@symerian/symi 2.6.3 → 2.6.5

package/dist/{register.setup-BI6lILMU.js → register.setup-CBpAYN-J.js}

@@ -13,7 +13,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-DqFKNTCX.js";
+import "./subagent-registry-CVQOC9Jw.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -104,8 +104,8 @@ import "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import "./systemd-DlMdyFDY.js";
 import "./service-Cm9j9WzQ.js";
-import "./health-tYyUNVp5.js";
-import "./onboarding-DMqlt_p6.js";
+import "./health-DUKLANXu.js";
+import "./onboarding-Dt44Sq16.js";
 import "./shared-D8K9MkWg.js";
 import "./auth-token-Cmrk2TPo.js";
 import { n as logConfigUpdated, t as formatConfigPath } from "./logging-BGewRZy0.js";
@@ -113,7 +113,7 @@ import "./openai-model-default-DAwnTUcK.js";
 import "./model-picker-D5nCutGW.js";
 import "./systemd-linger-DA_LW52P.js";
 import "./onboard-custom-DdWPfzJO.js";
-import { t as onboardCommand } from "./onboard-CcB6pmEy.js";
+import { t as onboardCommand } from "./onboard-z3fzzRA3.js";
 import JSON5 from "json5";
 import fs from "node:fs/promises";
 

package/dist/{register.status-health-sessions-EK4_odLb.js → register.status-health-sessions-CMJ_l4rs.js}

@@ -14,7 +14,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-DqFKNTCX.js";
+import "./subagent-registry-CVQOC9Jw.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -108,8 +108,8 @@ import "./service-Cm9j9WzQ.js";
 import "./diagnostics-CS1ov_hH.js";
 import "./table-D01d2GuY.js";
 import "./audit-Byo5jCLN.js";
-import { n as statusCommand } from "./status-8176C-aV.js";
-import { r as healthCommand } from "./health-tYyUNVp5.js";
+import { n as statusCommand } from "./status-CfLq5R5j.js";
+import { r as healthCommand } from "./health-DUKLANXu.js";
 import "./update-check-ZdimP1aU.js";
 import "./dm-policy-shared-DJ-61hCT.js";
 import "./node-service-fcZExd22.js";

package/dist/{register.status-health-sessions-C1RhWKxN.js → register.status-health-sessions-DgNzHYE-.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { B as theme, P as setVerbose, k as info, z as isRich } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { m as classifySessionKey, pr as lookupContextTokens, x as resolveSessionModelRef } from "./reply-BGSd_cMI.js";
+import { m as classifySessionKey, pr as lookupContextTokens, x as resolveSessionModelRef } from "./reply-DcyKvFor.js";
 import { S as parseAgentSessionKey } from "./session-key-DCt45XZa.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -114,8 +114,8 @@ import "./service-Cl74hx8J.js";
 import "./diagnostics-BAMlsVVX.js";
 import "./table-BTgkRafz.js";
 import "./audit-CrITRV6w.js";
-import { t as statusCommand } from "./status-DGKT6HnE.js";
-import { r as healthCommand } from "./health-DTRWmRB8.js";
+import { t as statusCommand } from "./status-BY4CnB2O.js";
+import { r as healthCommand } from "./health-BPOuBmYt.js";
 import "./update-check-CtckACbb.js";
 import "./dm-policy-shared-Bh3TbexU.js";
 import "./node-service-Cxz4e-Qd.js";

package/dist/{register.subclis-Bn_Mr_Wa.js → register.subclis-ffG-1Diq.js}

@@ -49,7 +49,7 @@ const entries = [
 		description: "Run, inspect, and query the WebSocket Gateway",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./gateway-cli-BPsbjmUI.js")).registerGatewayCli(program);
+			(await import("./gateway-cli-DEPCdrmX.js")).registerGatewayCli(program);
 		}
 	},
 	{
@@ -81,7 +81,7 @@ const entries = [
 		description: "Discover, scan, and configure models",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./models-cli-BzwGQUdn.js")).registerModelsCli(program);
+			(await import("./models-cli-BmBmBUgl.js")).registerModelsCli(program);
 		}
 	},
 	{
@@ -161,7 +161,7 @@ const entries = [
 		description: "Manage internal agent hooks",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./hooks-cli-eC03ywfG.js")).registerHooksCli(program);
+			(await import("./hooks-cli-BpfIySkB.js")).registerHooksCli(program);
 		}
 	},
 	{
@@ -185,7 +185,7 @@ const entries = [
 		description: "Secure DM pairing (approve inbound requests)",
 		hasSubcommands: true,
 		register: async (program) => {
-			const { registerPluginCliCommands } = await import("./cli-DQw_LEew.js");
+			const { registerPluginCliCommands } = await import("./cli-DNGrFH7L.js");
 			registerPluginCliCommands(program, await loadConfig());
 			(await import("./pairing-cli-CQRAnpvm.js")).registerPairingCli(program);
 		}
@@ -195,8 +195,8 @@ const entries = [
 		description: "Manage Symi plugins and extensions",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./plugins-cli-DkAx9r3h.js")).registerPluginsCli(program);
-			const { registerPluginCliCommands } = await import("./cli-DQw_LEew.js");
+			(await import("./plugins-cli-jv-Bqq1t.js")).registerPluginsCli(program);
+			const { registerPluginCliCommands } = await import("./cli-DNGrFH7L.js");
 			registerPluginCliCommands(program, await loadConfig());
 		}
 	},
@@ -205,7 +205,7 @@ const entries = [
 		description: "Manage connected chat channels (Telegram, Discord, etc.)",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./channels-cli-BFyOmW-R.js")).registerChannelsCli(program);
+			(await import("./channels-cli-R2PHQWVd.js")).registerChannelsCli(program);
 		}
 	},
 	{
@@ -237,7 +237,7 @@ const entries = [
 		description: "Update Symi and inspect update channel status",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./update-cli-FMcGr7MA.js")).registerUpdateCli(program);
+			(await import("./update-cli-Kauib3Oa.js")).registerUpdateCli(program);
 		}
 	},
 	{
@@ -245,7 +245,7 @@ const entries = [
 		description: "Generate shell completion script",
 		hasSubcommands: false,
 		register: async (program) => {
-			(await import("./completion-cli-CI-0hC_u.js").then((n) => n.n)).registerCompletionCli(program);
+			(await import("./completion-cli-B6IpFueu.js").then((n) => n.n)).registerCompletionCli(program);
 		}
 	}
 ];

