@symerian/symi 2.5.1 → 2.5.2

package/dist/{pi-embedded-DXSWVPEZ.js → pi-embedded-Ch-LcMWg.js}

@@ -55582,6 +55582,109 @@ function guardSessionManager(sessionManager, opts) {
 	return sessionManager;
 }
 
+//#endregion
+//#region src/agents/session-version.ts
+/**
+* Session Versioning — version-based session migration.
+*
+* Each session gets a `symiVersion` field in its JSONL header.
+* On session load, if the session was created by a known-poison version
+* (2.3.0-2.3.4), it's archived and a fresh session starts.
+*
+* Sessions without `symiVersion` predate 2.3.0 and were created with Claude,
+* which does not produce corrupted tool args or looping output.  Do NOT
+* archive unversioned sessions — they are safe.  Only sessions with an
+* explicit symiVersion in the known-poison range are archived.
+*
+* @module
+*/
+/** Versions that produced corrupted sessions (tool arg garbage, looping). */
+const POISON_VERSION_MIN = [
+	2,
+	3,
+	0
+];
+const POISON_VERSION_MAX = [
+	2,
+	3,
+	4
+];
+function parseVersion(v) {
+	return v.split(".").map((s) => parseInt(s, 10)).filter((n) => !Number.isNaN(n));
+}
+function compareVersions(a, b) {
+	for (let i = 0; i < Math.max(a.length, b.length); i++) {
+		const av = a[i] ?? 0;
+		const bv = b[i] ?? 0;
+		if (av < bv) return -1;
+		if (av > bv) return 1;
+	}
+	return 0;
+}
+function isInPoisonRange(version) {
+	const v = parseVersion(version);
+	if (v.length < 3) return false;
+	return compareVersions(v, POISON_VERSION_MIN) >= 0 && compareVersions(v, POISON_VERSION_MAX) <= 0;
+}
+/**
+* Check if a session file was created by a poisoned Symi version.
+* Returns the symiVersion if poisoned, null if safe.
+*/
+async function checkSessionPoison(sessionFile) {
+	try {
+		const firstLine = (await fs.readFile(sessionFile, "utf-8")).split("\n")[0];
+		if (!firstLine) return null;
+		const header = JSON.parse(firstLine);
+		if (header.type !== "session") return null;
+		const symiVersion = header.symiVersion;
+		if (typeof symiVersion !== "string") return null;
+		if (isInPoisonRange(symiVersion)) return symiVersion;
+		return null;
+	} catch {
+		return null;
+	}
+}
+/**
+* Archive a poisoned session file by renaming it.
+* The archived file can be inspected later but won't be loaded.
+*/
+async function archivePoisonedSession(sessionFile) {
+	const archiveName = `${sessionFile}.archived-poison.${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
+	await fs.rename(sessionFile, archiveName);
+	return archiveName;
+}
+/**
+* Stamp the current Symi version into a session file's header.
+* Reads the first line, adds/updates symiVersion, rewrites the line.
+*/
+async function stampSessionVersion(sessionFile) {
+	try {
+		const lines = (await fs.readFile(sessionFile, "utf-8")).split("\n");
+		if (lines.length === 0) return;
+		const header = JSON.parse(lines[0]);
+		if (header.type !== "session") return;
+		if (header.symiVersion === VERSION) return;
+		header.symiVersion = VERSION;
+		lines[0] = JSON.stringify(header);
+		await fs.writeFile(sessionFile, lines.join("\n"), "utf-8");
+	} catch {}
+}
+/**
+* Check and handle a session file before use.
+* If poisoned: archive it and return { archived: true }.
+* Otherwise: stamp the current version and return { archived: false }.
+*/
+async function handleSessionVersion(sessionFile) {
+	const poison = await checkSessionPoison(sessionFile);
+	if (poison) return {
+		archived: true,
+		archivePath: await archivePoisonedSession(sessionFile),
+		poisonVersion: poison
+	};
+	await stampSessionVersion(sessionFile);
+	return { archived: false };
+}
+
 //#endregion
 //#region src/agents/stream-monitor.ts
 /**
@@ -58530,6 +58633,8 @@ async function runEmbeddedAttempt(params) {
 				provider: params.provider,
 				modelId: params.modelId
 			});
+			const versionCheck = await handleSessionVersion(params.sessionFile);
+			if (versionCheck.archived) log$4.warn(`session archived: created by ${versionCheck.poisonVersion}, known corruption range → ${versionCheck.archivePath}`);
 			await prewarmSessionFile(params.sessionFile);
 			sessionManager = guardSessionManager(SessionManager.open(params.sessionFile), {
 				agentId: sessionAgentId,
@@ -60201,7 +60306,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-BWuN3c4n.js");
+			const { sendMessageWhatsApp } = await import("./web-CubghJNN.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -75481,7 +75586,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-BWuN3c4n.js");
+	webChannelPromise ??= import("./web-CubghJNN.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{pi-embedded-RoXbo73e.js → pi-embedded-CpI5F8DC.js}

