@symerian/symi 2.4.4 → 2.5.0

package/dist/{plugin-registry-D1vzxXON.js → plugin-registry-BDfC2z-e.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { M as getActivePluginRegistry, o as createSubsystemLogger } from "./entry.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-D-jRCY0d.js";
 import { i as loadConfig } from "./config-DHBLS1Hl.js";
-import { h as loadSymiPlugins } from "./subagent-registry-CtKDHowr.js";
+import { m as loadSymiPlugins } from "./subagent-registry-CZah-77E.js";
 
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/{plugin-registry-ChH5CJIw.js → plugin-registry-IXa-nyg0.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { pt as loadSymiPlugins } from "./reply-BWno_mxL.js";
+import { ft as loadSymiPlugins } from "./reply-BvVsPU7v.js";
 import { d as getActivePluginRegistry } from "./registry-Cja8eT7G.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-CgUHAtCo.js";

package/dist/plugin-sdk/agents/output-normalizer.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Output Normalizer — single processing layer for all model output.
+ *
+ * All output from the model (text deltas, tool call arguments, final text)
+ * passes through ONE normalizer before reaching the agent loop, tool dispatch,
+ * event pipeline, or any client.
+ *
+ * Replaces the scattered filters across emitChatDelta, emitChatFinal, render.js,
+ * pi-tools.ts, and attempt.ts with one coherent processing point.
+ *
+ * Design: model output is untrusted input.  The normalizer validates and cleans
+ * it the same way you'd sanitize user input at a system boundary.
+ *
+ * @module
+ */
+import type { ModelProfile } from "../config/model-profiles.js";
+export interface NormalizeTextResult {
+    /** Cleaned text delta. */
+    text: string;
+    /** If set, the stream should be aborted immediately. */
+    abort?: {
+        reason: string;
+    };
+}
+export interface OutputNormalizer {
+    /** Process a text delta from the model stream. Returns cleaned text
+     *  and optional abort signal (combined — no separate shouldAbort check). */
+    normalizeTextDelta(delta: string): NormalizeTextResult;
+    /** Process tool call arguments. Returns cleaned args with all string
+     *  values stripped of control tokens. */
+    normalizeToolArgs(args: Record<string, unknown>): Record<string, unknown>;
+    /** Process the final accumulated text. Strips tokens, detects and removes
+     *  trailing monologue blocks. Called once when the model turn completes. */
+    normalizeFinalText(text: string): string;
+    /** Reset state for a new model turn. */
+    reset(): void;
+}
+/**
+ * Layer 2: Structural monologue detection.
+ * Detects a trailing block that:
+ *  1. Starts after a double newline
+ *  2. Opens with a self-referential phrase
+ *  3. Contains a numbered list with assessment keywords
+ *  4. Sits at the end of the text
+ */
+declare function detectMonologueStructural(text: string): number | null;
+/**
+ * Strip monologue from final text using the hierarchy:
+ * Layer 2 (structural) first, Layer 3 (regex) as fallback.
+ * Layer 1 (prompt tuning) happens before the model produces output.
+ */
+declare function stripMonologue(text: string): string;
+declare function detectRepetition(text: string, minBlock: number): boolean;
+declare function sanitizeArgs(args: Record<string, unknown>, modelId: string): Record<string, unknown>;
+/**
+ * Create an output normalizer configured for the given model profile.
+ *
+ * For Claude: passthrough (no stripping, no monologue, no aggressive cleaning).
+ * For Gemma/vLLM: full normalization pipeline.
+ * For unknown: conservative defaults.
+ */
+export declare function createOutputNormalizer(profile: ModelProfile, modelId: string): OutputNormalizer;
+export declare const __testing: {
+    detectMonologueStructural: typeof detectMonologueStructural;
+    stripMonologue: typeof stripMonologue;
+    detectRepetition: typeof detectRepetition;
+    sanitizeArgs: typeof sanitizeArgs;
+};
+export {};

