@symerian/symi 2.6.42 → 2.7.0

package/dist/{gateway-cli-BguO9yV4.js → gateway-cli-C1zPKZ7B.js}

@@ -1,156 +1,156 @@
 import { _ as expandHomePrefix, g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, E as truncateUtf16Safe, H as getLogger, P as setVerbose, R as colorize, S as shortenHomePath, U as getResolvedLoggerSettings, V as getChildLogger, c as ensureDir, t as CONFIG_DIR, y as resolveUserPath, z as isRich } from "./utils-B-0b9bGM.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-EAliFiVK.js";
-import { $ as buildDeliveryFromLegacyPayload, A as emitGatewayRestart, An as initSubagentRegistry, Ar as extractImageContentFromSource, B as summarizeRestartSentinel, Bn as registerAgentRunContext, Ct as requestBodyErrorToText, Dr as DEFAULT_INPUT_MAX_REDIRECTS, E as resetDirectoryCache, Er as DEFAULT_INPUT_IMAGE_MIMES, Et as agentCommand, F as setPreRestartDeferralCheck, Fn as readLatestAssistantReply, Gt as getCliSessionId, I as consumeRestartSentinel, In as clearAgentRunContext, J as normalizeOptionalSessionKey, K as inferLegacyName, Kt as setCliSessionId, Ln as emitAgentEvent, Lt as createDefaultDeps, M as markGatewaySigusr1RestartHandled, Mr as resolveInputFileLimits, Mt as resolveOutboundTarget, Nt as resolveSessionDeliveryTarget, O as consumeGatewaySigusr1RestartAuthorization, On as countActiveDescendantRuns, Or as DEFAULT_INPUT_TIMEOUT_MS, P as setGatewaySigusr1RestartPolicy, Pn as runSubagentAnnounceFlow, Pr as resolveAgentTimeoutMs, Pt as createOutboundSendDeps, Q as migrateLegacyCronPayload, R as formatRestartSentinelMessage, Rn as getAgentRunContext, St as readJsonBodyWithLimit, Tr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as sleepWithAbort, U as normalizeHttpWebhookUrl, Ut as resolveModelProfile, Vt as getActiveEmbeddedRunCount, Wt as runWithModelFallback, X as normalizePayloadToSystemText, Xt as resolveAgentAvatar, Y as normalizeOptionalText, Z as normalizeRequiredName, _ as loadCombinedSessionStoreForGateway, ar as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, d as createSymiTools, en as buildSafeExternalPrompt, et as hasLegacyDeliveryHints, f as resolveAnnounceTargetFromKey, fr as stripHeartbeatToken, ft as loadSymiPlugins, g as listSessionsFromStore, hn as getTotalPendingReplies, i as resolveCronStyleNow, ir as resetAllLanes, j as isGatewaySigusr1RestartExternallyAllowed, jn as listDescendantRunsForRequester, jr as normalizeMimeList, k as deferGatewayRestartUntilIdle, kn as countActiveRunsForSession, kr as extractFileContentFromSource, l as applyToolPolicyPipeline, nn as getHookType, or as waitForActiveTasks, pr as lookupContextTokens, q as normalizeOptionalAgentId, qt as runCliAgent, rn as isExternalHookSession, rr as getTotalQueueSize, sr as CommandLane, st as requestHeartbeatNow, tn as detectSuspiciousPatterns, tr as getActiveTaskCount, tt as stripLegacyDeliveryFields, u as buildDefaultToolPolicyPipelineSteps, ut as getPluginToolMeta, v as loadSessionEntry, w as resolveOutboundSessionRoute, wt as computeBackoff, xr as enqueueSystemEvent, xt as handleSlackHttpRequest, zn as onAgentEvent, zt as runAgentTurn } from "./reply-DyjXROKp.js";
+import { $ as buildDeliveryFromLegacyPayload, A as emitGatewayRestart, An as initSubagentRegistry, Ar as extractImageContentFromSource, B as summarizeRestartSentinel, Bn as registerAgentRunContext, Ct as requestBodyErrorToText, Dr as DEFAULT_INPUT_MAX_REDIRECTS, E as resetDirectoryCache, Er as DEFAULT_INPUT_IMAGE_MIMES, Et as agentCommand, F as setPreRestartDeferralCheck, Fn as readLatestAssistantReply, Gt as getCliSessionId, I as consumeRestartSentinel, In as clearAgentRunContext, J as normalizeOptionalSessionKey, K as inferLegacyName, Kt as setCliSessionId, Ln as emitAgentEvent, Lt as createDefaultDeps, M as markGatewaySigusr1RestartHandled, Mr as resolveInputFileLimits, Mt as resolveOutboundTarget, Nt as resolveSessionDeliveryTarget, O as consumeGatewaySigusr1RestartAuthorization, On as countActiveDescendantRuns, Or as DEFAULT_INPUT_TIMEOUT_MS, P as setGatewaySigusr1RestartPolicy, Pn as runSubagentAnnounceFlow, Pr as resolveAgentTimeoutMs, Pt as createOutboundSendDeps, Q as migrateLegacyCronPayload, R as formatRestartSentinelMessage, Rn as getAgentRunContext, St as readJsonBodyWithLimit, Tr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as sleepWithAbort, U as normalizeHttpWebhookUrl, Ut as resolveModelProfile, Vt as getActiveEmbeddedRunCount, Wt as runWithModelFallback, X as normalizePayloadToSystemText, Xt as resolveAgentAvatar, Y as normalizeOptionalText, Z as normalizeRequiredName, _ as loadCombinedSessionStoreForGateway, ar as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, d as createSymiTools, en as buildSafeExternalPrompt, et as hasLegacyDeliveryHints, f as resolveAnnounceTargetFromKey, fr as stripHeartbeatToken, ft as loadSymiPlugins, g as listSessionsFromStore, hn as getTotalPendingReplies, i as