@symerian/symi 2.3.3 → 2.4.0

package/dist/{fs-safe-CTDvb1DF.js → fs-safe-CUjO1ca2.js}

@@ -1,6 +1,6 @@
 import { constants } from "node:fs";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/fs-safe.ts
 var SafeOpenError = class extends Error {
@@ -20,19 +20,19 @@ const isSymlinkOpenError = (err) => isNodeError(err) && (err.code === "ELOOP" ||
 async function openVerifiedLocalFile(filePath) {
 	let handle;
 	try {
-		handle = await fsPromises.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (stat.ino !== lstat.ino || stat.dev !== lstat.dev) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fsPromises.realpath(filePath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (stat.ino !== realStat.ino || stat.dev !== realStat.dev) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
 			handle,
@@ -49,7 +49,7 @@ async function openVerifiedLocalFile(filePath) {
 async function openFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;

package/dist/{gateway-cli-B7khyAHs.js → gateway-cli-BDDHBfYP.js}

@@ -1,155 +1,155 @@
 import { _ as expandHomePrefix, g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, E as truncateUtf16Safe, H as getLogger, P as setVerbose, R as colorize, S as shortenHomePath, U as getResolvedLoggerSettings, V as getChildLogger, c as ensureDir, t as CONFIG_DIR, y as resolveUserPath, z as isRich } from "./utils-B-0b9bGM.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-EAliFiVK.js";
-import { $ as normalizeOptionalSessionKey, An as countActiveRunsForSession, Ar as extractFileContentFromSource, At as computeBackoff, B as setPreRestartDeferralCheck, Bn as onAgentEvent, Bt as createOutboundSendDeps, C as loadSessionEntry, Dr as DEFAULT_INPUT_IMAGE_MIMES, Dt as handleSlackHttpRequest, Er as DEFAULT_INPUT_IMAGE_MAX_BYTES, F as emitGatewayRestart, Fn as runSubagentAnnounceFlow, Fr as resolveAgentTimeoutMs, G as summarizeRestartSentinel, Gt as runWithModelFallback, I as isGatewaySigusr1RestartExternallyAllowed, In as readLatestAssistantReply, J as normalizeHttpWebhookUrl, Jt as runCliAgent, Kt as getCliSessionId, L as markGatewaySigusr1RestartHandled, Ln as clearAgentRunContext, Mn as listDescendantRunsForRequester, Mr as normalizeMimeList, Mt as agentCommand, N as consumeGatewaySigusr1RestartAuthorization, Nr as resolveInputFileLimits, Or as DEFAULT_INPUT_MAX_REDIRECTS, Ot as readJsonBodyWithLimit, P as deferGatewayRestartUntilIdle, Q as normalizeOptionalAgentId, Rn as emitAgentEvent, Rt as resolveOutboundTarget, Sr as enqueueSystemEvent, U as formatRestartSentinelMessage, Ut as createDefaultDeps, V as consumeRestartSentinel, Vn as registerAgentRunContext, Z as inferLegacyName, Zt as resolveAgentAvatar, _ as resolveAnnounceTargetFromKey, ar as resetAllLanes, at as hasLegacyDeliveryHints, cr as CommandLane, d as getActiveEmbeddedRunCount, et as normalizeOptionalText, ft as stripModelTokens, g as createSymiTools, gn as getTotalPendingReplies, gt as getPluginToolMeta, h as buildDefaultToolPolicyPipelineSteps, i as resolveCronStyleNow, in as isExternalHookSession, ir as getTotalQueueSize, it as buildDeliveryFromLegacyPayload, j as resetDirectoryCache, jn as initSubagentRegistry, jr as extractImageContentFromSource, jt as sleepWithAbort, k as resolveOutboundSessionRoute, kn as countActiveDescendantRuns, kr as DEFAULT_INPUT_TIMEOUT_MS, kt as requestBodyErrorToText, l as runEmbeddedPiAgent, ln as buildHistoryContextFromEntries, lr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, m as applyToolPolicyPipeline, mr as lookupContextTokens, nn as detectSuspiciousPatterns, nr as getActiveTaskCount, nt as normalizeRequiredName, or as setCommandLaneConcurrency, ot as stripLegacyDeliveryFields, p as resolveModelProfile, pr as stripHeartbeatToken, pt as requestHeartbeatNow, qt as setCliSessionId, rn as getHookType, rt as migrateLegacyCronPayload, sr as waitForActiveTasks, tn as buildSafeExternalPrompt, tt as normalizePayloadToSystemText, vt as loadSymiPlugins, z as setGatewaySigusr1RestartPolicy, zn as getAgentRunContext, zt as resolveSessionDeliveryTarget } from "./reply-DVxU0AMq.js";
