@symerian/symi 2.6.37 → 2.6.39

package/dist/{pi-auth-json-CaX_1WHk.js → pi-auth-json-BQcKJvH0.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { L as normalizeProviderId, b as ensureAuthProfileStore } from "./auth-profiles-Q1xTr5SX.js";
+import { C as normalizeProviderId, U as normalizeOptionalSecretInput, d as ensureAuthProfileStore } from "./auth-profiles-CZZjOpX8.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 
@@ -74,8 +74,16 @@ function credentialsEqual(a, b) {
 * registry/catalog output.
 *
 * Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
 */
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
 	const authPath = path.join(agentDir, "auth.json");
 	const providerCredentials = /* @__PURE__ */ new Map();
@@ -85,6 +93,17 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 		const converted = convertCredential(cred);
 		if (converted) providerCredentials.set(provider, converted);
 	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
 	if (providerCredentials.size === 0) return {
 		wrote: false,
 		authPath

package/dist/{pi-auth-json-D6YbgrAe.js → pi-auth-json-BloyLEwh.js}

@@ -1,14 +1,10 @@
-import "./paths-CE7eVGHg.js";
-import "./registry-BhoUuugi.js";
-import "./agent-scope-Cbl5pNe1.js";
-import "./subsystem-CZixfwU8.js";
-import { U as ensureAuthProfileStore, c as normalizeProviderId } from "./model-selection-BQCG9ah0.js";
-import "./github-copilot-token-BbsJ0Qbo.js";
-import "./env-CQ_DQOwT.js";
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { U as ensureAuthProfileStore, Y as normalizeOptionalSecretInput, c as normalizeProviderId } from "./model-selection-B8QKPmTL.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 
 //#region src/agents/pi-auth-json.ts
+var pi_auth_json_exports = /* @__PURE__ */ __exportAll({ ensurePiAuthJsonFromAuthProfiles: () => ensurePiAuthJsonFromAuthProfiles });
 async function readAuthJson(filePath) {
 	try {
 		const raw = await fs.readFile(filePath, "utf8");
@@ -78,8 +74,16 @@ function credentialsEqual(a, b) {
 * registry/catalog output.
 *
 * Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
 */
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
 	const authPath = path.join(agentDir, "auth.json");
 	const providerCredentials = /* @__PURE__ */ new Map();
@@ -89,6 +93,17 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 		const converted = convertCredential(cred);
 		if (converted) providerCredentials.set(provider, converted);
 	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
 	if (providerCredentials.size === 0) return {
 		wrote: false,
 		authPath
@@ -115,4 +130,4 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 }
 
 //#endregion
-export { ensurePiAuthJsonFromAuthProfiles };
+export { pi_auth_json_exports as n, ensurePiAuthJsonFromAuthProfiles as t };

package/dist/{pi-auth-json-Bk8ERadJ.js → pi-auth-json-LXkL5WS_.js}

@@ -1,16 +1,10 @@
-import "./paths-CE7eVGHg.js";
-import "./registry-DYq1AYOv.js";
-import "./agent-scope-CpEJ0B88.js";
-import "./subsystem-BjyjJF-d.js";
-import "./workspace-DscDraUb.js";
-import { C as normalizeProviderId, d as ensureAuthProfileStore } from "./auth-profiles-DdK1Hxaa.js";
-import "./env-BDXYbTKj.js";
-import "./github-copilot-token-cCYzSU9h.js";
-import "./boolean-CE7i9tBR.js";
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { L as normalizeProviderId, Tt as normalizeOptionalSecretInput, b as ensureAuthProfileStore } from "./auth-profiles-Q1xTr5SX.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 
 //#region src/agents/pi-auth-json.ts
+var pi_auth_json_exports = /* @__PURE__ */ __exportAll({ ensurePiAuthJsonFromAuthProfiles: () => ensurePiAuthJsonFromAuthProfiles });
 async function readAuthJson(filePath) {
 	try {
 		const raw = await fs.readFile(filePath, "utf8");
@@ -80,8 +74,16 @@ function credentialsEqual(a, b) {
 * registry/catalog output.
 *
 * Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
 */
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
 	const authPath = path.join(agentDir, "auth.json");
 	const providerCredentials = /* @__PURE__ */ new Map();
@@ -91,6 +93,17 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 		const converted = convertCredential(cred);
 		if (converted) providerCredentials.set(provider, converted);
 	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
 	if (providerCredentials.size === 0) return {
 		wrote: false,
 		authPath
@@ -117,4 +130,4 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 }
 
 //#endregion
-export { ensurePiAuthJsonFromAuthProfiles };
+export { pi_auth_json_exports as n, ensurePiAuthJsonFromAuthProfiles as t };

package/dist/pi-auth-json-zHckislA.js

@@ -0,0 +1,133 @@
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { At as ensureAuthProfileStore, l as normalizeProviderId, zt as normalizeOptionalSecretInput } from "./model-selection-CyFvYcRt.js";
+import path from "node:path";
+import fs from "node:fs/promises";
+
+//#region src/agents/pi-auth-json.ts
+var pi_auth_json_exports = /* @__PURE__ */ __exportAll({ ensurePiAuthJsonFromAuthProfiles: () => ensurePiAuthJsonFromAuthProfiles });
+async function readAuthJson(filePath) {
+	try {
+		const raw = await fs.readFile(filePath, "utf8");
+		const parsed = JSON.parse(raw);
+		if (!parsed || typeof parsed !== "object") return {};
+		return parsed;
+	} catch {
+		return {};
+	}
+}
+/**
+* Convert an Symi auth-profiles credential to pi-coding-agent auth.json format.
