@symerian/symi 2.6.14 → 2.6.15

package/dist/{pi-embedded-CFFnZEcA.js → pi-embedded-FraxHehk.js}

@@ -42309,6 +42309,175 @@ function toClientToolDefinitions(tools, onClientToolCall, hookContext) {
 * @module
 */
 /**
+* Known shell commands for prefix deduplication.
+* When token boundary corruption doubles a command prefix (grep → grgrep,
+* ls → lsls), we check the first token against this set. If stripping
+* the repeated prefix yields a known command, use it.
+*
+* O(1) lookup. Zero false positives — no valid command is its own prefix doubled.
+*/
+const KNOWN_COMMANDS = new Set([
+	"ls",
+	"cat",
+	"cp",
+	"mv",
+	"rm",
+	"mkdir",
+	"rmdir",
+	"touch",
+	"chmod",
+	"chown",
+	"chgrp",
+	"ln",
+	"pwd",
+	"echo",
+	"printf",
+	"head",
+	"tail",
+	"wc",
+	"sort",
+	"uniq",
+	"cut",
+	"tr",
+	"tee",
+	"xargs",
+	"env",
+	"date",
+	"sleep",
+	"true",
+	"false",
+	"yes",
+	"test",
+	"expr",
+	"basename",
+	"dirname",
+	"readlink",
+	"realpath",
+	"mktemp",
+	"stat",
+	"file",
+	"dd",
+	"df",
+	"du",
+	"id",
+	"whoami",
+	"hostname",
+	"uname",
+	"grep",
+	"egrep",
+	"fgrep",
+	"find",
+	"locate",
+	"sed",
+	"awk",
+	"diff",
+	"patch",
+	"strings",
+	"less",
+	"more",
+	"tar",
+	"gzip",
+	"gunzip",
+	"zip",
+	"unzip",
+	"bzip2",
+	"xz",
+	"curl",
+	"wget",
+	"ssh",
+	"scp",
+	"rsync",
+	"ping",
+	"dig",
+	"nslookup",
+	"netstat",
+	"lsof",
+	"nc",
+	"ifconfig",
+	"ip",
+	"ps",
+	"top",
+	"kill",
+	"killall",
+	"nohup",
+	"nice",
+	"which",
+	"type",
+	"where",
+	"man",
+	"sudo",
+	"su",
+	"mount",
+	"umount",
+	"systemctl",
+	"journalctl",
+	"launchctl",
+	"dmesg",
+	"sysctl",
+	"git",
+	"make",
+	"gcc",
+	"python",
+	"python3",
+	"pip",
+	"pip3",
+	"node",
+	"npm",
+	"npx",
+	"pnpm",
+	"yarn",
+	"cargo",
+	"go",
+	"ruby",
+	"gem",
+	"java",
+	"javac",
+	"docker",
+	"brew",
+	"open",
+	"pbcopy",
+	"pbpaste",
+	"defaults",
+	"diskutil",
+	"sw_vers",
+	"system_profiler",
+	"plutil",
+	"mdfind",
+	"mdls",
+	"softwareupdate",
+	"caffeinate",
+	"say",
+	"osascript",
+	"security",
+	"codesign",
+	"hdiutil",
+	"installer",
+	"lipo",
+	"otool",
+	"dscl",
+	"scutil"
+]);
+/**
+* Fix command prefix duplication from token boundary splits.
+* Token corruption can double a multi-char prefix: grep → grgrep, ls → lsls.
+* Check if the first token starts with a repeated prefix that, when removed,
+* yields a known command.
+*
+* Examples: grgrep → grep, lsls → ls, catcat → cat, curlcurl → curl
+*/
+function dedupCommandPrefix(command) {
+	const match = command.match(/^([a-zA-Z0-9_-]+)/);
+	if (!match) return command;
+	const firstToken = match[1];
+	if (KNOWN_COMMANDS.has(firstToken)) return command;
+	for (let prefixLen = 2; prefixLen <= Math.min(10, Math.floor(firstToken.length / 2)); prefixLen++) {
+		const prefix = firstToken.slice(0, prefixLen);
+		const candidate = firstToken.slice(prefixLen);
+		if (candidate.startsWith(prefix.slice(0, Math.min(prefix.length, candidate.length))) && KNOWN_COMMANDS.has(candidate)) return candidate + command.slice(firstToken.length);
+	}
+	return command;
+}
+/**
 * Validate that a command string contains extractable valid shell syntax.
 * Returns the cleaned command if valid, or an error reason if not.
 *
@@ -42327,6 +42496,7 @@ function validateShellCommand(command) {
 		cleaned = cleaned.replace(/<\|[^|>]*(?:\|>)?/g, "").trim();
 		cleaned = cleanResidualTokenFragments(cleaned);
 	}
+	cleaned = dedupCommandPrefix(cleaned);
 	if (!cleaned || !cleaned.trim()) return {
 		valid: false,
 		cleaned: "",
@@ -60655,7 +60825,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-mQInjWbW.js");
+			const { sendMessageWhatsApp } = await import("./web-DJgELzDq.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -75935,7 +76105,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-mQInjWbW.js");
+	webChannelPromise ??= import("./web-DJgELzDq.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{pi-embedded-helpers-pubKo8HQ.js → pi-embedded-helpers-CfqDGQ9J.js}

