@symerian/symi 2.6.37 → 2.6.38

package/dist/{onboard-skills-DX7L1thH.js → onboard-skills-c4Rw-CGf.js}

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { Bt as normalizeSecretInput } from "./model-selection-CyFvYcRt.js";
 import { t as formatCliCommand } from "./command-format-COaS-S7B.js";
-import { _ as resolveNodeManagerOptions, r as detectBinary } from "./onboard-helpers-Ci50bfCW.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-CURJKnyY.js";
-import { t as installSkill } from "./skills-install-D67isO1L.js";
+import { _ as resolveNodeManagerOptions, r as detectBinary } from "./onboard-helpers-CAjcAisT.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-C3ptXwnh.js";
+import { t as installSkill } from "./skills-install-CWVdJkLn.js";
 
 //#region src/commands/onboard-skills.ts
 var onboard_skills_exports = /* @__PURE__ */ __exportAll({ setupSkills: () => setupSkills });

package/dist/{onboarding-Ban5B7QD.js → onboarding-B1VwuUX5.js}

@@ -3,7 +3,7 @@ import { y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import { t as formatCliCommand } from "./command-format-COaS-S7B.js";
 import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-CHwyw6l5.js";
-import { t as WizardCancelledError } from "./prompts-Xu2Sveka.js";
+import { t as WizardCancelledError } from "./prompts-CfOu9uZi.js";
 
 //#region src/wizard/onboarding.ts
 async function requireRiskAcknowledgement(params) {
@@ -36,7 +36,7 @@ async function requireRiskAcknowledgement(params) {
 	})) throw new WizardCancelledError("risk not accepted");
 }
 async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
-	const onboardHelpers = await import("./onboard-helpers-Ci50bfCW.js").then((n) => n.d);
+	const onboardHelpers = await import("./onboard-helpers-CAjcAisT.js").then((n) => n.d);
 	onboardHelpers.printWizardHeader(runtime);
 	await prompter.intro("Symi onboarding");
 	await requireRiskAcknowledgement({
@@ -204,8 +204,8 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		}]
 	}));
 	if (mode === "remote") {
-		const { promptRemoteGatewayConfig } = await import("./onboard-remote-I9QVs0MQ.js").then((n) => n.t);
-		const { logConfigUpdated } = await import("./logging-BzzwiKjv.js").then((n) => n.r);
+		const { promptRemoteGatewayConfig } = await import("./onboard-remote-D-8pd-tx.js").then((n) => n.t);
+		const { logConfigUpdated } = await import("./logging-KpicI3yD.js").then((n) => n.r);
 		let nextConfig = await promptRemoteGatewayConfig(baseConfig, prompter);
 		nextConfig = onboardHelpers.applyWizardMetadata(nextConfig, {
 			command: "onboard",
@@ -220,13 +220,13 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		message: "Workspace directory",
 		initialValue: baseConfig.agents?.defaults?.workspace ?? onboardHelpers.DEFAULT_WORKSPACE
 	}))).trim() || onboardHelpers.DEFAULT_WORKSPACE);
-	const { applyOnboardingLocalWorkspaceConfig } = await import("./onboard-config-DPPsiC8t.js").then((n) => n.n);
+	const { applyOnboardingLocalWorkspaceConfig } = await import("./onboard-config-B9jTl83d.js").then((n) => n.n);
 	let nextConfig = applyOnboardingLocalWorkspaceConfig(baseConfig, workspaceDir);
 	const { ensureAuthProfileStore } = await import("./model-selection-CyFvYcRt.js").then((n) => n.dt);
-	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-BLzEBA1v.js").then((n) => n.t);
-	const { promptCustomApiConfig } = await import("./onboard-custom-BPvHqbtj.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-CinzPjY5.js").then((n) => n.t);
-	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-BzIRY_aM.js").then((n) => n.i);
+	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-Cn6U3t8O.js").then((n) => n.t);
+	const { promptCustomApiConfig } = await import("./onboard-custom-BNyCb71p.js").then((n) => n.r);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-BnJzLsv5.js").then((n) => n.t);
+	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-TnkH7DsN.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
 	const authChoice = opts.authChoice ?? await promptAuthChoiceGrouped({
@@ -263,7 +263,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		if (modelSelection.model) nextConfig = applyPrimaryModel(nextConfig, modelSelection.model);
 	}
 	await warnIfModelConfigLooksOff(nextConfig, prompter);
-	const { configureGatewayForOnboarding } = await import("./onboarding.gateway-config-CJU7Hzrn.js");
+	const { configureGatewayForOnboarding } = await import("./onboarding.gateway-config-DOna9Sr4.js");
 	const gateway = await configureGatewayForOnboarding({
 		flow,
 		baseConfig,
@@ -278,7 +278,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-DKDeQZF0.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-wd_fR_EA.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-CEZpwlsw.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -289,22 +289,22 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		});
 	}
 	await writeConfigFile(nextConfig);
-	const { logConfigUpdated } = await import("./logging-BzzwiKjv.js").then((n) => n.r);
+	const { logConfigUpdated } = await import("./logging-KpicI3yD.js").then((n) => n.r);
 	logConfigUpdated(runtime);
 	await onboardHelpers.ensureWorkspaceAndSessions(workspaceDir, runtime, { skipBootstrap: Boolean(nextConfig.agents?.defaults?.skipBootstrap) });
 	if (opts.skipSkills) await prompter.note("Skipping skills setup.", "Skills");
 	else {
-		const { setupSkills } = await import("./onboard-skills-DX7L1thH.js").then((n) => n.t);
+		const { setupSkills } = await import("./onboard-skills-c4Rw-CGf.js").then((n) => n.t);
 		nextConfig = await setupSkills(nextConfig, workspaceDir, runtime, prompter);
 	}
-	const { setupInternalHooks } = await import("./onboard-hooks-BAA8CoVv.js");
+	const { setupInternalHooks } = await import("./onboard-hooks-C3ok8kqB.js");
 	nextConfig = await setupInternalHooks(nextConfig, runtime, prompter);
 	nextConfig = onboardHelpers.applyWizardMetadata(nextConfig, {
 		command: "onboard",
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-YbnkoDuN.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-DQm4Tey0.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding-DnhVdzx6.js → onboarding-BxHFNg2y.js}

