@symerian/symi 2.6.0 → 2.6.2

package/dist/{server-methods-K-0MHs8x.js → server-methods-Bvl1xubo.js}

@@ -12,7 +12,7 @@ import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, i as isGatewayMessa
 import { c as writeJsonAtomic, o as createAsyncLock, s as readJsonFile } from "./pairing-token-Byh6drgn.js";
 import { s as pickPrimaryLanIPv4 } from "./net-DZ5Ayk-W.js";
 import { i as normalizeInputProvenance } from "./input-provenance-D0lNkCf6.js";
-import { $n as resolveTtsAutoMode, B as dispatchInboundMessage, C as resolveAgentDeliveryPlan, Cn as enqueueSystemEvent, Cr as onAgentEvent, D as createOutboundSendDeps, Dt as normalizeCronJobPatch, Et as normalizeCronJobCreate, G as BARE_SESSION_RESET_PROMPT, Gn as stopSubagentsForRequester, Gt as persistBrowserProxyFiles, In as resolveAgentTimeoutMs, Jn as resolveUserTimezone, Qn as resolveTtsApiKey, Sn as parseVerboseOverride, V as createReplyDispatcher, Vn as formatZonedTimestamp, Wn as isAbortTrigger, Wt as applyBrowserProxyPaths, Xn as isTtsEnabled, Y as abortEmbeddedPiRun, Yn as getTtsProvider, Z as waitForEmbeddedPiRunEnd, Zn as isTtsProviderConfigured, Zt as scheduleGatewaySigusr1Restart, a as listSubagentRunsForRequester, ar as textToSpeech, bn as applyModelOverrideToSessionEntry, c as clearSessionQueues, ct as resolveOutboundSessionRoute, dt as resolveOutboundTarget, en as unbindThreadBindingsBySessionKey, er as resolveTtsConfig, hn as resolveSendPolicy, i as listDescendantRunsForRequester, ir as setTtsProvider, m as loadSymiPlugins, mn as normalizeSendPolicy, nr as resolveTtsProviderOrder, or as OPENAI_TTS_MODELS, rn as loadProviderUsageSummary, rr as setTtsEnabled, sr as OPENAI_TTS_VOICES, st as ensureOutboundSessionEntry, tn as normalizeGroupActivation, tr as resolveTtsPrefsPath, w as resolveAgentOutboundTarget, wn as isSystemEventContextChanged, wr as registerAgentRunContext, wt as writeRestartSentinel, x as agentCommand, xn as applyVerboseOverride, yt as formatDoctorNonInteractiveHint } from "./subagent-registry-Cb5e_x99.js";
+import { $n as resolveTtsAutoMode, B as dispatchInboundMessage, C as resolveAgentDeliveryPlan, Cn as enqueueSystemEvent, Cr as onAgentEvent, D as createOutboundSendDeps, Dt as normalizeCronJobPatch, Et as normalizeCronJobCreate, G as BARE_SESSION_RESET_PROMPT, Gn as stopSubagentsForRequester, Gt as persistBrowserProxyFiles, In as resolveAgentTimeoutMs, Jn as resolveUserTimezone, Qn as resolveTtsApiKey, Sn as parseVerboseOverride, V as createReplyDispatcher, Vn as formatZonedTimestamp, Wn as isAbortTrigger, Wt as applyBrowserProxyPaths, Xn as isTtsEnabled, Y as abortEmbeddedPiRun, Yn as getTtsProvider, Z as waitForEmbeddedPiRunEnd, Zn as isTtsProviderConfigured, Zt as scheduleGatewaySigusr1Restart, a as listSubagentRunsForRequester, ar as textToSpeech, bn as applyModelOverrideToSessionEntry, c as clearSessionQueues, ct as resolveOutboundSessionRoute, dt as resolveOutboundTarget, en as unbindThreadBindingsBySessionKey, er as resolveTtsConfig, hn as resolveSendPolicy, i as listDescendantRunsForRequester, ir as setTtsProvider, m as loadSymiPlugins, mn as normalizeSendPolicy, nr as resolveTtsProviderOrder, or as OPENAI_TTS_MODELS, rn as loadProviderUsageSummary, rr as setTtsEnabled, sr as OPENAI_TTS_VOICES, st as ensureOutboundSessionEntry, tn as normalizeGroupActivation, tr as resolveTtsPrefsPath, w as resolveAgentOutboundTarget, wn as isSystemEventContextChanged, wr as registerAgentRunContext, wt as writeRestartSentinel, x as agentCommand, xn as applyVerboseOverride, yt as formatDoctorNonInteractiveHint } from "./subagent-registry-lbDgDwLy.js";
 import { F as resolveMainSessionKey, I as resolveMainSessionKeyFromConfig, J as normalizeSessionDeliveryFields, N as resolveAgentMainSessionKey, P as resolveExplicitAgentSessionKey, R as snapshotSessionOrigin, S as stripEnvelopeFromMessages, _ as capArrayByJsonBytes, d as updateSessionStore, g as archiveSessionTranscripts, h as archiveFileOnDisk, o as loadSessionStore, t as extractDeliveryInfo, v as readSessionMessages, x as resolveSessionTranscriptCandidates, y as readSessionPreviewItemsFromTranscript } from "./sessions-CJXnZVjR.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
 import { n as createBrowserRouteDispatcher } from "./with-timeout-Di0nddLY.js";
@@ -37,14 +37,14 @@ import { t as WizardCancelledError } from "./prompts-m1IJwIAx.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-cLP5YLeQ.js";
 import { t as buildChannelAccountSnapshot } from "./status-BUedPCLb.js";
 import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-Byo5jCLN.js";
-import { r as getStatusSummary } from "./status-CtNKWuzg.js";
-import { c as setHeartbeatsEnabled } from "./health-BpHgCv-u.js";
+import { r as getStatusSummary } from "./status-BRSo-LY3.js";
+import { c as setHeartbeatsEnabled } from "./health-CM1asUG8.js";
 import { m as normalizeUpdateChannel } from "./update-check-ZdimP1aU.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-DJddAK3u.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BcTeP94V.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-CKKHlj6j.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BfjAwFCr.js";
 import { t as resolveSystemRunCommand } from "./system-run-command-ByVa3txU.js";
 import { t as installSkill } from "./skills-install-1ZdwGTnh.js";
-import { t as runGatewayUpdate } from "./update-runner-DxpSPK-f.js";
+import { t as runGatewayUpdate } from "./update-runner-B8UmqtLI.js";
 import { spawnSync } from "node:child_process";
 import * as os$1 from "node:os";
 import os from "node:os";
@@ -6851,7 +6851,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-89R9Ryky.js");
+			const { handleNodeEvent } = await import("./server-node-events-Qp-gJMET.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,

