@symerian/symi 2.6.1 → 2.6.2

package/dist/{register.maintenance-CITur3O_.js → register.maintenance-CXbxRtWI.js}

@@ -15,7 +15,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CXrOOgPW.js";
+import "./subagent-registry-lbDgDwLy.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -104,27 +104,27 @@ import "./catalog-DLQFKucJ.js";
 import "./note-DDecZomM.js";
 import "./plugin-auto-enable-D6ENR3Xg.js";
 import "./channels-status-issues-c7qZbYG5.js";
-import "./register.subclis-B2dGWFur.js";
-import "./command-registry-CHtN2HeK.js";
+import "./register.subclis-DOiZocR6.js";
+import "./command-registry-9EhYc6da.js";
 import "./program-context-CqzR_m-7.js";
-import "./completion-cli-Cov6N3BO.js";
+import "./completion-cli-BFZv3K5D.js";
 import "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import "./systemd-DlMdyFDY.js";
 import { t as resolveGatewayService } from "./service-Cm9j9WzQ.js";
 import "./systemd-hints-sQipWGd1.js";
 import "./diagnostics-CS1ov_hH.js";
-import "./health-C5XJPwpt.js";
+import "./health-CM1asUG8.js";
 import "./control-ui-assets-BseSWee1.js";
 import "./update-check-ZdimP1aU.js";
 import "./dm-policy-shared-DJ-61hCT.js";
-import "./update-runner-BQxFFCGc.js";
+import "./update-runner-B8UmqtLI.js";
 import "./logging-BGewRZy0.js";
 import "./doctor-config-flow-CA3eiKhd.js";
 import "./systemd-linger-DA_LW52P.js";
 import "./health-format-CzgUHmmX.js";
-import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-QaS2zul_.js";
-import "./doctor-completion-BKKzstt6.js";
+import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-B_lFTtqp.js";
+import "./doctor-completion-BunqvoqZ.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { cancel, confirm, isCancel, multiselect } from "@clack/prompts";

package/dist/{register.maintenance-cs-A4kHF.js → register.maintenance-DyEJx7NY.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir, i as isNixMode, m as resolveOAuthDir, o as resolveConfigPath, u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, _ as resolveHomeDir, x as shortenHomeInString, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-DYnTEYoa.js";
+import "./reply-05js8eGB.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -103,30 +103,30 @@ import "./control-service-Bz7rxLWq.js";
 import "./stagger-BUClb97_.js";
 import "./channel-selection-DuWs0Aak.js";
 import "./runtime-guard-B37eizu-.js";
-import "./program-context-DaNGrTOm.js";
+import "./program-context-CY1jWc5A.js";
 import "./catalog-RiADx7MA.js";
 import "./skills-status-CURJKnyY.js";
 import { t as copyToClipboard } from "./clipboard-Cg3cin13.js";
 import "./note-DeHoW7xO.js";
 import "./plugin-auto-enable-BzX1uAKy.js";
 import "./channels-status-issues-B_kBkl_u.js";
-import "./completion-cli-C8y_J5KC.js";
+import "./completion-cli-CCeQlMlC.js";
 import "./daemon-runtime-2mwX-jqj.js";
 import "./systemd-riq8uNJQ.js";
 import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
 import "./systemd-hints-BR6gChwm.js";
 import "./diagnostics-BAMlsVVX.js";
-import "./health-BjwDRAdd.js";
+import "./health-CDGOsNeD.js";
 import "./control-ui-assets-Z947tKLt.js";
 import "./update-check-CtckACbb.js";
 import "./dm-policy-shared-Bh3TbexU.js";
-import "./update-runner-CLKHrONW.js";
+import "./update-runner-CWJ4pC1b.js";
 import "./logging-BzzwiKjv.js";
 import "./doctor-config-flow-QnaBd8kL.js";
 import "./systemd-linger-aQ75ZlXY.js";
 import "./health-format-DSwnXZPU.js";
-import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-YOj4xigd.js";
-import "./doctor-completion-D7CDLFLg.js";
+import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-BEnZY8wI.js";
+import "./doctor-completion-CLeX1kaN.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { cancel, confirm, isCancel, multiselect } from "@clack/prompts";

