@symerian/symi 2.6.1 → 2.6.3

package/dist/plugin-sdk/{reply-QAcAd9ev.js → reply-BjJZjZRr.js}

@@ -11532,7 +11532,7 @@ function resolveMemoryBackendConfig(params) {
 
 //#endregion
 //#region src/memory/search-manager.ts
-const log$9 = createSubsystemLogger("memory");
+const log$10 = createSubsystemLogger("memory");
 const QMD_MANAGER_CACHE = /* @__PURE__ */ new Map();
 async function getMemorySearchManager(params) {
 	const resolved = resolveMemoryBackendConfig(params);
@@ -11565,7 +11565,7 @@ async function getMemorySearchManager(params) {
 			}
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
-			log$9.warn(`qmd memory unavailable; falling back to builtin: ${message}`);
+			log$10.warn(`qmd memory unavailable; falling back to builtin: ${message}`);
 		}
 	}
 	try {
@@ -11592,7 +11592,7 @@ var FallbackMemoryManager = class {
 		} catch (err) {
 			this.primaryFailed = true;
 			this.lastError = err instanceof Error ? err.message : String(err);
-			log$9.warn(`qmd memory failed; switching to builtin index: ${this.lastError}`);
+			log$10.warn(`qmd memory failed; switching to builtin index: ${this.lastError}`);
 			await this.deps.primary.close?.().catch(() => {});
 			this.evictCacheEntry();
 		}
@@ -11672,12 +11672,12 @@ var FallbackMemoryManager = class {
 		try {
 			fallback = await this.deps.fallbackFactory();
 			if (!fallback) {
-				log$9.warn("memory fallback requested but builtin index is unavailable");
+				log$10.warn("memory fallback requested but builtin index is unavailable");
 				return null;
 			}
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
-			log$9.warn(`memory fallback unavailable: ${message}`);
+			log$10.warn(`memory fallback unavailable: ${message}`);
 			return null;
 		}
 		this.fallback = fallback;
@@ -25112,7 +25112,7 @@ function createRunRegistry(options) {
 
 //#endregion
 //#region src/process/supervisor/supervisor.ts
-const log$8 = createSubsystemLogger("process/supervisor");
+const log$9 = createSubsystemLogger("process/supervisor");
 function clampTimeout(value) {
 	if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) return;
 	return Math.max(1, Math.floor(value));
@@ -25298,7 +25298,7 @@ function createProcessSupervisor() {
 				exitCode: null,
 				exitSignal: null
 			});
-			log$8.warn(`spawn failed: runId=${runId} reason=${String(err)}`);
+			log$9.warn(`spawn failed: runId=${runId} reason=${String(err)}`);
 			throw err;
 		}
 	};
@@ -26597,7 +26597,7 @@ function resolveRunWorkspaceDir(params) {
 
 //#endregion
 //#region src/agents/cli-runner.ts
-const log$7 = createSubsystemLogger("agent/claude-cli");
+const log$8 = createSubsystemLogger("agent/claude-cli");
 async function runCliAgent(params) {
 	const started = Date.now();
 	const workspaceResolution = resolveRunWorkspaceDir({
@@ -26610,7 +26610,7 @@ async function runCliAgent(params) {
 	const redactedSessionId = redactRunIdentifier(params.sessionId);
 	const redactedSessionKey = redactRunIdentifier(params.sessionKey);
 	const redactedWorkspace = redactRunIdentifier(resolvedWorkspace);
-	if (workspaceResolution.usedFallback) log$7.warn(`[workspace-fallback] caller=runCliAgent reason=${workspaceResolution.fallbackReason} run=${params.runId} session=${redactedSessionId} sessionKey=${redactedSessionKey} agent=${workspaceResolution.agentId} workspace=${redactedWorkspace}`);
+	if (workspaceResolution.usedFallback) log$8.warn(`[workspace-fallback] caller=runCliAgent reason=${workspaceResolution.fallbackReason} run=${params.runId} session=${redactedSessionId} sessionKey=${redactedSessionKey} agent=${workspaceResolution.agentId} workspace=${redactedWorkspace}`);
 	const workspaceDir = resolvedWorkspace;
 	const backendResolved = resolveCliBackendConfig(params.provider, params.config);
 	if (!backendResolved) throw new Error(`Unknown CLI backend: ${params.provider}`);
@@ -26627,7 +26627,7 @@ async function runCliAgent(params) {
 		sessionId: params.sessionId,
 		warn: makeBootstrapWarn({
 			sessionLabel,
-			warn: (message) => log$7.warn(message)
+			warn: (message) => log$8.warn(message)
 		})
 	});
 	const { defaultAgentId, sessionAgentId } = resolveSessionAgentIds({
@@ -26693,7 +26693,7 @@ async function runCliAgent(params) {
 	const queueKey = backend.serialize ?? true ? backendResolved.id : `${backendResolved.id}:${params.runId}`;
 	try {
 		const output = await enqueueCliRun(queueKey, async () => {
-			log$7.info(`cli exec: provider=${params.provider} model=${normalizedModel} promptChars=${params.prompt.length}`);
+			log$8.info(`cli exec: provider=${params.provider} model=${normalizedModel} promptChars=${params.prompt.length}`);
 			const logOutputText = isTruthyEnvValue(process.env.SYMI_CLAUDE_CLI_LOG_OUTPUT);
 			if (logOutputText) {
 				const logArgs = [];
@@ -26726,7 +26726,7 @@ async function runCliAgent(params) {
 					const promptIndex = logArgs.indexOf(argsPrompt);
 					if (promptIndex >= 0) logArgs[promptIndex] = `<prompt:${argsPrompt.length} chars>`;
 				}
-				log$7.info(`cli argv: ${backend.command} ${logArgs.join(" ")}`);
+				log$8.info(`cli argv: ${backend.command} ${logArgs.join(" ")}`);
 			}
 			const env = (() => {
 				const next = {
@@ -26764,17 +26764,17 @@ async function runCliAgent(params) {
 			const stdout = result.stdout.trim();
 			const stderr = result.stderr.trim();
 			if (logOutputText) {
-				if (stdout) log$7.info(`cli stdout:\n${stdout}`);
-				if (stderr) log$7.info(`cli stderr:\n${stderr}`);
+				if (stdout) log$8.info(`cli stdout:\n${stdout}`);
+				if (stderr) log$8.info(`cli stderr:\n${stderr}`);
 			}
 			if (shouldLogVerbose()) {
-				if (stdout) log$7.debug(`cli stdout:\n${stdout}`);
-				if (stderr) log$7.debug(`cli stderr:\n${stderr}`);
+				if (stdout) log$8.debug(`cli stdout:\n${stdout}`);
+				if (stderr) log$8.debug(`cli stderr:\n${stderr}`);
 			}
 			if (result.exitCode !== 0 || result.reason !== "exit") {
 				if (result.reason === "no-output-timeout" || result.noOutputTimedOut) {
 					const timeoutReason = `CLI produced no output for ${Math.round(noOutputTimeoutMs / 1e3)}s and was terminated.`;
-					log$7.warn(`cli watchdog timeout: provider=${params.provider} model=${modelId} session=${cliSessionIdToSend ?? params.sessionId} noOutputTimeoutMs=${noOutputTimeoutMs} pid=${managedRun.pid ?? "unknown"}`);
+					log$8.warn(`cli watchdog timeout: provider=${params.provider} model=${modelId} session=${cliSessionIdToSend ?? params.sessionId} noOutputTimeoutMs=${noOutputTimeoutMs} pid=${managedRun.pid ?? "unknown"}`);
 					throw new FailoverError(timeoutReason, {
 						reason: "timeout",
 						provider: params.provider,
@@ -27404,7 +27404,7 @@ function resolveEmbeddedSessionLane(key) {
 
 //#endregion
 //#region src/agents/pi-embedded-runner/logger.ts
-const log$6 = createSubsystemLogger("agent/embedded");
+const log$7 = createSubsystemLogger("agent/embedded");
 
 //#endregion
 //#region src/utils/safe-json.ts
@@ -27450,7 +27450,7 @@ function getQueuedFileWriter(writers, filePath) {
 //#endregion
 //#region src/agents/anthropic-payload-log.ts
 const writers$1 = /* @__PURE__ */ new Map();
-const log$5 = createSubsystemLogger("agent/anthropic-payload");