package/dist/{server-methods-Cyw_WS3A.js → server-methods-Dds-iEoY.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir, t as CONFIG_PATH } from "./paths-Cqn-zk3M.js";
 import { D as isPlainObject, U as getResolvedLoggerSettings, r as clamp, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-EAliFiVK.js";
-import { $n as OPENAI_TTS_MODELS, Bn as registerAgentRunContext, Bt as abortEmbeddedPiRun, C as ensureOutboundSessionEntry, Et as agentCommand, Ft as normalizeSendPolicy, G as normalizeCronJobPatch, Gn as resolveTtsApiKey, H as writeRestartSentinel, Hn as getTtsProvider, Ht as waitForEmbeddedPiRunEnd, It as resolveSendPolicy, Jn as resolveTtsPrefsPath, Kn as resolveTtsAutoMode, L as formatDoctorNonInteractiveHint, Mn as listSubagentRunsForRequester, Mt as resolveOutboundTarget, N as scheduleGatewaySigusr1Restart, Ot as resolveAgentDeliveryPlan, Pr as resolveAgentTimeoutMs, Qn as textToSpeech, Rt as createOutboundSendDeps, Sr as isSystemEventContextChanged, Tn as stopSubagentsForRequester, Un as isTtsEnabled, Vn as resolveUserTimezone, W as normalizeCronJobCreate, Wn as isTtsProviderConfigured, Xn as setTtsEnabled, Yn as resolveTtsProviderOrder, Zn as setTtsProvider, _ as loadCombinedSessionStoreForGateway, at as persistBrowserProxyFiles, b as resolveGatewaySessionStoreTarget, br as parseVerboseOverride, c as clearSessionQueues, er as OPENAI_TTS_VOICES, ft as loadSymiPlugins, g as listSessionsFromStore, gt as loadProviderUsageSummary, h as listAgentsForGateway, in as unbindThreadBindingsBySessionKey, it as applyBrowserProxyPaths, jn as listDescendantRunsForRequester, kt as resolveAgentOutboundTarget, mn as createReplyDispatcher, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, p as canonicalizeSpawnedByForAgent, pn as dispatchInboundMessage, qn as resolveTtsConfig, v as loadSessionEntry, vr as applyModelOverrideToSessionEntry, w as resolveOutboundSessionRoute, wn as isAbortTrigger, x as resolveSessionModelRef, xn as formatZonedTimestamp, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys, yr as applyVerboseOverride, zn as onAgentEvent } from "./reply-D40cmAci.js";
+import { $n as OPENAI_TTS_MODELS, Bn as registerAgentRunContext, Bt as abortEmbeddedPiRun, C as ensureOutboundSessionEntry, Et as agentCommand, Ft as normalizeSendPolicy, G as normalizeCronJobPatch, Gn as resolveTtsApiKey, H as writeRestartSentinel, Hn as getTtsProvider, Ht as waitForEmbeddedPiRunEnd, It as resolveSendPolicy, Jn as resolveTtsPrefsPath, Kn as resolveTtsAutoMode, L as formatDoctorNonInteractiveHint, Mn as listSubagentRunsForRequester, Mt as resolveOutboundTarget, N as scheduleGatewaySigusr1Restart, Ot as resolveAgentDeliveryPlan, Pr as resolveAgentTimeoutMs, Qn as textToSpeech, Rt as createOutboundSendDeps, Sr as isSystemEventContextChanged, Tn as stopSubagentsForRequester, Un as isTtsEnabled, Vn as resolveUserTimezone, W as normalizeCronJobCreate, Wn as isTtsProviderConfigured, Xn as setTtsEnabled, Yn as resolveTtsProviderOrder, Zn as setTtsProvider, _ as loadCombinedSessionStoreForGateway, at as persistBrowserProxyFiles, b as resolveGatewaySessionStoreTarget, br as parseVerboseOverride, c as clearSessionQueues, er as OPENAI_TTS_VOICES, ft as loadSymiPlugins, g as listSessionsFromStore, gt as loadProviderUsageSummary, h as listAgentsForGateway, in as unbindThreadBindingsBySessionKey, it as applyBrowserProxyPaths, jn as listDescendantRunsForRequester, kt as resolveAgentOutboundTarget, mn as createReplyDispatcher, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, p as canonicalizeSpawnedByForAgent, pn as dispatchInboundMessage, qn as resolveTtsConfig, v as loadSessionEntry, vr as applyModelOverrideToSessionEntry, w as resolveOutboundSessionRoute, wn as isAbortTrigger, x as resolveSessionModelRef, xn as formatZonedTimestamp, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys, yr as applyVerboseOverride, zn as onAgentEvent } from "./reply-05js8eGB.js";
 import { S as parseAgentSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, o as classifySessionKeyShape, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey } from "./session-key-DCt45XZa.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { C as createInternalHookEvent, T as triggerInternalHook, d as getActivePluginRegistry, r as DEFAULT_CHAT_CHANNEL, t as CHANNEL_IDS } from "./registry-Cja8eT7G.js";
@@ -39,14 +39,14 @@ import { t as WizardCancelledError } from "./prompts-Xu2Sveka.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BcGbMZD1.js";
 import { t as buildChannelAccountSnapshot } from "./status-BrV-afZE.js";
 import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-CrITRV6w.js";
-import { n as getStatusSummary } from "./status-DHJLMwQN.js";
-import { s as setHeartbeatsEnabled } from "./health-DK6rAOhC.js";
+import { n as getStatusSummary } from "./status-BATOXGRi.js";
+import { s as setHeartbeatsEnabled } from "./health-CDGOsNeD.js";
 import { m as normalizeUpdateChannel } from "./update-check-CtckACbb.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-B5xZKIxK.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Duce7lam.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-DA7UMNQH.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BmdFH4J5.js";
 import { t as resolveSystemRunCommand } from "./system-run-command-ByVa3txU.js";
 import { t as installSkill } from "./skills-install-D67isO1L.js";
-import { t as runGatewayUpdate } from "./update-runner-FgrqoxvV.js";
+import { t as runGatewayUpdate } from "./update-runner-CWJ4pC1b.js";
 import * as fs$2 from "node:fs";
 import fs from "node:fs";
 import * as os$1 from "node:os";
@@ -6853,7 +6853,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-RA8RurtC.js");
+			const { handleNodeEvent } = await import("./server-node-events-qGqpsPxm.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,