+import { $ as normalizeOptionalSessionKey, An as countActiveRunsForSession, Ar as extractFileContentFromSource, At as computeBackoff, B as setPreRestartDeferralCheck, Bn as onAgentEvent, Bt as createOutboundSendDeps, C as loadSessionEntry, Dr as DEFAULT_INPUT_IMAGE_MIMES, Dt as handleSlackHttpRequest, Er as DEFAULT_INPUT_IMAGE_MAX_BYTES, F as emitGatewayRestart, Fn as runSubagentAnnounceFlow, Fr as resolveAgentTimeoutMs, G as summarizeRestartSentinel, Gt as runWithModelFallback, I as isGatewaySigusr1RestartExternallyAllowed, In as readLatestAssistantReply, J as normalizeHttpWebhookUrl, Jt as runCliAgent, Kt as getCliSessionId, L as markGatewaySigusr1RestartHandled, Ln as clearAgentRunContext, Mn as listDescendantRunsForRequester, Mr as normalizeMimeList, Mt as agentCommand, N as consumeGatewaySigusr1RestartAuthorization, Nr as resolveInputFileLimits, Or as DEFAULT_INPUT_MAX_REDIRECTS, Ot as readJsonBodyWithLimit, P as deferGatewayRestartUntilIdle, Q as normalizeOptionalAgentId, Rn as emitAgentEvent, Rt as resolveOutboundTarget, Sr as enqueueSystemEvent, U as formatRestartSentinelMessage, Ut as createDefaultDeps, V as consumeRestartSentinel, Vn as registerAgentRunContext, Z as inferLegacyName, Zt as resolveAgentAvatar, _ as resolveAnnounceTargetFromKey, ar as resetAllLanes, at as hasLegacyDeliveryHints, cr as CommandLane, d as getActiveEmbeddedRunCount, et as normalizeOptionalText, ft as stripModelTokens, g as createSymiTools, gn as getTotalPendingReplies, gt as getPluginToolMeta, h as buildDefaultToolPolicyPipelineSteps, i as resolveCronStyleNow, in as isExternalHookSession, ir as getTotalQueueSize, it as buildDeliveryFromLegacyPayload, j as resetDirectoryCache, jn as initSubagentRegistry, jr as extractImageContentFromSource, jt as sleepWithAbort, k as resolveOutboundSessionRoute, kn as countActiveDescendantRuns, kr as DEFAULT_INPUT_TIMEOUT_MS, kt as requestBodyErrorToText, l as runEmbeddedPiAgent, ln as buildHistoryContextFromEntries, lr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, m as applyToolPolicyPipeline, mr as lookupContextTokens, nn as detectSuspiciousPatterns, nr as getActiveTaskCount, nt as normalizeRequiredName, or as setCommandLaneConcurrency, ot as stripLegacyDeliveryFields, p as resolveModelProfile, pr as stripHeartbeatToken, pt as requestHeartbeatNow, qt as setCliSessionId, rn as getHookType, rt as migrateLegacyCronPayload, sr as waitForActiveTasks, tn as buildSafeExternalPrompt, tt as normalizePayloadToSystemText, vt as loadSymiPlugins, z as setGatewaySigusr1RestartPolicy, zn as getAgentRunContext, zt as resolveSessionDeliveryTarget } from "./reply-Ca3slrA3.js";
 import { S as parseAgentSessionKey, c as normalizeMainKey, f as toAgentRequestSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, p as toAgentStoreSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey, y as isCronRunSessionKey } from "./session-key-DCt45XZa.js";
-import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-MF6_6SCS.js";
+import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { C as createInternalHookEvent, S as clearInternalHooks, T as triggerInternalHook, m as createEmptyPluginRegistry, r as DEFAULT_CHAT_CHANNEL, w as registerInternalHook } from "./registry-Cja8eT7G.js";
 import { a as setConsoleSubsystemFilter, f as defaultRuntime, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { i as logDebug, n as runExec, s as logWarn, t as runCommandWithTimeout } from "./exec-CWkblSrI.js";
-import { C as ensureAgentWorkspace, D as resolveDefaultAgentWorkspaceDir, O as resolveWorkspaceTemplateDir, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter } from "./agent-scope-BRwEc2pG.js";
-import { Gt as DEFAULT_MODEL, Kt as DEFAULT_PROVIDER, Rt as isPidAlive, Wt as DEFAULT_CONTEXT_TOKENS, a as getModelRefStatus, d as resolveAllowedModelRef, h as resolveHooksGmailModel, o as isCliProvider, p as resolveConfiguredModelRef, y as resolveThinkingDefault } from "./model-selection-X1oLh3CE.js";
+import { C as ensureAgentWorkspace, D as resolveDefaultAgentWorkspaceDir, O as resolveWorkspaceTemplateDir, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter } from "./agent-scope-CgUHAtCo.js";
+import { Gt as DEFAULT_MODEL, Kt as DEFAULT_PROVIDER, Rt as isPidAlive, Wt as DEFAULT_CONTEXT_TOKENS, a as getModelRefStatus, d as resolveAllowedModelRef, h as resolveHooksGmailModel, o as isCliProvider, p as resolveConfiguredModelRef, y as resolveThinkingDefault } from "./model-selection-CyFvYcRt.js";
 import "./github-copilot-token-DAu1a6BX.js";
 import { t as formatCliCommand } from "./command-format-COaS-S7B.js";
 import "./boolean-BsqeuxE6.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DPCHYPeH.js";
 import { _ as normalizeGatewayClientMode, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient } from "./message-channel-aT-I_DTX.js";
-import "./send-BnuIB59F.js";
-import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-CJMcIRQM.js";
+import "./send-CZr1hVHY.js";
+import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-CHwyw6l5.js";
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-C4BxOMWX.js";
 import { a as isPathInsideWithRealpath } from "./legacy-names-Be3msDZo.js";
