@symerian/symi 2.0.15 → 2.0.17

package/dist/extensionAPI.js

@@ -7,24 +7,24 @@ import { a as resolveAgentIdentity } from "./reply-prefix-K_J_nfgx.js";
 import "./github-copilot-token-BbsJ0Qbo.js";
 import "./env-CQ_DQOwT.js";
 import "./tokens-Cn6drXx2.js";
-import { D as resolveAgentTimeoutMs, t as runEmbeddedPiAgent } from "./pi-embedded-9wEA_0mu.js";
+import { D as resolveAgentTimeoutMs, t as runEmbeddedPiAgent } from "./pi-embedded-C6BUGEuF.js";
 import "./plugins-71oIavrF.js";
 import "./accounts-DDEyGwby.js";
 import "./bindings-DYVakimr.js";
-import "./send-D0dzPf6g.js";
-import "./send-De_WCeGZ.js";
-import "./deliver-CkjSfucB.js";
+import "./send-CZ18Xq5n.js";
+import "./send-BbV4XqMl.js";
+import "./deliver-D8xILUUI.js";
 import "./diagnostic-D0xmLpej.js";
 import "./diagnostic-session-state-C1vRJs5w.js";
 import "./accounts-8zZqL37v.js";
-import "./send-mi3NHnwI.js";
+import "./send-CltKx_vS.js";
 import "./image-ops-ByaQt43P.js";
 import "./pi-model-discovery-j5tVLINv.js";
 import "./message-channel-BQINJQIT.js";
-import { G as saveSessionStore, H as loadSessionStore } from "./pi-embedded-helpers-BmYZe8o8.js";
-import "./config-BjGo9GnL.js";
+import { G as saveSessionStore, H as loadSessionStore } from "./pi-embedded-helpers-BDwdFGX-.js";
+import "./config-ClXqj_D1.js";
 import "./manifest-registry-D-mTF1cj.js";
-import "./chrome-B_zrSLce.js";
+import "./chrome-1cQdPKbv.js";
 import "./skills-BNpGMnp-.js";
 import "./redact-1NGYV_8p.js";
 import "./errors-CPfngF0S.js";
@@ -34,8 +34,8 @@ import "./thinking-W85Rb32m.js";
 import "./accounts-DImOt9jX.js";
 import { n as resolveSessionFilePath, s as resolveStorePath } from "./paths-DkMamAQ-.js";
 import "./tool-images-ChC2CXaN.js";
-import "./image-CSeAnozE.js";
-import "./manager-oiX42wby.js";
+import "./image-DrkD-6sg.js";
+import "./manager-oQJvFR6J.js";
 import "./gemini-auth-K6vg8B5c.js";
 import "./sqlite-BNh23mUR.js";
 import "./retry-QGp0jvVi.js";
@@ -47,15 +47,15 @@ import "./ir-F0moAwIl.js";
 import "./render-B1VqYyvo.js";
 import "./commands-registry-Copoizgv.js";
 import "./skill-commands-DWcJOIzP.js";
-import "./runner-CJJY2r19.js";
+import "./runner-CTglx_CV.js";
 import "./fetch-DtLn7YU3.js";
 import "./channel-activity-D9q-fIPB.js";
 import "./tables-COnZ169v.js";
-import "./send-D16XtYvC.js";
+import "./send-DVLEgg9H.js";
 import "./outbound-attachment-entfcjDW.js";
-import "./send-Do-0Kcmv.js";
+import "./send-Dm4UYQsf.js";
 import "./resolve-route-We7ViAbg.js";
 import "./proxy-BaSHbVlA.js";
-import "./replies-DqdOBkTB.js";
+import "./replies-Dzc6eCFS.js";
 
 export { DEFAULT_MODEL, DEFAULT_PROVIDER, ensureAgentWorkspace, loadSessionStore, resolveAgentDir, resolveAgentIdentity, resolveAgentTimeoutMs, resolveAgentWorkspaceDir, resolveSessionFilePath, resolveStorePath, resolveThinkingDefault, runEmbeddedPiAgent, saveSessionStore };

package/dist/{gateway-cli-CwO3878F.js → gateway-cli-Bs96hk7L.js}

@@ -13,37 +13,37 @@ import { r as isPathInsideWithRealpath } from "./scan-paths-ppKrtZ9U.js";
 import { r as buildWorkspaceSkillSnapshot } from "./skills-hAdgFdrv.js";
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-Czr39pxG.js";
 import "./skills-status-DKXJ-tbi.js";
-import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-amjzHiWZ.js";
-import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-LeVQns9-.js";
-import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-BQiCOxB6.js";
+import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-DehS9e5w.js";
+import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-DMBZpU6X.js";
+import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-BKOIc76f.js";
 import { _ as normalizeGatewayClientMode, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient } from "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
 import { t as safeEqualSecret } from "./secret-equal-CbntzRkh.js";
 import { a as isValidIPv4, c as resolveClientIp, d as resolveHostName, f as rawDataToString, i as isTrustedProxyAddress, l as resolveGatewayBindHost, n as isLoopbackHost, o as normalizeHostHeader, t as isLoopbackAddress, u as resolveGatewayListenHosts } from "./net-DZ5Ayk-W.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-Cmumpn76.js";
