@symerian/symi 2.6.34 → 2.6.35

package/dist/{audio-preflight-DHTaS5U1.js → audio-preflight-BVaaZWkg.js}

@@ -8,10 +8,10 @@ import "./auth-profiles-DdK1Hxaa.js";
 import "./env-BDXYbTKj.js";
 import "./github-copilot-token-cCYzSU9h.js";
 import "./boolean-CE7i9tBR.js";
-import "./pi-embedded-helpers-pubKo8HQ.js";
+import "./pi-embedded-helpers-CfqDGQ9J.js";
 import "./config-5SdHIcHU.js";
 import "./manifest-registry-yb7sAlu4.js";
-import "./chrome-DYZwl5Gv.js";
+import "./chrome-DkaXoP36.js";
 import "./frontmatter-CTR5f_Ez.js";
 import "./skills-Bs0AW1g3.js";
 import "./redact-BDMXB06K.js";
@@ -27,11 +27,11 @@ import "./accounts-3dCrO3oZ.js";
 import "./accounts-BuZxOb3B.js";
 import "./bindings-BsHoBLIE.js";
 import "./tool-images-SqqWIT22.js";
-import "./image-CXu8W39c.js";
+import "./image-CuzFLQWC.js";
 import "./pi-model-discovery-Bv5YDJc8.js";
 import "./gemini-auth-Dy12ZAH3.js";
 import "./local-roots-DhZz0Ybs.js";
-import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-WAG0M5s9.js";
+import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-CU9l0uJh.js";
 
 //#region src/media-understanding/audio-preflight.ts
 /**

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.6.34",
-  "commit": "f46835b55f8963f8de356d69966945daaf0f7ea2",
-  "builtAt": "2026-04-16T22:42:16.219Z"
+  "version": "2.6.35",
+  "commit": "ace47bc3a15ad94ac64e4d89650c364288d335b3",
+  "builtAt": "2026-04-16T23:04:14.025Z"
 }

package/dist/bundled/boot-md/handler.js

@@ -4,16 +4,16 @@ import { b as isGatewayStartupEvent } from "../../registry-DYq1AYOv.js";
 import { s as resolveAgentWorkspaceDir, t as listAgentIds } from "../../agent-scope-CpEJ0B88.js";
 import { r as defaultRuntime, t as createSubsystemLogger } from "../../subsystem-BjyjJF-d.js";
 import "../../workspace-DscDraUb.js";
-import { a as createDefaultDeps, i as agentCommand } from "../../unified-runner-Dy2eq7ZO.js";
+import { a as createDefaultDeps, i as agentCommand } from "../../unified-runner-Di5Ca6mo.js";
 import { s as resolveStorePath } from "../../paths-CbQV9WEg.js";
 import "../../auth-profiles-DdK1Hxaa.js";
 import "../../env-BDXYbTKj.js";
 import "../../github-copilot-token-cCYzSU9h.js";
 import "../../boolean-CE7i9tBR.js";
-import { H as loadSessionStore, K as updateSessionStore, xt as resolveMainSessionKey, yt as resolveAgentMainSessionKey } from "../../pi-embedded-helpers-pubKo8HQ.js";
+import { H as loadSessionStore, K as updateSessionStore, xt as resolveMainSessionKey, yt as resolveAgentMainSessionKey } from "../../pi-embedded-helpers-CfqDGQ9J.js";
 import "../../config-5SdHIcHU.js";
 import "../../manifest-registry-yb7sAlu4.js";
-import "../../chrome-DYZwl5Gv.js";
+import "../../chrome-DkaXoP36.js";
 import "../../frontmatter-CTR5f_Ez.js";
 import "../../skills-Bs0AW1g3.js";
 import "../../redact-BDMXB06K.js";
@@ -31,10 +31,10 @@ import "../../bindings-BsHoBLIE.js";
 import "../../send-CVMyYPQw.js";
 import "../../send-CvhXrdgS.js";
 import "../../tool-images-SqqWIT22.js";
-import "../../deliver-dODxSv3b.js";
+import "../../deliver-C46-vyqg.js";
 import "../../diagnostic-rPhsBoZz.js";
 import "../../diagnostic-session-state-Zw87xFym.js";
-import "../../image-CXu8W39c.js";
+import "../../image-CuzFLQWC.js";
 import { n as SILENT_REPLY_TOKEN } from "../../tokens-Bux9Y_xD.js";
 import "../../send-DYj_o4_F.js";
 import "../../pi-model-discovery-Bv5YDJc8.js";
@@ -50,7 +50,7 @@ import "../../local-roots-DhZz0Ybs.js";
 import "../../ir-CTiz95Vb.js";
 import "../../render-CDCvpfhh.js";
 import "../../commands-registry-Bfc7Uz0o.js";
-import "../../runner-WAG0M5s9.js";
+import "../../runner-CU9l0uJh.js";
 import "../../skill-commands-DcVwOafC.js";
 import "../../fetch-Bso4i15F.js";
 import "../../channel-activity-B6G1jnQT.js";

