@symerian/symi 2.6.37 → 2.6.39

package/dist/{system-cli-C4A3Udil.js → system-cli-BXewgTZR.js}

@@ -4,7 +4,7 @@ import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
 import "./agent-scope-CgUHAtCo.js";
-import { At as ensureAuthProfileStore, l as normalizeProviderId } from "./model-selection-CyFvYcRt.js";
+import "./model-selection-CyFvYcRt.js";
 import "./github-copilot-token-DAu1a6BX.js";
 import "./boolean-BsqeuxE6.js";
 import "./env-DPCHYPeH.js";
@@ -16,117 +16,8 @@ import "./call-CFhGTNtt.js";
 import "./pairing-token-CX3NN_qj.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
 import "./progress-jIePzvGA.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-5aGm8LwU.js";
-import path from "node:path";
-import fs from "node:fs/promises";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-DiTk_nOl.js";
 
-//#region src/agents/pi-auth-json.ts
-async function readAuthJson(filePath) {
-	try {
-		const raw = await fs.readFile(filePath, "utf8");
-		const parsed = JSON.parse(raw);
-		if (!parsed || typeof parsed !== "object") return {};
-		return parsed;
-	} catch {
-		return {};
-	}
-}
-/**
-* Convert an Symi auth-profiles credential to pi-coding-agent auth.json format.
-* Returns null if the credential cannot be converted.
-*/
-function convertCredential(cred) {
-	if (cred.type === "api_key") {
-		const key = typeof cred.key === "string" ? cred.key.trim() : "";
-		if (!key) return null;
-		return {
-			type: "api_key",
-			key
-		};
-	}
-	if (cred.type === "token") {
-		const token = typeof cred.token === "string" ? cred.token.trim() : "";
-		if (!token) return null;
-		const expires = typeof cred.expires === "number" ? cred.expires : NaN;
-		if (Number.isFinite(expires) && expires > 0 && Date.now() >= expires) return null;
-		return {
-			type: "api_key",
-			key: token
-		};
-	}
-	if (cred.type === "oauth") {
-		const accessRaw = cred.access;
-		const refreshRaw = cred.refresh;
-		const expiresRaw = cred.expires;
-		const access = typeof accessRaw === "string" ? accessRaw.trim() : "";
-		const refresh = typeof refreshRaw === "string" ? refreshRaw.trim() : "";
-		const expires = typeof expiresRaw === "number" ? expiresRaw : NaN;
-		if (!access || !refresh || !Number.isFinite(expires) || expires <= 0) return null;
-		return {
-			type: "oauth",
-			access,
-			refresh,
-			expires
-		};
-	}
-	return null;
-}
-/**
-* Check if two auth.json credentials are equivalent.
-*/
-function credentialsEqual(a, b) {
-	if (!a || typeof a !== "object") return false;
-	if (a.type !== b.type) return false;
-	if (a.type === "api_key" && b.type === "api_key") return a.key === b.key;
-	if (a.type === "oauth" && b.type === "oauth") return a.access === b.access && a.refresh === b.refresh && a.expires === b.expires;
-	return false;
-}
-/**
-* pi-coding-agent's ModelRegistry/AuthStorage expects credentials in auth.json.
-*
-* Symi stores credentials in auth-profiles.json instead. This helper
-* bridges all credentials into agentDir/auth.json so pi-coding-agent can
-* (a) consider providers authenticated and (b) include built-in models in its
-* registry/catalog output.
-*
-* Syncs all credential types: api_key, token (as api_key), and oauth.
-*/
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
-	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
-	const authPath = path.join(agentDir, "auth.json");
-	const providerCredentials = /* @__PURE__ */ new Map();
-	for (const [, cred] of Object.entries(store.profiles)) {
-		const provider = normalizeProviderId(String(cred.provider ?? "")).trim();
-		if (!provider || providerCredentials.has(provider)) continue;
-		const converted = convertCredential(cred);
-		if (converted) providerCredentials.set(provider, converted);
-	}
-	if (providerCredentials.size === 0) return {
-		wrote: false,
-		authPath
-	};
-	const existing = await readAuthJson(authPath);
-	let changed = false;
-	for (const [provider, cred] of providerCredentials) if (!credentialsEqual(existing[provider], cred)) {
-		existing[provider] = cred;
-		changed = true;
-	}
-	if (!changed) return {
-		wrote: false,
-		authPath
-	};
-	await fs.mkdir(agentDir, {
-		recursive: true,
-		mode: 448
-	});
-	await fs.writeFile(authPath, `${JSON.stringify(existing, null, 2)}\n`, { mode: 384 });
-	return {
-		wrote: true,
-		authPath
-	};
-}
-
-//#endregion
 //#region src/cli/system-cli.ts
 const normalizeWakeMode = (raw) => {
 	const mode = typeof raw === "string" ? raw.trim() : "";
@@ -191,4 +82,4 @@ function registerSystemCli(program) {
 }
 