@@ -9,7 +9,7 @@ import { h as isPidAlive, m as resolveProcessScopedMap } from "./auth-profiles-D
 import { n as formatCliCommand } from "./env-BDXYbTKj.js";
 import { t as parseBooleanValue } from "./boolean-CE7i9tBR.js";
 import { _ as parseDurationMs, a as writeConfigFile, n as loadConfig, s as parseByteSize, t as createConfigIO } from "./config-5SdHIcHU.js";
-import { A as DEFAULT_BROWSER_EVALUATE_ENABLED, D as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, E as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, M as DEFAULT_SYMI_BROWSER_ENABLED, N as DEFAULT_SYMI_BROWSER_PROFILE_NAME, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, S as stopChromeExtensionRelayServer, _ as fetchJson, a as resolveSymiUserDataDir, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, g as appendCdpPath, h as withBrowserNavigationPolicy, i as launchSymiChrome, j as DEFAULT_SYMI_BROWSER_COLOR, k as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, l as createTargetViaCdp, m as assertBrowserNavigationAllowed, n as isChromeCdpReady, o as stopSymiChrome, p as InvalidBrowserNavigationUrlError, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as fetchOk, w as isLoopbackHost, x as ensureChromeExtensionRelayServer } from "./chrome-DYZwl5Gv.js";
+import { A as DEFAULT_BROWSER_EVALUATE_ENABLED, D as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, E as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, M as DEFAULT_SYMI_BROWSER_ENABLED, N as DEFAULT_SYMI_BROWSER_PROFILE_NAME, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, S as stopChromeExtensionRelayServer, _ as fetchJson, a as resolveSymiUserDataDir, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, g as appendCdpPath, h as withBrowserNavigationPolicy, i as launchSymiChrome, j as DEFAULT_SYMI_BROWSER_COLOR, k as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, l as createTargetViaCdp, m as assertBrowserNavigationAllowed, n as isChromeCdpReady, o as stopSymiChrome, p as InvalidBrowserNavigationUrlError, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as fetchOk, w as isLoopbackHost, x as ensureChromeExtensionRelayServer } from "./chrome-DkaXoP36.js";
 import { a as syncSkillsToWorkspace, l as resolveSandboxInputPath, m as sanitizeEnvVars, u as resolveSandboxPath } from "./skills-Bs0AW1g3.js";
 import { n as formatErrorMessage, t as extractErrorCode } from "./errors-XIsvXeC-.js";
 import { b as openFileWithinRoot, i as getImageMetadata, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS, y as SafeOpenError } from "./image-ops-C7CauEK8.js";
@@ -933,7 +933,7 @@ function isModuleNotFoundError(err) {
 }
 async function loadPwAiModule(mode) {
 	try {
-		return await import("./pw-ai-B5asscAD.js");
+		return await import("./pw-ai-m0mj2KWK.js");
 	} catch (err) {
 		if (mode === "soft") return null;
 		if (isModuleNotFoundError(err)) return null;
@@ -3473,11 +3473,11 @@ function createProfileContext(opts, profile) {
 		const userDataDir = resolveSymiUserDataDir(profile.name);
 		const profileState = getProfileState();
 		if (await isHttpReachable(300) && !profileState.running) try {
-			await (await import("./pw-ai-B5asscAD.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-m0mj2KWK.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (profileState.running) await stopRunningBrowser();
 		try {
-			await (await import("./pw-ai-B5asscAD.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-m0mj2KWK.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (!fs.existsSync(userDataDir)) return {
 			moved: false,