package/dist/bundled/session-memory/handler.js

@@ -4,16 +4,16 @@ import "../../registry-DYq1AYOv.js";
 import { s as resolveAgentWorkspaceDir } from "../../agent-scope-CpEJ0B88.js";
 import { t as createSubsystemLogger } from "../../subsystem-BjyjJF-d.js";
 import "../../workspace-DscDraUb.js";
-import "../../unified-runner-Dy2eq7ZO.js";
+import "../../unified-runner-Di5Ca6mo.js";
 import "../../paths-CbQV9WEg.js";
 import "../../auth-profiles-DdK1Hxaa.js";
 import "../../env-BDXYbTKj.js";
 import "../../github-copilot-token-cCYzSU9h.js";
 import "../../boolean-CE7i9tBR.js";
-import { ct as hasInterSessionUserProvenance } from "../../pi-embedded-helpers-pubKo8HQ.js";
+import { ct as hasInterSessionUserProvenance } from "../../pi-embedded-helpers-CfqDGQ9J.js";
 import "../../config-5SdHIcHU.js";
 import "../../manifest-registry-yb7sAlu4.js";
-import "../../chrome-DYZwl5Gv.js";
+import "../../chrome-DkaXoP36.js";
 import "../../frontmatter-CTR5f_Ez.js";
 import "../../skills-Bs0AW1g3.js";
 import "../../redact-BDMXB06K.js";
@@ -31,10 +31,10 @@ import "../../bindings-BsHoBLIE.js";
 import "../../send-CVMyYPQw.js";
 import "../../send-CvhXrdgS.js";
 import "../../tool-images-SqqWIT22.js";
-import "../../deliver-dODxSv3b.js";
+import "../../deliver-C46-vyqg.js";
 import "../../diagnostic-rPhsBoZz.js";
 import "../../diagnostic-session-state-Zw87xFym.js";
-import "../../image-CXu8W39c.js";
+import "../../image-CuzFLQWC.js";
 import "../../tokens-Bux9Y_xD.js";
 import "../../send-DYj_o4_F.js";
 import "../../pi-model-discovery-Bv5YDJc8.js";
@@ -50,7 +50,7 @@ import "../../local-roots-DhZz0Ybs.js";
 import "../../ir-CTiz95Vb.js";
 import "../../render-CDCvpfhh.js";
 import "../../commands-registry-Bfc7Uz0o.js";
-import "../../runner-WAG0M5s9.js";
+import "../../runner-CU9l0uJh.js";
 import "../../skill-commands-DcVwOafC.js";
 import "../../fetch-Bso4i15F.js";
 import "../../channel-activity-B6G1jnQT.js";

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-986b5c29886821b4a3935537080cee76d6618b127cff49e89ebc8e80212cd10e
+96edf5ff2c7c1f9ee2f72b644c1629da8922c673856e252cce5045e5ede21dc0