package/dist/{server-node-events-89R9Ryky.js → server-node-events-Qp-gJMET.js}

@@ -14,7 +14,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { Cn as enqueueSystemEvent, T as createOutboundSendDeps, dn as requestHeartbeatNow, dt as resolveOutboundTarget, x as agentCommand } from "./subagent-registry-Cb5e_x99.js";
+import { Cn as enqueueSystemEvent, T as createOutboundSendDeps, dn as requestHeartbeatNow, dt as resolveOutboundTarget, x as agentCommand } from "./subagent-registry-lbDgDwLy.js";
 import { d as updateSessionStore } from "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import { r as normalizeChannelId } from "./plugins-CwSlLxM8.js";
@@ -98,7 +98,7 @@ import "./onboard-helpers-_pit1NZW.js";
 import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-DJddAK3u.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-CKKHlj6j.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{server-node-events-RA8RurtC.js → server-node-events-qGqpsPxm.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { Et as agentCommand, Mt as resolveOutboundTarget, Pt as createOutboundSendDeps, b as resolveGatewaySessionStoreTarget, st as requestHeartbeatNow, v as loadSessionEntry, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys } from "./reply-D40cmAci.js";
+import { Et as agentCommand, Mt as resolveOutboundTarget, Pt as createOutboundSendDeps, b as resolveGatewaySessionStoreTarget, st as requestHeartbeatNow, v as loadSessionEntry, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys } from "./reply-05js8eGB.js";
 import { c as normalizeMainKey } from "./session-key-DCt45XZa.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -102,7 +102,7 @@ import "./pi-tools.policy-CIDBbw6x.js";
 import "./control-service-Bz7rxLWq.js";
 import "./stagger-BUClb97_.js";
 import "./channel-selection-DuWs0Aak.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-B5xZKIxK.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-DA7UMNQH.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{status-DHJLMwQN.js → status-BATOXGRi.js}