package/dist/{register.message--RhtnEYn.js → register.message-C7Yh1uky.js}

@@ -13,7 +13,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { E as createDefaultDeps, Rt as CHANNEL_TARGETS_DESCRIPTION, T as createOutboundSendDeps, ht as CHANNEL_MESSAGE_ACTION_NAMES, ot as runMessageAction, pt as formatTargetDisplay, zt as CHANNEL_TARGET_DESCRIPTION } from "./subagent-registry-CXrOOgPW.js";
+import { E as createDefaultDeps, Rt as CHANNEL_TARGETS_DESCRIPTION, T as createOutboundSendDeps, ht as CHANNEL_MESSAGE_ACTION_NAMES, ot as runMessageAction, pt as formatTargetDisplay, zt as CHANNEL_TARGET_DESCRIPTION } from "./subagent-registry-lbDgDwLy.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import { t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
@@ -97,7 +97,7 @@ import "./onboard-helpers-_pit1NZW.js";
 import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-5yf-hu_W.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-DXWJkJX6.js";
 import { t as collectOption } from "./helpers-ITexi1_a.js";
 import { t as renderTable } from "./table-D01d2GuY.js";
 

package/dist/{register.message-PIaHm2pZ.js → register.message-CiN_pt6K.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { B as theme, O as danger, P as setVerbose, z as isRich } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { D as CHANNEL_MESSAGE_ACTION_NAMES, Lt as createDefaultDeps, Pt as createOutboundSendDeps, S as runMessageAction, T as formatTargetDisplay, nt as CHANNEL_TARGETS_DESCRIPTION, rt as CHANNEL_TARGET_DESCRIPTION } from "./reply-DYnTEYoa.js";
+import { D as CHANNEL_MESSAGE_ACTION_NAMES, Lt as createDefaultDeps, Pt as createOutboundSendDeps, S as runMessageAction, T as formatTargetDisplay, nt as CHANNEL_TARGETS_DESCRIPTION, rt as CHANNEL_TARGET_DESCRIPTION } from "./reply-05js8eGB.js";
 import { o as getChatChannelMeta, u as normalizeChatChannelId } from "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -102,7 +102,7 @@ import "./control-service-Bz7rxLWq.js";
 import "./stagger-BUClb97_.js";
 import "./channel-selection-DuWs0Aak.js";
 import { t as collectOption } from "./helpers-By2rxBQ5.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-2zUJMasm.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-CNf1_8hj.js";
 import { t as renderTable } from "./table-BTgkRafz.js";
 
 //#region src/infra/outbound/format.ts

package/dist/{register.onboard-CTJQoDcK.js → register.onboard-BWaRkbei.js}

@@ -13,7 +13,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CXrOOgPW.js";
+import "./subagent-registry-lbDgDwLy.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -103,8 +103,8 @@ import "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import "./systemd-DlMdyFDY.js";
 import "./service-Cm9j9WzQ.js";
-import "./health-C5XJPwpt.js";
-import "./onboarding-CvBDWlBJ.js";
+import "./health-CM1asUG8.js";
+import "./onboarding-jhZxQcZ3.js";
 import "./shared-D8K9MkWg.js";
 import "./auth-token-Cmrk2TPo.js";
 import "./logging-BGewRZy0.js";
@@ -113,7 +113,7 @@ import "./openai-model-default-DAwnTUcK.js";
 import "./model-picker-D5nCutGW.js";
 import "./systemd-linger-DA_LW52P.js";
 import "./onboard-custom-DdWPfzJO.js";
-import { n as ONBOARD_PROVIDER_AUTH_FLAGS, t as onboardCommand } from "./onboard-Bm-pmstf.js";
+import { n as ONBOARD_PROVIDER_AUTH_FLAGS, t as onboardCommand } from "./onboard-DcnGZKZX.js";
 