package/dist/{reply-BGSd_cMI.js → reply-DcyKvFor.js}

@@ -25497,8 +25497,14 @@ const FILE_PATH_KEYS = [
 * Call this AFTER tools are created and the model profile is resolved.
 */
 function wrapToolsWithArgValidation(tools, profile) {
-	if (!profile.filters?.validateToolArgs) return tools;
-	return tools.map((tool) => wrapToolWithArgValidation(tool));
+	if (!profile.filters?.validateToolArgs) {
+		log$3.debug(`[validate] skipped — validateToolArgs=${profile.filters?.validateToolArgs ?? "undefined"} profile=${profile.label}`);
+		return tools;
+	}
+	const wrapped = tools.map((tool) => wrapToolWithArgValidation(tool));
+	const wrappedNames = wrapped.filter((t, i) => t !== tools[i]).map((t) => t.name);
+	log$3.debug(`[validate] applied to ${wrappedNames.length} tools: ${wrappedNames.join(",") || "(none matched)"}`);
+	return wrapped;
 }
 /**
 * Clean a file path by stripping control token fragments.
@@ -29585,7 +29591,9 @@ async function runEmbeddedAttempt(params) {
 			skillsPrompt,
 			tools
 		});
-		const modelProfile = resolveModelProfile(params.modelId ?? "", params.config?.models?.profiles);
+		const profileModelKey = params.modelId ?? "";
+		const modelProfile = resolveModelProfile(profileModelKey, params.config?.models?.profiles);
+		log$7.debug(`[profile] resolved: modelId=${profileModelKey} → profile=${modelProfile.label} validateToolArgs=${modelProfile.filters?.validateToolArgs ?? false}`);
 		const systemPromptText = createSystemPromptOverride(appendPrompt + (modelProfile.promptAdditions.length > 0 ? "\n\n" + modelProfile.promptAdditions.join("\n") : ""))();
 		const sessionLock = await acquireSessionWriteLock({
 			sessionFile: params.sessionFile,
@@ -29645,11 +29653,10 @@ async function runEmbeddedAttempt(params) {
 				await resourceLoader.reload();
 			}
 			const hookRunner = getGlobalHookRunner();
-			const { builtInTools: rawBuiltInTools, customTools } = splitSdkTools({
-				tools,
+			const { builtInTools, customTools } = splitSdkTools({
+				tools: wrapToolsWithArgValidation(tools, modelProfile),
 				sandboxEnabled: !!sandbox?.enabled
 			});
-			const builtInTools = wrapToolsWithArgValidation(rawBuiltInTools, modelProfile);
 			let clientToolCallDetected = null;
 			const clientToolLoopDetection = resolveToolLoopDetectionConfig({
 				cfg: params.config,
@@ -31393,7 +31400,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-DoRGusTq.js");
+			const { sendMessageWhatsApp } = await import("./web-DqjNQqGK.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -49824,7 +49831,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-DoRGusTq.js");
+	webChannelPromise ??= import("./web-DqjNQqGK.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{run-main-Bu9IAm9E.js → run-main-D1Qgb9_t.js}

