@symerian/symi 2.6.0 → 2.6.1

package/dist/{register.setup-BeHpW3xI.js → register.setup-DD4Rgkt9.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { B as theme, S as shortenHomePath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-D40cmAci.js";
+import "./reply-DYnTEYoa.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -108,8 +108,8 @@ import "./clack-prompter-B7pN13HV.js";
 import "./daemon-runtime-2mwX-jqj.js";
 import "./systemd-riq8uNJQ.js";
 import "./service-Cl74hx8J.js";
-import "./health-DK6rAOhC.js";
-import "./onboarding-DI-o_sax.js";
+import "./health-BjwDRAdd.js";
+import "./onboarding-DIVKvosg.js";
 import "./shared-Knv1hy6h.js";
 import "./auth-token-BnOynwk4.js";
 import { n as logConfigUpdated, t as formatConfigPath } from "./logging-BzzwiKjv.js";
@@ -117,7 +117,7 @@ import "./openai-model-default-DMjQRsb1.js";
 import "./model-picker-Ddo3jHe-.js";
 import "./systemd-linger-aQ75ZlXY.js";
 import "./onboard-custom-C7O-zfQ1.js";
-import { t as onboardCommand } from "./onboard-BukRqcRH.js";
+import { t as onboardCommand } from "./onboard-f-GJ26Ix.js";
 import JSON5 from "json5";
 import fs from "node:fs/promises";
 

package/dist/{register.status-health-sessions-b-lWNsTM.js → register.status-health-sessions-BqD7L8XL.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { B as theme, P as setVerbose, k as info, z as isRich } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { m as classifySessionKey, pr as lookupContextTokens, x as resolveSessionModelRef } from "./reply-D40cmAci.js";
+import { m as classifySessionKey, pr as lookupContextTokens, x as resolveSessionModelRef } from "./reply-DYnTEYoa.js";
 import { S as parseAgentSessionKey } from "./session-key-DCt45XZa.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -114,8 +114,8 @@ import "./service-Cl74hx8J.js";
 import "./diagnostics-BAMlsVVX.js";
 import "./table-BTgkRafz.js";
 import "./audit-CrITRV6w.js";
-import { t as statusCommand } from "./status-DHJLMwQN.js";
-import { r as healthCommand } from "./health-DK6rAOhC.js";
+import { t as statusCommand } from "./status--iNVOTMO.js";
+import { r as healthCommand } from "./health-BjwDRAdd.js";
 import "./update-check-CtckACbb.js";
 import "./dm-policy-shared-Bh3TbexU.js";
 import "./node-service-Cxz4e-Qd.js";

package/dist/{register.status-health-sessions-DDkC0aoW.js → register.status-health-sessions-sLgA92t7.js}

@@ -14,7 +14,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-Cb5e_x99.js";
+import "./subagent-registry-CXrOOgPW.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -108,8 +108,8 @@ import "./service-Cm9j9WzQ.js";
 import "./diagnostics-CS1ov_hH.js";
 import "./table-D01d2GuY.js";
 import "./audit-Byo5jCLN.js";
-import { n as statusCommand } from "./status-CtNKWuzg.js";
-import { r as healthCommand } from "./health-BpHgCv-u.js";
+import { n as statusCommand } from "./status-B1_iHrOg.js";
+import { r as healthCommand } from "./health-C5XJPwpt.js";
 import "./update-check-ZdimP1aU.js";
 import "./dm-policy-shared-DJ-61hCT.js";
 import "./node-service-fcZExd22.js";