-import { $ as runCliAgent, An as extractImageContentFromSource, At as normalizePayloadToSystemText, Bt as getHookType, C as sleepWithAbort, Ct as normalizeHttpWebhookUrl, Dn as DEFAULT_INPUT_MAX_REDIRECTS, Dt as normalizeOptionalAgentId, En as DEFAULT_INPUT_IMAGE_MIMES, Et as inferLegacyName, Ft as stripLegacyDeliveryFields, G as getTotalPendingReplies, Gt as deferGatewayRestartUntilIdle, Jt as markGatewaySigusr1RestartHandled, Kt as emitGatewayRestart, Mn as resolveInputFileLimits, Mt as migrateLegacyCronPayload, Nt as buildDeliveryFromLegacyPayload, O as createOutboundSendDeps, On as DEFAULT_INPUT_TIMEOUT_MS, Ot as normalizeOptionalSessionKey, Pn as resolveAgentTimeoutMs, Pt as hasLegacyDeliveryHints, Q as setCliSessionId, R as buildHistoryContextFromEntries, Rt as buildSafeExternalPrompt, S as computeBackoff, Sr as registerAgentRunContext, Tn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Vt as isExternalHookSession, Wt as consumeGatewaySigusr1RestartAuthorization, X as resolveCronStyleNow, Xt as setGatewaySigusr1RestartPolicy, Z as getCliSessionId, Zt as setPreRestartDeferralCheck, _ as loadSymiPlugins, _r as stripHeartbeatToken, b as readJsonBodyWithLimit, br as getAgentRunContext, bt as summarizeRestartSentinel, c as runEmbeddedPiAgent, cr as getTotalQueueSize, dr as waitForActiveTasks, f as applyToolPolicyPipeline, fr as CommandLane, ft as resetDirectoryCache, gt as consumeRestartSentinel, h as getPluginToolMeta, j as resolveAgentAvatar, jn as normalizeMimeList, jt as normalizeRequiredName, k as createDefaultDeps, kn as extractFileContentFromSource, kt as normalizeOptionalText, ln as requestHeartbeatNow, lr as resetAllLanes, lt as resolveOutboundTarget, mt as runWithModelFallback, n as initSubagentRegistry, nt as readLatestAssistantReply, o as runSubagentAnnounceFlow, or as getActiveTaskCount, ot as resolveOutboundSessionRoute, p as buildDefaultToolPolicyPipelineSteps, pr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, qt as isGatewaySigusr1RestartExternallyAllowed, r as listDescendantRunsForRequester, rt as resolveAnnounceTargetFromKey, t as countActiveDescendantRuns, tt as createSymiTools, u as getActiveEmbeddedRunCount, ur as setCommandLaneConcurrency, ut as resolveSessionDeliveryTarget, vr as clearAgentRunContext, vt as formatRestartSentinelMessage, w as agentCommand, x as requestBodyErrorToText, xn as enqueueSystemEvent, xr as onAgentEvent, y as handleSlackHttpRequest, yr as emitAgentEvent, zt as detectSuspiciousPatterns } from "./subagent-registry-BR2Qhqjf.js";
-import { D as resolveSessionResetPolicy, F as resolveMainSessionKey, H as cleanStaleLockFiles, I as resolveMainSessionKeyFromConfig, K as mergeDeliveryContext, M as canonicalizeMainSessionAlias, N as resolveAgentMainSessionKey, T as evaluateSessionFreshness, W as deliveryContextFromSession, d as updateSessionStore, n as parseSessionThreadInfo, o as loadSessionStore } from "./sessions-DJAxaVI7.js";
+import { $ as runCliAgent, An as extractImageContentFromSource, At as normalizePayloadToSystemText, Bt as getHookType, C as sleepWithAbort, Ct as normalizeHttpWebhookUrl, Dn as DEFAULT_INPUT_MAX_REDIRECTS, Dt as normalizeOptionalAgentId, En as DEFAULT_INPUT_IMAGE_MIMES, Et as inferLegacyName, Ft as stripLegacyDeliveryFields, G as getTotalPendingReplies, Gt as deferGatewayRestartUntilIdle, Jt as markGatewaySigusr1RestartHandled, Kt as emitGatewayRestart, Mn as resolveInputFileLimits, Mt as migrateLegacyCronPayload, Nt as buildDeliveryFromLegacyPayload, O as createOutboundSendDeps, On as DEFAULT_INPUT_TIMEOUT_MS, Ot as normalizeOptionalSessionKey, Pn as resolveAgentTimeoutMs, Pt as hasLegacyDeliveryHints, Q as setCliSessionId, R as buildHistoryContextFromEntries, Rt as buildSafeExternalPrompt, S as computeBackoff, Sr as registerAgentRunContext, Tn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Vt as isExternalHookSession, Wt as consumeGatewaySigusr1RestartAuthorization, X as resolveCronStyleNow, Xt as setGatewaySigusr1RestartPolicy, Z as getCliSessionId, Zt as setPreRestartDeferralCheck, _ as loadSymiPlugins, _r as stripHeartbeatToken, b as readJsonBodyWithLimit, br as getAgentRunContext, bt as summarizeRestartSentinel, c as runEmbeddedPiAgent, cr as getTotalQueueSize, dr as waitForActiveTasks, f as applyToolPolicyPipeline, fr as CommandLane, ft as resetDirectoryCache, gt as consumeRestartSentinel, h as getPluginToolMeta, j as resolveAgentAvatar, jn as normalizeMimeList, jt as normalizeRequiredName, k as createDefaultDeps, kn as extractFileContentFromSource, kt as normalizeOptionalText, ln as requestHeartbeatNow, lr as resetAllLanes, lt as resolveOutboundTarget, mt as runWithModelFallback, n as initSubagentRegistry, nt as readLatestAssistantReply, o as runSubagentAnnounceFlow, or as