@@ -13,7 +13,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-DqFKNTCX.js";
+import "./subagent-registry-CVQOC9Jw.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -101,9 +101,9 @@ import { t as ensureSymiCliOnPath } from "./path-env-Bic_wXs9.js";
 import "./catalog-DLQFKucJ.js";
 import "./note-DDecZomM.js";
 import "./plugin-auto-enable-D6ENR3Xg.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-DZdPnpP_.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-C1ghjhOE.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-D7waq_Ho.js";
-import { t as emitCliBanner } from "./banner-ToxTMzfL.js";
+import { t as emitCliBanner } from "./banner-om7BRUIc.js";
 import "./doctor-config-flow-CA3eiKhd.js";
 import { n as ensureConfigReady } from "./config-guard-CPHvOzsC.js";
 import process$1 from "node:process";
@@ -118,7 +118,7 @@ const routeHealth = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { healthCommand } = await import("./health-tYyUNVp5.js").then((n) => n.i);
+		const { healthCommand } = await import("./health-DUKLANXu.js").then((n) => n.i);
 		await healthCommand({
 			json,
 			timeoutMs,
@@ -138,7 +138,7 @@ const routeStatus = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { statusCommand } = await import("./status-8176C-aV.js").then((n) => n.t);
+		const { statusCommand } = await import("./status-CfLq5R5j.js").then((n) => n.t);
 		await statusCommand({
 			json,
 			deep,
@@ -172,7 +172,7 @@ const routeAgentsList = {
 	run: async (argv) => {
 		const json = hasFlag(argv, "--json");
 		const bindings = hasFlag(argv, "--bindings");
-		const { agentsListCommand } = await import("./agents-Dm0V9Z2G.js").then((n) => n.t);
+		const { agentsListCommand } = await import("./agents-DPdRUY_O.js").then((n) => n.t);
 		await agentsListCommand({
 			json,
 			bindings
@@ -243,7 +243,7 @@ const routes = [
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
 			const json = hasFlag(argv, "--json");
-			const { runConfigGet } = await import("./config-cli-DHXt5cQZ.js");
+			const { runConfigGet } = await import("./config-cli-BaH8OVQ-.js");
 			await runConfigGet({
 				path: pathArg,
 				json
@@ -256,7 +256,7 @@ const routes = [
 		run: async (argv) => {
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
-			const { runConfigUnset } = await import("./config-cli-DHXt5cQZ.js");
+			const { runConfigUnset } = await import("./config-cli-BaH8OVQ-.js");
 			await runConfigUnset({ path: pathArg });
 			return true;
 		}
@@ -270,7 +270,7 @@ const routes = [
 			const local = hasFlag(argv, "--local");
 			const json = hasFlag(argv, "--json");
 			const plain = hasFlag(argv, "--plain");
-			const { modelsListCommand } = await import("./models-CuhnCX2U.js").then((n) => n.t);
+			const { modelsListCommand } = await import("./models-Bt8lm_nD.js").then((n) => n.t);
 			await modelsListCommand({
 				all,
 				local,
@@ -301,7 +301,7 @@ const routes = [
 			const plain = hasFlag(argv, "--plain");
 			const check = hasFlag(argv, "--check");
 			const probe = hasFlag(argv, "--probe");
-			const { modelsStatusCommand } = await import("./models-CuhnCX2U.js").then((n) => n.t);
+			const { modelsStatusCommand } = await import("./models-Bt8lm_nD.js").then((n) => n.t);
 			await modelsStatusCommand({
 				json,
 				plain,
@@ -379,7 +379,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-DZx9PtyT.js");
+	const { buildProgram } = await import("./program-CLUzfgIi.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -411,10 +411,10 @@ async function runCli(argv = process$1.argv) {
 		const { getProgramContext } = await import("./program-context-CqzR_m-7.js").then((n) => n.n);
 		const ctx = getProgramContext(program);
 		if (ctx) {
-			const { registerCoreCliByName } = await import("./command-registry-D1OePePk.js").then((n) => n.t);
+			const { registerCoreCliByName } = await import("./command-registry-DeOD2MdC.js").then((n) => n.t);
 			await registerCoreCliByName(program, ctx, primary, parseArgv);
 		}
-		const { registerSubCliByName } = await import("./register.subclis-Bn_Mr_Wa.js").then((n) => n.a);
+		const { registerSubCliByName } = await import("./register.subclis-ffG-1Diq.js").then((n) => n.a);
 		await registerSubCliByName(program, primary);
 	}
 	const hasBuiltinPrimary = primary !== null && program.commands.some((command) => command.name() === primary);
@@ -423,7 +423,7 @@ async function runCli(argv = process$1.argv) {
 		primary,
 		hasBuiltinPrimary
 	})) {
-		const { registerPluginCliCommands } = await import("./cli-DQw_LEew.js");
+		const { registerPluginCliCommands } = await import("./cli-DNGrFH7L.js");
 		const { loadConfig } = await import("./config-DHBLS1Hl.js").then((n) => n.t);
 		registerPluginCliCommands(program, loadConfig());
 	}