+const log$6 = createSubsystemLogger("agent/anthropic-payload");
 function resolvePayloadLogConfig(env) {
 	const enabled = parseBooleanValue$1(env.SYMI_ANTHROPIC_PAYLOAD_LOG) ?? false;
 	const fileOverride = env.SYMI_ANTHROPIC_PAYLOAD_LOG_FILE?.trim();
@@ -27540,13 +27540,13 @@ function createAnthropicPayloadLogger(params) {
 			usage,
 			error: errorMessage
 		});
-		log$5.info("anthropic usage", {
+		log$6.info("anthropic usage", {
 			runId: params.runId,
 			sessionId: params.sessionId,
 			usage
 		});
 	};
-	log$5.info("anthropic payload logger enabled", { filePath: writer.filePath });
+	log$6.info("anthropic payload logger enabled", { filePath: writer.filePath });
 	return {
 		enabled: true,
 		wrapStreamFn,
@@ -29428,7 +29428,7 @@ function createEmbeddedPiSessionEventHandler(ctx) {
 //#region src/agents/pi-embedded-subscribe.ts
 const THINKING_TAG_SCAN_RE = /<\s*(\/?)\s*(?:think(?:ing)?|thought|antthinking)\s*>/gi;
 const FINAL_TAG_SCAN_RE = /<\s*(\/?)\s*final\s*>/gi;
-const log$4 = createSubsystemLogger("agent/embedded");
+const log$5 = createSubsystemLogger("agent/embedded");
 function subscribeEmbeddedPiSession(params) {
 	const reasoningMode = params.reasoningMode ?? "off";
 	const useMarkdown = (params.toolResultFormat ?? "markdown") === "markdown";
@@ -29585,7 +29585,7 @@ function subscribeEmbeddedPiSession(params) {
 				state.compactionRetryReject = reject;
 			});
 			state.compactionRetryPromise.catch((err) => {
-				log$4.debug(`compaction promise rejected (no waiter): ${String(err)}`);
+				log$5.debug(`compaction promise rejected (no waiter): ${String(err)}`);
 			});
 		}
 	};
@@ -29737,7 +29737,7 @@ function subscribeEmbeddedPiSession(params) {
 		if (!chunk) return;
 		if (chunk === state.lastBlockReplyText) return;
 		if (isMessagingToolDuplicateNormalized(normalizeTextForComparison(chunk), messagingToolSentTextsNormalized)) {
-			log$4.debug(`Skipping block reply - already sent via messaging tool: ${chunk.slice(0, 50)}...`);
+			log$5.debug(`Skipping block reply - already sent via messaging tool: ${chunk.slice(0, 50)}...`);
 			return;
 		}
 		if (shouldSkipAssistantText(chunk)) return;
@@ -29815,7 +29815,7 @@ function subscribeEmbeddedPiSession(params) {
 	const ctx = {
 		params,
 		state,
-		log: log$4,
+		log: log$5,
 		blockChunking,
 		blockChunker,
 		hookRunner: params.hookRunner,
@@ -29848,7 +29848,7 @@ function subscribeEmbeddedPiSession(params) {
 		if (state.unsubscribed) return;
 		state.unsubscribed = true;
 		if (state.compactionRetryPromise) {
-			log$4.debug(`unsubscribe: rejecting compaction wait runId=${params.runId}`);
+			log$5.debug(`unsubscribe: rejecting compaction wait runId=${params.runId}`);
 			const reject = state.compactionRetryReject;
 			state.compactionRetryResolve = void 0;
 			state.compactionRetryReject = void 0;
@@ -29858,11 +29858,11 @@ function subscribeEmbeddedPiSession(params) {
 			reject?.(abortErr);
 		}
 		if (params.session.isCompacting) {
-			log$4.debug(`unsubscribe: aborting in-flight compaction runId=${params.runId}`);
+			log$5.debug(`unsubscribe: aborting in-flight compaction runId=${params.runId}`);
 			try {
 				params.session.abortCompaction();
 			} catch (err) {
-				log$4.warn(`unsubscribe: compaction abort failed runId=${params.runId} err=${String(err)}`);
+				log$5.warn(`unsubscribe: compaction abort failed runId=${params.runId} err=${String(err)}`);
 			}
 		}
 		sessionUnsubscribe();
@@ -29911,7 +29911,7 @@ function subscribeEmbeddedPiSession(params) {
 
 //#endregion
 //#region src/agents/pi-tools.before-tool-call.ts
-const log$3 = createSubsystemLogger("agents/tools");
+const log$4 = createSubsystemLogger("agents/tools");
 const BEFORE_TOOL_CALL_WRAPPED = Symbol("beforeToolCallWrapped");
 const adjustedParamsByToolCallId = /* @__PURE__ */ new Map();
 const MAX_TRACKED_ADJUSTED_PARAMS = 1024;
@@ -29945,7 +29945,7 @@ async function recordLoopOutcome(args) {
 			config: args.ctx.loopDetection
 		});
 	} catch (err) {
-		log$3.warn(`tool loop outcome tracking failed: tool=${args.toolName} error=${String(err)}`);
+		log$4.warn(`tool loop outcome tracking failed: tool=${args.toolName} error=${String(err)}`);
 	}
 }
 async function runBeforeToolCallHook(args) {
@@ -29962,7 +29962,7 @@ async function runBeforeToolCallHook(args) {
 		const loopResult = detectToolCallLoop(sessionState, toolName, params, args.ctx.loopDetection);
 		if (loopResult.stuck) {
 			if (loopResult.level === "critical") {
-				log$3.error(`Blocking ${toolName} due to critical loop: ${loopResult.message}`);
+				log$4.error(`Blocking ${toolName} due to critical loop: ${loopResult.message}`);
 				logToolLoopAction({
 					sessionKey: args.ctx.sessionKey,
 					sessionId: args.ctx?.agentId,
@@ -29979,7 +29979,7 @@ async function runBeforeToolCallHook(args) {
 					reason: loopResult.message
 				};
 			} else if (shouldEmitLoopWarning(sessionState, loopResult.warningKey ?? `${loopResult.detector}:${toolName}`, loopResult.count)) {
-				log$3.warn(`Loop warning for ${toolName}: ${loopResult.message}`);
+				log$4.warn(`Loop warning for ${toolName}: ${loopResult.message}`);
 				logToolLoopAction({
 					sessionKey: args.ctx.sessionKey,
 					sessionId: args.ctx?.agentId,
@@ -30029,7 +30029,7 @@ async function runBeforeToolCallHook(args) {
 		}
 	} catch (err) {
 		const toolCallId = args.toolCallId ? ` toolCallId=${args.toolCallId}` : "";
-		log$3.warn(`before_tool_call hook failed: tool=${toolName}${toolCallId} error=${String(err)}`);
+		log$4.warn(`before_tool_call hook failed: tool=${toolName}${toolCallId} error=${String(err)}`);
 	}
 	return {
 		blocked: false,
@@ -30273,10 +30273,27 @@ function validateShellCommand(command) {
 
 //#endregion
 //#region src/agents/pi-tools.validate-wrapper.ts
+const log$3 = createSubsystemLogger("agents/tool-validate");
 const EXEC_TOOL_NAMES = new Set(["exec", "bash"]);
+const FILE_TOOL_NAMES = new Set([
+	"write",
+	"read",
+	"edit",
+	"patch",
+	"file_write",
+	"file_edit",
+	"write_file",
+	"edit_file",
+	"create_file"
+]);
+const FILE_PATH_KEYS = [
+	"file_path",
+	"path",
+	"filePath"
+];
 /**
-* Wrap tools with argument validation. Only exec/bash tools are validated.
-* Other tools pass through unchanged.
+* Wrap tools with argument validation. Exec/bash commands and file paths
+* are validated. Other tools pass through unchanged.
 *
 * Call this AFTER tools are created and the model profile is resolved.
 */
@@ -30285,24 +30302,64 @@ function wrapToolsWithArgValidation(tools, profile) {
 	return tools.map((tool) => wrapToolWithArgValidation(tool));
 }
 /**
-* Wrap a single tool with argument validation for exec/bash commands.
+* Clean a file path by stripping control token fragments.
+* Returns null if the path is irreparably corrupted (empty after cleanup).
+*/
+function cleanFilePath(filePath) {
+	let cleaned = filePath.replace(/<\|[^|>]*(?:\|>)?/g, "");
+	cleaned = cleanResidualTokenFragments(cleaned);
+	cleaned = cleaned.trim();
+	if (!cleaned || !/[a-zA-Z0-9/._~-]/.test(cleaned)) return {
+		valid: false,
+		cleaned
+	};
+	return {
+		valid: true,
+		cleaned
+	};
+}
+/**
+* Wrap a single tool with argument validation.