@@ -14,7 +14,7 @@ import { a as logoutWeb, i as logWebSelfId, l as readWebSelfId, p as webAuthExis
 import { t as normalizeChatType } from "./chat-type-DFDuk3FY.js";
 import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i as createSlackWebClient, l as parseSlackTarget, o as parseSlackBlocksInput, s as validateSlackBlocksArray, t as sendMessageSlack, u as resolveSlackChannelId } from "./send-D-hWrHoH.js";
 import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as resolveTimestampMs, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as resolveDiscordSystemLocation, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordShouldRequireMention, a as removeReactionDiscord, at as resolveDiscordChannelId, b as sendWebhookMessageDiscord, bt as formatDiscordReactionEmoji, c as formatDiscordComponentEventText, ct as allowListMatches$1, d as parseDiscordModalCustomId, dt as normalizeDiscordSlug, et as hasAnyGuildPermissionDiscord, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordAllowListMatch, g as sendMessageDiscord, gt as resolveDiscordOwnerAllowFrom, h as resolveDiscordModalEntry, ht as resolveDiscordMemberAccessState, i as removeOwnReactionsDiscord, it as parseDiscordTarget, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as isDiscordGroupAllowedByPolicy, m as resolveDiscordComponentEntry, mt as resolveDiscordGuildEntry, n as fetchReactionsDiscord, nt as createDiscordClient, o as sendDiscordComponentMessage, ot as listDiscordDirectoryGroupsLive, p as readDiscordComponentSpec, pt as resolveDiscordChannelConfigWithFallback, q as deleteChannelDiscord, r as reactMessageDiscord, rt as createDiscordRestClient, s as createDiscordFormModal, st as listDiscordDirectoryPeersLive, tt as chunkDiscordTextWithMode, u as parseDiscordComponentCustomIdForCarbon, ut as normalizeDiscordAllowList, v as sendStickerDiscord, vt as resolveGroupDmAllow, w as fetchMessageDiscord, wt as fetchDiscord, x as createThreadDiscord, xt as formatDiscordUserTag, y as sendVoiceMessageDiscord, yt as shouldEmitDiscordReactionNotification, z as listGuildChannelsDiscord } from "./send-C1IYd3g7.js";
-import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-C-37cZUe.js";
+import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-BH0l3UKW.js";
 import { a as logMessageProcessed, c as logWebhookError, d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, i as logLaneEnqueue, l as logWebhookProcessed, m as isDiagnosticsEnabled, o as logMessageQueued, p as emitDiagnosticEvent, r as logLaneDequeue, s as logSessionStateChange, t as diag, u as logWebhookReceived } from "./diagnostic-D0xmLpej.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-C1vRJs5w.js";
 import { n as resolveSignalAccount, t as listEnabledSignalAccounts } from "./accounts-8zZqL37v.js";
@@ -22,10 +22,10 @@ import { $ as isVoiceCompatibleAudio, A as extractTelegramLocation, B as normali
 import { d as detectMime, f as extensionForMime, g as isGifMedia, h as isAudioFileName, i as getImageMetadata, m as imageMimeFromFormat, s as resizeToJpeg, x as mediaKindFromMime, y as MAX_IMAGE_BYTES } from "./image-ops-ByaQt43P.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-j5tVLINv.js";
 import { a as isMarkdownCapableMessageChannel, c as resolveGatewayMessageChannel, d as GATEWAY_CLIENT_MODES, f as GATEWAY_CLIENT_NAMES, i as isInternalMessageChannel, l as resolveMessageChannel, n as isDeliverableMessageChannel, o as listDeliverableMessageChannels, r as isGatewayMessageChannel, s as normalizeMessageChannel, t as INTERNAL_MESSAGE_CHANNEL, u as GATEWAY_CLIENT_IDS } from "./message-channel-BQINJQIT.js";
-import { $ as mergeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as updateSessionStoreEntry, Jt as ensureSessionHeader, K as updateLastRoute, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as deliveryContextKey, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as resolveCacheTtlMs$1, Xt as resolveBootstrapTotalMaxChars, Y as isCacheEnabled, Yt as resolveBootstrapMaxChars, Z as deliveryContextFromSession, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as DEFAULT_RESET_TRIGGERS, a as isMessagingToolDuplicateNormalized, at as countToolResults, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as applyInputProvenanceToUserMessage, d as isAntigravityClaude, dt as resolveSessionKey, et as normalizeDeliveryContext, f as isGoogleModelApi, ft as evaluateSessionFreshness, g as formatBillingErrorMessage, gt as resolveThreadFlag, h as formatAssistantErrorText, ht as resolveSessionResetType, it as capArrayByJsonBytes, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as hasInterSessionUserProvenance, m as classifyFailoverReason, mt as resolveSessionResetPolicy, n as validateGeminiTurns, nt as normalizeAccountId$3, o as normalizeTextForComparison, ot as extractToolCallNames, p as BILLING_ERROR_USER_MESSAGE, pt as resolveChannelResetConfig, q as updateSessionStore, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as archiveSessionTranscripts, s as sanitizeSessionMessagesImages, st as INPUT_PROVENANCE_KIND_VALUES, t as validateAnthropicTurns, tt as normalizeSessionDeliveryFields, u as downgradeOpenAIReasoningBlocks, ut as normalizeInputProvenance, v as getApiErrorPayloadFingerprint, vt as resolveFreshSessionTotalTokens, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, yt as canonicalizeMainSessionAlias, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-B8kqLWns.js";