package/dist/{server-methods-dxn6-zQz.js → server-methods-BdXCfO_O.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir, t as CONFIG_PATH } from "./paths-Cqn-zk3M.js";
 import { D as isPlainObject, U as getResolvedLoggerSettings, r as clamp, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-EAliFiVK.js";
-import { $n as OPENAI_TTS_MODELS, Bn as registerAgentRunContext, Bt as abortEmbeddedPiRun, C as ensureOutboundSessionEntry, Et as agentCommand, Ft as normalizeSendPolicy, G as normalizeCronJobPatch, Gn as resolveTtsApiKey, H as writeRestartSentinel, Hn as getTtsProvider, Ht as waitForEmbeddedPiRunEnd, It as resolveSendPolicy, Jn as resolveTtsPrefsPath, Kn as resolveTtsAutoMode, L as formatDoctorNonInteractiveHint, Mn as listSubagentRunsForRequester, Mt as resolveOutboundTarget, N as scheduleGatewaySigusr1Restart, Ot as resolveAgentDeliveryPlan, Pr as resolveAgentTimeoutMs, Qn as textToSpeech, Rt as createOutboundSendDeps, Sr as isSystemEventContextChanged, Tn as stopSubagentsForRequester, Un as isTtsEnabled, Vn as resolveUserTimezone, W as normalizeCronJobCreate, Wn as isTtsProviderConfigured, Xn as setTtsEnabled, Yn as resolveTtsProviderOrder, Zn as setTtsProvider, _ as loadCombinedSessionStoreForGateway, at as persistBrowserProxyFiles, b as resolveGatewaySessionStoreTarget, br as parseVerboseOverride, c as clearSessionQueues, er as OPENAI_TTS_VOICES, ft as loadSymiPlugins, g as listSessionsFromStore, gt as loadProviderUsageSummary, h as listAgentsForGateway, in as unbindThreadBindingsBySessionKey, it as applyBrowserProxyPaths, jn as listDescendantRunsForRequester, kt as resolveAgentOutboundTarget, mn as createReplyDispatcher, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, p as canonicalizeSpawnedByForAgent, pn as dispatchInboundMessage, qn as resolveTtsConfig, v as loadSessionEntry, vr as applyModelOverrideToSessionEntry, w as resolveOutboundSessionRoute, wn as isAbortTrigger, x as resolveSessionModelRef, xn as formatZonedTimestamp, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys, yr as applyVerboseOverride, zn as onAgentEvent } from "./reply-BGSd_cMI.js";
+import { $n as OPENAI_TTS_MODELS, Bn as registerAgentRunContext, Bt as abortEmbeddedPiRun, C as ensureOutboundSessionEntry, Et as agentCommand, Ft as normalizeSendPolicy, G as normalizeCronJobPatch, Gn as resolveTtsApiKey, H as writeRestartSentinel, Hn as getTtsProvider, Ht as waitForEmbeddedPiRunEnd, It as resolveSendPolicy, Jn as resolveTtsPrefsPath, Kn as resolveTtsAutoMode, L as formatDoctorNonInteractiveHint, Mn as listSubagentRunsForRequester, Mt as resolveOutboundTarget, N as scheduleGatewaySigusr1Restart, Ot as resolveAgentDeliveryPlan, Pr as resolveAgentTimeoutMs, Qn as textToSpeech, Rt as createOutboundSendDeps, Sr as isSystemEventContextChanged, Tn as stopSubagentsForRequester, Un as isTtsEnabled, Vn as resolveUserTimezone, W as normalizeCronJobCreate, Wn as isTtsProviderConfigured, Xn as setTtsEnabled, Yn as resolveTtsProviderOrder, Zn as setTtsProvider, _ as loadCombinedSessionStoreForGateway, at as persistBrowserProxyFiles, b as resolveGatewaySessionStoreTarget, br as parseVerboseOverride, c as clearSessionQueues, er as OPENAI_TTS_VOICES, ft as loadSymiPlugins, g as listSessionsFromStore, gt as loadProviderUsageSummary, h as listAgentsForGateway, in as unbindThreadBindingsBySessionKey, it as applyBrowserProxyPaths, jn as listDescendantRunsForRequester, kt as resolveAgentOutboundTarget, mn as createReplyDispatcher, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, p as canonicalizeSpawnedByForAgent, pn as dispatchInboundMessage, qn as resolveTtsConfig, v as loadSessionEntry, vr as applyModelOverrideToSessionEntry, w as resolveOutboundSessionRoute, wn as isAbortTrigger, x as resolveSessionModelRef, xn as formatZonedTimestamp, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys, yr as applyVerboseOverride, zn as onAgentEvent } from "./reply-DcyKvFor.js";
 import { S as parseAgentSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, o as classifySessionKeyShape, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey } from "./session-key-DCt45XZa.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { C as createInternalHookEvent, T as triggerInternalHook, d as getActivePluginRegistry, r as DEFAULT_CHAT_CHANNEL, t as CHANNEL_IDS } from "./registry-Cja8eT7G.js";
@@ -39,14 +39,14 @@ import { t as WizardCancelledError } from "./prompts-Xu2Sveka.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BcGbMZD1.js";
 import { t as buildChannelAccountSnapshot } from "./status-BrV-afZE.js";
 import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-CrITRV6w.js";
-import { n as getStatusSummary } from "./status-DGKT6HnE.js";
-import { s as setHeartbeatsEnabled } from "./health-DTRWmRB8.js";
+import { n as getStatusSummary } from "./status-BY4CnB2O.js";
+import { s as setHeartbeatsEnabled } from "./health-BPOuBmYt.js";
 import { m as normalizeUpdateChannel } from "./update-check-CtckACbb.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-IdD-dKZm.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DP0CLvIA.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-CHIVwHRD.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Cr6DcdaD.js";
 import { t as resolveSystemRunCommand } from "./system-run-command-ByVa3txU.js";
 import { t as installSkill } from "./skills-install-D67isO1L.js";
-import { t as runGatewayUpdate } from "./update-runner-C8OkrKjW.js";
+import { t as runGatewayUpdate } from "./update-runner-CPOm0f_6.js";
 import * as fs$2 from "node:fs";
 import fs from "node:fs";
 import * as os$1 from "node:os";
@@ -6853,7 +6853,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-CzcTGD9T.js");
+			const { handleNodeEvent } = await import("./server-node-events-DqVmWjof.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,