resolveCronStyleNow, ir as resetAllLanes, j as isGatewaySigusr1RestartExternallyAllowed, jn as listDescendantRunsForRequester, jr as normalizeMimeList, k as deferGatewayRestartUntilIdle, kn as countActiveRunsForSession, kr as extractFileContentFromSource, l as applyToolPolicyPipeline, nn as getHookType, or as waitForActiveTasks, pr as lookupContextTokens, q as normalizeOptionalAgentId, qt as runCliAgent, rn as isExternalHookSession, rr as getTotalQueueSize, sr as CommandLane, st as requestHeartbeatNow, tn as detectSuspiciousPatterns, tr as getActiveTaskCount, tt as stripLegacyDeliveryFields, u as buildDefaultToolPolicyPipelineSteps, ut as getPluginToolMeta, v as loadSessionEntry, w as resolveOutboundSessionRoute, wt as computeBackoff, xr as enqueueSystemEvent, xt as handleSlackHttpRequest, zn as onAgentEvent, zt as runAgentTurn } from "./reply-CpNWtuU4.js";
 import { S as parseAgentSessionKey, c as normalizeMainKey, f as toAgentRequestSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, p as toAgentStoreSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey, y as isCronRunSessionKey } from "./session-key-DCt45XZa.js";
-import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
+import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-MF6_6SCS.js";
 import { C as createInternalHookEvent, S as clearInternalHooks, T as triggerInternalHook, m as createEmptyPluginRegistry, r as DEFAULT_CHAT_CHANNEL, w as registerInternalHook } from "./registry-Cja8eT7G.js";
 import { a as setConsoleSubsystemFilter, f as defaultRuntime, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { i as logDebug, n as runExec, s as logWarn, t as runCommandWithTimeout } from "./exec-CWkblSrI.js";
-import { C as ensureAgentWorkspace, D as resolveDefaultAgentWorkspaceDir, O as resolveWorkspaceTemplateDir, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter } from "./agent-scope-CgUHAtCo.js";
-import { Gt as DEFAULT_MODEL, Kt as DEFAULT_PROVIDER, Rt as isPidAlive, Wt as DEFAULT_CONTEXT_TOKENS, a as getModelRefStatus, d as resolveAllowedModelRef, h as resolveHooksGmailModel, o as isCliProvider, p as resolveConfiguredModelRef, y as resolveThinkingDefault } from "./model-selection-CyFvYcRt.js";
+import { C as ensureAgentWorkspace, D as resolveDefaultAgentWorkspaceDir, O as resolveWorkspaceTemplateDir, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter } from "./agent-scope-BRwEc2pG.js";
+import { Gt as DEFAULT_MODEL, Kt as DEFAULT_PROVIDER, Rt as isPidAlive, Wt as DEFAULT_CONTEXT_TOKENS, a as getModelRefStatus, d as resolveAllowedModelRef, h as resolveHooksGmailModel, o as isCliProvider, p as resolveConfiguredModelRef, y as resolveThinkingDefault } from "./model-selection-X1oLh3CE.js";
 import "./github-copilot-token-DAu1a6BX.js";
 import { t as formatCliCommand } from "./command-format-COaS-S7B.js";
 import "./boolean-BsqeuxE6.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DPCHYPeH.js";
 import { _ as normalizeGatewayClientMode, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient } from "./message-channel-aT-I_DTX.js";
-import "./send-CQVnyJyF.js";
-import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-Dz95lSBW.js";
+import "./send-BVBCh27_.js";
+import { B as resolveAgentMaxConcurrent, C as parseDurationMs, H as VERSION, U as resolveRuntimeServiceVersion, V as resolveSubagentMaxConcurrent, i as loadConfig, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-tNauHpdq.js";
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-C4BxOMWX.js";
 import { a as isPathInsideWithRealpath } from "./legacy-names-Be3msDZo.js";
-import { d as registerUnhandledRejectionHandler } from "./runner-DRv0uCK_.js";
-import "./image-BWmcNF8N.js";
-import "./models-config-CFFjJPe7.js";
+import { d as registerUnhandledRejectionHandler } from "./runner-BAVs-p6Z.js";
+import "./image-lCS3o9xj.js";
+import "./models-config-CEMioDUi.js";
 import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-BgdB5kvy.js";
-import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-B6N8cV4d.js";
-import "./chrome-DU2ZysN3.js";
+import "./pi-embedded-helpers-Bs4eMaNo.js";
+import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-HZ_uilsn.js";
+import "./chrome-CSJzpT9Z.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-D5dKabOc.js";
 import { t as safeEqualSecret } from "./secret-equal-D7A3Bol7.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-B2SPYrh4.js";
 import { a as isTrustedProxyAddress, d as resolveGatewayListenHosts, f as resolveHostName, l as resolveClientIp, n as isLoopbackAddress, o as isValidIPv4, r as isLoopbackHost, s as normalizeHostHeader, t as rawDataToString, u as resolveGatewayBindHost } from "./ws-C7EXRv8z.js";
 import { a as resolveGatewayAuth, c as createAuthRateLimiter, i as isLocalDirectRequest, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-B741uFtk.js";
-import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-CCBZN8a0.js";