getActiveTaskCount, ot as resolveOutboundSessionRoute, p as buildDefaultToolPolicyPipelineSteps, pr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, qt as isGatewaySigusr1RestartExternallyAllowed, r as listDescendantRunsForRequester, rt as resolveAnnounceTargetFromKey, t as countActiveDescendantRuns, tt as createSymiTools, u as getActiveEmbeddedRunCount, ur as setCommandLaneConcurrency, ut as resolveSessionDeliveryTarget, vr as clearAgentRunContext, vt as formatRestartSentinelMessage, w as agentCommand, x as requestBodyErrorToText, xn as enqueueSystemEvent, xr as onAgentEvent, y as handleSlackHttpRequest, yr as emitAgentEvent, zt as detectSuspiciousPatterns } from "./subagent-registry-Ct3GvWVn.js";
+import { D as resolveSessionResetPolicy, F as resolveMainSessionKey, H as cleanStaleLockFiles, I as resolveMainSessionKeyFromConfig, K as mergeDeliveryContext, M as canonicalizeMainSessionAlias, N as resolveAgentMainSessionKey, T as evaluateSessionFreshness, W as deliveryContextFromSession, d as updateSessionStore, n as parseSessionThreadInfo, o as loadSessionStore } from "./sessions-B3nP13Fw.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-Csntmwwn.js";
 import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
 import { n as resolveWhatsAppAccount } from "./accounts-D9ITgITj.js";
 import { t as buildChannelAccountBindings } from "./bindings-DlWb_Kaq.js";
 import "./logging-CFvkxgcX.js";
-import "./send-C7u4_H5t.js";
-import "./send-CYfaZNZ4.js";
-import { r as getMachineDisplayName } from "./with-timeout-Cj_xUxo6.js";
-import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-DONp5mgd.js";
+import "./send-hJthT6M_.js";
+import "./send-BXiiQprI.js";
+import { r as getMachineDisplayName } from "./with-timeout-2zPYOOzh.js";
+import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-CIc_l0o6.js";
 import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-Ci8Xsc_Y.js";
 import "./diagnostic-session-state-CIjIGxEE.js";
 import "./accounts-D1eLj5t8.js";
-import "./send-hNornLoH.js";
+import "./send-CQzO_Tg0.js";
 import { c as detectMime } from "./image-ops-CUkaZz2F.js";
-import "./pi-embedded-helpers-CgxKWHj9.js";
-import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-CbuJolk2.js";
-import "./chrome-BgIDB_SH.js";
+import "./pi-embedded-helpers-Cs0TgOaH.js";
+import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-BpIrSDhl.js";
+import "./chrome-CPwj5x24.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-CbbvYNVw.js";
 import { a as resolveGatewayAuth, c as createAuthRateLimiter, i as isLocalDirectRequest, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-BfDMhFAj.js";
-import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-bMIwnOnH.js";
-import "./routes-BYphcpth.js";
+import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-DbcjnRHG.js";
+import "./routes-B7FWIw81.js";
 import "./redact-B40lik2B.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-Ba_ROWsq.js";
 import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CERgjtot.js";
@@ -57,10 +57,10 @@ import "./accounts-D51FXYdA.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath } from "./paths-DNdWAq7b.js";
 import "./tool-images-CVLISeRT.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-8sKPnzpp.js";
-import "./models-config-Cb41NmVa.js";
+import "./models-config-DT09Fas0.js";
 import { a as resolveAgentIdentity } from "./reply-prefix-BUN71nd5.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-BhnOq4Ev.js";
-import { n as resolveMemorySearchConfig } from "./manager-CYHgFXd8.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-BUoM-v1-.js";
+import { i as resolveMemorySearchConfig } from "./manager-CPQ2pEj3.js";
 import "./gemini-auth-BHSrr2_B.js";
 import "./sqlite-CQGamAhm.js";
 import "./retry-C4Q_VPOo.js";
@@ -73,11 +73,11 @@ import "./ir-D-flMHhr.js";
 import "./render-e7fENCYH.js";
 import { r as isRestartEnabled } from "./commands-CkrIpKCc.js";
 import "./commands-registry-uo2OKqdL.js";
-import "./image-B4LY9KFw.js";
+import "./image-DWOvY8sR.js";
 import "./tool-display-CXwOC-qw.js";
-import { d as registerUnhandledRejectionHandler } from "./runner-BXN4KYDK.js";
-import { n as loadModelCatalog } from "./model-catalog-Dj5pIc1G.js";
-import { o as loadSessionEntry, u as lookupContextTokens } from "./session-utils-Cdv2Qaq2.js";
+import { d as registerUnhandledRejectionHandler } from "./runner-w5reqY02.js";
+import { n as loadModelCatalog } from "./model-catalog-sW2MkIv9.js";
