@symerian/symi 2.6.0 → 2.6.1

package/dist/{tool-loop-detection-D0kUzUGu.js → tool-loop-detection-DR_rrIA1.js}

@@ -9,6 +9,8 @@ const TOOL_CALL_HISTORY_SIZE = 30;
 const WARNING_THRESHOLD = 10;
 const CRITICAL_THRESHOLD = 20;
 const GLOBAL_CIRCUIT_BREAKER_THRESHOLD = 30;
+const CONSECUTIVE_FAILURE_WARNING_THRESHOLD = 3;
+const CONSECUTIVE_FAILURE_CRITICAL_THRESHOLD = 5;
 const DEFAULT_LOOP_DETECTION_CONFIG = {
 	enabled: false,
 	historySize: TOOL_CALL_HISTORY_SIZE,
@@ -18,8 +20,11 @@ const DEFAULT_LOOP_DETECTION_CONFIG = {
 	detectors: {
 		genericRepeat: true,
 		knownPollNoProgress: true,
-		pingPong: true
-	}
+		pingPong: true,
+		consecutiveFailure: true
+	},
+	consecutiveFailureWarningThreshold: CONSECUTIVE_FAILURE_WARNING_THRESHOLD,
+	consecutiveFailureCriticalThreshold: CONSECUTIVE_FAILURE_CRITICAL_THRESHOLD
 };
 function asPositiveInt(value, fallback) {
 	if (typeof value !== "number" || !Number.isInteger(value) || value <= 0) return fallback;
@@ -37,10 +42,13 @@ function resolveLoopDetectionConfig(config) {
 		warningThreshold,
 		criticalThreshold,
 		globalCircuitBreakerThreshold,
+		consecutiveFailureWarningThreshold: asPositiveInt(config?.consecutiveFailureWarningThreshold, DEFAULT_LOOP_DETECTION_CONFIG.consecutiveFailureWarningThreshold),
+		consecutiveFailureCriticalThreshold: asPositiveInt(config?.consecutiveFailureCriticalThreshold, DEFAULT_LOOP_DETECTION_CONFIG.consecutiveFailureCriticalThreshold),
 		detectors: {
 			genericRepeat: config?.detectors?.genericRepeat ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.genericRepeat,
 			knownPollNoProgress: config?.detectors?.knownPollNoProgress ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.knownPollNoProgress,
-			pingPong: config?.detectors?.pingPong ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.pingPong
+			pingPong: config?.detectors?.pingPong ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.pingPong,
+			consecutiveFailure: (config?.detectors)?.consecutiveFailure ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.consecutiveFailure
 		}
 	};
 }
@@ -218,6 +226,22 @@ function canonicalPairKey(signatureA, signatureB) {
 	return [signatureA, signatureB].toSorted().join("|");
 }
 /**
+* Count consecutive error results for a specific tool, walking backward from
+* the most recent call. A success or a call to a different tool resets the streak.
+* Only counts entries that have been resolved (have a resultHash or isError flag).
+*/
+function getConsecutiveFailureStreak(history, toolName) {
+	let count = 0;
+	for (let i = history.length - 1; i >= 0; i--) {
+		const entry = history[i];
+		if (entry.toolName !== toolName) break;
+		if (entry.resultHash === void 0 && entry.isError === void 0) break;
+		if (!entry.isError) break;
+		count++;
+	}
+	return count;
+}
+/**
 * Detect if an agent is stuck in a repetitive tool call loop.
 * Checks if the same tool+params combination has been called excessively.