 */
 function wrapToolWithArgValidation(tool) {
 	const toolName = (tool.name ?? "").toLowerCase().trim();
-	if (!EXEC_TOOL_NAMES.has(toolName)) return tool;
+	const isExecTool = EXEC_TOOL_NAMES.has(toolName);
+	const isFileTool = FILE_TOOL_NAMES.has(toolName);
+	if (!isExecTool && !isFileTool) return tool;
 	const originalExecute = tool.execute;
 	return {
 		...tool,
 		execute(toolCallId, params, ...rest) {
-			const command = params.command ?? params.cmd;
-			if (typeof command !== "string") return originalExecute.call(tool, toolCallId, params, ...rest);
-			const result = validateShellCommand(command);
-			if (!result.valid) return Promise.resolve({ output: `Error: ${result.reason}. The command appears to contain model control tokens. Please provide a clean shell command without any <|, |>, or XML-like tags. Only valid shell syntax is accepted.` });
-			if (result.cleaned !== command) return originalExecute.call(tool, toolCallId, {
+			if (isExecTool) {
+				const command = params.command ?? params.cmd;
+				if (typeof command !== "string") {
+					log$3.debug(`[validate] exec called without string command: keys=${Object.keys(params).join(",")}`);
+					return originalExecute.call(tool, toolCallId, params, ...rest);
+				}
+				const result = validateShellCommand(command);
+				if (!result.valid) {
+					log$3.warn(`[validate] exec command rejected: reason=${result.reason} raw=${command.slice(0, 100)}`);
+					return Promise.resolve({ output: `Error: ${result.reason}. The command appears to contain model control tokens. Please provide a clean shell command without any <|, |>, or XML-like tags. Only valid shell syntax is accepted.` });
+				}
+				if (result.cleaned !== command) {
+					log$3.debug(`[validate] exec command cleaned: raw=${command.slice(0, 80)} → cleaned=${result.cleaned.slice(0, 80)}`);
+					return originalExecute.call(tool, toolCallId, {
+						...params,
+						command: result.cleaned
+					}, ...rest);
+				}
+				return originalExecute.call(tool, toolCallId, params, ...rest);
+			}
+			const pathKey = FILE_PATH_KEYS.find((k) => typeof params[k] === "string");
+			if (!pathKey) return originalExecute.call(tool, toolCallId, params, ...rest);
+			const rawPath = params[pathKey];
+			if (!rawPath.includes("<|") && !rawPath.includes("|>") && !/^[<"|]/.test(rawPath)) return originalExecute.call(tool, toolCallId, params, ...rest);
+			const pathResult = cleanFilePath(rawPath);
+			if (!pathResult.valid) return Promise.resolve({ output: `Error: file path "${rawPath}" contains model control tokens and could not be cleaned. Please provide a clean file path without any <|, |>, or XML-like tags.` });
+			return originalExecute.call(tool, toolCallId, {
 				...params,
-				command: result.cleaned
+				[pathKey]: pathResult.cleaned
 			}, ...rest);
-			return originalExecute.call(tool, toolCallId, params, ...rest);
 		}
 	};
 }
@@ -30661,7 +30718,7 @@ async function truncateOversizedToolResultsInSession(params) {
 			const textLength = getToolResultTextLength(msg);
 			if (textLength > maxChars) {
 				oversizedIndices.push(i);
-				log$6.info(`[tool-result-truncation] Found oversized tool result: entry=${entry.id} chars=${textLength} maxChars=${maxChars} sessionKey=${params.sessionKey ?? params.sessionId ?? "unknown"}`);
+				log$7.info(`[tool-result-truncation] Found oversized tool result: entry=${entry.id} chars=${textLength} maxChars=${maxChars} sessionKey=${params.sessionKey ?? params.sessionId ?? "unknown"}`);
 			}
 		}
 		if (oversizedIndices.length === 0) return {
@@ -30683,7 +30740,7 @@ async function truncateOversizedToolResultsInSession(params) {
 					message = truncateToolResultMessage(message, maxChars);
 					truncatedCount++;
 					const newLength = getToolResultTextLength(message);
-					log$6.info(`[tool-result-truncation] Truncated tool result: originalEntry=${entry.id} newChars=${newLength} sessionKey=${params.sessionKey ?? params.sessionId ?? "unknown"}`);
+					log$7.info(`[tool-result-truncation] Truncated tool result: originalEntry=${entry.id} newChars=${newLength} sessionKey=${params.sessionKey ?? params.sessionId ?? "unknown"}`);
 				}
 				sessionManager.appendMessage(message);
 			} else if (entry.type === "compaction") sessionManager.appendCompaction(entry.summary, entry.firstKeptEntryId, entry.tokensBefore, entry.details, entry.fromHook);
@@ -30697,14 +30754,14 @@ async function truncateOversizedToolResultsInSession(params) {
 				if (entry.name) sessionManager.appendSessionInfo(entry.name);
 			}
 		}
-		log$6.info(`[tool-result-truncation] Truncated ${truncatedCount} tool result(s) in session (contextWindow=${contextWindowTokens} maxChars=${maxChars}) sessionKey=${params.sessionKey ?? params.sessionId ?? "unknown"}`);
+		log$7.info(`[tool-result-truncation] Truncated ${truncatedCount} tool result(s) in session (contextWindow=${contextWindowTokens} maxChars=${maxChars}) sessionKey=${params.sessionKey ?? params.sessionId ?? "unknown"}`);
 		return {
 			truncated: true,
 			truncatedCount
 		};
 	} catch (err) {
 		const errMsg = err instanceof Error ? err.message : String(err);
-		log$6.warn(`[tool-result-truncation] Failed to truncate: ${errMsg}`);
+		log$7.warn(`[tool-result-truncation] Failed to truncate: ${errMsg}`);
 		return {
 			truncated: false,
 			truncatedCount: 0,
@@ -32480,7 +32537,7 @@ function resolveAnthropicBetas(extraParams, provider, modelId) {
 		for (const beta of configured) if (typeof beta === "string" && beta.trim()) betas.add(beta.trim());
 	}
 	if (extraParams?.context1m === true) if (isAnthropic1MModel(modelId)) betas.add(ANTHROPIC_CONTEXT_1M_BETA);
-	else log$6.warn(`ignoring context1m for non-opus/sonnet model: ${provider}/${modelId}`);
+	else log$7.warn(`ignoring context1m for non-opus/sonnet model: ${provider}/${modelId}`);
 	return betas.size > 0 ? [...betas] : void 0;
 }
 function mergeAnthropicBetaHeader(headers, betas) {
@@ -33091,14 +33148,14 @@ function logToolSchemasForGoogle(params) {
 	if (params.provider !== "google-antigravity" && params.provider !== "google-gemini-cli") return;
 	const toolNames = params.tools.map((tool, index) => `${index}:${tool.name}`);
 	const tools = sanitizeToolsForGoogle(params);
-	log$6.info("google tool schema snapshot", {
+	log$7.info("google tool schema snapshot", {
 		provider: params.provider,
 		toolCount: tools.length,
 		tools: toolNames
 	});
 	for (const [index, tool] of tools.entries()) {
 		const violations = findUnsupportedSchemaKeywords(tool.parameters, `${tool.name}.parameters`);
-		if (violations.length > 0) log$6.warn("google tool schema has unsupported keywords", {
+		if (violations.length > 0) log$7.warn("google tool schema has unsupported keywords", {
 			index,
 			tool: tool.name,
 			violations: violations.slice(0, 12),
@@ -33110,7 +33167,7 @@ const compactionFailureEmitter = new EventEmitter();
 registerUnhandledRejectionHandler((reason) => {
 	const message = describeUnknownError(reason);
 	if (!isCompactionFailureError(message)) return false;
-	log$6.error(`Auto-compaction failed (unhandled): ${message}`);
+	log$7.error(`Auto-compaction failed (unhandled): ${message}`);
 	compactionFailureEmitter.emit("failure", message);
 	return true;
 });
@@ -33162,7 +33219,7 @@ function applyGoogleTurnOrderingFix(params) {
 	const sanitized = sanitizeGoogleTurnOrdering(params.messages);
 	const didPrepend = sanitized !== params.messages;
 	if (didPrepend && !hasGoogleTurnOrderingMarker(params.sessionManager)) {
-		(params.warn ?? ((message) => log$6.warn(message)))(`google turn ordering fixup: prepended user bootstrap (sessionId=${params.sessionId})`);
+		(params.warn ?? ((message) => log$7.warn(message)))(`google turn ordering fixup: prepended user bootstrap (sessionId=${params.sessionId})`);
 		markGoogleTurnOrderingMarker(params.sessionManager);
 	}
 	return {
@@ -33782,7 +33839,7 @@ function isImageExtension(filePath) {
 }
 async function sanitizeImagesWithLog(images, label, imageSanitization) {
 	const { images: sanitized, dropped } = await sanitizeImageBlocks(images, label, imageSanitization);
-	if (dropped > 0) log$6.warn(`Native image: dropped ${dropped} image(s) after sanitization (${label}).`);
+	if (dropped > 0) log$7.warn(`Native image: dropped ${dropped} image(s) after sanitization (${label}).`);