package/dist/{register.subclis-BJqiT8Q2.js → register.subclis-B2dGWFur.js}

@@ -49,7 +49,7 @@ const entries = [
 		description: "Run, inspect, and query the WebSocket Gateway",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./gateway-cli-BanaeKQ_.js")).registerGatewayCli(program);
+			(await import("./gateway-cli-Datohp3m.js")).registerGatewayCli(program);
 		}
 	},
 	{
@@ -81,7 +81,7 @@ const entries = [
 		description: "Discover, scan, and configure models",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./models-cli-DN4AVlpI.js")).registerModelsCli(program);
+			(await import("./models-cli-B5vh-XK8.js")).registerModelsCli(program);
 		}
 	},
 	{
@@ -161,7 +161,7 @@ const entries = [
 		description: "Manage internal agent hooks",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./hooks-cli-Cin_3tFg.js")).registerHooksCli(program);
+			(await import("./hooks-cli-CafMq9Vr.js")).registerHooksCli(program);
 		}
 	},
 	{
@@ -185,7 +185,7 @@ const entries = [
 		description: "Secure DM pairing (approve inbound requests)",
 		hasSubcommands: true,
 		register: async (program) => {
-			const { registerPluginCliCommands } = await import("./cli-eOBlVLcC.js");
+			const { registerPluginCliCommands } = await import("./cli-DNZwCDRe.js");
 			registerPluginCliCommands(program, await loadConfig());
 			(await import("./pairing-cli-CQRAnpvm.js")).registerPairingCli(program);
 		}
@@ -195,8 +195,8 @@ const entries = [
 		description: "Manage Symi plugins and extensions",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./plugins-cli-D8hhTHZD.js")).registerPluginsCli(program);
-			const { registerPluginCliCommands } = await import("./cli-eOBlVLcC.js");
+			(await import("./plugins-cli-DksVl33N.js")).registerPluginsCli(program);
+			const { registerPluginCliCommands } = await import("./cli-DNZwCDRe.js");
 			registerPluginCliCommands(program, await loadConfig());
 		}
 	},
@@ -205,7 +205,7 @@ const entries = [
 		description: "Manage connected chat channels (Telegram, Discord, etc.)",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./channels-cli-BuTH-iVi.js")).registerChannelsCli(program);
+			(await import("./channels-cli-DzOjNNFn.js")).registerChannelsCli(program);
 		}
 	},
 	{
@@ -237,7 +237,7 @@ const entries = [
 		description: "Update Symi and inspect update channel status",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./update-cli-CrRBoiVU.js")).registerUpdateCli(program);
+			(await import("./update-cli-D1pLX3eo.js")).registerUpdateCli(program);
 		}
 	},
 	{
@@ -245,7 +245,7 @@ const entries = [
 		description: "Generate shell completion script",
 		hasSubcommands: false,
 		register: async (program) => {
-			(await import("./completion-cli-DIx7KyOG.js").then((n) => n.n)).registerCompletionCli(program);
+			(await import("./completion-cli-Cov6N3BO.js").then((n) => n.n)).registerCompletionCli(program);
 		}
 	}
 ];

package/dist/{reply-D40cmAci.js → reply-DYnTEYoa.js}

@@ -22402,7 +22402,8 @@ const BUILTIN_PROFILES = [
 				"<end_of_turn>"
 			],
 			suppressMonologue: true,
-			hasStructuredThinking: false
+			hasStructuredThinking: false,
+			validateToolArgs: true
 		},
 		promptAdditions: [
 			"CRITICAL OUTPUT RULES:",
@@ -22412,7 +22413,8 @@ const BUILTIN_PROFILES = [
 			"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
 			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
 			"- If you need to verify your work, do so before writing your response, not after.",
-			"- Send brief progress updates on long tasks so the user knows you are active."
+			"- Send brief progress updates on long tasks so the user knows you are active.",
+			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
 		],
 		ui: {
 			badge: "Local",
@@ -22436,7 +22438,8 @@ const BUILTIN_PROFILES = [
 		filters: {
 			stripPatterns: [],
 			suppressMonologue: false,
-			hasStructuredThinking: true
+			hasStructuredThinking: true,
+			validateToolArgs: false
 		},
 		promptAdditions: [],
 		ui: {
@@ -22470,7 +22473,8 @@ const BUILTIN_PROFILES = [
 				"^\\s*<bos>\\s*"
 			],
 			suppressMonologue: true,
-			hasStructuredThinking: false
+			hasStructuredThinking: false,
+			validateToolArgs: true
 		},
 		promptAdditions: [
 			"CRITICAL OUTPUT RULES:",
@@ -22481,7 +22485,8 @@ const BUILTIN_PROFILES = [
 			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
 			"- If you need to verify your work, do so before writing your response, not after.",
 			"- Keep planning and reasoning internal. Only speak when you have a result or need user input.",
-			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active."
+			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active.",
+			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
 		],
 		ui: {
 			badge: "CoreWeave",
@@ -22509,7 +22514,8 @@ const FALLBACK_PROFILE = {
 	filters: {
 		stripPatterns: [],
 		suppressMonologue: false,
-		hasStructuredThinking: false
+		hasStructuredThinking: false,
+		validateToolArgs: false
 	},
 	promptAdditions: [],
 	ui: {
@@ -22936,6 +22942,19 @@ function stripModelTokensAggressive(text, modelId) {
 	}
 	return result;
 }
+/**
+* Clean residual fragments left after aggressive token stripping.
+* After `<|` and `|>` are removed, orphaned `<`, `"`, `|` can remain
+* at string boundaries (e.g., `<<|"|uname -a` → `<"uname -a`).
+*
+* Conservative: only trims leading junk before what looks like a command,
+* and trailing junk. Does NOT touch content in the middle of the string.
+* Preserves heredoc syntax (`<<EOF`, `<<"EOF"`) via negative lookahead.
+*/
+function cleanResidualTokenFragments(text) {
+	if (!text) return text;
+	return text.replace(/^[<"|]+(?!<[A-Z_])(?=[a-zA-Z0-9/~$.(])/gm, "").replace(/[<"|]+$/gm, "").trim();
+}
 