package/dist/{chrome-DYZwl5Gv.js → chrome-DkaXoP36.js}

@@ -10,7 +10,7 @@ import fs$1 from "node:fs/promises";
 import { execFileSync, spawn } from "node:child_process";
 import net from "node:net";
 import { createServer } from "node:http";
-import WebSocket, { WebSocketServer } from "ws";
+import WebSocket$1, { WebSocketServer } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 
 //#region src/browser/constants.ts
@@ -178,7 +178,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 	let nextExtensionId = 1;
 	const sendToExtension = async (payload) => {
 		const ws = extensionWs;
-		if (!ws || ws.readyState !== WebSocket.OPEN) throw new Error("Chrome extension not connected");
+		if (!ws || ws.readyState !== WebSocket$1.OPEN) throw new Error("Chrome extension not connected");
 		ws.send(JSON.stringify(payload));
 		return await new Promise((resolve, reject) => {
 			const timer = setTimeout(() => {
@@ -195,12 +195,12 @@ async function ensureChromeExtensionRelayServer(opts) {
 	const broadcastToCdpClients = (evt) => {
 		const msg = JSON.stringify(evt);
 		for (const ws of cdpClients) {
-			if (ws.readyState !== WebSocket.OPEN) continue;
+			if (ws.readyState !== WebSocket$1.OPEN) continue;
 			ws.send(msg);
 		}
 	};
 	const sendResponseToCdp = (ws, res) => {
-		if (ws.readyState !== WebSocket.OPEN) return;
+		if (ws.readyState !== WebSocket$1.OPEN) return;
 		ws.send(JSON.stringify(res));
 	};
 	const ensureTargetEventsForClient = (ws, mode) => {
@@ -425,7 +425,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 	wssExtension.on("connection", (ws) => {
 		extensionWs = ws;
 		const ping = setInterval(() => {
-			if (ws.readyState !== WebSocket.OPEN) return;
+			if (ws.readyState !== WebSocket$1.OPEN) return;
 			ws.send(JSON.stringify({ method: "ping" }));
 		}, 5e3);
 		ws.on("message", (data) => {
@@ -743,7 +743,7 @@ async function fetchOk(url, timeoutMs = 1500, init) {
 }
 async function withCdpSocket(wsUrl, fn, opts) {
 	const headers = getHeadersWithAuth(wsUrl, opts?.headers ?? {});
-	const ws = new WebSocket(wsUrl, {
+	const ws = new WebSocket$1(wsUrl, {
 		handshakeTimeout: typeof opts?.handshakeTimeoutMs === "number" && Number.isFinite(opts.handshakeTimeoutMs) ? Math.max(1, Math.floor(opts.handshakeTimeoutMs)) : 5e3,
 		...Object.keys(headers).length ? { headers } : {}
 	});
@@ -1637,7 +1637,7 @@ async function getChromeWebSocketUrl(cdpUrl, timeoutMs = 500) {
 async function canOpenWebSocket(wsUrl, timeoutMs = 800) {
 	return await new Promise((resolve) => {
 		const headers = getHeadersWithAuth(wsUrl);
-		const ws = new WebSocket(wsUrl, {
+		const ws = new WebSocket$1(wsUrl, {
 			handshakeTimeout: timeoutMs,
 			...Object.keys(headers).length ? { headers } : {}
 		});

package/dist/{command-registry-ajP42kpE.js → command-registry-CrYpGtIt.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { an as getPrimaryCommand, cn as hasHelpOrVersion } from "./entry.js";
-import { i as registerSubCliCommands, o as reparseProgramFromActionArgs } from "./register.subclis-FAdASegj.js";
+import { i as registerSubCliCommands, o as reparseProgramFromActionArgs } from "./register.subclis-DcBHO9E8.js";
 
 //#region src/cli/program/command-registry.ts
 var command_registry_exports = /* @__PURE__ */ __exportAll({
@@ -22,7 +22,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.setup-BRKstpuL.js")).registerSetupCommand(program);
+			(await import("./register.setup-BKYxHrcB.js")).registerSetupCommand(program);
 		}
 	},
 	{
@@ -32,7 +32,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.onboard-CbGEztLT.js")).registerOnboardCommand(program);
+			(await import("./register.onboard-BN7J8vyx.js")).registerOnboardCommand(program);
 		}
 	},
 	{
@@ -79,7 +79,7 @@ const coreEntries = [
 			}
 		],
 		register: async ({ program }) => {
-			(await import("./register.maintenance-Ea70NNls.js")).registerMaintenanceCommands(program);
+			(await import("./register.maintenance-jMmXJ1NK.js")).registerMaintenanceCommands(program);
 		}
 	},
 	{

package/dist/{completion-cli-Dui7LK9s.js → completion-cli-BmYBAxqM.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { h as pathExists } from "./utils-B-0b9bGM.js";
 import { i as routeLogsToStderr } from "./subsystem-D9vIQve0.js";
-import { a as registerCoreCliByName, c as getSubCliEntries, l as registerSubCliByName, r as getCoreCliCommandNames, t as getProgramContext } from "./program-context-CWoc-4O6.js";
+import { a as registerCoreCliByName, c as getSubCliEntries, l as registerSubCliByName, r as getCoreCliCommandNames, t as getProgramContext } from "./program-context-Dm-BSkOd.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{completion-cli-zokW-yVf.js → completion-cli-GqPGf3Kq.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { Yt as resolveStateDir, l as routeLogsToStderr, nt as pathExists } from "./entry.js";
-import { n as getSubCliEntries, r as registerSubCliByName } from "./register.subclis-FAdASegj.js";
-import { i as registerCoreCliByName, n as getCoreCliCommandNames } from "./command-registry-ajP42kpE.js";
+import { n as getSubCliEntries, r as registerSubCliByName } from "./register.subclis-DcBHO9E8.js";
+import { i as registerCoreCliByName, n as getCoreCliCommandNames } from "./command-registry-CrYpGtIt.js";
 import { t as getProgramContext } from "./program-context-CqzR_m-7.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{deliver-dODxSv3b.js → deliver-C46-vyqg.js}