+import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-VlF1_hYj.js";
 import { d as hasBinary } from "./frontmatter-DWQhtOo7.js";
-import { r as buildWorkspaceSkillSnapshot } from "./skills-6jdJQ5ZL.js";
-import "./routes-BAZTZNuQ.js";
+import { r as buildWorkspaceSkillSnapshot } from "./skills-DqQUtOph.js";
+import "./routes-CVwRcA9D.js";
 import "./redact-f-Q-hFt_.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-BF3TeRH2.js";
-import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CUjO1ca2.js";
-import "./paths-BBm9fwuG.js";
+import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CTDvb1DF.js";
+import "./paths-CT6jsi4E.js";
 import { t as SsrFBlockedError } from "./ssrf-BCYMnxkM.js";
-import { c as detectMime } from "./image-ops-1OJMSAUX.js";
-import "./store-r1DJSDq-.js";
-import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-BOmtxoTv.js";
+import { c as detectMime } from "./image-ops-DYbDWaIA.js";
+import "./store-DvtcmOKj.js";
+import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-OZQlocB7.js";
 import "./trash-DcMh1i4B.js";
-import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-Cpgnq0pA.js";
-import "./dock-BhS32F6E.js";
-import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-DKDeQZF0.js";
-import { n as resolveWhatsAppAccount } from "./accounts-DDuIpcln.js";
-import "./accounts-bK-Yqdwx.js";
-import "./accounts-DyJN4_vR.js";
-import { t as buildChannelAccountBindings } from "./bindings-DFaVVCsf.js";
+import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-jTAGYjWl.js";
+import "./dock-BYiRZSgZ.js";
+import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-BAyxWQSz.js";
+import { n as resolveWhatsAppAccount } from "./accounts-Cd816n6l.js";
+import "./accounts-CokRskCl.js";
+import "./accounts-mN_EcgxC.js";
+import { t as buildChannelAccountBindings } from "./bindings-ChzePa8q.js";
 import "./logging-w5jq5901.js";
-import "./send-DVm0du0_.js";
+import "./send-CXFTeD_J.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, s as resolveSessionTranscriptsDirForAgent } from "./paths-CyhzMxFA.js";
-import "./tool-images-DvUBlqjX.js";
+import "./tool-images-B-pqX3nX.js";
 import "./tool-display-D8N3rsYt.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-DOPkVbh3.js";
-import "./api-key-rotation-CzuPlV2t.js";
-import "./local-roots-aAFLQGkY.js";
-import "./sqlite-Dx3J_aSE.js";
-import { n as loadModelCatalog } from "./model-catalog-8Son0J4O.js";
+import "./api-key-rotation-CEr3lKih.js";
+import "./local-roots-BBeKX7PX.js";
+import "./sqlite-BV5ILFtC.js";
+import { n as loadModelCatalog } from "./model-catalog-CvbwxWuC.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-BuceUQDl.js";
-import { r as getMachineDisplayName } from "./with-timeout-CtVdu_1U.js";
-import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-B4KZ6-oZ.js";
+import { r as getMachineDisplayName } from "./with-timeout-Cm5EhxG_.js";
+import { C as getGlobalHookRunner, T as runGlobalGatewayStopSafely, t as deliverOutboundPayloads } from "./deliver-BYdNAEqj.js";
 import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-CH0skkp6.js";
 import "./diagnostic-session-state-CUslJyKP.js";
-import "./send-B3RdXvjC.js";
-import "./model-tWhwnFf8.js";
-import { a as resolveAgentIdentity } from "./reply-prefix-CE2YmmsD.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DDumUksr.js";
-import { i as resolveMemorySearchConfig } from "./manager-D4LJSRyZ.js";
+import "./send-DT-5buW5.js";
+import "./model-CeeOcylL.js";
+import { a as resolveAgentIdentity } from "./reply-prefix-BLOOs1aW.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DhkRAIdT.js";
+import { i as resolveMemorySearchConfig } from "./manager-C1CfGzZ2.js";
 import "./retry-BoS4e4X_.js";
-import { a as ToolInputError } from "./target-errors-7AvoVa10.js";
+import { a as ToolInputError } from "./target-errors-CCz79CmV.js";
 import "./chunk-1dhPX1NK.js";
-import "./markdown-tables-CEbN0fEm.js";
-import "./ir-DZam9q5M.js";
+import "./markdown-tables-ZwP14ydw.js";
+import "./ir-Dt4hOzxG.js";
 import "./render-CXDO_kgw.js";
-import { r as isRestartEnabled } from "./commands-BNLCWX6e.js";
-import "./commands-registry-BT0-zzs3.js";
-import { $t as verifyDeviceSignature, At as PROTOCOL_VERSION, Ft as buildDeviceAuthPayload, Ht as requestDevicePairing, It as approveDevicePairing, Jt as roleScopesAllow, Kt as updatePairedDeviceMetadata, Lt as ensureDeviceToken, Mt as errorShape, Qt as normalizeDevicePublicKeyBase64Url, R as validateExecApprovalRequestParams, Rt as getPairedDevice, Xt as deriveDeviceIdFromPublicKey, at as validateRequestFrame, jt as ErrorCodes, n as formatValidationErrors, qt as verifyDeviceToken, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-jI1oE0_k.js";
-import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-DwpGquzW.js";
-import "./pairing-token-CX3NN_qj.js";
