@symerian/symi 2.6.6 → 2.6.7

package/dist/{gateway-cli-zN6V2qw8.js → gateway-cli-SlbXm0f7.js}

@@ -1,7 +1,7 @@
 import { _ as expandHomePrefix, g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, E as truncateUtf16Safe, H as getLogger, P as setVerbose, R as colorize, S as shortenHomePath, U as getResolvedLoggerSettings, V as getChildLogger, c as ensureDir, t as CONFIG_DIR, y as resolveUserPath, z as isRich } from "./utils-B-0b9bGM.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-EAliFiVK.js";
-import { $ as buildDeliveryFromLegacyPayload, A as emitGatewayRestart, An as initSubagentRegistry, Ar as extractImageContentFromSource, B as summarizeRestartSentinel, Bn as registerAgentRunContext, Ct as requestBodyErrorToText, Dr as DEFAULT_INPUT_MAX_REDIRECTS, E as resetDirectoryCache, Er as DEFAULT_INPUT_IMAGE_MIMES, Et as agentCommand, F as setPreRestartDeferralCheck, Fn as readLatestAssistantReply, Gt as getCliSessionId, I as consumeRestartSentinel, In as clearAgentRunContext, J as normalizeOptionalSessionKey, K as inferLegacyName, Kt as setCliSessionId, Ln as emitAgentEvent, Lt as createDefaultDeps, M as markGatewaySigusr1RestartHandled, Mr as resolveInputFileLimits, Mt as resolveOutboundTarget, Nt as resolveSessionDeliveryTarget, O as consumeGatewaySigusr1RestartAuthorization, On as countActiveDescendantRuns, Or as DEFAULT_INPUT_TIMEOUT_MS, P as setGatewaySigusr1RestartPolicy, Pn as runSubagentAnnounceFlow, Pr as resolveAgentTimeoutMs, Pt as createOutboundSendDeps, Q as migrateLegacyCronPayload, R as formatRestartSentinelMessage, Rn as getAgentRunContext, St as readJsonBodyWithLimit, Tr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as sleepWithAbort, U as normalizeHttpWebhookUrl, Ut as resolveModelProfile, Vt as getActiveEmbeddedRunCount, Wt as runWithModelFallback, X as normalizePayloadToSystemText, Xt as resolveAgentAvatar, Y as normalizeOptionalText, Z as normalizeRequiredName, ar as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, d as createSymiTools, en as buildSafeExternalPrompt, et as hasLegacyDeliveryHints, f as resolveAnnounceTargetFromKey, fr as stripHeartbeatToken, ft as loadSymiPlugins, hn as getTotalPendingReplies, i as resolveCronStyleNow, ir as resetAllLanes, j as isGatewaySigusr1RestartExternallyAllowed, jn as listDescendantRunsForRequester, jr as normalizeMimeList, k as deferGatewayRestartUntilIdle, kn as countActiveRunsForSession, kr as extractFileContentFromSource, l as applyToolPolicyPipeline, nn as getHookType, or as waitForActiveTasks, pr as lookupContextTokens, q as normalizeOptionalAgentId, qt as runCliAgent, rn as isExternalHookSession, rr as getTotalQueueSize, sr as CommandLane, st as requestHeartbeatNow, tn as detectSuspiciousPatterns, tr as getActiveTaskCount, tt as stripLegacyDeliveryFields, u as buildDefaultToolPolicyPipelineSteps, ut as getPluginToolMeta, v as loadSessionEntry, w as resolveOutboundSessionRoute, wt as computeBackoff, xr as enqueueSystemEvent, xt as handleSlackHttpRequest, zn as onAgentEvent, zt as runAgentTurn } from "./reply-DcyKvFor.js";
+import { $ as buildDeliveryFromLegacyPayload, A as emitGatewayRestart, An as initSubagentRegistry, Ar as extractImageContentFromSource, B as summarizeRestartSentinel, Bn as registerAgentRunContext, Ct as requestBodyErrorToText, Dr as DEFAULT_INPUT_MAX_REDIRECTS, E as resetDirectoryCache, Er as DEFAULT_INPUT_IMAGE_MIMES, Et as agentCommand, F as setPreRestartDeferralCheck, Fn as readLatestAssistantReply, Gt as getCliSessionId, I as consumeRestartSentinel, In as clearAgentRunContext, J as normalizeOptionalSessionKey, K as inferLegacyName, Kt as setCliSessionId, Ln as emitAgentEvent, Lt as createDefaultDeps, M as markGatewaySigusr1RestartHandled, Mr as resolveInputFileLimits, Mt as resolveOutboundTarget, Nt as resolveSessionDeliveryTarget, O as consumeGatewaySigusr1RestartAuthorization, On as countActiveDescendantRuns, Or as DEFAULT_INPUT_TIMEOUT_MS, P as setGatewaySigusr1RestartPolicy, Pn as runSubagentAnnounceFlow, Pr as resolveAgentTimeoutMs, Pt as createOutboundSendDeps, Q as migrateLegacyCronPayload, R as formatRestartSentinelMessage, Rn as getAgentRunContext, St as readJsonBodyWithLimit, Tr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as sleepWithAbort, U as normalizeHttpWebhookUrl, Ut as resolveModelProfile, Vt as getActiveEmbeddedRunCount, Wt as runWithModelFallback, X as normalizePayloadToSystemText, Xt as resolveAgentAvatar, Y as normalizeOptionalText, Z as normalizeRequiredName, _ as loadCombinedSessionStoreForGateway, ar as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, d as createSymiTools, en as buildSafeExternalPrompt, et as hasLegacyDeliveryHints, f as resolveAnnounceTargetFromKey, fr as stripHeartbeatToken, ft as loadSymiPlugins, g as listSessionsFromStore, hn as getTotalPendingReplies, i as resolveCronStyleNow, ir as resetAllLanes, j as isGatewaySigusr1RestartExternallyAllowed, jn as