 //#endregion
-export { registerSystemCli, ensurePiAuthJsonFromAuthProfiles as t };
+export { registerSystemCli };

package/dist/system-run-command-B_qw8CXP.js

@@ -0,0 +1,93 @@
+import path from "node:path";
+
+//#region src/infra/system-run-command.ts
+function basenameLower(token) {
+	const win = path.win32.basename(token);
+	const posix = path.posix.basename(token);
+	return (win.length < posix.length ? win : posix).trim().toLowerCase();
+}
+function formatExecCommand(argv) {
+	return argv.map((arg) => {
+		const trimmed = arg.trim();
+		if (!trimmed) return "\"\"";
+		if (!/\s|"/.test(trimmed)) return trimmed;
+		return `"${trimmed.replace(/"/g, "\\\"")}"`;
+	}).join(" ");
+}
+function extractShellCommandFromArgv(argv) {
+	const token0 = argv[0]?.trim();
+	if (!token0) return null;
+	const base0 = basenameLower(token0);
+	if (base0 === "sh" || base0 === "bash" || base0 === "zsh" || base0 === "dash" || base0 === "ksh") {
+		const flag = argv[1]?.trim();
+		if (flag !== "-lc" && flag !== "-c") return null;
+		const cmd = argv[2];
+		return typeof cmd === "string" ? cmd : null;
+	}
+	if (base0 === "cmd.exe" || base0 === "cmd") {
+		const idx = argv.findIndex((item) => String(item).trim().toLowerCase() === "/c");
+		if (idx === -1) return null;
+		const tail = argv.slice(idx + 1).map((item) => String(item));
+		if (tail.length === 0) return null;
+		const cmd = tail.join(" ").trim();
+		return cmd.length > 0 ? cmd : null;
+	}
+	return null;
+}
+function validateSystemRunCommandConsistency(params) {
+	const raw = typeof params.rawCommand === "string" && params.rawCommand.trim().length > 0 ? params.rawCommand.trim() : null;
+	const shellCommand = extractShellCommandFromArgv(params.argv);
+	const inferred = shellCommand !== null ? shellCommand.trim() : formatExecCommand(params.argv);
+	if (raw && raw !== inferred) return {
+		ok: false,
+		message: "INVALID_REQUEST: rawCommand does not match command",
+		details: {
+			code: "RAW_COMMAND_MISMATCH",
+			rawCommand: raw,
+			inferred
+		}
+	};
+	return {
+		ok: true,
+		shellCommand: shellCommand !== null ? raw ?? shellCommand : null,
+		cmdText: raw ?? shellCommand ?? inferred
+	};
+}
+function resolveSystemRunCommand(params) {
+	const raw = typeof params.rawCommand === "string" && params.rawCommand.trim().length > 0 ? params.rawCommand.trim() : null;
+	const command = Array.isArray(params.command) ? params.command : [];
+	if (command.length === 0) {
+		if (raw) return {
+			ok: false,
+			message: "rawCommand requires params.command",
+			details: { code: "MISSING_COMMAND" }
+		};
+		return {
+			ok: true,
+			argv: [],
+			rawCommand: null,
+			shellCommand: null,
+			cmdText: ""
+		};
+	}
+	const argv = command.map((v) => String(v));
+	const validation = validateSystemRunCommandConsistency({
+		argv,
+		rawCommand: raw
+	});
+	if (!validation.ok) return {
+		ok: false,
+		message: validation.message,
+		details: validation.details ?? { code: "RAW_COMMAND_MISMATCH" }
+	};
+	return {
+		ok: true,
+		argv,
+		rawCommand: raw,
+		shellCommand: validation.shellCommand,
+		cmdText: validation.cmdText
+	};
+}
+
+//#endregion
+export { resolveSystemRunCommand as t };