 //#region src/cli/program/register.onboard.ts
 function resolveInstallDaemonFlag(command, opts) {

package/dist/{register.onboard-DucZgrF7.js → register.onboard-e_2hc2Rm.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { B as theme } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-DYnTEYoa.js";
+import "./reply-05js8eGB.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -107,8 +107,8 @@ import "./clack-prompter-B7pN13HV.js";
 import "./daemon-runtime-2mwX-jqj.js";
 import "./systemd-riq8uNJQ.js";
 import "./service-Cl74hx8J.js";
-import "./health-BjwDRAdd.js";
-import "./onboarding-DIVKvosg.js";
+import "./health-CDGOsNeD.js";
+import "./onboarding-BU14cspo.js";
 import "./shared-Knv1hy6h.js";
 import "./auth-token-BnOynwk4.js";
 import "./logging-BzzwiKjv.js";
@@ -117,7 +117,7 @@ import "./openai-model-default-DMjQRsb1.js";
 import "./model-picker-Ddo3jHe-.js";
 import "./systemd-linger-aQ75ZlXY.js";
 import "./onboard-custom-C7O-zfQ1.js";
-import { n as ONBOARD_PROVIDER_AUTH_FLAGS, t as onboardCommand } from "./onboard-f-GJ26Ix.js";
+import { n as ONBOARD_PROVIDER_AUTH_FLAGS, t as onboardCommand } from "./onboard-B_ECX48L.js";
 
 //#region src/cli/program/register.onboard.ts
 function resolveInstallDaemonFlag(command, opts) {

package/dist/{register.setup-2ZiUN7ui.js → register.setup-BIIFHtF7.js}

@@ -13,7 +13,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CXrOOgPW.js";
+import "./subagent-registry-lbDgDwLy.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -104,8 +104,8 @@ import "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import "./systemd-DlMdyFDY.js";
 import "./service-Cm9j9WzQ.js";
-import "./health-C5XJPwpt.js";
-import "./onboarding-CvBDWlBJ.js";
+import "./health-CM1asUG8.js";
+import "./onboarding-jhZxQcZ3.js";
 import "./shared-D8K9MkWg.js";
 import "./auth-token-Cmrk2TPo.js";
 import { n as logConfigUpdated, t as formatConfigPath } from "./logging-BGewRZy0.js";
@@ -113,7 +113,7 @@ import "./openai-model-default-DAwnTUcK.js";
 import "./model-picker-D5nCutGW.js";
 import "./systemd-linger-DA_LW52P.js";
 import "./onboard-custom-DdWPfzJO.js";
-import { t as onboardCommand } from "./onboard-Bm-pmstf.js";
+import { t as onboardCommand } from "./onboard-DcnGZKZX.js";
 import JSON5 from "json5";
 import fs from "node:fs/promises";
 

package/dist/{register.setup-DD4Rgkt9.js → register.setup-zwh90Vn-.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { B as theme, S as shortenHomePath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-DYnTEYoa.js";
+import "./reply-05js8eGB.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -108,8 +108,8 @@ import "./clack-prompter-B7pN13HV.js";
 import "./daemon-runtime-2mwX-jqj.js";
 import "./systemd-riq8uNJQ.js";
 import "./service-Cl74hx8J.js";
-import "./health-BjwDRAdd.js";
-import "./onboarding-DIVKvosg.js";
+import "./health-CDGOsNeD.js";
+import "./onboarding-BU14cspo.js";
 import "./shared-Knv1hy6h.js";
 import "./auth-token-BnOynwk4.js";
 import { n as logConfigUpdated, t as formatConfigPath } from "./logging-BzzwiKjv.js";
@@ -117,7 +117,7 @@ import "./openai-model-default-DMjQRsb1.js";
 import "./model-picker-Ddo3jHe-.js";
 import "./systemd-linger-aQ75ZlXY.js";
 import "./onboard-custom-C7O-zfQ1.js";
-import { t as onboardCommand } from "./onboard-f-GJ26Ix.js";
+import { t as onboardCommand } from "./onboard-B_ECX48L.js";
 import JSON5 from "json5";
 import fs from "node:fs/promises";
 