+import { $ as mergeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as updateSessionStoreEntry, Jt as ensureSessionHeader, K as updateLastRoute, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as deliveryContextKey, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as resolveCacheTtlMs$1, Xt as resolveBootstrapTotalMaxChars, Y as isCacheEnabled, Yt as resolveBootstrapMaxChars, Z as deliveryContextFromSession, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as DEFAULT_RESET_TRIGGERS, a as isMessagingToolDuplicateNormalized, at as countToolResults, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as applyInputProvenanceToUserMessage, d as isAntigravityClaude, dt as resolveSessionKey, et as normalizeDeliveryContext, f as isGoogleModelApi, ft as evaluateSessionFreshness, g as formatBillingErrorMessage, gt as resolveThreadFlag, h as formatAssistantErrorText, ht as resolveSessionResetType, it as capArrayByJsonBytes, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as hasInterSessionUserProvenance, m as classifyFailoverReason, mt as resolveSessionResetPolicy, n as validateGeminiTurns, nt as normalizeAccountId$3, o as normalizeTextForComparison, ot as extractToolCallNames, p as BILLING_ERROR_USER_MESSAGE, pt as resolveChannelResetConfig, q as updateSessionStore, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as archiveSessionTranscripts, s as sanitizeSessionMessagesImages, st as INPUT_PROVENANCE_KIND_VALUES, t as validateAnthropicTurns, tt as normalizeSessionDeliveryFields, u as downgradeOpenAIReasoningBlocks, ut as normalizeInputProvenance, v as getApiErrorPayloadFingerprint, vt as resolveFreshSessionTotalTokens, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, yt as canonicalizeMainSessionAlias, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-lgx_U5KS.js";
 import { A as VERSION, C as getConfigValueAtPath, D as isSafeExecutableValue, E as unsetConfigValueAtPath, O as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, S as unsetConfigOverride, T as setConfigValueAtPath, _ as parseDurationMs, a as writeConfigFile, b as resetConfigOverrides, c as TELEGRAM_COMMAND_NAME_PATTERN, f as isInboundPathAllowed, g as normalizeScpRemoteHost, h as resolveIMessageRemoteAttachmentRoots, i as resolveConfigSnapshotHash, k as resolveAgentMaxConcurrent, l as normalizeTelegramCommandName, m as resolveIMessageAttachmentRoots, n as loadConfig, o as validateConfigObjectWithPlugins, r as readConfigFileSnapshot, u as resolveTelegramCustomCommands, v as validateJsonSchemaValue, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-BmV60pPT.js";
 import { c as normalizePluginsConfig, f as isPathInsideWithRealpath, i as safeStatSync, l as resolveEnableState, n as discoverSymiPlugins, p as isDangerousHostEnvVarName, r as isPathInside, s as applyTestPluginDefaults, t as loadPluginManifestRegistry, u as resolveMemorySlotDecision } from "./manifest-registry-D-mTF1cj.js";
-import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-D2SKJnR7.js";
+import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-CDJYxX5a.js";
 import { c as assertSandboxPath, d as resolveSandboxedMediaSource, f as applySkillEnvOverrides, i as resolveSkillsPromptForRun, l as resolveSandboxInputPath, n as buildWorkspaceSkillSnapshot, p as applySkillEnvOverridesFromSnapshot, r as loadWorkspaceSkillEntries, s as assertMediaNotDataUrl } from "./skills-BNpGMnp-.js";
 import { n as formatErrorMessage, r as formatUncaughtError } from "./errors-CPfngF0S.js";
 import { i as isBlockedHostnameOrIp, o as normalizeHostname, t as SsrFBlockedError } from "./ssrf-CxfFyMRZ.js";
@@ -36,7 +36,7 @@ import { t as resolveIMessageAccount } from "./accounts-DImOt9jX.js";
 import { i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as resolveSessionTranscriptsDirForAgent, r as resolveSessionFilePathOptions, s as resolveStorePath, t as resolveDefaultSessionStorePath } from "./paths-DkMamAQ-.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-C8Tqw4td.js";
 import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-ChC2CXaN.js";
