@symerian/symi 2.6.6 → 2.6.8

package/dist/{models-cli-BmBmBUgl.js → models-cli-DzSb3Scm.js}

@@ -14,7 +14,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CVQOC9Jw.js";
+import "./subagent-registry-DovA8Baf.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -104,8 +104,8 @@ import "./table-D01d2GuY.js";
 import "./shared-D8K9MkWg.js";
 import "./auth-token-Cmrk2TPo.js";
 import "./logging-BGewRZy0.js";
-import { c as githubCopilotLoginCommand } from "./provider-auth-helpers-CqDTEFnD.js";
-import { C as modelsAliasesListCommand, S as modelsAliasesAddCommand, _ as modelsAuthOrderSetCommand, a as modelsStatusCommand, b as modelsAuthPasteTokenCommand, c as modelsImageFallbacksClearCommand, d as modelsFallbacksAddCommand, f as modelsFallbacksClearCommand, g as modelsAuthOrderGetCommand, h as modelsAuthOrderClearCommand, i as modelsScanCommand, l as modelsImageFallbacksListCommand, m as modelsFallbacksRemoveCommand, n as modelsSetImageCommand, o as modelsListCommand, p as modelsFallbacksListCommand, r as modelsSetCommand, s as modelsImageFallbacksAddCommand, u as modelsImageFallbacksRemoveCommand, v as modelsAuthAddCommand, w as modelsAliasesRemoveCommand, x as modelsAuthSetupTokenCommand, y as modelsAuthLoginCommand } from "./models-Bt8lm_nD.js";
+import { c as githubCopilotLoginCommand } from "./provider-auth-helpers-BdNgfdWd.js";
+import { C as modelsAliasesListCommand, S as modelsAliasesAddCommand, _ as modelsAuthOrderSetCommand, a as modelsStatusCommand, b as modelsAuthPasteTokenCommand, c as modelsImageFallbacksClearCommand, d as modelsFallbacksAddCommand, f as modelsFallbacksClearCommand, g as modelsAuthOrderGetCommand, h as modelsAuthOrderClearCommand, i as modelsScanCommand, l as modelsImageFallbacksListCommand, m as modelsFallbacksRemoveCommand, n as modelsSetImageCommand, o as modelsListCommand, p as modelsFallbacksListCommand, r as modelsSetCommand, s as modelsImageFallbacksAddCommand, u as modelsImageFallbacksRemoveCommand, v as modelsAuthAddCommand, w as modelsAliasesRemoveCommand, x as modelsAuthSetupTokenCommand, y as modelsAuthLoginCommand } from "./models-Dk7Q5cSF.js";
 
 //#region src/cli/models-cli.ts
 function runModelsCommand(action) {

package/dist/{onboard-ttzux1w7.js → onboard-D_PsLQiw.js}

@@ -11,8 +11,8 @@ import { t as createClackPrompter } from "./clack-prompter-B7pN13HV.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-2mwX-jqj.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-riq8uNJQ.js";
 import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
-import { r as healthCommand } from "./health-BPOuBmYt.js";
-import { t as runOnboardingWizard } from "./onboarding-CAlILYcN.js";
+import { r as healthCommand } from "./health-D4ySlvOE.js";
+import { t as runOnboardingWizard } from "./onboarding-CRAQ2s_3.js";
 import { $ as setHuggingfaceApiKey, A as applyXaiConfig, B as applyVercelAiGatewayConfig, E as applyTogetherConfig, I as applyLitellmConfig, M as applyXiaomiConfig, O as applyVeniceConfig, P as applyZaiConfig, Q as setGeminiApiKey, R as applyCloudflareAiGatewayConfig, S as applyQianfanConfig, X as setAnthropicApiKey, Z as setCloudflareAiGatewayConfig, _ as applyMoonshotConfigCn, a as applyMinimaxApiConfig, at as setOpenrouterApiKey, b as applyOpenrouterConfig, ct as setTogetherApiKey, d as applyAuthProfileConfig, dt as setXaiApiKey, et as setKimiCodingApiKey, f as applyHuggingfaceConfig, ft as setXiaomiApiKey, g as applyMoonshotConfig, it as setOpencodeZenApiKey, l as applyMinimaxConfig, lt as setVeniceApiKey, m as applyKimiCodeConfig, n as validateAnthropicSetupToken, nt as setMinimaxApiKey, o as applyMinimaxApiConfigCn, ot as setQianfanApiKey, pt as setZaiApiKey, r as applyOpencodeZenConfig, rt as setMoonshotApiKey, st as setSyntheticApiKey, t as buildTokenProfileId, tt as setLitellmApiKey, ut as setVercelAiGatewayApiKey, w as applySyntheticConfig } from "./auth-token-BnOynwk4.js";
 import { n as logConfigUpdated } from "./logging-BzzwiKjv.js";
 import { n as isDeprecatedAuthChoice, r as normalizeLegacyOnboardAuthChoice } from "./auth-choice-legacy-Ch38-Kbr.js";

