@symerian/symi 2.3.3 → 2.3.4

package/dist/{reply-DVxU0AMq.js → reply-DSjeqLEz.js}

@@ -3,101 +3,101 @@ import { g as resolveStateDir, r as STATE_DIR, u as resolveGatewayPort, y as res
 import { B as theme, C as sleep$1, D as isPlainObject, E as truncateUtf16Safe, F as shouldLogVerbose, J as normalizeLogLevel, L as warn, M as logVerbose, O as danger, S as shortenHomePath, V as getChildLogger, X as resolvePreferredSymiTmpDir, d as isRecord$1, i as clampInt, l as escapeRegExp, m as normalizeE164, t as CONFIG_DIR, w as sliceUtf16Safe, x as shortenHomeInString, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels, u as resolveResponseUsageMode } from "./thinking-EAliFiVK.js";
 import { C as resolveThreadParentSessionKey, S as parseAgentSessionKey, _ as getSubagentDepth, b as isCronSessionKey, c as normalizeMainKey, d as sanitizeAgentId, h as normalizeAccountId$2, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, o as classifySessionKeyShape, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, u as resolveThreadSessionKeys, v as isAcpSessionKey, x as isSubagentSessionKey, y as isCronRunSessionKey } from "./session-key-DCt45XZa.js";
-import { t as resolveSymiPackageRoot } from "./symi-root-MF6_6SCS.js";
+import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { C as createInternalHookEvent, T as triggerInternalHook, _ as clearPluginCommands, b as listPluginCommands, c as normalizeAnyChannelId, f as requireActivePluginRegistry, g as normalizePluginHttpPath, h as createPluginRegistry, l as normalizeChannelId, n as CHAT_CHANNEL_ORDER, p as setActivePluginRegistry, r as DEFAULT_CHAT_CHANNEL, v as executePluginCommand, x as matchPluginCommand, y as getPluginCommandSpecs } from "./registry-Cja8eT7G.js";
 import { d as createNonExitingRuntime, f as defaultRuntime, t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { a as logError, i as logDebug, n as runExec, o as logInfo, r as spawnWithFallback, s as logWarn, t as runCommandWithTimeout } from "./exec-CWkblSrI.js";
-import { C as ensureAgentWorkspace, E as loadWorkspaceBootstrapFiles, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, f as resolveSessionAgentIds, g as DEFAULT_IDENTITY_FILENAME, h as DEFAULT_BOOTSTRAP_FILENAME, i as resolveAgentDir, l as resolveDefaultAgentId, m as DEFAULT_AGENT_WORKSPACE_DIR, n as listAgentIds, o as resolveAgentModelPrimary, r as resolveAgentConfig, s as resolveAgentSkillsFilter, u as resolveEffectiveModelFallbacks, w as filterBootstrapFilesForSession } from "./agent-scope-BRwEc2pG.js";
-import { At as ensureAuthProfileStore, Bt as normalizeSecretInput, Et as markAuthProfileGood, Ft as resolveSymiAgentDir, G as getCustomProviderApiKey, Gt as DEFAULT_MODEL, H as OLLAMA_NATIVE_BASE_URL, It as withFileLock, K as requireApiKey, Kt as DEFAULT_PROVIDER, Pt as resolveAuthStorePathForDisplay, Q as getShellPathFromLoginShell, Tt as listProfilesForProvider, U as createOllamaStreamFn, Vt as resolveAuthProfileDisplayLabel, W as getApiKeyForModel, Wt as DEFAULT_CONTEXT_TOKENS, X as resolveModelAuthMode, Y as resolveEnvApiKey, c as normalizeModelRef$2, et as resolveShellEnvFallbackTimeoutMs, ft as resolveAuthProfileOrder, g as resolveModelRefFromString, gt as markAuthProfileUsed, ht as markAuthProfileFailure, i as findNormalizedProviderValue, l as normalizeProviderId, m as resolveDefaultModelForAgent, mt as isProfileInCooldown, n as buildConfiguredAllowlistKeys, o as isCliProvider, p as resolveConfiguredModelRef, pt as getSoonestCooldownExpiry, q as resolveApiKeyForProvider, r as buildModelAliasIndex, s as modelKey, t as buildAllowedModelSet, u as parseModelRef, v as resolveSubagentSpawnModelSelection, vt as resolveApiKeyForProfile, wt as dedupeProfileIds, y as resolveThinkingDefault } from "./model-selection-X1oLh3CE.js";
+import { C as ensureAgentWorkspace, E as loadWorkspaceBootstrapFiles, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, f as resolveSessionAgentIds, g as DEFAULT_IDENTITY_FILENAME, h as DEFAULT_BOOTSTRAP_FILENAME, i as resolveAgentDir, l as resolveDefaultAgentId, m as DEFAULT_AGENT_WORKSPACE_DIR, n as listAgentIds, o as resolveAgentModelPrimary, r as resolveAgentConfig, s as resolveAgentSkillsFilter, u as resolveEffectiveModelFallbacks, w as filterBootstrapFilesForSession } from "./agent-scope-CgUHAtCo.js";
+import { At as ensureAuthProfileStore, Bt as normalizeSecretInput, Et as markAuthProfileGood, Ft as resolveSymiAgentDir, G as getCustomProviderApiKey, Gt as DEFAULT_MODEL, H as OLLAMA_NATIVE_BASE_URL, It as withFileLock, K as requireApiKey, Kt as DEFAULT_PROVIDER, Pt as resolveAuthStorePathForDisplay, Q as getShellPathFromLoginShell, Tt as listProfilesForProvider, U as createOllamaStreamFn, Vt as resolveAuthProfileDisplayLabel, W as getApiKeyForModel, Wt as DEFAULT_CONTEXT_TOKENS, X as resolveModelAuthMode, Y as resolveEnvApiKey, c as normalizeModelRef$2, et as resolveShellEnvFallbackTimeoutMs, ft as resolveAuthProfileOrder, g as resolveModelRefFromString, gt as markAuthProfileUsed, ht as markAuthProfileFailure, i as findNormalizedProviderValue, l as normalizeProviderId, m as resolveDefaultModelForAgent, mt as isProfileInCooldown, n as buildConfiguredAllowlistKeys, o as isCliProvider, p as resolveConfiguredModelRef, pt as getSoonestCooldownExpiry, q as resolveApiKeyForProvider, r as buildModelAliasIndex, s as modelKey, t as buildAllowedModelSet, u as parseModelRef, v as resolveSubagentSpawnModelSelection, vt as resolveApiKeyForProfile, wt as dedupeProfileIds, y as resolveThinkingDefault } from "./model-selection-CyFvYcRt.js";
 import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-DAu1a6BX.js";
 import { t as formatCliCommand } from "./command-format-COaS-S7B.js";
 import { t as parseBooleanValue$1 } from "./boolean-BsqeuxE6.js";
 import { t as isTruthyEnvValue } from "./env-DPCHYPeH.js";
 import { a as isInternalMessageChannel, c as listDeliverableMessageChannels, d as resolveMessageChannel, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, o as isMarkdownCapableMessageChannel, p as GATEWAY_CLIENT_IDS, t as INTERNAL_MESSAGE_CHANNEL, u as resolveGatewayMessageChannel } from "./message-channel-aT-I_DTX.js";
-import { $ as parseDiscordTarget, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as createDiscordRestClient, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as createDiscordClient, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordSystemLocation, a as removeReactionDiscord, at as normalizeDiscordAllowList, b as sendWebhookMessageDiscord, bt as fetchChannelPermissionsDiscord, c as formatDiscordComponentEventText, ct as resolveDiscordChannelConfigWithFallback, d as parseDiscordModalCustomId, dt as resolveDiscordOwnerAllowFrom, et as resolveDiscordChannelId, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordShouldRequireMention, g as sendMessageDiscord, gt as formatDiscordUserTag, h as resolveDiscordModalEntry, ht as formatDiscordReactionEmoji, i as removeOwnReactionsDiscord, it as isDiscordGroupAllowedByPolicy, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as resolveDiscordGuildEntry, m as resolveDiscordComponentEntry, mt as shouldEmitDiscordReactionNotification, n as fetchReactionsDiscord, nt as listDiscordDirectoryPeersLive, o as sendDiscordComponentMessage, ot as normalizeDiscordSlug, p as readDiscordComponentSpec, pt as resolveGroupDmAllow, q as deleteChannelDiscord, r as reactMessageDiscord, rt as allowListMatches$1, s as createDiscordFormModal, st as resolveDiscordAllowListMatch, tt as listDiscordDirectoryGroupsLive, u as parseDiscordComponentCustomIdForCarbon, ut as resolveDiscordMemberAccessState, v as sendStickerDiscord, vt as resolveTimestampMs, w as fetchMessageDiscord, wt as chunkDiscordTextWithMode, x as createThreadDiscord, xt as hasAnyGuildPermissionDiscord, y as sendVoiceMessageDiscord, yt as fetchDiscord, z as listGuildChannelsDiscord } from "./send-BnuIB59F.js";
-import { A as parseConfigPath, B as resolveAgentMaxConcurrent, C as parseDurationMs, D as setConfigOverride, E as resetConfigOverrides, H as VERSION, M as unsetConfigValueAtPath, O as unsetConfigOverride, T as getConfigOverrides, _ as isInboundPathAllowed, b as resolveIMessageRemoteAttachmentRoots, c as resolveConfigSnapshotHash, h as resolveTelegramCustomCommands, i as loadConfig, j as setConfigValueAtPath, k as getConfigValueAtPath, l as writeConfigFile, m as normalizeTelegramCommandName, o as readConfigFileSnapshot, p as TELEGRAM_COMMAND_NAME_PATTERN, u as validateConfigObjectWithPlugins, w as validateJsonSchemaValue, x as normalizeScpRemoteHost, y as resolveIMessageAttachmentRoots, z as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH } from "./config-CJMcIRQM.js";