package/dist/{systemd-riq8uNJQ.js → systemd-DT6SbCim.js}

@@ -1,6 +1,6 @@
 import { B as theme, R as colorize, z as isRich } from "./utils-B-0b9bGM.js";
 import { n as runExec, t as runCommandWithTimeout } from "./exec-CWkblSrI.js";
-import { d as resolveGatewaySystemdServiceName, l as resolveGatewayProfileSuffix, u as resolveGatewayServiceDescription } from "./constants-C8_BLnaW.js";
+import { d as resolveGatewaySystemdServiceName, l as resolveGatewayProfileSuffix, u as resolveGatewayServiceDescription } from "./constants-CafH8-8D.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{systemd-hints-BR6gChwm.js → systemd-hints-DZH9qY5W.js}

@@ -1,8 +1,8 @@
 import { t as formatCliCommand } from "./command-format-COaS-S7B.js";
-import { d as isVersionManagedNodePath, h as resolveSystemNodePath, l as getMinimalServicePathPartsFromEnv, u as isSystemNodePath } from "./daemon-runtime-2mwX-jqj.js";
-import { o as resolveSystemdUserUnitPath } from "./systemd-riq8uNJQ.js";
-import { c as resolveLaunchAgentPlistPath } from "./service-Cl74hx8J.js";
-import { t as formatRuntimeStatusWithDetails } from "./runtime-status-CR9445g5.js";
+import { d as isVersionManagedNodePath, h as resolveSystemNodePath, l as getMinimalServicePathPartsFromEnv, u as isSystemNodePath } from "./daemon-runtime-COZ4usfy.js";
+import { o as resolveSystemdUserUnitPath } from "./systemd-DT6SbCim.js";
+import { c as resolveLaunchAgentPlistPath } from "./service-osK70kTZ.js";
+import { t as formatRuntimeStatusWithDetails } from "./runtime-status-D6c3G7my.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/{systemd-linger-aQ75ZlXY.js → systemd-linger-DCskIKcx.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { t as note } from "./note-DeHoW7xO.js";
-import { d as readSystemdUserLingerStatus, r as isSystemdUserServiceAvailable, u as enableSystemdUserLinger } from "./systemd-riq8uNJQ.js";
+import { t as note } from "./note-DQ9BvHF2.js";
+import { d as readSystemdUserLingerStatus, r as isSystemdUserServiceAvailable, u as enableSystemdUserLinger } from "./systemd-DT6SbCim.js";
 
 //#region src/commands/systemd-linger.ts
 var systemd_linger_exports = /* @__PURE__ */ __exportAll({

package/dist/{tables-qMwbq29u.js → tables-Dkg9O8rv.js}

@@ -1,5 +1,5 @@
-import { r as markdownToIRWithMeta } from "./ir-CTiz95Vb.js";
-import { t as renderMarkdownWithMarkers } from "./render-CDCvpfhh.js";
+import { r as markdownToIRWithMeta } from "./ir-Z9axTYHx.js";
+import { t as renderMarkdownWithMarkers } from "./render-DwEu-aCr.js";
 