package/dist/{server-methods-tA9lkIQT.js → server-methods-D1W-tViM.js}

@@ -12,7 +12,7 @@ import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, i as isGatewayMessa
 import { c as writeJsonAtomic, o as createAsyncLock, s as readJsonFile } from "./pairing-token-Byh6drgn.js";
 import { s as pickPrimaryLanIPv4 } from "./net-DZ5Ayk-W.js";
 import { i as normalizeInputProvenance } from "./input-provenance-D0lNkCf6.js";
-import { $n as resolveTtsAutoMode, B as dispatchInboundMessage, C as resolveAgentDeliveryPlan, Cn as enqueueSystemEvent, Cr as onAgentEvent, D as createOutboundSendDeps, Dt as normalizeCronJobPatch, Et as normalizeCronJobCreate, G as BARE_SESSION_RESET_PROMPT, Gn as stopSubagentsForRequester, Gt as persistBrowserProxyFiles, In as resolveAgentTimeoutMs, Jn as resolveUserTimezone, Qn as resolveTtsApiKey, Sn as parseVerboseOverride, V as createReplyDispatcher, Vn as formatZonedTimestamp, Wn as isAbortTrigger, Wt as applyBrowserProxyPaths, Xn as isTtsEnabled, Y as abortEmbeddedPiRun, Yn as getTtsProvider, Z as waitForEmbeddedPiRunEnd, Zn as isTtsProviderConfigured, Zt as scheduleGatewaySigusr1Restart, a as listSubagentRunsForRequester, ar as textToSpeech, bn as applyModelOverrideToSessionEntry, c as clearSessionQueues, ct as resolveOutboundSessionRoute, dt as resolveOutboundTarget, en as unbindThreadBindingsBySessionKey, er as resolveTtsConfig, hn as resolveSendPolicy, i as listDescendantRunsForRequester, ir as setTtsProvider, m as loadSymiPlugins, mn as normalizeSendPolicy, nr as resolveTtsProviderOrder, or as OPENAI_TTS_MODELS, rn as loadProviderUsageSummary, rr as setTtsEnabled, sr as OPENAI_TTS_VOICES, st as ensureOutboundSessionEntry, tn as normalizeGroupActivation, tr as resolveTtsPrefsPath, w as resolveAgentOutboundTarget, wn as isSystemEventContextChanged, wr as registerAgentRunContext, wt as writeRestartSentinel, x as agentCommand, xn as applyVerboseOverride, yt as formatDoctorNonInteractiveHint } from "./subagent-registry-DqFKNTCX.js";
+import { $n as resolveTtsAutoMode, B as dispatchInboundMessage, C as resolveAgentDeliveryPlan, Cn as enqueueSystemEvent, Cr as onAgentEvent, D as createOutboundSendDeps, Dt as normalizeCronJobPatch, Et as normalizeCronJobCreate, G as BARE_SESSION_RESET_PROMPT, Gn as stopSubagentsForRequester, Gt as persistBrowserProxyFiles, In as resolveAgentTimeoutMs, Jn as resolveUserTimezone, Qn as resolveTtsApiKey, Sn as parseVerboseOverride, V as createReplyDispatcher, Vn as formatZonedTimestamp, Wn as isAbortTrigger, Wt as applyBrowserProxyPaths, Xn as isTtsEnabled, Y as abortEmbeddedPiRun, Yn as getTtsProvider, Z as waitForEmbeddedPiRunEnd, Zn as isTtsProviderConfigured, Zt as scheduleGatewaySigusr1Restart, a as listSubagentRunsForRequester, ar as textToSpeech, bn as applyModelOverrideToSessionEntry, c as clearSessionQueues, ct as resolveOutboundSessionRoute, dt as resolveOutboundTarget, en as unbindThreadBindingsBySessionKey, er as resolveTtsConfig, hn as resolveSendPolicy, i as listDescendantRunsForRequester, ir as setTtsProvider, m as loadSymiPlugins, mn as normalizeSendPolicy, nr as resolveTtsProviderOrder, or as OPENAI_TTS_MODELS, rn as loadProviderUsageSummary, rr as setTtsEnabled, sr as OPENAI_TTS_VOICES, st as ensureOutboundSessionEntry, tn as normalizeGroupActivation, tr as resolveTtsPrefsPath, w as resolveAgentOutboundTarget, wn as isSystemEventContextChanged, wr as registerAgentRunContext, wt as writeRestartSentinel, x as agentCommand, xn as applyVerboseOverride, yt as formatDoctorNonInteractiveHint } from "./subagent-registry-CVQOC9Jw.js";
 import { F as resolveMainSessionKey, I as resolveMainSessionKeyFromConfig, J as normalizeSessionDeliveryFields, N as resolveAgentMainSessionKey, P as resolveExplicitAgentSessionKey, R as snapshotSessionOrigin, S as stripEnvelopeFromMessages, _ as capArrayByJsonBytes, d as updateSessionStore, g as archiveSessionTranscripts, h as archiveFileOnDisk, o as loadSessionStore, t as extractDeliveryInfo, v as readSessionMessages, x as resolveSessionTranscriptCandidates, y as readSessionPreviewItemsFromTranscript } from "./sessions-CJXnZVjR.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
 import { n as createBrowserRouteDispatcher } from "./with-timeout-Di0nddLY.js";
@@ -37,14 +37,14 @@ import { t as WizardCancelledError } from "./prompts-m1IJwIAx.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-cLP5YLeQ.js";
 import { t as buildChannelAccountSnapshot } from "./status-BUedPCLb.js";
 import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-Byo5jCLN.js";
-import { r as getStatusSummary } from "./status-8176C-aV.js";
-import { c as setHeartbeatsEnabled } from "./health-tYyUNVp5.js";
+import { r as getStatusSummary } from "./status-CfLq5R5j.js";
+import { c as setHeartbeatsEnabled } from "./health-DUKLANXu.js";
 import { m as normalizeUpdateChannel } from "./update-check-ZdimP1aU.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-DbpeXPGR.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-WdkJjM2-.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-CVRC-O3Q.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DIumfxnN.js";
 import { t as resolveSystemRunCommand } from "./system-run-command-ByVa3txU.js";
 import { t as installSkill } from "./skills-install-1ZdwGTnh.js";
-import { t as runGatewayUpdate } from "./update-runner-DMP1rCS1.js";
+import { t as runGatewayUpdate } from "./update-runner-DdPdhkw5.js";
 import { spawnSync } from "node:child_process";
 import * as os$1 from "node:os";
 import os from "node:os";
@@ -6851,7 +6851,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-6jcJSpXA.js");
+			const { handleNodeEvent } = await import("./server-node-events-BwGehjys.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,