+import { $ as parseDiscordTarget, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as createDiscordRestClient, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as createDiscordClient, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordSystemLocation, a as removeReactionDiscord, at as normalizeDiscordAllowList, b as sendWebhookMessageDiscord, bt as fetchChannelPermissionsDiscord, c as formatDiscordComponentEventText, ct as resolveDiscordChannelConfigWithFallback, d as parseDiscordModalCustomId, dt as resolveDiscordOwnerAllowFrom, et as resolveDiscordChannelId, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordShouldRequireMention, g as sendMessageDiscord, gt as formatDiscordUserTag, h as resolveDiscordModalEntry, ht as formatDiscordReactionEmoji, i as removeOwnReactionsDiscord, it as isDiscordGroupAllowedByPolicy, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as resolveDiscordGuildEntry, m as resolveDiscordComponentEntry, mt as shouldEmitDiscordReactionNotification, n as fetchReactionsDiscord, nt as listDiscordDirectoryPeersLive, o as sendDiscordComponentMessage, ot as normalizeDiscordSlug, p as readDiscordComponentSpec, pt as resolveGroupDmAllow, q as deleteChannelDiscord, r as reactMessageDiscord, rt as allowListMatches$1, s as createDiscordFormModal, st as resolveDiscordAllowListMatch, tt as listDiscordDirectoryGroupsLive, u as parseDiscordComponentCustomIdForCarbon, ut as resolveDiscordMemberAccessState, v as sendStickerDiscord, vt as resolveTimestampMs, w as fetchMessageDiscord, wt as chunkDiscordTextWithMode, x as createThreadDiscord, xt as hasAnyGuildPermissionDiscord, y as sendVoiceMessageDiscord, yt as fetchDiscord, z as listGuildChannelsDiscord } from "./send-CZr1hVHY.js";
+import { A as parseConfigPath, B as resolveAgentMaxConcurrent, C as parseDurationMs, D as setConfigOverride, E as resetConfigOverrides, H as VERSION, M as unsetConfigValueAtPath, O as unsetConfigOverride, T as getConfigOverrides, _ as isInboundPathAllowed, b as resolveIMessageRemoteAttachmentRoots, c as resolveConfigSnapshotHash, h as resolveTelegramCustomCommands, i as loadConfig, j as setConfigValueAtPath, k as getConfigValueAtPath, l as writeConfigFile, m as normalizeTelegramCommandName, o as readConfigFileSnapshot, p as TELEGRAM_COMMAND_NAME_PATTERN, u as validateConfigObjectWithPlugins, w as validateJsonSchemaValue, x as normalizeScpRemoteHost, y as resolveIMessageAttachmentRoots, z as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH } from "./config-CHwyw6l5.js";
 import { a as safeStatSync, c as applyTestPluginDefaults, d as resolveEnableState, f as resolveMemorySlotDecision, h as isDangerousHostEnvVarName, i as isPathInside, n as loadPluginManifestRegistry, r as discoverSymiPlugins, u as normalizePluginsConfig } from "./manifest-registry-C4BxOMWX.js";
 import { a as isPathInsideWithRealpath } from "./legacy-names-Be3msDZo.js";
 import { t as normalizeChatType } from "./chat-type-DyovJwCt.js";
 import { n as resolveConversationLabel } from "./conversation-label-Bn5j3lUT.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-CmmmT8IP.js";
-import { _ as applyTemplate, a as resolveMediaAttachmentLocalRoots, c as resolveAttachmentKind, d as registerUnhandledRejectionHandler, f as resolveConcurrency, g as CLI_OUTPUT_MAX_BUFFER, h as resolveMediaUnderstandingScope, i as resolveAutoImageModel, l as buildRandomTempFilePath, m as normalizeMediaUnderstandingChatType, n as createMediaAttachmentCache, o as runCapability, p as resolveTimeoutMs, r as normalizeMediaAttachments, t as buildProviderRegistry } from "./runner-Cen70krW.js";
-import { _ as stripThinkingTagsFromText, a as decodeDataUrl, b as minimaxUnderstandImage, c as extractAssistantThinking, d as formatReasoningMessage, f as inferToolMetaFromArgs, g as stripMinimaxToolCallXml, h as stripDowngradedToolCallText, i as coerceImageModelConfig, l as extractThinkingFromTaggedStream, m as promoteThinkingTagsToBlocks, o as resolveProviderVisionModelFromConfig, p as isAssistantMessage, r as coerceImageAssistantText, s as extractAssistantText$1, u as extractThinkingFromTaggedText, v as stripReasoningTagsFromText, y as extractTextFromChatContent } from "./image-BiY-PfMh.js";
-import { t as ensureSymiModelsJson } from "./models-config-CqDdkHJq.js";
+import { _ as applyTemplate, a as resolveMediaAttachmentLocalRoots, c as resolveAttachmentKind, d as registerUnhandledRejectionHandler, f as resolveConcurrency, g as CLI_OUTPUT_MAX_BUFFER, h as resolveMediaUnderstandingScope, i as resolveAutoImageModel, l as buildRandomTempFilePath, m as normalizeMediaUnderstandingChatType, n as createMediaAttachmentCache, o as runCapability, p as resolveTimeoutMs, r as normalizeMediaAttachments, t as buildProviderRegistry } from "./runner-CUglpiFP.js";
+import { _ as stripThinkingTagsFromText, a as decodeDataUrl, b as minimaxUnderstandImage, c as extractAssistantThinking, d as formatReasoningMessage, f as inferToolMetaFromArgs, g as stripMinimaxToolCallXml, h as stripDowngradedToolCallText, i as coerceImageModelConfig, l as extractThinkingFromTaggedStream, m as promoteThinkingTagsToBlocks, o as resolveProviderVisionModelFromConfig, p as isAssistantMessage, r as coerceImageAssistantText, s as extractAssistantText$1, u as extractThinkingFromTaggedText, v as stripReasoningTagsFromText, y as extractTextFromChatContent } from "./image-D9uvDTrc.js";
+import { t as ensureSymiModelsJson } from "./models-config-qyOXrOli.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-4uUnLc3n.js";
-import { A as isTransientHttpError, C as isContextOverflowError, D as isRateLimitAssistantError, E as isLikelyContextOverflowError, F as ensureSessionHeader, I as resolveBootstrapMaxChars, L as resolveBootstrapTotalMaxChars, M as parseImageSizeError, N as sanitizeUserFacingText, O as isRawApiErrorPayload, P as buildBootstrapContextFiles, R as sanitizeGoogleTurnOrdering, S as isCompactionFailureError, T as isFailoverErrorMessage, _ as formatRawAssistantErrorForUi, a as isMessagingToolDuplicateNormalized, b as isBillingAssistantError, c as extractToolCallsFromAssistant, d as isAntigravityClaude, f as isGoogleModelApi, g as formatBillingErrorMessage, h as formatAssistantErrorText, j as parseImageDimensionError, k as isTimeoutErrorMessage, l as extractToolResultId, m as classifyFailoverReason, n as validateGeminiTurns, o as normalizeTextForComparison, p as BILLING_ERROR_USER_MESSAGE, r as pickFallbackThinkingLevel, s as sanitizeSessionMessagesImages, t as validateAnthropicTurns, u as downgradeOpenAIReasoningBlocks, v as getApiErrorPayloadFingerprint, w as isFailoverAssistantError, x as isCloudCodeAssistFormatError, y as isAuthAssistantError } from "./pi-embedded-helpers-DO6u9K2t.js";
-import { C as stripPluginOnlyAllowlist, S as resolveToolProfilePolicy, T as matchesAnyGlobPattern, _ as collectExplicitAllowlist, a as ensureSandboxWorkspaceForSession, b as mergeAlsoAllowPolicy, c as resolveSandboxRuntimeStatus, d as getBridgeAuthForPort, f as resolveSandboxConfigForAgent, g as buildPluginToolGroups, h as applyOwnerOnlyToolPolicy, o as resolveSandboxContext, v as expandPolicyWithPluginGroups, w as compileGlobPatterns, x as normalizeToolName } from "./sandbox-BzNrUHpt.js";
-import { T as DEFAULT_AI_SNAPSHOT_MAX_CHARS } from "./chrome-r4RThPxq.js";
-import { i as resolveBrowserConfig, m as resolveBrowserControlAuth } from "./server-context-DUXqnh6l.js";
-import { a as resolveSkillsPromptForRun, d as resolveSandboxInputPath, h as applySkillEnvOverridesFromSnapshot, i as loadWorkspaceSkillEntries, l as assertMediaNotDataUrl, m as applySkillEnvOverrides, p as resolveSandboxedMediaSource, r as buildWorkspaceSkillSnapshot, u as assertSandboxPath } from "./skills-DqQUtOph.js";