listDescendantRunsForRequester, jr as normalizeMimeList, k as deferGatewayRestartUntilIdle, kn as countActiveRunsForSession, kr as extractFileContentFromSource, l as applyToolPolicyPipeline, nn as getHookType, or as waitForActiveTasks, pr as lookupContextTokens, q as normalizeOptionalAgentId, qt as runCliAgent, rn as isExternalHookSession, rr as getTotalQueueSize, sr as CommandLane, st as requestHeartbeatNow, tn as detectSuspiciousPatterns, tr as getActiveTaskCount, tt as stripLegacyDeliveryFields, u as buildDefaultToolPolicyPipelineSteps, ut as getPluginToolMeta, v as loadSessionEntry, w as resolveOutboundSessionRoute, wt as computeBackoff, xr as enqueueSystemEvent, xt as handleSlackHttpRequest, zn as onAgentEvent, zt as runAgentTurn } from "./reply-DcyKvFor.js";
 import { S as parseAgentSessionKey, c as normalizeMainKey, f as toAgentRequestSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, p as toAgentStoreSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey, y as isCronRunSessionKey } from "./session-key-DCt45XZa.js";
 import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { C as createInternalHookEvent, S as clearInternalHooks, T as triggerInternalHook, m as createEmptyPluginRegistry, r as DEFAULT_CHAT_CHANNEL, w as registerInternalHook } from "./registry-Cja8eT7G.js";
@@ -52,7 +52,7 @@ import "./accounts-DyJN4_vR.js";
 import { t as buildChannelAccountBindings } from "./bindings-DFaVVCsf.js";
 import "./logging-w5jq5901.js";
 import "./send-CPF8hSFp.js";
-import { c as resolveStorePath, i as resolveSessionTranscriptPath } from "./paths-CyhzMxFA.js";
+import { c as resolveStorePath, i as resolveSessionTranscriptPath, s as resolveSessionTranscriptsDirForAgent } from "./paths-CyhzMxFA.js";
 import "./tool-images-DvUBlqjX.js";
 import "./tool-display-D8N3rsYt.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-DOPkVbh3.js";
@@ -139,7 +139,7 @@ import { r as pickGatewaySelfPresence } from "./status-BY4CnB2O.js";
 import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-BPOuBmYt.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-CtckACbb.js";
-import { t as runOnboardingWizard } from "./onboarding-CAlILYcN.js";
+import { t as runOnboardingWizard } from "./onboarding-BEDqTyYQ.js";
 import { _ as getHandshakeTimeoutMs, a as DEFAULT_ASSISTANT_IDENTITY, b as resolveCronRunLogPath, c as upsertPresence, d as DEDUPE_MAX, f as DEDUPE_TTL_MS, g as TICK_INTERVAL_MS, h as MAX_PAYLOAD_BYTES, i as safeParseJson, l as formatError, m as MAX_BUFFERED_BYTES, n as handleGatewayRequest, o as resolveAssistantIdentity, p as HEALTH_REFRESH_INTERVAL_MS, r as broadcastPresenceSnapshot, s as listSystemPresence, t as coreGatewayHandlers, u as loadVoiceWakeConfig, v as abortChatRunById, x as startGatewayConfigReloader, y as appendCronRunLog } from "./server-methods-BdXCfO_O.js";
 import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-CHIVwHRD.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-Bv0M7ka7.js";
@@ -7325,7 +7325,7 @@ function applyControlUiSecurityHeaders(res) {
 	res.setHeader("X-Content-Type-Options", "nosniff");
 	res.setHeader("Referrer-Policy", "no-referrer");
 }
-function sendJson$2(res, status, body) {
+function sendJson$3(res, status, body) {
 	res.statusCode = status;
 	res.setHeader("Content-Type", "application/json; charset=utf-8");
 	res.setHeader("Cache-Control", "no-cache");
@@ -7352,7 +7352,7 @@ function handleControlUiAvatarRequest(req, res, opts) {
 	}
 	if (url.searchParams.get("meta") === "1") {
 		const resolved = opts.resolveAvatar(agentId);
-		sendJson$2(res, 200, { avatarUrl: resolved.kind === "local" ? buildControlUiAvatarUrl(basePath, agentId) : resolved.kind === "remote" || resolved.kind === "data" ? resolved.url : null });
+		sendJson$3(res, 200, { avatarUrl: resolved.kind === "local" ? buildControlUiAvatarUrl(basePath, agentId) : resolved.kind === "remote" || resolved.kind === "data" ? resolved.url : null });
 		return true;
 	}
 	const resolved = opts.resolveAvatar(agentId);
@@ -7448,7 +7448,7 @@ function handleControlUiHttpRequest(req, res, opts) {
 			assistantAgentId: identity.agentId
 		};
 		if (opts?.isLocalClient && opts?.gatewayToken) bootstrapConfig.gatewayToken = opts.gatewayToken;
-		sendJson$2(res, 200, bootstrapConfig);
+		sendJson$3(res, 200, bootstrapConfig);
 		return true;
 	}
 	const rootState = opts?.root;
@@ -7525,7 +7525,7 @@ function setDefaultSecurityHeaders(res) {
 	res.setHeader("X-Content-Type-Options", "nosniff");
 	res.setHeader("Referrer-Policy", "no-referrer");
 }
-function sendJson$1(res, status, body) {
+function sendJson$2(res, status, body) {
 	res.statusCode = status;
 	res.setHeader("Content-Type", "application/json; charset=utf-8");
 	res.end(JSON.stringify(body));
@@ -7540,14 +7540,14 @@ function sendMethodNotAllowed(res, allow = "POST") {
 	sendText(res, 405, "Method Not Allowed");
 }
 function sendUnauthorized(res) {
-	sendJson$1(res, 401, { error: {