package/dist/{server-node-events-6jcJSpXA.js → server-node-events-BwGehjys.js}

@@ -14,7 +14,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { Cn as enqueueSystemEvent, T as createOutboundSendDeps, dn as requestHeartbeatNow, dt as resolveOutboundTarget, x as agentCommand } from "./subagent-registry-DqFKNTCX.js";
+import { Cn as enqueueSystemEvent, T as createOutboundSendDeps, dn as requestHeartbeatNow, dt as resolveOutboundTarget, x as agentCommand } from "./subagent-registry-CVQOC9Jw.js";
 import { d as updateSessionStore } from "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import { r as normalizeChannelId } from "./plugins-CwSlLxM8.js";
@@ -98,7 +98,7 @@ import "./onboard-helpers-_pit1NZW.js";
 import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-DbpeXPGR.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-CVRC-O3Q.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{server-node-events-CzcTGD9T.js → server-node-events-DqVmWjof.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { Et as agentCommand, Mt as resolveOutboundTarget, Pt as createOutboundSendDeps, b as resolveGatewaySessionStoreTarget, st as requestHeartbeatNow, v as loadSessionEntry, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys } from "./reply-BGSd_cMI.js";
+import { Et as agentCommand, Mt as resolveOutboundTarget, Pt as createOutboundSendDeps, b as resolveGatewaySessionStoreTarget, st as requestHeartbeatNow, v as loadSessionEntry, xr as enqueueSystemEvent, y as pruneLegacyStoreKeys } from "./reply-DcyKvFor.js";
 import { c as normalizeMainKey } from "./session-key-DCt45XZa.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -102,7 +102,7 @@ import "./pi-tools.policy-CIDBbw6x.js";
 import "./control-service-Bz7rxLWq.js";
 import "./stagger-BUClb97_.js";
 import "./channel-selection-DuWs0Aak.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-IdD-dKZm.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-CHIVwHRD.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{status-DGKT6HnE.js → status-BY4CnB2O.js}

