@symerian/symi 2.2.8 → 2.3.1

package/dist/{gateway-cli-dxsgPoqI.js → gateway-cli-BVN31fwu.js}

@@ -13,37 +13,37 @@ import { r as isPathInsideWithRealpath } from "./scan-paths-ppKrtZ9U.js";
 import { r as buildWorkspaceSkillSnapshot } from "./skills-hAdgFdrv.js";
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-Czr39pxG.js";
 import "./skills-status-DKXJ-tbi.js";
-import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-CJigbfdK.js";
+import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-DHBLS1Hl.js";
 import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-DMBZpU6X.js";
-import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-C7OJzLEL.js";
+import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-BcE47FtD.js";
 import { _ as normalizeGatewayClientMode, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient } from "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
 import { t as safeEqualSecret } from "./secret-equal-CbntzRkh.js";
 import { a as isValidIPv4, c as resolveClientIp, d as resolveHostName, f as rawDataToString, i as isTrustedProxyAddress, l as resolveGatewayBindHost, n as isLoopbackHost, o as normalizeHostHeader, t as isLoopbackAddress, u as resolveGatewayListenHosts } from "./net-DZ5Ayk-W.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-Cmumpn76.js";
-import { $ as setCliSessionId, A as createDefaultDeps, An as extractFileContentFromSource, At as normalizeOptionalText, Bt as detectSuspiciousPatterns, C as computeBackoff, Cr as registerAgentRunContext, Dn as DEFAULT_INPUT_IMAGE_MIMES, Dt as inferLegacyName, En as DEFAULT_INPUT_IMAGE_MAX_BYTES, Fn as resolveAgentTimeoutMs, Ft as hasLegacyDeliveryHints, Gt as consumeGatewaySigusr1RestartAuthorization, Ht as isExternalHookSession, It as stripLegacyDeliveryFields, Jt as isGatewaySigusr1RestartExternallyAllowed, K as getTotalPendingReplies, Kt as deferGatewayRestartUntilIdle, M as resolveAgentAvatar, Mn as normalizeMimeList, Mt as normalizeRequiredName, Nn as resolveInputFileLimits, Nt as migrateLegacyCronPayload, On as DEFAULT_INPUT_MAX_REDIRECTS, Ot as normalizeOptionalAgentId, Pt as buildDeliveryFromLegacyPayload, Q as getCliSessionId, Qt as setPreRestartDeferralCheck, S as requestBodyErrorToText, Sn as enqueueSystemEvent, Sr as onAgentEvent, T as agentCommand, Vt as getHookType, Yt as markGatewaySigusr1RestartHandled, Z as resolveCronStyleNow, Zt as setGatewaySigusr1RestartPolicy, _t as consumeRestartSentinel, b as handleSlackHttpRequest, br as emitAgentEvent, d as getActiveEmbeddedRunCount, dr as setCommandLaneConcurrency, dt as resolveSessionDeliveryTarget, et as runCliAgent, fr as waitForActiveTasks, g as getPluginToolMeta, ht as runWithModelFallback, i as listDescendantRunsForRequester, it as resolveAnnounceTargetFromKey, jn as extractImageContentFromSource, jt as normalizePayloadToSystemText, k as createOutboundSendDeps, kn as DEFAULT_INPUT_TIMEOUT_MS, kt as normalizeOptionalSessionKey, l as runEmbeddedPiAgent, lr as getTotalQueueSize, m as buildDefaultToolPolicyPipelineSteps, mr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, n as countActiveRunsForSession, nt as createSymiTools, p as applyToolPolicyPipeline, pr as CommandLane, pt as resetDirectoryCache, qt as emitGatewayRestart, r as initSubagentRegistry, rt as readLatestAssistantReply, s as runSubagentAnnounceFlow, sr as getActiveTaskCount, st as resolveOutboundSessionRoute, t as countActiveDescendantRuns, un as requestHeartbeatNow, ur as resetAllLanes, ut as resolveOutboundTarget, v as loadSymiPlugins, vr as stripHeartbeatToken, w as sleepWithAbort, wt as normalizeHttpWebhookUrl, x as readJsonBodyWithLimit, xr as getAgentRunContext, xt as summarizeRestartSentinel, yr as clearAgentRunContext, yt as formatRestartSentinelMessage, z as buildHistoryContextFromEntries, zt as buildSafeExternalPrompt } from "./subagent-registry-BSgPGZxs.js";