 //#endregion
 //#region src/agents/output-normalizer.ts
@@ -23021,10 +23040,14 @@ function detectRepetition(text, minBlock) {
 	const searchStart = sampleStart + minBlock;
 	return text.indexOf(sample, searchStart) >= 0;
 }
+function sanitizeStringValue(value, modelId) {
+	const stripped = stripModelTokensAggressive(value, modelId);
+	return isGemmaModel$1(modelId) ? cleanResidualTokenFragments(stripped) : stripped;
+}
 function sanitizeArgs(args, modelId) {
 	const result = {};
-	for (const [key, value] of Object.entries(args)) if (typeof value === "string") result[key] = stripModelTokensAggressive(value, modelId);
-	else if (Array.isArray(value)) result[key] = value.map((item) => typeof item === "string" ? stripModelTokensAggressive(item, modelId) : item && typeof item === "object" ? sanitizeArgs(item, modelId) : item);
+	for (const [key, value] of Object.entries(args)) if (typeof value === "string") result[key] = sanitizeStringValue(value, modelId);
+	else if (Array.isArray(value)) result[key] = value.map((item) => typeof item === "string" ? sanitizeStringValue(item, modelId) : item && typeof item === "object" ? sanitizeArgs(item, modelId) : item);
 	else if (value && typeof value === "object") result[key] = sanitizeArgs(value, modelId);
 	else result[key] = value;
 	return result;
@@ -25108,7 +25131,7 @@ async function recordLoopOutcome(args) {
 	if (!args.ctx?.sessionKey) return;
 	try {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-CUslJyKP.js").then((n) => n.n);
-		const { recordToolCallOutcome } = await import("./tool-loop-detection-B6j1r-Wk.js");
+		const { recordToolCallOutcome } = await import("./tool-loop-detection-DPVtQOfM.js");
 		recordToolCallOutcome(getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -25130,7 +25153,7 @@ async function runBeforeToolCallHook(args) {
 	if (args.ctx?.sessionKey) {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-CUslJyKP.js").then((n) => n.n);
 		const { logToolLoopAction } = await import("./diagnostic-DjBRPfu9.js").then((n) => n.n);
-		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-B6j1r-Wk.js");
+		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-DPVtQOfM.js");
 		const sessionState = getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -25401,6 +25424,88 @@ function toClientToolDefinitions(tools, onClientToolCall, hookContext) {
 	});
 }
 
+//#endregion
+//#region src/agents/pi-tools.validate.ts
+/**
+* Tool argument validation — validates that exec/bash commands contain
+* valid shell syntax after model token sanitization.
+*
+* Gated on ModelProfile.filters.validateToolArgs — only active for
+* models known to leak control tokens into structured output (Gemma, Ollama).
+*
+* @module
+*/
+/**
+* Validate that a command string contains extractable valid shell syntax.
+* Returns the cleaned command if valid, or an error reason if not.
+*
+* Does NOT attempt to parse the full shell grammar — just checks for
+* obvious corruption (residual control tokens, empty commands).
+* Preserves heredocs, redirects, pipes, and other legitimate shell syntax.
+*/
+function validateShellCommand(command) {
+	if (!command || !command.trim()) return {
+		valid: false,
+		cleaned: "",
+		reason: "empty command"
+	};
+	let cleaned = cleanResidualTokenFragments(command);
+	if (/(?:^|[^<])<\|/.test(cleaned) || /\|>/.test(cleaned)) {
+		cleaned = cleaned.replace(/<\|[^|>]*(?:\|>)?/g, "").trim();
+		cleaned = cleanResidualTokenFragments(cleaned);
+	}
+	if (!cleaned || !cleaned.trim()) return {
+		valid: false,
+		cleaned: "",
+		reason: "command is empty after removing control tokens"
+	};
+	if (!/[a-zA-Z0-9_/.~-]/.test(cleaned)) return {
+		valid: false,
+		cleaned,
+		reason: "no recognizable shell command found"
+	};
+	return {
+		valid: true,
+		cleaned: cleaned.trim()
+	};
+}
+
+//#endregion
+//#region src/agents/pi-tools.validate-wrapper.ts
+const EXEC_TOOL_NAMES = new Set(["exec", "bash"]);
+/**
+* Wrap tools with argument validation. Only exec/bash tools are validated.
+* Other tools pass through unchanged.
+*
+* Call this AFTER tools are created and the model profile is resolved.
+*/
+function wrapToolsWithArgValidation(tools, profile) {
+	if (!profile.filters?.validateToolArgs) return tools;
+	return tools.map((tool) => wrapToolWithArgValidation(tool));
+}
+/**
+* Wrap a single tool with argument validation for exec/bash commands.
+*/
+function wrapToolWithArgValidation(tool) {
+	const toolName = (tool.name ?? "").toLowerCase().trim();
+	if (!EXEC_TOOL_NAMES.has(toolName)) return tool;
+	const originalExecute = tool.execute;
+	return {
+		...tool,
+		execute(toolCallId, params, ...rest) {
+			const command = params.command ?? params.cmd;
+			if (typeof command !== "string") return originalExecute.call(tool, toolCallId, params, ...rest);
+			const result = validateShellCommand(command);
+			if (!result.valid) return Promise.resolve({ output: `Error: ${result.reason}. The command appears to contain model control tokens. Please provide a clean shell command without any <|, |>, or XML-like tags. Only valid shell syntax is accepted.` });
+			if (result.cleaned !== command) return originalExecute.call(tool, toolCallId, {
+				...params,
+				command: result.cleaned
+			}, ...rest);
+			return originalExecute.call(tool, toolCallId, params, ...rest);
+		}
+	};
+}
+
 //#endregion
 //#region src/agents/plan-mode.ts
 /**
@@ -29483,10 +29588,11 @@ async function runEmbeddedAttempt(params) {
 				await resourceLoader.reload();
 			}
 			const hookRunner = getGlobalHookRunner();
-			const { builtInTools, customTools } = splitSdkTools({
+			const { builtInTools: rawBuiltInTools, customTools } = splitSdkTools({
 				tools,
 				sandboxEnabled: !!sandbox?.enabled
 			});
+			const builtInTools = wrapToolsWithArgValidation(rawBuiltInTools, modelProfile);
 			let clientToolCallDetected = null;
 			const clientToolLoopDetection = resolveToolLoopDetectionConfig({
 				cfg: params.config,
@@ -31211,7 +31317,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-BYRKX5Ln.js");
+			const { sendMessageWhatsApp } = await import("./web-Dr5cOn-1.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -49642,7 +49748,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-BYRKX5Ln.js");
+	webChannelPromise ??= import("./web-Dr5cOn-1.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{run-main-BruREeZ6.js → run-main-DWmu2b6D.js}