package/dist/plugin-sdk/{channel-web-DOZ-G9xX.js → channel-web-HznAZS1r.js}

@@ -1,6 +1,6 @@
 import { a as buildGroupHistoryKey, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-C_0eELjb.js";
 import { f as readWebSelfId, o as getWebAuthAgeMs, r as resolveWhatsAppAccount } from "./accounts-Ddm33hQm.js";
-import { E as enqueueSystemEvent, G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as resolveEnvelopeFormatOptions, c as computeBackoff, d as formatDurationPrecise, f as dispatchReplyWithBufferedBlockDispatcher, g as formatInboundEnvelope, h as resolveInboundDebounceMs, ht as createDedupeCache, l as sleepWithAbort, m as createInboundDebouncer, n as normalizeGroupActivation, nt as buildMentionRegexes, r as parseActivationCommand, rt as normalizeMentionText, t as getReplyFromConfig, tt as recordPendingHistoryEntryIfEnabled, u as buildPairingReply, v as hasControlCommand, y as shouldComputeCommandAuthorized } from "./reply-BIMkrLWh.js";
+import { E as enqueueSystemEvent, G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as resolveEnvelopeFormatOptions, c as computeBackoff, d as formatDurationPrecise, f as dispatchReplyWithBufferedBlockDispatcher, g as formatInboundEnvelope, h as resolveInboundDebounceMs, ht as createDedupeCache, l as sleepWithAbort, m as createInboundDebouncer, n as normalizeGroupActivation, nt as buildMentionRegexes, r as parseActivationCommand, rt as normalizeMentionText, t as getReplyFromConfig, tt as recordPendingHistoryEntryIfEnabled, u as buildPairingReply, v as hasControlCommand, y as shouldComputeCommandAuthorized } from "./reply-DpnW-aMb.js";
 import { A as normalizeE164, B as toWhatsappJid, K as logVerbose, N as resolveJidToE164, O as isSelfChatMode, R as sleep, Y as shouldLogVerbose, k as jidToE164, s as normalizeChatChannelId, tt as getChildLogger, x as clamp } from "./registry-D0xTnUWt.js";
 import { n as loadConfig } from "./config-KlTNfkFF.js";
 import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-B2uDN3TV.js";

package/dist/plugin-sdk/index.js

@@ -1,6 +1,6 @@
 import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-C_0eELjb.js";
 import { _ as createAccountListHelpers, i as resolveWhatsAppAuthDir, n as resolveDefaultWhatsAppAccountId, r as resolveWhatsAppAccount, t as listWhatsAppAccountIds } from "./accounts-Ddm33hQm.js";
-import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as stripMarkdown, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as processLineMessage, St as listThreadBindingsBySessionKey, T as attachFooterText, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as normalizeAccountId$1, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as listLineAccountIds, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, o as resolveDefaultLineAccountId, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, s as resolveLineAccount, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as createReceiptCard, wt as formatAllowlistMatchMeta, x as hasMarkdownToConvert, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./reply-BIMkrLWh.js";
+import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as stripMarkdown, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as processLineMessage, St as listThreadBindingsBySessionKey, T as attachFooterText, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as normalizeAccountId$1, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as listLineAccountIds, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, o as resolveDefaultLineAccountId, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, s as resolveLineAccount, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as createReceiptCard, wt as formatAllowlistMatchMeta, x as hasMarkdownToConvert, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./reply-DpnW-aMb.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import { D as resolveSlackAccount, E as resolveDefaultSlackAccountId, F as resolveDiscordAccount, M as listDiscordAccountIds, O as resolveSlackReplyToMode, P as resolveDefaultDiscordAccountId, S as resolveTelegramAccount, T as listSlackAccountIds, _ as normalizeWhatsAppTarget, a as listDiscordDirectoryPeersFromConfig, b as listTelegramAccountIds, c as listTelegramDirectoryGroupsFromConfig, d as listWhatsAppDirectoryPeersFromConfig, f as looksLikeSlackTargetId, g as isWhatsAppGroupJid, i as listDiscordDirectoryGroupsFromConfig, l as listTelegramDirectoryPeersFromConfig, o as listSlackDirectoryGroupsFromConfig, p as normalizeSlackMessagingTarget, s as listSlackDirectoryPeersFromConfig, u as listWhatsAppDirectoryGroupsFromConfig, w as listEnabledSlackAccounts, x as resolveDefaultTelegramAccountId } from "./plugins-BNByVCIH.js";
@@ -47,7 +47,7 @@ import "./paths-A0xdf3yk.js";
 import { h as onDiagnosticEvent, m as isDiagnosticsEnabled, p as emitDiagnosticEvent } from "./diagnostic-05pm5Rxi.js";
 import { n as extractOriginalFilename } from "./store-BdrNabcU.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-BiyAyTWz.js";
-import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-DOZ-G9xX.js";
+import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-HznAZS1r.js";
 import "./image-CLOPx7yW.js";
 import "./pi-model-discovery-LbcEa65a.js";
 import "./api-key-rotation-D_sMvI5W.js";