 	return sanitized;
 }
 /**
@@ -33857,7 +33914,7 @@ async function loadImageFromRef(ref, workspaceDir, options) {
 	try {
 		let targetPath = ref.resolved;
 		if (ref.type === "url") {
-			log$6.debug(`Native image: rejecting remote URL (local-only): ${ref.resolved}`);
+			log$7.debug(`Native image: rejecting remote URL (local-only): ${ref.resolved}`);
 			return null;
 		}
 		if (ref.type === "path") {
@@ -33867,7 +33924,7 @@ async function loadImageFromRef(ref, workspaceDir, options) {
 					cwd: options.sandbox.root
 				}).hostPath;
 			} catch (err) {
-				log$6.debug(`Native image: sandbox validation failed for ${ref.resolved}: ${err instanceof Error ? err.message : String(err)}`);
+				log$7.debug(`Native image: sandbox validation failed for ${ref.resolved}: ${err instanceof Error ? err.message : String(err)}`);
 				return null;
 			}
 			else if (!path.isAbsolute(targetPath)) targetPath = path.resolve(workspaceDir, targetPath);
@@ -33881,7 +33938,7 @@ async function loadImageFromRef(ref, workspaceDir, options) {
 			})
 		}) : await loadWebMedia(targetPath, options?.maxBytes);
 		if (media.kind !== "image") {
-			log$6.debug(`Native image: not an image file: ${targetPath} (got ${media.kind})`);
+			log$7.debug(`Native image: not an image file: ${targetPath} (got ${media.kind})`);
 			return null;
 		}
 		const mimeType = media.contentType ?? "image/jpeg";
@@ -33891,7 +33948,7 @@ async function loadImageFromRef(ref, workspaceDir, options) {
 			mimeType
 		};
 	} catch (err) {
-		log$6.debug(`Native image: failed to load ${ref.resolved}: ${err instanceof Error ? err.message : String(err)}`);
+		log$7.debug(`Native image: failed to load ${ref.resolved}: ${err instanceof Error ? err.message : String(err)}`);
 		return null;
 	}
 }
@@ -33990,7 +34047,7 @@ async function detectAndLoadPromptImages(params) {
 		loadedCount: 0,
 		skippedCount: 0
 	};
-	log$6.debug(`Native image: detected ${allRefs.length} image refs (${promptRefs.length} in prompt, ${uniqueHistoryRefs.length} in history)`);
+	log$7.debug(`Native image: detected ${allRefs.length} image refs (${promptRefs.length} in prompt, ${uniqueHistoryRefs.length} in history)`);
 	const promptImages = [...params.existingImages ?? []];
 	const historyImagesByIndex = /* @__PURE__ */ new Map();
 	let loadedCount = 0;
@@ -34007,7 +34064,7 @@ async function detectAndLoadPromptImages(params) {
 				else historyImagesByIndex.set(ref.messageIndex, [image]);
 			} else promptImages.push(image);
 			loadedCount++;
-			log$6.debug(`Native image: loaded ${ref.type} ${ref.resolved}`);
+			log$7.debug(`Native image: loaded ${ref.type} ${ref.resolved}`);
 		} else skippedCount++;
 	}
 	const imageSanitization = { maxDimensionPx: params.maxDimensionPx };
@@ -34103,7 +34160,7 @@ async function runEmbeddedAttempt(params) {
 	const resolvedWorkspace = resolveUserPath(params.workspaceDir);
 	const prevCwd = process.cwd();
 	const runAbortController = new AbortController();
-	log$6.debug(`embedded run start: runId=${params.runId} sessionId=${params.sessionId} provider=${params.provider} model=${params.modelId} thinking=${params.thinkLevel} messageChannel=${params.messageChannel ?? params.messageProvider ?? "unknown"}`);
+	log$7.debug(`embedded run start: runId=${params.runId} sessionId=${params.sessionId} provider=${params.provider} model=${params.modelId} thinking=${params.thinkLevel} messageChannel=${params.messageChannel ?? params.messageProvider ?? "unknown"}`);
 	await fs$1.mkdir(resolvedWorkspace, { recursive: true });
 	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
 	const sandbox = await resolveSandboxContext({
@@ -34139,7 +34196,7 @@ async function runEmbeddedAttempt(params) {
 			sessionId: params.sessionId,
 			warn: makeBootstrapWarn({
 				sessionLabel,
-				warn: (message) => log$6.warn(message)
+				warn: (message) => log$7.warn(message)
 			})
 		});
 		const workspaceNotes = hookAdjustedBootstrapFiles.some((file) => file.name === DEFAULT_BOOTSTRAP_FILENAME && !file.missing) ? ["Reminder: commit your changes in this workspace after edits."] : void 0;
@@ -34338,7 +34395,7 @@ async function runEmbeddedAttempt(params) {
 		try {
 			await repairSessionFileIfNeeded({
 				sessionFile: params.sessionFile,
-				warn: (message) => log$6.warn(message)
+				warn: (message) => log$7.warn(message)
 			});
 			const hadSessionFile = await fs$1.stat(params.sessionFile).then(() => true).catch(() => false);
 			const transcriptPolicy = resolveTranscriptPolicy({
@@ -34347,7 +34404,7 @@ async function runEmbeddedAttempt(params) {
 				modelId: params.modelId
 			});
 			const versionCheck = await handleSessionVersion(params.sessionFile);
-			if (versionCheck.archived) log$6.warn(`session archived: created by ${versionCheck.poisonVersion}, known corruption range → ${versionCheck.archivePath}`);
+			if (versionCheck.archived) log$7.warn(`session archived: created by ${versionCheck.poisonVersion}, known corruption range → ${versionCheck.archivePath}`);
 			await prewarmSessionFile(params.sessionFile);
 			sessionManager = guardSessionManager(SessionManager.open(params.sessionFile), {
 				agentId: sessionAgentId,
@@ -34599,6 +34656,9 @@ async function runEmbeddedAttempt(params) {
 				});
 			};
 			const streamMonitor = createStreamMonitor(modelProfile);
+			const TOOL_ERROR_ABORT_THRESHOLD = 5;
+			const TOOL_ERROR_WARN_THRESHOLD = 3;
+			let consecutiveToolErrors = 0;
 			const subscription = subscribeEmbeddedPiSession({
 				session: activeSession,
 				runId: params.runId,
@@ -34620,9 +34680,25 @@ async function runEmbeddedAttempt(params) {
 				onAgentEvent: (evt) => {
 					armSymipulseTimer();
 					params.onAgentEvent?.(evt);
+					if (evt.stream === "tool" && !aborted) {
+						const phase = typeof evt.data?.phase === "string" ? evt.data.phase : "";
+						const isError = evt.data?.isError === true;
+						if (phase === "result") {
+							if (isError) consecutiveToolErrors++;
+							else consecutiveToolErrors = 0;
+							if (consecutiveToolErrors >= TOOL_ERROR_ABORT_THRESHOLD) {
+								const toolName = typeof evt.data?.name === "string" ? evt.data.name : "unknown";
+								log$7.error(`Agent-loop circuit breaker: ${consecutiveToolErrors} consecutive tool errors (last: ${toolName}). Aborting run ${params.runId}.`);
+								abortRun(false, /* @__PURE__ */ new Error(`${consecutiveToolErrors} consecutive tool errors. The model may be generating corrupted tool arguments. Run aborted to prevent infinite loop.`));
+							} else if (consecutiveToolErrors === TOOL_ERROR_WARN_THRESHOLD) {
+								const toolName = typeof evt.data?.name === "string" ? evt.data.name : "unknown";
+								log$7.warn(`Agent-loop tool error warning: ${consecutiveToolErrors} consecutive failures (last: ${toolName}). runId=${params.runId}`);
+							}
+						}
+					}
 					if (evt.stream === "assistant" && typeof evt.data?.text === "string" && !aborted) {
 						streamMonitor.onChunk(evt.data.text);
-						if (streamMonitor.shouldStop()) log$6.debug(`stream monitor detection (log-only, no abort): runId=${params.runId} reason=${streamMonitor.getStopReason()}`);
+						if (streamMonitor.shouldStop()) log$7.debug(`stream monitor detection (log-only, no abort): runId=${params.runId} reason=${streamMonitor.getStopReason()}`);
 					}
 				},
 				enforceFinalTag: params.enforceFinalTag,
@@ -34642,7 +34718,7 @@ async function runEmbeddedAttempt(params) {
 			let abortWarnTimer;
 			const isProbeSession = params.sessionId?.startsWith("probe-") ?? false;
 			const abortTimer = setTimeout(() => {
-				if (!isProbeSession) log$6.warn(`embedded run timeout: runId=${params.runId} sessionId=${params.sessionId} timeoutMs=${params.timeoutMs}`);
+				if (!isProbeSession) log$7.warn(`embedded run timeout: runId=${params.runId} sessionId=${params.sessionId} timeoutMs=${params.timeoutMs}`);
 				if (shouldFlagCompactionTimeout({
 					isTimeout: true,
 					isCompactionPendingOrRetrying: subscription.isCompacting(),
@@ -34651,7 +34727,7 @@ async function runEmbeddedAttempt(params) {
 				abortRun(true);
 				if (!abortWarnTimer) abortWarnTimer = setTimeout(() => {
 					if (!activeSession.isStreaming) return;
-					if (!isProbeSession) log$6.warn(`embedded run abort still streaming: runId=${params.runId} sessionId=${params.sessionId}`);