package/dist/{plugin-registry-HFOrv3KN.js → plugin-registry-CMCHyYWB.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { ft as loadSymiPlugins } from "./reply-DUZvOCsG.js";
+import { ft as loadSymiPlugins } from "./reply-B2Xur-75.js";
 import { d as getActivePluginRegistry } from "./registry-Cja8eT7G.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-CgUHAtCo.js";

package/dist/{plugin-registry-Bt5YCgFq.js → plugin-registry-thPK5K1z.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { M as getActivePluginRegistry, o as createSubsystemLogger } from "./entry.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-D-jRCY0d.js";
 import { i as loadConfig } from "./config-DHBLS1Hl.js";
-import { m as loadSymiPlugins } from "./subagent-registry-J2pIBQF7.js";
+import { m as loadSymiPlugins } from "./subagent-registry-CUXuFP-8.js";
 
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/plugin-sdk/{channel-web-E56yV1OA.js → channel-web-Cz5hAZTe.js}

@@ -1,6 +1,6 @@
 import { a as buildGroupHistoryKey, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-C_0eELjb.js";
 import { f as readWebSelfId, o as getWebAuthAgeMs, r as resolveWhatsAppAccount } from "./accounts-Ddm33hQm.js";
-import { E as enqueueSystemEvent, G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as resolveEnvelopeFormatOptions, c as computeBackoff, d as formatDurationPrecise, f as dispatchReplyWithBufferedBlockDispatcher, g as formatInboundEnvelope, h as resolveInboundDebounceMs, ht as createDedupeCache, l as sleepWithAbort, m as createInboundDebouncer, n as normalizeGroupActivation, nt as buildMentionRegexes, r as parseActivationCommand, rt as normalizeMentionText, t as getReplyFromConfig, tt as recordPendingHistoryEntryIfEnabled, u as buildPairingReply, v as hasControlCommand, y as shouldComputeCommandAuthorized } from "./reply-pPqvSkWb.js";
+import { E as enqueueSystemEvent, G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as resolveEnvelopeFormatOptions, c as computeBackoff, d as formatDurationPrecise, f as dispatchReplyWithBufferedBlockDispatcher, g as formatInboundEnvelope, h as resolveInboundDebounceMs, ht as createDedupeCache, l as sleepWithAbort, m as createInboundDebouncer, n as normalizeGroupActivation, nt as buildMentionRegexes, r as parseActivationCommand, rt as normalizeMentionText, t as getReplyFromConfig, tt as recordPendingHistoryEntryIfEnabled, u as buildPairingReply, v as hasControlCommand, y as shouldComputeCommandAuthorized } from "./reply-DM8-P0Qq.js";
 import { A as normalizeE164, B as toWhatsappJid, K as logVerbose, N as resolveJidToE164, O as isSelfChatMode, R as sleep, Y as shouldLogVerbose, k as jidToE164, s as normalizeChatChannelId, tt as getChildLogger, x as clamp } from "./registry-D0xTnUWt.js";
 import { n as loadConfig } from "./config-KlTNfkFF.js";
 import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-B2uDN3TV.js";

package/dist/plugin-sdk/index.js

@@ -1,6 +1,6 @@
 import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-C_0eELjb.js";
 import { _ as createAccountListHelpers, i as resolveWhatsAppAuthDir, n as resolveDefaultWhatsAppAccountId, r as resolveWhatsAppAccount, t as listWhatsAppAccountIds } from "./accounts-Ddm33hQm.js";
-import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as stripMarkdown, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as processLineMessage, St as listThreadBindingsBySessionKey, T as attachFooterText, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as normalizeAccountId$1, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as listLineAccountIds, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, o as resolveDefaultLineAccountId, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, s as resolveLineAccount, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as createReceiptCard, wt as formatAllowlistMatchMeta, x as hasMarkdownToConvert, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./reply-pPqvSkWb.js";
+import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as stripMarkdown, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as processLineMessage, St as listThreadBindingsBySessionKey, T as attachFooterText, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as normalizeAccountId$1, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as listLineAccountIds, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, o as resolveDefaultLineAccountId, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, s as resolveLineAccount, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as createReceiptCard, wt as formatAllowlistMatchMeta, x as hasMarkdownToConvert, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./reply-DM8-P0Qq.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import { D as resolveSlackAccount, E as resolveDefaultSlackAccountId, F as resolveDiscordAccount, M as listDiscordAccountIds, O as resolveSlackReplyToMode, P as resolveDefaultDiscordAccountId, S as resolveTelegramAccount, T as listSlackAccountIds, _ as normalizeWhatsAppTarget, a as listDiscordDirectoryPeersFromConfig, b as listTelegramAccountIds, c as listTelegramDirectoryGroupsFromConfig, d as listWhatsAppDirectoryPeersFromConfig, f as looksLikeSlackTargetId, g as isWhatsAppGroupJid, i as listDiscordDirectoryGroupsFromConfig, l as listTelegramDirectoryPeersFromConfig, o as listSlackDirectoryGroupsFromConfig, p as normalizeSlackMessagingTarget, s as listSlackDirectoryPeersFromConfig, u as listWhatsAppDirectoryGroupsFromConfig, w as listEnabledSlackAccounts, x as resolveDefaultTelegramAccountId } from "./plugins-BNByVCIH.js";
@@ -47,7 +47,7 @@ import "./paths-A0xdf3yk.js";
 import { h as onDiagnosticEvent, m as isDiagnosticsEnabled, p as emitDiagnosticEvent } from "./diagnostic-05pm5Rxi.js";
 import { n as extractOriginalFilename } from "./store-BdrNabcU.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-BiyAyTWz.js";
-import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-E56yV1OA.js";
+import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-Cz5hAZTe.js";
 import "./image-CLOPx7yW.js";
 import "./pi-model-discovery-LbcEa65a.js";
 import "./api-key-rotation-D_sMvI5W.js";