@@ -222,9 +222,9 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	let nextConfig = applyOnboardingLocalWorkspaceConfig(baseConfig, workspaceDir);
 	const { ensureAuthProfileStore } = await import("./auth-profiles-Q1xTr5SX.js").then((n) => n.t);
 	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-DVcYPG2v.js").then((n) => n.t);
-	const { promptCustomApiConfig } = await import("./onboard-custom-DdWPfzJO.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-DeTIgQiQ.js").then((n) => n.t);
-	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-D5nCutGW.js").then((n) => n.i);
+	const { promptCustomApiConfig } = await import("./onboard-custom-yNOjvlgR.js").then((n) => n.r);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-CnpKK0cS.js").then((n) => n.t);
+	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-D1J9kB3d.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
 	const authChoice = opts.authChoice ?? await promptAuthChoiceGrouped({
@@ -276,7 +276,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-CwSlLxM8.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-CW1DBHfJ.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-DjqHX51z.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -302,7 +302,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-QCZDp4AW.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-dP5Igu4h.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding.finalize-YbnkoDuN.js → onboarding.finalize-DQm4Tey0.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { h as pathExists, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-CMb-m0ZJ.js";
+import "./reply-YphHjxHp.js";
 import "./registry-Cja8eT7G.js";
 import { p as restoreTerminalState } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -15,19 +15,19 @@ import "./message-channel-aT-I_DTX.js";
 import "./send-CZr1hVHY.js";
 import "./config-CHwyw6l5.js";
 import "./manifest-registry-C4BxOMWX.js";
-import "./runner-BSzJIT-z.js";
-import "./image-D9uvDTrc.js";
+import "./runner-DmM2HhB-.js";
+import "./image-BwXkayiM.js";
 import "./models-config-qyOXrOli.js";
 import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-CNPyv_ax.js";
-import "./sandbox-C-T6hOMv.js";
+import "./pi-embedded-helpers-BuVSLhG_.js";
+import "./sandbox-DAOxwUQm.js";
 import "./chrome-DtPkPq9T.js";
 import "./tailscale-D5dKabOc.js";
 import "./auth-B741uFtk.js";
-import "./server-context-CEpFjqSk.js";
+import "./server-context-CHYWo_TC.js";
 import "./frontmatter-DWQhtOo7.js";
 import "./skills-6jdJQ5ZL.js";
-import "./routes-Ba9CUQ8M.js";
+import "./routes-B1-BfEDm.js";
 import "./redact-f-Q-hFt_.js";
 import "./errors-BF3TeRH2.js";
 import "./fs-safe-CUjO1ca2.js";
@@ -53,16 +53,16 @@ import "./fetch-guard-DOPkVbh3.js";
 import "./api-key-rotation-CzuPlV2t.js";
 import "./local-roots-aAFLQGkY.js";
 import "./sqlite-Dx3J_aSE.js";
-import "./model-catalog-DsFLN-ua.js";
+import "./model-catalog-r6v4orfa.js";
 import "./tokens-BuceUQDl.js";
-import "./with-timeout-gmK6RciS.js";
-import "./deliver-CWR_98sK.js";
-import "./diagnostic-DjBRPfu9.js";
+import "./with-timeout-D2z7OkiK.js";
+import "./deliver-DrFtaFZt.js";
+import "./diagnostic-CH0skkp6.js";
 import "./diagnostic-session-state-CUslJyKP.js";
 import "./send-Cutb0ZDY.js";
 import "./model-tWhwnFf8.js";
 import "./reply-prefix-CE2YmmsD.js";
-import "./memory-cli-Ca5r9AUb.js";
+import "./memory-cli-CPONmMrJ.js";
 import "./manager-D4LJSRyZ.js";
 import "./retry-BoS4e4X_.js";
 import "./target-errors-7AvoVa10.js";
@@ -78,7 +78,7 @@ import "./pairing-token-CX3NN_qj.js";
 import "./channel-activity-BOiuJS3t.js";
 import "./fetch-DTNGXEzX.js";
 import "./tables-BEzT0Da4.js";
-import "./send-DkfYiRx5.js";
+import "./send-Cgcbuw8U.js";
