@symerian/symi 2.6.18 → 2.6.20

package/dist/{status-4PSvL6ui.js → status-eergZLRZ.js}

@@ -1,6 +1,6 @@
 import { u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, k as info, z as isRich } from "./utils-B-0b9bGM.js";
-import { B as summarizeRestartSentinel, Jt as sha256HexPrefix, _t as formatUsageReportLines, a as buildChannelSummary, gt as loadProviderUsageSummary, h as listAgentsForGateway, m as classifySessionKey, o as buildChannelAccountSnapshot, pr as lookupContextTokens, s as formatChannelAllowFrom, wr as peekSystemEvents, x as resolveSessionModelRef, z as readRestartSentinel } from "./reply-BgOOEOPX.js";
+import { B as summarizeRestartSentinel, Jt as sha256HexPrefix, _t as formatUsageReportLines, a as buildChannelSummary, gt as loadProviderUsageSummary, h as listAgentsForGateway, m as classifySessionKey, o as buildChannelAccountSnapshot, pr as lookupContextTokens, s as formatChannelAllowFrom, wr as peekSystemEvents, x as resolveSessionModelRef, z as readRestartSentinel } from "./reply-DU025-Dw.js";
 import { S as parseAgentSessionKey } from "./session-key-DCt45XZa.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { n as runExec } from "./exec-CWkblSrI.js";
@@ -28,7 +28,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-CR9445g5.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-BAMlsVVX.js";
 import { t as renderTable } from "./table-BTgkRafz.js";
 import { a as resolveGatewayProbeAuth$1, c as probeGateway, t as runSecurityAudit } from "./audit-CrITRV6w.js";
-import { a as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-B3pwVJ_N.js";
+import { a as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-B8uQe9CP.js";
 import { g as resolveUpdateChannelDisplay, i as formatGitInstallLabel, m as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-CtckACbb.js";
 import { t as resolveNodeService } from "./node-service-Cxz4e-Qd.js";
 import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-yQZNwAF2.js";

package/dist/{status-kFfqsras.js → status-iuYHrvPw.js}

@@ -9,7 +9,7 @@ import { c as resolveAgentWorkspaceDir } from "./agent-scope-D-jRCY0d.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-DKXJ-tbi.js";
 import { H as VERSION, i as loadConfig, o as readConfigFileSnapshot } from "./config-DHBLS1Hl.js";
 import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-BcE47FtD.js";
-import { En as peekSystemEvents, St as summarizeRestartSentinel, cn as buildChannelAccountSnapshot, in as formatUsageReportLines, ln as formatChannelAllowFrom, nt as sha256HexPrefix, rn as loadProviderUsageSummary, sn as buildChannelSummary, xt as readRestartSentinel } from "./subagent-registry-M6DQwhYN.js";
+import { En as peekSystemEvents, St as summarizeRestartSentinel, cn as buildChannelAccountSnapshot, in as formatUsageReportLines, ln as formatChannelAllowFrom, nt as sha256HexPrefix, rn as loadProviderUsageSummary, sn as buildChannelSummary, xt as readRestartSentinel } from "./subagent-registry-C-JJ2VmR.js";
 import { F as resolveMainSessionKey, j as resolveFreshSessionTotalTokens, o as loadSessionStore } from "./sessions-CJXnZVjR.js";
 import { n as listChannelPlugins } from "./plugins-CwSlLxM8.js";
 import { o as getTailnetHostname, s as readTailscaleStatusJson } from "./tailscale-CbbvYNVw.js";
@@ -29,7 +29,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-hFVEC3wO.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-CS1ov_hH.js";
 import { t as renderTable } from "./table-D01d2GuY.js";
 import { a as resolveGatewayProbeAuth$1, c as probeGateway, t as runSecurityAudit } from "./audit-Byo5jCLN.js";