+import { o as loadSessionEntry, u as lookupContextTokens } from "./session-utils-CFvGKxdu.js";
 import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-CWySL97a.js";
 import "./workspace-dirs-CPNL2Acu.js";
 import { a as readChannelAllowFromStoreSync } from "./pairing-store-CicZMhK8.js";
@@ -88,24 +88,24 @@ import { c as hasNonzeroUsage, s as deriveSessionTotalTokens } from "./session-c
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-BXPHPKra.js";
 import "./channel-activity-myOnmDZi.js";
 import "./tables-CXWwq-Md.js";
-import "./control-service-DVFF3PrV.js";
+import "./control-service-CZ8lXYgi.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-CQar2eKe.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-BzfEFyPn.js";
-import "./send-BVw7fCyL.js";
+import "./send-BLT3lTZy.js";
 import "./outbound-attachment-BdnE7M6k.js";
 import "./delivery-queue-CzNZXd1M.js";
-import "./send-BH09HKsX.js";
+import "./send-CRWQglv9.js";
 import "./resolve-route-CjnIuTqX.js";
 import "./proxy-DL3MD6-P.js";
 import { t as formatDocsLink } from "./links-DlWpl9Yv.js";
 import { n as runCommandWithRuntime } from "./cli-utils-CCaEbxAz.js";
 import { t as formatHelpExamples } from "./help-format-B0pWGnZs.js";
 import { n as withProgress } from "./progress-BAHiAaDW.js";
-import "./replies-CTKReSzx.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-CUQrf3zD.js";
+import "./replies-DqyX2Vln.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-BmDQMRZ7.js";
 import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-sIj1ZLt-.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-T6Z5F-_n.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-vws0LV7U.js";
 import { i as onHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-B8TDjqpW.js";
 import { t as ensureSymiCliOnPath } from "./path-env-Bic_wXs9.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-B8QrxStA.js";
@@ -116,34 +116,34 @@ import { t as applyPluginAutoEnable } from "./plugin-auto-enable-D4BRdbII.js";
 import "./install-safe-path-BK8js28D.js";
 import "./skill-scanner-BGWOBqLY.js";
 import "./channels-status-issues-c7qZbYG5.js";
-import "./daemon-runtime-B38pOixq.js";
+import "./daemon-runtime-C1t_OfMD.js";
 import "./runtime-guard-D7waq_Ho.js";
 import "./systemd-DlMdyFDY.js";
 import "./service-Cm9j9WzQ.js";
-import "./lifecycle-core-De5BcVI4.js";
-import "./systemd-hints-Bm2H1erP.js";
+import "./lifecycle-core-CPLYFbS4.js";
+import "./systemd-hints-D_u4AuIu.js";
 import { t as parsePort$1 } from "./parse-port-BQ0_YQqL.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-CFZpc0hg.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-BuOGkn7L.js";
 import "./diagnostics-CS1ov_hH.js";
 import "./table-D01d2GuY.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CsKTEo__.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BtG9rny3.js";
-import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-DKUpFt8z.js";
+import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-FH7mu_3g.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-CA_XIzr_.js";
-import { i as pickGatewaySelfPresence } from "./status-PADx9rG7.js";
-import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-UjXEBnzA.js";
+import { i as pickGatewaySelfPresence } from "./status-DbXRbJqY.js";
+import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-CpbZDInE.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-ZdimP1aU.js";
-import { t as runOnboardingWizard } from "./onboarding-BibGEGIS.js";
-import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-Df9KsV_-.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-8YIzbTM7.js";
+import { t as runOnboardingWizard } from "./onboarding-D-FQIiBn.js";
+import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-56m79WbR.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-9q7Pl5I0.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CzWeiE-Y.js";
-import "./agents.config-yx78oSLx.js";
+import "./agents.config-Bneyaqn6.js";
 import "./dm-policy-shared-BovJdm5T.js";
 import "./node-service-fcZExd22.js";
-import "./status.update-BXs3adtg.js";
+import "./status.update-CbXOcYqG.js";
 import "./skills-install-1ZdwGTnh.js";
-import "./update-runner-DNA7FJa2.js";
+import "./update-runner-DBZOvTzN.js";
 import { t as resolveAgentSessionDirs } from "./session-dirs-DWgIYmAt.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-B51TF6q3.js";
 import { n as forceFreePortAndWait } from "./ports-Dn122MUd.js";