package/dist/{onboard-i7lit3dF.js → onboard-N-KB8jvT.js}

@@ -9,8 +9,8 @@ import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, r as isGate
 import { t as assertSupportedRuntime } from "./runtime-guard-D7waq_Ho.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DlMdyFDY.js";
 import { t as resolveGatewayService } from "./service-Cm9j9WzQ.js";
-import { r as healthCommand } from "./health-DUKLANXu.js";
-import { t as runOnboardingWizard } from "./onboarding-By0D-QmK.js";
+import { r as healthCommand } from "./health-CBwxQHlQ.js";
+import { t as runOnboardingWizard } from "./onboarding-D1AsOvXd.js";
 import { $ as setHuggingfaceApiKey, A as applyXaiConfig, B as applyVercelAiGatewayConfig, E as applyTogetherConfig, I as applyLitellmConfig, M as applyXiaomiConfig, O as applyVeniceConfig, P as applyZaiConfig, Q as setGeminiApiKey, R as applyCloudflareAiGatewayConfig, S as applyQianfanConfig, X as setAnthropicApiKey, Z as setCloudflareAiGatewayConfig, _ as applyMoonshotConfigCn, a as applyMinimaxApiConfig, at as setOpenrouterApiKey, b as applyOpenrouterConfig, ct as setTogetherApiKey, d as applyAuthProfileConfig, dt as setXaiApiKey, et as setKimiCodingApiKey, f as applyHuggingfaceConfig, ft as setXiaomiApiKey, g as applyMoonshotConfig, it as setOpencodeZenApiKey, l as applyMinimaxConfig, lt as setVeniceApiKey, m as applyKimiCodeConfig, n as validateAnthropicSetupToken, nt as setMinimaxApiKey, o as applyMinimaxApiConfigCn, ot as setQianfanApiKey, pt as setZaiApiKey, r as applyOpencodeZenConfig, rt as setMoonshotApiKey, st as setSyntheticApiKey, t as buildTokenProfileId, tt as setLitellmApiKey, ut as setVercelAiGatewayApiKey, w as applySyntheticConfig } from "./auth-token-Cmrk2TPo.js";
 import { n as logConfigUpdated } from "./logging-BGewRZy0.js";
 import { n as isDeprecatedAuthChoice, r as normalizeLegacyOnboardAuthChoice } from "./auth-choice-legacy-BKXTgyr4.js";

package/dist/{onboard-channels-DEFF3Rjo.js → onboard-channels-Bp74i8iG.js}

@@ -3,7 +3,7 @@ import { E as formatChannelSelectionLine, O as listChatChannels, T as formatChan
 import { t as formatCliCommand } from "./command-format-BtYOfWxC.js";
 import { h as normalizeAccountId, m as DEFAULT_ACCOUNT_ID } from "./session-key-DjZ7Z1hW.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-D-jRCY0d.js";
-import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-CVQOC9Jw.js";
+import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-DovA8Baf.js";
 import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
 import { t as formatDocsLink } from "./links-DlWpl9Yv.js";
 import { r as listChannelPluginCatalogEntries } from "./catalog-DLQFKucJ.js";

package/dist/{onboard-channels-D0RHtaJE.js → onboard-channels-VuJyK9g-.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { dt as createPluginLoaderLogger, ft as loadSymiPlugins } from "./reply-DcyKvFor.js";
+import { dt as createPluginLoaderLogger, ft as loadSymiPlugins } from "./reply-BR3MMmPE.js";
 import { h as normalizeAccountId, m as DEFAULT_ACCOUNT_ID } from "./session-key-DCt45XZa.js";
 import { a as formatChannelSelectionLine, i as formatChannelPrimerLine, s as listChatChannels } from "./registry-Cja8eT7G.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";

package/dist/{onboarding-CAlILYcN.js → onboarding-CRAQ2s_3.js}

@@ -225,7 +225,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const { ensureAuthProfileStore } = await import("./model-selection-CyFvYcRt.js").then((n) => n.dt);
 	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-BLzEBA1v.js").then((n) => n.t);
 	const { promptCustomApiConfig } = await import("./onboard-custom-C7O-zfQ1.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-z3-Baeyd.js").then((n) => n.t);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-DGzjLihE.js").then((n) => n.t);
 	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-Ddo3jHe-.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
@@ -278,7 +278,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-DKDeQZF0.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-D0RHtaJE.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-VuJyK9g-.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -304,7 +304,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-BDmc4k2T.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-ZYLgVmdn.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding-By0D-QmK.js → onboarding-D1AsOvXd.js}