+* Returns null if the credential cannot be converted.
+*/
+function convertCredential(cred) {
+	if (cred.type === "api_key") {
+		const key = typeof cred.key === "string" ? cred.key.trim() : "";
+		if (!key) return null;
+		return {
+			type: "api_key",
+			key
+		};
+	}
+	if (cred.type === "token") {
+		const token = typeof cred.token === "string" ? cred.token.trim() : "";
+		if (!token) return null;
+		const expires = typeof cred.expires === "number" ? cred.expires : NaN;
+		if (Number.isFinite(expires) && expires > 0 && Date.now() >= expires) return null;
+		return {
+			type: "api_key",
+			key: token
+		};
+	}
+	if (cred.type === "oauth") {
+		const accessRaw = cred.access;
+		const refreshRaw = cred.refresh;
+		const expiresRaw = cred.expires;
+		const access = typeof accessRaw === "string" ? accessRaw.trim() : "";
+		const refresh = typeof refreshRaw === "string" ? refreshRaw.trim() : "";
+		const expires = typeof expiresRaw === "number" ? expiresRaw : NaN;
+		if (!access || !refresh || !Number.isFinite(expires) || expires <= 0) return null;
+		return {
+			type: "oauth",
+			access,
+			refresh,
+			expires
+		};
+	}
+	return null;
+}
+/**
+* Check if two auth.json credentials are equivalent.
+*/
+function credentialsEqual(a, b) {
+	if (!a || typeof a !== "object") return false;
+	if (a.type !== b.type) return false;
+	if (a.type === "api_key" && b.type === "api_key") return a.key === b.key;
+	if (a.type === "oauth" && b.type === "oauth") return a.access === b.access && a.refresh === b.refresh && a.expires === b.expires;
+	return false;
+}
+/**
+* pi-coding-agent's ModelRegistry/AuthStorage expects credentials in auth.json.
+*
+* Symi stores credentials in auth-profiles.json instead. This helper
+* bridges all credentials into agentDir/auth.json so pi-coding-agent can
+* (a) consider providers authenticated and (b) include built-in models in its
+* registry/catalog output.
+*
+* Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
+*/
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
+	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
+	const authPath = path.join(agentDir, "auth.json");
+	const providerCredentials = /* @__PURE__ */ new Map();
+	for (const [, cred] of Object.entries(store.profiles)) {
+		const provider = normalizeProviderId(String(cred.provider ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const converted = convertCredential(cred);
+		if (converted) providerCredentials.set(provider, converted);
+	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
+	if (providerCredentials.size === 0) return {
+		wrote: false,
+		authPath
+	};
+	const existing = await readAuthJson(authPath);
+	let changed = false;
+	for (const [provider, cred] of providerCredentials) if (!credentialsEqual(existing[provider], cred)) {
+		existing[provider] = cred;
+		changed = true;
+	}
+	if (!changed) return {
+		wrote: false,
+		authPath
+	};
+	await fs.mkdir(agentDir, {
+		recursive: true,
+		mode: 448
+	});
+	await fs.writeFile(authPath, `${JSON.stringify(existing, null, 2)}\n`, { mode: 384 });
+	return {
+		wrote: true,
+		authPath
+	};
+}
+
+//#endregion
+export { pi_auth_json_exports as n, ensurePiAuthJsonFromAuthProfiles as t };

package/dist/{pi-embedded-DG6dQt8v.js → pi-embedded-R_JHJFwq.js}

@@ -4,7 +4,7 @@ import { _ as isCronSessionKey, b as resolveThreadParentSessionKey, c as normali
 import { $ as isRich, A as normalizeE164, D as isRecord$1, E as formatTerminalLink, H as isPlainObject, I as shortenHomeInString, J as setVerbose, K as logVerbose, L as shortenHomePath, P as resolveUserPath, Q as colorize, R as sleep$1, S as clampInt, T as escapeRegExp, U as danger, V as truncateUtf16Safe, Y as shouldLogVerbose, Z as warn, _ as matchPluginCommand, a as normalizeAnyChannelId, b as CONFIG_DIR, d as createPluginRegistry, et as theme, f as normalizePluginHttpPath, g as listPluginCommands, h as getPluginCommandSpecs, l as requireActivePluginRegistry, lt as resolvePreferredSymiTmpDir, m as executePluginCommand, n as CHAT_CHANNEL_ORDER, o as normalizeChannelId, p as clearPluginCommands, r as DEFAULT_CHAT_CHANNEL, st as normalizeLogLevel, tt as getChildLogger, u as setActivePluginRegistry, v as createInternalHookEvent, w as ensureDir$3, y as triggerInternalHook, z as sliceUtf16Safe } from "./registry-BhoUuugi.js";
 import { A as logInfo, C as resolveSymiPackageRoot, D as spawnWithFallback, E as runExec, O as logDebug, S as loadWorkspaceBootstrapFiles, T as runCommandWithTimeout, a as resolveAgentModelPrimary, b as ensureAgentWorkspace, c as resolveDefaultAgentId, d as resolveSessionAgentIds, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, j as logWarn, k as logError, l as resolveEffectiveModelFallbacks, m as DEFAULT_BOOTSTRAP_FILENAME, n as resolveAgentConfig, o as resolveAgentSkillsFilter, p as DEFAULT_AGENT_WORKSPACE_DIR, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentId, x as filterBootstrapFilesForSession } from "./agent-scope-Cbl5pNe1.js";
 import { a as registerActiveProgressLine, i as clearActiveProgressLine, n as createNonExitingRuntime, o as unregisterActiveProgressLine, r as defaultRuntime, t as createSubsystemLogger } from "./subsystem-CZixfwU8.js";