-import { d as registerUnhandledRejectionHandler } from "./runner-Cen70krW.js";
-import "./image-BiY-PfMh.js";
-import "./models-config-CqDdkHJq.js";
+import { d as registerUnhandledRejectionHandler } from "./runner-CUglpiFP.js";
+import "./image-D9uvDTrc.js";
+import "./models-config-qyOXrOli.js";
 import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-DO6u9K2t.js";
-import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-BzNrUHpt.js";
-import "./chrome-r4RThPxq.js";
+import "./pi-embedded-helpers-CNPyv_ax.js";
+import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-C-T6hOMv.js";
+import "./chrome-DtPkPq9T.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-D5dKabOc.js";
 import { t as safeEqualSecret } from "./secret-equal-D7A3Bol7.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-B2SPYrh4.js";
 import { a as isTrustedProxyAddress, d as resolveGatewayListenHosts, f as resolveHostName, l as resolveClientIp, n as isLoopbackAddress, o as isValidIPv4, r as isLoopbackHost, s as normalizeHostHeader, t as rawDataToString, u as resolveGatewayBindHost } from "./ws-C7EXRv8z.js";
 import { a as resolveGatewayAuth, c as createAuthRateLimiter, i as isLocalDirectRequest, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-B741uFtk.js";
-import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-DUXqnh6l.js";
+import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-CEpFjqSk.js";
 import { d as hasBinary } from "./frontmatter-DWQhtOo7.js";
-import { r as buildWorkspaceSkillSnapshot } from "./skills-DqQUtOph.js";
-import "./routes-CE-ohckF.js";
+import { r as buildWorkspaceSkillSnapshot } from "./skills-6jdJQ5ZL.js";
+import "./routes-Ba9CUQ8M.js";
 import "./redact-f-Q-hFt_.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-BF3TeRH2.js";
-import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CTDvb1DF.js";
-import "./paths-CT6jsi4E.js";
+import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CUjO1ca2.js";
+import "./paths-BBm9fwuG.js";
 import { t as SsrFBlockedError } from "./ssrf-BCYMnxkM.js";
-import { c as detectMime } from "./image-ops-DYbDWaIA.js";
-import "./store-DvtcmOKj.js";
-import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-OZQlocB7.js";
+import { c as detectMime } from "./image-ops-1OJMSAUX.js";
+import "./store-r1DJSDq-.js";
+import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-BOmtxoTv.js";
 import "./trash-DcMh1i4B.js";
-import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-D5a7H247.js";
-import "./dock-BYiRZSgZ.js";
-import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-BAyxWQSz.js";
-import { n as resolveWhatsAppAccount } from "./accounts-Cd816n6l.js";
-import "./accounts-CokRskCl.js";
-import "./accounts-mN_EcgxC.js";
-import { t as buildChannelAccountBindings } from "./bindings-ChzePa8q.js";
+import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-DgYpBvse.js";
+import "./dock-BhS32F6E.js";
+import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-DKDeQZF0.js";
+import { n as resolveWhatsAppAccount } from "./accounts-DDuIpcln.js";
+import "./accounts-bK-Yqdwx.js";
+import "./accounts-DyJN4_vR.js";
+import { t as buildChannelAccountBindings } from "./bindings-DFaVVCsf.js";
 import "./logging-w5jq5901.js";
-import "./send-dH0xroTu.js";
+import "./send-CPF8hSFp.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath } from "./paths-CyhzMxFA.js";
-import "./tool-images-B-pqX3nX.js";
+import "./tool-images-DvUBlqjX.js";
 import "./tool-display-D8N3rsYt.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-DOPkVbh3.js";
-import "./api-key-rotation-CEr3lKih.js";
-import "./local-roots-BBeKX7PX.js";
-import "./sqlite-BV5ILFtC.js";
-import { n as loadModelCatalog } from "./model-catalog-C3NLvWC2.js";
+import "./api-key-rotation-CzuPlV2t.js";
+import "./local-roots-aAFLQGkY.js";
+import "./sqlite-Dx3J_aSE.js";
+import { n as loadModelCatalog } from "./model-catalog-DvBJ8pMD.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-BuceUQDl.js";
-import { r as getMachineDisplayName } from "./with-timeout-Cs6_LnHB.js";
-import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-Um8yyhRA.js";
+import { r as getMachineDisplayName } from "./with-timeout-gmK6RciS.js";
+import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-CceEhg3d.js";
 import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-DjBRPfu9.js";
 import "./diagnostic-session-state-CUslJyKP.js";
-import "./send-BEeuDXqy.js";
-import "./model-CeeOcylL.js";
-import { a as resolveAgentIdentity } from "./reply-prefix-BLOOs1aW.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-lk6fRiwy.js";