 */
@@ -230,6 +254,31 @@ function detectToolCallLoop(state, toolName, params, config) {
 	const noProgressStreak = noProgress.count;
 	const knownPollTool = isKnownPollToolCall(toolName, params);
 	const pingPong = getPingPongStreak(history, currentHash);
+	if (resolvedConfig.detectors.consecutiveFailure) {
+		const failureStreak = getConsecutiveFailureStreak(history, toolName);
+		if (failureStreak >= resolvedConfig.consecutiveFailureCriticalThreshold) {
+			log.error(`Consecutive failure circuit breaker: ${toolName} failed ${failureStreak} times in a row`);
+			return {
+				stuck: true,
+				level: "critical",
+				detector: "consecutive_failure",
+				count: failureStreak,
+				message: `CRITICAL: ${toolName} has failed ${failureStreak} consecutive times. Stop calling this tool. Explain to the user what you were trying to do and why it failed.`,
+				warningKey: `consecutive-failure:${toolName}`
+			};
+		}
+		if (failureStreak >= resolvedConfig.consecutiveFailureWarningThreshold) {
+			log.warn(`Consecutive failure warning: ${toolName} failed ${failureStreak} times in a row`);
+			return {
+				stuck: true,
+				level: "warning",
+				detector: "consecutive_failure",
+				count: failureStreak,
+				message: `WARNING: You have failed to call ${toolName} ${failureStreak} times consecutively. Stop retrying and explain to the user what you were trying to do. The tool arguments may contain invalid syntax from model control tokens.`,
+				warningKey: `consecutive-failure:${toolName}`
+			};
+		}
+	}
 	if (noProgressStreak >= resolvedConfig.globalCircuitBreakerThreshold) {
 		log.error(`Global circuit breaker triggered: ${toolName} repeated ${noProgressStreak} times with no progress`);
 		return {
@@ -334,6 +383,7 @@ function recordToolCallOutcome(state, params) {
 		if (call.toolName !== params.toolName || call.argsHash !== argsHash) continue;
 		if (call.resultHash !== void 0) continue;
 		call.resultHash = resultHash;
+		call.isError = params.error !== void 0;
 		matched = true;
 		break;
 	}

package/dist/{unified-runner-CkJLTsTK.js → unified-runner-CulJZMxc.js}

@@ -10,10 +10,10 @@ import { $ as resolveSymiAgentDir, B as resolveApiKeyForProvider, C as normalize
 import { n as formatCliCommand, r as resolveCliName, t as isTruthyEnvValue } from "./env-BDXYbTKj.js";
 import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-cCYzSU9h.js";
 import { t as parseBooleanValue$1 } from "./boolean-CE7i9tBR.js";
-import { $ as normalizeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, G as updateLastRoute, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as isCacheEnabled, Jt as ensureSessionHeader, K as updateSessionStore, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as mergeDeliveryContext, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as deliveryContextFromSession, Xt as resolveBootstrapTotalMaxChars, Y as resolveCacheTtlMs$1, Yt as resolveBootstrapMaxChars, Z as deliveryContextKey, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as resolveFreshSessionTotalTokens, a as isMessagingToolDuplicateNormalized, at as extractToolCallNames, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as hasInterSessionUserProvenance, d as isAntigravityClaude, dt as evaluateSessionFreshness, et as normalizeSessionDeliveryFields, f as isGoogleModelApi, ft as resolveChannelResetConfig, g as formatBillingErrorMessage, gt as DEFAULT_RESET_TRIGGERS, h as formatAssistantErrorText, ht as resolveThreadFlag, it as countToolResults, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as normalizeInputProvenance, m as classifyFailoverReason, mt as resolveSessionResetType, n as validateGeminiTurns, nt as archiveSessionTranscripts, o as normalizeTextForComparison, ot as INPUT_PROVENANCE_KIND_VALUES, p as BILLING_ERROR_USER_MESSAGE, pt as resolveSessionResetPolicy, q as updateSessionStoreEntry, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as capArrayByJsonBytes, s as sanitizeSessionMessagesImages, st as applyInputProvenanceToUserMessage, t as validateAnthropicTurns, tt as normalizeAccountId$3, u as downgradeOpenAIReasoningBlocks, ut as resolveSessionKey, v as getApiErrorPayloadFingerprint, vt as canonicalizeMainSessionAlias, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-pubKo8HQ.js";
+import { $ as normalizeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, G as updateLastRoute, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as isCacheEnabled, Jt as ensureSessionHeader, K as updateSessionStore, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as mergeDeliveryContext, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as deliveryContextFromSession, Xt as resolveBootstrapTotalMaxChars, Y as resolveCacheTtlMs$1, Yt as resolveBootstrapMaxChars, Z as deliveryContextKey, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as resolveFreshSessionTotalTokens, a as isMessagingToolDuplicateNormalized, at as extractToolCallNames, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as hasInterSessionUserProvenance, d as isAntigravityClaude, dt as evaluateSessionFreshness, et as normalizeSessionDeliveryFields, f as isGoogleModelApi, ft as resolveChannelResetConfig, g as formatBillingErrorMessage, gt as DEFAULT_RESET_TRIGGERS, h as formatAssistantErrorText, ht as resolveThreadFlag, it as countToolResults, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as normalizeInputProvenance, m as classifyFailoverReason, mt as resolveSessionResetType, n as validateGeminiTurns, nt as archiveSessionTranscripts, o as normalizeTextForComparison, ot as INPUT_PROVENANCE_KIND_VALUES, p as BILLING_ERROR_USER_MESSAGE, pt as resolveSessionResetPolicy, q as updateSessionStoreEntry, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as capArrayByJsonBytes, s as sanitizeSessionMessagesImages, st as applyInputProvenanceToUserMessage, t as validateAnthropicTurns, tt as normalizeAccountId$3, u as downgradeOpenAIReasoningBlocks, ut as resolveSessionKey, v as getApiErrorPayloadFingerprint, vt as canonicalizeMainSessionAlias, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-CfqDGQ9J.js";