+					if (!isProbeSession) log$7.warn(`embedded run abort still streaming: runId=${params.runId} sessionId=${params.sessionId}`);
 				}, 1e4);
 			}, Math.max(1, params.timeoutMs));
 			armSymipulseTimer = () => {
@@ -34659,7 +34735,7 @@ async function runEmbeddedAttempt(params) {
 				clearSymipulseTimer();
 				symipulseTimer = setTimeout(() => {
 					if (aborted) return;
-					if (!isProbeSession) log$6.warn(`symipulse timeout: runId=${params.runId} sessionId=${params.sessionId} symipulseMs=${symipulseMs} (no activity)`);
+					if (!isProbeSession) log$7.warn(`symipulse timeout: runId=${params.runId} sessionId=${params.sessionId} symipulseMs=${symipulseMs} (no activity)`);
 					if (shouldFlagCompactionTimeout({
 						isTimeout: true,
 						isCompactionPendingOrRetrying: subscription.isCompacting(),
@@ -34703,13 +34779,13 @@ async function runEmbeddedAttempt(params) {
 					prompt: params.prompt,
 					messages: activeSession.messages
 				}, hookCtx).catch((hookErr) => {
-					log$6.warn(`before_prompt_build hook failed: ${String(hookErr)}`);
+					log$7.warn(`before_prompt_build hook failed: ${String(hookErr)}`);
 				}) : void 0;
 				const legacyResult = hookRunner?.hasHooks("before_agent_start") ? await hookRunner.runBeforeAgentStart({
 					prompt: params.prompt,
 					messages: activeSession.messages
 				}, hookCtx).catch((hookErr) => {
-					log$6.warn(`before_agent_start hook (legacy prompt build path) failed: ${String(hookErr)}`);
+					log$7.warn(`before_agent_start hook (legacy prompt build path) failed: ${String(hookErr)}`);
 				}) : void 0;
 				const hookResult = {
 					systemPrompt: promptBuildResult?.systemPrompt ?? legacyResult?.systemPrompt,
@@ -34717,7 +34793,7 @@ async function runEmbeddedAttempt(params) {
 				};
 				if (hookResult?.prependContext) {
 					effectivePrompt = `${hookResult.prependContext}\n\n${params.prompt}`;
-					log$6.debug(`hooks: prepended context to prompt (${hookResult.prependContext.length} chars)`);
+					log$7.debug(`hooks: prepended context to prompt (${hookResult.prependContext.length} chars)`);
 				}
 				{
 					const autoRecallAgentId = normalizeAgentId(params.sessionKey);
@@ -34734,11 +34810,11 @@ async function runEmbeddedAttempt(params) {
 							if (recallResults.length > 0) {
 								const recallBlock = `<memory_context>\nThe following memory snippets were automatically retrieved as relevant context:\n\n${recallResults.map((r) => `[${r.path}#L${r.startLine}-L${r.endLine}]\n${r.snippet}`).join("\n---\n")}\n</memory_context>`;
 								effectivePrompt = `${recallBlock}\n\n${effectivePrompt}`;
-								log$6.debug(`auto-recall: injected ${recallResults.length} snippets (${recallBlock.length} chars)`);
+								log$7.debug(`auto-recall: injected ${recallResults.length} snippets (${recallBlock.length} chars)`);
 							}
 						}
 					} catch (recallErr) {
-						log$6.debug(`auto-recall: skipped (${String(recallErr)})`);
+						log$7.debug(`auto-recall: skipped (${String(recallErr)})`);
 					}
 				}
 				{
@@ -34750,10 +34826,10 @@ async function runEmbeddedAttempt(params) {
 					if (planResult.enter) {
 						if (planResult.stripped != null) effectivePrompt = planResult.stripped;
 						effectivePrompt = `${PLAN_MODE_SYSTEM_PROMPT}\n\n${effectivePrompt}`;
-						log$6.info(`plan-mode: activated (${planResult.reason}) for runId=${params.runId}`);
+						log$7.info(`plan-mode: activated (${planResult.reason}) for runId=${params.runId}`);
 					} else if (planResult.stripped != null) effectivePrompt = planResult.stripped;
 				}
-				log$6.debug(`embedded run prompt start: runId=${params.runId} sessionId=${params.sessionId}`);
+				log$7.debug(`embedded run prompt start: runId=${params.runId} sessionId=${params.sessionId}`);
 				cacheTrace?.recordStage("prompt:before", {
 					prompt: effectivePrompt,
 					messages: activeSession.messages
@@ -34765,7 +34841,7 @@ async function runEmbeddedAttempt(params) {
 					const sessionContext = sessionManager.buildSessionContext();
 					const sanitizedOrphan = transcriptPolicy.sanitizeThinkingSignatures ? sanitizeAntigravityThinkingBlocks(sessionContext.messages) : sessionContext.messages;
 					activeSession.agent.replaceMessages(sanitizedOrphan);
-					log$6.warn(`Removed orphaned user message to prevent consecutive user turns. runId=${params.runId} sessionId=${params.sessionId}`);
+					log$7.warn(`Removed orphaned user message to prevent consecutive user turns. runId=${params.runId} sessionId=${params.sessionId}`);
 				}
 				try {
 					const imageResult = await detectAndLoadPromptImages({
@@ -34787,12 +34863,12 @@ async function runEmbeddedAttempt(params) {
 						messages: activeSession.messages,
 						note: `images: prompt=${imageResult.images.length} history=${imageResult.historyImagesByIndex.size}`
 					});
-					if (log$6.isEnabled("debug")) {
+					if (log$7.isEnabled("debug")) {
 						const msgCount = activeSession.messages.length;
 						const systemLen = systemPromptText?.length ?? 0;
 						const promptLen = effectivePrompt.length;
 						const sessionSummary = summarizeSessionContext(activeSession.messages);
-						log$6.debug(`[context-diag] pre-prompt: sessionKey=${params.sessionKey ?? params.sessionId} messages=${msgCount} roleCounts=${sessionSummary.roleCounts} historyTextChars=${sessionSummary.totalTextChars} maxMessageTextChars=${sessionSummary.maxMessageTextChars} historyImageBlocks=${sessionSummary.totalImageBlocks} systemPromptChars=${systemLen} promptChars=${promptLen} promptImages=${imageResult.images.length} historyImageMessages=${imageResult.historyImagesByIndex.size} provider=${params.provider}/${params.modelId} sessionFile=${params.sessionFile}`);
+						log$7.debug(`[context-diag] pre-prompt: sessionKey=${params.sessionKey ?? params.sessionId} messages=${msgCount} roleCounts=${sessionSummary.roleCounts} historyTextChars=${sessionSummary.totalTextChars} maxMessageTextChars=${sessionSummary.maxMessageTextChars} historyImageBlocks=${sessionSummary.totalImageBlocks} systemPromptChars=${systemLen} promptChars=${promptLen} promptImages=${imageResult.images.length} historyImageMessages=${imageResult.historyImagesByIndex.size} provider=${params.provider}/${params.modelId} sessionFile=${params.sessionFile}`);
 					}
 					if (hookRunner?.hasHooks("llm_input")) hookRunner.runLlmInput({
 						runId: params.runId,
@@ -34810,7 +34886,7 @@ async function runEmbeddedAttempt(params) {
 						workspaceDir: params.workspaceDir,
 						messageProvider: params.messageProvider ?? void 0
 					}).catch((err) => {
-						log$6.warn(`llm_input hook failed: ${String(err)}`);
+						log$7.warn(`llm_input hook failed: ${String(err)}`);
 					});
 					if (imageResult.images.length > 0) await abortable(activeSession.prompt(effectivePrompt, { images: imageResult.images }));
 					else await abortable(activeSession.prompt(effectivePrompt));
@@ -34818,7 +34894,7 @@ async function runEmbeddedAttempt(params) {
 					promptError = err;
 					promptErrorSource = "prompt";
 				} finally {
-					log$6.debug(`embedded run prompt end: runId=${params.runId} sessionId=${params.sessionId} durationMs=${Date.now() - promptStartedAt}`);
+					log$7.debug(`embedded run prompt end: runId=${params.runId} sessionId=${params.sessionId} durationMs=${Date.now() - promptStartedAt}`);
 				}
 				const wasCompactingBefore = activeSession.isCompacting;
 				const snapshot = activeSession.messages.slice();
@@ -34833,7 +34909,7 @@ async function runEmbeddedAttempt(params) {
 							promptError = err;
 							promptErrorSource = "compaction";
 						}
-						if (!isProbeSession) log$6.debug(`compaction wait aborted: runId=${params.runId} sessionId=${params.sessionId}`);
+						if (!isProbeSession) log$7.debug(`compaction wait aborted: runId=${params.runId} sessionId=${params.sessionId}`);
 					} else throw err;
 				}
 				if (!timedOutDuringCompaction) {
@@ -34851,7 +34927,7 @@ async function runEmbeddedAttempt(params) {
 					currentSessionId: activeSession.sessionId
 				});
 				if (timedOutDuringCompaction) {
-					if (!isProbeSession) log$6.warn(`using ${snapshotSelection.source} snapshot: timed out during compaction runId=${params.runId} sessionId=${params.sessionId}`);