@@ -3,7 +3,7 @@ import { s as resolveStateDir } from "./paths-CE7eVGHg.js";
 import { m as normalizeOptionalAccountId, p as normalizeAccountId } from "./session-key-BCzIW1Y2.js";
 import { c as getActivePluginRegistry, v as createInternalHookEvent, x as triggerInternalHook } from "./registry-DYq1AYOv.js";
 import { t as createSubsystemLogger } from "./subsystem-BjyjJF-d.js";
-import { B as resolveMirroredTranscriptText, i as isMessagingToolDuplicate, z as appendAssistantMessageToSessionTranscript } from "./pi-embedded-helpers-pubKo8HQ.js";
+import { B as resolveMirroredTranscriptText, i as isMessagingToolDuplicate, z as appendAssistantMessageToSessionTranscript } from "./pi-embedded-helpers-CfqDGQ9J.js";
 import { d as getChannelDock } from "./thinking-BprCy23Z.js";
 import { r as normalizeChannelId, t as getChannelPlugin } from "./plugins-BzmbgY7s.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-Bux9Y_xD.js";

package/dist/{doctor-completion-DaGKVo6p.js → doctor-completion-4SDl6ZEA.js}

@@ -1,7 +1,7 @@
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { r as resolveCliName } from "./command-format-COaS-S7B.js";
 import { t as note } from "./note-DeHoW7xO.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-Dui7LK9s.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-BmYBAxqM.js";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
 

package/dist/{doctor-completion-kr-VbXG-.js → doctor-completion-CL0NHlCA.js}

@@ -1,7 +1,7 @@
 import { r as resolveCliName } from "./command-format-BtYOfWxC.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-BNuQ4lAT.js";
 import { t as note } from "./note-DDecZomM.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-zokW-yVf.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-GqPGf3Kq.js";
 import { spawnSync } from "node:child_process";
 import path from "node:path";
 

package/dist/entry.js

@@ -2500,7 +2500,7 @@ if (!ensureExperimentalWarningSuppressed()) {
 		applyCliProfileEnv({ profile: parsed.profile });
 		process$1.argv = parsed.argv;
 	}
-	import("./run-main-DqKSUzps.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
+	import("./run-main-DkcjdsAo.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
 		console.error("[symi] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 		process$1.exitCode = 1;
 	});

package/dist/{gateway-cli-DdbomLMt.js → gateway-cli-CqHk7Nfm.js}

@@ -134,7 +134,7 @@ import { i as pickGatewaySelfPresence } from "./status-CwhHbhUv.js";
 import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-BNxdveY8.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-ZdimP1aU.js";
-import { t as runOnboardingWizard } from "./onboarding-BesMJD5M.js";
+import { t as runOnboardingWizard } from "./onboarding-CerjrLp1.js";
 import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-B4IR7jcD.js";
 import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-BzIW-JHE.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CzWeiE-Y.js";
@@ -7264,7 +7264,7 @@ function buildControlUiCspHeader() {
 		"default-src 'self'",
 		"base-uri 'none'",
 		"object-src 'none'",
-		"frame-ancestors 'none'",
+		"frame-ancestors 'self'",
 		"script-src 'self'",
 		"style-src 'self' 'unsafe-inline'",
 		"img-src 'self' data: https:",
@@ -7316,7 +7316,7 @@ const STATIC_ASSET_EXTENSIONS = new Set([
 	".txt"
 ]);
 function applyControlUiSecurityHeaders(res) {
-	res.setHeader("X-Frame-Options", "DENY");
+	res.setHeader("X-Frame-Options", "SAMEORIGIN");
 	res.setHeader("Content-Security-Policy", buildControlUiCspHeader());
 	res.setHeader("X-Content-Type-Options", "nosniff");
 	res.setHeader("Referrer-Policy", "no-referrer");
@@ -7377,10 +7377,16 @@ function serveFile(res, filePath) {
 	res.setHeader("Cache-Control", "no-cache");
 	res.end(fs.readFileSync(filePath));
 }
+/** Cache-bust token: changes every time the gateway process starts. */
+const CACHE_BUST = `v=${Date.now()}`;
 function serveIndexHtml(res, indexPath) {
 	res.setHeader("Content-Type", "text/html; charset=utf-8");
 	res.setHeader("Cache-Control", "no-cache");
-	res.end(fs.readFileSync(indexPath, "utf8"));
+	let html = fs.readFileSync(indexPath, "utf8");
+	html = html.replace(/(<(?:script\s+src|link\s+rel="stylesheet"\s+href)=")([^"]+\.(?:js|css))(")/g, (_, before, url, after) => {
+		return `${before}${url}${url.includes("?") ? "&" : "?"}${CACHE_BUST}${after}`;
+	});
+	res.end(html);
 }
 function isSafeRelativePath(relPath) {
 	if (!relPath) return false;