+	sendJson$2(res, 401, { error: {
 		message: "Unauthorized",
 		type: "unauthorized"
 	} });
 }
 function sendRateLimited(res, retryAfterMs) {
 	if (retryAfterMs && retryAfterMs > 0) res.setHeader("Retry-After", String(Math.ceil(retryAfterMs / 1e3)));
-	sendJson$1(res, 429, { error: {
+	sendJson$2(res, 429, { error: {
 		message: "Too many failed authentication attempts. Please try again later.",
 		type: "rate_limited"
 	} });
@@ -7560,7 +7560,7 @@ function sendGatewayAuthFailure(res, authResult) {
 	sendUnauthorized(res);
 }
 function sendInvalidRequest(res, message) {
-	sendJson$1(res, 400, { error: {
+	sendJson$2(res, 400, { error: {
 		message,
 		type: "invalid_request_error"
 	} });
@@ -7569,14 +7569,14 @@ async function readJsonBodyOrError(req, res, maxBytes) {
 	const body = await readJsonBody(req, maxBytes);
 	if (!body.ok) {
 		if (body.error === "payload too large") {
-			sendJson$1(res, 413, { error: {
+			sendJson$2(res, 413, { error: {
 				message: "Payload too large",
 				type: "invalid_request_error"
 			} });
 			return;
 		}
 		if (body.error === "request body timeout") {
-			sendJson$1(res, 408, { error: {
+			sendJson$2(res, 408, { error: {
 				message: "Request body timeout",
 				type: "invalid_request_error"
 			} });
@@ -7806,7 +7806,7 @@ async function handleOpenAiHttpRequest(req, res, opts) {
 	});
 	const prompt = buildAgentPrompt$1(payload.messages);
 	if (!prompt.message) {
-		sendJson$1(res, 400, { error: {
+		sendJson$2(res, 400, { error: {
 			message: "Missing user message in `messages`.",
 			type: "invalid_request_error"
 		} });
@@ -7825,7 +7825,7 @@ async function handleOpenAiHttpRequest(req, res, opts) {
 				messageChannel: "webchat",
 				bestEffortDeliver: false
 			}, defaultRuntime, deps));
-			sendJson$1(res, 200, {
+			sendJson$2(res, 200, {
 				id: runId,
 				object: "chat.completion",
 				created: Math.floor(Date.now() / 1e3),
@@ -7846,7 +7846,7 @@ async function handleOpenAiHttpRequest(req, res, opts) {
 			});
 		} catch (err) {
 			logWarn(`openai-compat: chat completion failed: ${String(err)}`);
-			sendJson$1(res, 500, { error: {
+			sendJson$2(res, 500, { error: {
 				message: "internal error",
 				type: "api_error"
 			} });
@@ -8410,7 +8410,7 @@ async function handleOpenResponsesHttpRequest(req, res, opts) {
 	const parseResult = CreateResponseBodySchema.safeParse(handled.body);
 	if (!parseResult.success) {
 		const issue = parseResult.error.issues[0];
-		sendJson$1(res, 400, { error: {
+		sendJson$2(res, 400, { error: {
 			message: issue ? `${issue.path.join(".")}: ${issue.message}` : "Invalid request body",
 			type: "invalid_request_error"
 		} });
@@ -8467,7 +8467,7 @@ async function handleOpenResponsesHttpRequest(req, res, opts) {
 		}
 	} catch (err) {
 		logWarn(`openresponses: request parsing failed: ${String(err)}`);
-		sendJson$1(res, 400, { error: {
+		sendJson$2(res, 400, { error: {
 			message: "invalid request",
 			type: "invalid_request_error"
 		} });
@@ -8485,7 +8485,7 @@ async function handleOpenResponsesHttpRequest(req, res, opts) {
 		toolChoicePrompt = toolChoiceResult.extraSystemPrompt;
 	} catch (err) {
 		logWarn(`openresponses: tool configuration failed: ${String(err)}`);
-		sendJson$1(res, 400, { error: {
+		sendJson$2(res, 400, { error: {
 			message: "invalid tool configuration",
 			type: "invalid_request_error"
 		} });
@@ -8509,7 +8509,7 @@ async function handleOpenResponsesHttpRequest(req, res, opts) {
 		fileContext
 	].filter(Boolean).join("\n\n");
 	if (!prompt.message) {
-		sendJson$1(res, 400, { error: {
+		sendJson$2(res, 400, { error: {
 			message: "Missing user message in `input`.",
 			type: "invalid_request_error"
 		} });
@@ -8538,7 +8538,7 @@ async function handleOpenResponsesHttpRequest(req, res, opts) {
 			const pendingToolCalls = meta && typeof meta === "object" ? meta.pendingToolCalls : void 0;
 			if (stopReason === "tool_calls" && pendingToolCalls && pendingToolCalls.length > 0) {
 				const functionCall = pendingToolCalls[0];
-				sendJson$1(res, 200, createResponseResource({
+				sendJson$2(res, 200, createResponseResource({
 					id: responseId,
 					model,
 					status: "incomplete",
@@ -8553,7 +8553,7 @@ async function handleOpenResponsesHttpRequest(req, res, opts) {
 				}));
 				return true;
 			}
-			sendJson$1(res, 200, createResponseResource({
+			sendJson$2(res, 200, createResponseResource({
 				id: responseId,
 				model,
 				status: "completed",
@@ -8566,7 +8566,7 @@ async function handleOpenResponsesHttpRequest(req, res, opts) {
 			}));
 		} catch (err) {
 			logWarn(`openresponses: non-stream response failed: ${String(err)}`);
-			sendJson$1(res, 500, createResponseResource({
+			sendJson$2(res, 500, createResponseResource({
 				id: responseId,
 				model,
 				status: "failed",
@@ -8833,6 +8833,138 @@ async function handleOpenResponsesHttpRequest(req, res, opts) {
 	return true;
 }
 