+					if (!isProbeSession) log$7.warn(`using ${snapshotSelection.source} snapshot: timed out during compaction runId=${params.runId} sessionId=${params.sessionId}`);
 				}
 				messagesSnapshot = snapshotSelection.messagesSnapshot;
 				sessionIdUsed = snapshotSelection.sessionIdUsed;
@@ -34866,7 +34942,7 @@ async function runEmbeddedAttempt(params) {
 						error: describeUnknownError(promptError)
 					});
 				} catch (entryErr) {
-					log$6.warn(`failed to persist prompt error entry: ${String(entryErr)}`);
+					log$7.warn(`failed to persist prompt error entry: ${String(entryErr)}`);
 				}
 				cacheTrace?.recordStage("session:after", {
 					messages: messagesSnapshot,
@@ -34885,17 +34961,17 @@ async function runEmbeddedAttempt(params) {
 					workspaceDir: params.workspaceDir,
 					messageProvider: params.messageProvider ?? void 0
 				}).catch((err) => {
-					log$6.warn(`agent_end hook failed: ${err}`);
+					log$7.warn(`agent_end hook failed: ${err}`);
 				});
 			} finally {
 				clearTimeout(abortTimer);
 				clearSymipulseTimer();
 				if (abortWarnTimer) clearTimeout(abortWarnTimer);
-				if (!isProbeSession && (aborted || timedOut) && !timedOutDuringCompaction) log$6.debug(`run cleanup: runId=${params.runId} sessionId=${params.sessionId} aborted=${aborted} timedOut=${timedOut}`);
+				if (!isProbeSession && (aborted || timedOut) && !timedOutDuringCompaction) log$7.debug(`run cleanup: runId=${params.runId} sessionId=${params.sessionId} aborted=${aborted} timedOut=${timedOut}`);
 				try {
 					unsubscribe();
 				} catch (err) {
-					log$6.error(`CRITICAL: unsubscribe failed, possible resource leak: runId=${params.runId} ${String(err)}`);
+					log$7.error(`CRITICAL: unsubscribe failed, possible resource leak: runId=${params.runId} ${String(err)}`);
 				}
 				clearActiveEmbeddedRun(params.sessionId, queueHandle, params.sessionKey);
 				params.abortSignal?.removeEventListener?.("abort", onAbort);
@@ -34920,7 +34996,7 @@ async function runEmbeddedAttempt(params) {
 				workspaceDir: params.workspaceDir,
 				messageProvider: params.messageProvider ?? void 0
 			}).catch((err) => {
-				log$6.warn(`llm_output hook failed: ${String(err)}`);
+				log$7.warn(`llm_output hook failed: ${String(err)}`);
 			});
 			return {
 				aborted,
@@ -35181,7 +35257,7 @@ async function runEmbeddedPiAgent(params) {
 		const redactedSessionId = redactRunIdentifier(params.sessionId);
 		const redactedSessionKey = redactRunIdentifier(params.sessionKey);
 		const redactedWorkspace = redactRunIdentifier(resolvedWorkspace);
-		if (workspaceResolution.usedFallback) log$6.warn(`[workspace-fallback] caller=runEmbeddedPiAgent reason=${workspaceResolution.fallbackReason} run=${params.runId} session=${redactedSessionId} sessionKey=${redactedSessionKey} agent=${workspaceResolution.agentId} workspace=${redactedWorkspace}`);
+		if (workspaceResolution.usedFallback) log$7.warn(`[workspace-fallback] caller=runEmbeddedPiAgent reason=${workspaceResolution.fallbackReason} run=${params.runId} session=${redactedSessionId} sessionKey=${redactedSessionKey} agent=${workspaceResolution.agentId} workspace=${redactedWorkspace}`);
 		const prevCwd = process.cwd();
 		let provider = (params.provider ?? DEFAULT_PROVIDER).trim() || DEFAULT_PROVIDER;
 		let modelId = (params.model ?? DEFAULT_MODEL).trim() || DEFAULT_MODEL;
@@ -35200,7 +35276,7 @@ async function runEmbeddedPiAgent(params) {
 		if (hookRunner?.hasHooks("before_model_resolve")) try {
 			modelResolveOverride = await hookRunner.runBeforeModelResolve({ prompt: params.prompt }, hookCtx);
 		} catch (hookErr) {
-			log$6.warn(`before_model_resolve hook failed: ${String(hookErr)}`);
+			log$7.warn(`before_model_resolve hook failed: ${String(hookErr)}`);
 		}
 		if (hookRunner?.hasHooks("before_agent_start")) try {
 			const legacyResult = await hookRunner.runBeforeAgentStart({ prompt: params.prompt }, hookCtx);
@@ -35209,15 +35285,15 @@ async function runEmbeddedPiAgent(params) {
 				modelOverride: modelResolveOverride?.modelOverride ?? legacyResult?.modelOverride
 			};
 		} catch (hookErr) {
-			log$6.warn(`before_agent_start hook (legacy model resolve path) failed: ${String(hookErr)}`);
+			log$7.warn(`before_agent_start hook (legacy model resolve path) failed: ${String(hookErr)}`);
 		}
 		if (modelResolveOverride?.providerOverride) {
 			provider = modelResolveOverride.providerOverride;
-			log$6.info(`[hooks] provider overridden to ${provider}`);
+			log$7.info(`[hooks] provider overridden to ${provider}`);
 		}
 		if (modelResolveOverride?.modelOverride) {
 			modelId = modelResolveOverride.modelOverride;
-			log$6.info(`[hooks] model overridden to ${modelId}`);
+			log$7.info(`[hooks] model overridden to ${modelId}`);
 		}
 		const { model, error, authStorage, modelRegistry } = resolveModel(provider, modelId, agentDir, params.config);
 		if (!model) throw new FailoverError(error ?? `Unknown model: ${provider}/${modelId}`, {
@@ -35237,9 +35313,9 @@ async function runEmbeddedPiAgent(params) {
 			warnBelowTokens: CONTEXT_WINDOW_WARN_BELOW_TOKENS,
 			hardMinTokens: CONTEXT_WINDOW_HARD_MIN_TOKENS
 		});
-		if (ctxGuard.shouldWarn) log$6.warn(`low context window: ${provider}/${modelId} ctx=${ctxGuard.tokens} (warn<${CONTEXT_WINDOW_WARN_BELOW_TOKENS}) source=${ctxGuard.source}`);
+		if (ctxGuard.shouldWarn) log$7.warn(`low context window: ${provider}/${modelId} ctx=${ctxGuard.tokens} (warn<${CONTEXT_WINDOW_WARN_BELOW_TOKENS}) source=${ctxGuard.source}`);
 		if (ctxGuard.shouldBlock) {
-			log$6.error(`blocked model (context window too small): ${provider}/${modelId} ctx=${ctxGuard.tokens} (min=${CONTEXT_WINDOW_HARD_MIN_TOKENS}) source=${ctxGuard.source}`);
+			log$7.error(`blocked model (context window too small): ${provider}/${modelId} ctx=${ctxGuard.tokens} (min=${CONTEXT_WINDOW_HARD_MIN_TOKENS}) source=${ctxGuard.source}`);
 			throw new FailoverError(`Model context window too small (${ctxGuard.tokens} tokens). Minimum is ${CONTEXT_WINDOW_HARD_MIN_TOKENS}.`, {
 				reason: "unknown",
 				provider,
@@ -35369,7 +35445,7 @@ async function runEmbeddedPiAgent(params) {
 			while (true) {
 				if (runLoopIterations >= MAX_RUN_LOOP_ITERATIONS) {
 					const message = `Exceeded retry limit after ${runLoopIterations} attempts (max=${MAX_RUN_LOOP_ITERATIONS}).`;
-					log$6.error(`[run-retry-limit] sessionKey=${params.sessionKey ?? params.sessionId} provider=${provider}/${modelId} attempts=${runLoopIterations} maxAttempts=${MAX_RUN_LOOP_ITERATIONS}`);
+					log$7.error(`[run-retry-limit] sessionKey=${params.sessionKey ?? params.sessionId} provider=${provider}/${modelId} attempts=${runLoopIterations} maxAttempts=${MAX_RUN_LOOP_ITERATIONS}`);
 					return {
 						payloads: [{
 							text: "Request failed after repeated internal retries. Please try again, or use /new to start a fresh session.",
@@ -35490,18 +35566,18 @@ async function runEmbeddedPiAgent(params) {
 					const overflowDiagId = createCompactionDiagId$1();
 					const errorText = contextOverflowError.text;
 					const msgCount = attempt.messagesSnapshot?.length ?? 0;
-					log$6.warn(`[context-overflow-diag] sessionKey=${params.sessionKey ?? params.sessionId} provider=${provider}/${modelId} source=${contextOverflowError.source} messages=${msgCount} sessionFile=${params.sessionFile} diagId=${overflowDiagId} compactionAttempts=${overflowCompactionAttempts} error=${errorText.slice(0, 200)}`);
+					log$7.warn(`[context-overflow-diag] sessionKey=${params.sessionKey ?? params.sessionId} provider=${provider}/${modelId} source=${contextOverflowError.source} messages=${msgCount} sessionFile=${params.sessionFile} diagId=${overflowDiagId} compactionAttempts=${overflowCompactionAttempts} error=${errorText.slice(0, 200)}`);
 					const isCompactionFailure = isCompactionFailureError(errorText);
 					const hadAttemptLevelCompaction = attemptCompactionCount > 0;
 					if (!isCompactionFailure && hadAttemptLevelCompaction && overflowCompactionAttempts < MAX_OVERFLOW_COMPACTION_ATTEMPTS) {
 						overflowCompactionAttempts++;
-						log$6.warn(`context overflow persisted after in-attempt compaction (attempt ${overflowCompactionAttempts}/${MAX_OVERFLOW_COMPACTION_ATTEMPTS}); retrying prompt without additional compaction for ${provider}/${modelId}`);
