@symerian/symi 2.6.7 → 2.6.8

package/dist/{subagent-registry-CVQOC9Jw.js → subagent-registry-DovA8Baf.js}

@@ -35609,25 +35609,10 @@ function validateShellCommand(command) {
 //#region src/agents/pi-tools.validate-wrapper.ts
 const log$1 = createSubsystemLogger("agents/tool-validate");
 const EXEC_TOOL_NAMES = new Set(["exec", "bash"]);
-const FILE_TOOL_NAMES = new Set([
-	"write",
-	"read",
-	"edit",
-	"patch",
-	"file_write",
-	"file_edit",
-	"write_file",
-	"edit_file",
-	"create_file"
-]);
-const FILE_PATH_KEYS = [
-	"file_path",
-	"path",
-	"filePath"
-];
+const GEMMA_MODEL_ID = "gemma";
 /**
-* Wrap tools with argument validation. Exec/bash commands and file paths
-* are validated. Other tools pass through unchanged.
+* Wrap ALL tools with universal string argument sanitization.
+* Exec/bash tools get additional structural command validation.
 *
 * Call this AFTER tools are created and the model profile is resolved.
 */
@@ -35637,44 +35622,64 @@ function wrapToolsWithArgValidation(tools, profile) {
 		return tools;
 	}
 	const wrapped = tools.map((tool) => wrapToolWithArgValidation(tool));
-	const wrappedNames = wrapped.filter((t, i) => t !== tools[i]).map((t) => t.name);
-	log$1.debug(`[validate] applied to ${wrappedNames.length} tools: ${wrappedNames.join(",") || "(none matched)"}`);
+	log$1.debug(`[validate] universal sanitizer applied to ${wrapped.length} tools`);
 	return wrapped;
 }
 /**
-* Clean a file path by stripping control token fragments.
-* Returns null if the path is irreparably corrupted (empty after cleanup).
+* Sanitize a single string value: strip control tokens + residual fragments.
+* Returns the cleaned string, or the original if no changes needed.
 */
-function cleanFilePath(filePath) {
-	let cleaned = filePath.replace(/<\|[^|>]*(?:\|>)?/g, "");
-	cleaned = cleanResidualTokenFragments(cleaned);
-	cleaned = cleaned.trim();
-	if (!cleaned || !/[a-zA-Z0-9/._~-]/.test(cleaned)) return {
-		valid: false,
-		cleaned
-	};
+function sanitizeString(value) {
+	return cleanResidualTokenFragments(stripModelTokensAggressive(value, GEMMA_MODEL_ID));
+}
+/**
+* Check if a string contains control token patterns that need sanitization.
+* Fast check to avoid unnecessary work on clean strings.
+*/
+function needsSanitization(value) {
+	return value.includes("<|") || value.includes("|>") || /^[<"|]/.test(value);
+}
+/**
+* Recursively sanitize all string values in a params object.
+* Returns a new object if any values were changed, or the original if clean.
+*/
+function sanitizeParams(params) {
+	let changed = false;
+	const cleaned = {};
+	for (const [key, value] of Object.entries(params)) {
+		if (typeof value === "string" && needsSanitization(value)) {
+			const sanitized = sanitizeString(value);
+			if (sanitized !== value) {
+				cleaned[key] = sanitized;
+				changed = true;
+				continue;
+			}
+		}
+		cleaned[key] = value;
+	}
 	return {
-		valid: true,
-		cleaned
+		cleaned,
+		changed
 	};
 }
 /**
-* Wrap a single tool with argument validation.
+* Wrap a single tool with universal argument sanitization.