+//#endregion
+//#region src/gateway/server-sessions-api.ts
+/**
+* HTTP API for session history — serves the Glass UI History drawer.
+*
+* GET /api/sessions — List all sessions with metadata
+* GET /api/transcript?file=<filename> — Read a session transcript
+*
+* Both endpoints are read-only and serve data from the existing session
+* store and .jsonl transcript files.
+*
+* @module
+*/
+/**
+* Handle /api/sessions and /api/transcript HTTP requests.
+* Returns true if the request was handled, false otherwise.
+*/
+function handleSessionsApiRequest(req, res, cfg) {
+	const url = new URL(req.url ?? "/", "http://localhost");
+	if (url.pathname === "/api/sessions" && req.method === "GET") {
+		handleListSessions(res, cfg);
+		return true;
+	}
+	if (url.pathname === "/api/transcript" && req.method === "GET") {
+		handleTranscript(res, cfg, url.searchParams.get("file"));
+		return true;
+	}
+	return false;
+}
+function sendJson$1(res, data, status = 200) {
+	res.writeHead(status, { "Content-Type": "application/json" });
+	res.end(JSON.stringify(data));
+}
+function handleListSessions(res, cfg) {
+	try {
+		const sessionsDir = resolveSessionTranscriptsDirForAgent(resolveDefaultAgentId(cfg));
+		const { storePath, store } = loadCombinedSessionStoreForGateway(cfg);
+		const storeSessions = listSessionsFromStore({
+			cfg,
+			storePath,
+			store,
+			opts: {
+				includeDerivedTitles: true,
+				includeLastMessage: true
+			}
+		}).sessions.map((s) => ({
+			file: s.sessionId ? `${s.sessionId}.jsonl` : void 0,
+			sessionId: s.sessionId,
+			sessionKey: s.key,
+			isArchived: false,
+			mtime: s.updatedAt ? new Date(s.updatedAt).toISOString() : void 0,
+			preview: s.lastMessagePreview || s.derivedTitle || s.displayName || s.label || void 0,
+			msgCount: (s.inputTokens ?? 0) > 0 || (s.outputTokens ?? 0) > 0 ? void 0 : void 0,
+			size: void 0,
+			model: s.model,
+			modelProvider: s.modelProvider
+		}));
+		const archivedSessions = [];
+		if (fs.existsSync(sessionsDir)) {
+			const files = fs.readdirSync(sessionsDir);
+			for (const file of files) {
+				if (!file.includes(".jsonl.")) continue;
+				const parts = file.split(".jsonl.");
+				if (parts.length < 2 || !parts[1]) continue;
+				const filePath = path.join(sessionsDir, file);
+				try {
+					const stat = fs.statSync(filePath);
+					const lines = fs.readFileSync(filePath, "utf-8").split(/\r?\n/).filter((l) => l.trim());
+					let preview;
+					let msgCount = 0;
+					for (const line of lines) try {
+						const parsed = JSON.parse(line);
+						if (parsed?.message?.role === "user" || parsed?.message?.role === "assistant") msgCount++;
+						if (!preview && parsed?.message?.role === "user") preview = (typeof parsed.message.content === "string" ? parsed.message.content : Array.isArray(parsed.message.content) ? parsed.message.content.filter((b) => b.type === "text").map((b) => b.text ?? "").join(" ") : "").trim().slice(0, 80) || void 0;
+					} catch {}
+					const suffix = parts[1];
+					const dotIdx = suffix.indexOf(".");
+					const archivedAt = dotIdx >= 0 ? suffix.slice(dotIdx + 1).replace(/-(?=\d{2}[T:-])/g, ":") : void 0;
+					archivedSessions.push({
+						file,
+						sessionId: parts[0],
+						isArchived: true,
+						archivedAt: archivedAt || stat.mtime.toISOString(),
+						mtime: stat.mtime.toISOString(),
+						preview,
+						msgCount,
+						size: stat.size
+					});
+				} catch {}
+			}
+		}
