@symerian/symi 2.2.8 → 2.3.1

package/dist/{gateway-cli-D9tJexeo.js → gateway-cli-DajX3Pye.js}

@@ -1,7 +1,7 @@
 import { _ as expandHomePrefix, g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, E as truncateUtf16Safe, H as getLogger, P as setVerbose, R as colorize, S as shortenHomePath, U as getResolvedLoggerSettings, V as getChildLogger, c as ensureDir, t as CONFIG_DIR, y as resolveUserPath, z as isRich } from "./utils-B-0b9bGM.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-EAliFiVK.js";
-import { $ as normalizeOptionalText, $t as buildSafeExternalPrompt, A as resetDirectoryCache, An as listDescendantRunsForRequester, Ar as normalizeMimeList, At as agentCommand, B as consumeRestartSentinel, Dn as countActiveDescendantRuns, Dr as DEFAULT_INPUT_TIMEOUT_MS, Dt as requestBodyErrorToText, Er as DEFAULT_INPUT_MAX_REDIRECTS, Et as readJsonBodyWithLimit, F as isGatewaySigusr1RestartExternallyAllowed, Fn as clearAgentRunContext, Gt as setCliSessionId, H as formatRestartSentinelMessage, I as markGatewaySigusr1RestartHandled, In as emitAgentEvent, It as resolveOutboundTarget, Kt as runCliAgent, Ln as getAgentRunContext, Lt as resolveSessionDeliveryTarget, M as consumeGatewaySigusr1RestartAuthorization, N as deferGatewayRestartUntilIdle, Nn as runSubagentAnnounceFlow, Nr as resolveAgentTimeoutMs, O as resolveOutboundSessionRoute, On as countActiveRunsForSession, Or as extractFileContentFromSource, Ot as computeBackoff, P as emitGatewayRestart, Pn as readLatestAssistantReply, Q as normalizeOptionalSessionKey, R as setGatewaySigusr1RestartPolicy, Rn as onAgentEvent, Rt as createOutboundSendDeps, S as loadSessionEntry, Tr as DEFAULT_INPUT_IMAGE_MIMES, Tt as handleSlackHttpRequest, Ut as runWithModelFallback, Vt as createDefaultDeps, W as summarizeRestartSentinel, Wt as getCliSessionId, X as inferLegacyName, Yt as resolveAgentAvatar, Z as normalizeOptionalAgentId, ar as waitForActiveTasks, at as stripLegacyDeliveryFields, br as enqueueSystemEvent, d as getActiveEmbeddedRunCount, dr as stripHeartbeatToken, dt as requestHeartbeatNow, en as detectSuspiciousPatterns, er as getActiveTaskCount, et as normalizePayloadToSystemText, fr as lookupContextTokens, g as resolveAnnounceTargetFromKey, gt as loadSymiPlugins, h as createSymiTools, i as resolveCronStyleNow, ir as setCommandLaneConcurrency, it as hasLegacyDeliveryHints, jr as resolveInputFileLimits, kn as initSubagentRegistry, kr as extractImageContentFromSource, kt as sleepWithAbort, l as runEmbeddedPiAgent, m as buildDefaultToolPolicyPipelineSteps, mn as getTotalPendingReplies, mt as getPluginToolMeta, nn as isExternalHookSession, nr as getTotalQueueSize, nt as migrateLegacyCronPayload, or as CommandLane, p as applyToolPolicyPipeline, q as normalizeHttpWebhookUrl, rr as resetAllLanes, rt as buildDeliveryFromLegacyPayload, sn as buildHistoryContextFromEntries, sr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, tn as getHookType, tt as normalizeRequiredName, wr as DEFAULT_INPUT_IMAGE_MAX_BYTES, z as setPreRestartDeferralCheck, zn as registerAgentRunContext } from "./reply-BnAPNcvn.js";
+import { $ as normalizeOptionalSessionKey, An as initSubagentRegistry, Ar as extractImageContentFromSource, At as sleepWithAbort, B as setPreRestartDeferralCheck, Bn as registerAgentRunContext, C as loadSessionEntry, Dr as DEFAULT_INPUT_MAX_REDIRECTS, Dt as readJsonBodyWithLimit, Er as DEFAULT_INPUT_IMAGE_MIMES, Et as handleSlackHttpRequest, F as emitGatewayRestart, Fn as readLatestAssistantReply, G as summarizeRestartSentinel, Gt as getCliSessionId, Ht as createDefaultDeps, I as isGatewaySigusr1RestartExternallyAllowed, In as clearAgentRunContext, J as normalizeHttpWebhookUrl, Kt as setCliSessionId, L as markGatewaySigusr1RestartHandled, Ln as emitAgentEvent, Lt as resolveOutboundTarget, Mr as resolveInputFileLimits, N as consumeGatewaySigusr1RestartAuthorization, On as countActiveDescendantRuns, Or as DEFAULT_INPUT_TIMEOUT_MS, Ot