package/dist/plugin-sdk/{reply-BIMkrLWh.js → reply-DpnW-aMb.js}

@@ -75,7 +75,7 @@ import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
 import * as fs$2 from "node:fs/promises";
 import fs$1 from "node:fs/promises";
 import { fileURLToPath } from "node:url";
-import { complete, completeSimple, streamSimple } from "@mariozechner/pi-ai";
+import { complete, completeSimple, createAssistantMessageEventStream, streamSimple } from "@mariozechner/pi-ai";
 import AjvPkg from "ajv";
 import { ProxyAgent, fetch as fetch$1 } from "undici";
 import { Buffer as Buffer$1 } from "node:buffer";
@@ -27663,6 +27663,199 @@ function createCacheTrace(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/model-token-filter.ts
+/**
+* Strips model-specific control tokens from streamed text.
+*
+* Used both server-side (in the streaming pipeline) and by the Glass UI
+* (as a defense-in-depth fallback).  The patterns here cover tokens known
+* to leak from Gemma 4 / vLLM; Claude output is left untouched.
+*/
+const GEMMA_TOKEN_PATTERNS = [
+	/<\|channel>\w*/g,
+	/<channel\|>/g,
+	/<start_of_turn>(?:model|user)?/g,
+	/<end_of_turn>/g,
+	/<\|(?:fim_prefix|fim_suffix|fim_middle)\|>/g,
+	/^\s*<bos>\s*/gm,
+	/<\|[^|>]{0,30}\|>/g,
+	/<\|[^>]{0,30}>/g
+];
+/**
+* Aggressively strip all fragments of model control token corruption from
+* tool arguments.  This catches cases where the model produces raw garbage
+* like `<|<|"|<|<|\'` that doesn't match any known token template.
+*/
+const AGGRESSIVE_TOKEN_FRAGMENTS = [/<\|/g, /\|>/g];
+const GEMMA_MODEL_HINTS$1 = ["gemma", "redsand/"];
+function isGemmaModel$1(modelId) {
+	const lower = modelId.toLowerCase();
+	return GEMMA_MODEL_HINTS$1.some((hint) => lower.includes(hint));
+}
+/**
+* Strip known control tokens from text.  Only applies to Gemma-family models;
+* other models pass through unchanged.
+*/
+/**
+* Strip known control tokens from text.  Only applies to Gemma-family models;
+* other models pass through unchanged.  Used for streamed text output.
+*/
+function stripModelTokens(text, modelId) {
+	if (!text || !isGemmaModel$1(modelId)) return text;
+	let result = text;
+	for (const re of GEMMA_TOKEN_PATTERNS) {
+		re.lastIndex = 0;
+		result = result.replace(re, "");
+	}
+	return result;
+}
+/**
+* Aggressively strip ALL token-like fragments from a string.  Used for tool
+* call arguments where any `<|` corruption causes downstream failures.
+* More aggressive than `stripModelTokens` — removes bare `<|` and `|>` fragments
+* that don't match any known token template.
+*/
+function stripModelTokensAggressive(text, modelId) {
+	if (!text || !isGemmaModel$1(modelId)) return text;
+	let result = stripModelTokens(text, modelId);
+	for (const re of AGGRESSIVE_TOKEN_FRAGMENTS) {
+		re.lastIndex = 0;
+		result = result.replace(re, "");
+	}
+	return result;
+}
+
+//#endregion
+//#region src/agents/output-normalizer.ts
+const MONOLOGUE_REGEX_PATTERNS = [
+	/\n*I have addressed the request fully\.?\s*(?:\n[\s\S]*)?$/,
+	/\n*I[''\u2019]ve reviewed my response[\s\S]*$/,
+	/\n*\*?\*?Verification:?\*?\*?\s*\n[\s\S]*?(?:Everything is correct|All requirements met)\.?\s*\u2705?\s*$/,
+	/\n*\d+\.\s*\*?\*?Requirements:?\*?\*?[\s\S]*?\d+\.\s*\*?\*?Verification:?\*?\*?[\s\S]*$/
+];
+const SELF_REF_OPENERS = [
+	"i have addressed",
+	"i've reviewed",
+	"i‘ve reviewed",
+	"i’ve reviewed",
+	"status check",
+	"address requirements",
+	"verification:",
+	"requirements:"
+];
+const ASSESSMENT_KEYWORDS = [
+	"requirements",
+	"verification",
+	"correct",
+	"addressed",
+	"fulfilled",
+	"confirmed",
+	"passed"
+];
+/**
+* Layer 2: Structural monologue detection.
+* Detects a trailing block that:
+*  1. Starts after a double newline