@@ -223,7 +223,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const { ensureAuthProfileStore } = await import("./auth-profiles-Q1xTr5SX.js").then((n) => n.t);
 	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-DVcYPG2v.js").then((n) => n.t);
 	const { promptCustomApiConfig } = await import("./onboard-custom-DdWPfzJO.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-C5etRQcH.js").then((n) => n.t);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-B1zaWakt.js").then((n) => n.t);
 	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-D5nCutGW.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
@@ -276,7 +276,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-CwSlLxM8.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-DEFF3Rjo.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-Bp74i8iG.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -302,7 +302,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-DSNIp08z.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-DLUoLFNl.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding.finalize-DSNIp08z.js → onboarding.finalize-DLUoLFNl.js}

@@ -14,7 +14,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CVQOC9Jw.js";
+import "./subagent-registry-DovA8Baf.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -99,18 +99,18 @@ import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
 import "./note-DDecZomM.js";
-import "./register.subclis-D6LLN38B.js";
-import "./command-registry-xEOR2NPq.js";
+import "./register.subclis-Bop-tTBx.js";
+import "./command-registry-CLcFUFJs.js";
 import "./program-context-CqzR_m-7.js";
-import { r as installCompletion } from "./completion-cli-CRhFwMiA.js";
+import { r as installCompletion } from "./completion-cli-BzXhONEe.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DlMdyFDY.js";
 import { t as resolveGatewayService } from "./service-Cm9j9WzQ.js";
-import { r as healthCommand } from "./health-DUKLANXu.js";
+import { r as healthCommand } from "./health-CBwxQHlQ.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { t as formatHealthCheckFailure } from "./health-format-CzgUHmmX.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-D0L7wK2h.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-CislKWHy.js";
 import { t as runTui } from "./tui-BJB80muc.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{onboarding.finalize-BDmc4k2T.js → onboarding.finalize-ZYLgVmdn.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { h as pathExists, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-DcyKvFor.js";
+import "./reply-BR3MMmPE.js";
 import "./registry-Cja8eT7G.js";
 import { p as restoreTerminalState } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -103,16 +103,16 @@ import "./control-service-Bz7rxLWq.js";
 import "./stagger-BUClb97_.js";
 import "./channel-selection-DuWs0Aak.js";
 import "./runtime-guard-B37eizu-.js";
-import "./program-context-N9-4Ubpp.js";
+import "./program-context-Bz_GuT_l.js";
 import "./note-DeHoW7xO.js";
-import { r as installCompletion } from "./completion-cli-CFJbuU6i.js";
+import { r as installCompletion } from "./completion-cli-MbaQCbTj.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-2mwX-jqj.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-riq8uNJQ.js";
 import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
-import { r as healthCommand } from "./health-BPOuBmYt.js";
+import { r as healthCommand } from "./health-D4ySlvOE.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
 import { t as formatHealthCheckFailure } from "./health-format-DSwnXZPU.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-DCc4SxWN.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-BZ-FYLu9.js";
 import { t as runTui } from "./tui-CriznorL.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{pi-embedded-BzE5v-JN.js → pi-embedded-BSoqm4lP.js}