package/dist/{gateway-cli-7pMi8rn1.js → gateway-cli-D98LL9Yi.js}

@@ -139,7 +139,7 @@ import { r as pickGatewaySelfPresence } from "./status-ITRlj7e_.js";
 import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-pFcca1cU.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-CtckACbb.js";
-import { t as runOnboardingWizard } from "./onboarding-Be8-Muma.js";
+import { t as runOnboardingWizard } from "./onboarding-B9RTmYiC.js";
 import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-n5oCz2e0.js";
 import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-Bmd6SdxC.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-Bv0M7ka7.js";
@@ -7268,7 +7268,7 @@ function buildControlUiCspHeader() {
 		"default-src 'self'",
 		"base-uri 'none'",
 		"object-src 'none'",
-		"frame-ancestors 'none'",
+		"frame-ancestors 'self'",
 		"script-src 'self'",
 		"style-src 'self' 'unsafe-inline'",
 		"img-src 'self' data: https:",
@@ -7320,7 +7320,7 @@ const STATIC_ASSET_EXTENSIONS = new Set([
 	".txt"
 ]);
 function applyControlUiSecurityHeaders(res) {
-	res.setHeader("X-Frame-Options", "DENY");
+	res.setHeader("X-Frame-Options", "SAMEORIGIN");
 	res.setHeader("Content-Security-Policy", buildControlUiCspHeader());
 	res.setHeader("X-Content-Type-Options", "nosniff");
 	res.setHeader("Referrer-Policy", "no-referrer");
@@ -7381,10 +7381,16 @@ function serveFile(res, filePath) {
 	res.setHeader("Cache-Control", "no-cache");
 	res.end(fs.readFileSync(filePath));
 }
+/** Cache-bust token: changes every time the gateway process starts. */
+const CACHE_BUST = `v=${Date.now()}`;
 function serveIndexHtml(res, indexPath) {
 	res.setHeader("Content-Type", "text/html; charset=utf-8");
 	res.setHeader("Cache-Control", "no-cache");
-	res.end(fs.readFileSync(indexPath, "utf8"));
+	let html = fs.readFileSync(indexPath, "utf8");
+	html = html.replace(/(<(?:script\s+src|link\s+rel="stylesheet"\s+href)=")([^"]+\.(?:js|css))(")/g, (_, before, url, after) => {
+		return `${before}${url}${url.includes("?") ? "&" : "?"}${CACHE_BUST}${after}`;
+	});
+	res.end(html);
 }
 function isSafeRelativePath(relPath) {
 	if (!relPath) return false;

package/dist/{image-CXu8W39c.js → image-CuzFLQWC.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { R as shortenHomeInString, k as isRecord } from "./registry-DYq1AYOv.js";
 import { $ as resolveSymiAgentDir, L as getApiKeyForModel, M as resolveImplicitBedrockProvider, N as resolveImplicitCopilotProvider, P as resolveImplicitProviders, U as normalizeSecretInput, j as normalizeProviders, z as requireApiKey } from "./auth-profiles-DdK1Hxaa.js";
-import { N as sanitizeUserFacingText } from "./pi-embedded-helpers-pubKo8HQ.js";
+import { N as sanitizeUserFacingText } from "./pi-embedded-helpers-CfqDGQ9J.js";
 import { n as loadConfig } from "./config-5SdHIcHU.js";
 import { n as redactToolDetail } from "./redact-BDMXB06K.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-Bv5YDJc8.js";

package/dist/index.js

@@ -112,7 +112,7 @@ import { t as ensureSymiCliOnPath } from "./path-env-MnzRq6nD.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-B37eizu-.js";
 import "./ports-BX0kKI0g.js";
 import { a as hasFlag, i as getVerboseFlag, n as getCommandPath, o as hasHelpOrVersion, s as hasRootVersionAlias } from "./argv-C6ovOie2.js";
-import { i as getCoreCliCommandsWithSubcommands, n as setProgramContext, o as registerProgramCommands, s as getSubCliCommandsWithSubcommands } from "./program-context-CWoc-4O6.js";
+import { i as getCoreCliCommandsWithSubcommands, n as setProgramContext, o as registerProgramCommands, s as getSubCliCommandsWithSubcommands } from "./program-context-Dm-BSkOd.js";
 import "./catalog-RiADx7MA.js";
 import "./plugin-registry-Ls_YGsWz.js";
 import { n as resolveCliChannelOptions } from "./channel-options-BaC3G5sc.js";