 import { A as VERSION, C as getConfigValueAtPath, D as isSafeExecutableValue, E as unsetConfigValueAtPath, O as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, S as unsetConfigOverride, T as setConfigValueAtPath, _ as parseDurationMs, a as writeConfigFile, b as resetConfigOverrides, c as TELEGRAM_COMMAND_NAME_PATTERN, f as isInboundPathAllowed, g as normalizeScpRemoteHost, h as resolveIMessageRemoteAttachmentRoots, i as resolveConfigSnapshotHash, k as resolveAgentMaxConcurrent, l as normalizeTelegramCommandName, m as resolveIMessageAttachmentRoots, n as loadConfig, o as validateConfigObjectWithPlugins, r as readConfigFileSnapshot, u as resolveTelegramCustomCommands, v as validateJsonSchemaValue, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-5SdHIcHU.js";
 import { a as applyTestPluginDefaults, c as resolveMemorySlotDecision, d as isDangerousHostEnvVarName, i as safeStatSync, n as discoverSymiPlugins, o as normalizePluginsConfig, r as isPathInside, s as resolveEnableState, t as loadPluginManifestRegistry, u as isPathInsideWithRealpath } from "./manifest-registry-yb7sAlu4.js";
-import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-DYZwl5Gv.js";
+import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-DkaXoP36.js";
 import { c as assertSandboxPath, d as resolveSandboxedMediaSource, f as applySkillEnvOverrides, i as resolveSkillsPromptForRun, l as resolveSandboxInputPath, n as buildWorkspaceSkillSnapshot, p as applySkillEnvOverridesFromSnapshot, r as loadWorkspaceSkillEntries, s as assertMediaNotDataUrl } from "./skills-Bs0AW1g3.js";
 import { n as formatErrorMessage, r as formatUncaughtError } from "./errors-XIsvXeC-.js";
 import { c as detectMime, d as imageMimeFromFormat, f as isAudioFileName, g as MAX_IMAGE_BYTES, i as getImageMetadata, l as extensionForMime, p as isGifMedia, s as resizeToJpeg, v as mediaKindFromMime } from "./image-ops-C7CauEK8.js";
@@ -31,10 +31,10 @@ import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i
 import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as resolveTimestampMs, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as resolveDiscordSystemLocation, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordShouldRequireMention, a as removeReactionDiscord, at as resolveDiscordChannelId, b as sendWebhookMessageDiscord, bt as formatDiscordReactionEmoji, c as formatDiscordComponentEventText, ct as allowListMatches$1, d as parseDiscordModalCustomId, dt as normalizeDiscordSlug, et as hasAnyGuildPermissionDiscord, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordAllowListMatch, g as sendMessageDiscord, gt as resolveDiscordOwnerAllowFrom, h as resolveDiscordModalEntry, ht as resolveDiscordMemberAccessState, i as removeOwnReactionsDiscord, it as parseDiscordTarget, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as isDiscordGroupAllowedByPolicy, m as resolveDiscordComponentEntry, mt as resolveDiscordGuildEntry, n as fetchReactionsDiscord, nt as createDiscordClient, o as sendDiscordComponentMessage, ot as listDiscordDirectoryGroupsLive, p as readDiscordComponentSpec, pt as resolveDiscordChannelConfigWithFallback, q as deleteChannelDiscord, r as reactMessageDiscord, rt as createDiscordRestClient, s as createDiscordFormModal, st as listDiscordDirectoryPeersLive, tt as chunkDiscordTextWithMode, u as parseDiscordComponentCustomIdForCarbon, ut as normalizeDiscordAllowList, v as sendStickerDiscord, vt as resolveGroupDmAllow, w as fetchMessageDiscord, wt as fetchDiscord, x as createThreadDiscord, xt as formatDiscordUserTag, y as sendVoiceMessageDiscord, yt as shouldEmitDiscordReactionNotification, z as listGuildChannelsDiscord } from "./send-CvhXrdgS.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-BBh3Gsrx.js";
 import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-SqqWIT22.js";
-import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-dODxSv3b.js";
+import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-C46-vyqg.js";
 import { a as logMessageProcessed, c as logWebhookError, d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, i as logLaneEnqueue, l as logWebhookProcessed, m as isDiagnosticsEnabled, o as logMessageQueued, p as emitDiagnosticEvent, r as logLaneDequeue, s as logSessionStateChange, t as diag, u as logWebhookReceived } from "./diagnostic-rPhsBoZz.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-Zw87xFym.js";
-import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-CXu8W39c.js";
+import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-CuzFLQWC.js";
 import { a as isSilentReplyText, i as isSilentReplyPrefixText, n as SILENT_REPLY_TOKEN, r as SYMIPULSE_TOKEN, t as HEARTBEAT_TOKEN } from "./tokens-Bux9Y_xD.js";