-import { i as resolveMemorySearchConfig } from "./manager-C1CfGzZ2.js";
+import "./send-Cutb0ZDY.js";
+import "./model-tWhwnFf8.js";
+import { a as resolveAgentIdentity } from "./reply-prefix-CE2YmmsD.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-Ca5r9AUb.js";
+import { i as resolveMemorySearchConfig } from "./manager-D4LJSRyZ.js";
 import "./retry-BoS4e4X_.js";
-import { a as ToolInputError } from "./target-errors-CCz79CmV.js";
+import { a as ToolInputError } from "./target-errors-7AvoVa10.js";
 import "./chunk-1dhPX1NK.js";
-import "./markdown-tables-ZwP14ydw.js";
-import "./ir-Dt4hOzxG.js";
+import "./markdown-tables-CEbN0fEm.js";
+import "./ir-DZam9q5M.js";
 import "./render-CXDO_kgw.js";
-import { r as isRestartEnabled } from "./commands-CtocZ4Lg.js";
-import "./commands-registry-BZ0ZSQpM.js";
-import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-BsrZnuSi.js";
-import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-Dd7-bkfG.js";
-import "./pairing-token-AV-MMfVE.js";
+import { r as isRestartEnabled } from "./commands-BNLCWX6e.js";
+import "./commands-registry-BT0-zzs3.js";
+import { At as ErrorCodes, Ft as approveDevicePairing, Gt as updatePairedDeviceMetadata, It as ensureDeviceToken, Kt as verifyDeviceToken, Lt as getPairedDevice, Pt as buildDeviceAuthPayload, Qt as verifyDeviceSignature, R as validateExecApprovalRequestParams, Vt as requestDevicePairing, Yt as deriveDeviceIdFromPublicKey, Zt as normalizeDevicePublicKeyBase64Url, at as validateRequestFrame, jt as errorShape, kt as PROTOCOL_VERSION, n as formatValidationErrors, qt as roleScopesAllow, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-CQSyCS4M.js";
+import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-CJaS1iRF.js";
+import "./pairing-token-CX3NN_qj.js";
 import "./channel-activity-BOiuJS3t.js";
 import "./fetch-DTNGXEzX.js";
-import "./tables-C38rzF6E.js";
-import "./send-BjdAgYLu.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-B8ktu-6j.js";
+import "./tables-BEzT0Da4.js";
+import "./send-tanEMpHN.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-CK726Dzq.js";
 import "./proxy-DU7W9XSc.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
 import { n as runCommandWithRuntime } from "./cli-utils-DN_hM6ov.js";
 import { t as formatHelpExamples } from "./help-format-B_-M23wP.js";
 import { n as withProgress } from "./progress-jIePzvGA.js";
-import "./resolve-route-BcnaXYvh.js";
-import "./replies-BL7IBg12.js";
-import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-ZXbEITKi.js";
-import "./workspace-dirs-DKu48umx.js";
-import "./outbound-attachment-D62E0xDI.js";
+import "./resolve-route-BMoTaVAH.js";
+import "./replies-vgss3_QA.js";
+import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-Cxw-jNxU.js";
+import "./workspace-dirs-GpkFi6Kw.js";
+import "./outbound-attachment-D_QuKi8U.js";
 import "./delivery-queue-Df1uodAG.js";
 import { c as hasNonzeroUsage, s as deriveSessionTotalTokens } from "./session-cost-usage-BG4AXrGN.js";
-import "./send-C95ZRvja.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-Dixh6cNh.js";
+import "./send-CXxQ_f7L.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-ZmZYzlq3.js";
 import "./prompt-style-8JqOYj0q.js";
-import "./pairing-labels-27SOKDzJ.js";
+import "./pairing-labels-2S6x2UoV.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-BzKEDn0q.js";
 import { t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-Kn31mBcW.js";
-import "./nodes-screen-C99kfE1u.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-juZV2uUv.js";
-import "./control-service-B8H3Bqpv.js";
+import "./nodes-screen-VBGXKdLk.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CIDBbw6x.js";
+import "./control-service-Bz7rxLWq.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BUClb97_.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-DjfBv8kq.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-DuWs0Aak.js";
 import { i as onHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-U4BL57eQ.js";
 import { t as ensureSymiCliOnPath } from "./path-env-MnzRq6nD.js";
 import "./runtime-guard-B37eizu-.js";
-import { t as forceFreePortAndWait } from "./ports-b36gHZbA.js";
+import { t as forceFreePortAndWait } from "./ports-BX0kKI0g.js";
 import "./catalog-RiADx7MA.js";
-import "./skills-status-DS-NZQiq.js";
+import "./skills-status-CURJKnyY.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BL-M3lPt.js";
 import { n as inheritOptionFromParent } from "./command-options-BtDai3oC.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BcGbMZD1.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-Bbm7MwFV.js";