-import { D as resolveSessionResetPolicy, F as resolveMainSessionKey, H as cleanStaleLockFiles, I as resolveMainSessionKeyFromConfig, K as mergeDeliveryContext, M as canonicalizeMainSessionAlias, N as resolveAgentMainSessionKey, T as evaluateSessionFreshness, W as deliveryContextFromSession, d as updateSessionStore, n as parseSessionThreadInfo, o as loadSessionStore } from "./sessions-Cb4Hj78H.js";
+import { $ as getCliSessionId, $t as setPreRestartDeferralCheck, A as createOutboundSendDeps, An as DEFAULT_INPUT_TIMEOUT_MS, At as normalizeOptionalSessionKey, B as buildHistoryContextFromEntries, Bt as buildSafeExternalPrompt, C as requestBodyErrorToText, Cn as enqueueSystemEvent, Cr as onAgentEvent, Dn as DEFAULT_INPUT_IMAGE_MAX_BYTES, E as agentCommand, Ft as buildDeliveryFromLegacyPayload, Ht as getHookType, In as resolveAgentTimeoutMs, It as hasLegacyDeliveryHints, Jt as emitGatewayRestart, Kt as consumeGatewaySigusr1RestartAuthorization, Lt as stripLegacyDeliveryFields, Mn as extractImageContentFromSource, Mt as normalizePayloadToSystemText, N as resolveAgentAvatar, Nn as normalizeMimeList, Nt as normalizeRequiredName, On as DEFAULT_INPUT_IMAGE_MIMES, Ot as inferLegacyName, Pn as resolveInputFileLimits, Pt as migrateLegacyCronPayload, Q as resolveCronStyleNow, Qt as setGatewaySigusr1RestartPolicy, S as readJsonBodyWithLimit, Sr as getAgentRunContext, St as summarizeRestartSentinel, T as sleepWithAbort, Tt as normalizeHttpWebhookUrl, Ut as isExternalHookSession, Vt as detectSuspiciousPatterns, Xt as markGatewaySigusr1RestartHandled, Yt as isGatewaySigusr1RestartExternallyAllowed, _ as getPluginToolMeta, at as resolveAnnounceTargetFromKey, br as clearAgentRunContext, bt as formatRestartSentinelMessage, cr as getActiveTaskCount, ct as resolveOutboundSessionRoute, d as getActiveEmbeddedRunCount, dn as requestHeartbeatNow, dr as resetAllLanes, dt as resolveOutboundTarget, et as setCliSessionId, fr as setCommandLaneConcurrency, ft as resolveSessionDeliveryTarget, gt as runWithModelFallback, h as buildDefaultToolPolicyPipelineSteps, hr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, i as listDescendantRunsForRequester, it as readLatestAssistantReply, j as createDefaultDeps, jn as extractFileContentFromSource, jt as normalizeOptionalText, kn as DEFAULT_INPUT_MAX_REDIRECTS, kt as normalizeOptionalAgentId, l as runEmbeddedPiAgent, m as applyToolPolicyPipeline, mr as CommandLane, mt as resetDirectoryCache, n as countActiveRunsForSession, p as resolveModelProfile, pr as waitForActiveTasks, q as getTotalPendingReplies, qt as deferGatewayRestartUntilIdle, r as initSubagentRegistry, rt as createSymiTools, s as runSubagentAnnounceFlow, t as countActiveDescendantRuns, tt as runCliAgent, ur as getTotalQueueSize, vt as consumeRestartSentinel, w as computeBackoff, wr as registerAgentRunContext, x as handleSlackHttpRequest, xr as emitAgentEvent, y as loadSymiPlugins, yr as stripHeartbeatToken } from "./subagent-registry-Du9P0G2U.js";
+import { D as resolveSessionResetPolicy, F as resolveMainSessionKey, H as cleanStaleLockFiles, I as resolveMainSessionKeyFromConfig, K as mergeDeliveryContext, M as canonicalizeMainSessionAlias, N as resolveAgentMainSessionKey, T as evaluateSessionFreshness, W as deliveryContextFromSession, d as updateSessionStore, n as parseSessionThreadInfo, o as loadSessionStore } from "./sessions-CJXnZVjR.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-Csntmwwn.js";
 import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
 import { n as resolveWhatsAppAccount } from "./accounts-D9ITgITj.js";
 import { t as buildChannelAccountBindings } from "./bindings-DlWb_Kaq.js";