as requestBodyErrorToText, P as deferGatewayRestartUntilIdle, Pn as runSubagentAnnounceFlow, Pr as resolveAgentTimeoutMs, Q as normalizeOptionalAgentId, Rn as getAgentRunContext, Rt as resolveSessionDeliveryTarget, Tr as DEFAULT_INPUT_IMAGE_MAX_BYTES, U as formatRestartSentinelMessage, V as consumeRestartSentinel, Wt as runWithModelFallback, Xt as resolveAgentAvatar, Z as inferLegacyName, _ as resolveAnnounceTargetFromKey, _t as loadSymiPlugins, ar as setCommandLaneConcurrency, at as hasLegacyDeliveryHints, cn as buildHistoryContextFromEntries, cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, d as getActiveEmbeddedRunCount, en as buildSafeExternalPrompt, et as normalizeOptionalText, fr as stripHeartbeatToken, ft as requestHeartbeatNow, g as createSymiTools, h as buildDefaultToolPolicyPipelineSteps, hn as getTotalPendingReplies, ht as getPluginToolMeta, i as resolveCronStyleNow, ir as resetAllLanes, it as buildDeliveryFromLegacyPayload, j as resetDirectoryCache, jn as listDescendantRunsForRequester, jr as normalizeMimeList, jt as agentCommand, k as resolveOutboundSessionRoute, kn as countActiveRunsForSession, kr as extractFileContentFromSource, kt as computeBackoff, l as runEmbeddedPiAgent, m as applyToolPolicyPipeline, nn as getHookType, nt as normalizeRequiredName, or as waitForActiveTasks, ot as stripLegacyDeliveryFields, p as resolveModelProfile, pr as lookupContextTokens, qt as runCliAgent, rn as isExternalHookSession, rr as getTotalQueueSize, rt as migrateLegacyCronPayload, sr as CommandLane, tn as detectSuspiciousPatterns, tr as getActiveTaskCount, tt as normalizePayloadToSystemText, xr as enqueueSystemEvent, z as setGatewaySigusr1RestartPolicy, zn as onAgentEvent, zt as createOutboundSendDeps } from "./reply-SBi_U7P7.js";
 import { S as parseAgentSessionKey, c as normalizeMainKey, f as toAgentRequestSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, p as toAgentStoreSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey, y as isCronRunSessionKey } from "./session-key-DCt45XZa.js";
 import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { C as createInternalHookEvent, S as clearInternalHooks, T as triggerInternalHook, m as createEmptyPluginRegistry, r as DEFAULT_CHAT_CHANNEL, w as registerInternalHook } from "./registry-Cja8eT7G.js";
@@ -14,26 +14,26 @@ import { t as formatCliCommand } from "./command-format-COaS-S7B.js";
 import "./boolean-BsqeuxE6.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DPCHYPeH.js";
 import { _ as normalizeGatewayClientMode, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient } from "./message-channel-aT-I_DTX.js";
-import "./send-Bf-tLRDW.js";
-import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-CkPct-ND.js";
+import "./send-CZr1hVHY.js";
+import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-CHwyw6l5.js";
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-C4BxOMWX.js";
 import { a as isPathInsideWithRealpath } from "./legacy-names-Be3msDZo.js";
-import { d as registerUnhandledRejectionHandler } from "./runner-Iw-AU75D.js";
-import "./image-Bf75JOg6.js";
-import "./models-config-CZKT8W0M.js";
+import { d as registerUnhandledRejectionHandler } from "./runner-CUglpiFP.js";
+import "./image-D9uvDTrc.js";
+import "./models-config-qyOXrOli.js";
 import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-UsrsQKwr.js";
-import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-BnivFdOs.js";
-import "./chrome-BtuJAYB6.js";
+import "./pi-embedded-helpers-CNPyv_ax.js";
+import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-C-T6hOMv.js";
+import "./chrome-DtPkPq9T.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-D5dKabOc.js";
 import { t as safeEqualSecret } from "./secret-equal-D7A3Bol7.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-B2SPYrh4.js";