+import { r as isRestartEnabled } from "./commands-CtocZ4Lg.js";
+import "./commands-registry-BZ0ZSQpM.js";
+import { $t as verifyDeviceSignature, At as PROTOCOL_VERSION, Ft as buildDeviceAuthPayload, Ht as requestDevicePairing, It as approveDevicePairing, Jt as roleScopesAllow, Kt as updatePairedDeviceMetadata, Lt as ensureDeviceToken, Mt as errorShape, Qt as normalizeDevicePublicKeyBase64Url, R as validateExecApprovalRequestParams, Rt as getPairedDevice, Xt as deriveDeviceIdFromPublicKey, at as validateRequestFrame, jt as ErrorCodes, n as formatValidationErrors, qt as verifyDeviceToken, w as validateConnectParams, z as validateExecApprovalResolveParams } from "./client-Bj_vTpri.js";
+import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-tmHtVCkn.js";
+import "./pairing-token-AV-MMfVE.js";
 import "./channel-activity-BOiuJS3t.js";
 import "./fetch-DTNGXEzX.js";
-import "./tables-BEzT0Da4.js";
-import "./send-Bm4ULEzh.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-CK726Dzq.js";
+import "./tables-C38rzF6E.js";
+import "./send-JWV62VbW.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-B8ktu-6j.js";
 import "./proxy-DU7W9XSc.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
 import { n as runCommandWithRuntime } from "./cli-utils-DN_hM6ov.js";
 import { t as formatHelpExamples } from "./help-format-B_-M23wP.js";
 import { n as withProgress } from "./progress-jIePzvGA.js";
-import "./resolve-route-BMoTaVAH.js";
-import "./replies-BMqtgBhh.js";
-import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-Cxw-jNxU.js";
-import "./workspace-dirs-GpkFi6Kw.js";
-import "./pi-auth-json-zHckislA.js";
+import "./resolve-route-BcnaXYvh.js";
+import "./replies-Dy92jzrz.js";
+import { S as registerSkillsChangeListener, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, l as refreshRemoteBinsForConnectedNodes, o as getRemoteSkillEligibility, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion } from "./skill-commands-ZXbEITKi.js";
+import "./workspace-dirs-DKu48umx.js";
+import "./pi-auth-json-FpfHyEcu.js";
 import { c as hasNonzeroUsage, s as deriveSessionTotalTokens } from "./session-cost-usage-BXAI7CNH.js";
-import "./outbound-attachment-Bw-c5Cdp.js";
+import "./outbound-attachment-Qfh5dlsg.js";
 import "./delivery-queue-CAxX6nGq.js";
-import "./send-9SapUCg7.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-DFvWPFhU.js";
+import "./send-DsSI8z3F.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-CdPNw25E.js";
 import "./prompt-style-CnkMpSXt.js";
-import "./pairing-labels-DyXoD1DS.js";
+import "./pairing-labels-Dxb898X5.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-BgUx3Bm4.js";
 import { t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-DXM2pQYL.js";
-import "./nodes-screen-8Bq7DiSa.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-DRWb_Cax.js";
-import "./control-service-BYKXzY4f.js";
+import "./nodes-screen-Cd49cSPb.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BBxnqCay.js";
+import "./control-service-BBnhN7aZ.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-CvFURHzt.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-V2xDgw16.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-DaJDux-Q.js";
 import { i as onHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-ChEo5Zvk.js";
 import { t as ensureSymiCliOnPath } from "./path-env-BaQ2E7uD.js";
 import "./runtime-guard-Dik20CVM.js";
-import { t as forceFreePortAndWait } from "./ports-DtW62rqS.js";
+import { t as forceFreePortAndWait } from "./ports-u9lWy2Jt.js";
 import "./catalog-NQ4pj9RI.js";
-import "./skills-status-C3ptXwnh.js";
+import "./skills-status-Cjsh8we0.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BvU3-DRl.js";
 import { n as inheritOptionFromParent } from "./command-options-BkTXKWlb.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-DnjQ73f_.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-CP0nONRL.js";
-import "./install-safe-path-D3Uz77u7.js";
-import "./skill-scanner-hMtQbWPV.js";
-import "./channels-status-issues-CJ0Vb_9z.js";
-import "./daemon-runtime-mE1b-Q48.js";
-import "./systemd-DT6SbCim.js";
-import "./service-osK70kTZ.js";
-import "./lifecycle-core-C4HzGXA1.js";
-import "./systemd-hints-xYZbFny_.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-DwIrzVOA.js";
+import "./install-safe-path-D3mg1DMG.js";
+import "./skill-scanner-w3DJvw1Q.js";
+import "./channels-status-issues-B_PI3nEE.js";
+import "./daemon-runtime-u01h46bE.js";
+import "./systemd-CevHlgD4.js";
+import "./service-D80PyJxB.js";
+import "./lifecycle-core-DxmxQdhS.js";
+import "./systemd-hints-DmgRnw1L.js";
 import { t as parsePort$1 } from "./parse-port-DnJYkByg.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-DSDcmWOi.js";
-import "./diagnostics-BRwihzJG.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-BccZzUb0.js";
+import "./diagnostics-BrUo0gqs.js";