+						log$7.warn(`context overflow persisted after in-attempt compaction (attempt ${overflowCompactionAttempts}/${MAX_OVERFLOW_COMPACTION_ATTEMPTS}); retrying prompt without additional compaction for ${provider}/${modelId}`);
 						continue;
 					}
 					if (!isCompactionFailure && !hadAttemptLevelCompaction && overflowCompactionAttempts < MAX_OVERFLOW_COMPACTION_ATTEMPTS) {
-						if (log$6.isEnabled("debug")) log$6.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=compact isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=unknown attempt=${overflowCompactionAttempts + 1} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
+						if (log$7.isEnabled("debug")) log$7.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=compact isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=unknown attempt=${overflowCompactionAttempts + 1} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
 						overflowCompactionAttempts++;
-						log$6.warn(`context overflow detected (attempt ${overflowCompactionAttempts}/${MAX_OVERFLOW_COMPACTION_ATTEMPTS}); attempting auto-compaction for ${provider}/${modelId}`);
+						log$7.warn(`context overflow detected (attempt ${overflowCompactionAttempts}/${MAX_OVERFLOW_COMPACTION_ATTEMPTS}); attempting auto-compaction for ${provider}/${modelId}`);
 						const compactResult = await compactEmbeddedPiSessionDirect({
 							sessionId: params.sessionId,
 							sessionKey: params.sessionKey,
@@ -35530,10 +35606,10 @@ async function runEmbeddedPiAgent(params) {
 						});
 						if (compactResult.compacted) {
 							autoCompactionCount += 1;
-							log$6.info(`auto-compaction succeeded for ${provider}/${modelId}; retrying prompt`);
+							log$7.info(`auto-compaction succeeded for ${provider}/${modelId}; retrying prompt`);
 							continue;
 						}
-						log$6.warn(`auto-compaction failed for ${provider}/${modelId}: ${compactResult.reason ?? "nothing to compact"}`);
+						log$7.warn(`auto-compaction failed for ${provider}/${modelId}: ${compactResult.reason ?? "nothing to compact"}`);
 					}
 					if (!toolResultTruncationAttempted) {
 						const contextWindowTokens = ctxInfo.tokens;
@@ -35542,9 +35618,9 @@ async function runEmbeddedPiAgent(params) {
 							contextWindowTokens
 						}) : false;
 						if (hasOversized) {
-							if (log$6.isEnabled("debug")) log$6.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=truncate_tool_results isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=${hasOversized} attempt=${overflowCompactionAttempts} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
+							if (log$7.isEnabled("debug")) log$7.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=truncate_tool_results isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=${hasOversized} attempt=${overflowCompactionAttempts} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
 							toolResultTruncationAttempted = true;
-							log$6.warn(`[context-overflow-recovery] Attempting tool result truncation for ${provider}/${modelId} (contextWindow=${contextWindowTokens} tokens)`);
+							log$7.warn(`[context-overflow-recovery] Attempting tool result truncation for ${provider}/${modelId} (contextWindow=${contextWindowTokens} tokens)`);
 							const truncResult = await truncateOversizedToolResultsInSession({
 								sessionFile: params.sessionFile,
 								contextWindowTokens,
@@ -35552,13 +35628,13 @@ async function runEmbeddedPiAgent(params) {
 								sessionKey: params.sessionKey
 							});
 							if (truncResult.truncated) {
-								log$6.info(`[context-overflow-recovery] Truncated ${truncResult.truncatedCount} tool result(s); retrying prompt`);
+								log$7.info(`[context-overflow-recovery] Truncated ${truncResult.truncatedCount} tool result(s); retrying prompt`);
 								continue;
 							}
-							log$6.warn(`[context-overflow-recovery] Tool result truncation did not help: ${truncResult.reason ?? "unknown"}`);
-						} else if (log$6.isEnabled("debug")) log$6.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=give_up isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=${hasOversized} attempt=${overflowCompactionAttempts} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
+							log$7.warn(`[context-overflow-recovery] Tool result truncation did not help: ${truncResult.reason ?? "unknown"}`);
+						} else if (log$7.isEnabled("debug")) log$7.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=give_up isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=${hasOversized} attempt=${overflowCompactionAttempts} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
 					}
-					if ((isCompactionFailure || overflowCompactionAttempts >= MAX_OVERFLOW_COMPACTION_ATTEMPTS || toolResultTruncationAttempted) && log$6.isEnabled("debug")) log$6.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=give_up isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=unknown attempt=${overflowCompactionAttempts} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
+					if ((isCompactionFailure || overflowCompactionAttempts >= MAX_OVERFLOW_COMPACTION_ATTEMPTS || toolResultTruncationAttempted) && log$7.isEnabled("debug")) log$7.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=give_up isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=unknown attempt=${overflowCompactionAttempts} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
 					const kind = isCompactionFailure ? "compaction_failure" : "context_overflow";
 					return {
 						payloads: [{
@@ -35639,7 +35715,7 @@ async function runEmbeddedPiAgent(params) {
 						attempted: attemptedThinking
 					});
 					if (fallbackThinking) {
-						log$6.warn(`unsupported thinking level for ${provider}/${modelId}; retrying with ${fallbackThinking}`);
+						log$7.warn(`unsupported thinking level for ${provider}/${modelId}; retrying with ${fallbackThinking}`);
 						thinkLevel = fallbackThinking;
 						continue;
 					}
@@ -35657,7 +35733,7 @@ async function runEmbeddedPiAgent(params) {
 					attempted: attemptedThinking
 				});
 				if (fallbackThinking && !aborted) {
-					log$6.warn(`unsupported thinking level for ${provider}/${modelId}; retrying with ${fallbackThinking}`);
+					log$7.warn(`unsupported thinking level for ${provider}/${modelId}; retrying with ${fallbackThinking}`);
 					thinkLevel = fallbackThinking;
 					continue;
 				}
@@ -35674,7 +35750,7 @@ async function runEmbeddedPiAgent(params) {
 						imageDimensionError.contentIndex !== void 0 ? `content=${imageDimensionError.contentIndex}` : null,
 						imageDimensionError.maxDimensionPx !== void 0 ? `limit=${imageDimensionError.maxDimensionPx}px` : null
 					].filter(Boolean).join(" ");
-					log$6.warn(`Profile ${lastProfileId} rejected image payload${details ? ` (${details})` : ""}.`);
+					log$7.warn(`Profile ${lastProfileId} rejected image payload${details ? ` (${details})` : ""}.`);
 				}
 				const isLocalOllamaTimeout = timedOut && model.api === "ollama";
 				if (!aborted && failoverFailure || timedOut && !timedOutDuringCompaction && !isLocalOllamaTimeout) {
@@ -35686,8 +35762,8 @@ async function runEmbeddedPiAgent(params) {
 							cfg: params.config,
 							agentDir: params.agentDir
 						});
-						if (timedOut && !isProbeSession) log$6.warn(`Profile ${lastProfileId} timed out (possible rate limit). Trying next account...`);
-						if (cloudCodeAssistFormatError) log$6.warn(`Profile ${lastProfileId} hit Cloud Code Assist format error. Tool calls will be sanitized on retry.`);
+						if (timedOut && !isProbeSession) log$7.warn(`Profile ${lastProfileId} timed out (possible rate limit). Trying next account...`);
+						if (cloudCodeAssistFormatError) log$7.warn(`Profile ${lastProfileId} hit Cloud Code Assist format error. Tool calls will be sanitized on retry.`);
 					}
 					if (await advanceAuthProfile()) continue;
 					if (fallbackConfigured) {
@@ -35753,7 +35829,7 @@ async function runEmbeddedPiAgent(params) {
 					const hasCodeBlocks = attempt.assistantTexts.some((text) => /```[\s\S]*?```/.test(text));
 					if (hasCodeToolUsage || hasCodeBlocks) {
 						verificationPassCompleted = true;
-						log$6.debug(`[verification] starting verification pass: runId=${params.runId} sessionId=${params.sessionId} trigger=${hasCodeToolUsage ? "tool_usage" : "code_blocks"}`);
+						log$7.debug(`[verification] starting verification pass: runId=${params.runId} sessionId=${params.sessionId} trigger=${hasCodeToolUsage ? "tool_usage" : "code_blocks"}`);