 import { $ as isVoiceCompatibleAudio, A as extractTelegramLocation, B as normalizeAllowFromWithStore$1, C as buildTelegramGroupFrom, D as buildTypingThreadParams, E as buildTelegramThreadParams, F as resolveTelegramMediaPlaceholder, G as formatLocationText, H as firstDefined$1, I as resolveTelegramReplyId, J as readChannelAllowFromStore, K as toLocationContext, L as resolveTelegramStreamMode, M as normalizeForwardedContext, N as resolveTelegramForumThreadId, O as describeReplyTarget, P as resolveTelegramGroupAllowFromContext, Q as listPairingChannels, R as resolveTelegramThreadSpec, S as buildSenderName, T as buildTelegramParentPeer, U as isSenderIdAllowed, V as resolveSenderAllowMatch, W as mergeAllowFromSources, X as upsertChannelPairingRequest, Y as removeChannelAllowFromStoreEntry, Z as getPairingAdapter, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildGroupLabel, c as sendStickerTelegram, d as wasSentByBot, et as parseTelegramTarget, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as hasBotMention, k as expandTextLinks, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as addChannelAllowFromStoreEntry, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, tt as resolveTelegramTargetChatType, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramGroupPeerId, x as buildSenderLabel, y as withTelegramApiErrorLogging, z as isSenderAllowed$1 } from "./send-DYj_o4_F.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-Bv5YDJc8.js";
@@ -49,7 +49,7 @@ import { n as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-DL3f
 import { a as readResponseWithLimit, i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, o as fetchWithSsrFGuard, t as getAgentScopedMediaLocalRoots } from "./local-roots-DhZz0Ybs.js";
 import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-CTiz95Vb.js";
 import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-Bfc7Uz0o.js";
-import { _ as CLI_OUTPUT_MAX_BUFFER, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as resolveMediaUnderstandingScope, h as normalizeMediaUnderstandingChatType, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveTimeoutMs$1, n as createMediaAttachmentCache, o as runCapability, p as resolveConcurrency, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as applyTemplate, y as registerUnhandledRejectionHandler } from "./runner-WAG0M5s9.js";
+import { _ as CLI_OUTPUT_MAX_BUFFER, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as resolveMediaUnderstandingScope, h as normalizeMediaUnderstandingChatType, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveTimeoutMs$1, n as createMediaAttachmentCache, o as runCapability, p as resolveConcurrency, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as applyTemplate, y as registerUnhandledRejectionHandler } from "./runner-CU9l0uJh.js";
 import { c as getSkillsSnapshotVersion, d as createAsyncLock, f as readJsonFile, i as resolveSkillCommandInvocation, l as pruneExpiredPending, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, p as writeJsonAtomic, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as resolvePairingPaths } from "./skill-commands-DcVwOafC.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-DSDTl6Kj.js";
 import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-Bso4i15F.js";
@@ -80,7 +80,7 @@ import AjvPkg from "ajv";
 import { CURRENT_SESSION_VERSION, DefaultResourceLoader, SessionManager, SettingsManager, codingTools, createAgentSession, createEditTool, createReadTool, createWriteTool, estimateTokens, generateSummary, readTool } from "@mariozechner/pi-coding-agent";
 import { createServer } from "node:http";
 import { ProxyAgent, fetch as fetch$1 } from "undici";
-import WebSocket, { WebSocket as WebSocket$1 } from "ws";
+import WebSocket$1, { WebSocket } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { EdgeTTS } from "node-edge-tts";
 import { createJiti } from "jiti";
@@ -134,7 +134,8 @@ const BUILTIN_PROFILES = [
 				"<end_of_turn>"
 			],
 			suppressMonologue: true,
-			hasStructuredThinking: false
+			hasStructuredThinking: false,
+			validateToolArgs: true
 		},
 		promptAdditions: [
 			"CRITICAL OUTPUT RULES:",
@@ -144,7 +145,8 @@ const BUILTIN_PROFILES = [
 			"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
 			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
 			"- If you need to verify your work, do so before writing your response, not after.",
-			"- Send brief progress updates on long tasks so the user knows you are active."
+			"- Send brief progress updates on long tasks so the user knows you are active.",
+			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
 		],
 		ui: {
 			badge: "Local",
@@ -168,7 +170,8 @@ const BUILTIN_PROFILES = [
 		filters: {
 			stripPatterns: [],
 			suppressMonologue: false,
-			hasStructuredThinking: true
+			hasStructuredThinking: true,
+			validateToolArgs: false
 		},
 		promptAdditions: [],
 		ui: {
@@ -202,7 +205,8 @@ const BUILTIN_PROFILES = [
 				"^\\s*<bos>\\s*"
 			],
 			suppressMonologue: true,
-			hasStructuredThinking: false
+			hasStructuredThinking: false,
+			validateToolArgs: true
 		},
 		promptAdditions: [
 			"CRITICAL OUTPUT RULES:",
@@ -213,7 +217,8 @@ const BUILTIN_PROFILES = [
 			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
 			"- If you need to verify your work, do so before writing your response, not after.",
 			"- Keep planning and reasoning internal. Only speak when you have a result or need user input.",
-			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active."