 */
 function wrapToolWithArgValidation(tool) {
 	const toolName = (tool.name ?? "").toLowerCase().trim();
 	const isExecTool = EXEC_TOOL_NAMES.has(toolName);
-	const isFileTool = FILE_TOOL_NAMES.has(toolName);
-	if (!isExecTool && !isFileTool) return tool;
 	const originalExecute = tool.execute;
 	return {
 		...tool,
 		execute(toolCallId, params, ...rest) {
+			const { cleaned, changed } = sanitizeParams(params);
+			if (changed) log$1.debug(`[validate] sanitized args for ${toolName}: ${Object.keys(params).filter((k) => cleaned[k] !== params[k]).join(",")}`);
+			const effectiveParams = changed ? cleaned : params;
 			if (isExecTool) {
-				const command = params.command ?? params.cmd;
+				const command = effectiveParams.command ?? effectiveParams.cmd;
 				if (typeof command !== "string") {
-					log$1.debug(`[validate] exec called without string command: keys=${Object.keys(params).join(",")}`);
-					return originalExecute.call(tool, toolCallId, params, ...rest);
+					log$1.debug(`[validate] exec called without string command: keys=${Object.keys(effectiveParams).join(",")}`);
+					return originalExecute.call(tool, toolCallId, effectiveParams, ...rest);
 				}
 				const result = validateShellCommand(command);
 				if (!result.valid) {
@@ -35684,22 +35689,12 @@ function wrapToolWithArgValidation(tool) {
 				if (result.cleaned !== command) {
 					log$1.debug(`[validate] exec command cleaned: raw=${command.slice(0, 80)} → cleaned=${result.cleaned.slice(0, 80)}`);
 					return originalExecute.call(tool, toolCallId, {
-						...params,
+						...effectiveParams,
 						command: result.cleaned
 					}, ...rest);
 				}
-				return originalExecute.call(tool, toolCallId, params, ...rest);
 			}
-			const pathKey = FILE_PATH_KEYS.find((k) => typeof params[k] === "string");
-			if (!pathKey) return originalExecute.call(tool, toolCallId, params, ...rest);
-			const rawPath = params[pathKey];
-			if (!rawPath.includes("<|") && !rawPath.includes("|>") && !/^[<"|]/.test(rawPath)) return originalExecute.call(tool, toolCallId, params, ...rest);
-			const pathResult = cleanFilePath(rawPath);
-			if (!pathResult.valid) return Promise.resolve({ output: `Error: file path "${rawPath}" contains model control tokens and could not be cleaned. Please provide a clean file path without any <|, |>, or XML-like tags.` });
-			return originalExecute.call(tool, toolCallId, {
-				...params,
-				[pathKey]: pathResult.cleaned
-			}, ...rest);
+			return originalExecute.call(tool, toolCallId, effectiveParams, ...rest);
 		}
 	};
 }
@@ -53025,7 +53020,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-ZnFT5LP9.js");
+			const { sendMessageWhatsApp } = await import("./web-DMBrhq3h.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -68339,7 +68334,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-ZnFT5LP9.js");
+	webChannelPromise ??= import("./web-DMBrhq3h.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{unified-runner-CxscxYKm.js → unified-runner-OplgmcEq.js}

@@ -10,10 +10,10 @@ import { $ as resolveSymiAgentDir, B as resolveApiKeyForProvider, C as normalize
 import { n as formatCliCommand, r as resolveCliName, t as isTruthyEnvValue } from "./env-BDXYbTKj.js";
 import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-cCYzSU9h.js";
 import { t as parseBooleanValue$1 } from "./boolean-CE7i9tBR.js";
-import { $ as normalizeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, G as updateLastRoute, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as isCacheEnabled, Jt as ensureSessionHeader, K as updateSessionStore, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as mergeDeliveryContext, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as deliveryContextFromSession, Xt as resolveBootstrapTotalMaxChars, Y as resolveCacheTtlMs$1, Yt as resolveBootstrapMaxChars, Z as deliveryContextKey, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as resolveFreshSessionTotalTokens, a as isMessagingToolDuplicateNormalized, at as extractToolCallNames, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as hasInterSessionUserProvenance, d as isAntigravityClaude, dt as evaluateSessionFreshness, et as normalizeSessionDeliveryFields, f as isGoogleModelApi, ft as resolveChannelResetConfig, g as formatBillingErrorMessage, gt as DEFAULT_RESET_TRIGGERS, h as formatAssistantErrorText, ht as resolveThreadFlag, it as countToolResults, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as normalizeInputProvenance, m as classifyFailoverReason, mt as resolveSessionResetType, n as validateGeminiTurns, nt as archiveSessionTranscripts, o as normalizeTextForComparison, ot as INPUT_PROVENANCE_KIND_VALUES, p as BILLING_ERROR_USER_MESSAGE, pt as resolveSessionResetPolicy, q as updateSessionStoreEntry, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as capArrayByJsonBytes, s as sanitizeSessionMessagesImages, st as applyInputProvenanceToUserMessage, t as validateAnthropicTurns, tt as normalizeAccountId$3, u as downgradeOpenAIReasoningBlocks, ut as resolveSessionKey, v as getApiErrorPayloadFingerprint, vt as canonicalizeMainSessionAlias, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-CfqDGQ9J.js";