package/dist/{register.status-health-sessions-BqD7L8XL.js → register.status-health-sessions-D6t5maEr.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { B as theme, P as setVerbose, k as info, z as isRich } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { m as classifySessionKey, pr as lookupContextTokens, x as resolveSessionModelRef } from "./reply-DYnTEYoa.js";
+import { m as classifySessionKey, pr as lookupContextTokens, x as resolveSessionModelRef } from "./reply-05js8eGB.js";
 import { S as parseAgentSessionKey } from "./session-key-DCt45XZa.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -114,8 +114,8 @@ import "./service-Cl74hx8J.js";
 import "./diagnostics-BAMlsVVX.js";
 import "./table-BTgkRafz.js";
 import "./audit-CrITRV6w.js";
-import { t as statusCommand } from "./status--iNVOTMO.js";
-import { r as healthCommand } from "./health-BjwDRAdd.js";
+import { t as statusCommand } from "./status-BATOXGRi.js";
+import { r as healthCommand } from "./health-CDGOsNeD.js";
 import "./update-check-CtckACbb.js";
 import "./dm-policy-shared-Bh3TbexU.js";
 import "./node-service-Cxz4e-Qd.js";

package/dist/{register.status-health-sessions-sLgA92t7.js → register.status-health-sessions-O-sVAFHE.js}

@@ -14,7 +14,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CXrOOgPW.js";
+import "./subagent-registry-lbDgDwLy.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -108,8 +108,8 @@ import "./service-Cm9j9WzQ.js";
 import "./diagnostics-CS1ov_hH.js";
 import "./table-D01d2GuY.js";
 import "./audit-Byo5jCLN.js";
-import { n as statusCommand } from "./status-B1_iHrOg.js";
-import { r as healthCommand } from "./health-C5XJPwpt.js";
+import { n as statusCommand } from "./status-BRSo-LY3.js";
+import { r as healthCommand } from "./health-CM1asUG8.js";
 import "./update-check-ZdimP1aU.js";
 import "./dm-policy-shared-DJ-61hCT.js";
 import "./node-service-fcZExd22.js";

package/dist/{register.subclis-B2dGWFur.js → register.subclis-DOiZocR6.js}

@@ -49,7 +49,7 @@ const entries = [
 		description: "Run, inspect, and query the WebSocket Gateway",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./gateway-cli-Datohp3m.js")).registerGatewayCli(program);
+			(await import("./gateway-cli-Co-tp-WC.js")).registerGatewayCli(program);
 		}
 	},
 	{
@@ -81,7 +81,7 @@ const entries = [
 		description: "Discover, scan, and configure models",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./models-cli-B5vh-XK8.js")).registerModelsCli(program);
+			(await import("./models-cli-B4ATSsNS.js")).registerModelsCli(program);
 		}
 	},
 	{
@@ -161,7 +161,7 @@ const entries = [
 		description: "Manage internal agent hooks",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./hooks-cli-CafMq9Vr.js")).registerHooksCli(program);
+			(await import("./hooks-cli-Tx0TzSju.js")).registerHooksCli(program);
 		}
 	},
 	{
@@ -185,7 +185,7 @@ const entries = [
 		description: "Secure DM pairing (approve inbound requests)",
 		hasSubcommands: true,
 		register: async (program) => {
-			const { registerPluginCliCommands } = await import("./cli-DNZwCDRe.js");
+			const { registerPluginCliCommands } = await import("./cli-DapZXGSB.js");
 			registerPluginCliCommands(program, await loadConfig());
 			(await import("./pairing-cli-CQRAnpvm.js")).registerPairingCli(program);
 		}
@@ -195,8 +195,8 @@ const entries = [
 		description: "Manage Symi plugins and extensions",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./plugins-cli-DksVl33N.js")).registerPluginsCli(program);
-			const { registerPluginCliCommands } = await import("./cli-DNZwCDRe.js");
+			(await import("./plugins-cli-C9TYM40P.js")).registerPluginsCli(program);
+			const { registerPluginCliCommands } = await import("./cli-DapZXGSB.js");
 			registerPluginCliCommands(program, await loadConfig());
 		}
 	},
@@ -205,7 +205,7 @@ const entries = [
 		description: "Manage connected chat channels (Telegram, Discord, etc.)",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./channels-cli-DzOjNNFn.js")).registerChannelsCli(program);
+			(await import("./channels-cli-93tLT17t.js")).registerChannelsCli(program);
 		}
 	},
 	{
@@ -237,7 +237,7 @@ const entries = [
 		description: "Update Symi and inspect update channel status",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./update-cli-D1pLX3eo.js")).registerUpdateCli(program);
+			(await import("./update-cli-BOaP4XyQ.js")).registerUpdateCli(program);
 		}
 	},
 	{
@@ -245,7 +245,7 @@ const entries = [
 		description: "Generate shell completion script",
 		hasSubcommands: false,
 		register: async (program) => {
-			(await import("./completion-cli-Cov6N3BO.js").then((n) => n.n)).registerCompletionCli(program);
+			(await import("./completion-cli-BFZv3K5D.js").then((n) => n.n)).registerCompletionCli(program);
 		}
 	}
 ];