@@ -1,6 +1,6 @@
 import { u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, k as info, z as isRich } from "./utils-B-0b9bGM.js";
-import { B as summarizeRestartSentinel, Jt as sha256HexPrefix, _t as formatUsageReportLines, a as buildChannelSummary, gt as loadProviderUsageSummary, h as listAgentsForGateway, m as classifySessionKey, o as buildChannelAccountSnapshot, pr as lookupContextTokens, s as formatChannelAllowFrom, wr as peekSystemEvents, x as resolveSessionModelRef, z as readRestartSentinel } from "./reply-D40cmAci.js";
+import { B as summarizeRestartSentinel, Jt as sha256HexPrefix, _t as formatUsageReportLines, a as buildChannelSummary, gt as loadProviderUsageSummary, h as listAgentsForGateway, m as classifySessionKey, o as buildChannelAccountSnapshot, pr as lookupContextTokens, s as formatChannelAllowFrom, wr as peekSystemEvents, x as resolveSessionModelRef, z as readRestartSentinel } from "./reply-05js8eGB.js";
 import { S as parseAgentSessionKey } from "./session-key-DCt45XZa.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { n as runExec } from "./exec-CWkblSrI.js";
@@ -28,7 +28,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-CR9445g5.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-BAMlsVVX.js";
 import { t as renderTable } from "./table-BTgkRafz.js";
 import { a as resolveGatewayProbeAuth$1, c as probeGateway, t as runSecurityAudit } from "./audit-CrITRV6w.js";
-import { a as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-DK6rAOhC.js";
+import { a as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-CDGOsNeD.js";
 import { g as resolveUpdateChannelDisplay, i as formatGitInstallLabel, m as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-CtckACbb.js";
 import { t as resolveNodeService } from "./node-service-Cxz4e-Qd.js";
 import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-yQZNwAF2.js";

package/dist/{status-CtNKWuzg.js → status-BRSo-LY3.js}

@@ -9,7 +9,7 @@ import { c as resolveAgentWorkspaceDir } from "./agent-scope-D-jRCY0d.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-DKXJ-tbi.js";
 import { H as VERSION, i as loadConfig, o as readConfigFileSnapshot } from "./config-DHBLS1Hl.js";
 import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-BcE47FtD.js";
-import { En as peekSystemEvents, St as summarizeRestartSentinel, cn as buildChannelAccountSnapshot, in as formatUsageReportLines, ln as formatChannelAllowFrom, nt as sha256HexPrefix, rn as loadProviderUsageSummary, sn as buildChannelSummary, xt as readRestartSentinel } from "./subagent-registry-Cb5e_x99.js";
+import { En as peekSystemEvents, St as summarizeRestartSentinel, cn as buildChannelAccountSnapshot, in as formatUsageReportLines, ln as formatChannelAllowFrom, nt as sha256HexPrefix, rn as loadProviderUsageSummary, sn as buildChannelSummary, xt as readRestartSentinel } from "./subagent-registry-lbDgDwLy.js";
 import { F as resolveMainSessionKey, j as resolveFreshSessionTotalTokens, o as loadSessionStore } from "./sessions-CJXnZVjR.js";
 import { n as listChannelPlugins } from "./plugins-CwSlLxM8.js";
 import { o as getTailnetHostname, s as readTailscaleStatusJson } from "./tailscale-CbbvYNVw.js";
@@ -29,7 +29,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-hFVEC3wO.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-CS1ov_hH.js";
 import { t as renderTable } from "./table-D01d2GuY.js";
 import { a as resolveGatewayProbeAuth$1, c as probeGateway, t as runSecurityAudit } from "./audit-Byo5jCLN.js";
-import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-BpHgCv-u.js";
+import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-CM1asUG8.js";
 import { g as resolveUpdateChannelDisplay, i as formatGitInstallLabel, m as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-ZdimP1aU.js";
 import { t as resolveNodeService } from "./node-service-fcZExd22.js";
 import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-DVLB9DNB.js";

package/dist/{status-Kv_hsY8N.js → status-BqQ9mm64.js}

@@ -1,4 +1,4 @@
-import { dt as createPluginLoaderLogger, ft as loadSymiPlugins } from "./reply-D40cmAci.js";
+import { dt as createPluginLoaderLogger, ft as loadSymiPlugins } from "./reply-05js8eGB.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { D as resolveDefaultAgentWorkspaceDir, c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-CgUHAtCo.js";
 import { i as loadConfig } from "./config-CHwyw6l5.js";

package/dist/{status-BSMEjz4q.js → status-CfYa1Q9K.js}

@@ -1,7 +1,7 @@
 import { o as createSubsystemLogger } from "./entry.js";
 import { D as resolveDefaultAgentWorkspaceDir, c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-D-jRCY0d.js";
 import { i as loadConfig } from "./config-DHBLS1Hl.js";
-import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-Cb5e_x99.js";
+import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-lbDgDwLy.js";
 