-import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-8bTzq722.js";
+import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-8DlAtuas.js";
 import { g as resolveUpdateChannelDisplay, i as formatGitInstallLabel, m as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-ZdimP1aU.js";
 import { t as resolveNodeService } from "./node-service-fcZExd22.js";
 import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-DVLB9DNB.js";

package/dist/{subagent-registry-M6DQwhYN.js → subagent-registry-C-JJ2VmR.js}

@@ -3,7 +3,7 @@ import { $t as triggerInternalHook, A as normalizeChannelId, B as getPluginComma
 import { A as buildConfiguredAllowlistKeys, At as resolveShellEnvFallbackTimeoutMs, Ct as resolveEnvApiKey, E as withFileLock, Et as normalizeSecretInput, F as modelKey, H as resolveDefaultModelForAgent, Ht as DEFAULT_MODEL, I as normalizeModelRef$2, K as resolveSubagentSpawnModelSelection, L as normalizeProviderId, M as findNormalizedProviderValue, Ot as getShellPathFromLoginShell, P as isCliProvider, T as resolveSymiAgentDir, Ut as DEFAULT_PROVIDER, V as resolveConfiguredModelRef, Vt as DEFAULT_CONTEXT_TOKENS, W as resolveModelRefFromString, Wt as resolveAuthProfileDisplayLabel, _t as createOllamaStreamFn, a as markAuthProfileFailure, b as ensureAuthProfileStore, bt as requireApiKey, c as resolveApiKeyForProfile, g as markAuthProfileGood, gt as OLLAMA_NATIVE_BASE_URL, h as listProfilesForProvider, i as isProfileInCooldown, j as buildModelAliasIndex, k as buildAllowedModelSet, m as dedupeProfileIds, n as resolveAuthProfileOrder, o as markAuthProfileUsed, q as resolveThinkingDefault, r as getSoonestCooldownExpiry, vt as getApiKeyForModel, w as resolveAuthStorePathForDisplay, wt as resolveModelAuthMode, xt as resolveApiKeyForProvider, yt as getCustomProviderApiKey } from "./auth-profiles-Q1xTr5SX.js";
 import { t as formatCliCommand } from "./command-format-BtYOfWxC.js";
 import { C as resolveThreadParentSessionKey, S as parseAgentSessionKey, _ as getSubagentDepth, b as isCronSessionKey, c as normalizeMainKey, d as sanitizeAgentId, h as normalizeAccountId$2, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, o as classifySessionKeyShape, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, u as resolveThreadSessionKeys, v as isAcpSessionKey, x as isSubagentSessionKey } from "./session-key-DjZ7Z1hW.js";
-import { n as resolveSymiPackageRootSync, t as resolveSymiPackageRoot } from "./symi-root-BNuQ4lAT.js";
+import { t as resolveSymiPackageRoot } from "./symi-root-BNuQ4lAT.js";
 import { a as logError, i as logDebug, n as runExec, o as logInfo, r as spawnWithFallback, s as logWarn, t as runCommandWithTimeout } from "./exec-CBKBIMpA.js";
 import { C as ensureAgentWorkspace, E as loadWorkspaceBootstrapFiles, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, f as resolveSessionAgentIds, g as DEFAULT_IDENTITY_FILENAME, h as DEFAULT_BOOTSTRAP_FILENAME, i as resolveAgentDir, l as resolveDefaultAgentId, m as DEFAULT_AGENT_WORKSPACE_DIR, n as listAgentIds, o as resolveAgentModelPrimary, r as resolveAgentConfig, s as resolveAgentSkillsFilter, u as resolveEffectiveModelFallbacks, w as filterBootstrapFilesForSession } from "./agent-scope-D-jRCY0d.js";
 import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-DuFIqfeC.js";
@@ -32297,30 +32297,6 @@ function setCliSessionId(entry, provider, sessionId) {
 //#endregion
 //#region src/config/model-profiles-builtin.ts
 /**
-* Starter pack — always-on context for models with tool arg corruption.
-* ~500 tokens. Prevents the most common failure patterns.
-* For detailed file modification guides, the self-inspect skill cascades from here.