package/dist/plugin-sdk/{reply-pPqvSkWb.js → reply-DM8-P0Qq.js}

@@ -30245,6 +30245,175 @@ function toClientToolDefinitions(tools, onClientToolCall, hookContext) {
 * @module
 */
 /**
+* Known shell commands for prefix deduplication.
+* When token boundary corruption doubles a command prefix (grep → grgrep,
+* ls → lsls), we check the first token against this set. If stripping
+* the repeated prefix yields a known command, use it.
+*
+* O(1) lookup. Zero false positives — no valid command is its own prefix doubled.
+*/
+const KNOWN_COMMANDS = new Set([
+	"ls",
+	"cat",
+	"cp",
+	"mv",
+	"rm",
+	"mkdir",
+	"rmdir",
+	"touch",
+	"chmod",
+	"chown",
+	"chgrp",
+	"ln",
+	"pwd",
+	"echo",
+	"printf",
+	"head",
+	"tail",
+	"wc",
+	"sort",
+	"uniq",
+	"cut",
+	"tr",
+	"tee",
+	"xargs",
+	"env",
+	"date",
+	"sleep",
+	"true",
+	"false",
+	"yes",
+	"test",
+	"expr",
+	"basename",
+	"dirname",
+	"readlink",
+	"realpath",
+	"mktemp",
+	"stat",
+	"file",
+	"dd",
+	"df",
+	"du",
+	"id",
+	"whoami",
+	"hostname",
+	"uname",
+	"grep",
+	"egrep",
+	"fgrep",
+	"find",
+	"locate",
+	"sed",
+	"awk",
+	"diff",
+	"patch",
+	"strings",
+	"less",
+	"more",
+	"tar",
+	"gzip",
+	"gunzip",
+	"zip",
+	"unzip",
+	"bzip2",
+	"xz",
+	"curl",
+	"wget",
+	"ssh",
+	"scp",
+	"rsync",
+	"ping",
+	"dig",
+	"nslookup",
+	"netstat",
+	"lsof",
+	"nc",
+	"ifconfig",
+	"ip",
+	"ps",
+	"top",
+	"kill",
+	"killall",
+	"nohup",
+	"nice",
+	"which",
+	"type",
+	"where",
+	"man",
+	"sudo",
+	"su",
+	"mount",
+	"umount",
+	"systemctl",
+	"journalctl",
+	"launchctl",
+	"dmesg",
+	"sysctl",
+	"git",
+	"make",
+	"gcc",
+	"python",
+	"python3",
+	"pip",
+	"pip3",
+	"node",
+	"npm",
+	"npx",
+	"pnpm",
+	"yarn",
+	"cargo",
+	"go",
+	"ruby",
+	"gem",
+	"java",
+	"javac",
+	"docker",
+	"brew",
+	"open",
+	"pbcopy",
+	"pbpaste",
+	"defaults",
+	"diskutil",
+	"sw_vers",
+	"system_profiler",
+	"plutil",
+	"mdfind",
+	"mdls",
+	"softwareupdate",
+	"caffeinate",
+	"say",
+	"osascript",
+	"security",
+	"codesign",
+	"hdiutil",
+	"installer",
+	"lipo",
+	"otool",
+	"dscl",
+	"scutil"
+]);
+/**
+* Fix command prefix duplication from token boundary splits.
+* Token corruption can double a multi-char prefix: grep → grgrep, ls → lsls.
+* Check if the first token starts with a repeated prefix that, when removed,
+* yields a known command.
+*
+* Examples: grgrep → grep, lsls → ls, catcat → cat, curlcurl → curl
+*/
+function dedupCommandPrefix(command) {
+	const match = command.match(/^([a-zA-Z0-9_-]+)/);
+	if (!match) return command;
+	const firstToken = match[1];
+	if (KNOWN_COMMANDS.has(firstToken)) return command;
+	for (let prefixLen = 2; prefixLen <= Math.min(10, Math.floor(firstToken.length / 2)); prefixLen++) {
+		const prefix = firstToken.slice(0, prefixLen);
+		const candidate = firstToken.slice(prefixLen);
+		if (candidate.startsWith(prefix.slice(0, Math.min(prefix.length, candidate.length))) && KNOWN_COMMANDS.has(candidate)) return candidate + command.slice(firstToken.length);
+	}
+	return command;
+}
+/**
 * Validate that a command string contains extractable valid shell syntax.
 * Returns the cleaned command if valid, or an error reason if not.
 *
@@ -30263,6 +30432,7 @@ function validateShellCommand(command) {
 		cleaned = cleaned.replace(/<\|[^|>]*(?:\|>)?/g, "").trim();
 		cleaned = cleanResidualTokenFragments(cleaned);
 	}
+	cleaned = dedupCommandPrefix(cleaned);
 	if (!cleaned || !cleaned.trim()) return {
 		valid: false,
 		cleaned: "",
@@ -36252,7 +36422,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-Msnzya6B.js");
+			const { sendMessageWhatsApp } = await import("./web-BQYWq6xE.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -53690,7 +53860,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-Msnzya6B.js");
+	webChannelPromise ??= import("./web-BQYWq6xE.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/plugin-sdk/{web-Msnzya6B.js → web-BQYWq6xE.js}