@@ -1,6 +1,6 @@
 import { u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, k as info, z as isRich } from "./utils-B-0b9bGM.js";
-import { B as summarizeRestartSentinel, Jt as sha256HexPrefix, _t as formatUsageReportLines, a as buildChannelSummary, gt as loadProviderUsageSummary, h as listAgentsForGateway, m as classifySessionKey, o as buildChannelAccountSnapshot, pr as lookupContextTokens, s as formatChannelAllowFrom, wr as peekSystemEvents, x as resolveSessionModelRef, z as readRestartSentinel } from "./reply-BGSd_cMI.js";
+import { B as summarizeRestartSentinel, Jt as sha256HexPrefix, _t as formatUsageReportLines, a as buildChannelSummary, gt as loadProviderUsageSummary, h as listAgentsForGateway, m as classifySessionKey, o as buildChannelAccountSnapshot, pr as lookupContextTokens, s as formatChannelAllowFrom, wr as peekSystemEvents, x as resolveSessionModelRef, z as readRestartSentinel } from "./reply-DcyKvFor.js";
 import { S as parseAgentSessionKey } from "./session-key-DCt45XZa.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { n as runExec } from "./exec-CWkblSrI.js";
@@ -28,7 +28,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-CR9445g5.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-BAMlsVVX.js";
 import { t as renderTable } from "./table-BTgkRafz.js";
 import { a as resolveGatewayProbeAuth$1, c as probeGateway, t as runSecurityAudit } from "./audit-CrITRV6w.js";
-import { a as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-DTRWmRB8.js";
+import { a as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-BPOuBmYt.js";
 import { g as resolveUpdateChannelDisplay, i as formatGitInstallLabel, m as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-CtckACbb.js";
 import { t as resolveNodeService } from "./node-service-Cxz4e-Qd.js";
 import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-yQZNwAF2.js";

package/dist/{status-CcQSl2sN.js → status-BvnWSBQl.js}

@@ -1,4 +1,4 @@
-import { dt as createPluginLoaderLogger, ft as loadSymiPlugins } from "./reply-BGSd_cMI.js";
+import { dt as createPluginLoaderLogger, ft as loadSymiPlugins } from "./reply-DcyKvFor.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { D as resolveDefaultAgentWorkspaceDir, c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-CgUHAtCo.js";
 import { i as loadConfig } from "./config-CHwyw6l5.js";

package/dist/{status-8176C-aV.js → status-CfLq5R5j.js}

@@ -9,7 +9,7 @@ import { c as resolveAgentWorkspaceDir } from "./agent-scope-D-jRCY0d.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-DKXJ-tbi.js";
 import { H as VERSION, i as loadConfig, o as readConfigFileSnapshot } from "./config-DHBLS1Hl.js";
 import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-BcE47FtD.js";
-import { En as peekSystemEvents, St as summarizeRestartSentinel, cn as buildChannelAccountSnapshot, in as formatUsageReportLines, ln as formatChannelAllowFrom, nt as sha256HexPrefix, rn as loadProviderUsageSummary, sn as buildChannelSummary, xt as readRestartSentinel } from "./subagent-registry-DqFKNTCX.js";
+import { En as peekSystemEvents, St as summarizeRestartSentinel, cn as buildChannelAccountSnapshot, in as formatUsageReportLines, ln as formatChannelAllowFrom, nt as sha256HexPrefix, rn as loadProviderUsageSummary, sn as buildChannelSummary, xt as readRestartSentinel } from "./subagent-registry-CVQOC9Jw.js";
 import { F as resolveMainSessionKey, j as resolveFreshSessionTotalTokens, o as loadSessionStore } from "./sessions-CJXnZVjR.js";
 import { n as listChannelPlugins } from "./plugins-CwSlLxM8.js";
 import { o as getTailnetHostname, s as readTailscaleStatusJson } from "./tailscale-CbbvYNVw.js";
@@ -29,7 +29,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-hFVEC3wO.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-CS1ov_hH.js";
 import { t as renderTable } from "./table-D01d2GuY.js";
 import { a as resolveGatewayProbeAuth$1, c as probeGateway, t as runSecurityAudit } from "./audit-Byo5jCLN.js";
-import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-tYyUNVp5.js";
+import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-DUKLANXu.js";
 import { g as resolveUpdateChannelDisplay, i as formatGitInstallLabel, m as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-ZdimP1aU.js";
 import { t as resolveNodeService } from "./node-service-fcZExd22.js";
 import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-DVLB9DNB.js";

package/dist/{status-DmPOSk-A.js → status-kPaSg3RB.js}

@@ -1,7 +1,7 @@
 import { o as createSubsystemLogger } from "./entry.js";
 import { D as resolveDefaultAgentWorkspaceDir, c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-D-jRCY0d.js";
 import { i as loadConfig } from "./config-DHBLS1Hl.js";
-import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-DqFKNTCX.js";
+import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-CVQOC9Jw.js";
 
 //#region src/plugins/status.ts
 const log = createSubsystemLogger("plugins");