-*/
-const STARTER_PACK = [
-	"",
-	"YOUR FILES (use read tool directly on these paths — NEVER use exec to find or read files):",
-	"- Glass UI CSS: <SYMI_ROOT>/dist/control-ui/css/style.css",
-	"- Glass UI HTML: <SYMI_ROOT>/dist/control-ui/index.html",
-	"- Glass UI JS: <SYMI_ROOT>/dist/control-ui/js/app.js, gateway.js, render.js, models.js, history.js, symipulse.js, debug.js",
-	"- Package: <SYMI_ROOT>/package.json",
-	"- Config: ~/.symi/symi.json | Sessions: ~/.symi/agents/main/sessions/ | Memory: ~/.symi/state/memory/",
-	"- For detailed modification guides, read the self-inspect skill.",
-	"",
-	"TOOL RULES (mandatory):",
-	"- read/write/edit: Always provide the full absolute path directly. NEVER use exec with cat, head, find, grep, or ls to view files.",
-	"- exec/bash: Provide only valid shell syntax. No tags, no tokens, no markup. Spell commands exactly.",
-	"- web_search: Always include query argument. Example: web_search({ query: \"search terms\" })",
-	"- sessions_spawn: Always include task and mode. Example: sessions_spawn({ label: \"name\", mode: \"run\", task: \"description\" })",
-	"",
-	"KNOWN SHELL COMMANDS (use exact spelling):",
-	"awk basename brew cargo cat chmod chown cp curl cut date dd df diff dig dirname docker du echo env find gcc git go grep gunzip gzip head hostname id ifconfig ip java javac journalctl kill killall launchctl less ln locate ls make man mkdir mktemp more mount mv nc netstat nice node nohup npm npx open paste pbcopy pbpaste ping pip pip3 plutil printf ps pwd python python3 readlink realpath rm rmdir rsync ruby scp sed sleep sort ssh stat strings sudo su sw_vers sysctl system_profiler systemctl tail tar tee test top touch tr type uname uniq unzip wc wget which xargs xz yes zip"
-];
-/**
 * Built-in model profiles.  Ordered from most-specific to least-specific so
 * that `resolveModelProfile` can return the first match.
 *
@@ -32363,8 +32339,7 @@ const BUILTIN_PROFILES = [
 			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
 			"- If you need to verify your work, do so before writing your response, not after.",
 			"- Send brief progress updates on long tasks so the user knows you are active.",
-			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax.",
-			...STARTER_PACK
+			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
 		],
 		ui: {
 			badge: "Local",
@@ -32372,6 +32347,52 @@ const BUILTIN_PROFILES = [
 			armWatchdogOnSend: true
 		}
 	},
+	{
+		match: ["nemotron/"],
+		label: "Nemotron",
+		params: {
+			temperature: 1,
+			top_p: .95,
+			top_k: 64,
+			max_tokens: 4096,
+			stop: ["<end_of_turn>", "<eos>"]
+		},
+		streaming: {
+			deltaThrottleMs: 50,
+			flushOnFinal: true,
+			chunkPattern: "burst"
+		},
+		filters: {
+			stripPatterns: [
+				"<\\|channel>\\w*",
+				"<channel\\|>",
+				"<start_of_turn>(?:model|user)?",
+				"<end_of_turn>",
+				"<\\|(?:fim_prefix|fim_suffix|fim_middle)\\|>",
+				"^\\s*<bos>\\s*"
+			],
+			suppressMonologue: true,
+			hasStructuredThinking: false,
+			validateToolArgs: true
+		},
+		promptAdditions: [
+			"CRITICAL OUTPUT RULES:",
+			"- Your response ends when you have delivered the answer. Do not append anything after.",
+			"- Do not output raw control tokens, channel tags, turn markers, or <|channel>thought syntax.",
+			"- Do not begin any sentence with 'I have addressed' or 'I've reviewed'.",
+			"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
+			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
+			"- If you need to verify your work, do so before writing your response, not after.",
+			"- Keep planning and reasoning internal. Only speak when you have a result or need user input.",
+			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active.",
+			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
+		],
+		ui: {
+			badge: "Local",
+			watchdogMs: 6e5,
+			armWatchdogOnSend: true
+		}
+	},
 	{
 		match: ["anthropic/", "claude-"],
 		label: "Claude",
@@ -32436,8 +32457,7 @@ const BUILTIN_PROFILES = [
 			"- If you need to verify your work, do so before writing your response, not after.",
 			"- Keep planning and reasoning internal. Only speak when you have a result or need user input.",
 			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active.",
-			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax.",
-			...STARTER_PACK
+			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
 		],
 		ui: {
 			badge: "CoreWeave",
@@ -35605,175 +35625,6 @@ function toClientToolDefinitions(tools, onClientToolCall, hookContext) {
 * @module
 */
 /**
-* Known shell commands for prefix deduplication.