package/dist/{reply-DYnTEYoa.js → reply-05js8eGB.js}

@@ -25473,9 +25473,25 @@ function validateShellCommand(command) {
 //#endregion
 //#region src/agents/pi-tools.validate-wrapper.ts
 const EXEC_TOOL_NAMES = new Set(["exec", "bash"]);
+const FILE_TOOL_NAMES = new Set([
+	"write",
+	"read",
+	"edit",
+	"patch",
+	"file_write",
+	"file_edit",
+	"write_file",
+	"edit_file",
+	"create_file"
+]);
+const FILE_PATH_KEYS = [
+	"file_path",
+	"path",
+	"filePath"
+];
 /**
-* Wrap tools with argument validation. Only exec/bash tools are validated.
-* Other tools pass through unchanged.
+* Wrap tools with argument validation. Exec/bash commands and file paths
+* are validated. Other tools pass through unchanged.
 *
 * Call this AFTER tools are created and the model profile is resolved.
 */
@@ -25484,24 +25500,55 @@ function wrapToolsWithArgValidation(tools, profile) {
 	return tools.map((tool) => wrapToolWithArgValidation(tool));
 }
 /**
-* Wrap a single tool with argument validation for exec/bash commands.
+* Clean a file path by stripping control token fragments.
+* Returns null if the path is irreparably corrupted (empty after cleanup).
+*/
+function cleanFilePath(filePath) {
+	let cleaned = filePath.replace(/<\|[^|>]*(?:\|>)?/g, "");
+	cleaned = cleanResidualTokenFragments(cleaned);
+	cleaned = cleaned.trim();
+	if (!cleaned || !/[a-zA-Z0-9/._~-]/.test(cleaned)) return {
+		valid: false,
+		cleaned
+	};
+	return {
+		valid: true,
+		cleaned
+	};
+}
+/**
+* Wrap a single tool with argument validation.
 */
 function wrapToolWithArgValidation(tool) {
 	const toolName = (tool.name ?? "").toLowerCase().trim();
-	if (!EXEC_TOOL_NAMES.has(toolName)) return tool;
+	const isExecTool = EXEC_TOOL_NAMES.has(toolName);
+	const isFileTool = FILE_TOOL_NAMES.has(toolName);
+	if (!isExecTool && !isFileTool) return tool;
 	const originalExecute = tool.execute;
 	return {
 		...tool,
 		execute(toolCallId, params, ...rest) {
-			const command = params.command ?? params.cmd;
-			if (typeof command !== "string") return originalExecute.call(tool, toolCallId, params, ...rest);
-			const result = validateShellCommand(command);
-			if (!result.valid) return Promise.resolve({ output: `Error: ${result.reason}. The command appears to contain model control tokens. Please provide a clean shell command without any <|, |>, or XML-like tags. Only valid shell syntax is accepted.` });
-			if (result.cleaned !== command) return originalExecute.call(tool, toolCallId, {
+			if (isExecTool) {
+				const command = params.command ?? params.cmd;
+				if (typeof command !== "string") return originalExecute.call(tool, toolCallId, params, ...rest);
+				const result = validateShellCommand(command);
+				if (!result.valid) return Promise.resolve({ output: `Error: ${result.reason}. The command appears to contain model control tokens. Please provide a clean shell command without any <|, |>, or XML-like tags. Only valid shell syntax is accepted.` });
+				if (result.cleaned !== command) return originalExecute.call(tool, toolCallId, {
+					...params,
+					command: result.cleaned
+				}, ...rest);
+				return originalExecute.call(tool, toolCallId, params, ...rest);
+			}
+			const pathKey = FILE_PATH_KEYS.find((k) => typeof params[k] === "string");