package/dist/llm-slug-generator.js

@@ -3,16 +3,16 @@ import "./registry-DYq1AYOv.js";
 import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CpEJ0B88.js";
 import "./subsystem-BjyjJF-d.js";
 import "./workspace-DscDraUb.js";
-import { t as runAgentTurn } from "./unified-runner-Dy2eq7ZO.js";
+import { t as runAgentTurn } from "./unified-runner-Di5Ca6mo.js";
 import "./paths-CbQV9WEg.js";
 import "./auth-profiles-DdK1Hxaa.js";
 import "./env-BDXYbTKj.js";
 import "./github-copilot-token-cCYzSU9h.js";
 import "./boolean-CE7i9tBR.js";
-import "./pi-embedded-helpers-pubKo8HQ.js";
+import "./pi-embedded-helpers-CfqDGQ9J.js";
 import "./config-5SdHIcHU.js";
 import "./manifest-registry-yb7sAlu4.js";
-import "./chrome-DYZwl5Gv.js";
+import "./chrome-DkaXoP36.js";
 import "./frontmatter-CTR5f_Ez.js";
 import "./skills-Bs0AW1g3.js";
 import "./redact-BDMXB06K.js";
@@ -30,10 +30,10 @@ import "./bindings-BsHoBLIE.js";
 import "./send-CVMyYPQw.js";
 import "./send-CvhXrdgS.js";
 import "./tool-images-SqqWIT22.js";
-import "./deliver-dODxSv3b.js";
+import "./deliver-C46-vyqg.js";
 import "./diagnostic-rPhsBoZz.js";
 import "./diagnostic-session-state-Zw87xFym.js";
-import "./image-CXu8W39c.js";
+import "./image-CuzFLQWC.js";
 import "./tokens-Bux9Y_xD.js";
 import "./send-DYj_o4_F.js";
 import "./pi-model-discovery-Bv5YDJc8.js";
@@ -49,7 +49,7 @@ import "./local-roots-DhZz0Ybs.js";
 import "./ir-CTiz95Vb.js";
 import "./render-CDCvpfhh.js";
 import "./commands-registry-Bfc7Uz0o.js";
-import "./runner-WAG0M5s9.js";
+import "./runner-CU9l0uJh.js";
 import "./skill-commands-DcVwOafC.js";
 import "./fetch-Bso4i15F.js";
 import "./channel-activity-B6G1jnQT.js";

package/dist/{onboard-Dadg5mWZ.js → onboard-Cy_CK0Ng.js}

@@ -10,7 +10,7 @@ import { t as assertSupportedRuntime } from "./runtime-guard-D7waq_Ho.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DlMdyFDY.js";
 import { t as resolveGatewayService } from "./service-Cm9j9WzQ.js";
 import { r as healthCommand } from "./health-BNxdveY8.js";
-import { t as runOnboardingWizard } from "./onboarding-BesMJD5M.js";
+import { t as runOnboardingWizard } from "./onboarding-CerjrLp1.js";
 import { $ as setHuggingfaceApiKey, A as applyXaiConfig, B as applyVercelAiGatewayConfig, E as applyTogetherConfig, I as applyLitellmConfig, M as applyXiaomiConfig, O as applyVeniceConfig, P as applyZaiConfig, Q as setGeminiApiKey, R as applyCloudflareAiGatewayConfig, S as applyQianfanConfig, X as setAnthropicApiKey, Z as setCloudflareAiGatewayConfig, _ as applyMoonshotConfigCn, a as applyMinimaxApiConfig, at as setOpenrouterApiKey, b as applyOpenrouterConfig, ct as setTogetherApiKey, d as applyAuthProfileConfig, dt as setXaiApiKey, et as setKimiCodingApiKey, f as applyHuggingfaceConfig, ft as setXiaomiApiKey, g as applyMoonshotConfig, it as setOpencodeZenApiKey, l as applyMinimaxConfig, lt as setVeniceApiKey, m as applyKimiCodeConfig, n as validateAnthropicSetupToken, nt as setMinimaxApiKey, o as applyMinimaxApiConfigCn, ot as setQianfanApiKey, pt as setZaiApiKey, r as applyOpencodeZenConfig, rt as setMoonshotApiKey, st as setSyntheticApiKey, t as buildTokenProfileId, tt as setLitellmApiKey, ut as setVercelAiGatewayApiKey, w as applySyntheticConfig } from "./auth-token-Cmrk2TPo.js";
 import { n as logConfigUpdated } from "./logging-BGewRZy0.js";
 import { n as isDeprecatedAuthChoice, r as normalizeLegacyOnboardAuthChoice } from "./auth-choice-legacy-BKXTgyr4.js";