 //#region src/plugins/status.ts
 const log = createSubsystemLogger("plugins");

package/dist/{subagent-registry-Cb5e_x99.js → subagent-registry-lbDgDwLy.js}

@@ -32327,7 +32327,8 @@ const BUILTIN_PROFILES = [
 				"<end_of_turn>"
 			],
 			suppressMonologue: true,
-			hasStructuredThinking: false
+			hasStructuredThinking: false,
+			validateToolArgs: true
 		},
 		promptAdditions: [
 			"CRITICAL OUTPUT RULES:",
@@ -32337,7 +32338,8 @@ const BUILTIN_PROFILES = [
 			"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
 			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
 			"- If you need to verify your work, do so before writing your response, not after.",
-			"- Send brief progress updates on long tasks so the user knows you are active."
+			"- Send brief progress updates on long tasks so the user knows you are active.",
+			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
 		],
 		ui: {
 			badge: "Local",
@@ -32361,7 +32363,8 @@ const BUILTIN_PROFILES = [
 		filters: {
 			stripPatterns: [],
 			suppressMonologue: false,
-			hasStructuredThinking: true
+			hasStructuredThinking: true,
+			validateToolArgs: false
 		},
 		promptAdditions: [],
 		ui: {
@@ -32395,7 +32398,8 @@ const BUILTIN_PROFILES = [
 				"^\\s*<bos>\\s*"
 			],
 			suppressMonologue: true,
-			hasStructuredThinking: false
+			hasStructuredThinking: false,
+			validateToolArgs: true
 		},
 		promptAdditions: [
 			"CRITICAL OUTPUT RULES:",
@@ -32406,7 +32410,8 @@ const BUILTIN_PROFILES = [
 			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
 			"- If you need to verify your work, do so before writing your response, not after.",
 			"- Keep planning and reasoning internal. Only speak when you have a result or need user input.",
-			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active."
+			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active.",
+			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
 		],
 		ui: {
 			badge: "CoreWeave",
@@ -32434,7 +32439,8 @@ const FALLBACK_PROFILE = {
 	filters: {
 		stripPatterns: [],
 		suppressMonologue: false,
-		hasStructuredThinking: false
+		hasStructuredThinking: false,
+		validateToolArgs: false
 	},
 	promptAdditions: [],
 	ui: {
@@ -32861,6 +32867,19 @@ function stripModelTokensAggressive(text, modelId) {
 	}
 	return result;
 }
+/**
+* Clean residual fragments left after aggressive token stripping.
+* After `<|` and `|>` are removed, orphaned `<`, `"`, `|` can remain
+* at string boundaries (e.g., `<<|"|uname -a` → `<"uname -a`).
+*
+* Conservative: only trims leading junk before what looks like a command,
+* and trailing junk. Does NOT touch content in the middle of the string.
+* Preserves heredoc syntax (`<<EOF`, `<<"EOF"`) via negative lookahead.
+*/
+function cleanResidualTokenFragments(text) {
+	if (!text) return text;
+	return text.replace(/^[<"|]+(?!<[A-Z_])(?=[a-zA-Z0-9/~$.(])/gm, "").replace(/[<"|]+$/gm, "").trim();
+}
 
 //#endregion
 //#region src/agents/output-normalizer.ts
@@ -32946,10 +32965,14 @@ function detectRepetition(text, minBlock) {
 	const searchStart = sampleStart + minBlock;
 	return text.indexOf(sample, searchStart) >= 0;
 }
+function sanitizeStringValue(value, modelId) {
+	const stripped = stripModelTokensAggressive(value, modelId);
+	return isGemmaModel$1(modelId) ? cleanResidualTokenFragments(stripped) : stripped;
+}
 function sanitizeArgs(args, modelId) {
 	const result = {};
-	for (const [key, value] of Object.entries(args)) if (typeof value === "string") result[key] = stripModelTokensAggressive(value, modelId);
-	else if (Array.isArray(value)) result[key] = value.map((item) => typeof item === "string" ? stripModelTokensAggressive(item, modelId) : item && typeof item === "object" ? sanitizeArgs(item, modelId) : item);
+	for (const [key, value] of Object.entries(args)) if (typeof value === "string") result[key] = sanitizeStringValue(value, modelId);
+	else if (Array.isArray(value)) result[key] = value.map((item) => typeof item === "string" ? sanitizeStringValue(item, modelId) : item && typeof item === "object" ? sanitizeArgs(item, modelId) : item);
 	else if (value && typeof value === "object") result[key] = sanitizeArgs(value, modelId);
 	else result[key] = value;
 	return result;
@@ -35243,7 +35266,7 @@ async function recordLoopOutcome(args) {
 	if (!args.ctx?.sessionKey) return;
 	try {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-CIjIGxEE.js").then((n) => n.n);
-		const { recordToolCallOutcome } = await import("./tool-loop-detection-BU3fbtCd.js");
+		const { recordToolCallOutcome } = await import("./tool-loop-detection-D7qjFnRh.js");
 		recordToolCallOutcome(getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -35265,7 +35288,7 @@ async function runBeforeToolCallHook(args) {
 	if (args.ctx?.sessionKey) {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-CIjIGxEE.js").then((n) => n.n);
 		const { logToolLoopAction } = await import("./diagnostic-Ci8Xsc_Y.js").then((n) => n.n);
-		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-BU3fbtCd.js");
+		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-D7qjFnRh.js");
 		const sessionState = getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -35536,6 +35559,135 @@ function toClientToolDefinitions(tools, onClientToolCall, hookContext) {
 	});
 }
 