 import { a as isTrustedProxyAddress, d as resolveGatewayListenHosts, f as resolveHostName, l as resolveClientIp, n as isLoopbackAddress, o as isValidIPv4, r as isLoopbackHost, s as normalizeHostHeader, t as rawDataToString, u as resolveGatewayBindHost } from "./ws-C7EXRv8z.js";
 import { a as resolveGatewayAuth, c as createAuthRateLimiter, i as isLocalDirectRequest, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-B741uFtk.js";
-import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-Bn72icrR.js";
+import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-CEpFjqSk.js";
 import { d as hasBinary } from "./frontmatter-DWQhtOo7.js";
 import { r as buildWorkspaceSkillSnapshot } from "./skills-6jdJQ5ZL.js";
-import "./routes-BZCzIvY1.js";
+import "./routes-Ba9CUQ8M.js";
 import "./redact-f-Q-hFt_.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-BF3TeRH2.js";
 import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CUjO1ca2.js";
@@ -43,7 +43,7 @@ import { c as detectMime } from "./image-ops-1OJMSAUX.js";
 import "./store-r1DJSDq-.js";
 import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-BOmtxoTv.js";
 import "./trash-DcMh1i4B.js";
-import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-B2cR2hug.js";
+import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-DgYpBvse.js";
 import "./dock-BhS32F6E.js";
 import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-DKDeQZF0.js";
 import { n as resolveWhatsAppAccount } from "./accounts-DDuIpcln.js";
@@ -51,7 +51,7 @@ import "./accounts-bK-Yqdwx.js";
 import "./accounts-DyJN4_vR.js";
 import { t as buildChannelAccountBindings } from "./bindings-DFaVVCsf.js";
 import "./logging-w5jq5901.js";
-import "./send-DB2tDd9M.js";
+import "./send-CPF8hSFp.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath } from "./paths-CyhzMxFA.js";
 import "./tool-images-DvUBlqjX.js";
 import "./tool-display-D8N3rsYt.js";
@@ -59,16 +59,16 @@ import { t as fetchWithSsrFGuard } from "./fetch-guard-DOPkVbh3.js";
 import "./api-key-rotation-CzuPlV2t.js";
 import "./local-roots-aAFLQGkY.js";
 import "./sqlite-Dx3J_aSE.js";
-import { n as loadModelCatalog } from "./model-catalog-67tJywj6.js";
+import { n as loadModelCatalog } from "./model-catalog-DvBJ8pMD.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-BuceUQDl.js";
-import { r as getMachineDisplayName } from "./with-timeout-DIHZxCIl.js";
-import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-CuDHWgo8.js";
+import { r as getMachineDisplayName } from "./with-timeout-gmK6RciS.js";
+import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-CceEhg3d.js";
 import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-DjBRPfu9.js";
 import "./diagnostic-session-state-CUslJyKP.js";
-import "./send-DKB9atcf.js";
+import "./send-Cutb0ZDY.js";
 import "./model-tWhwnFf8.js";
 import { a as resolveAgentIdentity } from "./reply-prefix-CE2YmmsD.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DKU7WTEa.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-Ca5r9AUb.js";
 import { i as resolveMemorySearchConfig } from "./manager-D4LJSRyZ.js";
 import "./retry-BoS4e4X_.js";
 import { a as ToolInputError } from "./target-errors-7AvoVa10.js";
@@ -79,12 +79,12 @@ import "./render-CXDO_kgw.js";
 import { r as isRestartEnabled } from "./commands-BNLCWX6e.js";
 import "./commands-registry-BT0-zzs3.js";
 import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-CQSyCS4M.js";
-import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-BOIceRVF.js";
+import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-CJaS1iRF.js";
 import "./pairing-token-CX3NN_qj.js";
 import "./channel-activity-BOiuJS3t.js";
 import "./fetch-DTNGXEzX.js";
 import "./tables-BEzT0Da4.js";
-import "./send-Bv3GF77o.js";
+import "./send-tanEMpHN.js";
 import { a as readChannelAllowFromStoreSync } from "./pairing-store-CK726Dzq.js";
 import "./proxy-DU7W9XSc.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
@@ -92,21 +92,21 @@ import { n as runCommandWithRuntime } from "./cli-utils-DN_hM6ov.js";