-import { $ as DEFAULT_PROVIDER, A as resolveShellEnvFallbackTimeoutMs, B as dedupeProfileIds, C as getCustomProviderApiKey, D as resolveModelAuthMode, E as resolveEnvApiKey, F as getSoonestCooldownExpiry, G as resolveSymiAgentDir, H as markAuthProfileGood, I as isProfileInCooldown, K as withFileLock, L as markAuthProfileFailure, O as getShellPathFromLoginShell, P as resolveAuthProfileOrder, Q as DEFAULT_MODEL, R as markAuthProfileUsed, S as getApiKeyForModel, T as resolveApiKeyForProvider, U as ensureAuthProfileStore, V as listProfilesForProvider, W as resolveAuthStorePathForDisplay, X as resolveAuthProfileDisplayLabel, Y as normalizeSecretInput, Z as DEFAULT_CONTEXT_TOKENS, a as isCliProvider, b as OLLAMA_NATIVE_BASE_URL, c as normalizeProviderId, d as resolveDefaultModelForAgent, f as resolveModelRefFromString, i as findNormalizedProviderValue, m as resolveThinkingDefault, n as buildConfiguredAllowlistKeys, o as modelKey, p as resolveSubagentSpawnModelSelection, r as buildModelAliasIndex, s as normalizeModelRef$2, t as buildAllowedModelSet, u as resolveConfiguredModelRef, w as requireApiKey, x as createOllamaStreamFn, z as resolveApiKeyForProfile } from "./model-selection-BQCG9ah0.js";
+import { $ as DEFAULT_MODEL, A as resolveShellEnvFallbackTimeoutMs, B as dedupeProfileIds, C as getCustomProviderApiKey, D as resolveModelAuthMode, E as resolveEnvApiKey, F as getSoonestCooldownExpiry, G as resolveSymiAgentDir, H as markAuthProfileGood, I as isProfileInCooldown, K as withFileLock, L as markAuthProfileFailure, O as getShellPathFromLoginShell, P as resolveAuthProfileOrder, Q as DEFAULT_CONTEXT_TOKENS, R as markAuthProfileUsed, S as getApiKeyForModel, T as resolveApiKeyForProvider, U as ensureAuthProfileStore, V as listProfilesForProvider, W as resolveAuthStorePathForDisplay, X as normalizeSecretInput, Z as resolveAuthProfileDisplayLabel, a as isCliProvider, b as OLLAMA_NATIVE_BASE_URL, c as normalizeProviderId, d as resolveDefaultModelForAgent, et as DEFAULT_PROVIDER, f as resolveModelRefFromString, i as findNormalizedProviderValue, m as resolveThinkingDefault, n as buildConfiguredAllowlistKeys, o as modelKey, p as resolveSubagentSpawnModelSelection, r as buildModelAliasIndex, s as normalizeModelRef$2, t as buildAllowedModelSet, u as resolveConfiguredModelRef, w as requireApiKey, x as createOllamaStreamFn, z as resolveApiKeyForProfile } from "./model-selection-B8QKPmTL.js";
 import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-K_J_nfgx.js";
 import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-BbsJ0Qbo.js";
 import { i as resolveCliName, n as parseBooleanValue$1, r as formatCliCommand, t as isTruthyEnvValue } from "./env-CQ_DQOwT.js";
@@ -12,20 +12,20 @@ import { a as isSilentReplyText, i as isSilentReplyPrefixText, n as SILENT_REPLY
 import { _ as resolveDiscordAccount, a as normalizeWhatsAppTarget, c as listTelegramAccountIds, d as resolveSlackAccount, g as listEnabledDiscordAccounts, h as createDiscordActionGate, i as isWhatsAppGroupJid, l as resolveTelegramAccount, m as resolveSlackBotToken, n as listChannelPlugins, o as createTelegramActionGate, p as resolveSlackAppToken, r as normalizeChannelId$1, s as listEnabledTelegramAccounts, t as getChannelPlugin, u as resolveTelegramToken, v as normalizeDiscordToken } from "./plugins-71oIavrF.js";
 import { a as logoutWeb, i as logWebSelfId, l as readWebSelfId, p as webAuthExists, r as getWebAuthAgeMs, t as resolveWhatsAppAccount } from "./accounts-DDEyGwby.js";
 import { t as normalizeChatType } from "./chat-type-DFDuk3FY.js";
-import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i as createSlackWebClient, l as parseSlackTarget, o as parseSlackBlocksInput, s as validateSlackBlocksArray, t as sendMessageSlack, u as resolveSlackChannelId } from "./send-D-hWrHoH.js";
-import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as resolveTimestampMs, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as resolveDiscordSystemLocation, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordShouldRequireMention, a as removeReactionDiscord, at as resolveDiscordChannelId, b as sendWebhookMessageDiscord, bt as formatDiscordReactionEmoji, c as formatDiscordComponentEventText, ct as allowListMatches$1, d as parseDiscordModalCustomId, dt as normalizeDiscordSlug, et as hasAnyGuildPermissionDiscord, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordAllowListMatch, g as sendMessageDiscord, gt as resolveDiscordOwnerAllowFrom, h as resolveDiscordModalEntry, ht as resolveDiscordMemberAccessState, i as removeOwnReactionsDiscord, it as parseDiscordTarget, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as isDiscordGroupAllowedByPolicy, m as resolveDiscordComponentEntry, mt as resolveDiscordGuildEntry, n as fetchReactionsDiscord, nt as createDiscordClient, o as sendDiscordComponentMessage, ot as listDiscordDirectoryGroupsLive, p as readDiscordComponentSpec, pt as resolveDiscordChannelConfigWithFallback, q as deleteChannelDiscord, r as reactMessageDiscord, rt as createDiscordRestClient, s as createDiscordFormModal, st as listDiscordDirectoryPeersLive, tt as chunkDiscordTextWithMode, u as parseDiscordComponentCustomIdForCarbon, ut as normalizeDiscordAllowList, v as sendStickerDiscord, vt as resolveGroupDmAllow, w as fetchMessageDiscord, wt as fetchDiscord, x as createThreadDiscord, xt as formatDiscordUserTag, y as sendVoiceMessageDiscord, yt as shouldEmitDiscordReactionNotification, z as listGuildChannelsDiscord } from "./send-C1IYd3g7.js";
-import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-BH0l3UKW.js";