+import { $ as normalizeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, G as updateLastRoute, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as isCacheEnabled, Jt as ensureSessionHeader, K as updateSessionStore, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as mergeDeliveryContext, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as deliveryContextFromSession, Xt as resolveBootstrapTotalMaxChars, Y as resolveCacheTtlMs$1, Yt as resolveBootstrapMaxChars, Z as deliveryContextKey, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as resolveFreshSessionTotalTokens, a as isMessagingToolDuplicateNormalized, at as extractToolCallNames, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as hasInterSessionUserProvenance, d as isAntigravityClaude, dt as evaluateSessionFreshness, et as normalizeSessionDeliveryFields, f as isGoogleModelApi, ft as resolveChannelResetConfig, g as formatBillingErrorMessage, gt as DEFAULT_RESET_TRIGGERS, h as formatAssistantErrorText, ht as resolveThreadFlag, it as countToolResults, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as normalizeInputProvenance, m as classifyFailoverReason, mt as resolveSessionResetType, n as validateGeminiTurns, nt as archiveSessionTranscripts, o as normalizeTextForComparison, ot as INPUT_PROVENANCE_KIND_VALUES, p as BILLING_ERROR_USER_MESSAGE, pt as resolveSessionResetPolicy, q as updateSessionStoreEntry, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as capArrayByJsonBytes, s as sanitizeSessionMessagesImages, st as applyInputProvenanceToUserMessage, t as validateAnthropicTurns, tt as normalizeAccountId$3, u as downgradeOpenAIReasoningBlocks, ut as resolveSessionKey, v as getApiErrorPayloadFingerprint, vt as canonicalizeMainSessionAlias, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-pubKo8HQ.js";
 import { A as VERSION, C as getConfigValueAtPath, D as isSafeExecutableValue, E as unsetConfigValueAtPath, O as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, S as unsetConfigOverride, T as setConfigValueAtPath, _ as parseDurationMs, a as writeConfigFile, b as resetConfigOverrides, c as TELEGRAM_COMMAND_NAME_PATTERN, f as isInboundPathAllowed, g as normalizeScpRemoteHost, h as resolveIMessageRemoteAttachmentRoots, i as resolveConfigSnapshotHash, k as resolveAgentMaxConcurrent, l as normalizeTelegramCommandName, m as resolveIMessageAttachmentRoots, n as loadConfig, o as validateConfigObjectWithPlugins, r as readConfigFileSnapshot, u as resolveTelegramCustomCommands, v as validateJsonSchemaValue, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-5SdHIcHU.js";
 import { a as applyTestPluginDefaults, c as resolveMemorySlotDecision, d as isDangerousHostEnvVarName, i as safeStatSync, n as discoverSymiPlugins, o as normalizePluginsConfig, r as isPathInside, s as resolveEnableState, t as loadPluginManifestRegistry, u as isPathInsideWithRealpath } from "./manifest-registry-yb7sAlu4.js";
-import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-DkaXoP36.js";
+import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-DYZwl5Gv.js";
 import { c as assertSandboxPath, d as resolveSandboxedMediaSource, f as applySkillEnvOverrides, i as resolveSkillsPromptForRun, l as resolveSandboxInputPath, n as buildWorkspaceSkillSnapshot, p as applySkillEnvOverridesFromSnapshot, r as loadWorkspaceSkillEntries, s as assertMediaNotDataUrl } from "./skills-Bs0AW1g3.js";
 import { n as formatErrorMessage, r as formatUncaughtError } from "./errors-XIsvXeC-.js";
 import { c as detectMime, d as imageMimeFromFormat, f as isAudioFileName, g as MAX_IMAGE_BYTES, i as getImageMetadata, l as extensionForMime, p as isGifMedia, s as resizeToJpeg, v as mediaKindFromMime } from "./image-ops-C7CauEK8.js";
@@ -31,10 +31,10 @@ import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i
 import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as resolveTimestampMs, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as resolveDiscordSystemLocation, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordShouldRequireMention, a as removeReactionDiscord, at as resolveDiscordChannelId, b as sendWebhookMessageDiscord, bt as formatDiscordReactionEmoji, c as formatDiscordComponentEventText, ct as allowListMatches$1, d as parseDiscordModalCustomId, dt as normalizeDiscordSlug, et as hasAnyGuildPermissionDiscord, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordAllowListMatch, g as sendMessageDiscord, gt as resolveDiscordOwnerAllowFrom, h as resolveDiscordModalEntry, ht as resolveDiscordMemberAccessState, i as removeOwnReactionsDiscord, it as parseDiscordTarget, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as isDiscordGroupAllowedByPolicy, m as resolveDiscordComponentEntry, mt as resolveDiscordGuildEntry, n as fetchReactionsDiscord, nt as createDiscordClient, o as sendDiscordComponentMessage, ot as listDiscordDirectoryGroupsLive, p as readDiscordComponentSpec, pt as resolveDiscordChannelConfigWithFallback, q as deleteChannelDiscord, r as reactMessageDiscord, rt as createDiscordRestClient, s as createDiscordFormModal, st as listDiscordDirectoryPeersLive, tt as chunkDiscordTextWithMode, u as parseDiscordComponentCustomIdForCarbon, ut as normalizeDiscordAllowList, v as sendStickerDiscord, vt as resolveGroupDmAllow, w as fetchMessageDiscord, wt as fetchDiscord, x as createThreadDiscord, xt as formatDiscordUserTag, y as sendVoiceMessageDiscord, yt as shouldEmitDiscordReactionNotification, z as listGuildChannelsDiscord } from "./send-CvhXrdgS.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-BBh3Gsrx.js";
 import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-SqqWIT22.js";
-import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-C46-vyqg.js";