-import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-DcpMiprB.js";
+import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-CHzdaNJ4.js";
 import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-jpn5vRTY.js";
 import { d as listMemoryFiles, f as normalizeExtraMemoryPaths, g as runTasksWithConcurrency } from "./sqlite-BNh23mUR.js";
 import { n as retryAsync } from "./retry-QGp0jvVi.js";
@@ -49,7 +49,7 @@ import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-F0moAwIl.js";
 import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-C_aYUwpl.js";
 import { c as getSkillsSnapshotVersion, d as createAsyncLock, f as readJsonFile, i as resolveSkillCommandInvocation, l as pruneExpiredPending, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, p as writeJsonAtomic, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as resolvePairingPaths } from "./skill-commands-DklY7Cj7.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-QOi5vzUt.js";
-import { _ as resolveMediaUnderstandingScope, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as normalizeMediaUnderstandingChatType, h as resolveTimeoutMs$1, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveConcurrency, n as createMediaAttachmentCache, o as runCapability, p as registerUnhandledRejectionHandler, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as CLI_OUTPUT_MAX_BUFFER, y as applyTemplate } from "./runner-BcQ0sF9T.js";
+import { _ as resolveMediaUnderstandingScope, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as normalizeMediaUnderstandingChatType, h as resolveTimeoutMs$1, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveConcurrency, n as createMediaAttachmentCache, o as runCapability, p as registerUnhandledRejectionHandler, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as CLI_OUTPUT_MAX_BUFFER, y as applyTemplate } from "./runner-DUBExAb5.js";
 import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-DtLn7YU3.js";
 import { n as recordCommandPoll, r as resetCommandPollCount } from "./command-poll-backoff-DtXYsHEc.js";
 import { n as recordChannelActivity, r as createDiscordRetryRunner, t as getChannelActivity } from "./channel-activity-D9q-fIPB.js";
@@ -79,7 +79,7 @@ import { EdgeTTS } from "node-edge-tts";
 import AjvPkg from "ajv";
 import { createServer } from "node:http";
 import { ProxyAgent, fetch as fetch$1 } from "undici";
-import WebSocket, { WebSocket as WebSocket$1 } from "ws";
+import WebSocket$1, { WebSocket } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { createJiti } from "jiti";
 import { Type } from "@sinclair/typebox";
@@ -5714,7 +5714,7 @@ var GatewayClient = class {
 				if (fingerprint !== expected) return /* @__PURE__ */ new Error("gateway tls fingerprint mismatch");
 			});
 		}
-		this.ws = new WebSocket$1(url, wsOptions);
+		this.ws = new WebSocket(url, wsOptions);
 		this.ws.on("open", () => {
 			if (url.startsWith("wss://") && this.opts.tlsFingerprint) {
 				const tlsError = this.validateTlsFingerprint();
@@ -5933,7 +5933,7 @@ var GatewayClient = class {
 		return null;
 	}
 	async request(method, params, opts) {
-		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error("gateway not connected");
+		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error("gateway not connected");
 		const id = randomUUID();
 		const frame = {
 			type: "req",
@@ -7199,7 +7199,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-C-37cZUe.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BH0l3UKW.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -41673,7 +41673,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-C-37cZUe.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BH0l3UKW.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -45119,7 +45119,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-DcpMiprB.js").then((n) => n.n);
+		const { describeImageWithModel } = await import("./image-CHzdaNJ4.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -47781,7 +47781,7 @@ async function preflightDiscordMessage(params) {
 	let preflightTranscript;
 	const hasAudioAttachment = message.attachments?.some((att) => att.contentType?.startsWith("audio/"));
 	if (!isDirectMessage && shouldRequireMention && hasAudioAttachment && !baseText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-CPBOQV4I.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-C40mKAp7.js");
 		const audioPaths = message.attachments?.filter((att) => att.contentType?.startsWith("audio/")).map((att) => att.url) ?? [];
 		if (audioPaths.length > 0) preflightTranscript = await transcribeFirstAudio({
 			ctx: {
@@ -55580,6 +55580,109 @@ function guardSessionManager(sessionManager, opts) {
 	return sessionManager;
 }
 