+import { A as isTransientHttpError, C as isContextOverflowError, D as isRateLimitAssistantError, E as isLikelyContextOverflowError, F as ensureSessionHeader, I as resolveBootstrapMaxChars, L as resolveBootstrapTotalMaxChars, M as parseImageSizeError, N as sanitizeUserFacingText, O as isRawApiErrorPayload, P as buildBootstrapContextFiles, R as sanitizeGoogleTurnOrdering, S as isCompactionFailureError, T as isFailoverErrorMessage, _ as formatRawAssistantErrorForUi, a as isMessagingToolDuplicateNormalized, b as isBillingAssistantError, c as extractToolCallsFromAssistant, d as isAntigravityClaude, f as isGoogleModelApi, g as formatBillingErrorMessage, h as formatAssistantErrorText, j as parseImageDimensionError, k as isTimeoutErrorMessage, l as extractToolResultId, m as classifyFailoverReason, n as validateGeminiTurns, o as normalizeTextForComparison, p as BILLING_ERROR_USER_MESSAGE, r as pickFallbackThinkingLevel, s as sanitizeSessionMessagesImages, t as validateAnthropicTurns, u as downgradeOpenAIReasoningBlocks, v as getApiErrorPayloadFingerprint, w as isFailoverAssistantError, x as isCloudCodeAssistFormatError, y as isAuthAssistantError } from "./pi-embedded-helpers-CNPyv_ax.js";
+import { C as stripPluginOnlyAllowlist, S as resolveToolProfilePolicy, T as matchesAnyGlobPattern, _ as collectExplicitAllowlist, a as ensureSandboxWorkspaceForSession, b as mergeAlsoAllowPolicy, c as resolveSandboxRuntimeStatus, d as getBridgeAuthForPort, f as resolveSandboxConfigForAgent, g as buildPluginToolGroups, h as applyOwnerOnlyToolPolicy, o as resolveSandboxContext, v as expandPolicyWithPluginGroups, w as compileGlobPatterns, x as normalizeToolName } from "./sandbox-C-T6hOMv.js";
+import { T as DEFAULT_AI_SNAPSHOT_MAX_CHARS } from "./chrome-DtPkPq9T.js";
+import { i as resolveBrowserConfig, m as resolveBrowserControlAuth } from "./server-context-CEpFjqSk.js";
+import { a as resolveSkillsPromptForRun, d as resolveSandboxInputPath, h as applySkillEnvOverridesFromSnapshot, i as loadWorkspaceSkillEntries, l as assertMediaNotDataUrl, m as applySkillEnvOverrides, p as resolveSandboxedMediaSource, r as buildWorkspaceSkillSnapshot, u as assertSandboxPath } from "./skills-6jdJQ5ZL.js";
 import { n as formatErrorMessage, r as formatUncaughtError } from "./errors-BF3TeRH2.js";
-import { i as resolveExistingPathsWithinRoot, r as DEFAULT_UPLOAD_DIR } from "./paths-CT6jsi4E.js";
+import { i as resolveExistingPathsWithinRoot, r as DEFAULT_UPLOAD_DIR } from "./paths-BBm9fwuG.js";
 import { i as isBlockedHostnameOrIp, o as normalizeHostname, t as SsrFBlockedError } from "./ssrf-BCYMnxkM.js";
-import { c as detectMime, d as imageMimeFromFormat, f as isAudioFileName, g as MAX_IMAGE_BYTES, i as getImageMetadata, l as extensionForMime, p as isGifMedia, s as resizeToJpeg, v as mediaKindFromMime } from "./image-ops-DYbDWaIA.js";
-import { n as getMediaDir, r as saveMediaBuffer } from "./store-DvtcmOKj.js";
-import { B as resolveAgentMainSessionKey, C as capArrayByJsonBytes, D as resolveSessionTranscriptCandidates, E as readSessionTitleFieldsFromTranscript, F as resolveSessionResetType, H as resolveMainSessionKey, I as resolveThreadFlag, J as acquireSessionWriteLock, K as buildGroupDisplayName, L as DEFAULT_RESET_TRIGGERS, M as evaluateSessionFreshness, N as resolveChannelResetConfig, P as resolveSessionResetPolicy, R as resolveFreshSessionTotalTokens, S as archiveSessionTranscripts, V as resolveExplicitAgentSessionKey, W as deriveSessionMetaPatch, X as resolveSessionLockMaxHoldFromTimeout, _ as mergeDeliveryContext, a as resolveAndPersistSessionFile, b as normalizeAccountId$3, c as recordSessionMetaFromInbound, d as updateSessionStore, f as updateSessionStoreEntry, g as deliveryContextKey, h as deliveryContextFromSession, j as resolveSessionKey, m as resolveCacheTtlMs$1, n as parseSessionThreadInfo, o as loadSessionStore, p as isCacheEnabled, q as resolveGroupSessionKey, r as appendAssistantMessageToSessionTranscript, s as readSessionUpdatedAt, t as extractDeliveryInfo, u as updateLastRoute, v as normalizeDeliveryContext, y as normalizeSessionDeliveryFields, z as canonicalizeMainSessionAlias } from "./sessions-D5a7H247.js";
-import { a as resolveChannelGroupRequireMention, c as normalizeHyphenSlug, i as resolveChannelGroupPolicy, l as normalizeStringEntries, n as listChannelDocks, r as normalizeSignalMessagingTarget, s as normalizeAtHashSlug, t as getChannelDock, u as normalizeStringEntriesLower } from "./dock-BYiRZSgZ.js";
-import { _ as listEnabledDiscordAccounts, a as isWhatsAppGroupJid, c as listEnabledTelegramAccounts, d as resolveTelegramToken, f as resolveSlackAccount, g as createDiscordActionGate, h as resolveSlackBotToken, l as listTelegramAccountIds, m as resolveSlackAppToken, n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId$1, s as createTelegramActionGate, t as getChannelPlugin, u as resolveTelegramAccount, v as resolveDiscordAccount, y as normalizeDiscordToken } from "./plugins-BAyxWQSz.js";
-import { a as logWebSelfId, i as getWebAuthAgeMs, m as webAuthExists, n as resolveWhatsAppAccount, o as logoutWeb, u as readWebSelfId } from "./accounts-Cd816n6l.js";
-import { t as resolveIMessageAccount } from "./accounts-CokRskCl.js";
-import { n as resolveSignalAccount, t as listEnabledSignalAccounts } from "./accounts-mN_EcgxC.js";
-import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i as createSlackWebClient, l as parseSlackTarget, o as parseSlackBlocksInput, s as validateSlackBlocksArray, t as sendMessageSlack, u as resolveSlackChannelId } from "./send-dH0xroTu.js";
+import { c as detectMime, d as imageMimeFromFormat, f as isAudioFileName, g as MAX_IMAGE_BYTES, i as getImageMetadata, l as extensionForMime, p as isGifMedia, s as resizeToJpeg, v as mediaKindFromMime } from "./image-ops-1OJMSAUX.js";
+import { n as getMediaDir, r as saveMediaBuffer } from "./store-r1DJSDq-.js";
+import { B as resolveAgentMainSessionKey, C as capArrayByJsonBytes, D as resolveSessionTranscriptCandidates, E as readSessionTitleFieldsFromTranscript, F as resolveSessionResetType, H as resolveMainSessionKey, I as resolveThreadFlag, J as acquireSessionWriteLock, K as buildGroupDisplayName, L as DEFAULT_RESET_TRIGGERS, M as evaluateSessionFreshness, N as resolveChannelResetConfig, P as resolveSessionResetPolicy, R as resolveFreshSessionTotalTokens, S as archiveSessionTranscripts, V as resolveExplicitAgentSessionKey, W as deriveSessionMetaPatch, X as resolveSessionLockMaxHoldFromTimeout, _ as mergeDeliveryContext, a as resolveAndPersistSessionFile, b as normalizeAccountId$3, c as recordSessionMetaFromInbound, d as updateSessionStore, f as updateSessionStoreEntry, g as deliveryContextKey, h as deliveryContextFromSession, j as resolveSessionKey, m as resolveCacheTtlMs$1, n as parseSessionThreadInfo, o as loadSessionStore, p as isCacheEnabled, q as resolveGroupSessionKey, r as appendAssistantMessageToSessionTranscript, s as readSessionUpdatedAt, t as extractDeliveryInfo, u as updateLastRoute, v as normalizeDeliveryContext, y as normalizeSessionDeliveryFields, z as canonicalizeMainSessionAlias } from "./sessions-DgYpBvse.js";
+import { a as resolveChannelGroupRequireMention, c as normalizeHyphenSlug, i as resolveChannelGroupPolicy, l as normalizeStringEntries, n as listChannelDocks, r as normalizeSignalMessagingTarget, s as normalizeAtHashSlug, t as getChannelDock, u as normalizeStringEntriesLower } from "./dock-BhS32F6E.js";
+import { _ as listEnabledDiscordAccounts, a as isWhatsAppGroupJid, c as listEnabledTelegramAccounts, d as resolveTelegramToken, f as resolveSlackAccount, g as createDiscordActionGate, h as resolveSlackBotToken, l as listTelegramAccountIds, m as resolveSlackAppToken, n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId$1, s as createTelegramActionGate, t as getChannelPlugin, u as resolveTelegramAccount, v as resolveDiscordAccount, y as normalizeDiscordToken } from "./plugins-DKDeQZF0.js";
+import { a as logWebSelfId, i as getWebAuthAgeMs, m as webAuthExists, n as resolveWhatsAppAccount, o as logoutWeb, u as readWebSelfId } from "./accounts-DDuIpcln.js";
+import { t as resolveIMessageAccount } from "./accounts-bK-Yqdwx.js";
+import { n as resolveSignalAccount, t as listEnabledSignalAccounts } from "./accounts-DyJN4_vR.js";
+import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i as createSlackWebClient, l as parseSlackTarget, o as parseSlackBlocksInput, s as validateSlackBlocksArray, t as sendMessageSlack, u as resolveSlackChannelId } from "./send-CPF8hSFp.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, t as resolveDefaultSessionStorePath } from "./paths-CyhzMxFA.js";