 import { t as formatHelpExamples } from "./help-format-B_-M23wP.js";
 import { n as withProgress } from "./progress-jIePzvGA.js";
 import "./resolve-route-BMoTaVAH.js";
-import "./replies-ByiY6ZyB.js";
+import "./replies-vgss3_QA.js";
 import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-Cxw-jNxU.js";
 import "./workspace-dirs-GpkFi6Kw.js";
 import "./outbound-attachment-D_QuKi8U.js";
 import "./delivery-queue-Df1uodAG.js";
 import { c as hasNonzeroUsage, s as deriveSessionTotalTokens } from "./session-cost-usage-BG4AXrGN.js";
-import "./send-CU_BDzc0.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-DHgVt6rY.js";
+import "./send-CXxQ_f7L.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-ZmZYzlq3.js";
 import "./prompt-style-8JqOYj0q.js";
 import "./pairing-labels-2S6x2UoV.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-BzKEDn0q.js";
 import { t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-Kn31mBcW.js";
 import "./nodes-screen-VBGXKdLk.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-DKHZCIA2.js";
-import "./control-service-DWy5T1wZ.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CIDBbw6x.js";
+import "./control-service-Bz7rxLWq.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BUClb97_.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-DuWs0Aak.js";
 import { i as onHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-U4BL57eQ.js";
@@ -122,33 +122,33 @@ import { t as applyPluginAutoEnable } from "./plugin-auto-enable-BzX1uAKy.js";
 import "./install-safe-path-tCLiMpmO.js";
 import "./skill-scanner-CLs8u6vQ.js";
 import "./channels-status-issues-B_kBkl_u.js";
-import "./daemon-runtime-DpFImSwP.js";
+import "./daemon-runtime-2mwX-jqj.js";
 import "./systemd-riq8uNJQ.js";
 import "./service-Cl74hx8J.js";
-import "./lifecycle-core-S8m0j4NY.js";
-import "./systemd-hints-Cn-fd1AF.js";
+import "./lifecycle-core-D6LYXpFj.js";
+import "./systemd-hints-BR6gChwm.js";
 import { t as parsePort$1 } from "./parse-port-Vm8F7Kus.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-D-Ceof_K.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-DscwlsKW.js";
 import "./diagnostics-BAMlsVVX.js";
 import "./table-BTgkRafz.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DzLerlJb.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BJvwnR5z.js";
-import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-CbxXbquQ.js";
+import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-CrITRV6w.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-BHTF5p0X.js";
-import { r as pickGatewaySelfPresence } from "./status-CCrlpUEA.js";
-import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-6atzBDlL.js";
+import { r as pickGatewaySelfPresence } from "./status-CwXg8OO1.js";
+import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-f056vLGT.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-CtckACbb.js";
-import { t as runOnboardingWizard } from "./onboarding-m_e9LePg.js";
-import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-CYVVBHwG.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-CpUJIlI7.js";
+import { t as runOnboardingWizard } from "./onboarding-eVb5gvwo.js";
+import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-Cm6W01ne.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-EKnCwrqK.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-Bv0M7ka7.js";
-import "./agents.config-qyBeLoW5.js";
+import "./agents.config-2HlZJsR3.js";
 import "./dm-policy-shared-Bh3TbexU.js";
 import "./node-service-Cxz4e-Qd.js";
-import "./status.update-Cu6R3wwz.js";
+import "./status.update-DtwCUTf-.js";
 import "./skills-install-D67isO1L.js";
-import "./update-runner-Dm7EwGFW.js";
+import "./update-runner-BSQFv9b6.js";
 import { t as resolveAgentSessionDirs } from "./session-dirs-DWgIYmAt.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-CYxdoAlY.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -1862,6 +1862,42 @@ function createChannelManager(opts) {
 	};
 }
 