+*  2. Opens with a self-referential phrase
+*  3. Contains a numbered list with assessment keywords
+*  4. Sits at the end of the text
+*/
+function detectMonologueStructural(text) {
+	let searchFrom = Math.floor(text.length * .15);
+	while (searchFrom < text.length) {
+		const breakPos = text.indexOf("\n\n", searchFrom);
+		if (breakPos < 0) return null;
+		const trailingBlock = text.slice(breakPos).toLowerCase();
+		if (!SELF_REF_OPENERS.some((opener) => trailingBlock.includes(opener))) {
+			searchFrom = breakPos + 2;
+			continue;
+		}
+		const hasNumberedList = /\d+\.\s/.test(trailingBlock);
+		const hasBoldHeaders = /\*\*\w/.test(trailingBlock);
+		if (!hasNumberedList && !hasBoldHeaders) {
+			searchFrom = breakPos + 2;
+			continue;
+		}
+		if (ASSESSMENT_KEYWORDS.filter((kw) => trailingBlock.includes(kw)).length < 2) {
+			searchFrom = breakPos + 2;
+			continue;
+		}
+		return breakPos;
+	}
+	return null;
+}
+/**
+* Strip monologue from final text using the hierarchy:
+* Layer 2 (structural) first, Layer 3 (regex) as fallback.
+* Layer 1 (prompt tuning) happens before the model produces output.
+*/
+function stripMonologue(text) {
+	const structuralCut = detectMonologueStructural(text);
+	if (structuralCut !== null) {
+		const cleaned = text.slice(0, structuralCut).trim();
+		if (cleaned) return cleaned;
+	}
+	for (const pattern of MONOLOGUE_REGEX_PATTERNS) {
+		const result = text.replace(pattern, "");
+		if (result !== text && result.trim()) return result.trim();
+	}
+	return text;
+}
+const DEFAULT_REPETITION_MIN_BLOCK = 150;
+function detectRepetition(text, minBlock) {
+	if (text.length < minBlock * 2.5) return false;
+	const sampleStart = Math.floor(text.length * .25);
+	const sample = text.slice(sampleStart, sampleStart + minBlock);
+	const searchStart = sampleStart + minBlock;
+	return text.indexOf(sample, searchStart) >= 0;
+}
+function sanitizeArgs(args, modelId) {
+	const result = {};
+	for (const [key, value] of Object.entries(args)) if (typeof value === "string") result[key] = stripModelTokensAggressive(value, modelId);
+	else if (Array.isArray(value)) result[key] = value.map((item) => typeof item === "string" ? stripModelTokensAggressive(item, modelId) : item && typeof item === "object" ? sanitizeArgs(item, modelId) : item);
+	else if (value && typeof value === "object") result[key] = sanitizeArgs(value, modelId);
+	else result[key] = value;
+	return result;
+}
+/**
+* Create an output normalizer configured for the given model profile.
+*
+* For Claude: passthrough (no stripping, no monologue, no aggressive cleaning).
+* For Gemma/vLLM: full normalization pipeline.
+* For unknown: conservative defaults.
+*/
+function createOutputNormalizer(profile, modelId) {
+	const isGemma = isGemmaModel$1(modelId);
+	const shouldStrip = isGemma || profile.filters.stripPatterns.length > 0;
+	const shouldSuppressMonologue = profile.filters.suppressMonologue;
+	let accumulated = "";
+	return {
+		normalizeTextDelta(delta) {
+			const text = shouldStrip ? stripModelTokens(delta, modelId) : delta;
+			accumulated += text;
+			if (detectRepetition(accumulated, DEFAULT_REPETITION_MIN_BLOCK)) return {
+				text,
+				abort: { reason: "repetition-detected" }
+			};
+			return { text };
+		},
+		normalizeToolArgs(args) {
+			if (!isGemma) return args;
+			return sanitizeArgs(args, modelId);
+		},
+		normalizeFinalText(text) {
+			let result = text;
+			if (shouldStrip) result = stripModelTokens(result, modelId);
+			if (shouldSuppressMonologue) result = stripMonologue(result);
+			return result.trim();
+		},
+		reset() {
+			accumulated = "";
+		}
+	};
+}
+
 //#endregion
 //#region src/agents/model-aware-stream.ts
 /**
@@ -27674,6 +27867,7 @@ function createCacheTrace(params) {