+			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active.",
+			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
 		],
 		ui: {
 			badge: "CoreWeave",
@@ -241,7 +246,8 @@ const FALLBACK_PROFILE = {
 	filters: {
 		stripPatterns: [],
 		suppressMonologue: false,
-		hasStructuredThinking: false
+		hasStructuredThinking: false,
+		validateToolArgs: false
 	},
 	promptAdditions: [],
 	ui: {
@@ -6780,7 +6786,7 @@ async function recordLoopOutcome(args) {
 	if (!args.ctx?.sessionKey) return;
 	try {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-Zw87xFym.js").then((n) => n.n);
-		const { recordToolCallOutcome } = await import("./tool-loop-detection-D0kUzUGu.js");
+		const { recordToolCallOutcome } = await import("./tool-loop-detection-DR_rrIA1.js");
 		recordToolCallOutcome(getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -6802,7 +6808,7 @@ async function runBeforeToolCallHook(args) {
 	if (args.ctx?.sessionKey) {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-Zw87xFym.js").then((n) => n.n);
 		const { logToolLoopAction } = await import("./diagnostic-rPhsBoZz.js").then((n) => n.n);
-		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-D0kUzUGu.js");
+		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-DR_rrIA1.js");
 		const sessionState = getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -8630,7 +8636,7 @@ var GatewayClient = class {
 				if (fingerprint !== expected) return /* @__PURE__ */ new Error("gateway tls fingerprint mismatch");
 			});
 		}
-		this.ws = new WebSocket$1(url, wsOptions);
+		this.ws = new WebSocket(url, wsOptions);
 		this.ws.on("open", () => {
 			if (url.startsWith("wss://") && this.opts.tlsFingerprint) {
 				const tlsError = this.validateTlsFingerprint();
@@ -8849,7 +8855,7 @@ var GatewayClient = class {
 		return null;
 	}
 	async request(method, params, opts) {
-		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error("gateway not connected");
+		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error("gateway not connected");
 		const id = randomUUID();
 		const frame = {
 			type: "req",
@@ -10115,7 +10121,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-dODxSv3b.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-C46-vyqg.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -43554,7 +43560,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-dODxSv3b.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-C46-vyqg.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -47000,7 +47006,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-CXu8W39c.js").then((n) => n.n);
+		const { describeImageWithModel } = await import("./image-CuzFLQWC.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -49662,7 +49668,7 @@ async function preflightDiscordMessage(params) {
 	let preflightTranscript;
 	const hasAudioAttachment = message.attachments?.some((att) => att.contentType?.startsWith("audio/"));
 	if (!isDirectMessage && shouldRequireMention && hasAudioAttachment && !baseText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-DHTaS5U1.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-BVaaZWkg.js");
 		const audioPaths = message.attachments?.filter((att) => att.contentType?.startsWith("audio/")).map((att) => att.url) ?? [];
 		if (audioPaths.length > 0) preflightTranscript = await transcribeFirstAudio({
 			ctx: {
@@ -53668,7 +53674,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-RePh7lRy.js");
+			const { sendMessageWhatsApp } = await import("./web-hHX9a9YO.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -56573,7 +56579,7 @@ function createDiscordGatewayPlugin(params) {
 				super(options);
 			}
 			createWebSocket(url) {
-				return new WebSocket(url, { agent });
+				return new WebSocket$1(url, { agent });
 			}
 		}
 		return new ProxyGatewayPlugin();
@@ -66791,7 +66797,7 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	const hasAudio = allMedia.some((media) => media.contentType?.startsWith("audio/"));
 	let preflightTranscript;
 	if (isGroup && requireMention && hasAudio && !hasUserText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-DHTaS5U1.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-BVaaZWkg.js");
 		preflightTranscript = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: allMedia.length > 0 ? allMedia.map((m) => m.path) : void 0,
@@ -68948,7 +68954,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-RePh7lRy.js");
+	webChannelPromise ??= import("./web-hHX9a9YO.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -73318,6 +73324,19 @@ function stripModelTokensAggressive(text, modelId) {
 	}
 	return result;
 }
+/**
+* Clean residual fragments left after aggressive token stripping.
+* After `<|` and `|>` are removed, orphaned `<`, `"`, `|` can remain
+* at string boundaries (e.g., `<<|"|uname -a` → `<"uname -a`).
+*
+* Conservative: only trims leading junk before what looks like a command,
+* and trailing junk. Does NOT touch content in the middle of the string.
+* Preserves heredoc syntax (`<<EOF`, `<<"EOF"`) via negative lookahead.