-* When token boundary corruption doubles a command prefix (grep → grgrep,
-* ls → lsls), we check the first token against this set. If stripping
-* the repeated prefix yields a known command, use it.
-*
-* O(1) lookup. Zero false positives — no valid command is its own prefix doubled.
-*/
-const KNOWN_COMMANDS = new Set([
-	"ls",
-	"cat",
-	"cp",
-	"mv",
-	"rm",
-	"mkdir",
-	"rmdir",
-	"touch",
-	"chmod",
-	"chown",
-	"chgrp",
-	"ln",
-	"pwd",
-	"echo",
-	"printf",
-	"head",
-	"tail",
-	"wc",
-	"sort",
-	"uniq",
-	"cut",
-	"tr",
-	"tee",
-	"xargs",
-	"env",
-	"date",
-	"sleep",
-	"true",
-	"false",
-	"yes",
-	"test",
-	"expr",
-	"basename",
-	"dirname",
-	"readlink",
-	"realpath",
-	"mktemp",
-	"stat",
-	"file",
-	"dd",
-	"df",
-	"du",
-	"id",
-	"whoami",
-	"hostname",
-	"uname",
-	"grep",
-	"egrep",
-	"fgrep",
-	"find",
-	"locate",
-	"sed",
-	"awk",
-	"diff",
-	"patch",
-	"strings",
-	"less",
-	"more",
-	"tar",
-	"gzip",
-	"gunzip",
-	"zip",
-	"unzip",
-	"bzip2",
-	"xz",
-	"curl",
-	"wget",
-	"ssh",
-	"scp",
-	"rsync",
-	"ping",
-	"dig",
-	"nslookup",
-	"netstat",
-	"lsof",
-	"nc",
-	"ifconfig",
-	"ip",
-	"ps",
-	"top",
-	"kill",
-	"killall",
-	"nohup",
-	"nice",
-	"which",
-	"type",
-	"where",
-	"man",
-	"sudo",
-	"su",
-	"mount",
-	"umount",
-	"systemctl",
-	"journalctl",
-	"launchctl",
-	"dmesg",
-	"sysctl",
-	"git",
-	"make",
-	"gcc",
-	"python",
-	"python3",
-	"pip",
-	"pip3",
-	"node",
-	"npm",
-	"npx",
-	"pnpm",
-	"yarn",
-	"cargo",
-	"go",
-	"ruby",
-	"gem",
-	"java",
-	"javac",
-	"docker",
-	"brew",
-	"open",
-	"pbcopy",
-	"pbpaste",
-	"defaults",
-	"diskutil",
-	"sw_vers",
-	"system_profiler",
-	"plutil",
-	"mdfind",
-	"mdls",
-	"softwareupdate",
-	"caffeinate",
-	"say",
-	"osascript",
-	"security",
-	"codesign",
-	"hdiutil",
-	"installer",
-	"lipo",
-	"otool",
-	"dscl",
-	"scutil"
-]);
-/**
-* Fix command prefix duplication from token boundary splits.
-* Token corruption can double a multi-char prefix: grep → grgrep, ls → lsls.
-* Check if the first token starts with a repeated prefix that, when removed,
-* yields a known command.
-*
-* Examples: grgrep → grep, lsls → ls, catcat → cat, curlcurl → curl
-*/
-function dedupCommandPrefix(command) {
-	const match = command.match(/^([a-zA-Z0-9_-]+)/);
-	if (!match) return command;
-	const firstToken = match[1];
-	if (KNOWN_COMMANDS.has(firstToken)) return command;
-	for (let prefixLen = 2; prefixLen <= Math.min(10, Math.floor(firstToken.length / 2)); prefixLen++) {
-		const prefix = firstToken.slice(0, prefixLen);
-		const candidate = firstToken.slice(prefixLen);
-		if (candidate.startsWith(prefix.slice(0, Math.min(prefix.length, candidate.length))) && KNOWN_COMMANDS.has(candidate)) return candidate + command.slice(firstToken.length);
-	}
-	return command;
-}
-/**
 * Validate that a command string contains extractable valid shell syntax.