 //#region src/markdown/tables.ts
 const MARKDOWN_STYLE_MARKERS = {

package/dist/{target-errors-Bbr9rlzN.js → target-errors-Pr77jao5.js}

@@ -1,5 +1,5 @@
-import { c as detectMime } from "./image-ops-C7CauEK8.js";
-import { r as sanitizeToolResultImages } from "./tool-images-SqqWIT22.js";
+import { c as detectMime } from "./image-ops-M5agStZn.js";
+import { r as sanitizeToolResultImages } from "./tool-images-B1qVCntj.js";
 import fs from "node:fs/promises";
 
 //#region src/agents/tools/common.ts

package/dist/{thinking-BprCy23Z.js → thinking-C9-JAUzD.js}

@@ -1,9 +1,9 @@
 import { p as normalizeAccountId } from "./session-key-BCzIW1Y2.js";
-import { D as escapeRegExp, M as normalizeE164, i as getChatChannelMeta, l as requireActivePluginRegistry, n as CHAT_CHANNEL_ORDER } from "./registry-DYq1AYOv.js";
-import { _ as resolveDiscordAccount, a as normalizeWhatsAppTarget, d as resolveSlackAccount, f as resolveSlackReplyToMode, l as resolveTelegramAccount } from "./plugins-BzmbgY7s.js";
-import { t as resolveWhatsAppAccount } from "./accounts-BRw8yhIW.js";
-import { t as resolveIMessageAccount } from "./accounts-3dCrO3oZ.js";
-import { n as resolveSignalAccount } from "./accounts-BuZxOb3B.js";
+import { D as escapeRegExp, M as normalizeE164, i as getChatChannelMeta, l as requireActivePluginRegistry, n as CHAT_CHANNEL_ORDER } from "./registry-UkL38jvt.js";
+import { _ as resolveDiscordAccount, a as normalizeWhatsAppTarget, d as resolveSlackAccount, f as resolveSlackReplyToMode, l as resolveTelegramAccount } from "./plugins-Bkr5ZdYs.js";
+import { t as resolveWhatsAppAccount } from "./accounts-D1r2dq1t.js";
+import { t as resolveIMessageAccount } from "./accounts-dRUMQQrB.js";
+import { n as resolveSignalAccount } from "./accounts-wSphH5gv.js";
 
 //#region src/shared/string-normalization.ts
 function normalizeStringEntries(list) {

package/dist/{tokens-Bux9Y_xD.js → tokens-CCZl4YHT.js}

@@ -1,4 +1,4 @@
-import { D as escapeRegExp } from "./registry-DYq1AYOv.js";
+import { D as escapeRegExp } from "./registry-UkL38jvt.js";
 
 //#region src/auto-reply/tokens.ts
 const SYMIPULSE_TOKEN = "SYMIPULSE_OK";

package/dist/{plugin-sdk/tool-images-HJ2sfZDV.js → tool-images-B1qVCntj.js}

@@ -1,5 +1,5 @@
-import { t as createSubsystemLogger } from "./subsystem-B2uDN3TV.js";
-import { i as getImageMetadata, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS } from "./image-ops-BlQR__MN.js";
+import { t as createSubsystemLogger } from "./subsystem-DN75fnEF.js";
+import { i as getImageMetadata, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS } from "./image-ops-M5agStZn.js";
 
 //#region src/agents/image-sanitization.ts
 const DEFAULT_IMAGE_MAX_DIMENSION_PX = 1200;

package/dist/{tool-loop-detection-DR_rrIA1.js → tool-loop-detection-C33wf43N.js}

@@ -1,6 +1,6 @@
-import "./paths-CE7eVGHg.js";
-import { W as isPlainObject } from "./registry-DYq1AYOv.js";
-import { t as createSubsystemLogger } from "./subsystem-BjyjJF-d.js";
+import "./paths-CYmyCDsE.js";
+import { W as isPlainObject } from "./registry-UkL38jvt.js";
+import { t as createSubsystemLogger } from "./subsystem-DN75fnEF.js";
 import { createHash } from "node:crypto";
 