+*/
+function cleanResidualTokenFragments(text) {
+	if (!text) return text;
+	return text.replace(/^[<"|]+(?!<[A-Z_])(?=[a-zA-Z0-9/~$.(])/gm, "").replace(/[<"|]+$/gm, "").trim();
+}
 
 //#endregion
 //#region src/agents/output-normalizer.ts
@@ -73403,10 +73422,14 @@ function detectRepetition(text, minBlock) {
 	const searchStart = sampleStart + minBlock;
 	return text.indexOf(sample, searchStart) >= 0;
 }
+function sanitizeStringValue(value, modelId) {
+	const stripped = stripModelTokensAggressive(value, modelId);
+	return isGemmaModel(modelId) ? cleanResidualTokenFragments(stripped) : stripped;
+}
 function sanitizeArgs(args, modelId) {
 	const result = {};
-	for (const [key, value] of Object.entries(args)) if (typeof value === "string") result[key] = stripModelTokensAggressive(value, modelId);
-	else if (Array.isArray(value)) result[key] = value.map((item) => typeof item === "string" ? stripModelTokensAggressive(item, modelId) : item && typeof item === "object" ? sanitizeArgs(item, modelId) : item);
+	for (const [key, value] of Object.entries(args)) if (typeof value === "string") result[key] = sanitizeStringValue(value, modelId);
+	else if (Array.isArray(value)) result[key] = value.map((item) => typeof item === "string" ? sanitizeStringValue(item, modelId) : item && typeof item === "object" ? sanitizeArgs(item, modelId) : item);
 	else if (value && typeof value === "object") result[key] = sanitizeArgs(value, modelId);
 	else result[key] = value;
 	return result;
@@ -75454,6 +75477,88 @@ function subscribeEmbeddedPiSession(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/pi-tools.validate.ts
+/**
+* Tool argument validation — validates that exec/bash commands contain
+* valid shell syntax after model token sanitization.
+*
+* Gated on ModelProfile.filters.validateToolArgs — only active for
+* models known to leak control tokens into structured output (Gemma, Ollama).
+*
+* @module
+*/
+/**
+* Validate that a command string contains extractable valid shell syntax.
+* Returns the cleaned command if valid, or an error reason if not.
+*
+* Does NOT attempt to parse the full shell grammar — just checks for
+* obvious corruption (residual control tokens, empty commands).
+* Preserves heredocs, redirects, pipes, and other legitimate shell syntax.
+*/
+function validateShellCommand(command) {
+	if (!command || !command.trim()) return {
+		valid: false,
+		cleaned: "",
+		reason: "empty command"
+	};
+	let cleaned = cleanResidualTokenFragments(command);
+	if (/(?:^|[^<])<\|/.test(cleaned) || /\|>/.test(cleaned)) {
+		cleaned = cleaned.replace(/<\|[^|>]*(?:\|>)?/g, "").trim();
+		cleaned = cleanResidualTokenFragments(cleaned);
+	}
+	if (!cleaned || !cleaned.trim()) return {
+		valid: false,
+		cleaned: "",
+		reason: "command is empty after removing control tokens"
+	};
+	if (!/[a-zA-Z0-9_/.~-]/.test(cleaned)) return {
+		valid: false,
+		cleaned,
+		reason: "no recognizable shell command found"
+	};
+	return {
+		valid: true,
+		cleaned: cleaned.trim()
+	};
+}
+
+//#endregion
+//#region src/agents/pi-tools.validate-wrapper.ts
+const EXEC_TOOL_NAMES = new Set(["exec", "bash"]);
+/**
+* Wrap tools with argument validation. Only exec/bash tools are validated.
+* Other tools pass through unchanged.
+*
+* Call this AFTER tools are created and the model profile is resolved.
+*/
+function wrapToolsWithArgValidation(tools, profile) {
+	if (!profile.filters?.validateToolArgs) return tools;
+	return tools.map((tool) => wrapToolWithArgValidation(tool));
+}
+/**
+* Wrap a single tool with argument validation for exec/bash commands.