@@ -13,7 +13,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-Cb5e_x99.js";
+import "./subagent-registry-CXrOOgPW.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -101,9 +101,9 @@ import { t as ensureSymiCliOnPath } from "./path-env-Bic_wXs9.js";
 import "./catalog-DLQFKucJ.js";
 import "./note-DDecZomM.js";
 import "./plugin-auto-enable-D6ENR3Xg.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-cj99EI0k.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-5yf-hu_W.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-D7waq_Ho.js";
-import { t as emitCliBanner } from "./banner-D50f_0qf.js";
+import { t as emitCliBanner } from "./banner-DYDCxnDL.js";
 import "./doctor-config-flow-CA3eiKhd.js";
 import { n as ensureConfigReady } from "./config-guard-CPHvOzsC.js";
 import process$1 from "node:process";
@@ -118,7 +118,7 @@ const routeHealth = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { healthCommand } = await import("./health-BpHgCv-u.js").then((n) => n.i);
+		const { healthCommand } = await import("./health-C5XJPwpt.js").then((n) => n.i);
 		await healthCommand({
 			json,
 			timeoutMs,
@@ -138,7 +138,7 @@ const routeStatus = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { statusCommand } = await import("./status-CtNKWuzg.js").then((n) => n.t);
+		const { statusCommand } = await import("./status-B1_iHrOg.js").then((n) => n.t);
 		await statusCommand({
 			json,
 			deep,
@@ -172,7 +172,7 @@ const routeAgentsList = {
 	run: async (argv) => {
 		const json = hasFlag(argv, "--json");
 		const bindings = hasFlag(argv, "--bindings");
-		const { agentsListCommand } = await import("./agents-Bi50kp6u.js").then((n) => n.t);
+		const { agentsListCommand } = await import("./agents-DQIz-_on.js").then((n) => n.t);
 		await agentsListCommand({
 			json,
 			bindings
@@ -243,7 +243,7 @@ const routes = [
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
 			const json = hasFlag(argv, "--json");
-			const { runConfigGet } = await import("./config-cli-BsDxqYDU.js");
+			const { runConfigGet } = await import("./config-cli-B2REEd2l.js");
 			await runConfigGet({
 				path: pathArg,
 				json
@@ -256,7 +256,7 @@ const routes = [
 		run: async (argv) => {
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
-			const { runConfigUnset } = await import("./config-cli-BsDxqYDU.js");
+			const { runConfigUnset } = await import("./config-cli-B2REEd2l.js");
 			await runConfigUnset({ path: pathArg });
 			return true;
 		}
@@ -270,7 +270,7 @@ const routes = [
 			const local = hasFlag(argv, "--local");
 			const json = hasFlag(argv, "--json");
 			const plain = hasFlag(argv, "--plain");
-			const { modelsListCommand } = await import("./models-CeKIXf5B.js").then((n) => n.t);
+			const { modelsListCommand } = await import("./models-Bo4iHJy-.js").then((n) => n.t);
 			await modelsListCommand({
 				all,
 				local,
@@ -301,7 +301,7 @@ const routes = [
 			const plain = hasFlag(argv, "--plain");
 			const check = hasFlag(argv, "--check");
 			const probe = hasFlag(argv, "--probe");
-			const { modelsStatusCommand } = await import("./models-CeKIXf5B.js").then((n) => n.t);
+			const { modelsStatusCommand } = await import("./models-Bo4iHJy-.js").then((n) => n.t);
 			await modelsStatusCommand({
 				json,
 				plain,
@@ -379,7 +379,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-D09h71pS.js");
+	const { buildProgram } = await import("./program-BjORH7Cc.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -411,10 +411,10 @@ async function runCli(argv = process$1.argv) {
 		const { getProgramContext } = await import("./program-context-CqzR_m-7.js").then((n) => n.n);
 		const ctx = getProgramContext(program);
 		if (ctx) {
-			const { registerCoreCliByName } = await import("./command-registry-D-pwcAIW.js").then((n) => n.t);
+			const { registerCoreCliByName } = await import("./command-registry-CHtN2HeK.js").then((n) => n.t);
 			await registerCoreCliByName(program, ctx, primary, parseArgv);
 		}
-		const { registerSubCliByName } = await import("./register.subclis-BJqiT8Q2.js").then((n) => n.a);
+		const { registerSubCliByName } = await import("./register.subclis-B2dGWFur.js").then((n) => n.a);
 		await registerSubCliByName(program, primary);
 	}
 	const hasBuiltinPrimary = primary !== null && program.commands.some((command) => command.name() === primary);
@@ -423,7 +423,7 @@ async function runCli(argv = process$1.argv) {
 		primary,
 		hasBuiltinPrimary
 	})) {
-		const { registerPluginCliCommands } = await import("./cli-eOBlVLcC.js");
+		const { registerPluginCliCommands } = await import("./cli-DNZwCDRe.js");
 		const { loadConfig } = await import("./config-DHBLS1Hl.js").then((n) => n.t);
 		registerPluginCliCommands(program, loadConfig());
 	}