+//#endregion
+//#region src/agents/session-version.ts
+/**
+* Session Versioning — version-based session migration.
+*
+* Each session gets a `symiVersion` field in its JSONL header.
+* On session load, if the session was created by a known-poison version
+* (2.3.0-2.3.4), it's archived and a fresh session starts.
+*
+* Sessions without `symiVersion` predate 2.3.0 and were created with Claude,
+* which does not produce corrupted tool args or looping output.  Do NOT
+* archive unversioned sessions — they are safe.  Only sessions with an
+* explicit symiVersion in the known-poison range are archived.
+*
+* @module
+*/
+/** Versions that produced corrupted sessions (tool arg garbage, looping). */
+const POISON_VERSION_MIN = [
+	2,
+	3,
+	0
+];
+const POISON_VERSION_MAX = [
+	2,
+	3,
+	4
+];
+function parseVersion(v) {
+	return v.split(".").map((s) => parseInt(s, 10)).filter((n) => !Number.isNaN(n));
+}
+function compareVersions(a, b) {
+	for (let i = 0; i < Math.max(a.length, b.length); i++) {
+		const av = a[i] ?? 0;
+		const bv = b[i] ?? 0;
+		if (av < bv) return -1;
+		if (av > bv) return 1;
+	}
+	return 0;
+}
+function isInPoisonRange(version) {
+	const v = parseVersion(version);
+	if (v.length < 3) return false;
+	return compareVersions(v, POISON_VERSION_MIN) >= 0 && compareVersions(v, POISON_VERSION_MAX) <= 0;
+}
+/**
+* Check if a session file was created by a poisoned Symi version.
+* Returns the symiVersion if poisoned, null if safe.
+*/
+async function checkSessionPoison(sessionFile) {
+	try {
+		const firstLine = (await fs$1.readFile(sessionFile, "utf-8")).split("\n")[0];
+		if (!firstLine) return null;
+		const header = JSON.parse(firstLine);
+		if (header.type !== "session") return null;
+		const symiVersion = header.symiVersion;
+		if (typeof symiVersion !== "string") return null;
+		if (isInPoisonRange(symiVersion)) return symiVersion;
+		return null;
+	} catch {
+		return null;
+	}
+}
+/**
+* Archive a poisoned session file by renaming it.
+* The archived file can be inspected later but won't be loaded.
+*/
+async function archivePoisonedSession(sessionFile) {
+	const archiveName = `${sessionFile}.archived-poison.${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
+	await fs$1.rename(sessionFile, archiveName);
+	return archiveName;
+}
+/**
+* Stamp the current Symi version into a session file's header.
+* Reads the first line, adds/updates symiVersion, rewrites the line.
+*/
+async function stampSessionVersion(sessionFile) {
+	try {
+		const lines = (await fs$1.readFile(sessionFile, "utf-8")).split("\n");
+		if (lines.length === 0) return;
+		const header = JSON.parse(lines[0]);
+		if (header.type !== "session") return;
+		if (header.symiVersion === VERSION) return;
+		header.symiVersion = VERSION;
+		lines[0] = JSON.stringify(header);
+		await fs$1.writeFile(sessionFile, lines.join("\n"), "utf-8");
+	} catch {}
+}
+/**
+* Check and handle a session file before use.
+* If poisoned: archive it and return { archived: true }.
+* Otherwise: stamp the current version and return { archived: false }.
+*/
+async function handleSessionVersion(sessionFile) {
+	const poison = await checkSessionPoison(sessionFile);
+	if (poison) return {
+		archived: true,
+		archivePath: await archivePoisonedSession(sessionFile),
+		poisonVersion: poison
+	};
+	await stampSessionVersion(sessionFile);
+	return { archived: false };
+}
+
 //#endregion
 //#region src/agents/stream-monitor.ts
 /**
@@ -58528,6 +58631,8 @@ async function runEmbeddedAttempt(params) {
 				provider: params.provider,
 				modelId: params.modelId
 			});
+			const versionCheck = await handleSessionVersion(params.sessionFile);
+			if (versionCheck.archived) log$4.warn(`session archived: created by ${versionCheck.poisonVersion}, known corruption range → ${versionCheck.archivePath}`);
 			await prewarmSessionFile(params.sessionFile);
 			sessionManager = guardSessionManager(SessionManager.open(params.sessionFile), {
 				agentId: sessionAgentId,
@@ -60199,7 +60304,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-B9ciy43q.js");
+			const { sendMessageWhatsApp } = await import("./web-DFqKskm8.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -63104,7 +63209,7 @@ function createDiscordGatewayPlugin(params) {
 				super(options);
 			}
 			createWebSocket(url) {
-				return new WebSocket(url, { agent });
+				return new WebSocket$1(url, { agent });
 			}
 		}
 		return new ProxyGatewayPlugin();
@@ -73322,7 +73427,7 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	const hasAudio = allMedia.some((media) => media.contentType?.startsWith("audio/"));
 	let preflightTranscript;
 	if (isGroup && requireMention && hasAudio && !hasUserText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-CPBOQV4I.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-C40mKAp7.js");
 		preflightTranscript = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: allMedia.length > 0 ? allMedia.map((m) => m.path) : void 0,
@@ -75479,7 +75584,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-B9ciy43q.js");
+	webChannelPromise ??= import("./web-DFqKskm8.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{pi-embedded-helpers-B8kqLWns.js → pi-embedded-helpers-lgx_U5KS.js}