+//#endregion
+//#region src/agents/model-token-filter.ts
+/**
+* Strips model-specific control tokens from streamed text.
+*
+* Used both server-side (in the streaming pipeline) and by the Glass UI
+* (as a defense-in-depth fallback).  The patterns here cover tokens known
+* to leak from Gemma 4 / vLLM; Claude output is left untouched.
+*/
+const GEMMA_TOKEN_PATTERNS = [
+	/<\|channel>\w*/g,
+	/<channel\|>/g,
+	/<start_of_turn>(?:model|user)?/g,
+	/<end_of_turn>/g,
+	/<\|(?:fim_prefix|fim_suffix|fim_middle)\|>/g,
+	/^\s*<bos>\s*/gm
+];
+const GEMMA_MODEL_HINTS = ["gemma", "redsand/"];
+function isGemmaModel(modelId) {
+	const lower = modelId.toLowerCase();
+	return GEMMA_MODEL_HINTS.some((hint) => lower.includes(hint));
+}
+/**
+* Strip known control tokens from text.  Only applies to Gemma-family models;
+* other models pass through unchanged.
+*/
+function stripModelTokens(text, modelId) {
+	if (!text || !isGemmaModel(modelId)) return text;
+	let result = text;
+	for (const re of GEMMA_TOKEN_PATTERNS) {
+		re.lastIndex = 0;
+		result = result.replace(re, "");
+	}
+	return result;
+}
+
 //#endregion
 //#region src/gateway/server-chat.ts
 function resolveHeartbeatAckMaxChars$1() {
@@ -1956,17 +1992,20 @@ function createChatRunState() {
 	const registry = createChatRunRegistry();
 	const buffers = /* @__PURE__ */ new Map();
 	const deltaSentAt = /* @__PURE__ */ new Map();
+	const pendingDeltaText = /* @__PURE__ */ new Map();
 	const abortedRuns = /* @__PURE__ */ new Map();
 	const clear = () => {
 		registry.clear();
 		buffers.clear();
 		deltaSentAt.clear();
+		pendingDeltaText.clear();
 		abortedRuns.clear();
 	};
 	return {
 		registry,
 		buffers,
 		deltaSentAt,
+		pendingDeltaText,
 		abortedRuns,
 		clear
 	};
@@ -2015,10 +2054,21 @@ function createToolEventRecipientRegistry() {
 function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSession, agentRunSeq, chatRunState, resolveSessionKeyForRun, clearAgentRunContext, toolEventRecipients }) {
 	const emitChatDelta = (sessionKey, clientRunId, sourceRunId, seq, text) => {
 		if (isSilentReplyText(text, SILENT_REPLY_TOKEN)) return;
-		chatRunState.buffers.set(clientRunId, text);
+		let resolvedModelId;
+		try {
+			resolvedModelId = loadConfig().agents?.defaults?.model?.primary ?? void 0;
+		} catch {}
+		const cleanedText = resolvedModelId ? stripModelTokens(text, resolvedModelId) : text;
+		chatRunState.buffers.set(clientRunId, cleanedText);
 		if (shouldHideHeartbeatChatOutput(clientRunId, sourceRunId)) return;
 		const now = Date.now();
-		if (now - (chatRunState.deltaSentAt.get(clientRunId) ?? 0) < 150) return;
+		if (now - (chatRunState.deltaSentAt.get(clientRunId) ?? 0) < 150) {
+			chatRunState.pendingDeltaText.set(clientRunId, (chatRunState.pendingDeltaText.get(clientRunId) ?? "") + cleanedText);
+			return;
+		}
+		const buffered = chatRunState.pendingDeltaText.get(clientRunId) ?? "";
+		chatRunState.pendingDeltaText.delete(clientRunId);
+		const fullText = buffered + cleanedText;
 		chatRunState.deltaSentAt.set(clientRunId, now);
 		const payload = {
 			runId: clientRunId,
@@ -2030,7 +2080,7 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 				role: "assistant",
 				content: [{
 					type: "text",
-					text
+					text: fullText
 				}],
 				timestamp: now
 			}
@@ -2039,6 +2089,27 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 		nodeSendToSession(sessionKey, "chat", payload);
 	};