 import "./pairing-store-CK726Dzq.js";
 import "./proxy-DU7W9XSc.js";
 import "./links-3i1eUga4.js";
@@ -89,31 +89,32 @@ import "./resolve-route-BMoTaVAH.js";
 import "./replies-vgss3_QA.js";
 import "./skill-commands-Cxw-jNxU.js";
 import "./workspace-dirs-GpkFi6Kw.js";
-import "./session-cost-usage-UxUgrslM.js";
-import "./outbound-attachment-mQQiYZ3C.js";
-import "./delivery-queue-CxuV9EeG.js";
-import "./send-DWYkPSUs.js";
-import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, m as probeGatewayReachable, o as formatControlUiSshHint } from "./onboard-helpers-Ci50bfCW.js";
-import "./prompt-style-8JqOYj0q.js";
-import "./pairing-labels-2S6x2UoV.js";
-import "./exec-approvals-Kn31mBcW.js";
-import "./nodes-screen-VBGXKdLk.js";
-import "./pi-tools.policy-CIDBbw6x.js";
-import "./control-service-Bz7rxLWq.js";
-import "./stagger-BUClb97_.js";
-import "./channel-selection-DuWs0Aak.js";
-import "./runtime-guard-B37eizu-.js";
-import "./program-context-0dr-H7wo.js";
-import "./note-DeHoW7xO.js";
-import { r as installCompletion } from "./completion-cli-LYcBopv1.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-2mwX-jqj.js";
-import { r as isSystemdUserServiceAvailable } from "./systemd-riq8uNJQ.js";
-import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
-import { r as healthCommand } from "./health-DjUN4OFC.js";
-import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
-import { t as formatHealthCheckFailure } from "./health-format-DSwnXZPU.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-CfPhNCUx.js";
-import { t as runTui } from "./tui-D14a9N3F.js";
+import "./pi-auth-json-zHckislA.js";
+import "./session-cost-usage-BXAI7CNH.js";
+import "./outbound-attachment-Bw-c5Cdp.js";
+import "./delivery-queue-CAxX6nGq.js";
+import "./send-ZI2bG_Jc.js";
+import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, m as probeGatewayReachable, o as formatControlUiSshHint } from "./onboard-helpers-CAjcAisT.js";
+import "./prompt-style-CnkMpSXt.js";
+import "./pairing-labels-DyXoD1DS.js";
+import "./exec-approvals-DXM2pQYL.js";
+import "./nodes-screen-8Bq7DiSa.js";
+import "./pi-tools.policy-C6MWZ59E.js";
+import "./control-service-Dtn-qw2s.js";
+import "./stagger-CvFURHzt.js";
+import "./channel-selection-V2xDgw16.js";
+import "./runtime-guard-Dik20CVM.js";
+import "./program-context-B2BcluHm.js";
+import "./note-DQ9BvHF2.js";
+import { r as installCompletion } from "./completion-cli-DrDwlbAX.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-COZ4usfy.js";
+import { r as isSystemdUserServiceAvailable } from "./systemd-DT6SbCim.js";
+import { t as resolveGatewayService } from "./service-osK70kTZ.js";
+import { r as healthCommand } from "./health-9z0Hpkuc.js";
+import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B7moDVHX.js";
+import { t as formatHealthCheckFailure } from "./health-format-DRCaak6L.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-B8IZFxo9.js";
+import { t as runTui } from "./tui-DLaU7tTx.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";
@@ -178,7 +179,7 @@ async function finalizeOnboardingWizard(options) {
 	const systemdAvailable = process.platform === "linux" ? await isSystemdUserServiceAvailable() : true;
 	if (process.platform === "linux" && !systemdAvailable) await prompter.note("Systemd user services are unavailable. Skipping lingering checks and service install.", "Systemd");
 	if (process.platform === "linux" && systemdAvailable) {
-		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-aQ75ZlXY.js").then((n) => n.r);
+		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-DCskIKcx.js").then((n) => n.r);
 		await ensureSystemdUserLingerInteractive({
 			runtime,
 			prompter: {

package/dist/{onboarding.finalize-QCZDp4AW.js → onboarding.finalize-dP5Igu4h.js}

@@ -4,6 +4,7 @@ import { r as resolveCliName, t as formatCliCommand } from "./command-format-BtY
 import "./exec-CBKBIMpA.js";
 import { h as DEFAULT_BOOTSTRAP_FILENAME } from "./agent-scope-D-jRCY0d.js";
 import "./github-copilot-token-DuFIqfeC.js";
+import "./pi-auth-json-LXkL5WS_.js";
 import "./model-DiCH8rkE.js";
 import "./pi-model-discovery-Do3xMEtM.js";
 import "./frontmatter-B8duUx_6.js";
@@ -14,7 +15,7 @@ import "./client-T3qcxXru.js";
 import "./call-DIDhYlsx.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-Cdiios3w.js";
+import "./subagent-registry-aZczbtLM.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -68,8 +69,8 @@ import "./commands-CkrIpKCc.js";
 import "./commands-registry-D1K_inhv.js";
 import "./image-CO4meYzg.js";
 import "./tool-display-CXwOC-qw.js";
-import "./runner-BORIO-D3.js";
-import "./model-catalog-CqCsARJX.js";
+import "./runner-CW9KEL7W.js";
+import "./model-catalog-Bn0ffe1O.js";
 import "./session-utils-Bka9dR4m.js";
 import "./skill-commands-C8BcwE33.js";
 import "./workspace-dirs-CPNL2Acu.js";
@@ -99,18 +100,18 @@ import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
 import "./note-DDecZomM.js";
-import "./register.subclis-D_HoHaB7.js";
-import "./command-registry-CARx8WBf.js";
+import "./register.subclis-Bi4jmYW6.js";
+import "./command-registry-Dk55OGO6.js";
 import "./program-context-CqzR_m-7.js";
-import { r as installCompletion } from "./completion-cli-DCO3bMjl.js";
+import { r as installCompletion } from "./completion-cli-1HmgP7tY.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DlMdyFDY.js";
 import { t as resolveGatewayService } from "./service-Cm9j9WzQ.js";
-import { r as healthCommand } from "./health-By4_Yu9p.js";
+import { r as healthCommand } from "./health-NTpZ8ssG.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { t as formatHealthCheckFailure } from "./health-format-CzgUHmmX.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-BlysSk9e.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-D6tzA47C.js";
 import { t as runTui } from "./tui-2nWOvxxE.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{onboarding.gateway-config-CJU7Hzrn.js → onboarding.gateway-config-DOna9Sr4.js}

@@ -24,9 +24,9 @@ import "./paths-CyhzMxFA.js";
 import "./client-jI1oE0_k.js";
 import "./call-CFhGTNtt.js";
 import "./pairing-token-CX3NN_qj.js";
-import { h as randomToken, u as normalizeGatewayTokenInput, y as validateGatewayPasswordInput } from "./onboard-helpers-Ci50bfCW.js";
-import "./prompt-style-8JqOYj0q.js";
-import { i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-CxY-xbsH.js";
+import { h as randomToken, u as normalizeGatewayTokenInput, y as validateGatewayPasswordInput } from "./onboard-helpers-CAjcAisT.js";
+import "./prompt-style-CnkMpSXt.js";
+import { i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-CjlyK5jc.js";
 
 //#region src/wizard/onboarding.gateway-config.ts
 const DEFAULT_DANGEROUS_NODE_DENY_COMMANDS = [

package/dist/{openai-model-default-DMjQRsb1.js → openai-model-default-WqcGxyFM.js}

@@ -1,7 +1,7 @@
 import { g as resolveConfigDir, l as escapeRegExp } from "./utils-B-0b9bGM.js";
 import { Kt as DEFAULT_PROVIDER, f as resolveAllowlistModelKey } from "./model-selection-CyFvYcRt.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-Db3da8yR.js";
-import { St as ZAI_GLOBAL_BASE_URL, bt as ZAI_CODING_CN_BASE_URL, xt as ZAI_CODING_GLOBAL_BASE_URL, yt as ZAI_CN_BASE_URL } from "./auth-token-BnOynwk4.js";
+import { St as ZAI_GLOBAL_BASE_URL, bt as ZAI_CODING_CN_BASE_URL, xt as ZAI_CODING_GLOBAL_BASE_URL, yt as ZAI_CN_BASE_URL } from "./auth-token-Cay2jwzn.js";
 import fs from "node:fs";
 import path from "node:path";
 

package/dist/{outbound-3MZ12YrQ.js → outbound-BihTVvMr.js}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { B as toWhatsappJid, T as escapeRegExp, tt as getChildLogger } from "./registry-BhoUuugi.js";
 import { t as createSubsystemLogger } from "./subsystem-CZixfwU8.js";
-import { n as loadConfig } from "./config-BmV60pPT.js";
+import { n as loadConfig } from "./config-DBqxAhpU.js";
 import { n as resolveMarkdownTableMode } from "./markdown-tables-DawaaZEe.js";
 import { a as loadWebMedia } from "./ir-F0moAwIl.js";
 import { n as normalizePollInput } from "./polls-DQcEziPg.js";
 import { t as convertMarkdownTables } from "./tables-COnZ169v.js";
-import { n as requireActiveWebListener } from "./active-listener-1krIj9TM.js";
+import { n as requireActiveWebListener } from "./active-listener-Dx_Y1ouV.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/markdown/whatsapp.ts

package/dist/{outbound-DB5Zus0-.js → outbound-DyBiNY4z.js}

@@ -6,7 +6,7 @@ import { n as resolveMarkdownTableMode } from "./markdown-tables-CEbN0fEm.js";
 import { a as loadWebMedia } from "./ir-DZam9q5M.js";
 import { n as normalizePollInput } from "./polls-DhH5YkzN.js";
 import { t as convertMarkdownTables } from "./tables-BEzT0Da4.js";
-import { n as requireActiveWebListener } from "./active-listener-kvXhlgwu.js";
+import { n as requireActiveWebListener } from "./active-listener-SKkHHqlN.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/markdown/whatsapp.ts

package/dist/{outbound-CtMCmwxR.js → outbound-UwQEXYXv.js}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { D as escapeRegExp, H as toWhatsappJid, rt as getChildLogger } from "./registry-DYq1AYOv.js";
 import { t as createSubsystemLogger } from "./subsystem-BjyjJF-d.js";
-import { n as loadConfig } from "./config-5SdHIcHU.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-C-BmIap8.js";
-import { a as loadWebMedia } from "./ir-CTiz95Vb.js";
-import { n as normalizePollInput } from "./polls-CCuCaqgv.js";
-import { t as convertMarkdownTables } from "./tables-qMwbq29u.js";
-import { n as requireActiveWebListener } from "./active-listener-CfHHV2SU.js";
+import { n as loadConfig } from "./config-4Iu6iHCA.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-Dnj2LQUc.js";
+import { a as loadWebMedia } from "./ir-JAy_3A3B.js";
+import { n as normalizePollInput } from "./polls-BKbIUHj7.js";
+import { t as convertMarkdownTables } from "./tables-BuM4FKR3.js";
+import { n as requireActiveWebListener } from "./active-listener-Br2FcRv7.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/markdown/whatsapp.ts

package/dist/{outbound-attachment-DJldbweZ.js → outbound-attachment-BzwVH4Pn.js}

@@ -1,5 +1,5 @@
 import { r as saveMediaBuffer } from "./store-01F_JM7O.js";
-import { a as loadWebMedia } from "./ir-CTiz95Vb.js";
+import { a as loadWebMedia } from "./ir-JAy_3A3B.js";
 
 //#region src/media/outbound-attachment.ts
 async function resolveOutboundAttachmentFromUrl(mediaUrl, maxBytes, options) {

package/dist/{pairing-cli-CBLfGvqW.js → pairing-cli-CpKm3M-X.js}

@@ -17,8 +17,8 @@ import "./bindings-DFaVVCsf.js";
 import "./logging-w5jq5901.js";
 import { l as listPairingChannels, n as approveChannelPairingCode, r as listChannelPairingRequests, u as notifyPairingApproved } from "./pairing-store-CK726Dzq.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
-import { t as resolvePairingIdLabel } from "./pairing-labels-2S6x2UoV.js";
-import { t as renderTable } from "./table-BTgkRafz.js";
+import { t as resolvePairingIdLabel } from "./pairing-labels-DyXoD1DS.js";
+import { t as renderTable } from "./table-BKlH0YlA.js";
 
 //#region src/cli/pairing-cli.ts
 /** Parse channel, allowing extension channels not in core registry. */

package/dist/{path-env-MnzRq6nD.js → path-env-BaQ2E7uD.js}

@@ -1,5 +1,5 @@
 import { t as isTruthyEnvValue } from "./env-DPCHYPeH.js";
-import { n as resolveBrewPathDirs } from "./brew-DjNEjKAo.js";
+import { n as resolveBrewPathDirs } from "./brew-DZPKCJr0.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";

package/dist/{pi-auth-json-D6YbgrAe.js → pi-auth-json-BloyLEwh.js}

@@ -1,14 +1,10 @@
-import "./paths-CE7eVGHg.js";
-import "./registry-BhoUuugi.js";
-import "./agent-scope-Cbl5pNe1.js";
-import "./subsystem-CZixfwU8.js";
-import { U as ensureAuthProfileStore, c as normalizeProviderId } from "./model-selection-BQCG9ah0.js";
-import "./github-copilot-token-BbsJ0Qbo.js";
-import "./env-CQ_DQOwT.js";
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { U as ensureAuthProfileStore, Y as normalizeOptionalSecretInput, c as normalizeProviderId } from "./model-selection-B8QKPmTL.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 
 //#region src/agents/pi-auth-json.ts
+var pi_auth_json_exports = /* @__PURE__ */ __exportAll({ ensurePiAuthJsonFromAuthProfiles: () => ensurePiAuthJsonFromAuthProfiles });
 async function readAuthJson(filePath) {
 	try {
 		const raw = await fs.readFile(filePath, "utf8");
@@ -78,8 +74,16 @@ function credentialsEqual(a, b) {
 * registry/catalog output.
 *
 * Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
 */
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
 	const authPath = path.join(agentDir, "auth.json");
 	const providerCredentials = /* @__PURE__ */ new Map();
@@ -89,6 +93,17 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 		const converted = convertCredential(cred);
 		if (converted) providerCredentials.set(provider, converted);
 	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
 	if (providerCredentials.size === 0) return {
 		wrote: false,
 		authPath
@@ -115,4 +130,4 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 }
 
 //#endregion
-export { ensurePiAuthJsonFromAuthProfiles };
+export { pi_auth_json_exports as n, ensurePiAuthJsonFromAuthProfiles as t };

package/dist/{pi-auth-json-CaX_1WHk.js → pi-auth-json-CCaxCywz.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { L as normalizeProviderId, b as ensureAuthProfileStore } from "./auth-profiles-Q1xTr5SX.js";
+import { C as normalizeProviderId, U as normalizeOptionalSecretInput, d as ensureAuthProfileStore } from "./auth-profiles-q3HjbboY.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 
@@ -74,8 +74,16 @@ function credentialsEqual(a, b) {
 * registry/catalog output.
 *
 * Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
 */
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
 	const authPath = path.join(agentDir, "auth.json");
 	const providerCredentials = /* @__PURE__ */ new Map();
@@ -85,6 +93,17 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 		const converted = convertCredential(cred);
 		if (converted) providerCredentials.set(provider, converted);
 	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
 	if (providerCredentials.size === 0) return {
 		wrote: false,
 		authPath

package/dist/{pi-auth-json-Bk8ERadJ.js → pi-auth-json-LXkL5WS_.js}

@@ -1,16 +1,10 @@
-import "./paths-CE7eVGHg.js";
-import "./registry-DYq1AYOv.js";
-import "./agent-scope-CpEJ0B88.js";
-import "./subsystem-BjyjJF-d.js";
-import "./workspace-DscDraUb.js";
-import { C as normalizeProviderId, d as ensureAuthProfileStore } from "./auth-profiles-DdK1Hxaa.js";
-import "./env-BDXYbTKj.js";
-import "./github-copilot-token-cCYzSU9h.js";
-import "./boolean-CE7i9tBR.js";
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { L as normalizeProviderId, Tt as normalizeOptionalSecretInput, b as ensureAuthProfileStore } from "./auth-profiles-Q1xTr5SX.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 
 //#region src/agents/pi-auth-json.ts
+var pi_auth_json_exports = /* @__PURE__ */ __exportAll({ ensurePiAuthJsonFromAuthProfiles: () => ensurePiAuthJsonFromAuthProfiles });
 async function readAuthJson(filePath) {
 	try {
 		const raw = await fs.readFile(filePath, "utf8");
@@ -80,8 +74,16 @@ function credentialsEqual(a, b) {
 * registry/catalog output.
 *
 * Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
 */
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
 	const authPath = path.join(agentDir, "auth.json");
 	const providerCredentials = /* @__PURE__ */ new Map();
@@ -91,6 +93,17 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 		const converted = convertCredential(cred);
 		if (converted) providerCredentials.set(provider, converted);
 	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
 	if (providerCredentials.size === 0) return {
 		wrote: false,
 		authPath
@@ -117,4 +130,4 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 }
 
 //#endregion
-export { ensurePiAuthJsonFromAuthProfiles };
+export { pi_auth_json_exports as n, ensurePiAuthJsonFromAuthProfiles as t };