+import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-dODxSv3b.js";
 import { a as logMessageProcessed, c as logWebhookError, d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, i as logLaneEnqueue, l as logWebhookProcessed, m as isDiagnosticsEnabled, o as logMessageQueued, p as emitDiagnosticEvent, r as logLaneDequeue, s as logSessionStateChange, t as diag, u as logWebhookReceived } from "./diagnostic-rPhsBoZz.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-Zw87xFym.js";
-import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-CuzFLQWC.js";
+import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-CXu8W39c.js";
 import { a as isSilentReplyText, i as isSilentReplyPrefixText, n as SILENT_REPLY_TOKEN, r as SYMIPULSE_TOKEN, t as HEARTBEAT_TOKEN } from "./tokens-Bux9Y_xD.js";
 import { $ as isVoiceCompatibleAudio, A as extractTelegramLocation, B as normalizeAllowFromWithStore$1, C as buildTelegramGroupFrom, D as buildTypingThreadParams, E as buildTelegramThreadParams, F as resolveTelegramMediaPlaceholder, G as formatLocationText, H as firstDefined$1, I as resolveTelegramReplyId, J as readChannelAllowFromStore, K as toLocationContext, L as resolveTelegramStreamMode, M as normalizeForwardedContext, N as resolveTelegramForumThreadId, O as describeReplyTarget, P as resolveTelegramGroupAllowFromContext, Q as listPairingChannels, R as resolveTelegramThreadSpec, S as buildSenderName, T as buildTelegramParentPeer, U as isSenderIdAllowed, V as resolveSenderAllowMatch, W as mergeAllowFromSources, X as upsertChannelPairingRequest, Y as removeChannelAllowFromStoreEntry, Z as getPairingAdapter, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildGroupLabel, c as sendStickerTelegram, d as wasSentByBot, et as parseTelegramTarget, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as hasBotMention, k as expandTextLinks, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as addChannelAllowFromStoreEntry, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, tt as resolveTelegramTargetChatType, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramGroupPeerId, x as buildSenderLabel, y as withTelegramApiErrorLogging, z as isSenderAllowed$1 } from "./send-DYj_o4_F.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-Bv5YDJc8.js";
@@ -49,7 +49,7 @@ import { n as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-DL3f
 import { a as readResponseWithLimit, i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, o as fetchWithSsrFGuard, t as getAgentScopedMediaLocalRoots } from "./local-roots-DhZz0Ybs.js";
 import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-CTiz95Vb.js";
 import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-Bfc7Uz0o.js";
-import { _ as CLI_OUTPUT_MAX_BUFFER, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as resolveMediaUnderstandingScope, h as normalizeMediaUnderstandingChatType, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveTimeoutMs$1, n as createMediaAttachmentCache, o as runCapability, p as resolveConcurrency, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as applyTemplate, y as registerUnhandledRejectionHandler } from "./runner-CU9l0uJh.js";
+import { _ as CLI_OUTPUT_MAX_BUFFER, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as resolveMediaUnderstandingScope, h as normalizeMediaUnderstandingChatType, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveTimeoutMs$1, n as createMediaAttachmentCache, o as runCapability, p as resolveConcurrency, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as applyTemplate, y as registerUnhandledRejectionHandler } from "./runner-WAG0M5s9.js";
 import { c as getSkillsSnapshotVersion, d as createAsyncLock, f as readJsonFile, i as resolveSkillCommandInvocation, l as pruneExpiredPending, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, p as writeJsonAtomic, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as resolvePairingPaths } from "./skill-commands-DcVwOafC.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-DSDTl6Kj.js";
 import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-Bso4i15F.js";
@@ -80,7 +80,7 @@ import AjvPkg from "ajv";
 import { CURRENT_SESSION_VERSION, DefaultResourceLoader, SessionManager, SettingsManager, codingTools, createAgentSession, createEditTool, createReadTool, createWriteTool, estimateTokens, generateSummary, readTool } from "@mariozechner/pi-coding-agent";
 import { createServer } from "node:http";
 import { ProxyAgent, fetch as fetch$1 } from "undici";
-import WebSocket$1, { WebSocket } from "ws";
+import WebSocket, { WebSocket as WebSocket$1 } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { EdgeTTS } from "node-edge-tts";
 import { createJiti } from "jiti";
@@ -8636,7 +8636,7 @@ var GatewayClient = class {
 				if (fingerprint !== expected) return /* @__PURE__ */ new Error("gateway tls fingerprint mismatch");
 			});
 		}
-		this.ws = new WebSocket(url, wsOptions);
+		this.ws = new WebSocket$1(url, wsOptions);
 		this.ws.on("open", () => {
 			if (url.startsWith("wss://") && this.opts.tlsFingerprint) {
 				const tlsError = this.validateTlsFingerprint();
@@ -8855,7 +8855,7 @@ var GatewayClient = class {
 		return null;
 	}
 	async request(method, params, opts) {
-		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error("gateway not connected");
+		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error("gateway not connected");
 		const id = randomUUID();