 //#region src/agents/tool-loop-detection.ts

package/dist/{tui-D14a9N3F.js → tui-DLaU7tTx.js}

@@ -4,14 +4,14 @@ import { l as stripAnsi, u as visibleWidth } from "./subsystem-D9vIQve0.js";
 import { l as resolveDefaultAgentId } from "./agent-scope-CgUHAtCo.js";
 import { f as GATEWAY_CLIENT_CAPS, h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-aT-I_DTX.js";
 import { H as VERSION, i as loadConfig } from "./config-CHwyw6l5.js";
-import { _ as formatRawAssistantErrorForUi } from "./pi-embedded-helpers-CNPyv_ax.js";
+import { _ as formatRawAssistantErrorForUi } from "./pi-embedded-helpers-BuVSLhG_.js";
 import { k as stripLeadingInboundMetadata } from "./sessions-DgYpBvse.js";
 import { n as resolveToolDisplay, t as formatToolDetail } from "./tool-display-D8N3rsYt.js";
 import { a as listChatCommandsForConfig, i as listChatCommands } from "./commands-registry-BT0-zzs3.js";
 import { At as PROTOCOL_VERSION, t as GatewayClient } from "./client-jI1oE0_k.js";
 import { i as ensureExplicitGatewayAuth, o as resolveExplicitGatewayAuth, t as buildGatewayConnectionDetails } from "./call-CFhGTNtt.js";
 import { n as formatTimeAgo, t as formatRelativeTimestamp } from "./format-relative-BXoxEQVN.js";
-import { n as formatTokenCount } from "./usage-format-BzKEDn0q.js";
+import { n as formatTokenCount } from "./usage-format-BgUx3Bm4.js";
 import chalk from "chalk";
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";

package/dist/{tui-cli-Bg4YuRSd.js → tui-cli-D-PVUsS5.js}

@@ -12,15 +12,15 @@ import "./env-DPCHYPeH.js";
 import "./message-channel-aT-I_DTX.js";
 import "./config-CHwyw6l5.js";
 import "./manifest-registry-C4BxOMWX.js";
-import "./pi-embedded-helpers-CNPyv_ax.js";
-import "./sandbox-C-T6hOMv.js";
+import "./pi-embedded-helpers-BuVSLhG_.js";
+import "./sandbox-DAOxwUQm.js";
 import "./chrome-DtPkPq9T.js";
 import "./tailscale-D5dKabOc.js";
 import "./auth-B741uFtk.js";
-import "./server-context-CEpFjqSk.js";
+import "./server-context-CHYWo_TC.js";
 import "./frontmatter-DWQhtOo7.js";
 import "./skills-6jdJQ5ZL.js";
-import "./routes-Ba9CUQ8M.js";
+import "./routes-B1-BfEDm.js";
 import "./redact-f-Q-hFt_.js";
 import "./errors-BF3TeRH2.js";
 import "./fs-safe-CUjO1ca2.js";
@@ -47,8 +47,8 @@ import "./client-jI1oE0_k.js";
 import "./call-CFhGTNtt.js";
 import "./pairing-token-CX3NN_qj.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
-import { t as parseTimeoutMs } from "./parse-timeout-C385GCpE.js";
-import { t as runTui } from "./tui-D14a9N3F.js";
+import { t as parseTimeoutMs } from "./parse-timeout-2S5vp0-9.js";
+import { t as runTui } from "./tui-DLaU7tTx.js";
 
 //#region src/cli/tui-cli.ts
 function registerTuiCli(program) {