@@ -10,7 +10,7 @@ import { t as normalizeChatType } from "./chat-type-DFDuk3FY.js";
 import { c as SafeOpenError, i as getImageMetadata, l as openFileWithinRoot, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS } from "./image-ops-ByaQt43P.js";
 import { o as listDeliverableMessageChannels, s as normalizeMessageChannel } from "./message-channel-BQINJQIT.js";
 import { _ as parseDurationMs, a as writeConfigFile, n as loadConfig, s as parseByteSize, t as createConfigIO } from "./config-BmV60pPT.js";
-import { A as DEFAULT_BROWSER_EVALUATE_ENABLED, D as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, E as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, M as DEFAULT_SYMI_BROWSER_ENABLED, N as DEFAULT_SYMI_BROWSER_PROFILE_NAME, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, S as stopChromeExtensionRelayServer, _ as fetchJson, a as resolveSymiUserDataDir, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, g as appendCdpPath, h as withBrowserNavigationPolicy, i as launchSymiChrome, j as DEFAULT_SYMI_BROWSER_COLOR, k as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, l as createTargetViaCdp, m as assertBrowserNavigationAllowed, n as isChromeCdpReady, o as stopSymiChrome, p as InvalidBrowserNavigationUrlError, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as fetchOk, w as isLoopbackHost, x as ensureChromeExtensionRelayServer } from "./chrome-D2SKJnR7.js";
+import { A as DEFAULT_BROWSER_EVALUATE_ENABLED, D as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, E as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, M as DEFAULT_SYMI_BROWSER_ENABLED, N as DEFAULT_SYMI_BROWSER_PROFILE_NAME, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, S as stopChromeExtensionRelayServer, _ as fetchJson, a as resolveSymiUserDataDir, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, g as appendCdpPath, h as withBrowserNavigationPolicy, i as launchSymiChrome, j as DEFAULT_SYMI_BROWSER_COLOR, k as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, l as createTargetViaCdp, m as assertBrowserNavigationAllowed, n as isChromeCdpReady, o as stopSymiChrome, p as InvalidBrowserNavigationUrlError, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as fetchOk, w as isLoopbackHost, x as ensureChromeExtensionRelayServer } from "./chrome-CDJYxX5a.js";
 import { a as syncSkillsToWorkspace, l as resolveSandboxInputPath, m as sanitizeEnvVars, u as resolveSandboxPath } from "./skills-BNpGMnp-.js";
 import { n as formatErrorMessage, t as extractErrorCode } from "./errors-CPfngF0S.js";
 import { t as SsrFBlockedError } from "./ssrf-CxfFyMRZ.js";
@@ -931,7 +931,7 @@ function isModuleNotFoundError(err) {
 }
 async function loadPwAiModule(mode) {
 	try {
-		return await import("./pw-ai-1htA-NnS.js");
+		return await import("./pw-ai-De-KR9_s.js");
 	} catch (err) {
 		if (mode === "soft") return null;
 		if (isModuleNotFoundError(err)) return null;
@@ -3471,11 +3471,11 @@ function createProfileContext(opts, profile) {
 		const userDataDir = resolveSymiUserDataDir(profile.name);
 		const profileState = getProfileState();
 		if (await isHttpReachable(300) && !profileState.running) try {
-			await (await import("./pw-ai-1htA-NnS.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-De-KR9_s.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (profileState.running) await stopRunningBrowser();
 		try {
-			await (await import("./pw-ai-1htA-NnS.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-De-KR9_s.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (!fs.existsSync(userDataDir)) return {
 			moved: false,