 	const emitChatFinal = (sessionKey, clientRunId, sourceRunId, seq, jobState, error) => {
+		const remainingDelta = chatRunState.pendingDeltaText.get(clientRunId);
+		if (remainingDelta && !shouldHideHeartbeatChatOutput(clientRunId, sourceRunId)) {
+			const flushPayload = {
+				runId: clientRunId,
+				sessionKey,
+				seq,
+				state: "delta",
+				...resolveHeartbeatContext(clientRunId, sourceRunId)?.isHeartbeat ? { isHeartbeat: true } : {},
+				message: {
+					role: "assistant",
+					content: [{
+						type: "text",
+						text: remainingDelta
+					}],
+					timestamp: Date.now()
+				}
+			};
+			broadcast("chat", flushPayload);
+			nodeSendToSession(sessionKey, "chat", flushPayload);
+		}
+		chatRunState.pendingDeltaText.delete(clientRunId);
 		const normalizedHeartbeatText = normalizeHeartbeatChatFinalText({
 			runId: clientRunId,
 			sourceRunId,
@@ -2141,6 +2212,14 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 			if (recipients && recipients.size > 0) broadcastToConnIds("agent", toolPayload, recipients);
 		} else broadcast("agent", agentPayload);
 		const lifecyclePhase = evt.stream === "lifecycle" && typeof evt.data?.phase === "string" ? evt.data.phase : null;
+		if (lifecyclePhase === "start" && sessionKey && !isAborted) {
+			if (!resolveHeartbeatContext(clientRunId, evt.runId)?.isHeartbeat) broadcast("chat", {
+				runId: clientRunId,
+				sessionKey,
+				seq: evt.seq,
+				state: "thinking"
+			});
+		}
 		if (lifecyclePhase && sessionKey && sessionKey.includes(":subagent:")) {
 			if (lifecyclePhase === "start") broadcast("subagent", {
 				phase: "started",
@@ -6410,7 +6489,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.SYMI_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.SYMI_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-DWy5T1wZ.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-Bz7rxLWq.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -6469,6 +6548,17 @@ function createGatewayReloadHandlers(params) {
 		setCommandLaneConcurrency(CommandLane.Cron, nextConfig.cron?.maxConcurrentRuns ?? 1);
 		setCommandLaneConcurrency(CommandLane.Main, resolveAgentMaxConcurrent(nextConfig));
 		setCommandLaneConcurrency(CommandLane.Subagent, resolveSubagentMaxConcurrent(nextConfig));
+		const newModelPrimary = nextConfig.agents?.defaults?.model?.primary;
+		if (newModelPrimary && newModelPrimary !== state.lastModelPrimary) {
+			const profile = resolveModelProfile(newModelPrimary, nextConfig.models?.profiles);
+			params.broadcast("profile", {
+				event: "profile",
+				profile,
+				modelId: newModelPrimary
+			});
+			params.logReload.info(`model profile broadcast: ${profile.label} for ${newModelPrimary}`);
+			nextState.lastModelPrimary = newModelPrimary;
+		}
 		if (plan.hotReasons.length > 0) params.logReload.info(`config hot reload applied (${plan.hotReasons.join(", ")})`);
 		else if (plan.noopPaths.length > 0) params.logReload.info(`config change applied (dynamic reads: ${plan.noopPaths.join(", ")})`);
 		params.setState(nextState);
@@ -11577,7 +11667,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-Df1uodAG.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-CuDHWgo8.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CceEhg3d.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),
@@ -11650,7 +11740,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-BxliIaQO.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-Z1IOT6Vc.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,