-import "./install-safe-path-Qqr_t_tH.js";
-import "./skill-scanner-CXg9eeyc.js";
-import "./channels-status-issues-BoH1ZJPN.js";
-import "./daemon-runtime--RiRUx_2.js";
-import "./systemd-AhJEsmIk.js";
-import "./service--qMN5DPm.js";
-import "./lifecycle-core-BkPSoGM2.js";
-import "./systemd-hints-Db0oImvK.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-BzX1uAKy.js";
+import "./install-safe-path-tCLiMpmO.js";
+import "./skill-scanner-CLs8u6vQ.js";
+import "./channels-status-issues-B_kBkl_u.js";
+import "./daemon-runtime-2mwX-jqj.js";
+import "./systemd-riq8uNJQ.js";
+import "./service-Cl74hx8J.js";
+import "./lifecycle-core-D6LYXpFj.js";
+import "./systemd-hints-BR6gChwm.js";
 import { t as parsePort$1 } from "./parse-port-Vm8F7Kus.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-Dx4SXRyp.js";
-import "./diagnostics-D2yUMZN1.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-DscwlsKW.js";
+import "./diagnostics-BAMlsVVX.js";
 import "./table-BTgkRafz.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DzLerlJb.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Jm_QdQJQ.js";
-import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-BSB9NPSO.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BJvwnR5z.js";
+import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-CrITRV6w.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-BHTF5p0X.js";
-import { r as pickGatewaySelfPresence } from "./status-CgPPKk09.js";
-import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-DkKXiUEF.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DqGziq7x.js";
-import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-C0oYCI89.js";
-import { t as runOnboardingWizard } from "./onboarding-CdlGKa0U.js";
-import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-BgBq7KRL.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-0et2AR44.js";
+import { r as pickGatewaySelfPresence } from "./status-BXW5l4sd.js";
+import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-CypF_2ZD.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
+import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-CtckACbb.js";
+import { t as runOnboardingWizard } from "./onboarding-CXWUjdM5.js";
+import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-BYOkyf-q.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-DeJt9kAO.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-Bv0M7ka7.js";
-import "./agents.config-u_ibObha.js";
-import "./dm-policy-shared-BCSw0GJS.js";
-import "./node-service-CJygtY5M.js";
-import "./status.update-CmGpjKSr.js";
-import "./skills-install-DjcTy3CT.js";
-import "./update-runner-BgzyPjF5.js";
-import { t as resolveAgentSessionDirs } from "./session-dirs-D3qlvucD.js";
+import "./agents.config-DCE3RGr9.js";
+import "./dm-policy-shared-Bh3TbexU.js";
+import "./node-service-Cxz4e-Qd.js";
+import "./status.update-DtwCUTf-.js";
+import "./skills-install-D67isO1L.js";
+import "./update-runner-Bacq0oLK.js";
+import { t as resolveAgentSessionDirs } from "./session-dirs-DWgIYmAt.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-CYxdoAlY.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
@@ -158,7 +158,7 @@ import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
 import chalk from "chalk";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { spawn } from "node:child_process";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
@@ -1151,7 +1151,7 @@ function shouldSkipCheck(allowInTests) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fsPromises.readFile(statePath, "utf-8");
+		const raw = await fs$1.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1159,8 +1159,8 @@ async function readState(statePath) {
 	}
 }
 async function writeState(statePath, state) {
-	await fsPromises.mkdir(path.dirname(statePath), { recursive: true });
-	await fsPromises.writeFile(statePath, JSON.stringify(state, null, 2), "utf-8");
+	await fs$1.mkdir(path.dirname(statePath), { recursive: true });
+	await fs$1.writeFile(statePath, JSON.stringify(state, null, 2), "utf-8");
 }
 function sameUpdateAvailable(a, b) {
 	if (a === b) return true;
@@ -1866,17 +1866,22 @@ function createChannelManager(opts) {
 //#region src/gateway/server-chat.ts
 /**
 * Strip Gemma's self-verification monologue blocks from the final text.
-* These follow a consistent pattern appended after the real answer:
+* Gemma produces several variants of this pattern:
 *   "I have addressed the request fully.\n**Verification:**\n..."
+*   "I've reviewed my response against your request:\n1. Requirements:..."
+*   "**Verification:**\n1. **Address requirements:**..."