@@ -6390,7 +6390,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.SYMI_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.SYMI_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-DVFF3PrV.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-CZ8lXYgi.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -11557,7 +11557,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-CzNZXd1M.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-DONp5mgd.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CIc_l0o6.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),
@@ -11630,7 +11630,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-BmqwQaCf.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-DFYRIWTO.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,

package/dist/{gateway-cli-DyqK4XZ1.js → gateway-cli-n-kmAuP8.js}

@@ -1,7 +1,7 @@
 import { _ as expandHomePrefix, g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, E as truncateUtf16Safe, H as getLogger, P as setVerbose, R as colorize, S as shortenHomePath, U as getResolvedLoggerSettings, V as getChildLogger, c as ensureDir, t as CONFIG_DIR, y as resolveUserPath, z as isRich } from "./utils-B-0b9bGM.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-EAliFiVK.js";
-import { $ as normalizeOptionalText, $n as getActiveTaskCount, $t as buildSafeExternalPrompt, A as resetDirectoryCache, Ar as resolveInputFileLimits, At as agentCommand, B as consumeRestartSentinel, Cr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Dn as countActiveDescendantRuns, Dr as extractFileContentFromSource, Dt as requestBodyErrorToText, Er as DEFAULT_INPUT_TIMEOUT_MS, Et as readJsonBodyWithLimit, F as isGatewaySigusr1RestartExternallyAllowed, Fn as emitAgentEvent, Gt as setCliSessionId, H as formatRestartSentinelMessage, I as markGatewaySigusr1RestartHandled, In as getAgentRunContext, It as resolveOutboundTarget, Kt as runCliAgent, Ln as onAgentEvent, Lt as resolveSessionDeliveryTarget, M as consumeGatewaySigusr1RestartAuthorization, Mn as runSubagentAnnounceFlow, Mr as resolveAgentTimeoutMs, N as deferGatewayRestartUntilIdle, Nn as readLatestAssistantReply, O as resolveOutboundSessionRoute, On as initSubagentRegistry, Or as extractImageContentFromSource, Ot as computeBackoff, P as emitGatewayRestart, Pn as clearAgentRunContext, Q as normalizeOptionalSessionKey, R as setGatewaySigusr1RestartPolicy, Rn as registerAgentRunContext, Rt as createOutboundSendDeps, S as loadSessionEntry, Tr as DEFAULT_INPUT_MAX_REDIRECTS, Tt as handleSlackHttpRequest, Ut as runWithModelFallback, Vt as createDefaultDeps, W as summarizeRestartSentinel, Wt as getCliSessionId, X as inferLegacyName, Yt as resolveAgentAvatar, Z as normalizeOptionalAgentId, ar as CommandLane, at as stripLegacyDeliveryFields, d as getActiveEmbeddedRunCount, dr as lookupContextTokens, dt as requestHeartbeatNow, en as detectSuspiciousPatterns, et as normalizePayloadToSystemText, g as resolveAnnounceTargetFromKey, gt as loadSymiPlugins, h as createSymiTools, i as resolveCronStyleNow, ir as waitForActiveTasks, it as hasLegacyDeliveryHints, kn as listDescendantRunsForRequester, kr as normalizeMimeList, kt as sleepWithAbort, l as runEmbeddedPiAgent, m as buildDefaultToolPolicyPipelineSteps, mn as getTotalPendingReplies, mt as getPluginToolMeta, nn as isExternalHookSession, nr as resetAllLanes, nt as migrateLegacyCronPayload, or as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, p as applyToolPolicyPipeline, q as normalizeHttpWebhookUrl, rr as setCommandLaneConcurrency, rt as buildDeliveryFromLegacyPayload, sn as buildHistoryContextFromEntries, tn as getHookType, tr as getTotalQueueSize, tt as normalizeRequiredName, ur as stripHeartbeatToken, wr as DEFAULT_INPUT_IMAGE_MIMES, yr as enqueueSystemEvent, z as setPreRestartDeferralCheck } from "./reply-B9o45s3E.js";
+import { $ as normalizeOptionalText, $n as getActiveTaskCount, $t as buildSafeExternalPrompt, A as resetDirectoryCache, Ar as resolveInputFileLimits, At as agentCommand, B as consumeRestartSentinel, Cr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Dn as countActiveDescendantRuns, Dr as extractFileContentFromSource, Dt as requestBodyErrorToText, Er as DEFAULT_INPUT_TIMEOUT_MS, Et as readJsonBodyWithLimit, F as isGatewaySigusr1RestartExternallyAllowed, Fn as emitAgentEvent, Gt as setCliSessionId, H as formatRestartSentinelMessage, I as markGatewaySigusr1RestartHandled, In as getAgentRunContext, It as resolveOutboundTarget, Kt as runCliAgent, Ln as onAgentEvent, Lt as resolveSessionDeliveryTarget, M as