+//#endregion
+//#region src/agents/pi-tools.validate.ts
+/**
+* Tool argument validation — validates that exec/bash commands contain
+* valid shell syntax after model token sanitization.
+*
+* Gated on ModelProfile.filters.validateToolArgs — only active for
+* models known to leak control tokens into structured output (Gemma, Ollama).
+*
+* @module
+*/
+/**
+* Validate that a command string contains extractable valid shell syntax.
+* Returns the cleaned command if valid, or an error reason if not.
+*
+* Does NOT attempt to parse the full shell grammar — just checks for
+* obvious corruption (residual control tokens, empty commands).
+* Preserves heredocs, redirects, pipes, and other legitimate shell syntax.
+*/
+function validateShellCommand(command) {
+	if (!command || !command.trim()) return {
+		valid: false,
+		cleaned: "",
+		reason: "empty command"
+	};
+	let cleaned = cleanResidualTokenFragments(command);
+	if (/(?:^|[^<])<\|/.test(cleaned) || /\|>/.test(cleaned)) {
+		cleaned = cleaned.replace(/<\|[^|>]*(?:\|>)?/g, "").trim();
+		cleaned = cleanResidualTokenFragments(cleaned);
+	}
+	if (!cleaned || !cleaned.trim()) return {
+		valid: false,
+		cleaned: "",
+		reason: "command is empty after removing control tokens"
+	};
+	if (!/[a-zA-Z0-9_/.~-]/.test(cleaned)) return {
+		valid: false,
+		cleaned,
+		reason: "no recognizable shell command found"
+	};
+	return {
+		valid: true,
+		cleaned: cleaned.trim()
+	};
+}
+
+//#endregion
+//#region src/agents/pi-tools.validate-wrapper.ts
+const EXEC_TOOL_NAMES = new Set(["exec", "bash"]);
+const FILE_TOOL_NAMES = new Set([
+	"write",
+	"read",
+	"edit",
+	"patch",
+	"file_write",
+	"file_edit",
+	"write_file",
+	"edit_file",
+	"create_file"
+]);
+const FILE_PATH_KEYS = [
+	"file_path",
+	"path",
+	"filePath"
+];
+/**
+* Wrap tools with argument validation. Exec/bash commands and file paths
+* are validated. Other tools pass through unchanged.
+*
+* Call this AFTER tools are created and the model profile is resolved.
+*/
+function wrapToolsWithArgValidation(tools, profile) {
+	if (!profile.filters?.validateToolArgs) return tools;
+	return tools.map((tool) => wrapToolWithArgValidation(tool));
+}
+/**
+* Clean a file path by stripping control token fragments.
+* Returns null if the path is irreparably corrupted (empty after cleanup).
+*/
+function cleanFilePath(filePath) {
+	let cleaned = filePath.replace(/<\|[^|>]*(?:\|>)?/g, "");
+	cleaned = cleanResidualTokenFragments(cleaned);
+	cleaned = cleaned.trim();
+	if (!cleaned || !/[a-zA-Z0-9/._~-]/.test(cleaned)) return {
+		valid: false,
+		cleaned
+	};
+	return {
+		valid: true,
+		cleaned
+	};
+}
+/**
+* Wrap a single tool with argument validation.
+*/
+function wrapToolWithArgValidation(tool) {
+	const toolName = (tool.name ?? "").toLowerCase().trim();
+	const isExecTool = EXEC_TOOL_NAMES.has(toolName);
+	const isFileTool = FILE_TOOL_NAMES.has(toolName);
+	if (!isExecTool && !isFileTool) return tool;
+	const originalExecute = tool.execute;
+	return {
+		...tool,
+		execute(toolCallId, params, ...rest) {
+			if (isExecTool) {
+				const command = params.command ?? params.cmd;
+				if (typeof command !== "string") return originalExecute.call(tool, toolCallId, params, ...rest);
+				const result = validateShellCommand(command);
+				if (!result.valid) return Promise.resolve({ output: `Error: ${result.reason}. The command appears to contain model control tokens. Please provide a clean shell command without any <|, |>, or XML-like tags. Only valid shell syntax is accepted.` });
+				if (result.cleaned !== command) return originalExecute.call(tool, toolCallId, {
+					...params,
+					command: result.cleaned
+				}, ...rest);
+				return originalExecute.call(tool, toolCallId, params, ...rest);
+			}
+			const pathKey = FILE_PATH_KEYS.find((k) => typeof params[k] === "string");