+import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i as createSlackWebClient, l as parseSlackTarget, o as parseSlackBlocksInput, s as validateSlackBlocksArray, t as sendMessageSlack, u as resolveSlackChannelId } from "./send-CFzf_ab4.js";
+import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as resolveTimestampMs, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as resolveDiscordSystemLocation, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordShouldRequireMention, a as removeReactionDiscord, at as resolveDiscordChannelId, b as sendWebhookMessageDiscord, bt as formatDiscordReactionEmoji, c as formatDiscordComponentEventText, ct as allowListMatches$1, d as parseDiscordModalCustomId, dt as normalizeDiscordSlug, et as hasAnyGuildPermissionDiscord, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordAllowListMatch, g as sendMessageDiscord, gt as resolveDiscordOwnerAllowFrom, h as resolveDiscordModalEntry, ht as resolveDiscordMemberAccessState, i as removeOwnReactionsDiscord, it as parseDiscordTarget, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as isDiscordGroupAllowedByPolicy, m as resolveDiscordComponentEntry, mt as resolveDiscordGuildEntry, n as fetchReactionsDiscord, nt as createDiscordClient, o as sendDiscordComponentMessage, ot as listDiscordDirectoryGroupsLive, p as readDiscordComponentSpec, pt as resolveDiscordChannelConfigWithFallback, q as deleteChannelDiscord, r as reactMessageDiscord, rt as createDiscordRestClient, s as createDiscordFormModal, st as listDiscordDirectoryPeersLive, tt as chunkDiscordTextWithMode, u as parseDiscordComponentCustomIdForCarbon, ut as normalizeDiscordAllowList, v as sendStickerDiscord, vt as resolveGroupDmAllow, w as fetchMessageDiscord, wt as fetchDiscord, x as createThreadDiscord, xt as formatDiscordUserTag, y as sendVoiceMessageDiscord, yt as shouldEmitDiscordReactionNotification, z as listGuildChannelsDiscord } from "./send-BJTX03Bn.js";
+import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-DepjYu87.js";
 import { a as logMessageProcessed, c as logWebhookError, d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, i as logLaneEnqueue, l as logWebhookProcessed, m as isDiagnosticsEnabled, o as logMessageQueued, p as emitDiagnosticEvent, r as logLaneDequeue, s as logSessionStateChange, t as diag, u as logWebhookReceived } from "./diagnostic-D0xmLpej.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-C1vRJs5w.js";
 import { n as resolveSignalAccount, t as listEnabledSignalAccounts } from "./accounts-8zZqL37v.js";
-import { $ as isVoiceCompatibleAudio, A as extractTelegramLocation, B as normalizeAllowFromWithStore$1, C as buildTelegramGroupFrom, D as buildTypingThreadParams, E as buildTelegramThreadParams, F as resolveTelegramMediaPlaceholder, G as formatLocationText, H as firstDefined$1, I as resolveTelegramReplyId, J as readChannelAllowFromStore, K as toLocationContext, L as resolveTelegramStreamMode, M as normalizeForwardedContext, N as resolveTelegramForumThreadId, O as describeReplyTarget, P as resolveTelegramGroupAllowFromContext, Q as listPairingChannels, R as resolveTelegramThreadSpec, S as buildSenderName, T as buildTelegramParentPeer, U as isSenderIdAllowed, V as resolveSenderAllowMatch, W as mergeAllowFromSources, X as upsertChannelPairingRequest, Y as removeChannelAllowFromStoreEntry, Z as getPairingAdapter, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildGroupLabel, c as sendStickerTelegram, d as wasSentByBot, et as parseTelegramTarget, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as hasBotMention, k as expandTextLinks, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as addChannelAllowFromStoreEntry, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, tt as resolveTelegramTargetChatType, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramGroupPeerId, x as buildSenderLabel, y as withTelegramApiErrorLogging, z as isSenderAllowed$1 } from "./send-C4Ucr8ep.js";
+import { $ as isVoiceCompatibleAudio, A as extractTelegramLocation, B as normalizeAllowFromWithStore$1, C as buildTelegramGroupFrom, D as buildTypingThreadParams, E as buildTelegramThreadParams, F as resolveTelegramMediaPlaceholder, G as formatLocationText, H as firstDefined$1, I as resolveTelegramReplyId, J as readChannelAllowFromStore, K as toLocationContext, L as resolveTelegramStreamMode, M as normalizeForwardedContext, N as resolveTelegramForumThreadId, O as describeReplyTarget, P as resolveTelegramGroupAllowFromContext, Q as listPairingChannels, R as resolveTelegramThreadSpec, S as buildSenderName, T as buildTelegramParentPeer, U as isSenderIdAllowed, V as resolveSenderAllowMatch, W as mergeAllowFromSources, X as upsertChannelPairingRequest, Y as removeChannelAllowFromStoreEntry, Z as getPairingAdapter, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildGroupLabel, c as sendStickerTelegram, d as wasSentByBot, et as parseTelegramTarget, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as hasBotMention, k as expandTextLinks, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as addChannelAllowFromStoreEntry, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, tt as resolveTelegramTargetChatType, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramGroupPeerId, x as buildSenderLabel, y as withTelegramApiErrorLogging, z as isSenderAllowed$1 } from "./send-DHWMRnPk.js";
 import { d as detectMime, f as extensionForMime, g as isGifMedia, h as isAudioFileName, i as getImageMetadata, m as imageMimeFromFormat, s as resizeToJpeg, x as mediaKindFromMime, y as MAX_IMAGE_BYTES } from "./image-ops-ByaQt43P.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-j5tVLINv.js";
 import { a as isMarkdownCapableMessageChannel, c as resolveGatewayMessageChannel, d as GATEWAY_CLIENT_MODES, f as GATEWAY_CLIENT_NAMES, i as isInternalMessageChannel, l as resolveMessageChannel, n as isDeliverableMessageChannel, o as listDeliverableMessageChannels, r as isGatewayMessageChannel, s as normalizeMessageChannel, t as INTERNAL_MESSAGE_CHANNEL, u as GATEWAY_CLIENT_IDS } from "./message-channel-BQINJQIT.js";
-import { $ as mergeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as updateSessionStoreEntry, Jt as ensureSessionHeader, K as updateLastRoute, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as deliveryContextKey, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as resolveCacheTtlMs$1, Xt as resolveBootstrapTotalMaxChars, Y as isCacheEnabled, Yt as resolveBootstrapMaxChars, Z as deliveryContextFromSession, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as DEFAULT_RESET_TRIGGERS, a as isMessagingToolDuplicateNormalized, at as countToolResults, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as applyInputProvenanceToUserMessage, d as isAntigravityClaude, dt as resolveSessionKey, et as normalizeDeliveryContext, f as isGoogleModelApi, ft as evaluateSessionFreshness, g as formatBillingErrorMessage, gt as resolveThreadFlag, h as formatAssistantErrorText, ht as resolveSessionResetType, it as capArrayByJsonBytes, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as hasInterSessionUserProvenance, m as classifyFailoverReason, mt as resolveSessionResetPolicy, n as validateGeminiTurns, nt as normalizeAccountId$3, o as normalizeTextForComparison, ot as extractToolCallNames, p as BILLING_ERROR_USER_MESSAGE, pt as resolveChannelResetConfig, q as updateSessionStore, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as archiveSessionTranscripts, s as sanitizeSessionMessagesImages, st as INPUT_PROVENANCE_KIND_VALUES, t as validateAnthropicTurns, tt as normalizeSessionDeliveryFields, u as downgradeOpenAIReasoningBlocks, ut as normalizeInputProvenance, v as getApiErrorPayloadFingerprint, vt as resolveFreshSessionTotalTokens, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, yt as canonicalizeMainSessionAlias, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-lgx_U5KS.js";
-import { A as VERSION, C as getConfigValueAtPath, D as isSafeExecutableValue, E as unsetConfigValueAtPath, O as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, S as unsetConfigOverride, T as setConfigValueAtPath, _ as parseDurationMs, a as writeConfigFile, b as resetConfigOverrides, c as TELEGRAM_COMMAND_NAME_PATTERN, f as isInboundPathAllowed, g as normalizeScpRemoteHost, h as resolveIMessageRemoteAttachmentRoots, i as resolveConfigSnapshotHash, k as resolveAgentMaxConcurrent, l as normalizeTelegramCommandName, m as resolveIMessageAttachmentRoots, n as loadConfig, o as validateConfigObjectWithPlugins, r as readConfigFileSnapshot, u as resolveTelegramCustomCommands, v as validateJsonSchemaValue, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-BmV60pPT.js";
+import { $ as mergeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as updateSessionStoreEntry, Jt as ensureSessionHeader, K as updateLastRoute, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as deliveryContextKey, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as resolveCacheTtlMs$1, Xt as resolveBootstrapTotalMaxChars, Y as isCacheEnabled, Yt as resolveBootstrapMaxChars, Z as deliveryContextFromSession, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as DEFAULT_RESET_TRIGGERS, a as isMessagingToolDuplicateNormalized, at as countToolResults, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as applyInputProvenanceToUserMessage, d as isAntigravityClaude, dt as resolveSessionKey, et as normalizeDeliveryContext, f as isGoogleModelApi, ft as evaluateSessionFreshness, g as formatBillingErrorMessage, gt as resolveThreadFlag, h as formatAssistantErrorText, ht as resolveSessionResetType, it as capArrayByJsonBytes, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as hasInterSessionUserProvenance, m as classifyFailoverReason, mt as resolveSessionResetPolicy, n as validateGeminiTurns, nt as normalizeAccountId$3, o as normalizeTextForComparison, ot as extractToolCallNames, p as BILLING_ERROR_USER_MESSAGE, pt as resolveChannelResetConfig, q as updateSessionStore, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as archiveSessionTranscripts, s as sanitizeSessionMessagesImages, st as INPUT_PROVENANCE_KIND_VALUES, t as validateAnthropicTurns, tt as normalizeSessionDeliveryFields, u as downgradeOpenAIReasoningBlocks, ut as normalizeInputProvenance, v as getApiErrorPayloadFingerprint, vt as resolveFreshSessionTotalTokens, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, yt as canonicalizeMainSessionAlias, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-BJrRH97f.js";