 import "./logging-CFvkxgcX.js";
-import "./send-DP6zL1r4.js";
-import "./send-Dv5K7btg.js";
-import { r as getMachineDisplayName } from "./with-timeout-vknUanNX.js";
-import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-PKvGnPCv.js";
+import "./send-CukP8Vq4.js";
+import "./send-DTTtmhjA.js";
+import { r as getMachineDisplayName } from "./with-timeout-Di0nddLY.js";
+import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-CXRSdUr1.js";
 import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-Ci8Xsc_Y.js";
 import "./diagnostic-session-state-CIjIGxEE.js";
 import "./accounts-D1eLj5t8.js";
-import "./send-DKvfyTNM.js";
+import "./send-CR5fRDgW.js";
 import { c as detectMime } from "./image-ops-CUkaZz2F.js";
-import "./pi-embedded-helpers-B2k8Fh9T.js";
-import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-C9zB9HTn.js";
-import "./chrome-CCN6Uf1O.js";
+import "./pi-embedded-helpers-DE9h5GAu.js";
+import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-BFzSUT19.js";
+import "./chrome-Dq0bSDVx.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-CbbvYNVw.js";
 import { a as resolveGatewayAuth, c as createAuthRateLimiter, i as isLocalDirectRequest, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-BfDMhFAj.js";
-import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-BogDcclm.js";
-import "./routes-br_73dY_.js";
+import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-H24IFajW.js";
+import "./routes-BFw2-yAN.js";
 import "./redact-B40lik2B.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-Ba_ROWsq.js";
 import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CERgjtot.js";
@@ -57,9 +57,9 @@ import "./accounts-D51FXYdA.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath } from "./paths-DNdWAq7b.js";
 import "./tool-images-CVLISeRT.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-8sKPnzpp.js";
-import "./models-config--wR0kLo6.js";
+import "./models-config-CCMpqFyr.js";
 import { a as resolveAgentIdentity } from "./reply-prefix-BUN71nd5.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-B1eBVFD2.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-C2SWDd8g.js";
 import { i as resolveMemorySearchConfig } from "./manager-Vb2F7vQq.js";
 import "./gemini-auth-CgCIvUpe.js";
 import "./sqlite-CQGamAhm.js";
@@ -73,11 +73,11 @@ import "./ir-D-flMHhr.js";
 import "./render-e7fENCYH.js";
 import { r as isRestartEnabled } from "./commands-CkrIpKCc.js";
 import "./commands-registry-D1K_inhv.js";
-import "./image-CAI2RIyk.js";
+import "./image-CO4meYzg.js";
 import "./tool-display-CXwOC-qw.js";
-import { d as registerUnhandledRejectionHandler } from "./runner-BPcjrrjx.js";
-import { n as loadModelCatalog } from "./model-catalog-D2Q4fkGC.js";
-import { o as loadSessionEntry, u as lookupContextTokens } from "./session-utils-D5F7F--L.js";
+import { d as registerUnhandledRejectionHandler } from "./runner-BORIO-D3.js";
+import { n as loadModelCatalog } from "./model-catalog-CqCsARJX.js";
+import { o as loadSessionEntry, u as lookupContextTokens } from "./session-utils-Bka9dR4m.js";
 import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-C8BcwE33.js";
 import "./workspace-dirs-CPNL2Acu.js";
 import { a as readChannelAllowFromStoreSync } from "./pairing-store-vpO8vXVN.js";
@@ -88,24 +88,24 @@ import { c as hasNonzeroUsage, s as deriveSessionTotalTokens } from "./session-c
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-BXPHPKra.js";
 import "./channel-activity-myOnmDZi.js";
 import "./tables-CXWwq-Md.js";
-import "./control-service-D2-SfYYP.js";
+import "./control-service-DEVN6FRR.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-CQar2eKe.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-BzfEFyPn.js";
-import "./send-CkYljROn.js";
+import "./send-CY8oqBFg.js";