 import "./table-BKlH0YlA.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CyVOLgNE.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-DnmJ0ABB.js";
-import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-DB9YkTVX.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BV7WhIkY.js";
+import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-Djfdh06o.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-DUQ6tE92.js";
-import { r as pickGatewaySelfPresence } from "./status-ZPW5EACm.js";
-import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-D3w4YMlC.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B7moDVHX.js";
-import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-7EzEjSzb.js";
-import { t as runOnboardingWizard } from "./onboarding-CGNpTyg2.js";
-import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-CW8eFTGD.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-CObVeJLC.js";
+import { r as pickGatewaySelfPresence } from "./status-nzJEZmNT.js";
+import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-o847FIt1.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-6n-YayeS.js";
+import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-DCo5RtKp.js";
+import { t as runOnboardingWizard } from "./onboarding-Dn5agNG_.js";
+import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-IBEaQXPX.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-DqFdzIkc.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-Dq6vwkWW.js";
-import "./agents.config-BEVb1Pyx.js";
-import "./dm-policy-shared-DlDAGtZL.js";
-import "./node-service-CD47Qpf1.js";
-import "./status.update-CG0ciGaf.js";
-import "./skills-install-CWVdJkLn.js";
-import "./update-runner-BRKFzAwV.js";
-import { t as resolveAgentSessionDirs } from "./session-dirs-Dgz7kkUM.js";
+import "./agents.config-Dib8Uo2P.js";
+import "./dm-policy-shared-epgkayyq.js";
+import "./node-service-CXzMs782.js";
+import "./status.update-TlYwuzTa.js";
+import "./skills-install-HGYidhrv.js";
+import "./update-runner-AsKAxe31.js";
+import { t as resolveAgentSessionDirs } from "./session-dirs-DPzjjra2.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-B4H-2N8y.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
@@ -159,7 +159,7 @@ import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
 import chalk from "chalk";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { spawn } from "node:child_process";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
@@ -1152,7 +1152,7 @@ function shouldSkipCheck(allowInTests) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fs$1.readFile(statePath, "utf-8");
+		const raw = await fsPromises.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1160,8 +1160,8 @@ async function readState(statePath) {
 	}
 }
 async function writeState(statePath, state) {
-	await fs$1.mkdir(path.dirname(statePath), { recursive: true });
-	await fs$1.writeFile(statePath, JSON.stringify(state, null, 2), "utf-8");
+	await fsPromises.mkdir(path.dirname(statePath), { recursive: true });
+	await fsPromises.writeFile(statePath, JSON.stringify(state, null, 2), "utf-8");
 }
 function sameUpdateAvailable(a, b) {
 	if (a === b) return true;
@@ -6458,7 +6458,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.SYMI_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.SYMI_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-BYKXzY4f.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-BBnhN7aZ.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -6686,7 +6686,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fs$1.lstat(candidate);
+		const st = await fsPromises.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -6723,8 +6723,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fs$1.stat(indexPath);
-		await fs$1.stat(bundlePath);
+		await fsPromises.stat(indexPath);
+		await fsPromises.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -6733,7 +6733,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -6954,13 +6954,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fs$1.realpath(rootDir);
+	const rootReal = await fsPromises.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fs$1.stat(indexPath);
+		await fsPromises.stat(indexPath);
 	} catch {
 		try {
-			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -7385,15 +7385,30 @@ function serveFile(res, filePath) {
 	res.end(fs.readFileSync(filePath));
 }
 /** Cache-bust token: changes every time the gateway process starts. */
-const CACHE_BUST = `v=${Date.now()}`;
+const CACHE_BUST_VERSION = `${Date.now()}`;
+/**
+* Matches `<script src="..."` or `<link ... href="..."` (or single-quoted),
+* capturing: (1) the tag + attr lead-in, (2) the opening quote, (3) the URL,
+* (4) the closing quote (back-reference to ensure quotes match). The URL
+* capture is non-greedy and restricted to `.js`, `.mjs`, or `.css` so unrelated
+* links (fonts, favicons, `type="module"` without src, etc.) are left alone.