 */
 function createModelAwareStreamFn(opts) {
 	const underlying = opts.baseStreamFn ?? streamSimple;
+	const fullModelId = opts.provider ? `${opts.provider}/${opts.modelId}` : opts.modelId;
 	const mergedParams = {
 		...opts.profile.params,
 		...opts.configExtraParams,
@@ -27710,9 +27904,11 @@ function createModelAwareStreamFn(opts) {
 		}
 		callerOnPayload?.(payload);
 	};
+	const normalizer = createOutputNormalizer(opts.profile, fullModelId);
 	return (model, context, options) => {
 		const callerOnPayload = options?.onPayload;
-		return underlying(model, context, {
+		normalizer.reset();
+		const streamOrPromise = underlying(model, context, {
 			...nativeOpts,
 			...options,
 			onPayload: (payload) => onPayloadHook(payload, callerOnPayload),
@@ -27721,8 +27917,106 @@ function createModelAwareStreamFn(opts) {
 				...options?.headers
 			} } : {}
 		});
+		if (streamOrPromise instanceof Promise) return streamOrPromise.then((s) => wrapStreamWithNormalizer(s, normalizer));
+		return wrapStreamWithNormalizer(streamOrPromise, normalizer);
 	};
 }
+/**
+* Wrap an AssistantMessageEventStream to intercept and normalize events:
+* - text_delta: strip tokens, detect repetition
+* - toolcall_end: sanitize tool call arguments
+* - done: normalize final message text
+*/
+function wrapStreamWithNormalizer(rawStream, normalizer) {
+	const normalized = createAssistantMessageEventStream();
+	(async () => {
+		try {
+			for await (const event of rawStream) {
+				const processed = normalizeEvent(event, normalizer);
+				if (processed.abort) {
+					normalized.push({
+						type: "error",
+						reason: "aborted",
+						errorMessage: `output-normalizer: ${processed.abort.reason}`,
+						usage: {
+							input: 0,
+							output: 0
+						}
+					});
+					break;
+				}
+				normalized.push(processed.event);
+			}
+		} catch (err) {
+			normalized.push({
+				type: "error",
+				reason: "error",
+				errorMessage: err instanceof Error ? err.message : String(err),
+				usage: {
+					input: 0,
+					output: 0
+				}
+			});
+		}
+	})();
+	return normalized;
+}
+function normalizeEvent(event, normalizer) {
+	if (event.type === "text_delta") {
+		const result = normalizer.normalizeTextDelta(event.delta);
+		if (result.abort) return {
+			event,
+			abort: result.abort
+		};
+		if (result.text !== event.delta) return { event: {
+			...event,
+			delta: result.text
+		} };
+		return { event };
+	}
+	if (event.type === "toolcall_end" && event.toolCall) {
+		const tc = event.toolCall;
+		if (tc.arguments && typeof tc.arguments === "object") {
+			const cleanedArgs = normalizer.normalizeToolArgs(tc.arguments);
+			return { event: {
+				...event,
+				toolCall: {
+					...tc,
+					arguments: cleanedArgs
+				}
+			} };
+		}
+		return { event };
+	}
+	if (event.type === "done" && event.message) {
+		const msg = event.message;
+		if (Array.isArray(msg.content)) {
+			let changed = false;
+			const normalizedContent = msg.content.map((block) => {
+				if (block.type === "text" && "text" in block) {
+					const cleaned = normalizer.normalizeFinalText(block.text);
+					if (cleaned !== block.text) {
+						changed = true;
+						return {
+							...block,
+							text: cleaned
+						};
+					}
+				}
+				return block;
+			});
+			if (changed) return { event: {
+				...event,
+				message: {
+					...msg,
+					content: normalizedContent
+				}
+			} };
+		}
+		return { event };
+	}
+	return { event };
+}
 /** Detect vLLM/Gemma providers by model hints or baseUrl patterns. */
 function isVllmProvider(provider, modelId, config) {
 	const lower = `${provider}/${modelId}`.toLowerCase();
@@ -30915,7 +31209,7 @@ function buildSystemPromptReport(params) {
 