package/dist/{onboard-C4DXGi07.js → onboard-DzfTelta.js}

@@ -12,7 +12,7 @@ import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, r as isGate
 import { r as isSystemdUserServiceAvailable } from "./systemd-riq8uNJQ.js";
 import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
 import { r as healthCommand } from "./health-pFcca1cU.js";
-import { t as runOnboardingWizard } from "./onboarding-Be8-Muma.js";
+import { t as runOnboardingWizard } from "./onboarding-B9RTmYiC.js";
 import { $ as setHuggingfaceApiKey, A as applyXaiConfig, B as applyVercelAiGatewayConfig, E as applyTogetherConfig, I as applyLitellmConfig, M as applyXiaomiConfig, O as applyVeniceConfig, P as applyZaiConfig, Q as setGeminiApiKey, R as applyCloudflareAiGatewayConfig, S as applyQianfanConfig, X as setAnthropicApiKey, Z as setCloudflareAiGatewayConfig, _ as applyMoonshotConfigCn, a as applyMinimaxApiConfig, at as setOpenrouterApiKey, b as applyOpenrouterConfig, ct as setTogetherApiKey, d as applyAuthProfileConfig, dt as setXaiApiKey, et as setKimiCodingApiKey, f as applyHuggingfaceConfig, ft as setXiaomiApiKey, g as applyMoonshotConfig, it as setOpencodeZenApiKey, l as applyMinimaxConfig, lt as setVeniceApiKey, m as applyKimiCodeConfig, n as validateAnthropicSetupToken, nt as setMinimaxApiKey, o as applyMinimaxApiConfigCn, ot as setQianfanApiKey, pt as setZaiApiKey, r as applyOpencodeZenConfig, rt as setMoonshotApiKey, st as setSyntheticApiKey, t as buildTokenProfileId, tt as setLitellmApiKey, ut as setVercelAiGatewayApiKey, w as applySyntheticConfig } from "./auth-token-BnOynwk4.js";
 import { n as logConfigUpdated } from "./logging-BzzwiKjv.js";
 import { n as isDeprecatedAuthChoice, r as normalizeLegacyOnboardAuthChoice } from "./auth-choice-legacy-Ch38-Kbr.js";

package/dist/{onboarding-Be8-Muma.js → onboarding-B9RTmYiC.js}

@@ -304,7 +304,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-Cbo7t2w6.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-CLQL7PKW.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding-BesMJD5M.js → onboarding-CerjrLp1.js}

@@ -302,7 +302,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-BdFKvepX.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-CGGB37q-.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding.finalize-BdFKvepX.js → onboarding.finalize-CGGB37q-.js}

@@ -99,10 +99,10 @@ import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
 import "./note-DDecZomM.js";
-import "./register.subclis-FAdASegj.js";
-import "./command-registry-ajP42kpE.js";
+import "./register.subclis-DcBHO9E8.js";
+import "./command-registry-CrYpGtIt.js";
 import "./program-context-CqzR_m-7.js";
-import { r as installCompletion } from "./completion-cli-zokW-yVf.js";
+import { r as installCompletion } from "./completion-cli-GqPGf3Kq.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DlMdyFDY.js";
@@ -110,7 +110,7 @@ import { t as resolveGatewayService } from "./service-Cm9j9WzQ.js";
 import { r as healthCommand } from "./health-BNxdveY8.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { t as formatHealthCheckFailure } from "./health-format-CzgUHmmX.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-kr-VbXG-.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-CL0NHlCA.js";
 import { t as runTui } from "./tui-BJB80muc.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{onboarding.finalize-Cbo7t2w6.js → onboarding.finalize-CLQL7PKW.js}

@@ -103,16 +103,16 @@ import "./control-service-Bz7rxLWq.js";
 import "./stagger-BUClb97_.js";
 import "./channel-selection-DuWs0Aak.js";
 import "./runtime-guard-B37eizu-.js";
-import "./program-context-CWoc-4O6.js";
+import "./program-context-Dm-BSkOd.js";
 import "./note-DeHoW7xO.js";
-import { r as installCompletion } from "./completion-cli-Dui7LK9s.js";
+import { r as installCompletion } from "./completion-cli-BmYBAxqM.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-2mwX-jqj.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-riq8uNJQ.js";
 import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
 import { r as healthCommand } from "./health-pFcca1cU.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
 import { t as formatHealthCheckFailure } from "./health-format-DSwnXZPU.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-DaGKVo6p.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-4SDl6ZEA.js";
 import { t as runTui } from "./tui-CriznorL.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{pi-embedded-helpers-pubKo8HQ.js → pi-embedded-helpers-CfqDGQ9J.js}