 */
-const MONOLOGUE_PATTERN = /\n*I have addressed the request fully\.?\s*(?:\n\*\*Verification:\*\*[\s\S]*)?$/;
-const MONOLOGUE_FALLBACK_PATTERNS = [/\n*\*\*Verification:\*\*\s*\n[\s\S]*?Everything is correct\.?\s*✅?\s*$/, /\n*Address requirements:[\s\S]*?Everything is correct\.?\s*✅?\s*$/];
+const MONOLOGUE_PATTERNS = [
+	/\n*I have addressed the request fully\.?\s*(?:\n[\s\S]*)?$/,
+	/\n*I['']ve reviewed my response[\s\S]*$/,
+	/\n*\*?\*?Verification:?\*?\*?\s*\n[\s\S]*?(?:Everything is correct|All requirements met)\.?\s*✅?\s*$/,
+	/\n*(?:\*?\*?)?(?:Status Check|Address requirements|Requirements):?(?:\*?\*?)?\s*\n[\s\S]*?(?:Everything is correct|All requirements met|is correct)\.?\s*✅?\s*$/,
+	/\n*\d+\.\s*\*?\*?Requirements:?\*?\*?[\s\S]*?\d+\.\s*\*?\*?Verification:?\*?\*?[\s\S]*$/
+];
 function suppressMonologueBlock(text) {
-	let result = text.replace(MONOLOGUE_PATTERN, "");
-	if (result !== text) return result.trim();
-	for (const pattern of MONOLOGUE_FALLBACK_PATTERNS) {
-		result = text.replace(pattern, "");
-		if (result !== text) return result.trim();
+	for (const pattern of MONOLOGUE_PATTERNS) {
+		const result = text.replace(pattern, "");
+		if (result !== text && result.trim()) return result.trim();
 	}
 	return text;
 }
@@ -6473,7 +6478,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.SYMI_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.SYMI_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-B8H3Bqpv.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-Bz7rxLWq.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -6701,7 +6706,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fsPromises.lstat(candidate);
+		const st = await fs$1.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -6738,8 +6743,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fsPromises.stat(indexPath);
-		await fsPromises.stat(bundlePath);
+		await fs$1.stat(indexPath);
+		await fs$1.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -6748,7 +6753,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -6969,13 +6974,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fsPromises.realpath(rootDir);
+	const rootReal = await fs$1.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fsPromises.stat(indexPath);
+		await fs$1.stat(indexPath);
 	} catch {
 		try {
-			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -9669,7 +9674,7 @@ function resolveGatewayOwnerStatus(pid, payload, platform) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fsPromises.readFile(lockPath, "utf8");
+		const raw = await fs$1.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -9703,11 +9708,11 @@ async function acquireGatewayLock(opts = {}) {
 	const staleMs = opts.staleMs ?? DEFAULT_STALE_MS;
 	const platform = opts.platform ?? process.platform;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
+	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fsPromises.open(lockPath, "wx");
+		const handle = await fs$1.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -9721,7 +9726,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -9730,7 +9735,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? resolveGatewayOwnerStatus(ownerPid, lastPayload, platform) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fsPromises.rm(lockPath, { force: true });
+			await fs$1.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -9740,13 +9745,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fsPromises.stat(lockPath);
+				const st = await fs$1.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = true;
 			}
 			if (stale) {
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -11651,7 +11656,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-Df1uodAG.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-Um8yyhRA.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CceEhg3d.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),
@@ -11724,7 +11729,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-BmQAULMj.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-Bj1IuJXt.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,

package/dist/{gateway-cli-DG_Mdw0H.js → gateway-cli-DiDJ6Z2d.js}

@@ -21,7 +21,7 @@ import "./pairing-token-Byh6drgn.js";
 import { t as safeEqualSecret } from "./secret-equal-CbntzRkh.js";
 import { a as isValidIPv4, c as resolveClientIp, d as resolveHostName, f as rawDataToString, i as isTrustedProxyAddress, l as resolveGatewayBindHost, n as isLoopbackHost, o as normalizeHostHeader, t as isLoopbackAddress, u as resolveGatewayListenHosts } from "./net-DZ5Ayk-W.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-Cmumpn76.js";