+			if (!pathKey) return originalExecute.call(tool, toolCallId, params, ...rest);
+			const rawPath = params[pathKey];
+			if (!rawPath.includes("<|") && !rawPath.includes("|>") && !/^[<"|]/.test(rawPath)) return originalExecute.call(tool, toolCallId, params, ...rest);
+			const pathResult = cleanFilePath(rawPath);
+			if (!pathResult.valid) return Promise.resolve({ output: `Error: file path "${rawPath}" contains model control tokens and could not be cleaned. Please provide a clean file path without any <|, |>, or XML-like tags.` });
+			return originalExecute.call(tool, toolCallId, {
 				...params,
-				command: result.cleaned
+				[pathKey]: pathResult.cleaned
 			}, ...rest);
-			return originalExecute.call(tool, toolCallId, params, ...rest);
 		}
 	};
 }
@@ -29801,6 +29848,10 @@ async function runEmbeddedAttempt(params) {
 				});
 			};
 			const streamMonitor = createStreamMonitor(modelProfile);
+			const TOOL_ERROR_ABORT_THRESHOLD = 5;
+			const TOOL_ERROR_WARN_THRESHOLD = 3;
+			let consecutiveToolErrors = 0;
+			let lastErrorToolName = "";
 			const subscription = subscribeEmbeddedPiSession({
 				session: activeSession,
 				runId: params.runId,
@@ -29822,6 +29873,25 @@ async function runEmbeddedAttempt(params) {
 				onAgentEvent: (evt) => {
 					armSymipulseTimer();
 					params.onAgentEvent?.(evt);
+					if (evt.stream === "tool" && !aborted) {
+						const phase = typeof evt.data?.phase === "string" ? evt.data.phase : "";
+						const toolName = typeof evt.data?.name === "string" ? evt.data.name : "";
+						const isError = evt.data?.isError === true;
+						if (phase === "result" && toolName) {
+							if (isError && toolName === lastErrorToolName) consecutiveToolErrors++;
+							else if (isError) {
+								consecutiveToolErrors = 1;
+								lastErrorToolName = toolName;
+							} else {
+								consecutiveToolErrors = 0;
+								lastErrorToolName = "";
+							}
+							if (consecutiveToolErrors >= TOOL_ERROR_ABORT_THRESHOLD) {
+								log$6.error(`Agent-loop circuit breaker: ${toolName} failed ${consecutiveToolErrors} consecutive times. Aborting run ${params.runId}.`);
+								abortRun(false, /* @__PURE__ */ new Error(`Tool ${toolName} failed ${consecutiveToolErrors} consecutive times. The model may be generating corrupted tool arguments. Run aborted to prevent infinite loop.`));
+							} else if (consecutiveToolErrors === TOOL_ERROR_WARN_THRESHOLD) log$6.warn(`Agent-loop tool error warning: ${toolName} failed ${consecutiveToolErrors} times consecutively. runId=${params.runId}`);
+						}
+					}
 					if (evt.stream === "assistant" && typeof evt.data?.text === "string" && !aborted) {
 						streamMonitor.onChunk(evt.data.text);
 						if (streamMonitor.shouldStop()) log$6.debug(`stream monitor detection (log-only, no abort): runId=${params.runId} reason=${streamMonitor.getStopReason()}`);
@@ -31317,7 +31387,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-Dr5cOn-1.js");
+			const { sendMessageWhatsApp } = await import("./web-BWybtnEa.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -49748,7 +49818,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-Dr5cOn-1.js");
+	webChannelPromise ??= import("./web-BWybtnEa.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{run-main-DWmu2b6D.js → run-main-u-Eyc8Wm.js}