 import { i as normalizeInputProvenance, n as applyInputProvenanceToUserMessage, r as hasInterSessionUserProvenance } from "./input-provenance-BzbXHcaD.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-DdnTeoR1.js";
-import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-B-pqX3nX.js";
+import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-DvUBlqjX.js";
 import { n as resolveToolDisplay } from "./tool-display-D8N3rsYt.js";
 import { n as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-Db3da8yR.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-DOPkVbh3.js";
-import { a as readResponseWithLimit, i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, t as getAgentScopedMediaLocalRoots } from "./local-roots-BBeKX7PX.js";
-import { v as runTasksWithConcurrency } from "./sqlite-BV5ILFtC.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-C3NLvWC2.js";
+import { a as readResponseWithLimit, i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, t as getAgentScopedMediaLocalRoots } from "./local-roots-aAFLQGkY.js";
+import { v as runTasksWithConcurrency } from "./sqlite-Dx3J_aSE.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-DvBJ8pMD.js";
 import { a as isSilentReplyText, i as isSilentReplyPrefixText, n as SILENT_REPLY_TOKEN, r as SYMIPULSE_TOKEN, t as HEARTBEAT_TOKEN } from "./tokens-BuceUQDl.js";
-import { n as createBrowserRouteDispatcher, r as getMachineDisplayName, t as withTimeout$4 } from "./with-timeout-Cs6_LnHB.js";
-import { C as getGlobalHookRunner, S as throwIfAborted, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as splitMediaFromOutput, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as parseReplyDirectives, w as initializeGlobalHookRunner, x as parseInlineDirectives$1, y as MEDIA_TOKEN_RE } from "./deliver-Um8yyhRA.js";
+import { n as createBrowserRouteDispatcher, r as getMachineDisplayName, t as withTimeout$4 } from "./with-timeout-gmK6RciS.js";
+import { C as getGlobalHookRunner, S as throwIfAborted, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as splitMediaFromOutput, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as parseReplyDirectives, w as initializeGlobalHookRunner, x as parseInlineDirectives$1, y as MEDIA_TOKEN_RE } from "./deliver-CceEhg3d.js";
 import { a as logMessageProcessed, c as logWebhookError, d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, i as logLaneEnqueue, l as logWebhookProcessed, m as isDiagnosticsEnabled, o as logMessageQueued, p as emitDiagnosticEvent, r as logLaneDequeue, s as logSessionStateChange, t as diag, u as logWebhookReceived } from "./diagnostic-DjBRPfu9.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-CUslJyKP.js";
-import { A as hasBotMention, B as resolveSenderAllowMatch, C as buildTelegramGroupPeerId, D as describeReplyTarget, E as buildTypingThreadParams, F as resolveTelegramReplyId, G as toLocationContext, H as isSenderIdAllowed, I as resolveTelegramStreamMode, J as parseTelegramTarget, K as withTelegramApiErrorLogging, L as resolveTelegramThreadSpec, M as resolveTelegramForumThreadId, N as resolveTelegramGroupAllowFromContext, O as expandTextLinks, P as resolveTelegramMediaPlaceholder, R as isSenderAllowed$1, S as buildTelegramGroupFrom, T as buildTelegramThreadParams, U as mergeAllowFromSources, V as firstDefined$1, W as formatLocationText, Y as resolveTelegramTargetChatType, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildSenderLabel, c as sendStickerTelegram, d as wasSentByBot, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as normalizeForwardedContext, k as extractTelegramLocation, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as isVoiceCompatibleAudio, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramParentPeer, x as buildSenderName, y as buildGroupLabel, z as normalizeAllowFromWithStore$1 } from "./send-BEeuDXqy.js";
-import { a as buildModelAliasLines, n as resolveModel } from "./model-CeeOcylL.js";
-import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-BLOOs1aW.js";
-import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-lk6fRiwy.js";
-import { i as resolveMemorySearchConfig } from "./manager-C1CfGzZ2.js";
+import { A as hasBotMention, B as resolveSenderAllowMatch, C as buildTelegramGroupPeerId, D as describeReplyTarget, E as buildTypingThreadParams, F as resolveTelegramReplyId, G as toLocationContext, H as isSenderIdAllowed, I as resolveTelegramStreamMode, J as parseTelegramTarget, K as withTelegramApiErrorLogging, L as resolveTelegramThreadSpec, M as resolveTelegramForumThreadId, N as resolveTelegramGroupAllowFromContext, O as expandTextLinks, P as resolveTelegramMediaPlaceholder, R as isSenderAllowed$1, S as buildTelegramGroupFrom, T as buildTelegramThreadParams, U as mergeAllowFromSources, V as firstDefined$1, W as formatLocationText, Y as resolveTelegramTargetChatType, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildSenderLabel, c as sendStickerTelegram, d as wasSentByBot, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as normalizeForwardedContext, k as extractTelegramLocation, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as isVoiceCompatibleAudio, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramParentPeer, x as buildSenderName, y as buildGroupLabel, z as normalizeAllowFromWithStore$1 } from "./send-Cutb0ZDY.js";
+import { a as buildModelAliasLines, n as resolveModel } from "./model-tWhwnFf8.js";
+import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-CE2YmmsD.js";
+import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-Ca5r9AUb.js";
+import { i as resolveMemorySearchConfig } from "./manager-D4LJSRyZ.js";
 import { n as retryAsync } from "./retry-BoS4e4X_.js";
-import { c as imageResultFromFile, d as readNumberParam, f as readReactionParams, h as readStringParam, l as jsonResult, m as readStringOrNumberParam, n as missingTargetError, o as createActionGate, p as readStringArrayParam, r as unknownTargetError, s as imageResult, t as ambiguousTargetError, u as parseAvailableTags } from "./target-errors-CCz79CmV.js";
+import { c as imageResultFromFile, d as readNumberParam, f as readReactionParams, h as readStringParam, l as jsonResult, m as readStringOrNumberParam, n as missingTargetError, o as createActionGate, p as readStringArrayParam, r as unknownTargetError, s as imageResult, t as ambiguousTargetError, u as parseAvailableTags } from "./target-errors-7AvoVa10.js";
 import { a as chunkText, c as resolveChunkMode, d as isSafeFenceBreak, f as parseFenceSpans, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit, o as chunkTextWithMode, r as chunkMarkdownText, t as chunkByNewline, u as findFenceSpanAt } from "./chunk-1dhPX1NK.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-ZwP14ydw.js";
-import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-Dt4hOzxG.js";
-import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled, n as isNativeCommandsExplicitlyDisabled, r as isRestartEnabled, t as isCommandFlagEnabled } from "./commands-CtocZ4Lg.js";
-import { a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, i as listChatCommands, l as parseCommandArgs, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices } from "./commands-registry-BZ0ZSQpM.js";
-import { Mt as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-BsrZnuSi.js";
-import { a as randomIdempotencyKey, d as resolveLeastPrivilegeOperatorScopesForMethod, n as callGateway, r as callGatewayLeastPrivilege, t as buildGatewayConnectionDetails } from "./call-Dd7-bkfG.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-CEbN0fEm.js";
+import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-DZam9q5M.js";
+import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled, n as isNativeCommandsExplicitlyDisabled, r as isRestartEnabled, t as isCommandFlagEnabled } from "./commands-BNLCWX6e.js";
+import { a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, i as listChatCommands, l as parseCommandArgs, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices } from "./commands-registry-BT0-zzs3.js";
+import { Mt as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-CQSyCS4M.js";