+*/
+function wrapToolWithArgValidation(tool) {
+	const toolName = (tool.name ?? "").toLowerCase().trim();
+	if (!EXEC_TOOL_NAMES.has(toolName)) return tool;
+	const originalExecute = tool.execute;
+	return {
+		...tool,
+		execute(toolCallId, params, ...rest) {
+			const command = params.command ?? params.cmd;
+			if (typeof command !== "string") return originalExecute.call(tool, toolCallId, params, ...rest);
+			const result = validateShellCommand(command);
+			if (!result.valid) return Promise.resolve({ output: `Error: ${result.reason}. The command appears to contain model control tokens. Please provide a clean shell command without any <|, |>, or XML-like tags. Only valid shell syntax is accepted.` });
+			if (result.cleaned !== command) return originalExecute.call(tool, toolCallId, {
+				...params,
+				command: result.cleaned
+			}, ...rest);
+			return originalExecute.call(tool, toolCallId, params, ...rest);
+		}
+	};
+}
+
 //#endregion
 //#region src/agents/plan-mode.ts
 /**
@@ -76688,10 +76793,11 @@ async function runEmbeddedAttempt(params) {
 				await resourceLoader.reload();
 			}
 			const hookRunner = getGlobalHookRunner();
-			const { builtInTools, customTools } = splitSdkTools({
+			const { builtInTools: rawBuiltInTools, customTools } = splitSdkTools({
 				tools,
 				sandboxEnabled: !!sandbox?.enabled
 			});
+			const builtInTools = wrapToolsWithArgValidation(rawBuiltInTools, modelProfile);
 			let clientToolCallDetected = null;
 			const clientToolLoopDetection = resolveToolLoopDetectionConfig({
 				cfg: params.config,

package/dist/{update-cli-Bl66LJZ4.js → update-cli-560gprSp.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { B as theme, h as pathExists } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { V as trimLogTail } from "./reply-D40cmAci.js";
+import { V as trimLogTail } from "./reply-DYnTEYoa.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -106,7 +106,7 @@ import "./stagger-BUClb97_.js";
 import { c as resolveGatewayLaunchAgentLabel, d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName } from "./constants-C8_BLnaW.js";
 import "./channel-selection-DuWs0Aak.js";
 import { r as parseSemver } from "./runtime-guard-B37eizu-.js";
-import "./program-context-CLJSWBZr.js";
+import "./program-context-DaNGrTOm.js";
 import "./catalog-RiADx7MA.js";
 import "./skills-status-CURJKnyY.js";
 import { n as inheritOptionFromParent } from "./command-options-BtDai3oC.js";
@@ -117,7 +117,7 @@ import "./npm-registry-spec-C2JDdSZS.js";
 import "./skill-scanner-CLs8u6vQ.js";
 import "./installs-C1Cebk97.js";
 import "./channels-status-issues-B_kBkl_u.js";
-import { r as installCompletion } from "./completion-cli-DMO2OGTm.js";
+import { r as installCompletion } from "./completion-cli-C8y_J5KC.js";
 import "./daemon-runtime-2mwX-jqj.js";
 import "./systemd-riq8uNJQ.js";
 import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
@@ -126,19 +126,19 @@ import "./systemd-hints-BR6gChwm.js";
 import { i as runDaemonInstall, r as runDaemonRestart } from "./daemon-cli-DscwlsKW.js";
 import "./diagnostics-BAMlsVVX.js";
 import { t as renderTable } from "./table-BTgkRafz.js";
-import "./health-DK6rAOhC.js";
+import "./health-BjwDRAdd.js";
 import "./control-ui-assets-Z947tKLt.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, d as formatUpdateChannelLabel, g as resolveUpdateChannelDisplay, h as resolveEffectiveUpdateChannel, m as normalizeUpdateChannel, n as compareSemverStrings, r as fetchNpmTagVersion, s as DEFAULT_GIT_CHANNEL, t as checkUpdateStatus, u as channelToNpmTag } from "./update-check-CtckACbb.js";
 import "./dm-policy-shared-Bh3TbexU.js";
 import { i as resolveUpdateAvailability, n as formatUpdateOneLiner, t as formatUpdateAvailableHint } from "./status.update-DtwCUTf-.js";
-import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-FgrqoxvV.js";
+import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-CLKHrONW.js";
 import "./logging-BzzwiKjv.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-rw7wJwHd.js";
 import "./doctor-config-flow-QnaBd8kL.js";
 import "./systemd-linger-aQ75ZlXY.js";
 import "./health-format-DSwnXZPU.js";
-import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-DQqZEGoo.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-C2IV3lKi.js";
+import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-YOj4xigd.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-D7CDLFLg.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{update-cli-CrRBoiVU.js → update-cli-D1pLX3eo.js}

@@ -16,7 +16,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { Ct as trimLogTail } from "./subagent-registry-Cb5e_x99.js";
+import { Ct as trimLogTail } from "./subagent-registry-CXrOOgPW.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -111,10 +111,10 @@ import "./npm-registry-spec-DkaZNHAW.js";
 import "./skill-scanner-BGWOBqLY.js";
 import "./installs-CgQpVncj.js";
 import "./channels-status-issues-c7qZbYG5.js";
-import "./register.subclis-BJqiT8Q2.js";
-import "./command-registry-D-pwcAIW.js";