+import { A as VERSION, C as getConfigValueAtPath, D as isSafeExecutableValue, E as unsetConfigValueAtPath, O as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, S as unsetConfigOverride, T as setConfigValueAtPath, _ as parseDurationMs, a as writeConfigFile, b as resetConfigOverrides, c as TELEGRAM_COMMAND_NAME_PATTERN, f as isInboundPathAllowed, g as normalizeScpRemoteHost, h as resolveIMessageRemoteAttachmentRoots, i as resolveConfigSnapshotHash, k as resolveAgentMaxConcurrent, l as normalizeTelegramCommandName, m as resolveIMessageAttachmentRoots, n as loadConfig, o as validateConfigObjectWithPlugins, r as readConfigFileSnapshot, u as resolveTelegramCustomCommands, v as validateJsonSchemaValue, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-DBqxAhpU.js";
 import { c as normalizePluginsConfig, f as isPathInsideWithRealpath, i as safeStatSync, l as resolveEnableState, n as discoverSymiPlugins, p as isDangerousHostEnvVarName, r as isPathInside, s as applyTestPluginDefaults, t as loadPluginManifestRegistry, u as resolveMemorySlotDecision } from "./manifest-registry-D-mTF1cj.js";
-import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-CDJYxX5a.js";
+import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-CXbfCc20.js";
 import { c as assertSandboxPath, d as resolveSandboxedMediaSource, f as applySkillEnvOverrides, i as resolveSkillsPromptForRun, l as resolveSandboxInputPath, n as buildWorkspaceSkillSnapshot, p as applySkillEnvOverridesFromSnapshot, r as loadWorkspaceSkillEntries, s as assertMediaNotDataUrl } from "./skills-BNpGMnp-.js";
 import { n as formatErrorMessage, r as formatUncaughtError } from "./errors-CPfngF0S.js";
 import { i as isBlockedHostnameOrIp, o as normalizeHostname, t as SsrFBlockedError } from "./ssrf-CxfFyMRZ.js";
@@ -36,8 +36,8 @@ import { t as resolveIMessageAccount } from "./accounts-DImOt9jX.js";
 import { i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as resolveSessionTranscriptsDirForAgent, r as resolveSessionFilePathOptions, s as resolveStorePath, t as resolveDefaultSessionStorePath } from "./paths-DkMamAQ-.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-C8Tqw4td.js";
 import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-ChC2CXaN.js";
-import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-CHzdaNJ4.js";
-import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-jpn5vRTY.js";
+import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-CjuJpc3E.js";
+import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-CgLdpXXM.js";
 import { d as listMemoryFiles, f as normalizeExtraMemoryPaths, g as runTasksWithConcurrency } from "./sqlite-BNh23mUR.js";
 import { n as retryAsync } from "./retry-QGp0jvVi.js";
 import { a as createActionGate, c as jsonResult, d as readReactionParams, f as readStringArrayParam, l as parseAvailableTags, m as readStringParam, n as missingTargetError, o as imageResult, p as readStringOrNumberParam, r as unknownTargetError, s as imageResultFromFile, t as ambiguousTargetError, u as readNumberParam } from "./target-errors-BbOqxMY0.js";
@@ -46,21 +46,22 @@ import { n as resolveMarkdownTableMode } from "./markdown-tables-DawaaZEe.js";
 import { n as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-BheTNyes.js";
 import { a as readResponseWithLimit, i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, o as fetchWithSsrFGuard, t as getAgentScopedMediaLocalRoots } from "./local-roots-CC8jiKDk.js";
 import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-F0moAwIl.js";
-import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-C_aYUwpl.js";
-import { c as getSkillsSnapshotVersion, d as createAsyncLock, f as readJsonFile, i as resolveSkillCommandInvocation, l as pruneExpiredPending, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, p as writeJsonAtomic, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as resolvePairingPaths } from "./skill-commands-DklY7Cj7.js";
+import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-DYoNKo_h.js";
+import { c as getSkillsSnapshotVersion, d as createAsyncLock, f as readJsonFile, i as resolveSkillCommandInvocation, l as pruneExpiredPending, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, p as writeJsonAtomic, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as resolvePairingPaths } from "./skill-commands-D8RiKDh0.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-QOi5vzUt.js";
-import { _ as resolveMediaUnderstandingScope, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as normalizeMediaUnderstandingChatType, h as resolveTimeoutMs$1, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveConcurrency, n as createMediaAttachmentCache, o as runCapability, p as registerUnhandledRejectionHandler, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as CLI_OUTPUT_MAX_BUFFER, y as applyTemplate } from "./runner-DUBExAb5.js";
+import { _ as resolveMediaUnderstandingScope, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as normalizeMediaUnderstandingChatType, h as resolveTimeoutMs$1, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveConcurrency, n as createMediaAttachmentCache, o as runCapability, p as registerUnhandledRejectionHandler, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as CLI_OUTPUT_MAX_BUFFER, y as applyTemplate } from "./runner-DKkSu9cc.js";
 import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-DtLn7YU3.js";
 import { n as recordCommandPoll, r as resetCommandPollCount } from "./command-poll-backoff-DtXYsHEc.js";
 import { n as recordChannelActivity, r as createDiscordRetryRunner, t as getChannelActivity } from "./channel-activity-D9q-fIPB.js";
 import { n as normalizePollInput } from "./polls-DQcEziPg.js";
 import { t as convertMarkdownTables } from "./tables-COnZ169v.js";
-import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal } from "./send-DXW6mdgR.js";
-import { a as formatIMessageChatTarget, c as parseIMessageTarget, i as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, o as isAllowedIMessageSender, r as createIMessageRpcClient, s as normalizeIMessageHandle, t as sendMessageIMessage } from "./send-BArQpbtx.js";
+import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal } from "./send-CB3dCCmE.js";
+import { a as formatIMessageChatTarget, c as parseIMessageTarget, i as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, o as isAllowedIMessageSender, r as createIMessageRpcClient, s as normalizeIMessageHandle, t as sendMessageIMessage } from "./send-iVPD3yf2.js";
 import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-We7ViAbg.js";
-import { t as makeProxyFetch } from "./proxy-BaSHbVlA.js";
-import { a as createReplyReferencePlanner, i as resolveSlackThreadTs, n as deliverReplies$3, t as createSlackReplyDeliveryPlan } from "./replies-ZYtI9jr0.js";
-import { t as getActiveWebListener } from "./active-listener-1krIj9TM.js";
+import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-BloyLEwh.js";
+import { t as makeProxyFetch } from "./proxy-CLEew2L6.js";
+import { a as createReplyReferencePlanner, i as resolveSlackThreadTs, n as deliverReplies$3, t as createSlackReplyDeliveryPlan } from "./replies-CM5QgPHM.js";
+import { t as getActiveWebListener } from "./active-listener-Dx_Y1ouV.js";
 import { createRequire } from "node:module";
 import * as path$1 from "node:path";
 import path from "node:path";
@@ -3460,7 +3461,7 @@ async function getMemorySearchManager(params) {
 			if (cached) return { manager: cached };
 		}
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-Bx06p6nk.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-qpFs_a6u.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -3472,7 +3473,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-jpn5vRTY.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-CgLdpXXM.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -3485,7 +3486,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-jpn5vRTY.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-CgLdpXXM.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -7204,7 +7205,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-BH0l3UKW.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-DepjYu87.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -12659,7 +12660,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./model-selection-BQCG9ah0.js").then((n) => n.N);
+		const { ensureAuthProfileStore } = await import("./model-selection-B8QKPmTL.js").then((n) => n.N);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -42042,7 +42043,7 @@ async function recordLoopOutcome(args) {
 	if (!args.ctx?.sessionKey) return;
 	try {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-C1vRJs5w.js").then((n) => n.n);
-		const { recordToolCallOutcome } = await import("./tool-loop-detection-C7TCF2V2.js");
+		const { recordToolCallOutcome } = await import("./tool-loop-detection-Dd4SFWb1.js");
 		recordToolCallOutcome(getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -42064,7 +42065,7 @@ async function runBeforeToolCallHook(args) {
 	if (args.ctx?.sessionKey) {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-C1vRJs5w.js").then((n) => n.n);
 		const { logToolLoopAction } = await import("./diagnostic-D0xmLpej.js").then((n) => n.n);
-		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-C7TCF2V2.js");
+		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-Dd4SFWb1.js");
 		const sessionState = getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -47297,6 +47298,7 @@ async function runEmbeddedPiAgent(params) {
 		const agentDir = params.agentDir ?? resolveSymiAgentDir();
 		const fallbackConfigured = (params.config?.agents?.defaults?.model?.fallbacks?.length ?? 0) > 0;
 		await ensureSymiModelsJson(params.config, agentDir);
+		await ensurePiAuthJsonFromAuthProfiles(agentDir, { config: params.config });
 		let modelResolveOverride;
 		const hookRunner = getGlobalHookRunner();
 		const hookCtx = {
@@ -50804,7 +50806,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-BH0l3UKW.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-DepjYu87.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -54250,7 +54252,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-CHzdaNJ4.js").then((n) => n.n);
+		const { describeImageWithModel } = await import("./image-CjuJpc3E.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -54673,7 +54675,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-CUErSLXH.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-BMIn_eOf.js");
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -56912,7 +56914,7 @@ async function preflightDiscordMessage(params) {
 	let preflightTranscript;
 	const hasAudioAttachment = message.attachments?.some((att) => att.contentType?.startsWith("audio/"));
 	if (!isDirectMessage && shouldRequireMention && hasAudioAttachment && !baseText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-C40mKAp7.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-DZ_2w4B5.js");