package/dist/{plugin-registry-dNrBrnR0.js → plugin-registry-BfqJjw6d.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { ft as loadSymiPlugins } from "./reply-DiFKjgpz.js";
+import { ft as loadSymiPlugins } from "./reply-kuehpmXb.js";
 import { d as getActivePluginRegistry } from "./registry-Cja8eT7G.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-CgUHAtCo.js";

package/dist/{plugin-registry-ByLEBcK_.js → plugin-registry-CL--iTFl.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { M as getActivePluginRegistry, o as createSubsystemLogger } from "./entry.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-D-jRCY0d.js";
 import { i as loadConfig } from "./config-DHBLS1Hl.js";
-import { m as loadSymiPlugins } from "./subagent-registry-yBrXpTO-.js";
+import { m as loadSymiPlugins } from "./subagent-registry-BxM7J5m6.js";
 
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/plugin-sdk/{accounts-BtaOa4z_.js → accounts-BToL3HlP.js}

@@ -1,5 +1,5 @@
 import { p as normalizeAccountId } from "./session-key-C_0eELjb.js";
-import { _ as createAccountListHelpers } from "./accounts-Ddm33hQm.js";
+import { _ as createAccountListHelpers } from "./accounts-D9zGZU5t.js";
 
 //#region src/signal/accounts.ts
 const { listAccountIds, resolveDefaultAccountId } = createAccountListHelpers("signal");

package/dist/plugin-sdk/{accounts-Ddm33hQm.js → accounts-D9zGZU5t.js}

@@ -1,8 +1,8 @@
 import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-C_0eELjb.js";
 import { a as resolveOAuthDir } from "./paths-DR2yt_mP.js";
-import { P as resolveUserPath, W as info, X as success, k as jidToE164, tt as getChildLogger } from "./registry-D0xTnUWt.js";
-import { i as defaultRuntime } from "./subsystem-B2uDN3TV.js";
-import { t as formatCliCommand } from "./command-format-GKSevep4.js";
+import { P as resolveUserPath, W as info, X as success, k as jidToE164, tt as getChildLogger } from "./registry--_pGht6S.js";
+import { i as defaultRuntime } from "./subsystem-Coz2AgU8.js";
+import { t as formatCliCommand } from "./command-format-DSdvQ_M5.js";
 import fs from "node:fs";
 import path from "node:path";
 import fs$1 from "node:fs/promises";

package/dist/plugin-sdk/{accounts-s-AdhXVR.js → accounts-Dtszw3Zn.js}

@@ -1,5 +1,5 @@
 import { p as normalizeAccountId } from "./session-key-C_0eELjb.js";
-import { _ as createAccountListHelpers } from "./accounts-Ddm33hQm.js";
+import { _ as createAccountListHelpers } from "./accounts-D9zGZU5t.js";
 
 //#region src/imessage/accounts.ts
 const { listAccountIds, resolveDefaultAccountId } = createAccountListHelpers("imessage");

package/dist/plugin-sdk/{active-listener-BXYeALs0.js → active-listener-bEk__wbB.js}

@@ -1,5 +1,5 @@
 import { f as DEFAULT_ACCOUNT_ID } from "./session-key-C_0eELjb.js";
-import { t as formatCliCommand } from "./command-format-GKSevep4.js";
+import { t as formatCliCommand } from "./command-format-DSdvQ_M5.js";
 
 //#region src/web/active-listener.ts
 const listeners = /* @__PURE__ */ new Map();

package/dist/plugin-sdk/{agent-scope-CYYpcO9W.js → agent-scope-C3gMMKCU.js}

@@ -1,7 +1,7 @@
 import { _ as isCronSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, v as isSubagentSessionKey, y as parseAgentSessionKey } from "./session-key-C_0eELjb.js";
 import { s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-DR2yt_mP.js";
-import { P as resolveUserPath, U as danger, W as info, Y as shouldLogVerbose, Z as warn, j as pathExists, nt as getLogger, q as logVerboseConsole } from "./registry-D0xTnUWt.js";
-import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-B2uDN3TV.js";
+import { P as resolveUserPath, U as danger, W as info, Y as shouldLogVerbose, Z as warn, j as pathExists, nt as getLogger, q as logVerboseConsole } from "./registry--_pGht6S.js";
+import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-Coz2AgU8.js";
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";

