from "node:path";
 var PACKAGE_MANAGERS = ["npm", "pnpm", "bun", "yarn"];
@@ -26653,7 +26917,7 @@ function detectSignetInstallations(options = {}) {
   const home2 = options.home ?? homedir13();
   const platform3 = options.platform ?? process.platform;
   const activeExecutablePath = options.execPath ?? process.execPath;
-  const pathExists = options.exists ?? existsSync19;
+  const pathExists = options.exists ?? existsSync20;
   const realpath = options.realpath ?? realpathSync2;
   const activeRealPath = safeRealpath(activeExecutablePath, platform3, realpath);
   const signetDir = env.SIGNET_DIR?.trim();
@@ -26823,8 +27087,10 @@ export {
   readConfiguredPiAgentDir,
   readConfiguredOhMyPiAgentDir,
   putLocalSecret,
+  preflightWorkspace,
   partitionRecallRows,
   parseYamlDocument,
+  parseWebSettings,
   parseTranscriptSkills,
   parseSoul,
   parseSimpleYaml,
@@ -26843,6 +27109,7 @@ export {
   normalizeWorkspacePath,
   normalizeStructuredMemoryPayload,
   normalizeSecretExecTimeoutMs,
+  normalizePublicWebUrl,
   normalizePromptContext,
   normalizeNetworkMode,
   normalizeLoopbackHost,
@@ -26908,6 +27175,7 @@ export {
   generateMemory,
   generateManifest,
   formatYaml,
+  formatWorkspacePreflightError,
   formatRecallText,
   findSqliteVecExtension,
   findPipelineConfigFile,
@@ -26951,6 +27219,7 @@ export {
   assessMemoryContent,
   applyRecallScoreThreshold,
   allTargetRefs,
+  addWebSource,
   addObsidianSource,
   addImportedSource,
   addGitHubSource,