@@ -1,5 +1,5 @@
 import { a as WA_WEB_AUTH_DIR, g as webAuthExists, s as logWebSelfId, u as pickWebChannel } from "./accounts-Ddm33hQm.js";
-import "./reply-pPqvSkWb.js";
+import "./reply-DM8-P0Qq.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import "./plugins-BNByVCIH.js";
@@ -45,7 +45,7 @@ import "./pi-embedded-helpers-CW630epe.js";
 import "./paths-A0xdf3yk.js";
 import "./diagnostic-05pm5Rxi.js";
 import "./store-BdrNabcU.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-E56yV1OA.js";
+import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-Cz5hAZTe.js";
 import "./image-CLOPx7yW.js";
 import "./pi-model-discovery-LbcEa65a.js";
 import "./api-key-rotation-D_sMvI5W.js";

package/dist/{plugins-cli-C7xTf9NV.js → plugins-cli-B87kp0ad.js}

@@ -13,7 +13,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-J2pIBQF7.js";
+import "./subagent-registry-CUXuFP-8.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -102,7 +102,7 @@ import "./npm-registry-spec-DkaZNHAW.js";
 import "./skill-scanner-BGWOBqLY.js";
 import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-CgQpVncj.js";
 import { t as renderTable } from "./table-D01d2GuY.js";
-import { t as buildPluginStatusReport } from "./status-D4Lr90yH.js";
+import { t as buildPluginStatusReport } from "./status-BDABGQ7Y.js";
 import { n as updateNpmInstalledPlugins } from "./update-DEMKx4eC.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{plugins-cli-CXz_UApK.js → plugins-cli-DamE7XjD.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { B as theme, S as shortenHomePath, g as resolveConfigDir, x as shortenHomeInString, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-DUZvOCsG.js";
+import "./reply-B2Xur-75.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -106,7 +106,7 @@ import "./npm-registry-spec-C2JDdSZS.js";
 import "./skill-scanner-CLs8u6vQ.js";
 import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-C1Cebk97.js";
 import { t as renderTable } from "./table-BTgkRafz.js";
-import { t as buildPluginStatusReport } from "./status-BqhJ-HsW.js";
+import { t as buildPluginStatusReport } from "./status-Bwvq4SPL.js";
 import { n as updateNpmInstalledPlugins } from "./update-rw7wJwHd.js";
 import fs from "node:fs";
 import os from "node:os";