package/dist/plugin-sdk/agents/session-version.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Session Versioning — version-based session migration.
+ *
+ * Each session gets a `symiVersion` field in its JSONL header.
+ * On session load, if the session was created by a known-poison version
+ * (2.3.0-2.3.4), it's archived and a fresh session starts.
+ *
+ * Sessions without `symiVersion` predate 2.3.0 and were created with Claude,
+ * which does not produce corrupted tool args or looping output.  Do NOT
+ * archive unversioned sessions — they are safe.  Only sessions with an
+ * explicit symiVersion in the known-poison range are archived.
+ *
+ * @module
+ */
+declare function parseVersion(v: string): number[];
+declare function compareVersions(a: number[], b: number[]): number;
+declare function isInPoisonRange(version: string): boolean;
+/**
+ * Check if a session file was created by a poisoned Symi version.
+ * Returns the symiVersion if poisoned, null if safe.
+ */
+export declare function checkSessionPoison(sessionFile: string): Promise<string | null>;
+/**
+ * Archive a poisoned session file by renaming it.
+ * The archived file can be inspected later but won't be loaded.
+ */
+export declare function archivePoisonedSession(sessionFile: string): Promise<string>;
+/**
+ * Stamp the current Symi version into a session file's header.
+ * Reads the first line, adds/updates symiVersion, rewrites the line.
+ */
+export declare function stampSessionVersion(sessionFile: string): Promise<void>;
+/**
+ * Check and handle a session file before use.
+ * If poisoned: archive it and return { archived: true }.
+ * Otherwise: stamp the current version and return { archived: false }.
+ */
+export declare function handleSessionVersion(sessionFile: string): Promise<{
+    archived: boolean;
+    archivePath?: string;
+    poisonVersion?: string;
+}>;
+export declare const __testing: {
+    isInPoisonRange: typeof isInPoisonRange;
+    parseVersion: typeof parseVersion;
+    compareVersions: typeof compareVersions;
+};
+export {};

package/dist/plugin-sdk/{api-key-rotation-D_sMvI5W.js → api-key-rotation-CVBMpnPc.js}

@@ -1,4 +1,4 @@
-import { c as normalizeProviderId } from "./model-selection-CsbEfrS0.js";
+import { c as normalizeProviderId } from "./model-selection-OpU8HN50.js";
 import { n as formatErrorMessage } from "./errors-Bv8oZiTO.js";
 
 //#region src/infra/gemini-auth.ts

package/dist/plugin-sdk/{audio-preflight-VpItkiy3.js → audio-preflight-DoQQKlxa.js}

@@ -1,34 +1,34 @@
-import "./accounts-Ddm33hQm.js";
+import "./accounts-D9zGZU5t.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
-import "./plugins-BNByVCIH.js";
-import { K as logVerbose, Y as shouldLogVerbose } from "./registry-D0xTnUWt.js";
-import "./config-KlTNfkFF.js";
-import "./subsystem-B2uDN3TV.js";
-import "./command-format-GKSevep4.js";
-import "./model-selection-CsbEfrS0.js";
-import "./agent-scope-CYYpcO9W.js";
-import "./manifest-registry-CPnHl_K3.js";
+import "./plugins-BbAvhC25.js";
+import { K as logVerbose, Y as shouldLogVerbose } from "./registry--_pGht6S.js";
+import "./config-DDkdiUOR.js";
+import "./subsystem-Coz2AgU8.js";
+import "./command-format-DSdvQ_M5.js";
+import "./model-selection-OpU8HN50.js";
+import "./agent-scope-C3gMMKCU.js";
+import "./manifest-registry-B3ugY9-f.js";
 import "./redact-DPnDWsnT.js";
 import "./errors-Bv8oZiTO.js";
-import "./image-ops-BlQR__MN.js";
+import "./image-ops-Bnp6LXEx.js";
 import "./ssrf-DKZ8eBrk.js";
-import "./local-roots-BHLNSI8U.js";
-import "./message-channel-COTAJzHd.js";
-import "./bindings-C7hRtgYW.js";
-import "./tool-images-HJ2sfZDV.js";
-import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-CGBT7tgF.js";
-import "./skills-_yTP47Cd.js";
-import "./chrome-B7RdxmJ0.js";
-import "./thinking-CXqf7WTe.js";
-import "./accounts-s-AdhXVR.js";
-import "./accounts-BtaOa4z_.js";
-import "./pi-embedded-helpers-CW630epe.js";
+import "./local-roots-Ckk1QfzI.js";
+import "./message-channel-BdI5Ra9S.js";
+import "./bindings-BbwoUGPx.js";
+import "./tool-images-D7Lno-TE.js";
+import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-BVqnEfNe.js";
+import "./skills-B1GeRYlu.js";
+import "./chrome-C7c_0I5M.js";
+import "./thinking-DCNUIAHY.js";
+import "./accounts-Dtszw3Zn.js";
+import "./accounts-BToL3HlP.js";
+import "./pi-embedded-helpers-BveUP4hk.js";
 import "./paths-A0xdf3yk.js";
-import "./store-BdrNabcU.js";
-import "./image-CLOPx7yW.js";
+import "./store-Do3t33-c.js";
+import "./image-BOYy0Ump.js";
 import "./pi-model-discovery-LbcEa65a.js";
-import "./api-key-rotation-D_sMvI5W.js";
+import "./api-key-rotation-CVBMpnPc.js";
 
 //#region src/media-understanding/audio-preflight.ts
 /**