 		const frame = {
 			type: "req",
@@ -10121,7 +10121,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-C46-vyqg.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-dODxSv3b.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -43560,7 +43560,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-C46-vyqg.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-dODxSv3b.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -47006,7 +47006,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-CuzFLQWC.js").then((n) => n.n);
+		const { describeImageWithModel } = await import("./image-CXu8W39c.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -49668,7 +49668,7 @@ async function preflightDiscordMessage(params) {
 	let preflightTranscript;
 	const hasAudioAttachment = message.attachments?.some((att) => att.contentType?.startsWith("audio/"));
 	if (!isDirectMessage && shouldRequireMention && hasAudioAttachment && !baseText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-BVaaZWkg.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-DHTaS5U1.js");
 		const audioPaths = message.attachments?.filter((att) => att.contentType?.startsWith("audio/")).map((att) => att.url) ?? [];
 		if (audioPaths.length > 0) preflightTranscript = await transcribeFirstAudio({
 			ctx: {
@@ -53674,7 +53674,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-DShKO-0L.js");
+			const { sendMessageWhatsApp } = await import("./web-BbEzqR_T.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -56579,7 +56579,7 @@ function createDiscordGatewayPlugin(params) {
 				super(options);
 			}
 			createWebSocket(url) {
-				return new WebSocket$1(url, { agent });
+				return new WebSocket(url, { agent });
 			}
 		}
 		return new ProxyGatewayPlugin();
@@ -66797,7 +66797,7 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	const hasAudio = allMedia.some((media) => media.contentType?.startsWith("audio/"));
 	let preflightTranscript;
 	if (isGroup && requireMention && hasAudio && !hasUserText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-BVaaZWkg.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-DHTaS5U1.js");
 		preflightTranscript = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: allMedia.length > 0 ? allMedia.map((m) => m.path) : void 0,
@@ -68954,7 +68954,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-DShKO-0L.js");
+	webChannelPromise ??= import("./web-BbEzqR_T.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -75527,25 +75527,10 @@ function validateShellCommand(command) {
 //#region src/agents/pi-tools.validate-wrapper.ts
 const log = createSubsystemLogger("agents/tool-validate");
 const EXEC_TOOL_NAMES = new Set(["exec", "bash"]);
-const FILE_TOOL_NAMES = new Set([
-	"write",
-	"read",
-	"edit",
-	"patch",
-	"file_write",
-	"file_edit",
-	"write_file",
-	"edit_file",
-	"create_file"
-]);
-const FILE_PATH_KEYS = [
-	"file_path",
-	"path",
-	"filePath"
-];
+const GEMMA_MODEL_ID = "gemma";
 /**
-* Wrap tools with argument validation. Exec/bash commands and file paths
-* are validated. Other tools pass through unchanged.
+* Wrap ALL tools with universal string argument sanitization.
+* Exec/bash tools get additional structural command validation.
 *
 * Call this AFTER tools are created and the model profile is resolved.
 */
@@ -75555,44 +75540,64 @@ function wrapToolsWithArgValidation(tools, profile) {
 		return tools;
 	}
 	const wrapped = tools.map((tool) => wrapToolWithArgValidation(tool));
-	const wrappedNames = wrapped.filter((t, i) => t !== tools[i]).map((t) => t.name);
-	log.debug(`[validate] applied to ${wrappedNames.length} tools: ${wrappedNames.join(",") || "(none matched)"}`);
+	log.debug(`[validate] universal sanitizer applied to ${wrapped.length} tools`);
 	return wrapped;
 }
 /**
-* Clean a file path by stripping control token fragments.
-* Returns null if the path is irreparably corrupted (empty after cleanup).
+* Sanitize a single string value: strip control tokens + residual fragments.
+* Returns the cleaned string, or the original if no changes needed.
 */
-function cleanFilePath(filePath) {
-	let cleaned = filePath.replace(/<\|[^|>]*(?:\|>)?/g, "");
-	cleaned = cleanResidualTokenFragments(cleaned);
-	cleaned = cleaned.trim();
-	if (!cleaned || !/[a-zA-Z0-9/._~-]/.test(cleaned)) return {
-		valid: false,
-		cleaned
-	};
+function sanitizeString(value) {
+	return cleanResidualTokenFragments(stripModelTokensAggressive(value, GEMMA_MODEL_ID));
+}
+/**
+* Check if a string contains control token patterns that need sanitization.
+* Fast check to avoid unnecessary work on clean strings.
+*/
+function needsSanitization(value) {
+	return value.includes("<|") || value.includes("|>") || /^[<"|]/.test(value);
+}
+/**
+* Recursively sanitize all string values in a params object.
+* Returns a new object if any values were changed, or the original if clean.
+*/
+function sanitizeParams(params) {
+	let changed = false;
+	const cleaned = {};
+	for (const [key, value] of Object.entries(params)) {
+		if (typeof value === "string" && needsSanitization(value)) {
+			const sanitized = sanitizeString(value);
+			if (sanitized !== value) {
+				cleaned[key] = sanitized;
+				changed = true;
+				continue;
+			}
+		}
+		cleaned[key] = value;
+	}
 	return {
-		valid: true,
-		cleaned
+		cleaned,
+		changed
 	};
 }
 /**
-* Wrap a single tool with argument validation.
+* Wrap a single tool with universal argument sanitization.