@@ -42339,25 +42339,10 @@ function validateShellCommand(command) {
 //#region src/agents/pi-tools.validate-wrapper.ts
 const log$1 = createSubsystemLogger("agents/tool-validate");
 const EXEC_TOOL_NAMES = new Set(["exec", "bash"]);
-const FILE_TOOL_NAMES = new Set([
-	"write",
-	"read",
-	"edit",
-	"patch",
-	"file_write",
-	"file_edit",
-	"write_file",
-	"edit_file",
-	"create_file"
-]);
-const FILE_PATH_KEYS = [
-	"file_path",
-	"path",
-	"filePath"
-];
+const GEMMA_MODEL_ID = "gemma";
 /**
-* Wrap tools with argument validation. Exec/bash commands and file paths
-* are validated. Other tools pass through unchanged.
+* Wrap ALL tools with universal string argument sanitization.
+* Exec/bash tools get additional structural command validation.
 *
 * Call this AFTER tools are created and the model profile is resolved.
 */
@@ -42367,44 +42352,64 @@ function wrapToolsWithArgValidation(tools, profile) {
 		return tools;
 	}
 	const wrapped = tools.map((tool) => wrapToolWithArgValidation(tool));
-	const wrappedNames = wrapped.filter((t, i) => t !== tools[i]).map((t) => t.name);
-	log$1.debug(`[validate] applied to ${wrappedNames.length} tools: ${wrappedNames.join(",") || "(none matched)"}`);
+	log$1.debug(`[validate] universal sanitizer applied to ${wrapped.length} tools`);
 	return wrapped;
 }
 /**
-* Clean a file path by stripping control token fragments.
-* Returns null if the path is irreparably corrupted (empty after cleanup).
+* Sanitize a single string value: strip control tokens + residual fragments.
+* Returns the cleaned string, or the original if no changes needed.
 */
-function cleanFilePath(filePath) {
-	let cleaned = filePath.replace(/<\|[^|>]*(?:\|>)?/g, "");
-	cleaned = cleanResidualTokenFragments(cleaned);
-	cleaned = cleaned.trim();
-	if (!cleaned || !/[a-zA-Z0-9/._~-]/.test(cleaned)) return {
-		valid: false,
-		cleaned
-	};
+function sanitizeString(value) {
+	return cleanResidualTokenFragments(stripModelTokensAggressive(value, GEMMA_MODEL_ID));
+}
+/**
+* Check if a string contains control token patterns that need sanitization.
+* Fast check to avoid unnecessary work on clean strings.
+*/
+function needsSanitization(value) {
+	return value.includes("<|") || value.includes("|>") || /^[<"|]/.test(value);
+}
+/**
+* Recursively sanitize all string values in a params object.
+* Returns a new object if any values were changed, or the original if clean.
+*/
+function sanitizeParams(params) {
+	let changed = false;
+	const cleaned = {};
+	for (const [key, value] of Object.entries(params)) {
+		if (typeof value === "string" && needsSanitization(value)) {
+			const sanitized = sanitizeString(value);
+			if (sanitized !== value) {
+				cleaned[key] = sanitized;
+				changed = true;
+				continue;
+			}
+		}
+		cleaned[key] = value;
+	}
 	return {
-		valid: true,
-		cleaned
+		cleaned,
+		changed
 	};
 }
 /**
-* Wrap a single tool with argument validation.
+* Wrap a single tool with universal argument sanitization.
 */
 function wrapToolWithArgValidation(tool) {
 	const toolName = (tool.name ?? "").toLowerCase().trim();
 	const isExecTool = EXEC_TOOL_NAMES.has(toolName);
-	const isFileTool = FILE_TOOL_NAMES.has(toolName);
-	if (!isExecTool && !isFileTool) return tool;
 	const originalExecute = tool.execute;
 	return {
 		...tool,
 		execute(toolCallId, params, ...rest) {
+			const { cleaned, changed } = sanitizeParams(params);
+			if (changed) log$1.debug(`[validate] sanitized args for ${toolName}: ${Object.keys(params).filter((k) => cleaned[k] !== params[k]).join(",")}`);
+			const effectiveParams = changed ? cleaned : params;
 			if (isExecTool) {
-				const command = params.command ?? params.cmd;
+				const command = effectiveParams.command ?? effectiveParams.cmd;
 				if (typeof command !== "string") {
-					log$1.debug(`[validate] exec called without string command: keys=${Object.keys(params).join(",")}`);
-					return originalExecute.call(tool, toolCallId, params, ...rest);
+					log$1.debug(`[validate] exec called without string command: keys=${Object.keys(effectiveParams).join(",")}`);
+					return originalExecute.call(tool, toolCallId, effectiveParams, ...rest);
 				}
 				const result = validateShellCommand(command);
 				if (!result.valid) {
@@ -42414,22 +42419,12 @@ function wrapToolWithArgValidation(tool) {
 				if (result.cleaned !== command) {
 					log$1.debug(`[validate] exec command cleaned: raw=${command.slice(0, 80)} → cleaned=${result.cleaned.slice(0, 80)}`);
 					return originalExecute.call(tool, toolCallId, {
-						...params,
+						...effectiveParams,
 						command: result.cleaned
 					}, ...rest);
 				}
-				return originalExecute.call(tool, toolCallId, params, ...rest);
 			}
-			const pathKey = FILE_PATH_KEYS.find((k) => typeof params[k] === "string");
-			if (!pathKey) return originalExecute.call(tool, toolCallId, params, ...rest);
-			const rawPath = params[pathKey];
-			if (!rawPath.includes("<|") && !rawPath.includes("|>") && !/^[<"|]/.test(rawPath)) return originalExecute.call(tool, toolCallId, params, ...rest);
-			const pathResult = cleanFilePath(rawPath);
-			if (!pathResult.valid) return Promise.resolve({ output: `Error: file path "${rawPath}" contains model control tokens and could not be cleaned. Please provide a clean file path without any <|, |>, or XML-like tags.` });
-			return originalExecute.call(tool, toolCallId, {
-				...params,
-				[pathKey]: pathResult.cleaned
-			}, ...rest);
+			return originalExecute.call(tool, toolCallId, effectiveParams, ...rest);
 		}
 	};
 }
@@ -60601,7 +60596,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-CHV60IdQ.js");
+			const { sendMessageWhatsApp } = await import("./web-WfZujXg4.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -75881,7 +75876,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-CHV60IdQ.js");
+	webChannelPromise ??= import("./web-WfZujXg4.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{plugin-registry-C1ghjhOE.js → plugin-registry-CTu9B9S3.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { M as getActivePluginRegistry, o as createSubsystemLogger } from "./entry.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-D-jRCY0d.js";
 import { i as loadConfig } from "./config-DHBLS1Hl.js";
-import { m as loadSymiPlugins } from "./subagent-registry-CVQOC9Jw.js";
+import { m as loadSymiPlugins } from "./subagent-registry-DovA8Baf.js";
 