+import { a as randomIdempotencyKey, d as resolveLeastPrivilegeOperatorScopesForMethod, n as callGateway, r as callGatewayLeastPrivilege, t as buildGatewayConnectionDetails } from "./call-CJaS1iRF.js";
 import { n as formatTimeAgo } from "./format-relative-BXoxEQVN.js";
 import { n as normalizePollInput } from "./polls-DhH5YkzN.js";
 import { n as recordChannelActivity, r as createDiscordRetryRunner, t as getChannelActivity } from "./channel-activity-BOiuJS3t.js";
 import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-DTNGXEzX.js";
-import { t as convertMarkdownTables } from "./tables-C38rzF6E.js";
-import { c as signalRpcRequest, l as streamSignalEvents, n as sendReadReceiptSignal, o as resolveSignalRpcContext, r as sendTypingSignal, s as signalCheck, t as sendMessageSignal } from "./send-BjdAgYLu.js";
-import { i as readChannelAllowFromStore, l as listPairingChannels, o as removeChannelAllowFromStoreEntry, s as upsertChannelPairingRequest, t as addChannelAllowFromStoreEntry } from "./pairing-store-B8ktu-6j.js";
+import { t as convertMarkdownTables } from "./tables-BEzT0Da4.js";
+import { c as signalRpcRequest, l as streamSignalEvents, n as sendReadReceiptSignal, o as resolveSignalRpcContext, r as sendTypingSignal, s as signalCheck, t as sendMessageSignal } from "./send-tanEMpHN.js";
+import { i as readChannelAllowFromStore, l as listPairingChannels, o as removeChannelAllowFromStoreEntry, s as upsertChannelPairingRequest, t as addChannelAllowFromStoreEntry } from "./pairing-store-CK726Dzq.js";
 import { t as makeProxyFetch } from "./proxy-DU7W9XSc.js";
 import { i as formatDurationSeconds, r as formatDurationPrecise, t as formatDurationCompact$1 } from "./format-duration-D0B0Uo-I.js";
-import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-BcnaXYvh.js";
-import { a as createReplyReferencePlanner, i as resolveSlackThreadTs, n as deliverReplies$3, t as createSlackReplyDeliveryPlan } from "./replies-BL7IBg12.js";
-import { b as ensureSkillsWatcher, i as resolveSkillCommandInvocation, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, r as listSkillCommandsForWorkspace, t as listReservedChatSlashCommandNames, x as getSkillsSnapshotVersion } from "./skill-commands-ZXbEITKi.js";
+import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-BMoTaVAH.js";
+import { a as createReplyReferencePlanner, i as resolveSlackThreadTs, n as deliverReplies$3, t as createSlackReplyDeliveryPlan } from "./replies-vgss3_QA.js";
+import { b as ensureSkillsWatcher, i as resolveSkillCommandInvocation, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, r as listSkillCommandsForWorkspace, t as listReservedChatSlashCommandNames, x as getSkillsSnapshotVersion } from "./skill-commands-Cxw-jNxU.js";
 import { c as hasNonzeroUsage, l as normalizeUsage, n as loadCostUsageSummary, o as derivePromptTokens, r as loadSessionCostSummary, s as deriveSessionTotalTokens } from "./session-cost-usage-BG4AXrGN.js";
-import { a as normalizeIMessageHandle, c as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, i as isAllowedIMessageSender, o as parseIMessageTarget, r as formatIMessageChatTarget, s as createIMessageRpcClient, t as sendMessageIMessage } from "./send-C95ZRvja.js";
-import { r as detectBinary } from "./onboard-helpers-Dixh6cNh.js";
-import { t as resolvePairingIdLabel } from "./pairing-labels-27SOKDzJ.js";
+import { a as normalizeIMessageHandle, c as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, i as isAllowedIMessageSender, o as parseIMessageTarget, r as formatIMessageChatTarget, s as createIMessageRpcClient, t as sendMessageIMessage } from "./send-CXxQ_f7L.js";
+import { r as detectBinary } from "./onboard-helpers-ZmZYzlq3.js";
+import { t as resolvePairingIdLabel } from "./pairing-labels-2S6x2UoV.js";
 import { i as resolveModelCostConfig, n as formatTokenCount$2, r as formatUsd, t as estimateUsageCost } from "./usage-format-BzKEDn0q.js";
 import { t as getActiveWebListener } from "./active-listener-kvXhlgwu.js";
 import { _ as getTrustedSafeBinDirs, b as buildSafeShellCommand, d as resolveExecApprovals, f as resolveExecApprovalsFromFile, g as resolveSafeBins, h as evaluateShellAllowlist, i as maxAsk, l as recordAllowlistUse, n as addAllowlistEntry, o as minSecurity, u as requiresExecApproval, y as buildSafeBinsShellCommand } from "./exec-approvals-Kn31mBcW.js";
-import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as writeCameraClipPayloadToFile, f as writeUrlToFile, g as normalizePathPrepend, h as mergePathPrepend, i as parseEnvPairs, l as parseCameraSnapPayload, m as applyPathPrepend, n as screenRecordTempPath, o as parseCanvasSnapshotPayload, p as buildNodeShellCommand, r as writeScreenRecordToFile, s as cameraTempPath, t as parseScreenRecordPayload, u as writeBase64ToFile } from "./nodes-screen-C99kfE1u.js";
+import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as writeCameraClipPayloadToFile, f as writeUrlToFile, g as normalizePathPrepend, h as mergePathPrepend, i as parseEnvPairs, l as parseCameraSnapPayload, m as applyPathPrepend, n as screenRecordTempPath, o as parseCanvasSnapshotPayload, p as buildNodeShellCommand, r as writeScreenRecordToFile, s as cameraTempPath, t as parseScreenRecordPayload, u as writeBase64ToFile } from "./nodes-screen-VBGXKdLk.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-CN8o4Vi3.js";
 import { n as recordCommandPoll, r as resetCommandPollCount } from "./command-poll-backoff-BiwOFDEK.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, r as resolveEffectiveToolPolicy, t as filterToolsByPolicy } from "./pi-tools.policy-juZV2uUv.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-B8H3Bqpv.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, r as resolveEffectiveToolPolicy, t as filterToolsByPolicy } from "./pi-tools.policy-CIDBbw6x.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-Bz7rxLWq.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BUClb97_.js";
 import { c as resolveGatewayLaunchAgentLabel, d as resolveGatewaySystemdServiceName } from "./constants-C8_BLnaW.js";
-import { n as resolveMessageChannelSelection, t as listConfiguredMessageChannels } from "./channel-selection-DjfBv8kq.js";
+import { n as resolveMessageChannelSelection, t as listConfiguredMessageChannels } from "./channel-selection-DuWs0Aak.js";
 import { t as parseTimeoutMs } from "./parse-timeout-C385GCpE.js";
 import { createRequire } from "node:module";
 import { fileURLToPath } from "node:url";
@@ -105,7 +105,7 @@ import fs, { existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSyn
 import os, { homedir } from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { execFileSync, spawn, spawnSync } from "node:child_process";
 import { inspect } from "node:util";
 import crypto, { createHash, createHmac, randomBytes, randomUUID } from "node:crypto";
@@ -2893,7 +2893,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./model-selection-X1oLh3CE.js").then((n) => n.dt);
+		const { ensureAuthProfileStore } = await import("./model-selection-CyFvYcRt.js").then((n) => n.dt);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -10415,7 +10415,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-Um8yyhRA.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CceEhg3d.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -12964,8 +12964,8 @@ async function describeStickerImage(params) {
 	const { provider, model } = resolved;
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
-		const buffer = await fsPromises.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-BiY-PfMh.js").then((n) => n.n);
+		const buffer = await fs$1.readFile(imagePath);
+		const { describeImageWithModel } = await import("./image-D9uvDTrc.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -13388,7 +13388,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-wCWBOMwB.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-pbXdFORv.js");
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -15604,7 +15604,7 @@ async function preflightDiscordMessage(params) {
 	let preflightTranscript;
 	const hasAudioAttachment = message.attachments?.some((att) => att.contentType?.startsWith("audio/"));
 	if (!isDirectMessage && shouldRequireMention && hasAudioAttachment && !baseText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-CjysqO8U.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-CWnxkaac.js");