 */
 function wrapToolWithArgValidation(tool) {
 	const toolName = (tool.name ?? "").toLowerCase().trim();
 	const isExecTool = EXEC_TOOL_NAMES.has(toolName);
-	const isFileTool = FILE_TOOL_NAMES.has(toolName);
-	if (!isExecTool && !isFileTool) return tool;
 	const originalExecute = tool.execute;
 	return {
 		...tool,
 		execute(toolCallId, params, ...rest) {
+			const { cleaned, changed } = sanitizeParams(params);
+			if (changed) log.debug(`[validate] sanitized args for ${toolName}: ${Object.keys(params).filter((k) => cleaned[k] !== params[k]).join(",")}`);
+			const effectiveParams = changed ? cleaned : params;
 			if (isExecTool) {
-				const command = params.command ?? params.cmd;
+				const command = effectiveParams.command ?? effectiveParams.cmd;
 				if (typeof command !== "string") {
-					log.debug(`[validate] exec called without string command: keys=${Object.keys(params).join(",")}`);
-					return originalExecute.call(tool, toolCallId, params, ...rest);
+					log.debug(`[validate] exec called without string command: keys=${Object.keys(effectiveParams).join(",")}`);
+					return originalExecute.call(tool, toolCallId, effectiveParams, ...rest);
 				}
 				const result = validateShellCommand(command);
 				if (!result.valid) {
@@ -75602,22 +75607,12 @@ function wrapToolWithArgValidation(tool) {
 				if (result.cleaned !== command) {
 					log.debug(`[validate] exec command cleaned: raw=${command.slice(0, 80)} → cleaned=${result.cleaned.slice(0, 80)}`);
 					return originalExecute.call(tool, toolCallId, {
-						...params,
+						...effectiveParams,
 						command: result.cleaned
 					}, ...rest);
 				}
-				return originalExecute.call(tool, toolCallId, params, ...rest);
 			}
-			const pathKey = FILE_PATH_KEYS.find((k) => typeof params[k] === "string");
-			if (!pathKey) return originalExecute.call(tool, toolCallId, params, ...rest);
-			const rawPath = params[pathKey];
-			if (!rawPath.includes("<|") && !rawPath.includes("|>") && !/^[<"|]/.test(rawPath)) return originalExecute.call(tool, toolCallId, params, ...rest);
-			const pathResult = cleanFilePath(rawPath);
-			if (!pathResult.valid) return Promise.resolve({ output: `Error: file path "${rawPath}" contains model control tokens and could not be cleaned. Please provide a clean file path without any <|, |>, or XML-like tags.` });
-			return originalExecute.call(tool, toolCallId, {
-				...params,
-				[pathKey]: pathResult.cleaned
-			}, ...rest);
+			return originalExecute.call(tool, toolCallId, effectiveParams, ...rest);
 		}
 	};
 }

package/dist/{update-cli-Bgrhor0g.js → update-cli-DPewzEht.js}

@@ -16,7 +16,7 @@ import "./client-DMBZpU6X.js";
 import "./call-BcE47FtD.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { Ct as trimLogTail } from "./subagent-registry-CVQOC9Jw.js";
+import { Ct as trimLogTail } from "./subagent-registry-DovA8Baf.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -111,10 +111,10 @@ import "./npm-registry-spec-DkaZNHAW.js";
 import "./skill-scanner-BGWOBqLY.js";
 import "./installs-CgQpVncj.js";
 import "./channels-status-issues-c7qZbYG5.js";
-import "./register.subclis-DnWR9l5V.js";
-import "./command-registry-DJbyskBr.js";
+import "./register.subclis-Bop-tTBx.js";
+import "./command-registry-CLcFUFJs.js";
 import "./program-context-CqzR_m-7.js";
-import { r as installCompletion } from "./completion-cli-Dfw9JhkN.js";
+import { r as installCompletion } from "./completion-cli-BzXhONEe.js";
 import "./daemon-runtime-CfRwa6qh.js";
 import { r as parseSemver } from "./runtime-guard-D7waq_Ho.js";
 import "./systemd-DlMdyFDY.js";
@@ -124,19 +124,19 @@ import "./systemd-hints-sQipWGd1.js";
 import { i as runDaemonInstall, r as runDaemonRestart } from "./daemon-cli-wWnBIQtk.js";
 import "./diagnostics-CS1ov_hH.js";
 import { t as renderTable } from "./table-D01d2GuY.js";
-import "./health-DUKLANXu.js";
+import "./health-CBwxQHlQ.js";
 import "./control-ui-assets-BseSWee1.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, d as formatUpdateChannelLabel, g as resolveUpdateChannelDisplay, h as resolveEffectiveUpdateChannel, m as normalizeUpdateChannel, n as compareSemverStrings, r as fetchNpmTagVersion, s as DEFAULT_GIT_CHANNEL, t as checkUpdateStatus, u as channelToNpmTag } from "./update-check-ZdimP1aU.js";
 import "./dm-policy-shared-DJ-61hCT.js";