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/{plugin-registry-CDIOKK_i.js → plugin-registry-DDIcHkNU.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { ft as loadSymiPlugins } from "./reply-DcyKvFor.js";
+import { ft as loadSymiPlugins } from "./reply-BR3MMmPE.js";
 import { d as getActivePluginRegistry } from "./registry-Cja8eT7G.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-CgUHAtCo.js";

package/dist/plugin-sdk/{accounts-BToL3HlP.js → accounts-BtaOa4z_.js}

@@ -1,5 +1,5 @@
 import { p as normalizeAccountId } from "./session-key-C_0eELjb.js";
-import { _ as createAccountListHelpers } from "./accounts-D9zGZU5t.js";
+import { _ as createAccountListHelpers } from "./accounts-Ddm33hQm.js";
 
 //#region src/signal/accounts.ts
 const { listAccountIds, resolveDefaultAccountId } = createAccountListHelpers("signal");

package/dist/plugin-sdk/{accounts-D9zGZU5t.js → accounts-Ddm33hQm.js}

@@ -1,8 +1,8 @@
 import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-C_0eELjb.js";
 import { a as resolveOAuthDir } from "./paths-DR2yt_mP.js";
-import { P as resolveUserPath, W as info, X as success, k as jidToE164, tt as getChildLogger } from "./registry--_pGht6S.js";
-import { i as defaultRuntime } from "./subsystem-Coz2AgU8.js";
-import { t as formatCliCommand } from "./command-format-DSdvQ_M5.js";
+import { P as resolveUserPath, W as info, X as success, k as jidToE164, tt as getChildLogger } from "./registry-D0xTnUWt.js";
+import { i as defaultRuntime } from "./subsystem-B2uDN3TV.js";
+import { t as formatCliCommand } from "./command-format-GKSevep4.js";
 import fs from "node:fs";
 import path from "node:path";
 import fs$1 from "node:fs/promises";

package/dist/plugin-sdk/{accounts-Dtszw3Zn.js → accounts-s-AdhXVR.js}

@@ -1,5 +1,5 @@
 import { p as normalizeAccountId } from "./session-key-C_0eELjb.js";
-import { _ as createAccountListHelpers } from "./accounts-D9zGZU5t.js";
+import { _ as createAccountListHelpers } from "./accounts-Ddm33hQm.js";
 
 //#region src/imessage/accounts.ts
 const { listAccountIds, resolveDefaultAccountId } = createAccountListHelpers("imessage");

package/dist/plugin-sdk/{active-listener-bEk__wbB.js → active-listener-BXYeALs0.js}

@@ -1,5 +1,5 @@
 import { f as DEFAULT_ACCOUNT_ID } from "./session-key-C_0eELjb.js";
-import { t as formatCliCommand } from "./command-format-DSdvQ_M5.js";
+import { t as formatCliCommand } from "./command-format-GKSevep4.js";
 
 //#region src/web/active-listener.ts
 const listeners = /* @__PURE__ */ new Map();

package/dist/plugin-sdk/{agent-scope-C3gMMKCU.js → agent-scope-CYYpcO9W.js}

@@ -1,7 +1,7 @@
 import { _ as isCronSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, v as isSubagentSessionKey, y as parseAgentSessionKey } from "./session-key-C_0eELjb.js";
 import { s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-DR2yt_mP.js";
-import { P as resolveUserPath, U as danger, W as info, Y as shouldLogVerbose, Z as warn, j as pathExists, nt as getLogger, q as logVerboseConsole } from "./registry--_pGht6S.js";
-import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-Coz2AgU8.js";
+import { P as resolveUserPath, U as danger, W as info, Y as shouldLogVerbose, Z as warn, j as pathExists, nt as getLogger, q as logVerboseConsole } from "./registry-D0xTnUWt.js";
+import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-B2uDN3TV.js";
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";