+			if (!pathKey) return originalExecute.call(tool, toolCallId, params, ...rest);
+			const rawPath = params[pathKey];
+			if (!rawPath.includes("<|") && !rawPath.includes("|>") && !/^[<"|]/.test(rawPath)) return originalExecute.call(tool, toolCallId, params, ...rest);
+			const pathResult = cleanFilePath(rawPath);
+			if (!pathResult.valid) return Promise.resolve({ output: `Error: file path "${rawPath}" contains model control tokens and could not be cleaned. Please provide a clean file path without any <|, |>, or XML-like tags.` });
+			return originalExecute.call(tool, toolCallId, {
+				...params,
+				[pathKey]: pathResult.cleaned
+			}, ...rest);
+		}
+	};
+}
+
 //#endregion
 //#region src/agents/plan-mode.ts
 /**
@@ -39488,10 +39640,11 @@ async function runEmbeddedAttempt(params) {
 				await resourceLoader.reload();
 			}
 			const hookRunner = getGlobalHookRunner();
-			const { builtInTools, customTools } = splitSdkTools({
+			const { builtInTools: rawBuiltInTools, customTools } = splitSdkTools({
 				tools,
 				sandboxEnabled: !!sandbox?.enabled
 			});
+			const builtInTools = wrapToolsWithArgValidation(rawBuiltInTools, modelProfile);
 			let clientToolCallDetected = null;
 			const clientToolLoopDetection = resolveToolLoopDetectionConfig({
 				cfg: params.config,
@@ -39700,6 +39853,10 @@ async function runEmbeddedAttempt(params) {
 				});
 			};
 			const streamMonitor = createStreamMonitor(modelProfile);
+			const TOOL_ERROR_ABORT_THRESHOLD = 5;
+			const TOOL_ERROR_WARN_THRESHOLD = 3;
+			let consecutiveToolErrors = 0;
+			let lastErrorToolName = "";
 			const subscription = subscribeEmbeddedPiSession({
 				session: activeSession,
 				runId: params.runId,
@@ -39721,6 +39878,25 @@ async function runEmbeddedAttempt(params) {
 				onAgentEvent: (evt) => {
 					armSymipulseTimer();
 					params.onAgentEvent?.(evt);
+					if (evt.stream === "tool" && !aborted) {
+						const phase = typeof evt.data?.phase === "string" ? evt.data.phase : "";
+						const toolName = typeof evt.data?.name === "string" ? evt.data.name : "";
+						const isError = evt.data?.isError === true;
+						if (phase === "result" && toolName) {
+							if (isError && toolName === lastErrorToolName) consecutiveToolErrors++;
+							else if (isError) {
+								consecutiveToolErrors = 1;
+								lastErrorToolName = toolName;
+							} else {
+								consecutiveToolErrors = 0;
+								lastErrorToolName = "";
+							}
+							if (consecutiveToolErrors >= TOOL_ERROR_ABORT_THRESHOLD) {
+								log$4.error(`Agent-loop circuit breaker: ${toolName} failed ${consecutiveToolErrors} consecutive times. Aborting run ${params.runId}.`);
+								abortRun(false, /* @__PURE__ */ new Error(`Tool ${toolName} failed ${consecutiveToolErrors} consecutive times. The model may be generating corrupted tool arguments. Run aborted to prevent infinite loop.`));
+							} else if (consecutiveToolErrors === TOOL_ERROR_WARN_THRESHOLD) log$4.warn(`Agent-loop tool error warning: ${toolName} failed ${consecutiveToolErrors} times consecutively. runId=${params.runId}`);
+						}
+					}
 					if (evt.stream === "assistant" && typeof evt.data?.text === "string" && !aborted) {
 						streamMonitor.onChunk(evt.data.text);
 						if (streamMonitor.shouldStop()) log$4.debug(`stream monitor detection (log-only, no abort): runId=${params.runId} reason=${streamMonitor.getStopReason()}`);
@@ -52836,7 +53012,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-Czp0JS6-.js");
+			const { sendMessageWhatsApp } = await import("./web-CSrDbJJ7.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -68150,7 +68326,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-Czp0JS6-.js");
+	webChannelPromise ??= import("./web-CSrDbJJ7.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{tool-loop-detection-BgbtzUGc.js → tool-loop-detection-C7TCF2V2.js}