 import { i as resolveUpdateAvailability, n as formatUpdateOneLiner, t as formatUpdateAvailableHint } from "./status.update-DbmZz0Aq.js";
-import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-DdPdhkw5.js";
+import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-DvkWGO1t.js";
 import "./logging-BGewRZy0.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-DEMKx4eC.js";
 import "./doctor-config-flow-CA3eiKhd.js";
 import "./systemd-linger-DA_LW52P.js";
 import "./health-format-CzgUHmmX.js";
-import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-Bn4zyJmn.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-Xx92Sz9s.js";
+import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-CghdSf8F.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-CislKWHy.js";
 import { spawn, spawnSync } from "node:child_process";
 import os from "node:os";
 import path from "node:path";

package/dist/{update-cli-D5QWigS0.js → update-cli-hfO-LduQ.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { B as theme, h as pathExists } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { V as trimLogTail } from "./reply-DcyKvFor.js";
+import { V as trimLogTail } from "./reply-BR3MMmPE.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -106,7 +106,7 @@ import "./stagger-BUClb97_.js";
 import { c as resolveGatewayLaunchAgentLabel, d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName } from "./constants-C8_BLnaW.js";
 import "./channel-selection-DuWs0Aak.js";
 import { r as parseSemver } from "./runtime-guard-B37eizu-.js";
-import "./program-context-xpDrT9eG.js";
+import "./program-context-Bz_GuT_l.js";
 import "./catalog-RiADx7MA.js";
 import "./skills-status-CURJKnyY.js";
 import { n as inheritOptionFromParent } from "./command-options-BtDai3oC.js";
@@ -117,7 +117,7 @@ import "./npm-registry-spec-C2JDdSZS.js";
 import "./skill-scanner-CLs8u6vQ.js";
 import "./installs-C1Cebk97.js";
 import "./channels-status-issues-B_kBkl_u.js";
-import { r as installCompletion } from "./completion-cli-DosOadUD.js";
+import { r as installCompletion } from "./completion-cli-MbaQCbTj.js";
 import "./daemon-runtime-2mwX-jqj.js";
 import "./systemd-riq8uNJQ.js";
 import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
@@ -126,19 +126,19 @@ import "./systemd-hints-BR6gChwm.js";
 import { i as runDaemonInstall, r as runDaemonRestart } from "./daemon-cli-DscwlsKW.js";
 import "./diagnostics-BAMlsVVX.js";
 import { t as renderTable } from "./table-BTgkRafz.js";
-import "./health-BPOuBmYt.js";
+import "./health-D4ySlvOE.js";
 import "./control-ui-assets-Z947tKLt.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, d as formatUpdateChannelLabel, g as resolveUpdateChannelDisplay, h as resolveEffectiveUpdateChannel, m as normalizeUpdateChannel, n as compareSemverStrings, r as fetchNpmTagVersion, s as DEFAULT_GIT_CHANNEL, t as checkUpdateStatus, u as channelToNpmTag } from "./update-check-CtckACbb.js";
 import "./dm-policy-shared-Bh3TbexU.js";
 import { i as resolveUpdateAvailability, n as formatUpdateOneLiner, t as formatUpdateAvailableHint } from "./status.update-DtwCUTf-.js";
-import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-CPOm0f_6.js";
+import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-WFWqzZw8.js";
 import "./logging-BzzwiKjv.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-rw7wJwHd.js";
 import "./doctor-config-flow-QnaBd8kL.js";
 import "./systemd-linger-aQ75ZlXY.js";
 import "./health-format-DSwnXZPU.js";
-import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-BN0aOmtR.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-DRucwWSo.js";
+import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-BKnaBZhj.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-BZ-FYLu9.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{update-runner-DdPdhkw5.js → update-runner-DvkWGO1t.js}

@@ -1,6 +1,6 @@
 import { nt as pathExists } from "./entry.js";
 import { t as runCommandWithTimeout } from "./exec-CBKBIMpA.js";
-import { Ct as trimLogTail } from "./subagent-registry-CVQOC9Jw.js";
+import { Ct as trimLogTail } from "./subagent-registry-DovA8Baf.js";
 import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-BseSWee1.js";
 import { c as DEFAULT_PACKAGE_CHANNEL, f as isBetaTag, l as DEV_BRANCH, n as compareSemverStrings, o as detectPackageManager$1, p as isStableTag, u as channelToNpmTag } from "./update-check-ZdimP1aU.js";
 import os from "node:os";