package/dist/plugin-sdk/agents/pi-tools.validate-wrapper.d.ts

@@ -1,23 +1,23 @@
 /**
- * Tool argument validation wrapper — validates exec/bash commands and
- * file paths before execution when the model profile has validateToolArgs enabled.
+ * Universal tool argument sanitizer — strips model control tokens from ALL
+ * string arguments on ALL tools when the model profile has validateToolArgs
+ * enabled. Exec/bash commands get additional structural validation.
  *
- * Gated on ModelProfile.filters.validateToolArgs. Returns an instructive
- * error message when corruption is detected, giving the model a chance
- * to retry with clean arguments.
+ * Gated on ModelProfile.filters.validateToolArgs. Claude gets passthrough.
+ * Gemma/Ollama profiles get full sanitization.
  *
  * @module
  */
 import type { ModelProfile } from "../config/model-profiles.js";
 import type { AnyAgentTool } from "./pi-tools.types.js";
 /**
- * Wrap tools with argument validation. Exec/bash commands and file paths
- * are validated. Other tools pass through unchanged.
+ * Wrap ALL tools with universal string argument sanitization.
+ * Exec/bash tools get additional structural command validation.
  *
  * Call this AFTER tools are created and the model profile is resolved.
  */
 export declare function wrapToolsWithArgValidation(tools: AnyAgentTool[], profile: ModelProfile): AnyAgentTool[];
 /**
- * Wrap a single tool with argument validation.
+ * Wrap a single tool with universal argument sanitization.
  */
 export declare function wrapToolWithArgValidation(tool: AnyAgentTool): AnyAgentTool;

package/dist/plugin-sdk/{api-key-rotation-CVBMpnPc.js → api-key-rotation-D_sMvI5W.js}

@@ -1,4 +1,4 @@
-import { c as normalizeProviderId } from "./model-selection-OpU8HN50.js";
+import { c as normalizeProviderId } from "./model-selection-CsbEfrS0.js";
 import { n as formatErrorMessage } from "./errors-Bv8oZiTO.js";
 
 //#region src/infra/gemini-auth.ts

package/dist/plugin-sdk/{audio-preflight-DoQQKlxa.js → audio-preflight-VpItkiy3.js}

@@ -1,34 +1,34 @@
-import "./accounts-D9zGZU5t.js";
+import "./accounts-Ddm33hQm.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
-import "./plugins-BbAvhC25.js";
-import { K as logVerbose, Y as shouldLogVerbose } from "./registry--_pGht6S.js";
-import "./config-DDkdiUOR.js";
-import "./subsystem-Coz2AgU8.js";
-import "./command-format-DSdvQ_M5.js";
-import "./model-selection-OpU8HN50.js";
-import "./agent-scope-C3gMMKCU.js";
-import "./manifest-registry-B3ugY9-f.js";
+import "./plugins-BNByVCIH.js";
+import { K as logVerbose, Y as shouldLogVerbose } from "./registry-D0xTnUWt.js";
+import "./config-KlTNfkFF.js";
+import "./subsystem-B2uDN3TV.js";
+import "./command-format-GKSevep4.js";
+import "./model-selection-CsbEfrS0.js";
+import "./agent-scope-CYYpcO9W.js";
+import "./manifest-registry-CPnHl_K3.js";
 import "./redact-DPnDWsnT.js";
 import "./errors-Bv8oZiTO.js";
-import "./image-ops-Bnp6LXEx.js";
+import "./image-ops-BlQR__MN.js";
 import "./ssrf-DKZ8eBrk.js";
-import "./local-roots-Ckk1QfzI.js";
-import "./message-channel-BdI5Ra9S.js";
-import "./bindings-BbwoUGPx.js";
-import "./tool-images-D7Lno-TE.js";
-import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-BVqnEfNe.js";
-import "./skills-B1GeRYlu.js";
-import "./chrome-C7c_0I5M.js";
-import "./thinking-DCNUIAHY.js";
-import "./accounts-Dtszw3Zn.js";
-import "./accounts-BToL3HlP.js";
-import "./pi-embedded-helpers-BveUP4hk.js";
+import "./local-roots-BHLNSI8U.js";
+import "./message-channel-COTAJzHd.js";
+import "./bindings-C7hRtgYW.js";
+import "./tool-images-HJ2sfZDV.js";
+import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-CGBT7tgF.js";
+import "./skills-_yTP47Cd.js";
+import "./chrome-B7RdxmJ0.js";
+import "./thinking-CXqf7WTe.js";
+import "./accounts-s-AdhXVR.js";
+import "./accounts-BtaOa4z_.js";
+import "./pi-embedded-helpers-CW630epe.js";
 import "./paths-A0xdf3yk.js";
-import "./store-Do3t33-c.js";
-import "./image-BOYy0Ump.js";
+import "./store-BdrNabcU.js";
+import "./image-CLOPx7yW.js";
 import "./pi-model-discovery-LbcEa65a.js";
-import "./api-key-rotation-CVBMpnPc.js";
+import "./api-key-rotation-D_sMvI5W.js";
 