 //#endregion
 //#region src/agents/transcript-policy.ts
-const GEMMA_MODEL_HINTS$1 = ["gemma", "redsand/"];
+const GEMMA_MODEL_HINTS = ["gemma", "redsand/"];
 const MISTRAL_MODEL_HINTS = [
 	"mistral",
 	"mixtral",
@@ -30944,11 +31238,11 @@ function isAnthropicApi(modelApi, provider) {
 	if (modelApi === "anthropic-messages") return true;
 	return normalizeProviderId(provider ?? "") === "anthropic";
 }
-function isGemmaModel$1(params) {
+function isGemmaModel(params) {
 	if (normalizeProviderId(params.provider ?? "") === "redsand") return true;
 	const modelId = (params.modelId ?? "").toLowerCase();
 	if (!modelId) return false;
-	return GEMMA_MODEL_HINTS$1.some((hint) => modelId.includes(hint));
+	return GEMMA_MODEL_HINTS.some((hint) => modelId.includes(hint));
 }
 function isMistralModel(params) {
 	if (normalizeProviderId(params.provider ?? "") === "mistral") return true;
@@ -30966,7 +31260,7 @@ function resolveTranscriptPolicy(params) {
 		provider,
 		modelId
 	});
-	const isGemma = isGemmaModel$1({
+	const isGemma = isGemmaModel({
 		provider,
 		modelId
 	});
@@ -35503,7 +35797,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-BsZ7_Dy0.js");
+			const { sendMessageWhatsApp } = await import("./web-CGNEXRkp.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -52941,7 +53235,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-BsZ7_Dy0.js");
+	webChannelPromise ??= import("./web-CGNEXRkp.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -58172,69 +58466,6 @@ function createProcessTool(defaults) {
 }
 const processTool = createProcessTool();
 