+		sendJson$1(res, [...storeSessions.filter((s) => s.sessionId), ...archivedSessions].toSorted((a, b) => {
+			const aArchived = Boolean(a.isArchived);
+			const bArchived = Boolean(b.isArchived);
+			if (!aArchived && bArchived) return -1;
+			if (aArchived && !bArchived) return 1;
+			const aDate = typeof a.mtime === "string" ? a.mtime : typeof a.archivedAt === "string" ? a.archivedAt : "";
+			return (typeof b.mtime === "string" ? b.mtime : typeof b.archivedAt === "string" ? b.archivedAt : "").localeCompare(aDate);
+		}));
+	} catch (err) {
+		sendJson$1(res, { error: String(err) }, 500);
+	}
+}
+function handleTranscript(res, cfg, file) {
+	if (!file) {
+		sendJson$1(res, { error: "Missing file parameter" }, 400);
+		return;
+	}
+	const basename = path.basename(file);
+	if (basename !== file || file.includes("..")) {
+		sendJson$1(res, { error: "Invalid file parameter" }, 400);
+		return;
+	}
+	try {
+		const sessionsDir = resolveSessionTranscriptsDirForAgent(resolveDefaultAgentId(cfg));
+		const filePath = path.join(sessionsDir, basename);
+		if (!fs.existsSync(filePath)) {
+			sendJson$1(res, { error: "Session file not found" }, 404);
+			return;
+		}
+		const lines = fs.readFileSync(filePath, "utf-8").split(/\r?\n/).filter((l) => l.trim());
+		const messages = [];
+		for (const line of lines) try {
+			const parsed = JSON.parse(line);
+			if (parsed?.message?.role) messages.push(parsed.message);
+		} catch {}
+		sendJson$1(res, { messages });
+	} catch (err) {
+		sendJson$1(res, { error: String(err) }, 500);
+	}
+}
+
 //#endregion
 //#region src/gateway/tools-invoke-http.ts
 const DEFAULT_BODY_BYTES = 2 * 1024 * 1024;
@@ -8915,7 +9047,7 @@ async function handleToolsInvokeHttpRequest(req, res, opts) {
 	if (process.env.VITEST && MEMORY_TOOL_NAMES.has(toolName)) {
 		const reasons = resolveMemoryToolDisableReasons(cfg);
 		if (reasons.length > 0) {
-			sendJson$1(res, 400, {
+			sendJson$2(res, 400, {
 				ok: false,
 				error: {
 					type: "invalid_request",
@@ -8987,7 +9119,7 @@ async function handleToolsInvokeHttpRequest(req, res, opts) {
 	const gatewayDenySet = new Set(gatewayDenyNames);
 	const tool = subagentFiltered.filter((t) => !gatewayDenySet.has(t.name)).find((t) => t.name === toolName);
 	if (!tool) {
-		sendJson$1(res, 404, {
+		sendJson$2(res, 404, {
 			ok: false,
 			error: {
 				type: "not_found",
@@ -9002,14 +9134,14 @@ async function handleToolsInvokeHttpRequest(req, res, opts) {
 			action,
 			args
 		});
-		sendJson$1(res, 200, {
+		sendJson$2(res, 200, {
 			ok: true,
 			result: await tool.execute?.(`http-${Date.now()}`, toolArgs)
 		});
 	} catch (err) {
 		const inputStatus = resolveToolInputErrorStatus(err);
 		if (inputStatus !== null) {
-			sendJson$1(res, inputStatus, {
+			sendJson$2(res, inputStatus, {
 				ok: false,
 				error: {
 					type: "tool_error",
@@ -9019,7 +9151,7 @@ async function handleToolsInvokeHttpRequest(req, res, opts) {
 			return true;
 		}
 		logWarn(`tools-invoke: tool execution failed: ${String(err)}`);
-		sendJson$1(res, 500, {
+		sendJson$2(res, 500, {
 			ok: false,
 			error: {
 				type: "tool_error",
@@ -9439,6 +9571,7 @@ function createGatewayHttpServer(opts) {
 				if (await handleA2uiHttpRequest(req, res)) return;
 				if (await canvasHost.handleHttpRequest(req, res)) return;
 			}
+			if (controlUiEnabled && handleSessionsApiRequest(req, res, configSnapshot)) return;
 			if (controlUiEnabled) {
 				if (handleControlUiAvatarRequest(req, res, {
 					basePath: controlUiBasePath,