 //#region src/media-understanding/audio-preflight.ts
 /**

package/dist/plugin-sdk/{bindings-BbwoUGPx.js → bindings-C7hRtgYW.js}

@@ -1,6 +1,6 @@
 import { p as normalizeAccountId, s as normalizeAgentId } from "./session-key-C_0eELjb.js";
-import { s as normalizeChatChannelId } from "./registry--_pGht6S.js";
-import { c as resolveDefaultAgentId } from "./agent-scope-C3gMMKCU.js";
+import { s as normalizeChatChannelId } from "./registry-D0xTnUWt.js";
+import { c as resolveDefaultAgentId } from "./agent-scope-CYYpcO9W.js";
 
 //#region src/routing/bindings.ts
 function normalizeBindingChannelId(raw) {

package/dist/plugin-sdk/{channel-activity-Ji7f0gqq.js → channel-activity-DoC1xtDu.js}

@@ -1,4 +1,4 @@
-import { n as retryAsync, t as resolveRetryConfig } from "./retry-ilSJqnz9.js";
+import { n as retryAsync, t as resolveRetryConfig } from "./retry-CwQ_iIj8.js";
 import { n as formatErrorMessage } from "./errors-Bv8oZiTO.js";
 import { RateLimitError } from "@buape/carbon";
 