consumeGatewaySigusr1RestartAuthorization, Mn as runSubagentAnnounceFlow, Mr as resolveAgentTimeoutMs, N as deferGatewayRestartUntilIdle, Nn as readLatestAssistantReply, O as resolveOutboundSessionRoute, On as initSubagentRegistry, Or as extractImageContentFromSource, Ot as computeBackoff, P as emitGatewayRestart, Pn as clearAgentRunContext, Q as normalizeOptionalSessionKey, R as setGatewaySigusr1RestartPolicy, Rn as registerAgentRunContext, Rt as createOutboundSendDeps, S as loadSessionEntry, Tr as DEFAULT_INPUT_MAX_REDIRECTS, Tt as handleSlackHttpRequest, Ut as runWithModelFallback, Vt as createDefaultDeps, W as summarizeRestartSentinel, Wt as getCliSessionId, X as inferLegacyName, Yt as resolveAgentAvatar, Z as normalizeOptionalAgentId, ar as CommandLane, at as stripLegacyDeliveryFields, d as getActiveEmbeddedRunCount, dr as lookupContextTokens, dt as requestHeartbeatNow, en as detectSuspiciousPatterns, et as normalizePayloadToSystemText, g as resolveAnnounceTargetFromKey, gt as loadSymiPlugins, h as createSymiTools, i as resolveCronStyleNow, ir as waitForActiveTasks, it as hasLegacyDeliveryHints, kn as listDescendantRunsForRequester, kr as normalizeMimeList, kt as sleepWithAbort, l as runEmbeddedPiAgent, m as buildDefaultToolPolicyPipelineSteps, mn as getTotalPendingReplies, mt as getPluginToolMeta, nn as isExternalHookSession, nr as resetAllLanes, nt as migrateLegacyCronPayload, or as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, p as applyToolPolicyPipeline, q as normalizeHttpWebhookUrl, rr as setCommandLaneConcurrency, rt as buildDeliveryFromLegacyPayload, sn as buildHistoryContextFromEntries, tn as getHookType, tr as getTotalQueueSize, tt as normalizeRequiredName, ur as stripHeartbeatToken, wr as DEFAULT_INPUT_IMAGE_MIMES, yr as enqueueSystemEvent, z as setPreRestartDeferralCheck } from "./reply-DyFibFiG.js";
 import { S as parseAgentSessionKey, c as normalizeMainKey, f as toAgentRequestSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, p as toAgentStoreSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey, y as isCronRunSessionKey } from "./session-key-DCt45XZa.js";
 import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { C as createInternalHookEvent, S as clearInternalHooks, T as triggerInternalHook, m as createEmptyPluginRegistry, r as DEFAULT_CHAT_CHANNEL, w as registerInternalHook } from "./registry-Cja8eT7G.js";
@@ -14,26 +14,26 @@ import { t as formatCliCommand } from "./command-format-COaS-S7B.js";
 import "./boolean-BsqeuxE6.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DPCHYPeH.js";
 import { _ as normalizeGatewayClientMode, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient } from "./message-channel-aT-I_DTX.js";
-import "./send-BVZGeP2r.js";
-import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-Dgn_cL29.js";
+import "./send-CC2vm0xU.js";
+import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-BLe0R4JX.js";
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-C4BxOMWX.js";
 import { a as isPathInsideWithRealpath } from "./legacy-names-Be3msDZo.js";
-import { d as registerUnhandledRejectionHandler } from "./runner-C0tJTZmp.js";
-import "./image-DrZEJQwQ.js";
-import "./models-config-u4va9_AO.js";
+import { d as registerUnhandledRejectionHandler } from "./runner-BkANJiWS.js";
+import "./image-DIzd7Gw9.js";
+import "./models-config-BH6-rmtt.js";
 import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-ueCT6VlS.js";
-import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-rMmahr2s.js";
-import "./chrome-D9OwvWm7.js";
+import "./pi-embedded-helpers-jynCNZsb.js";
+import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-DTzJlbvf.js";
+import "./chrome-CUsfMVUk.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-D5dKabOc.js";
 import { t as safeEqualSecret } from "./secret-equal-D7A3Bol7.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-B2SPYrh4.js";
 import { a as isTrustedProxyAddress, d as resolveGatewayListenHosts, f as resolveHostName, l as resolveClientIp, n as isLoopbackAddress, o as isValidIPv4, r as isLoopbackHost, s as normalizeHostHeader, t as rawDataToString, u as resolveGatewayBindHost } from "./ws-C7EXRv8z.js";
 import { a as resolveGatewayAuth, c as createAuthRateLimiter, i as isLocalDirectRequest, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-B741uFtk.js";
-import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-DG2dIhAy.js";
+import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-BcjcQhiM.js";