 		const audioPaths = message.attachments?.filter((att) => att.contentType?.startsWith("audio/")).map((att) => att.url) ?? [];
 		if (audioPaths.length > 0) preflightTranscript = await transcribeFirstAudio({
 			ctx: {
@@ -21610,18 +21610,18 @@ function appendImagePathsToPrompt(prompt, paths) {
 	return `${trimmed}${trimmed ? "\n\n" : ""}${paths.join("\n")}`;
 }
 async function writeCliImages(images) {
-	const tempDir = await fsPromises.mkdtemp(path.join(os.tmpdir(), "symi-cli-images-"));
+	const tempDir = await fs$1.mkdtemp(path.join(os.tmpdir(), "symi-cli-images-"));
 	const paths = [];
 	for (let i = 0; i < images.length; i += 1) {
 		const image = images[i];
 		const ext = resolveImageExtension(image.mimeType);
 		const filePath = path.join(tempDir, `image-${i + 1}.${ext}`);
 		const buffer = Buffer.from(image.data, "base64");
-		await fsPromises.writeFile(filePath, buffer, { mode: 384 });
+		await fs$1.writeFile(filePath, buffer, { mode: 384 });
 		paths.push(filePath);
 	}
 	const cleanup = async () => {
-		await fsPromises.rm(tempDir, {
+		await fs$1.rm(tempDir, {
 			recursive: true,
 			force: true
 		});
@@ -22374,27 +22374,27 @@ async function runWithImageModelFallback(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-DsCqmzyk.js");
+			const { sendMessageWhatsApp } = await import("./web-HeObJp6A.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
-			const { sendMessageTelegram } = await import("./send-BEeuDXqy.js").then((n) => n.l);
+			const { sendMessageTelegram } = await import("./send-Cutb0ZDY.js").then((n) => n.l);
 			return await sendMessageTelegram(...args);
 		},
 		sendMessageDiscord: async (...args) => {
-			const { sendMessageDiscord } = await import("./send-BnuIB59F.js").then((n) => n.t);
+			const { sendMessageDiscord } = await import("./send-CZr1hVHY.js").then((n) => n.t);
 			return await sendMessageDiscord(...args);
 		},
 		sendMessageSlack: async (...args) => {
-			const { sendMessageSlack } = await import("./send-dH0xroTu.js").then((n) => n.n);
+			const { sendMessageSlack } = await import("./send-CPF8hSFp.js").then((n) => n.n);
 			return await sendMessageSlack(...args);
 		},
 		sendMessageSignal: async (...args) => {
-			const { sendMessageSignal } = await import("./send-BjdAgYLu.js").then((n) => n.i);
+			const { sendMessageSignal } = await import("./send-tanEMpHN.js").then((n) => n.i);
 			return await sendMessageSignal(...args);
 		},
 		sendMessageIMessage: async (...args) => {
-			const { sendMessageIMessage } = await import("./send-C95ZRvja.js").then((n) => n.n);
+			const { sendMessageIMessage } = await import("./send-CXxQ_f7L.js").then((n) => n.n);
 			return await sendMessageIMessage(...args);
 		}
 	};
@@ -23578,10 +23578,10 @@ function estimateDurationSeconds(pcm) {
 	return pcm.length / (bytesPerSample * SAMPLE_RATE);
 }
 async function writeWavFile(pcm) {
-	const tempDir = await fsPromises.mkdtemp(path.join(resolvePreferredSymiTmpDir(), "discord-voice-"));
+	const tempDir = await fs$1.mkdtemp(path.join(resolvePreferredSymiTmpDir(), "discord-voice-"));
 	const filePath = path.join(tempDir, `segment-${randomUUID()}.wav`);
 	const wav = buildWavBuffer(pcm);
-	await fsPromises.writeFile(filePath, wav);
+	await fs$1.writeFile(filePath, wav);
 	scheduleTempCleanup(tempDir);
 	return {
 		path: filePath,
@@ -23590,7 +23590,7 @@ async function writeWavFile(pcm) {
 }
 function scheduleTempCleanup(tempDir, delayMs = 1800 * 1e3) {
 	setTimeout(() => {
-		fsPromises.rm(tempDir, {
+		fs$1.rm(tempDir, {
 			recursive: true,
 			force: true
 		}).catch((err) => {
@@ -27329,7 +27329,7 @@ function normalizeAllowList$2(list) {
 async function detectRemoteHostFromCliPath(cliPath) {
 	try {
 		const expanded = cliPath.startsWith("~") ? cliPath.replace(/^~/, process.env.HOME ?? "") : cliPath;
-		const content = await fsPromises.readFile(expanded, "utf8");
+		const content = await fs$1.readFile(expanded, "utf8");
 		const userHostMatch = content.match(/\bssh\b[^\n]*?\s+([a-zA-Z0-9._-]+@[a-zA-Z0-9._-]+)/);
 		if (userHostMatch) return userHostMatch[1];
 		return content.match(/\bssh\b[^\n]*?\s+([a-zA-Z][a-zA-Z0-9._-]*)\s+\S*\bimsg\b/)?.[1];
@@ -33544,7 +33544,7 @@ function readSlackExternalArgMenuToken(raw) {
 }
 let commandsRegistry;
 async function getCommandsRegistry() {
-	if (!commandsRegistry) commandsRegistry = await import("./commands-registry-BZ0ZSQpM.js").then((n) => n.n);
+	if (!commandsRegistry) commandsRegistry = await import("./commands-registry-BT0-zzs3.js").then((n) => n.n);
 	return commandsRegistry;
 }
 function encodeSlackCommandArgValue(parts) {
@@ -33886,11 +33886,11 @@ async function registerSlackMonitorSlashCommands(params) {
 			const channelName = channelInfo?.name;
 			const roomLabel = channelName ? `#${channelName}` : `#${command.channel_id}`;
 			const [{ resolveAgentRoute }, { finalizeInboundContext }, { dispatchReplyWithDispatcher }] = await Promise.all([
-				import("./resolve-route-BcnaXYvh.js").then((n) => n.r),
+				import("./resolve-route-BMoTaVAH.js").then((n) => n.r),
 				import("./inbound-context-CmmmT8IP.js").then((n) => n.n),
 				Promise.resolve().then(() => provider_dispatcher_exports)
 			]);
-			const [{ resolveConversationLabel }, { createReplyPrefixOptions }] = await Promise.all([import("./conversation-label-Bn5j3lUT.js").then((n) => n.t), import("./reply-prefix-BLOOs1aW.js").then((n) => n.n)]);
+			const [{ resolveConversationLabel }, { createReplyPrefixOptions }] = await Promise.all([import("./conversation-label-Bn5j3lUT.js").then((n) => n.t), import("./reply-prefix-CE2YmmsD.js").then((n) => n.n)]);
 			const route = resolveAgentRoute({
 				cfg,
 				channel: "slack",
@@ -33947,9 +33947,9 @@ async function registerSlackMonitorSlashCommands(params) {
 			});
 			const deliverSlashPayloads = async (replies) => {
 				const [{ deliverSlackSlashReplies }, { resolveChunkMode }, { resolveMarkdownTableMode }] = await Promise.all([
-					import("./replies-BL7IBg12.js").then((n) => n.r),
+					import("./replies-vgss3_QA.js").then((n) => n.r),
 					import("./chunk-1dhPX1NK.js").then((n) => n.s),
-					import("./markdown-tables-ZwP14ydw.js").then((n) => n.t)
+					import("./markdown-tables-CEbN0fEm.js").then((n) => n.t)
 				]);
 				await deliverSlackSlashReplies({
 					replies,
@@ -34002,7 +34002,7 @@ async function registerSlackMonitorSlashCommands(params) {
 	let nativeCommands = [];
 	if (nativeEnabled) {
 		reg = await getCommandsRegistry();
-		const skillCommands = nativeSkillsEnabled ? (await import("./skill-commands-ZXbEITKi.js").then((n) => n.a)).listSkillCommandsForAgents({ cfg }) : [];
+		const skillCommands = nativeSkillsEnabled ? (await import("./skill-commands-Cxw-jNxU.js").then((n) => n.a)).listSkillCommandsForAgents({ cfg }) : [];
 		nativeCommands = reg.listNativeCommandSpecsForConfig(cfg, {
 			skillCommands,
 			provider: "slack"
@@ -38771,7 +38771,7 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	const hasAudio = allMedia.some((media) => media.contentType?.startsWith("audio/"));
 	let preflightTranscript;
 	if (isGroup && requireMention && hasAudio && !hasUserText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-CjysqO8U.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-CWnxkaac.js");
 		preflightTranscript = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: allMedia.length > 0 ? allMedia.map((m) => m.path) : void 0,
@@ -40539,7 +40539,7 @@ function safeParseState(raw) {
 async function readTelegramUpdateOffset(params) {
 	const filePath = resolveTelegramUpdateOffsetPath(params.accountId, params.env);
 	try {
-		return safeParseState(await fsPromises.readFile(filePath, "utf-8"))?.lastUpdateId ?? null;
+		return safeParseState(await fs$1.readFile(filePath, "utf-8"))?.lastUpdateId ?? null;
 	} catch (err) {
 		if (err.code === "ENOENT") return null;
 		return null;
@@ -40548,7 +40548,7 @@ async function readTelegramUpdateOffset(params) {
 async function writeTelegramUpdateOffset(params) {
 	const filePath = resolveTelegramUpdateOffsetPath(params.accountId, params.env);
 	const dir = path.dirname(filePath);
-	await fsPromises.mkdir(dir, {
+	await fs$1.mkdir(dir, {
 		recursive: true,
 		mode: 448
 	});
@@ -40557,14 +40557,14 @@ async function writeTelegramUpdateOffset(params) {
 		version: STORE_VERSION,
 		lastUpdateId: params.updateId
 	};