+*
+* Tag matching is loose (`[^>]*`) so attribute order and optional attributes
+* like `type="module"` or `rel="stylesheet preload"` don't break the match.
+*/
+const CACHE_BUST_TAG_RE = /(<(?:script|link)\b[^>]*?\b(?:src|href)\s*=\s*)(["'])([^"'>]+?\.(?:mjs|js|css)(?:\?[^"'>]*)?)(\2)/gi;
+function injectCacheBust(html, version = CACHE_BUST_VERSION) {
+	return html.replace(CACHE_BUST_TAG_RE, (match, lead, open, url, close) => {
+		if (/^(https?:)?\/\//i.test(url)) return match;
+		if (/[?&]v=/.test(url)) return match;
+		return `${lead}${open}${url}${url.includes("?") ? "&" : "?"}v=${version}${close}`;
+	});
+}
 function serveIndexHtml(res, indexPath) {
 	res.setHeader("Content-Type", "text/html; charset=utf-8");
 	res.setHeader("Cache-Control", "no-cache");
-	let html = fs.readFileSync(indexPath, "utf8");
-	html = html.replace(/(<(?:script\s+src|link\s+rel="stylesheet"\s+href)=")([^"]+\.(?:js|css))(")/g, (_, before, url, after) => {
-		return `${before}${url}${url.includes("?") ? "&" : "?"}${CACHE_BUST}${after}`;
-	});
-	res.end(html);
+	const html = fs.readFileSync(indexPath, "utf8");
+	res.end(injectCacheBust(html));
 }
 function isSafeRelativePath(relPath) {
 	if (!relPath) return false;
@@ -9793,7 +9808,7 @@ function resolveGatewayOwnerStatus(pid, payload, platform) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fsPromises.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -9827,11 +9842,11 @@ async function acquireGatewayLock(opts = {}) {
 	const staleMs = opts.staleMs ?? DEFAULT_STALE_MS;
 	const platform = opts.platform ?? process.platform;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
+	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fs$1.open(lockPath, "wx");
+		const handle = await fsPromises.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -9845,7 +9860,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fs$1.rm(lockPath, { force: true });
+				await fsPromises.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -9854,7 +9869,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? resolveGatewayOwnerStatus(ownerPid, lastPayload, platform) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fs$1.rm(lockPath, { force: true });
+			await fsPromises.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -9864,13 +9879,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fs$1.stat(lockPath);
+				const st = await fsPromises.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = true;
 			}
 			if (stale) {
-				await fs$1.rm(lockPath, { force: true });
+				await fsPromises.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -11775,7 +11790,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-CAxX6nGq.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-B4KZ6-oZ.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BYdNAEqj.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),
@@ -11848,7 +11863,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-DoIZyE9O.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-D3tAmqKX.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,

package/dist/{gateway-cli-Dc1RT_b9.js → gateway-cli-zbVm1MBQ.js}

@@ -22,7 +22,7 @@ import "./pairing-token-Byh6drgn.js";
 import { t as safeEqualSecret } from "./secret-equal-CbntzRkh.js";
 import { a as isValidIPv4, c as resolveClientIp, d as resolveHostName, f as rawDataToString, i as isTrustedProxyAddress, l as resolveGatewayBindHost, n as isLoopbackHost, o as normalizeHostHeader, t as isLoopbackAddress, u as resolveGatewayListenHosts } from "./net-DZ5Ayk-W.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-Cmumpn76.js";
-import { $ as getCliSessionId, $t as setPreRestartDeferralCheck, An as DEFAULT_INPUT_TIMEOUT_MS, At as normalizeOptionalSessionKey, Bt as buildSafeExternalPrompt, Cn as enqueueSystemEvent, Cr as onAgentEvent, Dn as DEFAULT_INPUT_IMAGE_MAX_BYTES, E as createDefaultDeps, F as buildHistoryContextFromEntries, Ft as buildDeliveryFromLegacyPayload, H as getTotalPendingReplies, Ht as getHookType, In as resolveAgentTimeoutMs, It as hasLegacyDeliveryHints, J as runAgentTurn, Jt as emitGatewayRestart, Kt as consumeGatewaySigusr1RestartAuthorization, Lt as stripLegacyDeliveryFields, Mn as extractImageContentFromSource, Mt as normalizePayloadToSystemText, Nn as normalizeMimeList, Nt as normalizeRequiredName, O as resolveAgentAvatar, On as DEFAULT_INPUT_IMAGE_MIMES, Ot as inferLegacyName, Pn as resolveInputFileLimits, Pt as