package/dist/{runner-DUBExAb5.js → runner-BcQ0sF9T.js}

@@ -4,7 +4,7 @@ import { G as resolveSymiAgentDir, T as resolveApiKeyForProvider, c as normalize
 import { t as normalizeChatType } from "./chat-type-DFDuk3FY.js";
 import { _ as kindFromMime, d as detectMime, h as isAudioFileName, p as getFileExtension } from "./image-ops-ByaQt43P.js";
 import { d as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, f as isInboundPathAllowed, m as resolveIMessageAttachmentRoots, n as loadConfig, p as mergeInboundPathRoots } from "./config-BmV60pPT.js";
-import { S as ensureSymiModelsJson, t as describeImageWithModel } from "./image-CHzdaNJ4.js";
+import { S as ensureSymiModelsJson, t as describeImageWithModel } from "./image-DcpMiprB.js";
 import { n as collectProviderApiKeysForExecution, r as executeWithApiKeyRotation, t as parseGeminiAuth } from "./gemini-auth-CSlZZ1Pw.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-BheTNyes.js";
 import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, o as fetchWithSsrFGuard, r as MediaFetchError } from "./local-roots-CC8jiKDk.js";

package/dist/{runner-WAG0M5s9.js → runner-CU9l0uJh.js}

@@ -4,7 +4,7 @@ import { $ as resolveSymiAgentDir, A as normalizeGoogleModelId, B as resolveApiK
 import { d as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, f as isInboundPathAllowed, m as resolveIMessageAttachmentRoots, n as loadConfig, p as mergeInboundPathRoots } from "./config-5SdHIcHU.js";
 import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-C7CauEK8.js";
 import { t as normalizeChatType } from "./chat-type-3FRbbjbq.js";
-import { S as ensureSymiModelsJson, t as describeImageWithModel } from "./image-CXu8W39c.js";
+import { S as ensureSymiModelsJson, t as describeImageWithModel } from "./image-CuzFLQWC.js";
 import { n as collectProviderApiKeysForExecution, r as executeWithApiKeyRotation, t as parseGeminiAuth } from "./gemini-auth-Dy12ZAH3.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-DL3f_O53.js";
 import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, o as fetchWithSsrFGuard, r as MediaFetchError } from "./local-roots-DhZz0Ybs.js";