@@ -9,6 +9,8 @@ const TOOL_CALL_HISTORY_SIZE = 30;
 const WARNING_THRESHOLD = 10;
 const CRITICAL_THRESHOLD = 20;
 const GLOBAL_CIRCUIT_BREAKER_THRESHOLD = 30;
+const CONSECUTIVE_FAILURE_WARNING_THRESHOLD = 3;
+const CONSECUTIVE_FAILURE_CRITICAL_THRESHOLD = 5;
 const DEFAULT_LOOP_DETECTION_CONFIG = {
 	enabled: false,
 	historySize: TOOL_CALL_HISTORY_SIZE,
@@ -18,8 +20,11 @@ const DEFAULT_LOOP_DETECTION_CONFIG = {
 	detectors: {
 		genericRepeat: true,
 		knownPollNoProgress: true,
-		pingPong: true
-	}
+		pingPong: true,
+		consecutiveFailure: true
+	},
+	consecutiveFailureWarningThreshold: CONSECUTIVE_FAILURE_WARNING_THRESHOLD,
+	consecutiveFailureCriticalThreshold: CONSECUTIVE_FAILURE_CRITICAL_THRESHOLD
 };
 function asPositiveInt(value, fallback) {
 	if (typeof value !== "number" || !Number.isInteger(value) || value <= 0) return fallback;
@@ -37,10 +42,13 @@ function resolveLoopDetectionConfig(config) {
 		warningThreshold,
 		criticalThreshold,
 		globalCircuitBreakerThreshold,
+		consecutiveFailureWarningThreshold: asPositiveInt(config?.consecutiveFailureWarningThreshold, DEFAULT_LOOP_DETECTION_CONFIG.consecutiveFailureWarningThreshold),
+		consecutiveFailureCriticalThreshold: asPositiveInt(config?.consecutiveFailureCriticalThreshold, DEFAULT_LOOP_DETECTION_CONFIG.consecutiveFailureCriticalThreshold),
 		detectors: {
 			genericRepeat: config?.detectors?.genericRepeat ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.genericRepeat,
 			knownPollNoProgress: config?.detectors?.knownPollNoProgress ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.knownPollNoProgress,
-			pingPong: config?.detectors?.pingPong ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.pingPong
+			pingPong: config?.detectors?.pingPong ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.pingPong,
+			consecutiveFailure: (config?.detectors)?.consecutiveFailure ?? DEFAULT_LOOP_DETECTION_CONFIG.detectors.consecutiveFailure
 		}
 	};
 }
@@ -218,6 +226,22 @@ function canonicalPairKey(signatureA, signatureB) {
 	return [signatureA, signatureB].toSorted().join("|");
 }
 /**
+* Count consecutive error results for a specific tool, walking backward from
+* the most recent call. A success or a call to a different tool resets the streak.
+* Only counts entries that have been resolved (have a resultHash or isError flag).
+*/
+function getConsecutiveFailureStreak(history, toolName) {
+	let count = 0;
+	for (let i = history.length - 1; i >= 0; i--) {
+		const entry = history[i];
+		if (entry.toolName !== toolName) break;
+		if (entry.resultHash === void 0 && entry.isError === void 0) break;
+		if (!entry.isError) break;
+		count++;
+	}
+	return count;
+}
+/**
 * Detect if an agent is stuck in a repetitive tool call loop.
 * Checks if the same tool+params combination has been called excessively.
 */
@@ -230,6 +254,31 @@ function detectToolCallLoop(state, toolName, params, config) {
 	const noProgressStreak = noProgress.count;
 	const knownPollTool = isKnownPollToolCall(toolName, params);
 	const pingPong = getPingPongStreak(history, currentHash);
+	if (resolvedConfig.detectors.consecutiveFailure) {
+		const failureStreak = getConsecutiveFailureStreak(history, toolName);
+		if (failureStreak >= resolvedConfig.consecutiveFailureCriticalThreshold) {
+			log.error(`Consecutive failure circuit breaker: ${toolName} failed ${failureStreak} times in a row`);
+			return {
+				stuck: true,
+				level: "critical",
+				detector: "consecutive_failure",
+				count: failureStreak,
+				message: `CRITICAL: ${toolName} has failed ${failureStreak} consecutive times. Stop calling this tool. Explain to the user what you were trying to do and why it failed.`,
+				warningKey: `consecutive-failure:${toolName}`
+			};
+		}
+		if (failureStreak >= resolvedConfig.consecutiveFailureWarningThreshold) {
+			log.warn(`Consecutive failure warning: ${toolName} failed ${failureStreak} times in a row`);
+			return {
+				stuck: true,
+				level: "warning",
+				detector: "consecutive_failure",
+				count: failureStreak,
+				message: `WARNING: You have failed to call ${toolName} ${failureStreak} times consecutively. Stop retrying and explain to the user what you were trying to do. The tool arguments may contain invalid syntax from model control tokens.`,
+				warningKey: `consecutive-failure:${toolName}`
+			};
+		}
+	}
 	if (noProgressStreak >= resolvedConfig.globalCircuitBreakerThreshold) {
 		log.error(`Global circuit breaker triggered: ${toolName} repeated ${noProgressStreak} times with no progress`);
 		return {
@@ -334,6 +383,7 @@ function recordToolCallOutcome(state, params) {
 		if (call.toolName !== params.toolName || call.argsHash !== argsHash) continue;
 		if (call.resultHash !== void 0) continue;
 		call.resultHash = resultHash;
+		call.isError = params.error !== void 0;
 		matched = true;
 		break;
 	}