 import { d as hasBinary } from "./frontmatter-DWQhtOo7.js";
 import { r as buildWorkspaceSkillSnapshot } from "./skills-6jdJQ5ZL.js";
-import "./routes-qIyRWgzF.js";
+import "./routes-CEjKic_-.js";
 import "./redact-f-Q-hFt_.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-BF3TeRH2.js";
 import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CUjO1ca2.js";
@@ -43,7 +43,7 @@ import { c as detectMime } from "./image-ops-1OJMSAUX.js";
 import "./store-r1DJSDq-.js";
 import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-BOmtxoTv.js";
 import "./trash-DcMh1i4B.js";
-import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-BEyCtqBB.js";
+import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-BdeJp6uY.js";
 import "./dock-BhS32F6E.js";
 import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-DKDeQZF0.js";
 import { n as resolveWhatsAppAccount } from "./accounts-DDuIpcln.js";
@@ -51,7 +51,7 @@ import "./accounts-bK-Yqdwx.js";
 import "./accounts-DyJN4_vR.js";
 import { t as buildChannelAccountBindings } from "./bindings-DFaVVCsf.js";
 import "./logging-w5jq5901.js";
-import "./send-3YM-aarb.js";
+import "./send-BR3reUOE.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath } from "./paths-CyhzMxFA.js";
 import "./tool-images-DvUBlqjX.js";
 import "./tool-display-D8N3rsYt.js";
@@ -59,17 +59,17 @@ import { t as fetchWithSsrFGuard } from "./fetch-guard-DOPkVbh3.js";
 import "./api-key-rotation-BukD0zzl.js";
 import "./local-roots-aAFLQGkY.js";
 import "./sqlite-Dx3J_aSE.js";
-import { n as loadModelCatalog } from "./model-catalog-DjJ9GtKX.js";
+import { n as loadModelCatalog } from "./model-catalog-DZbVIJnH.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-BuceUQDl.js";
-import { r as getMachineDisplayName } from "./with-timeout-BeA4Jxcl.js";
-import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-2Y_F_0yh.js";
+import { r as getMachineDisplayName } from "./with-timeout-gaHpaiis.js";
+import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-DqqfC-g1.js";
 import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-DjBRPfu9.js";
 import "./diagnostic-session-state-CUslJyKP.js";
-import "./send-BsocounR.js";
+import "./send-tDTl6xgz.js";
 import "./model-CLebVu_U.js";
 import { a as resolveAgentIdentity } from "./reply-prefix-CE2YmmsD.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-D4J9SO7Z.js";
-import { n as resolveMemorySearchConfig } from "./manager-C_DoJrcP.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-CGRSXKeF.js";
+import { i as resolveMemorySearchConfig } from "./manager-Oiy1uHsu.js";
 import "./retry-BoS4e4X_.js";
 import { a as ToolInputError } from "./target-errors-7AvoVa10.js";
 import "./chunk-1dhPX1NK.js";
@@ -78,13 +78,13 @@ import "./ir-DZam9q5M.js";
 import "./render-CXDO_kgw.js";
 import { r as isRestartEnabled } from "./commands-BNLCWX6e.js";
 import "./commands-registry-DyWjIe7d.js";
-import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-Cnoh7nRo.js";
-import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-BNyqFDDZ.js";
+import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-CQSyCS4M.js";
+import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-C30ffTSt.js";
 import "./pairing-token-CX3NN_qj.js";
 import "./channel-activity-BOiuJS3t.js";
 import "./fetch-DTNGXEzX.js";
 import "./tables-BEzT0Da4.js";
-import "./send-DEWzWqfZ.js";
+import "./send-DyK4u4yH.js";
 import { a as readChannelAllowFromStoreSync } from "./pairing-store-CFwkjcA5.js";
 import "./proxy-DU7W9XSc.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
@@ -92,21 +92,21 @@ import { n as runCommandWithRuntime } from "./cli-utils-DN_hM6ov.js";
 import { t as formatHelpExamples } from "./help-format-B_-M23wP.js";
 import { n as withProgress } from "./progress-jIePzvGA.js";
 import "./resolve-route-BMoTaVAH.js";
-import "./replies-QloQerhz.js";
+import "./replies-zeeuLUij.js";
 import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-DrFCB9F9.js";
 import "./workspace-dirs-GpkFi6Kw.js";
 import "./outbound-attachment-D_QuKi8U.js";
 import "./delivery-queue-Df1uodAG.js";
 import { c as hasNonzeroUsage, s as deriveSessionTotalTokens } from "./session-cost-usage-BG4AXrGN.js";
-import "./send-B18gkuvz.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-BuSj9DUm.js";
+import "./send-EQ1insgp.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-_sSsfEAa.js";
 import "./prompt-style-8JqOYj0q.js";
 import "./pairing-labels-B-WwqJ-z.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-BzKEDn0q.js";