package/dist/plugin-sdk/{channel-web-CxwLjrWk.js → channel-web-BmV3Tuy0.js}

@@ -1,28 +1,28 @@
 import { a as buildGroupHistoryKey, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-C_0eELjb.js";
-import { f as readWebSelfId, o as getWebAuthAgeMs, r as resolveWhatsAppAccount } from "./accounts-D9zGZU5t.js";
-import { E as enqueueSystemEvent, G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as resolveEnvelopeFormatOptions, c as computeBackoff, d as formatDurationPrecise, f as dispatchReplyWithBufferedBlockDispatcher, g as formatInboundEnvelope, h as resolveInboundDebounceMs, ht as createDedupeCache, l as sleepWithAbort, m as createInboundDebouncer, n as normalizeGroupActivation, nt as buildMentionRegexes, r as parseActivationCommand, rt as normalizeMentionText, t as getReplyFromConfig, tt as recordPendingHistoryEntryIfEnabled, u as buildPairingReply, v as hasControlCommand, y as shouldComputeCommandAuthorized } from "./reply-CyZfsjrl.js";
-import { A as normalizeE164, B as toWhatsappJid, K as logVerbose, N as resolveJidToE164, O as isSelfChatMode, R as sleep, Y as shouldLogVerbose, k as jidToE164, s as normalizeChatChannelId, tt as getChildLogger, x as clamp } from "./registry--_pGht6S.js";
-import { n as loadConfig } from "./config-DDkdiUOR.js";
-import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-Coz2AgU8.js";
-import { t as formatCliCommand } from "./command-format-DSdvQ_M5.js";
-import { n as recordChannelActivity } from "./channel-activity-Ji7f0gqq.js";
-import { t as getAgentScopedMediaLocalRoots } from "./local-roots-Ckk1QfzI.js";
-import { a as loadWebMedia } from "./ir-Fb3qpcis.js";
-import { c as resolveChunkMode, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit } from "./chunk-jvk9axTQ.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-Dfaqilz6.js";
-import { t as convertMarkdownTables } from "./tables-DR0NmBeH.js";
-import { G as readChannelAllowFromStore, J as upsertChannelPairingRequest, K as readChannelAllowFromStoreSync, nt as toLocationContext, tt as formatLocationText } from "./send-D6LMZJ_h.js";
-import { f as registerUnhandledRejectionHandler } from "./runner-BVqnEfNe.js";
-import { l as resolveIdentityNamePrefix, n as createReplyPrefixOptions, u as resolveMessagePrefix } from "./reply-prefix-BHuV5t70.js";
-import { F as resolveChannelGroupRequireMention, P as resolveChannelGroupPolicy } from "./thinking-DCNUIAHY.js";
-import { Xt as resolveGroupSessionKey, _t as updateLastRoute, gt as recordSessionMetaFromInbound, ht as readSessionUpdatedAt, mt as loadSessionStore } from "./pi-embedded-helpers-BveUP4hk.js";
+import { f as readWebSelfId, o as getWebAuthAgeMs, r as resolveWhatsAppAccount } from "./accounts-Ddm33hQm.js";
+import { E as enqueueSystemEvent, G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as resolveEnvelopeFormatOptions, c as computeBackoff, d as formatDurationPrecise, f as dispatchReplyWithBufferedBlockDispatcher, g as formatInboundEnvelope, h as resolveInboundDebounceMs, ht as createDedupeCache, l as sleepWithAbort, m as createInboundDebouncer, n as normalizeGroupActivation, nt as buildMentionRegexes, r as parseActivationCommand, rt as normalizeMentionText, t as getReplyFromConfig, tt as recordPendingHistoryEntryIfEnabled, u as buildPairingReply, v as hasControlCommand, y as shouldComputeCommandAuthorized } from "./reply-LQcs9anV.js";
+import { A as normalizeE164, B as toWhatsappJid, K as logVerbose, N as resolveJidToE164, O as isSelfChatMode, R as sleep, Y as shouldLogVerbose, k as jidToE164, s as normalizeChatChannelId, tt as getChildLogger, x as clamp } from "./registry-D0xTnUWt.js";
+import { n as loadConfig } from "./config-KlTNfkFF.js";
+import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-B2uDN3TV.js";
+import { t as formatCliCommand } from "./command-format-GKSevep4.js";
+import { n as recordChannelActivity } from "./channel-activity-DoC1xtDu.js";
+import { t as getAgentScopedMediaLocalRoots } from "./local-roots-BHLNSI8U.js";
+import { a as loadWebMedia } from "./ir-BJ6BHE5b.js";
+import { c as resolveChunkMode, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit } from "./chunk-Dw2XBYXv.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-BoYFajMu.js";
+import { t as convertMarkdownTables } from "./tables-DNwXwNFa.js";
+import { G as readChannelAllowFromStore, J as upsertChannelPairingRequest, K as readChannelAllowFromStoreSync, nt as toLocationContext, tt as formatLocationText } from "./send-CRsR8-vO.js";
+import { f as registerUnhandledRejectionHandler } from "./runner-CGBT7tgF.js";
+import { l as resolveIdentityNamePrefix, n as createReplyPrefixOptions, u as resolveMessagePrefix } from "./reply-prefix-uxfMZW4p.js";
+import { F as resolveChannelGroupRequireMention, P as resolveChannelGroupPolicy } from "./thinking-CXqf7WTe.js";
+import { Xt as resolveGroupSessionKey, _t as updateLastRoute, gt as recordSessionMetaFromInbound, ht as readSessionUpdatedAt, mt as loadSessionStore } from "./pi-embedded-helpers-CW630epe.js";
 import { s as resolveStorePath } from "./paths-A0xdf3yk.js";
-import { i as saveMediaBuffer } from "./store-Do3t33-c.js";
+import { i as saveMediaBuffer } from "./store-BdrNabcU.js";
 import { t as finalizeInboundContext } from "./inbound-context-D5EzMeL_.js";
-import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-D3JH_D2N.js";
-import { r as setActiveWebListener } from "./active-listener-bEk__wbB.js";
-import { i as markdownToWhatsApp, r as sendReactionWhatsApp } from "./outbound-rF6G8Xpr.js";
-import { i as waitForWaConnection, n as formatError, r as getStatusCode, t as createWaSocket } from "./session-kI0tzViQ.js";
+import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-B3CCBumQ.js";
+import { r as setActiveWebListener } from "./active-listener-BXYeALs0.js";
+import { i as markdownToWhatsApp, r as sendReactionWhatsApp } from "./outbound-B0e8KdaR.js";
+import { i as waitForWaConnection, n as formatError, r as getStatusCode, t as createWaSocket } from "./session-BsOrxiMj.js";
 import { randomUUID } from "node:crypto";
 import { DisconnectReason, downloadMediaMessage, extractMessageContent, getContentType, isJidGroup, normalizeMessageContent } from "@whiskeysockets/baileys";
 

package/dist/plugin-sdk/{chrome-C7c_0I5M.js → chrome-B7RdxmJ0.js}

@@ -1,6 +1,6 @@
-import { b as CONFIG_DIR } from "./registry--_pGht6S.js";
-import { n as loadConfig } from "./config-DDkdiUOR.js";
-import { t as createSubsystemLogger } from "./subsystem-Coz2AgU8.js";
+import { b as CONFIG_DIR } from "./registry-D0xTnUWt.js";
+import { n as loadConfig } from "./config-KlTNfkFF.js";
+import { t as createSubsystemLogger } from "./subsystem-B2uDN3TV.js";
 import { i as isErrno } from "./errors-Bv8oZiTO.js";
 import { s as resolvePinnedHostnameWithPolicy } from "./ssrf-DKZ8eBrk.js";
 import fs from "node:fs";

package/dist/plugin-sdk/{chunk-jvk9axTQ.js → chunk-Dw2XBYXv.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { p as normalizeAccountId } from "./session-key-C_0eELjb.js";
-import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-BdI5Ra9S.js";
+import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-COTAJzHd.js";
 
 //#region src/markdown/fences.ts
 function parseFenceSpans(buffer) {