 import "./outbound-attachment-BdnE7M6k.js";
 import "./delivery-queue-CzNZXd1M.js";
-import "./send-rirP23D6.js";
+import "./send-DK_pm_7l.js";
 import "./resolve-route-CjnIuTqX.js";
 import "./proxy-DL3MD6-P.js";
 import { t as formatDocsLink } from "./links-DlWpl9Yv.js";
 import { n as runCommandWithRuntime } from "./cli-utils-CCaEbxAz.js";
 import { t as formatHelpExamples } from "./help-format-B0pWGnZs.js";
 import { n as withProgress } from "./progress-BAHiAaDW.js";
-import "./replies-CVeSBasT.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-Cammg0Xb.js";
+import "./replies-DO80zq73.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-_pit1NZW.js";
 import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CwzwRugl.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-De00gPXt.js";
 import { i as onHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-B8TDjqpW.js";
 import { t as ensureSymiCliOnPath } from "./path-env-Bic_wXs9.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-B8QrxStA.js";
@@ -116,34 +116,34 @@ import { t as applyPluginAutoEnable } from "./plugin-auto-enable-D6ENR3Xg.js";
 import "./install-safe-path-BK8js28D.js";
 import "./skill-scanner-BGWOBqLY.js";
 import "./channels-status-issues-c7qZbYG5.js";
-import "./daemon-runtime-Co0_hiZm.js";
+import "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import "./systemd-DlMdyFDY.js";
 import "./service-Cm9j9WzQ.js";
-import "./lifecycle-core-D7Ye5Yes.js";
-import "./systemd-hints-BMl55p2_.js";
+import "./lifecycle-core-DIBHfMOL.js";
+import "./systemd-hints-sQipWGd1.js";
 import { t as parsePort$1 } from "./parse-port-BQ0_YQqL.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-2Xzn9zI0.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-wWnBIQtk.js";
 import "./diagnostics-CS1ov_hH.js";
 import "./table-D01d2GuY.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CsKTEo__.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BtG9rny3.js";
-import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-F6tyY79q.js";
+import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-Byo5jCLN.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-CA_XIzr_.js";
-import { i as pickGatewaySelfPresence } from "./status-B7VIwi53.js";
-import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-BpVkd1NR.js";
+import { i as pickGatewaySelfPresence } from "./status-BBpD_1pG.js";
+import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-D9eQW7fJ.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-ZdimP1aU.js";
-import { t as runOnboardingWizard } from "./onboarding-HJJedJ3u.js";
-import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-1TVNg0k5.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-DtKC_-eP.js";
+import { t as runOnboardingWizard } from "./onboarding-DtP0sps0.js";
+import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-CyFB3XQf.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-C0wMP1XU.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CzWeiE-Y.js";
-import "./agents.config-D4WnZfkE.js";
+import "./agents.config-CSucty2T.js";
 import "./dm-policy-shared-DJ-61hCT.js";
 import "./node-service-fcZExd22.js";
-import "./status.update-D8lzj5TK.js";
+import "./status.update-DbmZz0Aq.js";
 import "./skills-install-1ZdwGTnh.js";
-import "./update-runner-ChoWv-od.js";
+import "./update-runner-8Ac4bJ1w.js";
 import { t as resolveAgentSessionDirs } from "./session-dirs-DWgIYmAt.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-B51TF6q3.js";
 import { n as forceFreePortAndWait } from "./ports-Dn122MUd.js";
@@ -1858,6 +1858,42 @@ function createChannelManager(opts) {
 	};
 }
 
+//#endregion
+//#region src/agents/model-token-filter.ts
+/**
+* Strips model-specific control tokens from streamed text.