-	await fsPromises.writeFile(tmp, `${JSON.stringify(payload, null, 2)}\n`, { encoding: "utf-8" });
-	await fsPromises.chmod(tmp, 384);
-	await fsPromises.rename(tmp, filePath);
+	await fs$1.writeFile(tmp, `${JSON.stringify(payload, null, 2)}\n`, { encoding: "utf-8" });
+	await fs$1.chmod(tmp, 384);
+	await fs$1.rename(tmp, filePath);
 }
 async function deleteTelegramUpdateOffset(params) {
 	const filePath = resolveTelegramUpdateOffsetPath(params.accountId, params.env);
 	try {
-		await fsPromises.unlink(filePath);
+		await fs$1.unlink(filePath);
 	} catch (err) {
 		if (err.code === "ENOENT") return;
 		throw err;
@@ -40925,23 +40925,23 @@ let webLoginQrPromise = null;
 let webChannelPromise = null;
 let whatsappActionsPromise = null;
 function loadWebOutbound() {
-	webOutboundPromise ??= import("./outbound-NJCy0h4x.js").then((n) => n.t);
+	webOutboundPromise ??= import("./outbound-DB5Zus0-.js").then((n) => n.t);
 	return webOutboundPromise;
 }
 function loadWebLogin() {
-	webLoginPromise ??= import("./login-1sleXoB4.js").then((n) => n.n);
+	webLoginPromise ??= import("./login-dIlDkG4X.js").then((n) => n.n);
 	return webLoginPromise;
 }
 function loadWebLoginQr() {
-	webLoginQrPromise ??= import("./login-qr-wCWBOMwB.js");
+	webLoginQrPromise ??= import("./login-qr-pbXdFORv.js");
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-DsCqmzyk.js");
+	webChannelPromise ??= import("./web-HeObJp6A.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
-	whatsappActionsPromise ??= import("./whatsapp-actions-CFXNPLco.js");
+	whatsappActionsPromise ??= import("./whatsapp-actions-DbcsdOH3.js");
 	return whatsappActionsPromise;
 }
 function createPluginRuntime() {
@@ -41708,7 +41708,7 @@ function resolvePluginTools(params) {
 //#endregion
 //#region src/agents/apply-patch-update.ts
 async function defaultReadFile(filePath) {
-	return fsPromises.readFile(filePath, "utf8");
+	return fs$1.readFile(filePath, "utf8");
 }
 async function applyUpdateHunk(filePath, chunks, options) {
 	const originalLines = (await (options?.readFile ?? defaultReadFile)(filePath).catch((err) => {
@@ -41952,10 +41952,10 @@ function resolvePatchFileOps(options) {
 		};
 	}
 	return {
-		readFile: (filePath) => fsPromises.readFile(filePath, "utf8"),
-		writeFile: (filePath, content) => fsPromises.writeFile(filePath, content, "utf8"),
-		remove: (filePath) => fsPromises.rm(filePath),
-		mkdirp: (dir) => fsPromises.mkdir(dir, { recursive: true }).then(() => {})
+		readFile: (filePath) => fs$1.readFile(filePath, "utf8"),
+		writeFile: (filePath, content) => fs$1.writeFile(filePath, content, "utf8"),
+		remove: (filePath) => fs$1.rm(filePath),
+		mkdirp: (dir) => fs$1.mkdir(dir, { recursive: true }).then(() => {})
 	};
 }
 async function ensureDir(filePath, ops) {
@@ -42676,7 +42676,7 @@ async function resolveSandboxWorkdir(params) {
 			cwd: process.cwd(),
 			root: params.sandbox.workspaceDir
 		});
-		if (!(await fsPromises.stat(resolved.resolved)).isDirectory()) throw new Error("workdir is not a directory");
+		if (!(await fs$1.stat(resolved.resolved)).isDirectory()) throw new Error("workdir is not a directory");
 		const relative = resolved.relative ? resolved.relative.split(path.sep).join(path.posix.sep) : "";
 		const containerWorkdir = relative ? path.posix.join(params.sandbox.containerWorkdir, relative) : params.sandbox.containerWorkdir;
 		return {
@@ -43657,13 +43657,13 @@ async function validateScriptFileForShellBleed(params) {
 			cwd: params.workdir,
 			root: params.workdir
 		});
-		stat = await fsPromises.stat(absPath);
+		stat = await fs$1.stat(absPath);
 	} catch {
 		return;
 	}
 	if (!stat.isFile()) return;
 	if (stat.size > 512 * 1024) return;
-	const content = await fsPromises.readFile(absPath, "utf-8");
+	const content = await fs$1.readFile(absPath, "utf-8");
 	const first = /\$[A-Z_][A-Z0-9_]{1,}/g.exec(content);
 	if (first) {
 		const idx = first.index;
@@ -44602,8 +44602,16 @@ const GEMMA_TOKEN_PATTERNS = [
 	/<start_of_turn>(?:model|user)?/g,
 	/<end_of_turn>/g,
 	/<\|(?:fim_prefix|fim_suffix|fim_middle)\|>/g,
-	/^\s*<bos>\s*/gm
+	/^\s*<bos>\s*/gm,
+	/<\|[^|>]{0,30}\|>/g,
+	/<\|[^>]{0,30}>/g
 ];
+/**
+* Aggressively strip all fragments of model control token corruption from
+* tool arguments.  This catches cases where the model produces raw garbage
+* like `<|<|"|<|<|\'` that doesn't match any known token template.
+*/
+const AGGRESSIVE_TOKEN_FRAGMENTS = [/<\|/g, /\|>/g];
 const GEMMA_MODEL_HINTS$1 = ["gemma", "redsand/"];
 function isGemmaModel$1(modelId) {
 	const lower = modelId.toLowerCase();
@@ -44613,6 +44621,10 @@ function isGemmaModel$1(modelId) {
 * Strip known control tokens from text.  Only applies to Gemma-family models;
 * other models pass through unchanged.
 */
+/**
+* Strip known control tokens from text.  Only applies to Gemma-family models;
+* other models pass through unchanged.  Used for streamed text output.
+*/
 function stripModelTokens(text, modelId) {
 	if (!text || !isGemmaModel$1(modelId)) return text;
 	let result = text;
@@ -44622,6 +44634,21 @@ function stripModelTokens(text, modelId) {
 	}
 	return result;
 }
+/**
+* Aggressively strip ALL token-like fragments from a string.  Used for tool
+* call arguments where any `<|` corruption causes downstream failures.
+* More aggressive than `stripModelTokens` — removes bare `<|` and `|>` fragments
+* that don't match any known token template.
+*/
+function stripModelTokensAggressive(text, modelId) {
+	if (!text || !isGemmaModel$1(modelId)) return text;
+	let result = stripModelTokens(text, modelId);
+	for (const re of AGGRESSIVE_TOKEN_FRAGMENTS) {
+		re.lastIndex = 0;
+		result = result.replace(re, "");
+	}
+	return result;
+}
 
 //#endregion
 //#region src/agents/pi-tools.abort.ts
@@ -46867,7 +46894,7 @@ async function readJsonlFromPath(jsonlPath) {
 		if (shouldLogVerbose()) logVerbose(`Blocked canvas jsonlPath outside allowed roots: ${resolved}`);
 		throw new Error("jsonlPath outside allowed roots");
 	}
-	const canonical = await fsPromises.realpath(resolved).catch(() => resolved);
+	const canonical = await fs$1.realpath(resolved).catch(() => resolved);
 	if (!isInboundPathAllowed({
 		filePath: canonical,
 		roots
@@ -46875,7 +46902,7 @@ async function readJsonlFromPath(jsonlPath) {
 		if (shouldLogVerbose()) logVerbose(`Blocked canvas jsonlPath outside allowed roots: ${canonical}`);
 		throw new Error("jsonlPath outside allowed roots");
 	}
-	return await fsPromises.readFile(canonical, "utf8");
+	return await fs$1.readFile(canonical, "utf8");
 }
 const CanvasToolSchema = Type.Object({
 	action: stringEnum(CANVAS_ACTIONS),
@@ -47655,27 +47682,27 @@ function resolveRestartSentinelPath(env = process.env) {
 }
 async function writeRestartSentinel(payload, env = process.env) {
 	const filePath = resolveRestartSentinelPath(env);
-	await fsPromises.mkdir(path.dirname(filePath), { recursive: true });
+	await fs$1.mkdir(path.dirname(filePath), { recursive: true });
 	const data = {
 		version: 1,
 		payload
 	};
-	await fsPromises.writeFile(filePath, `${JSON.stringify(data, null, 2)}\n`, "utf-8");
+	await fs$1.writeFile(filePath, `${JSON.stringify(data, null, 2)}\n`, "utf-8");
 	return filePath;
 }
 async function readRestartSentinel(env = process.env) {
 	const filePath = resolveRestartSentinelPath(env);
 	try {
-		const raw = await fsPromises.readFile(filePath, "utf-8");
+		const raw = await fs$1.readFile(filePath, "utf-8");
 		let parsed;
 		try {
 			parsed = JSON.parse(raw);
 		} catch {
-			await fsPromises.unlink(filePath).catch(() => {});
+			await fs$1.unlink(filePath).catch(() => {});
 			return null;
 		}
 		if (!parsed || parsed.version !== 1 || !parsed.payload) {
-			await fsPromises.unlink(filePath).catch(() => {});
+			await fs$1.unlink(filePath).catch(() => {});
 			return null;
 		}
 		return parsed;
@@ -47687,7 +47714,7 @@ async function consumeRestartSentinel(env = process.env) {
 	const filePath = resolveRestartSentinelPath(env);
 	const parsed = await readRestartSentinel(env);
 	if (!parsed) return null;
-	await fsPromises.unlink(filePath).catch(() => {});
+	await fs$1.unlink(filePath).catch(() => {});
 	return parsed;
 }
 function formatRestartSentinelMessage(payload) {
@@ -48794,7 +48821,7 @@ async function hydrateAttachmentPayload(params) {
 				accountId: params.accountId
 			}),