package/dist/{image-CXu8W39c.js → image-CuzFLQWC.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { R as shortenHomeInString, k as isRecord } from "./registry-DYq1AYOv.js";
 import { $ as resolveSymiAgentDir, L as getApiKeyForModel, M as resolveImplicitBedrockProvider, N as resolveImplicitCopilotProvider, P as resolveImplicitProviders, U as normalizeSecretInput, j as normalizeProviders, z as requireApiKey } from "./auth-profiles-DdK1Hxaa.js";
-import { N as sanitizeUserFacingText } from "./pi-embedded-helpers-pubKo8HQ.js";
+import { N as sanitizeUserFacingText } from "./pi-embedded-helpers-CfqDGQ9J.js";
 import { n as loadConfig } from "./config-5SdHIcHU.js";
 import { n as redactToolDetail } from "./redact-BDMXB06K.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-Bv5YDJc8.js";

package/dist/{image-CHzdaNJ4.js → image-DcpMiprB.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { D as isRecord, I as shortenHomeInString } from "./registry-BhoUuugi.js";
 import { G as resolveSymiAgentDir, S as getApiKeyForModel, Y as normalizeSecretInput, _ as resolveImplicitBedrockProvider, g as normalizeProviders, v as resolveImplicitCopilotProvider, w as requireApiKey, y as resolveImplicitProviders } from "./model-selection-BQCG9ah0.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-j5tVLINv.js";
-import { N as sanitizeUserFacingText } from "./pi-embedded-helpers-lgx_U5KS.js";
+import { N as sanitizeUserFacingText } from "./pi-embedded-helpers-B8kqLWns.js";
 import { n as loadConfig } from "./config-BmV60pPT.js";
 import { n as redactToolDetail } from "./redact-1NGYV_8p.js";
 import path from "node:path";