-import { $ as resolveCronStyleNow, $t as setGatewaySigusr1RestartPolicy, An as DEFAULT_INPUT_MAX_REDIRECTS, At as normalizeOptionalAgentId, C as readJsonBodyWithLimit, Cr as getAgentRunContext, Ct as summarizeRestartSentinel, D as agentCommand, E as sleepWithAbort, Et as normalizeHttpWebhookUrl, Fn as resolveInputFileLimits, Ft as migrateLegacyCronPayload, Ht as detectSuspiciousPatterns, It as buildDeliveryFromLegacyPayload, J as getTotalPendingReplies, Jt as deferGatewayRestartUntilIdle, Ln as resolveAgentTimeoutMs, Lt as hasLegacyDeliveryHints, M as createDefaultDeps, Mn as extractFileContentFromSource, Mt as normalizeOptionalText, Nn as extractImageContentFromSource, Nt as normalizePayloadToSystemText, On as DEFAULT_INPUT_IMAGE_MAX_BYTES, P as resolveAgentAvatar, Pn as normalizeMimeList, Pt as normalizeRequiredName, Rt as stripLegacyDeliveryFields, S as handleSlackHttpRequest, Sr as emitAgentEvent, T as computeBackoff, Tr as registerAgentRunContext, Ut as getHookType, V as buildHistoryContextFromEntries, Vt as buildSafeExternalPrompt, Wt as isExternalHookSession, Xt as isGatewaySigusr1RestartExternallyAllowed, Yt as emitGatewayRestart, Zt as markGatewaySigusr1RestartHandled, _ as stripModelTokens, _t as runWithModelFallback, at as readLatestAssistantReply, b as loadSymiPlugins, br as stripHeartbeatToken, d as getActiveEmbeddedRunCount, dr as getTotalQueueSize, en as setPreRestartDeferralCheck, et as getCliSessionId, fn as requestHeartbeatNow, fr as resetAllLanes, ft as resolveOutboundTarget, gr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, h as buildDefaultToolPolicyPipelineSteps, hr as CommandLane, ht as resetDirectoryCache, i as listDescendantRunsForRequester, it as createSymiTools, j as createOutboundSendDeps, jn as DEFAULT_INPUT_TIMEOUT_MS, jt as normalizeOptionalSessionKey, kn as DEFAULT_INPUT_IMAGE_MIMES, kt as inferLegacyName, l as runEmbeddedPiAgent, lr as getActiveTaskCount, lt as resolveOutboundSessionRoute, m as applyToolPolicyPipeline, mr as waitForActiveTasks, n as countActiveRunsForSession, nt as runCliAgent, ot as resolveAnnounceTargetFromKey, p as resolveModelProfile, pr as setCommandLaneConcurrency, pt as resolveSessionDeliveryTarget, qt as consumeGatewaySigusr1RestartAuthorization, r as initSubagentRegistry, s as runSubagentAnnounceFlow, t as countActiveDescendantRuns, tt as setCliSessionId, v as getPluginToolMeta, w as requestBodyErrorToText, wn as enqueueSystemEvent, wr as onAgentEvent, xr as clearAgentRunContext, xt as formatRestartSentinelMessage, yt as consumeRestartSentinel } from "./subagent-registry-CBklD0OL.js";
+import { $ as resolveCronStyleNow, $t as setGatewaySigusr1RestartPolicy, An as DEFAULT_INPUT_MAX_REDIRECTS, At as normalizeOptionalAgentId, C as readJsonBodyWithLimit, Cr as getAgentRunContext, Ct as summarizeRestartSentinel, D as agentCommand, E as sleepWithAbort, Et as normalizeHttpWebhookUrl, Fn as resolveInputFileLimits, Ft as migrateLegacyCronPayload, Ht as detectSuspiciousPatterns, It as buildDeliveryFromLegacyPayload, J as getTotalPendingReplies, Jt as deferGatewayRestartUntilIdle, Ln as resolveAgentTimeoutMs, Lt as hasLegacyDeliveryHints, M as createDefaultDeps, Mn as extractFileContentFromSource, Mt as normalizeOptionalText, Nn as extractImageContentFromSource, Nt as normalizePayloadToSystemText, On as DEFAULT_INPUT_IMAGE_MAX_BYTES, P as resolveAgentAvatar, Pn as normalizeMimeList, Pt as normalizeRequiredName, Rt as stripLegacyDeliveryFields, S as handleSlackHttpRequest, Sr as emitAgentEvent, T as computeBackoff, Tr as registerAgentRunContext, Ut as getHookType, V as buildHistoryContextFromEntries, Vt as buildSafeExternalPrompt, Wt as isExternalHookSession, Xt as isGatewaySigusr1RestartExternallyAllowed, Yt as emitGatewayRestart, Zt as markGatewaySigusr1RestartHandled, _ as stripModelTokens, _t as runWithModelFallback, at as readLatestAssistantReply, b as loadSymiPlugins, br as stripHeartbeatToken, d as getActiveEmbeddedRunCount, dr as getTotalQueueSize, en as setPreRestartDeferralCheck, et as getCliSessionId, fn as requestHeartbeatNow, fr as resetAllLanes, ft as resolveOutboundTarget, gr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, h as buildDefaultToolPolicyPipelineSteps, hr as CommandLane, ht as resetDirectoryCache, i as listDescendantRunsForRequester, it as createSymiTools, j as createOutboundSendDeps, jn as DEFAULT_INPUT_TIMEOUT_MS, jt as normalizeOptionalSessionKey, kn as DEFAULT_INPUT_IMAGE_MIMES, kt as inferLegacyName, l as runEmbeddedPiAgent, lr as getActiveTaskCount, lt as resolveOutboundSessionRoute, m as applyToolPolicyPipeline, mr as waitForActiveTasks, n as countActiveRunsForSession, nt as runCliAgent, ot as resolveAnnounceTargetFromKey, p as resolveModelProfile, pr as setCommandLaneConcurrency, pt as resolveSessionDeliveryTarget, qt as consumeGatewaySigusr1RestartAuthorization, r as initSubagentRegistry, s as runSubagentAnnounceFlow, t as countActiveDescendantRuns, tt as setCliSessionId, v as getPluginToolMeta, w as requestBodyErrorToText, wn as enqueueSystemEvent, wr as onAgentEvent, xr as clearAgentRunContext, xt as formatRestartSentinelMessage, yt as consumeRestartSentinel } from "./subagent-registry-CbTbJKLs.js";