+*
+* Used both server-side (in the streaming pipeline) and by the Glass UI
+* (as a defense-in-depth fallback).  The patterns here cover tokens known
+* to leak from Gemma 4 / vLLM; Claude output is left untouched.
+*/
+const GEMMA_TOKEN_PATTERNS = [
+	/<\|channel>\w*/g,
+	/<channel\|>/g,
+	/<start_of_turn>(?:model|user)?/g,
+	/<end_of_turn>/g,
+	/<\|(?:fim_prefix|fim_suffix|fim_middle)\|>/g,
+	/^\s*<bos>\s*/gm
+];
+const GEMMA_MODEL_HINTS = ["gemma", "redsand/"];
+function isGemmaModel(modelId) {
+	const lower = modelId.toLowerCase();
+	return GEMMA_MODEL_HINTS.some((hint) => lower.includes(hint));
+}
+/**
+* Strip known control tokens from text.  Only applies to Gemma-family models;
+* other models pass through unchanged.
+*/
+function stripModelTokens(text, modelId) {
+	if (!text || !isGemmaModel(modelId)) return text;
+	let result = text;
+	for (const re of GEMMA_TOKEN_PATTERNS) {
+		re.lastIndex = 0;
+		result = result.replace(re, "");
+	}
+	return result;
+}
+
 //#endregion
 //#region src/gateway/server-chat.ts
 function resolveHeartbeatAckMaxChars$1() {
@@ -1952,17 +1988,20 @@ function createChatRunState() {
 	const registry = createChatRunRegistry();
 	const buffers = /* @__PURE__ */ new Map();
 	const deltaSentAt = /* @__PURE__ */ new Map();
+	const pendingDeltaText = /* @__PURE__ */ new Map();
 	const abortedRuns = /* @__PURE__ */ new Map();
 	const clear = () => {
 		registry.clear();
 		buffers.clear();
 		deltaSentAt.clear();
+		pendingDeltaText.clear();
 		abortedRuns.clear();
 	};
 	return {
 		registry,
 		buffers,
 		deltaSentAt,
+		pendingDeltaText,
 		abortedRuns,
 		clear
 	};
@@ -2011,10 +2050,21 @@ function createToolEventRecipientRegistry() {
 function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSession, agentRunSeq, chatRunState, resolveSessionKeyForRun, clearAgentRunContext, toolEventRecipients }) {
 	const emitChatDelta = (sessionKey, clientRunId, sourceRunId, seq, text) => {
 		if (isSilentReplyText(text, SILENT_REPLY_TOKEN)) return;
-		chatRunState.buffers.set(clientRunId, text);
+		let resolvedModelId;
+		try {
+			resolvedModelId = loadConfig().agents?.defaults?.model?.primary ?? void 0;
+		} catch {}
+		const cleanedText = resolvedModelId ? stripModelTokens(text, resolvedModelId) : text;
+		chatRunState.buffers.set(clientRunId, cleanedText);
 		if (shouldHideHeartbeatChatOutput(clientRunId, sourceRunId)) return;
 		const now = Date.now();
-		if (now - (chatRunState.deltaSentAt.get(clientRunId) ?? 0) < 150) return;
+		if (now - (chatRunState.deltaSentAt.get(clientRunId) ?? 0) < 150) {
+			chatRunState.pendingDeltaText.set(clientRunId, (chatRunState.pendingDeltaText.get(clientRunId) ?? "") + cleanedText);
+			return;
+		}
+		const buffered = chatRunState.pendingDeltaText.get(clientRunId) ?? "";
+		chatRunState.pendingDeltaText.delete(clientRunId);
+		const fullText = buffered + cleanedText;
 		chatRunState.deltaSentAt.set(clientRunId, now);
 		const payload = {
 			runId: clientRunId,
@@ -2026,7 +2076,7 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 				role: "assistant",
 				content: [{
 					type: "text",
-					text
+					text: fullText
 				}],
 				timestamp: now
 			}
@@ -2035,6 +2085,27 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 		nodeSendToSession(sessionKey, "chat", payload);
 	};
 	const emitChatFinal = (sessionKey, clientRunId, sourceRunId, seq, jobState, error) => {