package/dist/index.js

@@ -112,7 +112,7 @@ import { t as ensureSymiCliOnPath } from "./path-env-MnzRq6nD.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-B37eizu-.js";
 import "./ports-BX0kKI0g.js";
 import { a as hasFlag, i as getVerboseFlag, n as getCommandPath, o as hasHelpOrVersion, s as hasRootVersionAlias } from "./argv-C6ovOie2.js";
-import { i as getCoreCliCommandsWithSubcommands, n as setProgramContext, o as registerProgramCommands, s as getSubCliCommandsWithSubcommands } from "./program-context-N9-4Ubpp.js";
+import { i as getCoreCliCommandsWithSubcommands, n as setProgramContext, o as registerProgramCommands, s as getSubCliCommandsWithSubcommands } from "./program-context-xpDrT9eG.js";
 import "./catalog-RiADx7MA.js";
 import "./plugin-registry-CDIOKK_i.js";
 import { n as resolveCliChannelOptions } from "./channel-options-BqnokE7_.js";

package/dist/llm-slug-generator.js

@@ -3,16 +3,16 @@ import "./registry-DYq1AYOv.js";
 import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CpEJ0B88.js";
 import "./subsystem-BjyjJF-d.js";
 import "./workspace-DscDraUb.js";
-import { t as runAgentTurn } from "./unified-runner-DpWGASP3.js";
+import { t as runAgentTurn } from "./unified-runner-CxscxYKm.js";
 import "./paths-CbQV9WEg.js";
 import "./auth-profiles-DdK1Hxaa.js";
 import "./env-BDXYbTKj.js";
 import "./github-copilot-token-cCYzSU9h.js";
 import "./boolean-CE7i9tBR.js";
-import "./pi-embedded-helpers-pubKo8HQ.js";
+import "./pi-embedded-helpers-CfqDGQ9J.js";
 import "./config-5SdHIcHU.js";
 import "./manifest-registry-yb7sAlu4.js";
-import "./chrome-DYZwl5Gv.js";
+import "./chrome-DkaXoP36.js";
 import "./frontmatter-CTR5f_Ez.js";
 import "./skills-Bs0AW1g3.js";
 import "./redact-BDMXB06K.js";
@@ -30,10 +30,10 @@ import "./bindings-BsHoBLIE.js";
 import "./send-CVMyYPQw.js";
 import "./send-CvhXrdgS.js";
 import "./tool-images-SqqWIT22.js";
-import "./deliver-dODxSv3b.js";
+import "./deliver-C46-vyqg.js";
 import "./diagnostic-rPhsBoZz.js";
 import "./diagnostic-session-state-Zw87xFym.js";
-import "./image-CXu8W39c.js";
+import "./image-CuzFLQWC.js";
 import "./tokens-Bux9Y_xD.js";
 import "./send-DYj_o4_F.js";
 import "./pi-model-discovery-Bv5YDJc8.js";
@@ -49,7 +49,7 @@ import "./local-roots-DhZz0Ybs.js";
 import "./ir-CTiz95Vb.js";
 import "./render-CDCvpfhh.js";
 import "./commands-registry-Bfc7Uz0o.js";
-import "./runner-WAG0M5s9.js";
+import "./runner-CU9l0uJh.js";
 import "./skill-commands-DcVwOafC.js";
 import "./fetch-Bso4i15F.js";
 import "./channel-activity-B6G1jnQT.js";

package/dist/{onboard-i7lit3dF.js → onboard-DFkXqe5P.js}

@@ -10,7 +10,7 @@ import { t as assertSupportedRuntime } from "./runtime-guard-D7waq_Ho.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DlMdyFDY.js";
 import { t as resolveGatewayService } from "./service-Cm9j9WzQ.js";
 import { r as healthCommand } from "./health-DUKLANXu.js";
-import { t as runOnboardingWizard } from "./onboarding-By0D-QmK.js";
+import { t as runOnboardingWizard } from "./onboarding-mXPGwLNG.js";
 import { $ as setHuggingfaceApiKey, A as applyXaiConfig, B as applyVercelAiGatewayConfig, E as applyTogetherConfig, I as applyLitellmConfig, M as applyXiaomiConfig, O as applyVeniceConfig, P as applyZaiConfig, Q as setGeminiApiKey, R as applyCloudflareAiGatewayConfig, S as applyQianfanConfig, X as setAnthropicApiKey, Z as setCloudflareAiGatewayConfig, _ as applyMoonshotConfigCn, a as applyMinimaxApiConfig, at as setOpenrouterApiKey, b as applyOpenrouterConfig, ct as setTogetherApiKey, d as applyAuthProfileConfig, dt as setXaiApiKey, et as setKimiCodingApiKey, f as applyHuggingfaceConfig, ft as setXiaomiApiKey, g as applyMoonshotConfig, it as setOpencodeZenApiKey, l as applyMinimaxConfig, lt as setVeniceApiKey, m as applyKimiCodeConfig, n as validateAnthropicSetupToken, nt as setMinimaxApiKey, o as applyMinimaxApiConfigCn, ot as setQianfanApiKey, pt as setZaiApiKey, r as applyOpencodeZenConfig, rt as setMoonshotApiKey, st as setSyntheticApiKey, t as buildTokenProfileId, tt as setLitellmApiKey, ut as setVercelAiGatewayApiKey, w as applySyntheticConfig } from "./auth-token-Cmrk2TPo.js";
 import { n as logConfigUpdated } from "./logging-BGewRZy0.js";
 import { n as isDeprecatedAuthChoice, r as normalizeLegacyOnboardAuthChoice } from "./auth-choice-legacy-BKXTgyr4.js";