package/dist/{update-runner-CPOm0f_6.js → update-runner-WFWqzZw8.js}

@@ -1,5 +1,5 @@
 import { h as pathExists } from "./utils-B-0b9bGM.js";
-import { V as trimLogTail } from "./reply-DcyKvFor.js";
+import { V as trimLogTail } from "./reply-BR3MMmPE.js";
 import { t as runCommandWithTimeout } from "./exec-CWkblSrI.js";
 import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-Z947tKLt.js";
 import { c as DEFAULT_PACKAGE_CHANNEL, f as isBetaTag, l as DEV_BRANCH, n as compareSemverStrings, o as detectPackageManager$1, p as isStableTag, u as channelToNpmTag } from "./update-check-CtckACbb.js";

package/dist/{web-DShKO-0L.js → web-BbEzqR_T.js}

@@ -4,16 +4,16 @@ import { A as isSelfChatMode, B as sleep, C as clamp, F as resolveJidToE164, H a
 import "./agent-scope-CpEJ0B88.js";
 import { r as defaultRuntime, t as createSubsystemLogger } from "./subsystem-BjyjJF-d.js";
 import "./workspace-DscDraUb.js";
-import { C as resolveEnvelopeFormatOptions, D as normalizeMentionText, E as buildMentionRegexes, S as formatInboundEnvelope, T as shouldComputeCommandAuthorized, _ as parseActivationCommand, b as createInboundDebouncer, c as DEFAULT_GROUP_HISTORY_LIMIT, d as shouldAckReactionForWhatsApp, f as dispatchReplyWithBufferedBlockDispatcher, g as normalizeGroupActivation, h as getReplyFromConfig, l as buildHistoryContextFromEntries, m as createDedupeCache, n as computeBackoff, o as buildPairingReply, r as sleepWithAbort, s as resolveMentionGating, u as recordPendingHistoryEntryIfEnabled, v as formatDurationPrecise, w as hasControlCommand, x as resolveInboundDebounceMs, y as enqueueSystemEvent } from "./unified-runner-CxscxYKm.js";
+import { C as resolveEnvelopeFormatOptions, D as normalizeMentionText, E as buildMentionRegexes, S as formatInboundEnvelope, T as shouldComputeCommandAuthorized, _ as parseActivationCommand, b as createInboundDebouncer, c as DEFAULT_GROUP_HISTORY_LIMIT, d as shouldAckReactionForWhatsApp, f as dispatchReplyWithBufferedBlockDispatcher, g as normalizeGroupActivation, h as getReplyFromConfig, l as buildHistoryContextFromEntries, m as createDedupeCache, n as computeBackoff, o as buildPairingReply, r as sleepWithAbort, s as resolveMentionGating, u as recordPendingHistoryEntryIfEnabled, v as formatDurationPrecise, w as hasControlCommand, x as resolveInboundDebounceMs, y as enqueueSystemEvent } from "./unified-runner-OplgmcEq.js";
 import { s as resolveStorePath } from "./paths-CbQV9WEg.js";
 import "./auth-profiles-DdK1Hxaa.js";
 import { n as formatCliCommand } from "./env-BDXYbTKj.js";
 import "./github-copilot-token-cCYzSU9h.js";
 import "./boolean-CE7i9tBR.js";
-import { Ct as resolveGroupSessionKey, G as updateLastRoute, H as loadSessionStore, U as readSessionUpdatedAt, W as recordSessionMetaFromInbound } from "./pi-embedded-helpers-CfqDGQ9J.js";
+import { Ct as resolveGroupSessionKey, G as updateLastRoute, H as loadSessionStore, U as readSessionUpdatedAt, W as recordSessionMetaFromInbound } from "./pi-embedded-helpers-pubKo8HQ.js";
 import { n as loadConfig } from "./config-5SdHIcHU.js";
 import "./manifest-registry-yb7sAlu4.js";
-import "./chrome-DkaXoP36.js";
+import "./chrome-DYZwl5Gv.js";
 import "./frontmatter-CTR5f_Ez.js";
 import "./skills-Bs0AW1g3.js";
 import "./redact-BDMXB06K.js";
@@ -31,10 +31,10 @@ import "./bindings-BsHoBLIE.js";
 import "./send-CVMyYPQw.js";
 import "./send-CvhXrdgS.js";
 import "./tool-images-SqqWIT22.js";
-import "./deliver-C46-vyqg.js";
+import "./deliver-dODxSv3b.js";
 import "./diagnostic-rPhsBoZz.js";
 import "./diagnostic-session-state-Zw87xFym.js";
-import "./image-CuzFLQWC.js";
+import "./image-CXu8W39c.js";
 import "./tokens-Bux9Y_xD.js";
 import { G as formatLocationText, J as readChannelAllowFromStore, K as toLocationContext, X as upsertChannelPairingRequest } from "./send-DYj_o4_F.js";
 import "./pi-model-discovery-Bv5YDJc8.js";
@@ -50,7 +50,7 @@ import { t as getAgentScopedMediaLocalRoots } from "./local-roots-DhZz0Ybs.js";
 import { a as loadWebMedia } from "./ir-CTiz95Vb.js";
 import "./render-CDCvpfhh.js";
 import "./commands-registry-Bfc7Uz0o.js";
-import { y as registerUnhandledRejectionHandler } from "./runner-CU9l0uJh.js";
+import { y as registerUnhandledRejectionHandler } from "./runner-WAG0M5s9.js";
 import "./skill-commands-DcVwOafC.js";
 import { t as finalizeInboundContext } from "./inbound-context-DSDTl6Kj.js";
 import "./fetch-Bso4i15F.js";