package/dist/{gateway-rpc-o-EndnYx.js → gateway-rpc-BxkKeCZ0.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-aT-I_DTX.js";
-import { n as callGateway } from "./call-BOIceRVF.js";
+import { n as callGateway } from "./call-CJaS1iRF.js";
 import { n as withProgress } from "./progress-jIePzvGA.js";
 
 //#region src/cli/gateway-rpc.ts

package/dist/{gateway-rpc-DjjmZ7bN.js → gateway-rpc-DfZSz5JF.js}

@@ -1,4 +1,4 @@
-import { n as callGateway } from "./call-C7OJzLEL.js";
+import { n as callGateway } from "./call-BcE47FtD.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-C9dERklz.js";
 import { n as withProgress } from "./progress-BAHiAaDW.js";
 

package/dist/{gemini-auth-CdSPHuLl.js → gemini-auth-CF48hUR9.js}

@@ -1,4 +1,4 @@
-import { A as normalizeProviderId } from "./model-auth-DK43VicI.js";
+import { A as normalizeProviderId } from "./model-auth-CwOuTuXl.js";
 import { n as formatErrorMessage } from "./errors-BoQgnc8X.js";
 
 //#region src/agents/live-auth-keys.ts

package/dist/{github-copilot-token-C_qUP7p5.js → github-copilot-token-DJqsJ2-r.js}

@@ -1,13 +1,13 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { s as resolveStateDir } from "./paths-Cce4PUkG.js";
+import { s as resolveStateDir } from "./paths-CySxpNhH.js";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 
 //#region src/infra/json-file.ts
 function loadJsonFile(pathname) {
 	try {
-		if (!fs.existsSync(pathname)) return;
-		const raw = fs.readFileSync(pathname, "utf8");
+		if (!fsSync.existsSync(pathname)) return;
+		const raw = fsSync.readFileSync(pathname, "utf8");
 		return JSON.parse(raw);
 	} catch {
 		return;
@@ -15,12 +15,12 @@ function loadJsonFile(pathname) {
 }
 function saveJsonFile(pathname, data) {
 	const dir = path.dirname(pathname);
-	if (!fs.existsSync(dir)) fs.mkdirSync(dir, {
+	if (!fsSync.existsSync(dir)) fsSync.mkdirSync(dir, {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(pathname, `${JSON.stringify(data, null, 2)}\n`, "utf8");
-	fs.chmodSync(pathname, 384);
+	fsSync.writeFileSync(pathname, `${JSON.stringify(data, null, 2)}\n`, "utf8");
+	fsSync.chmodSync(pathname, 384);
 }
 