package/dist/{onboard-ttzux1w7.js → onboard-DlY7trcj.js}

@@ -12,7 +12,7 @@ import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, r as isGate
 import { r as isSystemdUserServiceAvailable } from "./systemd-riq8uNJQ.js";
 import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
 import { r as healthCommand } from "./health-BPOuBmYt.js";
-import { t as runOnboardingWizard } from "./onboarding-CAlILYcN.js";
+import { t as runOnboardingWizard } from "./onboarding-BEDqTyYQ.js";
 import { $ as setHuggingfaceApiKey, A as applyXaiConfig, B as applyVercelAiGatewayConfig, E as applyTogetherConfig, I as applyLitellmConfig, M as applyXiaomiConfig, O as applyVeniceConfig, P as applyZaiConfig, Q as setGeminiApiKey, R as applyCloudflareAiGatewayConfig, S as applyQianfanConfig, X as setAnthropicApiKey, Z as setCloudflareAiGatewayConfig, _ as applyMoonshotConfigCn, a as applyMinimaxApiConfig, at as setOpenrouterApiKey, b as applyOpenrouterConfig, ct as setTogetherApiKey, d as applyAuthProfileConfig, dt as setXaiApiKey, et as setKimiCodingApiKey, f as applyHuggingfaceConfig, ft as setXiaomiApiKey, g as applyMoonshotConfig, it as setOpencodeZenApiKey, l as applyMinimaxConfig, lt as setVeniceApiKey, m as applyKimiCodeConfig, n as validateAnthropicSetupToken, nt as setMinimaxApiKey, o as applyMinimaxApiConfigCn, ot as setQianfanApiKey, pt as setZaiApiKey, r as applyOpencodeZenConfig, rt as setMoonshotApiKey, st as setSyntheticApiKey, t as buildTokenProfileId, tt as setLitellmApiKey, ut as setVercelAiGatewayApiKey, w as applySyntheticConfig } from "./auth-token-BnOynwk4.js";
 import { n as logConfigUpdated } from "./logging-BzzwiKjv.js";
 import { n as isDeprecatedAuthChoice, r as normalizeLegacyOnboardAuthChoice } from "./auth-choice-legacy-Ch38-Kbr.js";

package/dist/{onboarding-CAlILYcN.js → onboarding-BEDqTyYQ.js}

@@ -304,7 +304,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-BDmc4k2T.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-DmeEphAd.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding-By0D-QmK.js → onboarding-mXPGwLNG.js}

@@ -302,7 +302,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-DSNIp08z.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-Ca-aQ6eE.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding.finalize-DSNIp08z.js → onboarding.finalize-Ca-aQ6eE.js}

@@ -99,10 +99,10 @@ import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
 import "./note-DDecZomM.js";
-import "./register.subclis-D6LLN38B.js";
-import "./command-registry-xEOR2NPq.js";
+import "./register.subclis-DnWR9l5V.js";
+import "./command-registry-DJbyskBr.js";
 import "./program-context-CqzR_m-7.js";
-import { r as installCompletion } from "./completion-cli-CRhFwMiA.js";
+import { r as installCompletion } from "./completion-cli-Dfw9JhkN.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DlMdyFDY.js";
@@ -110,7 +110,7 @@ import { t as resolveGatewayService } from "./service-Cm9j9WzQ.js";
 import { r as healthCommand } from "./health-DUKLANXu.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { t as formatHealthCheckFailure } from "./health-format-CzgUHmmX.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-D0L7wK2h.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-Xx92Sz9s.js";
 import { t as runTui } from "./tui-BJB80muc.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{onboarding.finalize-BDmc4k2T.js → onboarding.finalize-DmeEphAd.js}

@@ -103,16 +103,16 @@ import "./control-service-Bz7rxLWq.js";
 import "./stagger-BUClb97_.js";
 import "./channel-selection-DuWs0Aak.js";
 import "./runtime-guard-B37eizu-.js";
-import "./program-context-N9-4Ubpp.js";
+import "./program-context-xpDrT9eG.js";
 import "./note-DeHoW7xO.js";
-import { r as installCompletion } from "./completion-cli-CFJbuU6i.js";
+import { r as installCompletion } from "./completion-cli-DosOadUD.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-2mwX-jqj.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-riq8uNJQ.js";
 import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
 import { r as healthCommand } from "./health-BPOuBmYt.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
 import { t as formatHealthCheckFailure } from "./health-format-DSwnXZPU.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-DCc4SxWN.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-DRucwWSo.js";
 import { t as runTui } from "./tui-CriznorL.js";
 import os from "node:os";
 import path from "node:path";