@@ -9,7 +9,7 @@ import { h as isPidAlive, m as resolveProcessScopedMap } from "./auth-profiles-D
 import { n as formatCliCommand } from "./env-BDXYbTKj.js";
 import { t as parseBooleanValue } from "./boolean-CE7i9tBR.js";
 import { _ as parseDurationMs, a as writeConfigFile, n as loadConfig, s as parseByteSize, t as createConfigIO } from "./config-5SdHIcHU.js";
-import { A as DEFAULT_BROWSER_EVALUATE_ENABLED, D as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, E as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, M as DEFAULT_SYMI_BROWSER_ENABLED, N as DEFAULT_SYMI_BROWSER_PROFILE_NAME, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, S as stopChromeExtensionRelayServer, _ as fetchJson, a as resolveSymiUserDataDir, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, g as appendCdpPath, h as withBrowserNavigationPolicy, i as launchSymiChrome, j as DEFAULT_SYMI_BROWSER_COLOR, k as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, l as createTargetViaCdp, m as assertBrowserNavigationAllowed, n as isChromeCdpReady, o as stopSymiChrome, p as InvalidBrowserNavigationUrlError, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as fetchOk, w as isLoopbackHost, x as ensureChromeExtensionRelayServer } from "./chrome-DYZwl5Gv.js";
+import { A as DEFAULT_BROWSER_EVALUATE_ENABLED, D as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, E as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, M as DEFAULT_SYMI_BROWSER_ENABLED, N as DEFAULT_SYMI_BROWSER_PROFILE_NAME, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, S as stopChromeExtensionRelayServer, _ as fetchJson, a as resolveSymiUserDataDir, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, g as appendCdpPath, h as withBrowserNavigationPolicy, i as launchSymiChrome, j as DEFAULT_SYMI_BROWSER_COLOR, k as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, l as createTargetViaCdp, m as assertBrowserNavigationAllowed, n as isChromeCdpReady, o as stopSymiChrome, p as InvalidBrowserNavigationUrlError, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as fetchOk, w as isLoopbackHost, x as ensureChromeExtensionRelayServer } from "./chrome-DkaXoP36.js";
 import { a as syncSkillsToWorkspace, l as resolveSandboxInputPath, m as sanitizeEnvVars, u as resolveSandboxPath } from "./skills-Bs0AW1g3.js";
 import { n as formatErrorMessage, t as extractErrorCode } from "./errors-XIsvXeC-.js";
 import { b as openFileWithinRoot, i as getImageMetadata, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS, y as SafeOpenError } from "./image-ops-C7CauEK8.js";
@@ -933,7 +933,7 @@ function isModuleNotFoundError(err) {
 }
 async function loadPwAiModule(mode) {
 	try {
-		return await import("./pw-ai-B5asscAD.js");
+		return await import("./pw-ai-m0mj2KWK.js");
 	} catch (err) {
 		if (mode === "soft") return null;
 		if (isModuleNotFoundError(err)) return null;
@@ -3473,11 +3473,11 @@ function createProfileContext(opts, profile) {
 		const userDataDir = resolveSymiUserDataDir(profile.name);
 		const profileState = getProfileState();
 		if (await isHttpReachable(300) && !profileState.running) try {
-			await (await import("./pw-ai-B5asscAD.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-m0mj2KWK.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (profileState.running) await stopRunningBrowser();
 		try {
-			await (await import("./pw-ai-B5asscAD.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-m0mj2KWK.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (!fs.existsSync(userDataDir)) return {
 			moved: false,

package/dist/{program-CqxmOFY5.js → program-B6KpKryX.js}

@@ -101,8 +101,8 @@ import "./pi-tools.policy-De00gPXt.js";
 import "./catalog-DLQFKucJ.js";
 import "./plugin-registry-BkFixq63.js";
 import { n as resolveCliChannelOptions } from "./channel-options-DHSRuD2s.js";
-import { t as getSubCliCommandsWithSubcommands } from "./register.subclis-FAdASegj.js";
-import { a as registerProgramCommands, r as getCoreCliCommandsWithSubcommands } from "./command-registry-ajP42kpE.js";
+import { t as getSubCliCommandsWithSubcommands } from "./register.subclis-DcBHO9E8.js";
+import { a as registerProgramCommands, r as getCoreCliCommandsWithSubcommands } from "./command-registry-CrYpGtIt.js";
 import { r as setProgramContext } from "./program-context-CqzR_m-7.js";
 import { t as forceFreePort } from "./ports-Dn122MUd.js";
 import { n as formatCliBannerLine, r as hasEmittedCliBanner, t as emitCliBanner } from "./banner-DCF8IifK.js";