-//#endregion
-//#region src/agents/model-token-filter.ts
-/**
-* Strips model-specific control tokens from streamed text.
-*
-* Used both server-side (in the streaming pipeline) and by the Glass UI
-* (as a defense-in-depth fallback).  The patterns here cover tokens known
-* to leak from Gemma 4 / vLLM; Claude output is left untouched.
-*/
-const GEMMA_TOKEN_PATTERNS = [
-	/<\|channel>\w*/g,
-	/<channel\|>/g,
-	/<start_of_turn>(?:model|user)?/g,
-	/<end_of_turn>/g,
-	/<\|(?:fim_prefix|fim_suffix|fim_middle)\|>/g,
-	/^\s*<bos>\s*/gm,
-	/<\|[^|>]{0,30}\|>/g,
-	/<\|[^>]{0,30}>/g
-];
-/**
-* Aggressively strip all fragments of model control token corruption from
-* tool arguments.  This catches cases where the model produces raw garbage
-* like `<|<|"|<|<|\'` that doesn't match any known token template.
-*/
-const AGGRESSIVE_TOKEN_FRAGMENTS = [/<\|/g, /\|>/g];
-const GEMMA_MODEL_HINTS = ["gemma", "redsand/"];
-function isGemmaModel(modelId) {
-	const lower = modelId.toLowerCase();
-	return GEMMA_MODEL_HINTS.some((hint) => lower.includes(hint));
-}
-/**
-* Strip known control tokens from text.  Only applies to Gemma-family models;
-* other models pass through unchanged.
-*/
-/**
-* Strip known control tokens from text.  Only applies to Gemma-family models;
-* other models pass through unchanged.  Used for streamed text output.
-*/
-function stripModelTokens(text, modelId) {
-	if (!text || !isGemmaModel(modelId)) return text;
-	let result = text;
-	for (const re of GEMMA_TOKEN_PATTERNS) {
-		re.lastIndex = 0;
-		result = result.replace(re, "");
-	}
-	return result;
-}
-/**
-* Aggressively strip ALL token-like fragments from a string.  Used for tool
-* call arguments where any `<|` corruption causes downstream failures.
-* More aggressive than `stripModelTokens` — removes bare `<|` and `|>` fragments
-* that don't match any known token template.
-*/
-function stripModelTokensAggressive(text, modelId) {
-	if (!text || !isGemmaModel(modelId)) return text;
-	let result = stripModelTokens(text, modelId);
-	for (const re of AGGRESSIVE_TOKEN_FRAGMENTS) {
-		re.lastIndex = 0;
-		result = result.replace(re, "");
-	}
-	return result;
-}
-
 //#endregion
 //#region src/agents/pi-tools.abort.ts
 function throwAbortError() {