 						const verificationPrompt = "Review your response against the original user request. Check: (1) Did you address every requirement? (2) Did you include tests if requested? (3) Did you run and verify the code works? If you missed anything, fix it now. If everything looks correct, briefly confirm.";
 						try {
 							const verifyAttempt = await runEmbeddedAttempt({
@@ -35839,10 +35915,10 @@ async function runEmbeddedPiAgent(params) {
 									payloads.length = 0;
 									payloads.push(...verifyPayloads);
 								}
-								log$6.debug(`[verification] verification produced corrections: runId=${params.runId} tools=${verifyAttempt.toolMetas.length} texts=${verifyAttempt.assistantTexts.length}`);
-							} else log$6.debug(`[verification] verification confirmed original response: runId=${params.runId}`);
+								log$7.debug(`[verification] verification produced corrections: runId=${params.runId} tools=${verifyAttempt.toolMetas.length} texts=${verifyAttempt.assistantTexts.length}`);
+							} else log$7.debug(`[verification] verification confirmed original response: runId=${params.runId}`);
 						} catch (verifyErr) {
-							log$6.warn(`[verification] verification pass failed, keeping original response: runId=${params.runId} error=${String(verifyErr)}`);
+							log$7.warn(`[verification] verification pass failed, keeping original response: runId=${params.runId} error=${String(verifyErr)}`);
 						}
 					}
 				}
@@ -35863,7 +35939,7 @@ async function runEmbeddedPiAgent(params) {
 					messagingToolSentTargets: attempt.messagingToolSentTargets,
 					successfulCronAdds: attempt.successfulCronAdds
 				};
-				log$6.debug(`embedded run done: runId=${params.runId} sessionId=${params.sessionId} durationMs=${Date.now() - started} aborted=${aborted}`);
+				log$7.debug(`embedded run done: runId=${params.runId} sessionId=${params.sessionId} durationMs=${Date.now() - started} aborted=${aborted}`);
 				if (lastProfileId) {
 					await markAuthProfileGood({
 						store: authStore,
@@ -36115,7 +36191,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-DaTTL9M0.js");
+			const { sendMessageWhatsApp } = await import("./web-BgKYnau3.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -53553,7 +53629,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-DaTTL9M0.js");
+	webChannelPromise ??= import("./web-BgKYnau3.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -69764,7 +69840,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 	const provider = (params.provider ?? DEFAULT_PROVIDER).trim() || DEFAULT_PROVIDER;
 	const modelId = (params.model ?? DEFAULT_MODEL).trim() || DEFAULT_MODEL;
 	const fail = (reason) => {
-		log$6.warn(`[compaction-diag] end runId=${runId} sessionKey=${params.sessionKey ?? params.sessionId} diagId=${diagId} trigger=${trigger} provider=${provider}/${modelId} attempt=${attempt} maxAttempts=${maxAttempts} outcome=failed reason=${classifyCompactionReason(reason)} durationMs=${Date.now() - startedAt}`);
+		log$7.warn(`[compaction-diag] end runId=${runId} sessionKey=${params.sessionKey ?? params.sessionId} diagId=${diagId} trigger=${trigger} provider=${provider}/${modelId} attempt=${attempt} maxAttempts=${maxAttempts} outcome=failed reason=${classifyCompactionReason(reason)} durationMs=${Date.now() - startedAt}`);
 		return {
 			ok: false,
 			compacted: false,
@@ -69832,7 +69908,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 			sessionId: params.sessionId,
 			warn: makeBootstrapWarn({
 				sessionLabel,
-				warn: (message) => log$6.warn(message)
+				warn: (message) => log$7.warn(message)
 			})
 		});
 		const runAbortController = new AbortController();
@@ -69972,7 +70048,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 		try {
 			await repairSessionFileIfNeeded({
 				sessionFile: params.sessionFile,
-				warn: (message) => log$6.warn(message)
+				warn: (message) => log$7.warn(message)
 			});
 			await prewarmSessionFile(params.sessionFile);
 			const transcriptPolicy = resolveTranscriptPolicy({
@@ -70057,13 +70133,13 @@ async function compactEmbeddedPiSessionDirect(params) {
 					messages: preCompactionMessages,
 					sessionFile: params.sessionFile
 				}, hookCtx).catch((hookErr) => {
-					log$6.warn(`before_compaction hook failed: ${String(hookErr)}`);
+					log$7.warn(`before_compaction hook failed: ${String(hookErr)}`);
 				});
-				const diagEnabled = log$6.isEnabled("debug");
+				const diagEnabled = log$7.isEnabled("debug");
 				const preMetrics = diagEnabled ? summarizeCompactionMessages(session.messages) : void 0;
 				if (diagEnabled && preMetrics) {
-					log$6.debug(`[compaction-diag] start runId=${runId} sessionKey=${params.sessionKey ?? params.sessionId} diagId=${diagId} trigger=${trigger} provider=${provider}/${modelId} attempt=${attempt} maxAttempts=${maxAttempts} pre.messages=${preMetrics.messages} pre.historyTextChars=${preMetrics.historyTextChars} pre.toolResultChars=${preMetrics.toolResultChars} pre.estTokens=${preMetrics.estTokens ?? "unknown"}`);
-					log$6.debug(`[compaction-diag] contributors diagId=${diagId} top=${JSON.stringify(preMetrics.contributors)}`);
+					log$7.debug(`[compaction-diag] start runId=${runId} sessionKey=${params.sessionKey ?? params.sessionId} diagId=${diagId} trigger=${trigger} provider=${provider}/${modelId} attempt=${attempt} maxAttempts=${maxAttempts} pre.messages=${preMetrics.messages} pre.historyTextChars=${preMetrics.historyTextChars} pre.toolResultChars=${preMetrics.toolResultChars} pre.estTokens=${preMetrics.estTokens ?? "unknown"}`);
+					log$7.debug(`[compaction-diag] contributors diagId=${diagId} top=${JSON.stringify(preMetrics.contributors)}`);
 				}
 				const compactStartedAt = Date.now();
 				const result = await compactWithSafetyTimeout(() => session.compact(params.customInstructions));
@@ -70081,10 +70157,10 @@ async function compactEmbeddedPiSessionDirect(params) {
 					compactedCount: limited.length - session.messages.length,
 					sessionFile: params.sessionFile
 				}, hookCtx).catch((hookErr) => {
-					log$6.warn(`after_compaction hook failed: ${hookErr}`);
+					log$7.warn(`after_compaction hook failed: ${hookErr}`);
 				});
 				const postMetrics = diagEnabled ? summarizeCompactionMessages(session.messages) : void 0;
-				if (diagEnabled && preMetrics && postMetrics) log$6.debug(`[compaction-diag] end runId=${runId} sessionKey=${params.sessionKey ?? params.sessionId} diagId=${diagId} trigger=${trigger} provider=${provider}/${modelId} attempt=${attempt} maxAttempts=${maxAttempts} outcome=compacted reason=none durationMs=${Date.now() - compactStartedAt} retrying=false post.messages=${postMetrics.messages} post.historyTextChars=${postMetrics.historyTextChars} post.toolResultChars=${postMetrics.toolResultChars} post.estTokens=${postMetrics.estTokens ?? "unknown"} delta.messages=${postMetrics.messages - preMetrics.messages} delta.historyTextChars=${postMetrics.historyTextChars - preMetrics.historyTextChars} delta.toolResultChars=${postMetrics.toolResultChars - preMetrics.toolResultChars} delta.estTokens=${typeof preMetrics.estTokens === "number" && typeof postMetrics.estTokens === "number" ? postMetrics.estTokens - preMetrics.estTokens : "unknown"}`);
+				if (diagEnabled && preMetrics && postMetrics) log$7.debug(`[compaction-diag] end runId=${runId} sessionKey=${params.sessionKey ?? params.sessionId} diagId=${diagId} trigger=${trigger} provider=${provider}/${modelId} attempt=${attempt} maxAttempts=${maxAttempts} outcome=compacted reason=none durationMs=${Date.now() - compactStartedAt} retrying=false post.messages=${postMetrics.messages} post.historyTextChars=${postMetrics.historyTextChars} post.toolResultChars=${postMetrics.toolResultChars} post.estTokens=${postMetrics.estTokens ?? "unknown"} delta.messages=${postMetrics.messages - preMetrics.messages} delta.historyTextChars=${postMetrics.historyTextChars - preMetrics.historyTextChars} delta.toolResultChars=${postMetrics.toolResultChars - preMetrics.toolResultChars} delta.estTokens=${typeof preMetrics.estTokens === "number" && typeof postMetrics.estTokens === "number" ? postMetrics.estTokens - preMetrics.estTokens : "unknown"}`);
 				return {
 					ok: true,
 					compacted: true,