+		const remainingDelta = chatRunState.pendingDeltaText.get(clientRunId);
+		if (remainingDelta && !shouldHideHeartbeatChatOutput(clientRunId, sourceRunId)) {
+			const flushPayload = {
+				runId: clientRunId,
+				sessionKey,
+				seq,
+				state: "delta",
+				...resolveHeartbeatContext(clientRunId, sourceRunId)?.isHeartbeat ? { isHeartbeat: true } : {},
+				message: {
+					role: "assistant",
+					content: [{
+						type: "text",
+						text: remainingDelta
+					}],
+					timestamp: Date.now()
+				}
+			};
+			broadcast("chat", flushPayload);
+			nodeSendToSession(sessionKey, "chat", flushPayload);
+		}
+		chatRunState.pendingDeltaText.delete(clientRunId);
 		const normalizedHeartbeatText = normalizeHeartbeatChatFinalText({
 			runId: clientRunId,
 			sourceRunId,
@@ -2137,6 +2208,14 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 			if (recipients && recipients.size > 0) broadcastToConnIds("agent", toolPayload, recipients);
 		} else broadcast("agent", agentPayload);
 		const lifecyclePhase = evt.stream === "lifecycle" && typeof evt.data?.phase === "string" ? evt.data.phase : null;
+		if (lifecyclePhase === "start" && sessionKey && !isAborted) {
+			if (!resolveHeartbeatContext(clientRunId, evt.runId)?.isHeartbeat) broadcast("chat", {
+				runId: clientRunId,
+				sessionKey,
+				seq: evt.seq,
+				state: "thinking"
+			});
+		}
 		if (lifecyclePhase && sessionKey && sessionKey.includes(":subagent:")) {
 			if (lifecyclePhase === "start") broadcast("subagent", {
 				phase: "started",
@@ -6406,7 +6485,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.SYMI_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.SYMI_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-D2-SfYYP.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-DEVN6FRR.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -6465,6 +6544,17 @@ function createGatewayReloadHandlers(params) {
 		setCommandLaneConcurrency(CommandLane.Cron, nextConfig.cron?.maxConcurrentRuns ?? 1);
 		setCommandLaneConcurrency(CommandLane.Main, resolveAgentMaxConcurrent(nextConfig));
 		setCommandLaneConcurrency(CommandLane.Subagent, resolveSubagentMaxConcurrent(nextConfig));
+		const newModelPrimary = nextConfig.agents?.defaults?.model?.primary;
+		if (newModelPrimary && newModelPrimary !== state.lastModelPrimary) {
+			const profile = resolveModelProfile(newModelPrimary, nextConfig.models?.profiles);
+			params.broadcast("profile", {
+				event: "profile",
+				profile,
+				modelId: newModelPrimary
+			});
+			params.logReload.info(`model profile broadcast: ${profile.label} for ${newModelPrimary}`);
+			nextState.lastModelPrimary = newModelPrimary;
+		}
 		if (plan.hotReasons.length > 0) params.logReload.info(`config hot reload applied (${plan.hotReasons.join(", ")})`);
 		else if (plan.noopPaths.length > 0) params.logReload.info(`config change applied (dynamic reads: ${plan.noopPaths.join(", ")})`);
 		params.setState(nextState);
@@ -11573,7 +11663,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-CzNZXd1M.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-PKvGnPCv.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CXRSdUr1.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),
@@ -11646,7 +11736,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-BvSaDLuk.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-CQG6acJl.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,