package/dist/plugin-sdk/{web-BsZ7_Dy0.js → web-CGNEXRkp.js}

@@ -1,5 +1,5 @@
 import { a as WA_WEB_AUTH_DIR, g as webAuthExists, s as logWebSelfId, u as pickWebChannel } from "./accounts-Ddm33hQm.js";
-import "./reply-BIMkrLWh.js";
+import "./reply-DpnW-aMb.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import "./plugins-BNByVCIH.js";
@@ -45,7 +45,7 @@ import "./pi-embedded-helpers-CW630epe.js";
 import "./paths-A0xdf3yk.js";
 import "./diagnostic-05pm5Rxi.js";
 import "./store-BdrNabcU.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-DOZ-G9xX.js";
+import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-HznAZS1r.js";
 import "./image-CLOPx7yW.js";
 import "./pi-model-discovery-LbcEa65a.js";
 import "./api-key-rotation-D_sMvI5W.js";

package/dist/{plugins-cli-CCMRc0SH.js → plugins-cli-DAxj0T7n.js}

@@ -13,7 +13,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CtKDHowr.js";
+import "./subagent-registry-CZah-77E.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -102,7 +102,7 @@ import "./npm-registry-spec-DkaZNHAW.js";
 import "./skill-scanner-BGWOBqLY.js";
 import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-CgQpVncj.js";
 import { t as renderTable } from "./table-D01d2GuY.js";
-import { t as buildPluginStatusReport } from "./status-C0ghzWRG.js";
+import { t as buildPluginStatusReport } from "./status-C-kU0UFm.js";
 import { n as updateNpmInstalledPlugins } from "./update-DEMKx4eC.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{plugins-cli-0PARfFDh.js → plugins-cli-DsYvb9az.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { B as theme, S as shortenHomePath, g as resolveConfigDir, x as shortenHomeInString, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-BWno_mxL.js";
+import "./reply-BvVsPU7v.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -106,7 +106,7 @@ import "./npm-registry-spec-C2JDdSZS.js";
 import "./skill-scanner-CLs8u6vQ.js";
 import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-C1Cebk97.js";
 import { t as renderTable } from "./table-BTgkRafz.js";
-import { t as buildPluginStatusReport } from "./status-uaQ9lnOb.js";
+import { t as buildPluginStatusReport } from "./status-5XgxbiNb.js";
 import { n as updateNpmInstalledPlugins } from "./update-rw7wJwHd.js";
 import fs from "node:fs";
 import os from "node:os";

package/dist/{program-CTvCt90X.js → program-C_UFd0ph.js}

@@ -14,7 +14,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CtKDHowr.js";
+import "./subagent-registry-CZah-77E.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -99,13 +99,13 @@ import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
 import "./catalog-DLQFKucJ.js";
-import "./plugin-registry-D1vzxXON.js";
-import { n as resolveCliChannelOptions } from "./channel-options-CcNcqLfp.js";
-import { t as getSubCliCommandsWithSubcommands } from "./register.subclis-DAEtHKAL.js";
-import { a as registerProgramCommands, r as getCoreCliCommandsWithSubcommands } from "./command-registry-jAjzb3Ub.js";
+import "./plugin-registry-BDfC2z-e.js";
+import { n as resolveCliChannelOptions } from "./channel-options-BJphNYiq.js";
+import { t as getSubCliCommandsWithSubcommands } from "./register.subclis-Dv1WM9Kj.js";
+import { a as registerProgramCommands, r as getCoreCliCommandsWithSubcommands } from "./command-registry-X_FmrHib.js";
 import { r as setProgramContext } from "./program-context-CqzR_m-7.js";
 import { t as forceFreePort } from "./ports-Dn122MUd.js";
-import { n as formatCliBannerLine, r as hasEmittedCliBanner, t as emitCliBanner } from "./banner-DBCyc2l3.js";
+import { n as formatCliBannerLine, r as hasEmittedCliBanner, t as emitCliBanner } from "./banner-DihS8WHF.js";
 import { Command } from "commander";
 
 //#region src/cli/program/context.ts
@@ -213,7 +213,7 @@ function registerPreActionHooks(program, programVersion) {
 			commandPath
 		});
 		if (PLUGIN_REQUIRED_COMMANDS.has(commandPath[0])) {
-			const { ensurePluginRegistryLoaded } = await import("./plugin-registry-D1vzxXON.js").then((n) => n.n);
+			const { ensurePluginRegistryLoaded } = await import("./plugin-registry-BDfC2z-e.js").then((n) => n.n);
 			ensurePluginRegistryLoaded();
 		}
 	});