 			sandboxValidated: true,
-			readFile: (filePath) => fsPromises.readFile(filePath)
+			readFile: (filePath) => fs$1.readFile(filePath)
 		});
 		params.args.buffer = media.buffer.toString("base64");
 		if (!contentTypeParam && media.contentType) params.args.contentType = media.contentType;
@@ -56022,10 +56049,10 @@ function wrapToolWithArgSanitization(tool, modelId) {
 	};
 }
 function sanitizeToolArgs(params, modelId) {
-	if (!params || typeof params !== "object") return typeof params === "string" ? stripModelTokens(params, modelId) : params;
+	if (!params || typeof params !== "object") return typeof params === "string" ? stripModelTokensAggressive(params, modelId) : params;
 	if (Array.isArray(params)) return params.map((item) => sanitizeToolArgs(item, modelId));
 	const result = {};
-	for (const [key, value] of Object.entries(params)) if (typeof value === "string") result[key] = stripModelTokens(value, modelId);
+	for (const [key, value] of Object.entries(params)) if (typeof value === "string") result[key] = stripModelTokensAggressive(value, modelId);
 	else if (value && typeof value === "object") result[key] = sanitizeToolArgs(value, modelId);
 	else result[key] = value;
 	return result;
@@ -56276,7 +56303,7 @@ async function repairSessionFileIfNeeded(params) {
 	};
 	let content;
 	try {
-		content = await fsPromises.readFile(sessionFile, "utf-8");
+		content = await fs$1.readFile(sessionFile, "utf-8");
 	} catch (err) {
 		if (err?.code === "ENOENT") return {
 			repaired: false,
@@ -56324,15 +56351,15 @@ async function repairSessionFileIfNeeded(params) {
 	const backupPath = `${sessionFile}.bak-${process.pid}-${Date.now()}`;
 	const tmpPath = `${sessionFile}.repair-${process.pid}-${Date.now()}.tmp`;
 	try {
-		const stat = await fsPromises.stat(sessionFile).catch(() => null);
-		await fsPromises.writeFile(backupPath, content, "utf-8");
-		if (stat) await fsPromises.chmod(backupPath, stat.mode);
-		await fsPromises.writeFile(tmpPath, cleaned, "utf-8");
-		if (stat) await fsPromises.chmod(tmpPath, stat.mode);
-		await fsPromises.rename(tmpPath, sessionFile);
+		const stat = await fs$1.stat(sessionFile).catch(() => null);
+		await fs$1.writeFile(backupPath, content, "utf-8");
+		if (stat) await fs$1.chmod(backupPath, stat.mode);
+		await fs$1.writeFile(tmpPath, cleaned, "utf-8");
+		if (stat) await fs$1.chmod(tmpPath, stat.mode);
+		await fs$1.rename(tmpPath, sessionFile);
 	} catch (err) {
 		try {
-			await fsPromises.unlink(tmpPath);
+			await fs$1.unlink(tmpPath);
 		} catch (cleanupErr) {
 			params.warn?.(`session file repair cleanup failed: ${cleanupErr instanceof Error ? cleanupErr.message : "unknown error"} (${path.basename(tmpPath)})`);
 		}
@@ -58437,7 +58464,7 @@ async function prewarmSessionFile(sessionFile) {
 	if (!isSessionManagerCacheEnabled()) return;
 	if (isSessionManagerCached(sessionFile)) return;
 	try {
-		const handle = await fsPromises.open(sessionFile, "r");
+		const handle = await fs$1.open(sessionFile, "r");
 		try {
 			const buffer = Buffer$1.alloc(4096);
 			await handle.read(buffer, 0, buffer.length, 0);
@@ -58761,7 +58788,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 	} catch (err) {
 		return fail(describeUnknownError(err));
 	}
-	await fsPromises.mkdir(resolvedWorkspace, { recursive: true });
+	await fs$1.mkdir(resolvedWorkspace, { recursive: true });
 	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
 	const sandbox = await resolveSandboxContext({
 		config: params.config,
@@ -58769,7 +58796,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 		workspaceDir: resolvedWorkspace
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
-	await fsPromises.mkdir(effectiveWorkspace, { recursive: true });
+	await fs$1.mkdir(effectiveWorkspace, { recursive: true });
 	await ensureSessionHeader({
 		sessionFile: params.sessionFile,
 		sessionId: params.sessionId,
@@ -59559,12 +59586,12 @@ function getQueuedFileWriter(writers, filePath) {
 	const existing = writers.get(filePath);
 	if (existing) return existing;
 	const dir = path.dirname(filePath);
-	const ready = fsPromises.mkdir(dir, { recursive: true }).catch(() => void 0);
+	const ready = fs$1.mkdir(dir, { recursive: true }).catch(() => void 0);
 	let queue = Promise.resolve();
 	const writer = {
 		filePath,
 		write: (line) => {
-			queue = queue.then(() => ready).then(() => fsPromises.appendFile(filePath, line, "utf8")).catch(() => void 0);
+			queue = queue.then(() => ready).then(() => fs$1.appendFile(filePath, line, "utf8")).catch(() => void 0);
 		}
 	};
 	writers.set(filePath, writer);
@@ -61956,7 +61983,7 @@ async function prepareSessionManagerForRun(params) {
 		return;
 	}
 	if (params.hadSessionFile && header && !hasAssistant) {
-		await fsPromises.writeFile(params.sessionFile, "", "utf-8");
+		await fs$1.writeFile(params.sessionFile, "", "utf-8");
 		sm.fileEntries = [header];
 		sm.byId?.clear?.();
 		sm.labelsById?.clear?.();
@@ -62514,7 +62541,7 @@ async function runEmbeddedAttempt(params) {
 	const prevCwd = process.cwd();
 	const runAbortController = new AbortController();
 	log$2.debug(`embedded run start: runId=${params.runId} sessionId=${params.sessionId} provider=${params.provider} model=${params.modelId} thinking=${params.thinkLevel} messageChannel=${params.messageChannel ?? params.messageProvider ?? "unknown"}`);
-	await fsPromises.mkdir(resolvedWorkspace, { recursive: true });
+	await fs$1.mkdir(resolvedWorkspace, { recursive: true });
 	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
 	const sandbox = await resolveSandboxContext({
 		config: params.config,
@@ -62522,7 +62549,7 @@ async function runEmbeddedAttempt(params) {
 		workspaceDir: resolvedWorkspace
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
-	await fsPromises.mkdir(effectiveWorkspace, { recursive: true });
+	await fs$1.mkdir(effectiveWorkspace, { recursive: true });
 	let restoreSkillEnv;
 	process.chdir(effectiveWorkspace);
 	try {
@@ -62750,7 +62777,7 @@ async function runEmbeddedAttempt(params) {
 				sessionFile: params.sessionFile,
 				warn: (message) => log$2.warn(message)
 			});
-			const hadSessionFile = await fsPromises.stat(params.sessionFile).then(() => true).catch(() => false);
+			const hadSessionFile = await fs$1.stat(params.sessionFile).then(() => true).catch(() => false);
 			const transcriptPolicy = resolveTranscriptPolicy({
 				modelApi: params.model?.api,
 				provider: params.provider,
@@ -63768,7 +63795,7 @@ async function runEmbeddedPiAgent(params) {
 				}
 				runLoopIterations += 1;
 				attemptedThinking.add(thinkLevel);
-				await fsPromises.mkdir(resolvedWorkspace, { recursive: true });
+				await fs$1.mkdir(resolvedWorkspace, { recursive: true });
 				const prompt = provider === "anthropic" ? scrubAnthropicRefusalMagic(params.prompt) : params.prompt;
 				const attempt = await runEmbeddedAttempt({
 					sessionId: params.sessionId,
@@ -68110,7 +68137,7 @@ async function handleCommands(params) {
 				try {
 					const messages = [];
 					if (sessionFile) {
-						const content = await fsPromises.readFile(sessionFile, "utf-8");
+						const content = await fs$1.readFile(sessionFile, "utf-8");
 						for (const line of content.split("\n")) {
 							if (!line.trim()) continue;
 							try {
@@ -71768,7 +71795,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-Um8yyhRA.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CceEhg3d.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -72143,7 +72170,7 @@ async function stageSandboxMedia(params) {
 	};
 	try {
 		const destDir = sandbox ? path.join(effectiveWorkspaceDir, "media", "inbound") : effectiveWorkspaceDir;
-		await fsPromises.mkdir(destDir, { recursive: true });
+		await fs$1.mkdir(destDir, { recursive: true });
 		const remoteAttachmentRoots = resolveIMessageRemoteAttachmentRoots({
 			cfg,
 			accountId: ctx.AccountId
@@ -72193,7 +72220,7 @@ async function stageSandboxMedia(params) {
 			usedNames.add(fileName);
 			const dest = path.join(destDir, fileName);
 			if (ctx.MediaRemoteHost) await scpFile(ctx.MediaRemoteHost, source, dest);
-			else await fsPromises.copyFile(source, dest);
+			else await fs$1.copyFile(source, dest);
 			const stagedPath = sandbox ? path.posix.join("media", "inbound", fileName) : dest;
 			staged.set(source, stagedPath);
 		}