package/dist/{subagent-registry-DqFKNTCX.js → subagent-registry-CVQOC9Jw.js}

@@ -35632,8 +35632,14 @@ const FILE_PATH_KEYS = [
 * Call this AFTER tools are created and the model profile is resolved.
 */
 function wrapToolsWithArgValidation(tools, profile) {
-	if (!profile.filters?.validateToolArgs) return tools;
-	return tools.map((tool) => wrapToolWithArgValidation(tool));
+	if (!profile.filters?.validateToolArgs) {
+		log$1.debug(`[validate] skipped — validateToolArgs=${profile.filters?.validateToolArgs ?? "undefined"} profile=${profile.label}`);
+		return tools;
+	}
+	const wrapped = tools.map((tool) => wrapToolWithArgValidation(tool));
+	const wrappedNames = wrapped.filter((t, i) => t !== tools[i]).map((t) => t.name);
+	log$1.debug(`[validate] applied to ${wrappedNames.length} tools: ${wrappedNames.join(",") || "(none matched)"}`);
+	return wrapped;
 }
 /**
 * Clean a file path by stripping control token fragments.
@@ -39590,7 +39596,9 @@ async function runEmbeddedAttempt(params) {
 			skillsPrompt,
 			tools
 		});
-		const modelProfile = resolveModelProfile(params.modelId ?? "", params.config?.models?.profiles);
+		const profileModelKey = params.modelId ?? "";
+		const modelProfile = resolveModelProfile(profileModelKey, params.config?.models?.profiles);
+		log$5.debug(`[profile] resolved: modelId=${profileModelKey} → profile=${modelProfile.label} validateToolArgs=${modelProfile.filters?.validateToolArgs ?? false}`);
 		const systemPromptText = createSystemPromptOverride(appendPrompt + (modelProfile.promptAdditions.length > 0 ? "\n\n" + modelProfile.promptAdditions.join("\n") : ""))();
 		const sessionLock = await acquireSessionWriteLock({
 			sessionFile: params.sessionFile,
@@ -39650,11 +39658,10 @@ async function runEmbeddedAttempt(params) {
 				await resourceLoader.reload();
 			}
 			const hookRunner = getGlobalHookRunner();
-			const { builtInTools: rawBuiltInTools, customTools } = splitSdkTools({
-				tools,
+			const { builtInTools, customTools } = splitSdkTools({
+				tools: wrapToolsWithArgValidation(tools, modelProfile),
 				sandboxEnabled: !!sandbox?.enabled
 			});
-			const builtInTools = wrapToolsWithArgValidation(rawBuiltInTools, modelProfile);
 			let clientToolCallDetected = null;
 			const clientToolLoopDetection = resolveToolLoopDetectionConfig({
 				cfg: params.config,
@@ -53018,7 +53025,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-CQ2F1f3a.js");
+			const { sendMessageWhatsApp } = await import("./web-ZnFT5LP9.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -68332,7 +68339,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-CQ2F1f3a.js");
+	webChannelPromise ??= import("./web-ZnFT5LP9.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{unified-runner-BbanUEmo.js → unified-runner-DpWGASP3.js}

@@ -53674,7 +53674,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-BsS1ia0M.js");
+			const { sendMessageWhatsApp } = await import("./web-DhofKbBh.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -68954,7 +68954,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-BsS1ia0M.js");
+	webChannelPromise ??= import("./web-DhofKbBh.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -75550,8 +75550,14 @@ const FILE_PATH_KEYS = [
 * Call this AFTER tools are created and the model profile is resolved.
 */
 function wrapToolsWithArgValidation(tools, profile) {
-	if (!profile.filters?.validateToolArgs) return tools;
-	return tools.map((tool) => wrapToolWithArgValidation(tool));
+	if (!profile.filters?.validateToolArgs) {
+		log.debug(`[validate] skipped — validateToolArgs=${profile.filters?.validateToolArgs ?? "undefined"} profile=${profile.label}`);
+		return tools;
+	}
+	const wrapped = tools.map((tool) => wrapToolWithArgValidation(tool));
+	const wrappedNames = wrapped.filter((t, i) => t !== tools[i]).map((t) => t.name);
+	log.debug(`[validate] applied to ${wrappedNames.length} tools: ${wrappedNames.join(",") || "(none matched)"}`);
+	return wrapped;
 }
 /**
 * Clean a file path by stripping control token fragments.
@@ -76790,7 +76796,9 @@ async function runEmbeddedAttempt(params) {
 			skillsPrompt,
 			tools
 		});
-		const modelProfile = resolveModelProfile(params.modelId ?? "", params.config?.models?.profiles);
+		const profileModelKey = params.modelId ?? "";
+		const modelProfile = resolveModelProfile(profileModelKey, params.config?.models?.profiles);
+		log$9.debug(`[profile] resolved: modelId=${profileModelKey} → profile=${modelProfile.label} validateToolArgs=${modelProfile.filters?.validateToolArgs ?? false}`);
 		const systemPromptText = createSystemPromptOverride(appendPrompt + (modelProfile.promptAdditions.length > 0 ? "\n\n" + modelProfile.promptAdditions.join("\n") : ""))();
 		const sessionLock = await acquireSessionWriteLock({
 			sessionFile: params.sessionFile,
@@ -76850,11 +76858,10 @@ async function runEmbeddedAttempt(params) {
 				await resourceLoader.reload();
 			}
 			const hookRunner = getGlobalHookRunner();
-			const { builtInTools: rawBuiltInTools, customTools } = splitSdkTools({
-				tools,
+			const { builtInTools, customTools } = splitSdkTools({
+				tools: wrapToolsWithArgValidation(tools, modelProfile),
 				sandboxEnabled: !!sandbox?.enabled
 			});
-			const builtInTools = wrapToolsWithArgValidation(rawBuiltInTools, modelProfile);
 			let clientToolCallDetected = null;
 			const clientToolLoopDetection = resolveToolLoopDetectionConfig({
 				cfg: params.config,