 		const audioPaths = message.attachments?.filter((att) => att.contentType?.startsWith("audio/")).map((att) => att.url) ?? [];
 		if (audioPaths.length > 0) preflightTranscript = await transcribeFirstAudio({
 			ctx: {
@@ -60695,27 +60697,27 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-BuHFfZp7.js");
+			const { sendMessageWhatsApp } = await import("./web-C0ZdaR6w.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
-			const { sendMessageTelegram } = await import("./send-C4Ucr8ep.js").then((n) => n.l);
+			const { sendMessageTelegram } = await import("./send-DHWMRnPk.js").then((n) => n.l);
 			return await sendMessageTelegram(...args);
 		},
 		sendMessageDiscord: async (...args) => {
-			const { sendMessageDiscord } = await import("./send-C1IYd3g7.js").then((n) => n.t);
+			const { sendMessageDiscord } = await import("./send-BJTX03Bn.js").then((n) => n.t);
 			return await sendMessageDiscord(...args);
 		},
 		sendMessageSlack: async (...args) => {
-			const { sendMessageSlack } = await import("./send-D-hWrHoH.js").then((n) => n.n);
+			const { sendMessageSlack } = await import("./send-CFzf_ab4.js").then((n) => n.n);
 			return await sendMessageSlack(...args);
 		},
 		sendMessageSignal: async (...args) => {
-			const { sendMessageSignal } = await import("./send-DXW6mdgR.js").then((n) => n.i);
+			const { sendMessageSignal } = await import("./send-CB3dCCmE.js").then((n) => n.i);
 			return await sendMessageSignal(...args);
 		},
 		sendMessageIMessage: async (...args) => {
-			const { sendMessageIMessage } = await import("./send-BArQpbtx.js").then((n) => n.n);
+			const { sendMessageIMessage } = await import("./send-iVPD3yf2.js").then((n) => n.n);
 			return await sendMessageIMessage(...args);
 		}
 	};
@@ -71142,7 +71144,7 @@ function readSlackExternalArgMenuToken(raw) {
 }
 let commandsRegistry;
 async function getCommandsRegistry() {
-	if (!commandsRegistry) commandsRegistry = await import("./commands-registry-C_aYUwpl.js").then((n) => n.n);
+	if (!commandsRegistry) commandsRegistry = await import("./commands-registry-DYoNKo_h.js").then((n) => n.n);
 	return commandsRegistry;
 }
 function encodeSlackCommandArgValue(parts) {
@@ -71545,7 +71547,7 @@ async function registerSlackMonitorSlashCommands(params) {
 			});
 			const deliverSlashPayloads = async (replies) => {
 				const [{ deliverSlackSlashReplies }, { resolveChunkMode }, { resolveMarkdownTableMode }] = await Promise.all([
-					import("./replies-ZYtI9jr0.js").then((n) => n.r),
+					import("./replies-CM5QgPHM.js").then((n) => n.r),
 					import("./chunk-DTMTDXwE.js").then((n) => n.s),
 					import("./markdown-tables-DawaaZEe.js").then((n) => n.t)
 				]);
@@ -71600,7 +71602,7 @@ async function registerSlackMonitorSlashCommands(params) {
 	let nativeCommands = [];
 	if (nativeEnabled) {
 		reg = await getCommandsRegistry();
-		const skillCommands = nativeSkillsEnabled ? (await import("./skill-commands-DklY7Cj7.js").then((n) => n.a)).listSkillCommandsForAgents({ cfg }) : [];
+		const skillCommands = nativeSkillsEnabled ? (await import("./skill-commands-D8RiKDh0.js").then((n) => n.a)).listSkillCommandsForAgents({ cfg }) : [];
 		nativeCommands = reg.listNativeCommandSpecsForConfig(cfg, {
 			skillCommands,
 			provider: "slack"
@@ -72034,7 +72036,7 @@ async function auditTelegramGroupMembership(params) {
 		groups: [],
 		elapsedMs: Date.now() - started
 	};
-	const fetcher = params.proxyUrl ? (await import("./proxy-BaSHbVlA.js").then((n) => n.n)).makeProxyFetch(params.proxyUrl) : fetch;
+	const fetcher = params.proxyUrl ? (await import("./proxy-CLEew2L6.js").then((n) => n.n)).makeProxyFetch(params.proxyUrl) : fetch;
 	const { fetchWithTimeout } = await import("./fetch-timeout-BheTNyes.js").then((n) => n.r);
 	const base = `${TELEGRAM_API_BASE$1}/bot${token}`;
 	const groups = [];
@@ -73818,7 +73820,7 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	const hasAudio = allMedia.some((media) => media.contentType?.startsWith("audio/"));
 	let preflightTranscript;
 	if (isGroup && requireMention && hasAudio && !hasUserText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-C40mKAp7.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-DZ_2w4B5.js");
 		preflightTranscript = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: allMedia.length > 0 ? allMedia.map((m) => m.path) : void 0,
@@ -75963,23 +75965,23 @@ let webLoginQrPromise = null;
 let webChannelPromise = null;
 let whatsappActionsPromise = null;
 function loadWebOutbound() {
-	webOutboundPromise ??= import("./outbound-3MZ12YrQ.js").then((n) => n.t);
+	webOutboundPromise ??= import("./outbound-BihTVvMr.js").then((n) => n.t);
 	return webOutboundPromise;
 }
 function loadWebLogin() {
-	webLoginPromise ??= import("./login-XprgoYoQ.js").then((n) => n.n);
+	webLoginPromise ??= import("./login-CeXFO0OG.js").then((n) => n.n);
 	return webLoginPromise;
 }
 function loadWebLoginQr() {
-	webLoginQrPromise ??= import("./login-qr-CUErSLXH.js");
+	webLoginQrPromise ??= import("./login-qr-BMIn_eOf.js");
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-BuHFfZp7.js");
+	webChannelPromise ??= import("./web-C0ZdaR6w.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
-	whatsappActionsPromise ??= import("./whatsapp-actions-DvhI5-DC.js");
+	whatsappActionsPromise ??= import("./whatsapp-actions-BW8P8Izy.js");
 	return whatsappActionsPromise;
 }
 function createPluginRuntime() {