+import "./register.subclis-B2dGWFur.js";
+import "./command-registry-CHtN2HeK.js";
 import "./program-context-CqzR_m-7.js";
-import { r as installCompletion } from "./completion-cli-DIx7KyOG.js";
+import { r as installCompletion } from "./completion-cli-Cov6N3BO.js";
 import "./daemon-runtime-CfRwa6qh.js";
 import { r as parseSemver } from "./runtime-guard-D7waq_Ho.js";
 import "./systemd-DlMdyFDY.js";
@@ -124,19 +124,19 @@ import "./systemd-hints-sQipWGd1.js";
 import { i as runDaemonInstall, r as runDaemonRestart } from "./daemon-cli-wWnBIQtk.js";
 import "./diagnostics-CS1ov_hH.js";
 import { t as renderTable } from "./table-D01d2GuY.js";
-import "./health-BpHgCv-u.js";
+import "./health-C5XJPwpt.js";
 import "./control-ui-assets-BseSWee1.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, d as formatUpdateChannelLabel, g as resolveUpdateChannelDisplay, h as resolveEffectiveUpdateChannel, m as normalizeUpdateChannel, n as compareSemverStrings, r as fetchNpmTagVersion, s as DEFAULT_GIT_CHANNEL, t as checkUpdateStatus, u as channelToNpmTag } from "./update-check-ZdimP1aU.js";
 import "./dm-policy-shared-DJ-61hCT.js";
 import { i as resolveUpdateAvailability, n as formatUpdateOneLiner, t as formatUpdateAvailableHint } from "./status.update-DbmZz0Aq.js";
-import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-DxpSPK-f.js";
+import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-BQxFFCGc.js";
 import "./logging-BGewRZy0.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-DEMKx4eC.js";
 import "./doctor-config-flow-CA3eiKhd.js";
 import "./systemd-linger-DA_LW52P.js";
 import "./health-format-CzgUHmmX.js";
-import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-zRUqu0c8.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-DMjs7-Qa.js";
+import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-QaS2zul_.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-BKKzstt6.js";
 import { spawn, spawnSync } from "node:child_process";
 import os from "node:os";
 import path from "node:path";

package/dist/{update-runner-DxpSPK-f.js → update-runner-BQxFFCGc.js}

@@ -1,6 +1,6 @@
 import { nt as pathExists } from "./entry.js";
 import { t as runCommandWithTimeout } from "./exec-CBKBIMpA.js";
-import { Ct as trimLogTail } from "./subagent-registry-Cb5e_x99.js";
+import { Ct as trimLogTail } from "./subagent-registry-CXrOOgPW.js";
 import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-BseSWee1.js";
 import { c as DEFAULT_PACKAGE_CHANNEL, f as isBetaTag, l as DEV_BRANCH, n as compareSemverStrings, o as detectPackageManager$1, p as isStableTag, u as channelToNpmTag } from "./update-check-ZdimP1aU.js";
 import os from "node:os";

package/dist/{update-runner-FgrqoxvV.js → update-runner-CLKHrONW.js}

@@ -1,5 +1,5 @@
 import { h as pathExists } from "./utils-B-0b9bGM.js";
-import { V as trimLogTail } from "./reply-D40cmAci.js";
+import { V as trimLogTail } from "./reply-DYnTEYoa.js";
 import { t as runCommandWithTimeout } from "./exec-CWkblSrI.js";
 import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-Z947tKLt.js";
 import { c as DEFAULT_PACKAGE_CHANNEL, f as isBetaTag, l as DEV_BRANCH, n as compareSemverStrings, o as detectPackageManager$1, p as isStableTag, u as channelToNpmTag } from "./update-check-CtckACbb.js";

package/dist/{web-Czp0JS6-.js → web-Bqrgp43v.js}

@@ -15,7 +15,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { Bn as resolveEnvelopeFormatOptions, Cn as enqueueSystemEvent, F as buildHistoryContextFromEntries, Hn as hasControlCommand, I as recordPendingHistoryEntryIfEnabled, Kn as buildMentionRegexes, L as shouldAckReactionForWhatsApp, Ln as createInboundDebouncer, M as buildPairingReply, N as resolveMentionGating, P as DEFAULT_GROUP_HISTORY_LIMIT, R as dispatchReplyWithBufferedBlockDispatcher, Rn as resolveInboundDebounceMs, U as createDedupeCache, Un as shouldComputeCommandAuthorized, W as getReplyFromConfig, b as sleepWithAbort, nn as parseActivationCommand, qn as normalizeMentionText, tn as normalizeGroupActivation, y as computeBackoff, zn as formatInboundEnvelope } from "./subagent-registry-Cb5e_x99.js";
+import { Bn as resolveEnvelopeFormatOptions, Cn as enqueueSystemEvent, F as buildHistoryContextFromEntries, Hn as hasControlCommand, I as recordPendingHistoryEntryIfEnabled, Kn as buildMentionRegexes, L as shouldAckReactionForWhatsApp, Ln as createInboundDebouncer, M as buildPairingReply, N as resolveMentionGating, P as DEFAULT_GROUP_HISTORY_LIMIT, R as dispatchReplyWithBufferedBlockDispatcher, Rn as resolveInboundDebounceMs, U as createDedupeCache, Un as shouldComputeCommandAuthorized, W as getReplyFromConfig, b as sleepWithAbort, nn as parseActivationCommand, qn as normalizeMentionText, tn as normalizeGroupActivation, y as computeBackoff, zn as formatInboundEnvelope } from "./subagent-registry-CXrOOgPW.js";
 import { B as resolveGroupSessionKey, c as recordSessionMetaFromInbound, o as loadSessionStore, s as readSessionUpdatedAt, u as updateLastRoute } from "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";