 import { t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-Kn31mBcW.js";
 import "./nodes-screen-VBGXKdLk.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-DPmdlOwE.js";
-import "./control-service-DMz_CcLi.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-eb_uvOQV.js";
+import "./control-service-DI1Do6Nn.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BUClb97_.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-DuWs0Aak.js";
 import { i as onHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-U4BL57eQ.js";
@@ -122,33 +122,33 @@ import { t as applyPluginAutoEnable } from "./plugin-auto-enable-DdvlcMuw.js";
 import "./install-safe-path-tCLiMpmO.js";
 import "./skill-scanner-CLs8u6vQ.js";
 import "./channels-status-issues-B_kBkl_u.js";
-import "./daemon-runtime-CjgoCPLb.js";
+import "./daemon-runtime-D1K-9VEC.js";
 import "./systemd-riq8uNJQ.js";
 import "./service-Cl74hx8J.js";
-import "./lifecycle-core-BYV6-zd8.js";
-import "./systemd-hints-BBPT8Use.js";
+import "./lifecycle-core-CE8aXuLe.js";
+import "./systemd-hints-BE7qhp3n.js";
 import { t as parsePort$1 } from "./parse-port-Vm8F7Kus.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-BU1FofT_.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-CweZn-1O.js";
 import "./diagnostics-BAMlsVVX.js";
 import "./table-BTgkRafz.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DzLerlJb.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BJvwnR5z.js";
-import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-CiugrQda.js";
+import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-BCHYqYge.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-BHTF5p0X.js";
-import { r as pickGatewaySelfPresence } from "./status-hgm5EhwS.js";
-import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-Q1RP1M2f.js";
+import { r as pickGatewaySelfPresence } from "./status-D4KjZ3qi.js";
+import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-gsbXEgFI.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-CtckACbb.js";
-import { t as runOnboardingWizard } from "./onboarding-CdN_NU2d.js";
-import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-B_NSJmhc.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-DhZgao_r.js";
+import { t as runOnboardingWizard } from "./onboarding-qxWeXuGM.js";
+import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-U_lDP83A.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-6y-7OuAU.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-Bv0M7ka7.js";
-import "./agents.config-CdDf19dm.js";
+import "./agents.config-D9Ufj9CE.js";
 import "./dm-policy-shared-DckBYBwg.js";
 import "./node-service-Cxz4e-Qd.js";
-import "./status.update-DlaskfTr.js";
+import "./status.update-DKLvc9EH.js";
 import "./skills-install-D67isO1L.js";
-import "./update-runner-DM8zQvQB.js";
+import "./update-runner-BnIIcsqA.js";
 import { t as resolveAgentSessionDirs } from "./session-dirs-DWgIYmAt.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-CYxdoAlY.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -6394,7 +6394,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.SYMI_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.SYMI_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-DMz_CcLi.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-DI1Do6Nn.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -11561,7 +11561,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-Df1uodAG.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-2Y_F_0yh.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-DqqfC-g1.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),
@@ -11634,7 +11634,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-zVNodseh.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-mIHlWvBv.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,

package/dist/{gateway-rpc-XxpDa3Bd.js → gateway-rpc-0C2uJScX.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-aT-I_DTX.js";
-import { n as callGateway } from "./call-BNyqFDDZ.js";
+import { n as callGateway } from "./call-C30ffTSt.js";
 import { n as withProgress } from "./progress-jIePzvGA.js";
 
 //#region src/cli/gateway-rpc.ts

package/dist/{gateway-rpc-BnsXD9QK.js → gateway-rpc-CTqBFfgd.js}

@@ -1,4 +1,4 @@
-import { n as callGateway } from "./call-BQiCOxB6.js";
+import { n as callGateway } from "./call-BKOIc76f.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-C9dERklz.js";
 import { n as withProgress } from "./progress-BAHiAaDW.js";