migrateLegacyCronPayload, Q as resolveModelProfile, Qt as setGatewaySigusr1RestartPolicy, Sr as getAgentRunContext, St as summarizeRestartSentinel, T as createOutboundSendDeps, Tt as normalizeHttpWebhookUrl, Ut as isExternalHookSession, Vt as detectSuspiciousPatterns, X as getActiveEmbeddedRunCount, Xt as markGatewaySigusr1RestartHandled, Yt as isGatewaySigusr1RestartExternallyAllowed, _ as readJsonBodyWithLimit, at as resolveAnnounceTargetFromKey, b as sleepWithAbort, br as clearAgentRunContext, bt as formatRestartSentinelMessage, cr as getActiveTaskCount, ct as resolveOutboundSessionRoute, dn as requestHeartbeatNow, dr as resetAllLanes, dt as resolveOutboundTarget, et as setCliSessionId, f as getPluginToolMeta, fr as setCommandLaneConcurrency, ft as resolveSessionDeliveryTarget, g as handleSlackHttpRequest, gt as runWithModelFallback, hr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, i as listDescendantRunsForRequester, it as readLatestAssistantReply, jn as extractFileContentFromSource, jt as normalizeOptionalText, kn as DEFAULT_INPUT_MAX_REDIRECTS, kt as normalizeOptionalAgentId, l as applyToolPolicyPipeline, m as loadSymiPlugins, mr as CommandLane, mt as resetDirectoryCache, n as countActiveRunsForSession, pr as waitForActiveTasks, q as resolveCronStyleNow, qt as deferGatewayRestartUntilIdle, r as initSubagentRegistry, rt as createSymiTools, s as runSubagentAnnounceFlow, t as countActiveDescendantRuns, tt as runCliAgent, u as buildDefaultToolPolicyPipelineSteps, ur as getTotalQueueSize, v as requestBodyErrorToText, vt as consumeRestartSentinel, wr as registerAgentRunContext, x as agentCommand, xr as emitAgentEvent, y as computeBackoff, yr as stripHeartbeatToken } from "./subagent-registry-DQHg3jUV.js";
+import { $ as getCliSessionId, $t as setPreRestartDeferralCheck, An as DEFAULT_INPUT_TIMEOUT_MS, At as normalizeOptionalSessionKey, Bt as buildSafeExternalPrompt, Cn as enqueueSystemEvent, Cr as onAgentEvent, Dn as DEFAULT_INPUT_IMAGE_MAX_BYTES, E as createDefaultDeps, F as buildHistoryContextFromEntries, Ft as buildDeliveryFromLegacyPayload, H as getTotalPendingReplies, Ht as getHookType, In as resolveAgentTimeoutMs, It as hasLegacyDeliveryHints, J as runAgentTurn, Jt as emitGatewayRestart, Kt as consumeGatewaySigusr1RestartAuthorization, Lt as stripLegacyDeliveryFields, Mn as extractImageContentFromSource, Mt as normalizePayloadToSystemText, Nn as normalizeMimeList, Nt as normalizeRequiredName, O as resolveAgentAvatar, On as DEFAULT_INPUT_IMAGE_MIMES, Ot as inferLegacyName, Pn as resolveInputFileLimits, Pt as migrateLegacyCronPayload, Q as resolveModelProfile, Qt as setGatewaySigusr1RestartPolicy, Sr as getAgentRunContext, St as summarizeRestartSentinel, T as createOutboundSendDeps, Tt as normalizeHttpWebhookUrl, Ut as isExternalHookSession, Vt as detectSuspiciousPatterns, X as getActiveEmbeddedRunCount, Xt as markGatewaySigusr1RestartHandled, Yt as isGatewaySigusr1RestartExternallyAllowed, _ as readJsonBodyWithLimit, at as resolveAnnounceTargetFromKey, b as sleepWithAbort, br as clearAgentRunContext, bt as formatRestartSentinelMessage, cr as getActiveTaskCount, ct as resolveOutboundSessionRoute, dn as requestHeartbeatNow, dr as resetAllLanes, dt as resolveOutboundTarget, et as setCliSessionId, f as getPluginToolMeta, fr as setCommandLaneConcurrency, ft as resolveSessionDeliveryTarget, g as handleSlackHttpRequest, gt as runWithModelFallback, hr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, i as listDescendantRunsForRequester, it as readLatestAssistantReply, jn as extractFileContentFromSource, jt as normalizeOptionalText, kn as DEFAULT_INPUT_MAX_REDIRECTS, kt as normalizeOptionalAgentId, l as applyToolPolicyPipeline, m as loadSymiPlugins, mr as CommandLane, mt as resetDirectoryCache, n as countActiveRunsForSession, pr as waitForActiveTasks, q as resolveCronStyleNow, qt as deferGatewayRestartUntilIdle, r as initSubagentRegistry, rt as createSymiTools, s as runSubagentAnnounceFlow, t as countActiveDescendantRuns, tt as runCliAgent, u as buildDefaultToolPolicyPipelineSteps, ur as getTotalQueueSize, v as requestBodyErrorToText, vt as consumeRestartSentinel, wr as registerAgentRunContext, x as agentCommand, xr as emitAgentEvent, y as computeBackoff, yr as stripHeartbeatToken } from "./subagent-registry-CzS4CfnV.js";