package/dist/{server-methods-K-0MHs8x.js → server-methods-C8EWZt2g.js}

@@ -12,7 +12,7 @@ import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, i as isGatewayMessa
 import { c as writeJsonAtomic, o as createAsyncLock, s as readJsonFile } from "./pairing-token-Byh6drgn.js";
 import { s as pickPrimaryLanIPv4 } from "./net-DZ5Ayk-W.js";
 import { i as normalizeInputProvenance } from "./input-provenance-D0lNkCf6.js";
-import { $n as resolveTtsAutoMode, B as dispatchInboundMessage, C as resolveAgentDeliveryPlan, Cn as enqueueSystemEvent, Cr as onAgentEvent, D as createOutboundSendDeps, Dt as normalizeCronJobPatch, Et as normalizeCronJobCreate, G as BARE_SESSION_RESET_PROMPT, Gn as stopSubagentsForRequester, Gt as persistBrowserProxyFiles, In as resolveAgentTimeoutMs, Jn as resolveUserTimezone, Qn as resolveTtsApiKey, Sn as parseVerboseOverride, V as createReplyDispatcher, Vn as formatZonedTimestamp, Wn as isAbortTrigger, Wt as applyBrowserProxyPaths, Xn as isTtsEnabled, Y as abortEmbeddedPiRun, Yn as getTtsProvider, Z as waitForEmbeddedPiRunEnd, Zn as isTtsProviderConfigured, Zt as scheduleGatewaySigusr1Restart, a as listSubagentRunsForRequester, ar as textToSpeech, bn as applyModelOverrideToSessionEntry, c as clearSessionQueues, ct as resolveOutboundSessionRoute, dt as resolveOutboundTarget, en as unbindThreadBindingsBySessionKey, er as resolveTtsConfig, hn as resolveSendPolicy, i as listDescendantRunsForRequester, ir as setTtsProvider, m as loadSymiPlugins, mn as normalizeSendPolicy, nr as resolveTtsProviderOrder, or as OPENAI_TTS_MODELS, rn as loadProviderUsageSummary, rr as setTtsEnabled, sr as OPENAI_TTS_VOICES, st as ensureOutboundSessionEntry, tn as normalizeGroupActivation, tr as resolveTtsPrefsPath, w as resolveAgentOutboundTarget, wn as isSystemEventContextChanged, wr as registerAgentRunContext, wt as writeRestartSentinel, x as agentCommand, xn as applyVerboseOverride, yt as formatDoctorNonInteractiveHint } from "./subagent-registry-Cb5e_x99.js";
+import { $n as resolveTtsAutoMode, B as dispatchInboundMessage, C as resolveAgentDeliveryPlan, Cn as enqueueSystemEvent, Cr as onAgentEvent, D as createOutboundSendDeps, Dt as normalizeCronJobPatch, Et as normalizeCronJobCreate, G as BARE_SESSION_RESET_PROMPT, Gn as stopSubagentsForRequester, Gt as persistBrowserProxyFiles, In as resolveAgentTimeoutMs, Jn as resolveUserTimezone, Qn as resolveTtsApiKey, Sn as parseVerboseOverride, V as createReplyDispatcher, Vn as formatZonedTimestamp, Wn as isAbortTrigger, Wt as applyBrowserProxyPaths, Xn as isTtsEnabled, Y as abortEmbeddedPiRun, Yn as getTtsProvider, Z as waitForEmbeddedPiRunEnd, Zn as isTtsProviderConfigured, Zt as scheduleGatewaySigusr1Restart, a as listSubagentRunsForRequester, ar as textToSpeech, bn as applyModelOverrideToSessionEntry, c as clearSessionQueues, ct as resolveOutboundSessionRoute, dt as resolveOutboundTarget, en as unbindThreadBindingsBySessionKey, er as resolveTtsConfig, hn as resolveSendPolicy, i as listDescendantRunsForRequester, ir as setTtsProvider, m as loadSymiPlugins, mn as normalizeSendPolicy, nr as resolveTtsProviderOrder, or as OPENAI_TTS_MODELS, rn as loadProviderUsageSummary, rr as setTtsEnabled, sr as OPENAI_TTS_VOICES, st as ensureOutboundSessionEntry, tn as normalizeGroupActivation, tr as resolveTtsPrefsPath, w as resolveAgentOutboundTarget, wn as isSystemEventContextChanged, wr as registerAgentRunContext, wt as writeRestartSentinel, x as agentCommand, xn as applyVerboseOverride, yt as formatDoctorNonInteractiveHint } from "./subagent-registry-CXrOOgPW.js";
 import { F as resolveMainSessionKey, I as resolveMainSessionKeyFromConfig, J as normalizeSessionDeliveryFields, N as resolveAgentMainSessionKey, P as resolveExplicitAgentSessionKey, R as snapshotSessionOrigin, S as stripEnvelopeFromMessages, _ as capArrayByJsonBytes, d as updateSessionStore, g as archiveSessionTranscripts, h as archiveFileOnDisk, o as loadSessionStore, t as extractDeliveryInfo, v as readSessionMessages, x as resolveSessionTranscriptCandidates, y as readSessionPreviewItemsFromTranscript } from "./sessions-CJXnZVjR.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
 import { n as createBrowserRouteDispatcher } from "./with-timeout-Di0nddLY.js";
@@ -37,14 +37,14 @@ import { t as WizardCancelledError } from "./prompts-m1IJwIAx.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-cLP5YLeQ.js";
 import { t as buildChannelAccountSnapshot } from "./status-BUedPCLb.js";
 import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-Byo5jCLN.js";
-import { r as getStatusSummary } from "./status-CtNKWuzg.js";
-import { c as setHeartbeatsEnabled } from "./health-BpHgCv-u.js";
+import { r as getStatusSummary } from "./status-B1_iHrOg.js";
+import { c as setHeartbeatsEnabled } from "./health-C5XJPwpt.js";
 import { m as normalizeUpdateChannel } from "./update-check-ZdimP1aU.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-DJddAK3u.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BcTeP94V.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-Bek3ANJa.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-D8WPDf-m.js";
 import { t as resolveSystemRunCommand } from "./system-run-command-ByVa3txU.js";
 import { t as installSkill } from "./skills-install-1ZdwGTnh.js";
-import { t as runGatewayUpdate } from "./update-runner-DxpSPK-f.js";
+import { t as runGatewayUpdate } from "./update-runner-BQxFFCGc.js";
 import { spawnSync } from "node:child_process";
 import * as os$1 from "node:os";
 import os from "node:os";
@@ -6851,7 +6851,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-89R9Ryky.js");
+			const { handleNodeEvent } = await import("./server-node-events-CKi12bol.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,