@@ -13,7 +13,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CXrOOgPW.js";
+import "./subagent-registry-lbDgDwLy.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -101,9 +101,9 @@ import { t as ensureSymiCliOnPath } from "./path-env-Bic_wXs9.js";
 import "./catalog-DLQFKucJ.js";
 import "./note-DDecZomM.js";
 import "./plugin-auto-enable-D6ENR3Xg.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-5yf-hu_W.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-DXWJkJX6.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-D7waq_Ho.js";
-import { t as emitCliBanner } from "./banner-DYDCxnDL.js";
+import { t as emitCliBanner } from "./banner-DpH44qlJ.js";
 import "./doctor-config-flow-CA3eiKhd.js";
 import { n as ensureConfigReady } from "./config-guard-CPHvOzsC.js";
 import process$1 from "node:process";
@@ -118,7 +118,7 @@ const routeHealth = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { healthCommand } = await import("./health-C5XJPwpt.js").then((n) => n.i);
+		const { healthCommand } = await import("./health-CM1asUG8.js").then((n) => n.i);
 		await healthCommand({
 			json,
 			timeoutMs,
@@ -138,7 +138,7 @@ const routeStatus = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { statusCommand } = await import("./status-B1_iHrOg.js").then((n) => n.t);
+		const { statusCommand } = await import("./status-BRSo-LY3.js").then((n) => n.t);
 		await statusCommand({
 			json,
 			deep,
@@ -172,7 +172,7 @@ const routeAgentsList = {
 	run: async (argv) => {
 		const json = hasFlag(argv, "--json");
 		const bindings = hasFlag(argv, "--bindings");
-		const { agentsListCommand } = await import("./agents-DQIz-_on.js").then((n) => n.t);
+		const { agentsListCommand } = await import("./agents-qLMWAYwU.js").then((n) => n.t);
 		await agentsListCommand({
 			json,
 			bindings
@@ -243,7 +243,7 @@ const routes = [
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
 			const json = hasFlag(argv, "--json");
-			const { runConfigGet } = await import("./config-cli-B2REEd2l.js");
+			const { runConfigGet } = await import("./config-cli-DbWMIBUz.js");
 			await runConfigGet({
 				path: pathArg,
 				json
@@ -256,7 +256,7 @@ const routes = [
 		run: async (argv) => {
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
-			const { runConfigUnset } = await import("./config-cli-B2REEd2l.js");
+			const { runConfigUnset } = await import("./config-cli-DbWMIBUz.js");
 			await runConfigUnset({ path: pathArg });
 			return true;
 		}
@@ -270,7 +270,7 @@ const routes = [
 			const local = hasFlag(argv, "--local");
 			const json = hasFlag(argv, "--json");
 			const plain = hasFlag(argv, "--plain");
-			const { modelsListCommand } = await import("./models-Bo4iHJy-.js").then((n) => n.t);
+			const { modelsListCommand } = await import("./models-CiqHYwje.js").then((n) => n.t);
 			await modelsListCommand({
 				all,
 				local,
@@ -301,7 +301,7 @@ const routes = [
 			const plain = hasFlag(argv, "--plain");
 			const check = hasFlag(argv, "--check");
 			const probe = hasFlag(argv, "--probe");
-			const { modelsStatusCommand } = await import("./models-Bo4iHJy-.js").then((n) => n.t);
+			const { modelsStatusCommand } = await import("./models-CiqHYwje.js").then((n) => n.t);
 			await modelsStatusCommand({
 				json,
 				plain,
@@ -379,7 +379,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-BjORH7Cc.js");
+	const { buildProgram } = await import("./program-bnWda72r.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -411,10 +411,10 @@ async function runCli(argv = process$1.argv) {
 		const { getProgramContext } = await import("./program-context-CqzR_m-7.js").then((n) => n.n);
 		const ctx = getProgramContext(program);
 		if (ctx) {
-			const { registerCoreCliByName } = await import("./command-registry-CHtN2HeK.js").then((n) => n.t);
+			const { registerCoreCliByName } = await import("./command-registry-9EhYc6da.js").then((n) => n.t);
 			await registerCoreCliByName(program, ctx, primary, parseArgv);
 		}
-		const { registerSubCliByName } = await import("./register.subclis-B2dGWFur.js").then((n) => n.a);
+		const { registerSubCliByName } = await import("./register.subclis-DOiZocR6.js").then((n) => n.a);
 		await registerSubCliByName(program, primary);
 	}
 	const hasBuiltinPrimary = primary !== null && program.commands.some((command) => command.name() === primary);
@@ -423,7 +423,7 @@ async function runCli(argv = process$1.argv) {
 		primary,
 		hasBuiltinPrimary
 	})) {
-		const { registerPluginCliCommands } = await import("./cli-DNZwCDRe.js");
+		const { registerPluginCliCommands } = await import("./cli-DapZXGSB.js");
 		const { loadConfig } = await import("./config-DHBLS1Hl.js").then((n) => n.t);
 		registerPluginCliCommands(program, loadConfig());
 	}