 //#endregion

package/dist/{glass-ui-ws-BvSaDLuk.js → glass-ui-ws-CQG6acJl.js}

@@ -8,34 +8,34 @@ import "./frontmatter-B8duUx_6.js";
 import "./skills-hAdgFdrv.js";
 import "./manifest-registry-Czr39pxG.js";
 import "./skills-status-DKXJ-tbi.js";
-import "./config-CJigbfdK.js";
+import "./config-DHBLS1Hl.js";
 import "./client-DMBZpU6X.js";
-import "./call-C7OJzLEL.js";
+import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-BSgPGZxs.js";
-import "./sessions-Cb4Hj78H.js";
+import "./subagent-registry-Du9P0G2U.js";
+import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
 import "./accounts-D9ITgITj.js";
 import "./bindings-DlWb_Kaq.js";
 import "./logging-CFvkxgcX.js";
-import "./send-DP6zL1r4.js";
-import "./send-Dv5K7btg.js";
-import "./with-timeout-vknUanNX.js";
-import "./deliver-PKvGnPCv.js";
+import "./send-CukP8Vq4.js";
+import "./send-DTTtmhjA.js";
+import "./with-timeout-Di0nddLY.js";
+import "./deliver-CXRSdUr1.js";
 import "./diagnostic-Ci8Xsc_Y.js";
 import "./diagnostic-session-state-CIjIGxEE.js";
 import "./accounts-D1eLj5t8.js";
-import "./send-DKvfyTNM.js";
+import "./send-CR5fRDgW.js";
 import "./image-ops-CUkaZz2F.js";
-import "./pi-embedded-helpers-B2k8Fh9T.js";
-import "./sandbox-C9zB9HTn.js";
-import "./chrome-CCN6Uf1O.js";
+import "./pi-embedded-helpers-DE9h5GAu.js";
+import "./sandbox-BFzSUT19.js";
+import "./chrome-Dq0bSDVx.js";
 import "./tailscale-CbbvYNVw.js";
 import "./auth-BfDMhFAj.js";
-import "./server-context-BogDcclm.js";
-import "./routes-br_73dY_.js";
+import "./server-context-H24IFajW.js";
+import "./routes-BFw2-yAN.js";
 import "./redact-B40lik2B.js";
 import "./errors-Ba_ROWsq.js";
 import "./fs-safe-CERgjtot.js";
@@ -49,9 +49,9 @@ import "./accounts-D51FXYdA.js";
 import "./paths-DNdWAq7b.js";
 import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
-import "./models-config--wR0kLo6.js";
+import "./models-config-CCMpqFyr.js";
 import "./reply-prefix-BUN71nd5.js";
-import "./memory-cli-B1eBVFD2.js";
+import "./memory-cli-C2SWDd8g.js";
 import "./manager-Vb2F7vQq.js";
 import "./gemini-auth-CgCIvUpe.js";
 import "./sqlite-CQGamAhm.js";
@@ -65,11 +65,11 @@ import "./ir-D-flMHhr.js";
 import "./render-e7fENCYH.js";
 import "./commands-CkrIpKCc.js";
 import "./commands-registry-D1K_inhv.js";
-import "./image-CAI2RIyk.js";
+import "./image-CO4meYzg.js";
 import "./tool-display-CXwOC-qw.js";
-import "./runner-BPcjrrjx.js";
-import "./model-catalog-D2Q4fkGC.js";
-import "./session-utils-D5F7F--L.js";
+import "./runner-BORIO-D3.js";
+import "./model-catalog-CqCsARJX.js";
+import "./session-utils-Bka9dR4m.js";
 import "./skill-commands-C8BcwE33.js";
 import "./workspace-dirs-CPNL2Acu.js";
 import "./pairing-store-vpO8vXVN.js";
@@ -79,24 +79,24 @@ import "./nodes-screen-DrIN-j3C.js";
 import "./session-cost-usage-C-v6E-Lz.js";
 import "./channel-activity-myOnmDZi.js";
 import "./tables-CXWwq-Md.js";
-import "./control-service-D2-SfYYP.js";
+import "./control-service-DEVN6FRR.js";
 import "./stagger-CQar2eKe.js";
 import "./channel-selection-BzfEFyPn.js";
-import "./send-CkYljROn.js";
+import "./send-CY8oqBFg.js";
 import "./outbound-attachment-BdnE7M6k.js";
 import "./delivery-queue-CzNZXd1M.js";
-import "./send-rirP23D6.js";
+import "./send-DK_pm_7l.js";
 import "./resolve-route-CjnIuTqX.js";
 import "./proxy-DL3MD6-P.js";
 import "./links-DlWpl9Yv.js";
 import "./cli-utils-CCaEbxAz.js";
 import "./help-format-B0pWGnZs.js";
 import "./progress-BAHiAaDW.js";
-import "./replies-CVeSBasT.js";
-import "./onboard-helpers-Cammg0Xb.js";
+import "./replies-DO80zq73.js";
+import "./onboard-helpers-_pit1NZW.js";
 import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
-import "./pi-tools.policy-CwzwRugl.js";
+import "./pi-tools.policy-De00gPXt.js";
 import "./dangerous-tools-B8QrxStA.js";
 import "./catalog-DLQFKucJ.js";
 import "./install-safe-path-BK8js28D.js";
@@ -107,19 +107,19 @@ import "./systemd-DlMdyFDY.js";
 import "./service-Cm9j9WzQ.js";
 import "./diagnostics-CS1ov_hH.js";
 import "./table-D01d2GuY.js";
-import "./audit-F6tyY79q.js";
-import "./status-B7VIwi53.js";
-import "./health-BpVkd1NR.js";
+import "./audit-Byo5jCLN.js";
+import "./status-BBpD_1pG.js";
+import "./health-D9eQW7fJ.js";
 import "./control-ui-assets-BseSWee1.js";
 import "./update-check-ZdimP1aU.js";
-import { n as handleGatewayRequest } from "./server-methods-1TVNg0k5.js";
-import "./push-apns-DtKC_-eP.js";
-import "./agents.config-D4WnZfkE.js";
+import { n as handleGatewayRequest } from "./server-methods-CyFB3XQf.js";
+import "./push-apns-C0wMP1XU.js";
+import "./agents.config-CSucty2T.js";
 import "./dm-policy-shared-DJ-61hCT.js";
 import "./node-service-fcZExd22.js";
-import "./status.update-D8lzj5TK.js";
+import "./status.update-DbmZz0Aq.js";
 import "./skills-install-1ZdwGTnh.js";
-import "./update-runner-ChoWv-od.js";
+import "./update-runner-8Ac4bJ1w.js";
 
 //#region src/gateway/glass-ui-ws.ts
 const SESSION_KEY = "agent:main:main";