 import { D as resolveSessionResetPolicy, F as resolveMainSessionKey, H as cleanStaleLockFiles, I as resolveMainSessionKeyFromConfig, K as mergeDeliveryContext, M as canonicalizeMainSessionAlias, N as resolveAgentMainSessionKey, T as evaluateSessionFreshness, W as deliveryContextFromSession, d as updateSessionStore, n as parseSessionThreadInfo, o as loadSessionStore } from "./sessions-Cfa6JEB3.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-Csntmwwn.js";
 import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
@@ -131,20 +131,20 @@ import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } fr
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BtG9rny3.js";
 import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-BjI_Yyr5.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-CA_XIzr_.js";
-import { i as pickGatewaySelfPresence } from "./status-DfPfMVNZ.js";
-import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-cVvZdeDu.js";
+import { i as pickGatewaySelfPresence } from "./status-BJtbD-cG.js";
+import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-DQEqLYg1.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-ZdimP1aU.js";
-import { t as runOnboardingWizard } from "./onboarding-Dp7p6zKa.js";
-import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-CWcLut3F.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-CYC70eKy.js";
+import { t as runOnboardingWizard } from "./onboarding-DktESmTv.js";
+import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-B0pdetGJ.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-BylbQyP9.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CzWeiE-Y.js";
-import "./agents.config-BKCY6F2A.js";
+import "./agents.config-5PTwsijs.js";
 import "./dm-policy-shared-DJ-61hCT.js";
 import "./node-service-fcZExd22.js";
 import "./status.update-C2GN8s9C.js";
 import "./skills-install-1ZdwGTnh.js";
-import "./update-runner-DVa6cMqp.js";
+import "./update-runner-JcdOHr71.js";
 import { t as resolveAgentSessionDirs } from "./session-dirs-DWgIYmAt.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-B51TF6q3.js";
 import { n as forceFreePortAndWait } from "./ports-Dn122MUd.js";
@@ -7381,15 +7381,30 @@ function serveFile(res, filePath) {
 	res.end(fs.readFileSync(filePath));
 }
 /** Cache-bust token: changes every time the gateway process starts. */
-const CACHE_BUST = `v=${Date.now()}`;
+const CACHE_BUST_VERSION = `${Date.now()}`;
+/**
+* Matches `<script src="..."` or `<link ... href="..."` (or single-quoted),
+* capturing: (1) the tag + attr lead-in, (2) the opening quote, (3) the URL,
+* (4) the closing quote (back-reference to ensure quotes match). The URL
+* capture is non-greedy and restricted to `.js`, `.mjs`, or `.css` so unrelated
+* links (fonts, favicons, `type="module"` without src, etc.) are left alone.
+*
+* Tag matching is loose (`[^>]*`) so attribute order and optional attributes
+* like `type="module"` or `rel="stylesheet preload"` don't break the match.
+*/
+const CACHE_BUST_TAG_RE = /(<(?:script|link)\b[^>]*?\b(?:src|href)\s*=\s*)(["'])([^"'>]+?\.(?:mjs|js|css)(?:\?[^"'>]*)?)(\2)/gi;
+function injectCacheBust(html, version = CACHE_BUST_VERSION) {
+	return html.replace(CACHE_BUST_TAG_RE, (match, lead, open, url, close) => {
+		if (/^(https?:)?\/\//i.test(url)) return match;
+		if (/[?&]v=/.test(url)) return match;
+		return `${lead}${open}${url}${url.includes("?") ? "&" : "?"}v=${version}${close}`;
+	});
+}
 function serveIndexHtml(res, indexPath) {
 	res.setHeader("Content-Type", "text/html; charset=utf-8");
 	res.setHeader("Cache-Control", "no-cache");
-	let html = fs.readFileSync(indexPath, "utf8");
-	html = html.replace(/(<(?:script\s+src|link\s+rel="stylesheet"\s+href)=")([^"]+\.(?:js|css))(")/g, (_, before, url, after) => {
-		return `${before}${url}${url.includes("?") ? "&" : "?"}${CACHE_BUST}${after}`;
-	});
-	res.end(html);
+	const html = fs.readFileSync(indexPath, "utf8");
+	res.end(injectCacheBust(html));
 }
 function isSafeRelativePath(relPath) {
 	if (!relPath) return false;
@@ -11844,7 +11859,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-D0UYleBF.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-CvUFd4C6.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,

package/dist/{gateway-rpc-5fREQe9Q.js → gateway-rpc-B1Wzoj99.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-aT-I_DTX.js";
-import { n as callGateway } from "./call-DwpGquzW.js";
+import { n as callGateway } from "./call-tmHtVCkn.js";
 import { n as withProgress } from "./progress-jIePzvGA.js";
 
 //#region src/cli/gateway-rpc.ts