package/dist/{server-methods-Cyw_WS3A.js → server-methods-vDGoM3xL.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir, t as CONFIG_PATH } from "./paths-Cqn-zk3M.js";
 import { D as isPlainObject, U as getResolvedLoggerSettings, r as clamp, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-EAliFiVK.js";
-import { $n as OPENAI_TTS_MODELS, Bn as registerAgentRunContext, Bt as abortEmbeddedPiRun, C as ensureOutboundSessionEntry, Et as agentCommand, Ft as normalizeSendPolicy, G as normalizeCronJobPatch, Gn as resolveTtsApiKey, H as writeRestartSentinel, Hn as getTtsProvider, Ht as waitForEmbeddedPiRunEnd, It as resolveSendPolicy, Jn as resolveTtsPrefsPath, Kn as resolveTtsAutoMode, L as formatDoctorNonInteractiveHint, Mn as listSubagentRunsForRequester, Mt as resolveOutboundTarget, N as scheduleGatewaySigusr1Restart, Ot as resolveAgentDeliveryPlan, Pr as resolveAgentTimeoutMs, Qn as textToSpeech, Rt as createOutboundSendDeps, Sr as isSystemEventContextChanged, Tn as stopSubagentsForRequester, Un as isTtsEnabled, Vn as resolveUserTimezone, W as normalizeCronJobCreate, Wn as isTtsProviderConfigured, Xn as setTtsEnabled, Yn as resolveTtsProviderOrder, Zn as setTtsProvider, _ as loadCombinedSessionStoreForGateway, at as persistBrowserProxyFiles, b as resolveGatewaySessionStoreTarget, br as parseVerboseOverride, c as clearSessionQueues, er as OPENAI_TTS_VOICES, ft as loadSymiPlugins, g as listSessionsFromStore, gt as loadProviderUsageSummary, h as listAgentsForGateway, in as unbindThreadBindingsBySessionKey, it as applyBrowserProxyPaths, jn as listDescendantRunsForRequester, kt as resolveAgentOutboundTarget, mn as createReplyDispatcher, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, p as canonicalizeSpawnedByForAgent, pn as dispatchInboundMessage, qn as resolveTtsConfig, v as loadSessionEntry, vr as applyModelOverrideToSessionEntry, w as resolveOutboundSessionRoute, wn as isAbortTrigger, x as resolveSessionModelRef, xn as formatZonedTimestamp, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys, yr as applyVerboseOverride, zn as onAgentEvent } from "./reply-D40cmAci.js";
+import { $n as OPENAI_TTS_MODELS, Bn as registerAgentRunContext, Bt as abortEmbeddedPiRun, C as ensureOutboundSessionEntry, Et as agentCommand, Ft as normalizeSendPolicy, G as normalizeCronJobPatch, Gn as resolveTtsApiKey, H as writeRestartSentinel, Hn as getTtsProvider, Ht as waitForEmbeddedPiRunEnd, It as resolveSendPolicy, Jn as resolveTtsPrefsPath, Kn as resolveTtsAutoMode, L as formatDoctorNonInteractiveHint, Mn as listSubagentRunsForRequester, Mt as resolveOutboundTarget, N as scheduleGatewaySigusr1Restart, Ot as resolveAgentDeliveryPlan, Pr as resolveAgentTimeoutMs, Qn as textToSpeech, Rt as createOutboundSendDeps, Sr as isSystemEventContextChanged, Tn as stopSubagentsForRequester, Un as isTtsEnabled, Vn as resolveUserTimezone, W as normalizeCronJobCreate, Wn as isTtsProviderConfigured, Xn as setTtsEnabled, Yn as resolveTtsProviderOrder, Zn as setTtsProvider, _ as loadCombinedSessionStoreForGateway, at as persistBrowserProxyFiles, b as resolveGatewaySessionStoreTarget, br as parseVerboseOverride, c as clearSessionQueues, er as OPENAI_TTS_VOICES, ft as loadSymiPlugins, g as listSessionsFromStore, gt as loadProviderUsageSummary, h as listAgentsForGateway, in as unbindThreadBindingsBySessionKey, it as applyBrowserProxyPaths, jn as listDescendantRunsForRequester, kt as resolveAgentOutboundTarget, mn as createReplyDispatcher, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, p as canonicalizeSpawnedByForAgent, pn as dispatchInboundMessage, qn as resolveTtsConfig, v as loadSessionEntry, vr as applyModelOverrideToSessionEntry, w as resolveOutboundSessionRoute, wn as isAbortTrigger, x as resolveSessionModelRef, xn as formatZonedTimestamp, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys, yr as applyVerboseOverride, zn as onAgentEvent } from "./reply-DYnTEYoa.js";
 import { S as parseAgentSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, o as classifySessionKeyShape, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey } from "./session-key-DCt45XZa.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { C as createInternalHookEvent, T as triggerInternalHook, d as getActivePluginRegistry, r as DEFAULT_CHAT_CHANNEL, t as CHANNEL_IDS } from "./registry-Cja8eT7G.js";
@@ -39,14 +39,14 @@ import { t as WizardCancelledError } from "./prompts-Xu2Sveka.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BcGbMZD1.js";
 import { t as buildChannelAccountSnapshot } from "./status-BrV-afZE.js";
 import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-CrITRV6w.js";
-import { n as getStatusSummary } from "./status-DHJLMwQN.js";
-import { s as setHeartbeatsEnabled } from "./health-DK6rAOhC.js";
+import { n as getStatusSummary } from "./status--iNVOTMO.js";
+import { s as setHeartbeatsEnabled } from "./health-BjwDRAdd.js";
 import { m as normalizeUpdateChannel } from "./update-check-CtckACbb.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-B5xZKIxK.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Duce7lam.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-BECodU1i.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-CIJRaVWl.js";
 import { t as resolveSystemRunCommand } from "./system-run-command-ByVa3txU.js";
 import { t as installSkill } from "./skills-install-D67isO1L.js";
-import { t as runGatewayUpdate } from "./update-runner-FgrqoxvV.js";
+import { t as runGatewayUpdate } from "./update-runner-CLKHrONW.js";
 import * as fs$2 from "node:fs";
 import fs from "node:fs";
 import * as os$1 from "node:os";
@@ -6853,7 +6853,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-RA8RurtC.js");
+			const { handleNodeEvent } = await import("./server-node-events-DFwGbkcO.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,

