@symerian/symi 2.3.1 → 2.3.3

package/dist/{gateway-cli-DajX3Pye.js → gateway-cli-B7khyAHs.js}

@@ -1,155 +1,155 @@
 import { _ as expandHomePrefix, g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, E as truncateUtf16Safe, H as getLogger, P as setVerbose, R as colorize, S as shortenHomePath, U as getResolvedLoggerSettings, V as getChildLogger, c as ensureDir, t as CONFIG_DIR, y as resolveUserPath, z as isRich } from "./utils-B-0b9bGM.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-EAliFiVK.js";
-import { $ as normalizeOptionalSessionKey, An as initSubagentRegistry, Ar as extractImageContentFromSource, At as sleepWithAbort, B as setPreRestartDeferralCheck, Bn as registerAgentRunContext, C as loadSessionEntry, Dr as DEFAULT_INPUT_MAX_REDIRECTS, Dt as readJsonBodyWithLimit, Er as DEFAULT_INPUT_IMAGE_MIMES, Et as handleSlackHttpRequest, F as emitGatewayRestart, Fn as readLatestAssistantReply, G as summarizeRestartSentinel, Gt as getCliSessionId, Ht as createDefaultDeps, I as isGatewaySigusr1RestartExternallyAllowed, In as clearAgentRunContext, J as normalizeHttpWebhookUrl, Kt as setCliSessionId, L as markGatewaySigusr1RestartHandled, Ln as emitAgentEvent, Lt as resolveOutboundTarget, Mr as resolveInputFileLimits, N as consumeGatewaySigusr1RestartAuthorization, On as countActiveDescendantRuns, Or as DEFAULT_INPUT_TIMEOUT_MS, Ot as requestBodyErrorToText, P as deferGatewayRestartUntilIdle, Pn as runSubagentAnnounceFlow, Pr as resolveAgentTimeoutMs, Q as normalizeOptionalAgentId, Rn as getAgentRunContext, Rt as resolveSessionDeliveryTarget, Tr as DEFAULT_INPUT_IMAGE_MAX_BYTES, U as formatRestartSentinelMessage, V as consumeRestartSentinel, Wt as runWithModelFallback, Xt as resolveAgentAvatar, Z as inferLegacyName, _ as resolveAnnounceTargetFromKey, _t as loadSymiPlugins, ar as setCommandLaneConcurrency, at as hasLegacyDeliveryHints, cn as buildHistoryContextFromEntries, cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, d as getActiveEmbeddedRunCount, en as buildSafeExternalPrompt, et as normalizeOptionalText, fr as stripHeartbeatToken, ft as requestHeartbeatNow, g as createSymiTools, h as buildDefaultToolPolicyPipelineSteps, hn as getTotalPendingReplies, ht as getPluginToolMeta, i as resolveCronStyleNow, ir as resetAllLanes, it as buildDeliveryFromLegacyPayload, j as resetDirectoryCache, jn as listDescendantRunsForRequester, jr as normalizeMimeList, jt as agentCommand, k as resolveOutboundSessionRoute, kn as countActiveRunsForSession, kr as extractFileContentFromSource, kt as computeBackoff, l as runEmbeddedPiAgent, m as applyToolPolicyPipeline, nn as getHookType, nt as normalizeRequiredName, or as waitForActiveTasks, ot as stripLegacyDeliveryFields, p as resolveModelProfile, pr as lookupContextTokens, qt as runCliAgent, rn as isExternalHookSession, rr as getTotalQueueSize, rt as migrateLegacyCronPayload, sr as CommandLane, tn as detectSuspiciousPatterns, tr as getActiveTaskCount, tt as normalizePayloadToSystemText, xr as enqueueSystemEvent, z as setGatewaySigusr1RestartPolicy, zn as onAgentEvent, zt as createOutboundSendDeps } from "./reply-SBi_U7P7.js";
+import { $ as normalizeOptionalSessionKey, An as countActiveRunsForSession, Ar as extractFileContentFromSource, At as computeBackoff, B as setPreRestartDeferralCheck, Bn as onAgentEvent, Bt as createOutboundSendDeps, C as loadSessionEntry, Dr as DEFAULT_INPUT_IMAGE_MIMES, Dt as handleSlackHttpRequest, Er as DEFAULT_INPUT_IMAGE_MAX_BYTES, F as emitGatewayRestart, Fn as runSubagentAnnounceFlow, Fr as resolveAgentTimeoutMs, G as summarizeRestartSentinel, Gt as runWithModelFallback, I as isGatewaySigusr1RestartExternallyAllowed, In as readLatestAssistantReply, J as normalizeHttpWebhookUrl, Jt as runCliAgent, Kt as getCliSessionId, L as markGatewaySigusr1RestartHandled, Ln as clearAgentRunContext, Mn as listDescendantRunsForRequester, Mr as normalizeMimeList, Mt as agentCommand, N as consumeGatewaySigusr1RestartAuthorization, Nr as resolveInputFileLimits, Or as DEFAULT_INPUT_MAX_REDIRECTS, Ot as readJsonBodyWithLimit, P as deferGatewayRestartUntilIdle, Q as normalizeOptionalAgentId, Rn as emitAgentEvent, Rt as resolveOutboundTarget, Sr as enqueueSystemEvent, U as formatRestartSentinelMessage, Ut as createDefaultDeps, V as consumeRestartSentinel, Vn as registerAgentRunContext, Z as inferLegacyName, Zt as resolveAgentAvatar, _ as resolveAnnounceTargetFromKey, ar as resetAllLanes, at as hasLegacyDeliveryHints, cr as CommandLane, d as getActiveEmbeddedRunCount, et as normalizeOptionalText, ft as stripModelTokens, g as createSymiTools, gn as getTotalPendingReplies, gt as getPluginToolMeta, h as buildDefaultToolPolicyPipelineSteps, i as resolveCronStyleNow, in as isExternalHookSession, ir as getTotalQueueSize, it as buildDeliveryFromLegacyPayload, j as resetDirectoryCache, jn as initSubagentRegistry, jr as extractImageContentFromSource, jt as sleepWithAbort, k as resolveOutboundSessionRoute, kn as countActiveDescendantRuns, kr as DEFAULT_INPUT_TIMEOUT_MS, kt as requestBodyErrorToText, l as runEmbeddedPiAgent, ln as buildHistoryContextFromEntries, lr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, m as applyToolPolicyPipeline, mr as lookupContextTokens, nn as detectSuspiciousPatterns, nr as getActiveTaskCount, nt as normalizeRequiredName, or as setCommandLaneConcurrency, ot as stripLegacyDeliveryFields, p as resolveModelProfile, pr as stripHeartbeatToken, pt as requestHeartbeatNow, qt as setCliSessionId, rn as getHookType, rt as migrateLegacyCronPayload, sr as waitForActiveTasks, tn as buildSafeExternalPrompt, tt as normalizePayloadToSystemText, vt as loadSymiPlugins, z as setGatewaySigusr1RestartPolicy, zn as getAgentRunContext, zt as resolveSessionDeliveryTarget } from "./reply-DVxU0AMq.js";
 import { S as parseAgentSessionKey, c as normalizeMainKey, f as toAgentRequestSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, p as toAgentStoreSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey, y as isCronRunSessionKey } from "./session-key-DCt45XZa.js";
-import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
+import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-MF6_6SCS.js";
 import { C as createInternalHookEvent, S as clearInternalHooks, T as triggerInternalHook, m as createEmptyPluginRegistry, r as DEFAULT_CHAT_CHANNEL, w as registerInternalHook } from "./registry-Cja8eT7G.js";
 import { a as setConsoleSubsystemFilter, f as defaultRuntime, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { i as logDebug, n as runExec, s as logWarn, t as runCommandWithTimeout } from "./exec-CWkblSrI.js";
-import { C as ensureAgentWorkspace, D as resolveDefaultAgentWorkspaceDir, O as resolveWorkspaceTemplateDir, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter } from "./agent-scope-CgUHAtCo.js";
-import { Gt as DEFAULT_MODEL, Kt as DEFAULT_PROVIDER, Rt as isPidAlive, Wt as DEFAULT_CONTEXT_TOKENS, a as getModelRefStatus, d as resolveAllowedModelRef, h as resolveHooksGmailModel, o as isCliProvider, p as resolveConfiguredModelRef, y as resolveThinkingDefault } from "./model-selection-CyFvYcRt.js";
+import { C as ensureAgentWorkspace, D as resolveDefaultAgentWorkspaceDir, O as resolveWorkspaceTemplateDir, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter } from "./agent-scope-BRwEc2pG.js";
+import { Gt as DEFAULT_MODEL, Kt as DEFAULT_PROVIDER, Rt as isPidAlive, Wt as DEFAULT_CONTEXT_TOKENS, a as getModelRefStatus, d as resolveAllowedModelRef, h as resolveHooksGmailModel, o as isCliProvider, p as resolveConfiguredModelRef, y as resolveThinkingDefault } from "./model-selection-X1oLh3CE.js";
 import "./github-copilot-token-DAu1a6BX.js";
 import { t as formatCliCommand } from "./command-format-COaS-S7B.js";
 import "./boolean-BsqeuxE6.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DPCHYPeH.js";
 import { _ as normalizeGatewayClientMode, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient } from "./message-channel-aT-I_DTX.js";
-import "./send-CZr1hVHY.js";
-import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-CHwyw6l5.js";
+import "./send-BnuIB59F.js";
+import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-CJMcIRQM.js";
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-C4BxOMWX.js";
 import { a as isPathInsideWithRealpath } from "./legacy-names-Be3msDZo.js";
-import { d as registerUnhandledRejectionHandler } from "./runner-CUglpiFP.js";
-import "./image-D9uvDTrc.js";
-import "./models-config-qyOXrOli.js";
+import { d as registerUnhandledRejectionHandler } from "./runner-Cen70krW.js";
+import "./image-BiY-PfMh.js";
+import "./models-config-CqDdkHJq.js";
 import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-CNPyv_ax.js";
-import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-C-T6hOMv.js";
-import "./chrome-DtPkPq9T.js";
+import "./pi-embedded-helpers-DO6u9K2t.js";
+import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-BzNrUHpt.js";
+import "./chrome-r4RThPxq.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-D5dKabOc.js";
 import { t as safeEqualSecret } from "./secret-equal-D7A3Bol7.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-B2SPYrh4.js";
 import { a as isTrustedProxyAddress, d as resolveGatewayListenHosts, f as resolveHostName, l as resolveClientIp, n as isLoopbackAddress, o as isValidIPv4, r as isLoopbackHost, s as normalizeHostHeader, t as rawDataToString, u as resolveGatewayBindHost } from "./ws-C7EXRv8z.js";
 import { a as resolveGatewayAuth, c as createAuthRateLimiter, i as isLocalDirectRequest, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-B741uFtk.js";
-import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-CEpFjqSk.js";
+import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-DUXqnh6l.js";
 import { d as hasBinary } from "./frontmatter-DWQhtOo7.js";
-import { r as buildWorkspaceSkillSnapshot } from "./skills-6jdJQ5ZL.js";
-import "./routes-Ba9CUQ8M.js";
+import { r as buildWorkspaceSkillSnapshot } from "./skills-DqQUtOph.js";
+import "./routes-CE-ohckF.js";
 import "./redact-f-Q-hFt_.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-BF3TeRH2.js";
-import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CUjO1ca2.js";
-import "./paths-BBm9fwuG.js";
+import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CTDvb1DF.js";
+import "./paths-CT6jsi4E.js";
 import { t as SsrFBlockedError } from "./ssrf-BCYMnxkM.js";
-import { c as detectMime } from "./image-ops-1OJMSAUX.js";
-import "./store-r1DJSDq-.js";
-import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-BOmtxoTv.js";
+import { c as detectMime } from "./image-ops-DYbDWaIA.js";
+import "./store-DvtcmOKj.js";
+import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-OZQlocB7.js";
 import "./trash-DcMh1i4B.js";
-import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-DgYpBvse.js";
-import "./dock-BhS32F6E.js";
-import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-DKDeQZF0.js";
-import { n as resolveWhatsAppAccount } from "./accounts-DDuIpcln.js";
-import "./accounts-bK-Yqdwx.js";
-import "./accounts-DyJN4_vR.js";
-import { t as buildChannelAccountBindings } from "./bindings-DFaVVCsf.js";
+import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-D5a7H247.js";
+import "./dock-BYiRZSgZ.js";
+import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-BAyxWQSz.js";
+import { n as resolveWhatsAppAccount } from "./accounts-Cd816n6l.js";
+import "./accounts-CokRskCl.js";
+import "./accounts-mN_EcgxC.js";
+import { t as buildChannelAccountBindings } from "./bindings-ChzePa8q.js";
 import "./logging-w5jq5901.js";
-import "./send-CPF8hSFp.js";
+import "./send-dH0xroTu.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath } from "./paths-CyhzMxFA.js";
-import "./tool-images-DvUBlqjX.js";
+import "./tool-images-B-pqX3nX.js";
 import "./tool-display-D8N3rsYt.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-DOPkVbh3.js";
-import "./api-key-rotation-CzuPlV2t.js";
-import "./local-roots-aAFLQGkY.js";
-import "./sqlite-Dx3J_aSE.js";
-import { n as loadModelCatalog } from "./model-catalog-DvBJ8pMD.js";
+import "./api-key-rotation-CEr3lKih.js";
+import "./local-roots-BBeKX7PX.js";
+import "./sqlite-BV5ILFtC.js";
+import { n as loadModelCatalog } from "./model-catalog-C3NLvWC2.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-BuceUQDl.js";
-import { r as getMachineDisplayName } from "./with-timeout-gmK6RciS.js";
-import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-CceEhg3d.js";
+import { r as getMachineDisplayName } from "./with-timeout-Cs6_LnHB.js";
+import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-Um8yyhRA.js";
 import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-DjBRPfu9.js";
 import "./diagnostic-session-state-CUslJyKP.js";
-import "./send-Cutb0ZDY.js";
-import "./model-tWhwnFf8.js";
-import { a as resolveAgentIdentity } from "./reply-prefix-CE2YmmsD.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-Ca5r9AUb.js";
-import { i as resolveMemorySearchConfig } from "./manager-D4LJSRyZ.js";
+import "./send-BEeuDXqy.js";
+import "./model-CeeOcylL.js";
+import { a as resolveAgentIdentity } from "./reply-prefix-BLOOs1aW.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-lk6fRiwy.js";
+import { i as resolveMemorySearchConfig } from "./manager-C1CfGzZ2.js";
 import "./retry-BoS4e4X_.js";
-import { a as ToolInputError } from "./target-errors-7AvoVa10.js";
+import { a as ToolInputError } from "./target-errors-CCz79CmV.js";
 import "./chunk-1dhPX1NK.js";
-import "./markdown-tables-CEbN0fEm.js";
-import "./ir-DZam9q5M.js";
+import "./markdown-tables-ZwP14ydw.js";
+import "./ir-Dt4hOzxG.js";
 import "./render-CXDO_kgw.js";
-import { r as isRestartEnabled } from "./commands-BNLCWX6e.js";
-import "./commands-registry-BT0-zzs3.js";
-import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-CQSyCS4M.js";
-import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-CJaS1iRF.js";
-import "./pairing-token-CX3NN_qj.js";
+import { r as isRestartEnabled } from "./commands-CtocZ4Lg.js";
+import "./commands-registry-BZ0ZSQpM.js";
+import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-BsrZnuSi.js";
+import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-Dd7-bkfG.js";
+import "./pairing-token-AV-MMfVE.js";
 import "./channel-activity-BOiuJS3t.js";
 import "./fetch-DTNGXEzX.js";
-import "./tables-BEzT0Da4.js";
-import "./send-tanEMpHN.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-CK726Dzq.js";
+import "./tables-C38rzF6E.js";
+import "./send-BjdAgYLu.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-B8ktu-6j.js";
 import "./proxy-DU7W9XSc.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
 import { n as runCommandWithRuntime } from "./cli-utils-DN_hM6ov.js";
 import { t as formatHelpExamples } from "./help-format-B_-M23wP.js";
 import { n as withProgress } from "./progress-jIePzvGA.js";
-import "./resolve-route-BMoTaVAH.js";
-import "./replies-vgss3_QA.js";
-import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-Cxw-jNxU.js";
-import "./workspace-dirs-GpkFi6Kw.js";
-import "./outbound-attachment-D_QuKi8U.js";
+import "./resolve-route-BcnaXYvh.js";
+import "./replies-BL7IBg12.js";
+import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-ZXbEITKi.js";
+import "./workspace-dirs-DKu48umx.js";
+import "./outbound-attachment-D62E0xDI.js";
 import "./delivery-queue-Df1uodAG.js";
 import { c as hasNonzeroUsage, s as deriveSessionTotalTokens } from "./session-cost-usage-BG4AXrGN.js";
-import "./send-CXxQ_f7L.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-ZmZYzlq3.js";
+import "./send-C95ZRvja.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-Dixh6cNh.js";
 import "./prompt-style-8JqOYj0q.js";
-import "./pairing-labels-2S6x2UoV.js";
+import "./pairing-labels-27SOKDzJ.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-BzKEDn0q.js";
 import { t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-Kn31mBcW.js";
-import "./nodes-screen-VBGXKdLk.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CIDBbw6x.js";
-import "./control-service-Bz7rxLWq.js";
+import "./nodes-screen-C99kfE1u.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-juZV2uUv.js";
+import "./control-service-B8H3Bqpv.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BUClb97_.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-DuWs0Aak.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-DjfBv8kq.js";
 import { i as onHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-U4BL57eQ.js";
 import { t as ensureSymiCliOnPath } from "./path-env-MnzRq6nD.js";
 import "./runtime-guard-B37eizu-.js";
-import { t as forceFreePortAndWait } from "./ports-BX0kKI0g.js";
+import { t as forceFreePortAndWait } from "./ports-b36gHZbA.js";
 import "./catalog-RiADx7MA.js";
-import "./skills-status-CURJKnyY.js";
+import "./skills-status-DS-NZQiq.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BL-M3lPt.js";
 import { n as inheritOptionFromParent } from "./command-options-BtDai3oC.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BcGbMZD1.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-BzX1uAKy.js";
-import "./install-safe-path-tCLiMpmO.js";
-import "./skill-scanner-CLs8u6vQ.js";
-import "./channels-status-issues-B_kBkl_u.js";
-import "./daemon-runtime-2mwX-jqj.js";
-import "./systemd-riq8uNJQ.js";
-import "./service-Cl74hx8J.js";
-import "./lifecycle-core-D6LYXpFj.js";
-import "./systemd-hints-BR6gChwm.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-Bbm7MwFV.js";
+import "./install-safe-path-Qqr_t_tH.js";
+import "./skill-scanner-CXg9eeyc.js";
+import "./channels-status-issues-BoH1ZJPN.js";
+import "./daemon-runtime--RiRUx_2.js";
+import "./systemd-AhJEsmIk.js";
+import "./service--qMN5DPm.js";
+import "./lifecycle-core-BkPSoGM2.js";
+import "./systemd-hints-Db0oImvK.js";
 import { t as parsePort$1 } from "./parse-port-Vm8F7Kus.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-DscwlsKW.js";
-import "./diagnostics-BAMlsVVX.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-Dx4SXRyp.js";
+import "./diagnostics-D2yUMZN1.js";
 import "./table-BTgkRafz.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DzLerlJb.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BJvwnR5z.js";
-import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-CrITRV6w.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Jm_QdQJQ.js";
+import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-BSB9NPSO.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-BHTF5p0X.js";
-import { r as pickGatewaySelfPresence } from "./status-CwXg8OO1.js";
-import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-f056vLGT.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
-import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-CtckACbb.js";
-import { t as runOnboardingWizard } from "./onboarding-eVb5gvwo.js";
-import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-Cm6W01ne.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-EKnCwrqK.js";
+import { r as pickGatewaySelfPresence } from "./status-CgPPKk09.js";
+import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-DkKXiUEF.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DqGziq7x.js";
+import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-C0oYCI89.js";
+import { t as runOnboardingWizard } from "./onboarding-CdlGKa0U.js";
+import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-BgBq7KRL.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-0et2AR44.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-Bv0M7ka7.js";
-import "./agents.config-2HlZJsR3.js";
-import "./dm-policy-shared-Bh3TbexU.js";
-import "./node-service-Cxz4e-Qd.js";
-import "./status.update-DtwCUTf-.js";
-import "./skills-install-D67isO1L.js";
-import "./update-runner-BSQFv9b6.js";
-import { t as resolveAgentSessionDirs } from "./session-dirs-DWgIYmAt.js";
+import "./agents.config-u_ibObha.js";
+import "./dm-policy-shared-BCSw0GJS.js";
+import "./node-service-CJygtY5M.js";
+import "./status.update-CmGpjKSr.js";
+import "./skills-install-DjcTy3CT.js";
+import "./update-runner-BgzyPjF5.js";
+import { t as resolveAgentSessionDirs } from "./session-dirs-D3qlvucD.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-CYxdoAlY.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
@@ -158,7 +158,7 @@ import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
 import chalk from "chalk";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { spawn } from "node:child_process";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
@@ -1151,7 +1151,7 @@ function shouldSkipCheck(allowInTests) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fs$1.readFile(statePath, "utf-8");
+		const raw = await fsPromises.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1159,8 +1159,8 @@ async function readState(statePath) {
 	}
 }
 async function writeState(statePath, state) {
-	await fs$1.mkdir(path.dirname(statePath), { recursive: true });
-	await fs$1.writeFile(statePath, JSON.stringify(state, null, 2), "utf-8");
+	await fsPromises.mkdir(path.dirname(statePath), { recursive: true });
+	await fsPromises.writeFile(statePath, JSON.stringify(state, null, 2), "utf-8");
 }
 function sameUpdateAvailable(a, b) {
 	if (a === b) return true;
@@ -1863,43 +1863,23 @@ function createChannelManager(opts) {
 }
 
 //#endregion
-//#region src/agents/model-token-filter.ts
-/**
-* Strips model-specific control tokens from streamed text.
-*
-* Used both server-side (in the streaming pipeline) and by the Glass UI
-* (as a defense-in-depth fallback).  The patterns here cover tokens known
-* to leak from Gemma 4 / vLLM; Claude output is left untouched.
-*/
-const GEMMA_TOKEN_PATTERNS = [
-	/<\|channel>\w*/g,
-	/<channel\|>/g,
-	/<start_of_turn>(?:model|user)?/g,
-	/<end_of_turn>/g,
-	/<\|(?:fim_prefix|fim_suffix|fim_middle)\|>/g,
-	/^\s*<bos>\s*/gm
-];
-const GEMMA_MODEL_HINTS = ["gemma", "redsand/"];
-function isGemmaModel(modelId) {
-	const lower = modelId.toLowerCase();
-	return GEMMA_MODEL_HINTS.some((hint) => lower.includes(hint));
-}
+//#region src/gateway/server-chat.ts
 /**
-* Strip known control tokens from text.  Only applies to Gemma-family models;
-* other models pass through unchanged.
+* Strip Gemma's self-verification monologue blocks from the final text.
+* These follow a consistent pattern appended after the real answer:
+*   "I have addressed the request fully.\n**Verification:**\n..."
 */
-function stripModelTokens(text, modelId) {
-	if (!text || !isGemmaModel(modelId)) return text;
-	let result = text;
-	for (const re of GEMMA_TOKEN_PATTERNS) {
-		re.lastIndex = 0;
-		result = result.replace(re, "");
+const MONOLOGUE_PATTERN = /\n*I have addressed the request fully\.?\s*(?:\n\*\*Verification:\*\*[\s\S]*)?$/;
+const MONOLOGUE_FALLBACK_PATTERNS = [/\n*\*\*Verification:\*\*\s*\n[\s\S]*?Everything is correct\.?\s*✅?\s*$/, /\n*Address requirements:[\s\S]*?Everything is correct\.?\s*✅?\s*$/];
+function suppressMonologueBlock(text) {
+	let result = text.replace(MONOLOGUE_PATTERN, "");
+	if (result !== text) return result.trim();
+	for (const pattern of MONOLOGUE_FALLBACK_PATTERNS) {
+		result = text.replace(pattern, "");
+		if (result !== text) return result.trim();
 	}
-	return result;
+	return text;
 }
-
-//#endregion
-//#region src/gateway/server-chat.ts
 function resolveHeartbeatAckMaxChars$1() {
 	try {
 		const cfg = loadConfig();
@@ -2054,21 +2034,16 @@ function createToolEventRecipientRegistry() {
 function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSession, agentRunSeq, chatRunState, resolveSessionKeyForRun, clearAgentRunContext, toolEventRecipients }) {
 	const emitChatDelta = (sessionKey, clientRunId, sourceRunId, seq, text) => {
 		if (isSilentReplyText(text, SILENT_REPLY_TOKEN)) return;
-		let resolvedModelId;
-		try {
-			resolvedModelId = loadConfig().agents?.defaults?.model?.primary ?? void 0;
-		} catch {}
-		const cleanedText = resolvedModelId ? stripModelTokens(text, resolvedModelId) : text;
-		chatRunState.buffers.set(clientRunId, cleanedText);
+		chatRunState.buffers.set(clientRunId, text);
 		if (shouldHideHeartbeatChatOutput(clientRunId, sourceRunId)) return;
 		const now = Date.now();
 		if (now - (chatRunState.deltaSentAt.get(clientRunId) ?? 0) < 150) {
-			chatRunState.pendingDeltaText.set(clientRunId, (chatRunState.pendingDeltaText.get(clientRunId) ?? "") + cleanedText);
+			chatRunState.pendingDeltaText.set(clientRunId, (chatRunState.pendingDeltaText.get(clientRunId) ?? "") + text);
 			return;
 		}
 		const buffered = chatRunState.pendingDeltaText.get(clientRunId) ?? "";
 		chatRunState.pendingDeltaText.delete(clientRunId);
-		const fullText = buffered + cleanedText;
+		const fullText = buffered + text;
 		chatRunState.deltaSentAt.set(clientRunId, now);
 		const payload = {
 			runId: clientRunId,
@@ -2110,10 +2085,19 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 			nodeSendToSession(sessionKey, "chat", flushPayload);
 		}
 		chatRunState.pendingDeltaText.delete(clientRunId);
+		let bufferedText = chatRunState.buffers.get(clientRunId)?.trim() ?? "";
+		let resolvedModelId;
+		try {
+			resolvedModelId = loadConfig().agents?.defaults?.model?.primary ?? void 0;
+		} catch {}
+		if (resolvedModelId) {
+			bufferedText = stripModelTokens(bufferedText, resolvedModelId);
+			bufferedText = suppressMonologueBlock(bufferedText);
+		}
 		const normalizedHeartbeatText = normalizeHeartbeatChatFinalText({
 			runId: clientRunId,
 			sourceRunId,
-			text: chatRunState.buffers.get(clientRunId)?.trim() ?? ""
+			text: bufferedText
 		});
 		const text = normalizedHeartbeatText.text.trim();
 		const shouldSuppressSilent = normalizedHeartbeatText.suppress || isSilentReplyText(text, SILENT_REPLY_TOKEN);
@@ -6489,7 +6473,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.SYMI_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.SYMI_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-Bz7rxLWq.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-B8H3Bqpv.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -6717,7 +6701,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fs$1.lstat(candidate);
+		const st = await fsPromises.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -6754,8 +6738,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fs$1.stat(indexPath);
-		await fs$1.stat(bundlePath);
+		await fsPromises.stat(indexPath);
+		await fsPromises.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -6764,7 +6748,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -6985,13 +6969,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fs$1.realpath(rootDir);
+	const rootReal = await fsPromises.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fs$1.stat(indexPath);
+		await fsPromises.stat(indexPath);
 	} catch {
 		try {
-			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -9685,7 +9669,7 @@ function resolveGatewayOwnerStatus(pid, payload, platform) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fsPromises.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -9719,11 +9703,11 @@ async function acquireGatewayLock(opts = {}) {
 	const staleMs = opts.staleMs ?? DEFAULT_STALE_MS;
 	const platform = opts.platform ?? process.platform;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
+	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fs$1.open(lockPath, "wx");
+		const handle = await fsPromises.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -9737,7 +9721,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fs$1.rm(lockPath, { force: true });
+				await fsPromises.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -9746,7 +9730,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? resolveGatewayOwnerStatus(ownerPid, lastPayload, platform) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fs$1.rm(lockPath, { force: true });
+			await fsPromises.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -9756,13 +9740,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fs$1.stat(lockPath);
+				const st = await fsPromises.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = true;
 			}
 			if (stale) {
-				await fs$1.rm(lockPath, { force: true });
+				await fsPromises.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -11667,7 +11651,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-Df1uodAG.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-CceEhg3d.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-Um8yyhRA.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),
@@ -11740,7 +11724,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-Z1IOT6Vc.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-BmQAULMj.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,