 import { D as resolveSessionResetPolicy, F as resolveMainSessionKey, H as cleanStaleLockFiles, I as resolveMainSessionKeyFromConfig, K as mergeDeliveryContext, M as canonicalizeMainSessionAlias, N as resolveAgentMainSessionKey, T as evaluateSessionFreshness, W as deliveryContextFromSession, d as updateSessionStore, n as parseSessionThreadInfo, o as loadSessionStore } from "./sessions-CJXnZVjR.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-Csntmwwn.js";
 import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
@@ -130,20 +130,20 @@ import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } fr
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BtG9rny3.js";
 import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-Byo5jCLN.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-CA_XIzr_.js";
-import { i as pickGatewaySelfPresence } from "./status-DxodHhzX.js";
-import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-CboWXJkq.js";
+import { i as pickGatewaySelfPresence } from "./status-BxbbINLV.js";
+import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-Bst5HnLF.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-ZdimP1aU.js";
-import { t as runOnboardingWizard } from "./onboarding-DhIEUmp5.js";
-import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-B9alalq5.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-ByyOJyDl.js";
+import { t as runOnboardingWizard } from "./onboarding-DWs6tHZ9.js";
+import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-b_Qod4tt.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-CFkFVwEz.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CzWeiE-Y.js";
-import "./agents.config-Dt7B_P5o.js";
+import "./agents.config-DTUAM1AG.js";
 import "./dm-policy-shared-DJ-61hCT.js";
 import "./node-service-fcZExd22.js";
 import "./status.update-DbmZz0Aq.js";
 import "./skills-install-1ZdwGTnh.js";
-import "./update-runner-CmZW3aeK.js";
+import "./update-runner-B0NdgPvD.js";
 import { t as resolveAgentSessionDirs } from "./session-dirs-DWgIYmAt.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-B51TF6q3.js";
 import { n as forceFreePortAndWait } from "./ports-Dn122MUd.js";
@@ -1862,17 +1862,22 @@ function createChannelManager(opts) {
 //#region src/gateway/server-chat.ts
 /**
 * Strip Gemma's self-verification monologue blocks from the final text.
-* These follow a consistent pattern appended after the real answer:
+* Gemma produces several variants of this pattern:
 *   "I have addressed the request fully.\n**Verification:**\n..."
+*   "I've reviewed my response against your request:\n1. Requirements:..."
+*   "**Verification:**\n1. **Address requirements:**..."
 */
-const MONOLOGUE_PATTERN = /\n*I have addressed the request fully\.?\s*(?:\n\*\*Verification:\*\*[\s\S]*)?$/;
-const MONOLOGUE_FALLBACK_PATTERNS = [/\n*\*\*Verification:\*\*\s*\n[\s\S]*?Everything is correct\.?\s*✅?\s*$/, /\n*Address requirements:[\s\S]*?Everything is correct\.?\s*✅?\s*$/];
+const MONOLOGUE_PATTERNS = [
+	/\n*I have addressed the request fully\.?\s*(?:\n[\s\S]*)?$/,
+	/\n*I['']ve reviewed my response[\s\S]*$/,
+	/\n*\*?\*?Verification:?\*?\*?\s*\n[\s\S]*?(?:Everything is correct|All requirements met)\.?\s*✅?\s*$/,
+	/\n*(?:\*?\*?)?(?:Status Check|Address requirements|Requirements):?(?:\*?\*?)?\s*\n[\s\S]*?(?:Everything is correct|All requirements met|is correct)\.?\s*✅?\s*$/,
+	/\n*\d+\.\s*\*?\*?Requirements:?\*?\*?[\s\S]*?\d+\.\s*\*?\*?Verification:?\*?\*?[\s\S]*$/
+];
 function suppressMonologueBlock(text) {
-	let result = text.replace(MONOLOGUE_PATTERN, "");
-	if (result !== text) return result.trim();
-	for (const pattern of MONOLOGUE_FALLBACK_PATTERNS) {
-		result = text.replace(pattern, "");
-		if (result !== text) return result.trim();
+	for (const pattern of MONOLOGUE_PATTERNS) {
+		const result = text.replace(pattern, "");
+		if (result !== text && result.trim()) return result.trim();
 	}
 	return text;
 }
@@ -11720,7 +11725,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-BAub_JoN.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-rGIAkViC.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,

package/dist/{gateway-rpc-DFeD8pZh.js → gateway-rpc-BxkKeCZ0.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-aT-I_DTX.js";
-import { n as callGateway } from "./call-Dd7-bkfG.js";
+import { n as callGateway } from "./call-CJaS1iRF.js";
 import { n as withProgress } from "./progress-jIePzvGA.js";
 
 //#region src/cli/gateway-rpc.ts