package/dist/{server-node-events-89R9Ryky.js → server-node-events-CKi12bol.js}

@@ -14,7 +14,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { Cn as enqueueSystemEvent, T as createOutboundSendDeps, dn as requestHeartbeatNow, dt as resolveOutboundTarget, x as agentCommand } from "./subagent-registry-Cb5e_x99.js";
+import { Cn as enqueueSystemEvent, T as createOutboundSendDeps, dn as requestHeartbeatNow, dt as resolveOutboundTarget, x as agentCommand } from "./subagent-registry-CXrOOgPW.js";
 import { d as updateSessionStore } from "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import { r as normalizeChannelId } from "./plugins-CwSlLxM8.js";
@@ -98,7 +98,7 @@ import "./onboard-helpers-_pit1NZW.js";
 import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-DJddAK3u.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-Bek3ANJa.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{server-node-events-RA8RurtC.js → server-node-events-DFwGbkcO.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { Et as agentCommand, Mt as resolveOutboundTarget, Pt as createOutboundSendDeps, b as resolveGatewaySessionStoreTarget, st as requestHeartbeatNow, v as loadSessionEntry, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys } from "./reply-D40cmAci.js";
+import { Et as agentCommand, Mt as resolveOutboundTarget, Pt as createOutboundSendDeps, b as resolveGatewaySessionStoreTarget, st as requestHeartbeatNow, v as loadSessionEntry, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys } from "./reply-DYnTEYoa.js";
 import { c as normalizeMainKey } from "./session-key-DCt45XZa.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -102,7 +102,7 @@ import "./pi-tools.policy-CIDBbw6x.js";
 import "./control-service-Bz7rxLWq.js";
 import "./stagger-BUClb97_.js";
 import "./channel-selection-DuWs0Aak.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-B5xZKIxK.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-BECodU1i.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts