@symerian/symi 2.6.42 → 2.7.0

package/dist/{pairing-store-CK726Dzq.js → pairing-store-B8ktu-6j.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir, m as resolveOAuthDir, y as resolveRequiredHomeDir } from "./paths-Cqn-zk3M.js";
 import { b as safeParseJson } from "./utils-B-0b9bGM.js";
-import { It as withFileLock$1 } from "./model-selection-CyFvYcRt.js";
-import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-DKDeQZF0.js";
+import { It as withFileLock$1 } from "./model-selection-X1oLh3CE.js";
+import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-BAyxWQSz.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";

package/dist/{pairing-token-CX3NN_qj.js → pairing-token-AV-MMfVE.js}

@@ -1,13 +1,13 @@
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { t as safeEqualSecret } from "./secret-equal-D7A3Bol7.js";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { randomBytes, randomUUID } from "node:crypto";
 
 //#region src/infra/json-files.ts
 async function readJsonFile(filePath) {
 	try {
-		const raw = await fs.readFile(filePath, "utf8");
+		const raw = await fsPromises.readFile(filePath, "utf8");
 		return JSON.parse(raw);
 	} catch {
 		return null;
@@ -16,15 +16,15 @@ async function readJsonFile(filePath) {
 async function writeJsonAtomic(filePath, value, options) {
 	const mode = options?.mode ?? 384;
 	const dir = path.dirname(filePath);
-	await fs.mkdir(dir, { recursive: true });
+	await fsPromises.mkdir(dir, { recursive: true });
 	const tmp = `${filePath}.${randomUUID()}.tmp`;
-	await fs.writeFile(tmp, JSON.stringify(value, null, 2), "utf8");
+	await fsPromises.writeFile(tmp, JSON.stringify(value, null, 2), "utf8");
 	try {
-		await fs.chmod(tmp, mode);
+		await fsPromises.chmod(tmp, mode);
 	} catch {}
-	await fs.rename(tmp, filePath);
+	await fsPromises.rename(tmp, filePath);
 	try {
-		await fs.chmod(filePath, mode);
+		await fsPromises.chmod(filePath, mode);
 	} catch {}
 }
 function createAsyncLock() {

package/dist/{paths-BBm9fwuG.js → paths-CT6jsi4E.js}

@@ -1,5 +1,5 @@
 import { X as resolvePreferredSymiTmpDir } from "./utils-B-0b9bGM.js";
-import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CUjO1ca2.js";
+import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CTDvb1DF.js";
 import path from "node:path";
 
 //#region src/browser/paths.ts

package/dist/{pi-auth-json-zHckislA.js → pi-auth-json-FpfHyEcu.js}

@@ -1,13 +1,13 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { At as ensureAuthProfileStore, l as normalizeProviderId, zt as normalizeOptionalSecretInput } from "./model-selection-CyFvYcRt.js";
+import { At as ensureAuthProfileStore, l as normalizeProviderId, zt as normalizeOptionalSecretInput } from "./model-selection-X1oLh3CE.js";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 
 //#region src/agents/pi-auth-json.ts
 var pi_auth_json_exports = /* @__PURE__ */ __exportAll({ ensurePiAuthJsonFromAuthProfiles: () => ensurePiAuthJsonFromAuthProfiles });
 async function readAuthJson(filePath) {
 	try {
-		const raw = await fs.readFile(filePath, "utf8");
+		const raw = await fsPromises.readFile(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (!parsed || typeof parsed !== "object") return {};
 		return parsed;
@@ -118,11 +118,11 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 		wrote: false,
 		authPath
 	};
-	await fs.mkdir(agentDir, {
+	await fsPromises.mkdir(agentDir, {
 		recursive: true,
 		mode: 448
 	});
-	await fs.writeFile(authPath, `${JSON.stringify(existing, null, 2)}\n`, { mode: 384 });
+	await fsPromises.writeFile(authPath, `${JSON.stringify(existing, null, 2)}\n`, { mode: 384 });
 	return {
 		wrote: true,
 		authPath

package/dist/{pi-embedded-DQe8vBwU.js → pi-embedded-CYDMb5q0.js}

@@ -45586,6 +45586,21 @@ const getDmHistoryLimitFromSessionKey = getHistoryLimitFromSessionKey;
 //#region src/agents/pi-embedded-runner/long-task-prompt.ts
 const SCRIPT_REL_PATH = "skills/long-task/scripts/detach-task.sh";
 let cachedScriptPath;
+function isExecutable(candidatePath) {
+	try {
+		fs.accessSync(candidatePath, fs.constants.X_OK);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Ensure the script is present AND has the exec bit. npm usually preserves
+* mode 100755 on pack/install, but a subset of filesystems (FAT32, some
+* container mounts) silently drop it. If the bit is missing, we try to set
+* it; on failure we return null rather than emit a prompt that would break
+* when the model tries to exec the script.
+*/
 async function resolveDetachScriptPath(params) {
 	if (cachedScriptPath !== void 0) return cachedScriptPath;
 	const packageRoot = await resolveSymiPackageRoot({
@@ -45598,7 +45613,17 @@ async function resolveDetachScriptPath(params) {
 		return null;
 	}
 	const candidate = path.join(packageRoot, SCRIPT_REL_PATH);
-	cachedScriptPath = fs.existsSync(candidate) ? candidate : null;
+	if (!fs.existsSync(candidate)) {
+		cachedScriptPath = null;
+		return null;
+	}
+	if (!isExecutable(candidate)) try {
+		fs.chmodSync(candidate, 493);
+	} catch {
+		cachedScriptPath = null;
+		return null;
+	}
+	cachedScriptPath = candidate;
 	return cachedScriptPath;
 }
 async function buildLongTaskPromptSuffix(params) {
@@ -45606,11 +45631,25 @@ async function buildLongTaskPromptSuffix(params) {
 	if (!scriptPath) return "";
 	return "\n\n" + [
 		"LONG-RUNNING TASK PATTERN:",
-		"- For any task that may exceed 15 minutes (deep nmap scans of /24 or larger, full brute-force sweeps, long builds, exhaustive enumeration): detach from the agent turn. Do NOT foreground-block the exec tool for the full duration; the agent turn will hit its timeout and SIGTERM the process mid-run.",
-		`- Detach pattern: exec \`${scriptPath} <task-id> <workdir> <command...>\`. The script spawns under setsid+nohup, writes PID / cmd / started / status / log files in the workdir. Use the agent workspace as the workdir.`,
+		"- Applies ONLY when a command is expected to take longer than about 15 minutes (deep nmap scans of /24 or larger, full brute-force sweeps, long builds, exhaustive enumeration). For anything shorter, use the normal exec tool — detaching short tasks creates pointless cron noise.",
+		"- Foreground-blocking the exec tool for the full duration will fail: the agent turn will hit its timeout and the process will be SIGTERMed mid-run. Detach instead.",
+		`- Detach pattern: exec \`${scriptPath} <task-id> <workdir> <command...>\`.`,
+		"  • task-id: alphanumeric + dot/dash/underscore, 1–60 chars, must not start with '.' or '-'.",
+		"  • workdir: absolute path you own (e.g. the agent workspace).",
+		"  • Script spawns under setsid+nohup+disown, writes task-<id>.{pid,cmd,started,log,status} files.",
 		"- Immediately after detaching, respond to the user with: task id, PID, log file path, your ETA estimate, and that a cron monitor has been scheduled.",
-		"- Register a cron monitor using the `cron` tool with action=add. Schedule every 2-3 minutes. Job prompt must include the task-id, PID, log path, and status path so the future turn has enough context. Example job prompt: \"Check if PID <pid> is alive (kill -0). If alive: tail -n 20 <log>, post one-sentence progress update. If not alive: read <status> and tail <log>, post a final summary, then call cron tool with action=remove id=<this-cron-id>.\"",
-		"- When the monitor turn observes status=complete, it MUST call the cron tool with action=remove to clean up its own job. Do not leave stale monitors running."
+		"- Register a cron monitor using the `cron` tool with action=add. Required fields:",
+		"  • schedule: { kind: \"interval\", ms: 180000 }  (every 3 minutes; minimum 60000)",
+		"  • payload: { kind: \"agent\", sessionTarget: \"isolated\", text: <job prompt> }",
+		"  The job prompt must literally contain the task-id, PID, log path, and status path so the future turn has enough context without re-deriving them.",
+		"- Safe status read (inside the monitor turn):",
+		"  `status=$(cat \"<workdir>/task-<id>.status\" 2>/dev/null || echo missing)`",
+		"  Possible values: `running pid=<N> started=<ISO>`, `complete rc=<N> ended=<ISO>`, `aborted rc=<N> signal=<TERM|INT|HUP> ended=<ISO>`, or `missing` if the file was cleaned up.",
+		"- Monitor responsibilities each tick:",
+		"  • If status begins with `running`: tail -n 20 <log>, post a one-sentence progress line.",
+		"  • If status begins with `complete`: post a final summary with rc and tail, then call cron action=remove on this job id.",
+		"  • If status begins with `aborted`: post a failure summary with signal and tail, then call cron action=remove.",
+		"  • Never leave stale monitors running after the task finishes."
 	].join("\n");
 }
 
@@ -60949,7 +60988,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-CGh5tw__.js");
+			const { sendMessageWhatsApp } = await import("./web-DKwOxo8E.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -76229,7 +76268,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-CGh5tw__.js");
+	webChannelPromise ??= import("./web-DKwOxo8E.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{pi-embedded-helpers-BgdB5kvy.js → pi-embedded-helpers-Bs4eMaNo.js}

@@ -1,9 +1,9 @@
 import { E as truncateUtf16Safe } from "./utils-B-0b9bGM.js";
 import { s as normalizeThinkLevel } from "./thinking-EAliFiVK.js";
-import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-B6N8cV4d.js";
-import { t as sanitizeContentBlocksImages } from "./tool-images-DvUBlqjX.js";
+import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-HZ_uilsn.js";
+import { t as sanitizeContentBlocksImages } from "./tool-images-B-pqX3nX.js";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { createHash } from "node:crypto";
 
 //#region src/agents/pi-embedded-helpers/bootstrap.ts
@@ -101,10 +101,10 @@ function clampToBudget(content, budget) {
 async function ensureSessionHeader(params) {
 	const file = params.sessionFile;
 	try {
-		await fs.stat(file);
+		await fsPromises.stat(file);
 		return;
 	} catch {}
-	await fs.mkdir(path.dirname(file), { recursive: true });
+	await fsPromises.mkdir(path.dirname(file), { recursive: true });
 	const entry = {
 		type: "session",
 		version: 2,
@@ -112,7 +112,7 @@ async function ensureSessionHeader(params) {
 		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
 		cwd: params.cwd
 	};
-	await fs.writeFile(file, `${JSON.stringify(entry)}\n`, "utf-8");
+	await fsPromises.writeFile(file, `${JSON.stringify(entry)}\n`, "utf-8");
 }
 function buildBootstrapContextFiles(files, opts) {
 	const maxChars = opts?.maxChars ?? DEFAULT_BOOTSTRAP_MAX_CHARS;

package/dist/{pi-tools.policy-DRWb_Cax.js → pi-tools.policy-BBxnqCay.js}

@@ -1,9 +1,9 @@
 import { C as resolveThreadParentSessionKey, l as resolveAgentIdFromSessionKey } from "./session-key-DCt45XZa.js";
-import { r as resolveAgentConfig } from "./agent-scope-CgUHAtCo.js";
+import { r as resolveAgentConfig } from "./agent-scope-BRwEc2pG.js";
 import { l as normalizeMessageChannel } from "./message-channel-aT-I_DTX.js";
-import { z as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH } from "./config-Dz95lSBW.js";
-import { T as matchesAnyGlobPattern, w as compileGlobPatterns, x as normalizeToolName, y as expandToolGroups } from "./sandbox-B6N8cV4d.js";
-import { o as resolveChannelGroupToolsPolicy, t as getChannelDock } from "./dock-BhS32F6E.js";
+import { z as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH } from "./config-tNauHpdq.js";
+import { T as matchesAnyGlobPattern, w as compileGlobPatterns, x as normalizeToolName, y as expandToolGroups } from "./sandbox-HZ_uilsn.js";
+import { o as resolveChannelGroupToolsPolicy, t as getChannelDock } from "./dock-BYiRZSgZ.js";
 
 //#region src/agents/sandbox-tool-policy.ts
 function unionAllow(base, extra) {

package/dist/{plugin-auto-enable-CP0nONRL.js → plugin-auto-enable-DwIrzVOA.js}

@@ -1,7 +1,7 @@
 import { d as isRecord } from "./utils-B-0b9bGM.js";
 import { o as getChatChannelMeta, s as listChatChannels, u as normalizeChatChannelId } from "./registry-Cja8eT7G.js";
-import { l as normalizeProviderId } from "./model-selection-CyFvYcRt.js";
-import { t as hasAnyWhatsAppAuth } from "./accounts-DDuIpcln.js";
+import { l as normalizeProviderId } from "./model-selection-X1oLh3CE.js";
+import { t as hasAnyWhatsAppAuth } from "./accounts-Cd816n6l.js";
 import { n as getChannelPluginCatalogEntry, r as listChannelPluginCatalogEntries } from "./catalog-NQ4pj9RI.js";
 import { t as ensurePluginAllowlisted } from "./plugins-allowlist-BjKJrQ0e.js";
 

package/dist/{plugin-registry-BzIbwU3K.js → plugin-registry-CJGPW1-k.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { M as getActivePluginRegistry, o as createSubsystemLogger } from "./entry.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-D-jRCY0d.js";
 import { i as loadConfig } from "./config-BNTB6qj8.js";
-import { m as loadSymiPlugins } from "./subagent-registry-DQHg3jUV.js";
+import { m as loadSymiPlugins } from "./subagent-registry-CzS4CfnV.js";
 
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/{plugin-registry-D3TUplW8.js → plugin-registry-d0oZLl6y.js}

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { ft as loadSymiPlugins } from "./reply-DyjXROKp.js";
+import { ft as loadSymiPlugins } from "./reply-CpNWtuU4.js";
 import { d as getActivePluginRegistry } from "./registry-Cja8eT7G.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
-import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-CgUHAtCo.js";
-import { i as loadConfig } from "./config-Dz95lSBW.js";
+import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-BRwEc2pG.js";
+import { i as loadConfig } from "./config-tNauHpdq.js";
 
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/plugin-sdk/{channel-web-B6m8UOCl.js → channel-web-Dm-CzA1O.js}

@@ -1,6 +1,6 @@
 import { a as buildGroupHistoryKey, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-C_0eELjb.js";
 import { f as readWebSelfId, o as getWebAuthAgeMs, r as resolveWhatsAppAccount } from "./accounts-D9zGZU5t.js";
-import { E as enqueueSystemEvent, G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as resolveEnvelopeFormatOptions, c as computeBackoff, d as formatDurationPrecise, f as dispatchReplyWithBufferedBlockDispatcher, g as formatInboundEnvelope, h as resolveInboundDebounceMs, ht as createDedupeCache, l as sleepWithAbort, m as createInboundDebouncer, n as normalizeGroupActivation, nt as buildMentionRegexes, r as parseActivationCommand, rt as normalizeMentionText, t as getReplyFromConfig, tt as recordPendingHistoryEntryIfEnabled, u as buildPairingReply, v as hasControlCommand, y as shouldComputeCommandAuthorized } from "./reply-CGoJQT_s.js";
+import { E as enqueueSystemEvent, G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as resolveEnvelopeFormatOptions, c as computeBackoff, d as formatDurationPrecise, f as dispatchReplyWithBufferedBlockDispatcher, g as formatInboundEnvelope, h as resolveInboundDebounceMs, ht as createDedupeCache, l as sleepWithAbort, m as createInboundDebouncer, n as normalizeGroupActivation, nt as buildMentionRegexes, r as parseActivationCommand, rt as normalizeMentionText, t as getReplyFromConfig, tt as recordPendingHistoryEntryIfEnabled, u as buildPairingReply, v as hasControlCommand, y as shouldComputeCommandAuthorized } from "./reply-4HEU7aDS.js";
 import { A as normalizeE164, B as toWhatsappJid, K as logVerbose, N as resolveJidToE164, O as isSelfChatMode, R as sleep, Y as shouldLogVerbose, k as jidToE164, s as normalizeChatChannelId, tt as getChildLogger, x as clamp } from "./registry--_pGht6S.js";
 import { n as loadConfig } from "./config-DdA6JiyD.js";
 import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-Coz2AgU8.js";

package/dist/plugin-sdk/index.js

@@ -1,6 +1,6 @@
 import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-C_0eELjb.js";
 import { _ as createAccountListHelpers, i as resolveWhatsAppAuthDir, n as resolveDefaultWhatsAppAccountId, r as resolveWhatsAppAccount, t as listWhatsAppAccountIds } from "./accounts-D9zGZU5t.js";
-import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as stripMarkdown, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as processLineMessage, St as listThreadBindingsBySessionKey, T as attachFooterText, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as normalizeAccountId$1, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as listLineAccountIds, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, o as resolveDefaultLineAccountId, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, s as resolveLineAccount, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as createReceiptCard, wt as formatAllowlistMatchMeta, x as hasMarkdownToConvert, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./reply-CGoJQT_s.js";
+import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as stripMarkdown, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as processLineMessage, St as listThreadBindingsBySessionKey, T as attachFooterText, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as normalizeAccountId$1, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as listLineAccountIds, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, o as resolveDefaultLineAccountId, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, s as resolveLineAccount, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as createReceiptCard, wt as formatAllowlistMatchMeta, x as hasMarkdownToConvert, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./reply-4HEU7aDS.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import { D as resolveSlackAccount, E as resolveDefaultSlackAccountId, F as resolveDiscordAccount, M as listDiscordAccountIds, O as resolveSlackReplyToMode, P as resolveDefaultDiscordAccountId, S as resolveTelegramAccount, T as listSlackAccountIds, _ as normalizeWhatsAppTarget, a as listDiscordDirectoryPeersFromConfig, b as listTelegramAccountIds, c as listTelegramDirectoryGroupsFromConfig, d as listWhatsAppDirectoryPeersFromConfig, f as looksLikeSlackTargetId, g as isWhatsAppGroupJid, i as listDiscordDirectoryGroupsFromConfig, l as listTelegramDirectoryPeersFromConfig, o as listSlackDirectoryGroupsFromConfig, p as normalizeSlackMessagingTarget, s as listSlackDirectoryPeersFromConfig, u as listWhatsAppDirectoryGroupsFromConfig, w as listEnabledSlackAccounts, x as resolveDefaultTelegramAccountId } from "./plugins-BbAvhC25.js";
@@ -47,7 +47,7 @@ import "./paths-A0xdf3yk.js";
 import { h as onDiagnosticEvent, m as isDiagnosticsEnabled, p as emitDiagnosticEvent } from "./diagnostic-EyuCSUXO.js";
 import { n as extractOriginalFilename } from "./store-Do3t33-c.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-BkCUbYGV.js";
-import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-B6m8UOCl.js";
+import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-Dm-CzA1O.js";
 import "./image-aq-JAobP.js";
 import "./pi-model-discovery-LbcEa65a.js";
 import "./api-key-rotation-LTEeykrm.js";

package/dist/plugin-sdk/{reply-CGoJQT_s.js → reply-4HEU7aDS.js}

@@ -33640,6 +33640,21 @@ const getDmHistoryLimitFromSessionKey = getHistoryLimitFromSessionKey;
 //#region src/agents/pi-embedded-runner/long-task-prompt.ts
 const SCRIPT_REL_PATH = "skills/long-task/scripts/detach-task.sh";
 let cachedScriptPath;
+function isExecutable(candidatePath) {
+	try {
+		fs.accessSync(candidatePath, fs.constants.X_OK);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Ensure the script is present AND has the exec bit. npm usually preserves
+* mode 100755 on pack/install, but a subset of filesystems (FAT32, some
+* container mounts) silently drop it. If the bit is missing, we try to set
+* it; on failure we return null rather than emit a prompt that would break
+* when the model tries to exec the script.
+*/
 async function resolveDetachScriptPath(params) {
 	if (cachedScriptPath !== void 0) return cachedScriptPath;
 	const packageRoot = await resolveSymiPackageRoot({
@@ -33652,7 +33667,17 @@ async function resolveDetachScriptPath(params) {
 		return null;
 	}
 	const candidate = path.join(packageRoot, SCRIPT_REL_PATH);
-	cachedScriptPath = fs.existsSync(candidate) ? candidate : null;
+	if (!fs.existsSync(candidate)) {
+		cachedScriptPath = null;
+		return null;
+	}
+	if (!isExecutable(candidate)) try {
+		fs.chmodSync(candidate, 493);
+	} catch {
+		cachedScriptPath = null;
+		return null;
+	}
+	cachedScriptPath = candidate;
 	return cachedScriptPath;
 }
 async function buildLongTaskPromptSuffix(params) {
@@ -33660,11 +33685,25 @@ async function buildLongTaskPromptSuffix(params) {
 	if (!scriptPath) return "";
 	return "\n\n" + [
 		"LONG-RUNNING TASK PATTERN:",
-		"- For any task that may exceed 15 minutes (deep nmap scans of /24 or larger, full brute-force sweeps, long builds, exhaustive enumeration): detach from the agent turn. Do NOT foreground-block the exec tool for the full duration; the agent turn will hit its timeout and SIGTERM the process mid-run.",
-		`- Detach pattern: exec \`${scriptPath} <task-id> <workdir> <command...>\`. The script spawns under setsid+nohup, writes PID / cmd / started / status / log files in the workdir. Use the agent workspace as the workdir.`,
+		"- Applies ONLY when a command is expected to take longer than about 15 minutes (deep nmap scans of /24 or larger, full brute-force sweeps, long builds, exhaustive enumeration). For anything shorter, use the normal exec tool — detaching short tasks creates pointless cron noise.",
+		"- Foreground-blocking the exec tool for the full duration will fail: the agent turn will hit its timeout and the process will be SIGTERMed mid-run. Detach instead.",
+		`- Detach pattern: exec \`${scriptPath} <task-id> <workdir> <command...>\`.`,
+		"  • task-id: alphanumeric + dot/dash/underscore, 1–60 chars, must not start with '.' or '-'.",
+		"  • workdir: absolute path you own (e.g. the agent workspace).",
+		"  • Script spawns under setsid+nohup+disown, writes task-<id>.{pid,cmd,started,log,status} files.",
 		"- Immediately after detaching, respond to the user with: task id, PID, log file path, your ETA estimate, and that a cron monitor has been scheduled.",
-		"- Register a cron monitor using the `cron` tool with action=add. Schedule every 2-3 minutes. Job prompt must include the task-id, PID, log path, and status path so the future turn has enough context. Example job prompt: \"Check if PID <pid> is alive (kill -0). If alive: tail -n 20 <log>, post one-sentence progress update. If not alive: read <status> and tail <log>, post a final summary, then call cron tool with action=remove id=<this-cron-id>.\"",
-		"- When the monitor turn observes status=complete, it MUST call the cron tool with action=remove to clean up its own job. Do not leave stale monitors running."
+		"- Register a cron monitor using the `cron` tool with action=add. Required fields:",
+		"  • schedule: { kind: \"interval\", ms: 180000 }  (every 3 minutes; minimum 60000)",
+		"  • payload: { kind: \"agent\", sessionTarget: \"isolated\", text: <job prompt> }",
+		"  The job prompt must literally contain the task-id, PID, log path, and status path so the future turn has enough context without re-deriving them.",
+		"- Safe status read (inside the monitor turn):",
+		"  `status=$(cat \"<workdir>/task-<id>.status\" 2>/dev/null || echo missing)`",
+		"  Possible values: `running pid=<N> started=<ISO>`, `complete rc=<N> ended=<ISO>`, `aborted rc=<N> signal=<TERM|INT|HUP> ended=<ISO>`, or `missing` if the file was cleaned up.",
+		"- Monitor responsibilities each tick:",
+		"  • If status begins with `running`: tail -n 20 <log>, post a one-sentence progress line.",
+		"  • If status begins with `complete`: post a final summary with rc and tail, then call cron action=remove on this job id.",
+		"  • If status begins with `aborted`: post a failure summary with signal and tail, then call cron action=remove.",
+		"  • Never leave stale monitors running after the task finishes."
 	].join("\n");
 }
 
@@ -36544,7 +36583,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-CJjSOTnI.js");
+			const { sendMessageWhatsApp } = await import("./web-Cclb7FTq.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -53982,7 +54021,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-CJjSOTnI.js");
+	webChannelPromise ??= import("./web-Cclb7FTq.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/plugin-sdk/{web-CJjSOTnI.js → web-Cclb7FTq.js}

@@ -1,5 +1,5 @@
 import { a as WA_WEB_AUTH_DIR, g as webAuthExists, s as logWebSelfId, u as pickWebChannel } from "./accounts-D9zGZU5t.js";
-import "./reply-CGoJQT_s.js";
+import "./reply-4HEU7aDS.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import "./plugins-BbAvhC25.js";
@@ -45,7 +45,7 @@ import "./pi-embedded-helpers-BPvzgLtj.js";
 import "./paths-A0xdf3yk.js";
 import "./diagnostic-EyuCSUXO.js";
 import "./store-Do3t33-c.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-B6m8UOCl.js";
+import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-Dm-CzA1O.js";
 import "./image-aq-JAobP.js";
 import "./pi-model-discovery-LbcEa65a.js";
 import "./api-key-rotation-LTEeykrm.js";

package/dist/{plugins-DKDeQZF0.js → plugins-BAyxWQSz.js}

@@ -4,8 +4,8 @@ import { h as normalizeAccountId, m as DEFAULT_ACCOUNT_ID } from "./session-key-
 import { c as normalizeAnyChannelId, f as requireActivePluginRegistry, n as CHAT_CHANNEL_ORDER } from "./registry-Cja8eT7G.js";
 import { t as isTruthyEnvValue } from "./env-DPCHYPeH.js";
 import { t as normalizeChatType } from "./chat-type-DyovJwCt.js";
-import { h as createAccountListHelpers } from "./accounts-DDuIpcln.js";
-import { i as resolveDefaultAgentBoundAccountId, r as listBoundAccountIds } from "./bindings-DFaVVCsf.js";
+import { h as createAccountListHelpers } from "./accounts-Cd816n6l.js";
+import { i as resolveDefaultAgentBoundAccountId, r as listBoundAccountIds } from "./bindings-ChzePa8q.js";
 import fs from "node:fs";
 
 //#region src/channels/plugins/account-action-gate.ts

package/dist/{plugins-cli-DFyRjAtJ.js → plugins-cli-BWgjIJQL.js}

@@ -1,118 +1,118 @@
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { B as theme, S as shortenHomePath, g as resolveConfigDir, x as shortenHomeInString, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-DyjXROKp.js";
+import "./reply-CpNWtuU4.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
-import "./agent-scope-CgUHAtCo.js";
-import "./model-selection-CyFvYcRt.js";
+import "./agent-scope-BRwEc2pG.js";
+import "./model-selection-X1oLh3CE.js";
 import "./github-copilot-token-DAu1a6BX.js";
 import "./boolean-BsqeuxE6.js";
 import "./env-DPCHYPeH.js";
 import "./message-channel-aT-I_DTX.js";
-import "./send-CQVnyJyF.js";
-import { i as loadConfig, l as writeConfigFile } from "./config-Dz95lSBW.js";
+import "./send-BVBCh27_.js";
+import { i as loadConfig, l as writeConfigFile } from "./config-tNauHpdq.js";
 import { m as defaultSlotIdForKey, p as applyExclusiveSlotSelection, s as resolveBundledPluginsDir, t as clearPluginManifestRegistryCache } from "./manifest-registry-C4BxOMWX.js";
-import "./runner-DRv0uCK_.js";
-import "./image-BWmcNF8N.js";
-import "./models-config-CFFjJPe7.js";
+import "./runner-BAVs-p6Z.js";
+import "./image-lCS3o9xj.js";
+import "./models-config-CEMioDUi.js";
 import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-BgdB5kvy.js";
-import "./sandbox-B6N8cV4d.js";
-import "./chrome-DU2ZysN3.js";
+import "./pi-embedded-helpers-Bs4eMaNo.js";
+import "./sandbox-HZ_uilsn.js";
+import "./chrome-CSJzpT9Z.js";
 import { u as promptYesNo } from "./tailscale-D5dKabOc.js";
 import "./auth-B741uFtk.js";
-import "./server-context-CCBZN8a0.js";
+import "./server-context-VlF1_hYj.js";
 import "./frontmatter-DWQhtOo7.js";
-import "./skills-6jdJQ5ZL.js";
-import "./routes-BAZTZNuQ.js";
+import "./skills-DqQUtOph.js";
+import "./routes-CVwRcA9D.js";
 import "./redact-f-Q-hFt_.js";
 import "./errors-BF3TeRH2.js";
-import "./fs-safe-CUjO1ca2.js";
-import "./paths-BBm9fwuG.js";
+import "./fs-safe-CTDvb1DF.js";
+import "./paths-CT6jsi4E.js";
 import "./ssrf-BCYMnxkM.js";
-import "./image-ops-1OJMSAUX.js";
-import "./store-r1DJSDq-.js";
-import "./ports-BOmtxoTv.js";
+import "./image-ops-DYbDWaIA.js";
+import "./store-DvtcmOKj.js";
+import "./ports-OZQlocB7.js";
 import "./trash-DcMh1i4B.js";
-import "./sessions-Cpgnq0pA.js";
-import "./dock-BhS32F6E.js";
-import "./plugins-DKDeQZF0.js";
-import "./accounts-DDuIpcln.js";
-import "./accounts-bK-Yqdwx.js";
-import "./accounts-DyJN4_vR.js";
-import "./bindings-DFaVVCsf.js";
+import "./sessions-jTAGYjWl.js";
+import "./dock-BYiRZSgZ.js";
+import "./plugins-BAyxWQSz.js";
+import "./accounts-Cd816n6l.js";
+import "./accounts-CokRskCl.js";
+import "./accounts-mN_EcgxC.js";
+import "./bindings-ChzePa8q.js";
 import "./logging-w5jq5901.js";
-import "./send-DVm0du0_.js";
+import "./send-CXFTeD_J.js";
 import "./paths-CyhzMxFA.js";
-import "./tool-images-DvUBlqjX.js";
+import "./tool-images-B-pqX3nX.js";
 import "./tool-display-D8N3rsYt.js";
 import "./fetch-guard-DOPkVbh3.js";
-import "./api-key-rotation-CzuPlV2t.js";
-import "./local-roots-aAFLQGkY.js";
-import "./sqlite-Dx3J_aSE.js";
-import "./model-catalog-8Son0J4O.js";
+import "./api-key-rotation-CEr3lKih.js";
+import "./local-roots-BBeKX7PX.js";
+import "./sqlite-BV5ILFtC.js";
+import "./model-catalog-CvbwxWuC.js";
 import "./tokens-BuceUQDl.js";
-import "./with-timeout-CtVdu_1U.js";
-import "./deliver-B4KZ6-oZ.js";
+import "./with-timeout-Cm5EhxG_.js";
+import "./deliver-BYdNAEqj.js";
 import "./diagnostic-CH0skkp6.js";
 import "./diagnostic-session-state-CUslJyKP.js";
-import "./send-B3RdXvjC.js";
-import "./model-tWhwnFf8.js";
-import "./reply-prefix-CE2YmmsD.js";
-import "./memory-cli-DDumUksr.js";
-import "./manager-D4LJSRyZ.js";
+import "./send-DT-5buW5.js";
+import "./model-CeeOcylL.js";
+import "./reply-prefix-BLOOs1aW.js";
+import "./memory-cli-DhkRAIdT.js";
+import "./manager-C1CfGzZ2.js";
 import "./retry-BoS4e4X_.js";
-import "./target-errors-7AvoVa10.js";
+import "./target-errors-CCz79CmV.js";
 import "./chunk-1dhPX1NK.js";
-import "./markdown-tables-CEbN0fEm.js";
-import "./ir-DZam9q5M.js";
+import "./markdown-tables-ZwP14ydw.js";
+import "./ir-Dt4hOzxG.js";
 import "./render-CXDO_kgw.js";
-import "./commands-BNLCWX6e.js";
-import "./commands-registry-BT0-zzs3.js";
-import "./client-jI1oE0_k.js";
-import "./call-DwpGquzW.js";
-import "./pairing-token-CX3NN_qj.js";
+import "./commands-CtocZ4Lg.js";
+import "./commands-registry-BZ0ZSQpM.js";
+import "./client-Bj_vTpri.js";
+import "./call-tmHtVCkn.js";
+import "./pairing-token-AV-MMfVE.js";
 import "./channel-activity-BOiuJS3t.js";
 import "./fetch-DTNGXEzX.js";
-import "./tables-BEzT0Da4.js";
-import "./send-Bm4ULEzh.js";
-import "./pairing-store-CK726Dzq.js";
+import "./tables-C38rzF6E.js";
+import "./send-JWV62VbW.js";
+import "./pairing-store-B8ktu-6j.js";
 import "./proxy-DU7W9XSc.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
 import "./cli-utils-DN_hM6ov.js";
 import "./help-format-B_-M23wP.js";
 import "./progress-jIePzvGA.js";
-import "./resolve-route-BMoTaVAH.js";
-import "./replies-BMqtgBhh.js";
-import "./skill-commands-Cxw-jNxU.js";
-import "./workspace-dirs-GpkFi6Kw.js";
-import "./pi-auth-json-zHckislA.js";
+import "./resolve-route-BcnaXYvh.js";
+import "./replies-Dy92jzrz.js";
+import "./skill-commands-ZXbEITKi.js";
+import "./workspace-dirs-DKu48umx.js";
+import "./pi-auth-json-FpfHyEcu.js";
 import "./session-cost-usage-BXAI7CNH.js";
-import "./outbound-attachment-Bw-c5Cdp.js";
+import "./outbound-attachment-Qfh5dlsg.js";
 import "./delivery-queue-CAxX6nGq.js";
-import "./send-9SapUCg7.js";
-import "./onboard-helpers-DFvWPFhU.js";
+import "./send-DsSI8z3F.js";
+import "./onboard-helpers-CdPNw25E.js";
 import "./prompt-style-CnkMpSXt.js";
-import "./pairing-labels-DyXoD1DS.js";
+import "./pairing-labels-Dxb898X5.js";
 import "./exec-approvals-DXM2pQYL.js";
-import "./nodes-screen-8Bq7DiSa.js";
-import "./pi-tools.policy-DRWb_Cax.js";
-import "./control-service-BYKXzY4f.js";
+import "./nodes-screen-Cd49cSPb.js";
+import "./pi-tools.policy-BBxnqCay.js";
+import "./control-service-BBnhN7aZ.js";
 import "./stagger-CvFURHzt.js";
-import "./channel-selection-V2xDgw16.js";
-import { c as resolveArchiveKind } from "./install-safe-path-D3Uz77u7.js";
-import "./npm-registry-spec-C0CPT3vr.js";
-import "./skill-scanner-hMtQbWPV.js";
-import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-DQcRVF1U.js";
+import "./channel-selection-DaJDux-Q.js";
+import { c as resolveArchiveKind } from "./install-safe-path-D3mg1DMG.js";
+import "./npm-registry-spec-DchndI6P.js";
+import "./skill-scanner-w3DJvw1Q.js";
+import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-CYTVYWH_.js";
 import { t as renderTable } from "./table-BKlH0YlA.js";
-import { t as buildPluginStatusReport } from "./status-B2Qt-5kL.js";
-import { n as updateNpmInstalledPlugins } from "./update-Ya0e-JnM.js";
+import { t as buildPluginStatusReport } from "./status-DzHL-eVu.js";
+import { n as updateNpmInstalledPlugins } from "./update-Don6XTH9.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 
 //#region src/plugins/source-display.ts
 function tryRelative(root, filePath) {
@@ -274,9 +274,9 @@ async function uninstallPlugin(params) {
 		extensionsDir
 	}) : null;
 	if (deleteTarget) {
-		const existed = await fs$1.access(deleteTarget).then(() => true).catch(() => false) ?? false;
+		const existed = await fsPromises.access(deleteTarget).then(() => true).catch(() => false) ?? false;
 		try {
-			await fs$1.rm(deleteTarget, {
+			await fsPromises.rm(deleteTarget, {
 				recursive: true,
 				force: true
 			});