 * Returns the cleaned command if valid, or an error reason if not.
 *
@@ -35792,7 +35643,6 @@ function validateShellCommand(command) {
 		cleaned = cleaned.replace(/<\|[^|>]*(?:\|>)?/g, "").trim();
 		cleaned = cleanResidualTokenFragments(cleaned);
 	}
-	cleaned = dedupCommandPrefix(cleaned);
 	if (!cleaned || !cleaned.trim()) return {
 		valid: false,
 		cleaned: "",
@@ -39849,18 +39699,7 @@ async function runEmbeddedAttempt(params) {
 		const profileModelKey = params.modelId ?? "";
 		const modelProfile = resolveModelProfile(profileModelKey, params.config?.models?.profiles);
 		log$5.debug(`[profile] resolved: modelId=${profileModelKey} → profile=${modelProfile.label} validateToolArgs=${modelProfile.filters?.validateToolArgs ?? false}`);
-		const systemPromptText = createSystemPromptOverride(appendPrompt + (() => {
-			if (modelProfile.promptAdditions.length === 0) return "";
-			let text = "\n\n" + modelProfile.promptAdditions.join("\n");
-			if (text.includes("<SYMI_ROOT>")) {
-				const symiRoot = resolveSymiPackageRootSync({
-					moduleUrl: import.meta.url,
-					argv1: process.argv[1]
-				});
-				if (symiRoot) text = text.replaceAll("<SYMI_ROOT>", symiRoot);
-			}
-			return text;
-		})())();
+		const systemPromptText = createSystemPromptOverride(appendPrompt + (modelProfile.promptAdditions.length > 0 ? "\n\n" + modelProfile.promptAdditions.join("\n") : ""))();
 		const sessionLock = await acquireSessionWriteLock({
 			sessionFile: params.sessionFile,
 			maxHoldMs: resolveSessionLockMaxHoldFromTimeout({ timeoutMs: params.timeoutMs })
@@ -40134,18 +39973,6 @@ async function runEmbeddedAttempt(params) {
 			const TOOL_ERROR_ABORT_THRESHOLD = 5;
 			const TOOL_ERROR_WARN_THRESHOLD = 3;
 			let consecutiveToolErrors = 0;
-			/** Detect exec/bash results that indicate a shell error (non-zero exit, command not found, etc.) */
-			const isShellErrorResult = (result) => {
-				if (!result || typeof result !== "object") return false;
-				const content = result.content;
-				if (!Array.isArray(content)) return false;
-				const text = content.filter((b) => b && typeof b === "object" && b.type === "text").map((b) => {
-					const t = b.text;
-					return typeof t === "string" ? t : "";
-				}).join("\n");
-				if (!text) return false;
-				return /exit code [1-9]\d*|command not found|No such file or directory|syntax error|parse error|Permission denied|not recognized|cannot execute/i.test(text);
-			};
 			const subscription = subscribeEmbeddedPiSession({
 				session: activeSession,
 				runId: params.runId,
@@ -40171,9 +39998,7 @@ async function runEmbeddedAttempt(params) {
 						const phase = typeof evt.data?.phase === "string" ? evt.data.phase : "";
 						const isError = evt.data?.isError === true;
 						if (phase === "result") {
-							const toolName = typeof evt.data?.name === "string" ? evt.data.name : "";
-							const isExecShellError = !isError && (toolName === "exec" || toolName === "bash") && isShellErrorResult(evt.data?.result);
-							if (isError || isExecShellError) consecutiveToolErrors++;
+							if (isError) consecutiveToolErrors++;
 							else consecutiveToolErrors = 0;
 							if (consecutiveToolErrors >= TOOL_ERROR_ABORT_THRESHOLD) {
 								const toolName = typeof evt.data?.name === "string" ? evt.data.name : "unknown";
@@ -53300,7 +53125,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-DWSTD7Gy.js");
+			const { sendMessageWhatsApp } = await import("./web-BUXU8aHt.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -68614,7 +68439,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-DWSTD7Gy.js");
+	webChannelPromise ??= import("./web-BUXU8aHt.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {