@symerian/symi 2.8.11 → 2.8.13

package/extensions/llm-task/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/llm-task",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi JSON-only LLM task plugin",
   "type": "module",

package/extensions/matrix/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.8.13
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.8.12
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.8.11
 
 ### Changes

package/extensions/matrix/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/matrix",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "Symi Matrix channel plugin",
   "type": "module",
   "dependencies": {

package/extensions/mattermost/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/mattermost",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi Mattermost channel plugin",
   "type": "module",

package/extensions/memory-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/memory-core",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi core memory search plugin",
   "type": "module",

package/extensions/memory-lancedb/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/memory-lancedb",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi LanceDB-backed long-term memory plugin with auto-recall/capture",
   "type": "module",

package/extensions/minimax-portal-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/minimax-portal-auth",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi MiniMax Portal OAuth provider plugin",
   "type": "module",

package/extensions/msteams/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.8.13
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.8.12
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.8.11
 
 ### Changes

package/extensions/msteams/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/msteams",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "Symi Microsoft Teams channel plugin",
   "type": "module",
   "dependencies": {

package/extensions/nextcloud-talk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/nextcloud-talk",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "Symi Nextcloud Talk channel plugin",
   "type": "module",
   "devDependencies": {

package/extensions/nostr/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.8.13
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.8.12
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.8.11
 
 ### Changes

package/extensions/nostr/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/nostr",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "Symi Nostr channel plugin for NIP-04 encrypted DMs",
   "type": "module",
   "dependencies": {

package/extensions/open-prose/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/open-prose",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "OpenProse VM skill pack plugin (slash command + telemetry).",
   "type": "module",

package/extensions/outlook/index.ts

@@ -55,7 +55,17 @@ const outlookPlugin = {
     })();
 
     // -------------------------------------------------------------------------
-    // Agent tools — available when Outlook is connected
+    // Agent tools — registered unconditionally (not { optional: true }). The
+    // plugin is BUNDLED_ENABLED_BY_DEFAULT (see §32.11), so its tools should
+    // appear in the agent palette by default too. Previously {optional:true}
+    // gated the tools behind the user's tool-allowlist — which created a
+    // silent-failure footgun: the `before_prompt_build` hook claimed "you
+    // have email tools" while the actual palette filtered them out unless
+    // the user had hand-added `outlook` / `group:plugins` to their allowlist.
+    // Users opt OUT via `plugins.entries.outlook.enabled: false` or by
+    // denying the tool names in their agent's tools.deny — same escape
+    // hatches as any other bundled capability. Subagent gating is handled
+    // separately in pi-tools.policy.ts:SUBAGENT_TOOL_DENY_ALWAYS.
     // -------------------------------------------------------------------------
     const tools = [
       createOutlookListTool,
@@ -68,7 +78,7 @@ const outlookPlugin = {
     ];
 
     for (const createTool of tools) {
-      api.registerTool(createTool() as unknown as AnyAgentTool, { optional: true });
+      api.registerTool(createTool() as unknown as AnyAgentTool);
     }
 
     // -------------------------------------------------------------------------

package/extensions/outlook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/outlook",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi Outlook 365 email integration via Microsoft Graph API",
   "type": "module",

package/extensions/pipeline/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/pipeline",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "Pipeline workflow tool plugin (typed pipelines + resumable approvals)",
   "type": "module",
   "symi": {

package/extensions/signal/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/signal",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi Signal channel plugin",
   "type": "module",

package/extensions/slack/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/slack",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi Slack channel plugin",
   "type": "module",

package/extensions/telegram/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/telegram",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi Telegram channel plugin",
   "type": "module",

package/extensions/tlon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/tlon",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi Tlon/Urbit channel plugin",
   "type": "module",

package/extensions/twitch/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.8.13
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.8.12
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.8.11
 
 ### Changes

package/extensions/twitch/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/twitch",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi Twitch channel plugin",
   "type": "module",

package/extensions/voice-call/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.8.13
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.8.12
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.8.11
 
 ### Changes

package/extensions/voice-call/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/voice-call",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "Symi voice-call plugin",
   "type": "module",
   "dependencies": {

package/extensions/whatsapp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/whatsapp",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "private": true,
   "description": "Symi WhatsApp channel plugin",
   "type": "module",

package/extensions/zalo/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.8.13
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.8.12
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.8.11
 
 ### Changes

package/extensions/zalo/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/zalo",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "Symi Zalo channel plugin",
   "type": "module",
   "dependencies": {

package/extensions/zalouser/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.8.13
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.8.12
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.8.11
 
 ### Changes

package/extensions/zalouser/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/zalouser",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "Symi Zalo Personal Account plugin via zca-cli",
   "type": "module",
   "dependencies": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symerian/symi",
-  "version": "2.8.11",
+  "version": "2.8.13",
   "description": "Multi-channel AI gateway with extensible messaging integrations",
   "keywords": [],
   "homepage": "https://github.com/jaysteelmind/symi#readme",

package/skills/long-task/scripts/detach-task.sh

@@ -15,7 +15,8 @@
 #                         → "aborted rc=<N> signal=<NAME>" on SIGTERM/INT/HUP
 #
 # Exit code: 0 on successful spawn, 1 on missing args, 2 on invalid args,
-#            3 on workdir creation failure.
+#            3 on workdir creation failure, 4 on task-id collision (a task
+#            with the same id is already running).
 #
 # Hardening notes (2.7.0):
 # - task-id is validated against an allow-list ([a-zA-Z0-9._-], 1–60 chars,
@@ -27,6 +28,14 @@
 # - Child shell has a TERM/INT/HUP trap that records an "aborted" status
 #   before exiting, so external kill signals leave a deterministic record.
 #
+# Hardening notes (post-2.8.12):
+# - Pre-flight collision check: refuses to overwrite the state files of a
+#   task-id whose recorded PID is still alive (exit code 4).
+# - Log file is bounded by LONG_TASK_LOG_MAX_BYTES (default 104857600 =
+#   100 MiB; override via env). Once exceeded, a single marker line is
+#   written and further output is silently discarded — the producer keeps
+#   running, never gets SIGPIPE.
+#
 # Design notes:
 # - setsid + nohup + disown: triple-armor against SIGHUP when the parent
 #   shell exits. The subprocess gets its own session.
@@ -75,12 +84,31 @@ if ! mkdir -p "$workdir"; then
   exit 3
 fi
 
+# --- log size cap -----------------------------------------------------------
+log_max_bytes="${LONG_TASK_LOG_MAX_BYTES:-104857600}"
+if ! [[ "$log_max_bytes" =~ ^[0-9]+$ ]] || (( log_max_bytes < 1 )); then
+  echo "detach-task: LONG_TASK_LOG_MAX_BYTES must be a positive integer (got: $log_max_bytes)" >&2
+  exit 2
+fi
+
 pid_file="$workdir/task-${task_id}.pid"
 cmd_file="$workdir/task-${task_id}.cmd"
 started_file="$workdir/task-${task_id}.started"
 log_file="$workdir/task-${task_id}.log"
 status_file="$workdir/task-${task_id}.status"
 
+# --- collision check --------------------------------------------------------
+# If a pid file exists and the recorded PID is still alive, a prior task with
+# this id is already running. Refuse to clobber its log/status files.
+# Stale pid files (process already dead) are silently overwritten below.
+if [[ -f "$pid_file" ]]; then
+  prior_pid="$(tr -dc '0-9' < "$pid_file" 2>/dev/null || true)"
+  if [[ -n "$prior_pid" ]] && kill -0 "$prior_pid" 2>/dev/null; then
+    echo "detach-task: task-id '$task_id' is already running (pid=$prior_pid). Pick a different id or wait for it to finish." >&2
+    exit 4
+  fi
+fi
+
 # --- atomic status writer (parent) -----------------------------------------
 write_status_atomic() {
   local _payload="$1"
@@ -104,7 +132,8 @@ setsid nohup bash -c '
   set -u
   _status="$1"
   _log="$2"
-  shift 2
+  _max="$3"
+  shift 3
   _write() {
     local _tmp="${_status}.$$.${RANDOM}.tmp"
     printf "%s\n" "$1" > "$_tmp" && mv -f "$_tmp" "$_status"
@@ -115,13 +144,36 @@ setsid nohup bash -c '
     _write "aborted rc=$_rc signal=$_sig ended=$(date -u -Iseconds)" 2>/dev/null || true
     exit "$_rc"
   }
+  # Reads stdin line-by-line, prints to its stdout (which the caller
+  # redirects to the log file) up to _max total bytes, then writes one
+  # cap marker and silently discards the rest. Reading continues until
+  # EOF so the producing pipe never receives SIGPIPE.
+  _log_capper() {
+    local _total=0
+    local _capped=0
+    local _line
+    local _ls
+    while IFS= read -r _line; do
+      if (( _capped )); then
+        continue
+      fi
+      _ls=$(( ${#_line} + 1 ))
+      if (( _total + _ls > _max )); then
+        printf "[long-task: log capped at %s bytes; further output discarded]\n" "$_max"
+        _capped=1
+        continue
+      fi
+      printf "%s\n" "$_line"
+      _total=$(( _total + _ls ))
+    done
+  }
   trap "_on_signal TERM" TERM
   trap "_on_signal INT"  INT
   trap "_on_signal HUP"  HUP
-  "$@" > "$_log" 2>&1
-  rc=$?
+  "$@" 2>&1 | _log_capper >> "$_log"
+  rc=${PIPESTATUS[0]}
   _write "complete rc=$rc ended=$(date -u -Iseconds)"
-' -- "$status_file" "$log_file" "$@" < /dev/null > /dev/null 2>&1 &
+' -- "$status_file" "$log_file" "$log_max_bytes" "$@" < /dev/null > /dev/null 2>&1 &
 
 pid=$!
 disown "$pid" 2>/dev/null || true

package/dist/plugin-sdk/web-DFvYfej5.js

@@ -1,66 +0,0 @@
-import { a as WA_WEB_AUTH_DIR, g as webAuthExists, s as logWebSelfId, u as pickWebChannel } from "./accounts-D9zGZU5t.js";
-import "./reply-DWwxgBtH.js";
-import "./paths-DR2yt_mP.js";
-import "./github-copilot-token-D9X2phUj.js";
-import "./plugins-BbAvhC25.js";
-import "./fetch-CUNoPTKm.js";
-import "./registry--_pGht6S.js";
-import "./retry-ilSJqnz9.js";
-import "./send-ZhAe1nXO.js";
-import "./config-BzupW6LN.js";
-import "./subsystem-Coz2AgU8.js";
-import "./command-format-DSdvQ_M5.js";
-import "./model-selection-CtVwtb6y.js";
-import "./agent-scope-C3gMMKCU.js";
-import "./manifest-registry-hy3Bn-r9.js";
-import "./redact-DPnDWsnT.js";
-import "./errors-Bv8oZiTO.js";
-import "./channel-activity-Ji7f0gqq.js";
-import "./image-ops-Bnp6LXEx.js";
-import "./ssrf-DKZ8eBrk.js";
-import "./local-roots-Ckk1QfzI.js";
-import "./ir-Fb3qpcis.js";
-import "./chunk-jvk9axTQ.js";
-import "./message-channel-BdI5Ra9S.js";
-import "./bindings-BbwoUGPx.js";
-import "./markdown-tables-Dfaqilz6.js";
-import "./render-BiJZ5W4Z.js";
-import "./tables-DR0NmBeH.js";
-import "./send-jsofmTfJ.js";
-import "./tool-images-D7Lno-TE.js";
-import "./target-errors-B7YyMnIi.js";
-import "./send-BP5pSPaZ.js";
-import "./send-DLO_yV5_.js";
-import "./runner-BhifC1J_.js";
-import "./reply-prefix-BHuV5t70.js";
-import "./tokens-CWMflosr.js";
-import "./skill-commands-DEfqC_kJ.js";
-import "./skills-C9DbB-Kp.js";
-import "./chrome-D9kN9org.js";
-import "./thinking-DCNUIAHY.js";
-import "./accounts-Dtszw3Zn.js";
-import "./accounts-BToL3HlP.js";
-import "./deliver-CKgFosI5.js";
-import "./pi-embedded-helpers-BL7ZRhGv.js";
-import "./paths-A0xdf3yk.js";
-import "./diagnostic-_oc91gNi.js";
-import "./store-Do3t33-c.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-CfaamthT.js";
-import "./image-DFyINnvE.js";
-import "./pi-model-discovery-LbcEa65a.js";
-import "./api-key-rotation-CBsLb_4V.js";
-import "./diagnostic-session-state-Wd5tNeQG.js";
-import "./manager-B3jEviU1.js";
-import "./sqlite-CmVrFEYD.js";
-import "./commands-registry-BuYpmEx-.js";
-import "./send-CGhw9mO3.js";
-import "./proxy-D27OUbrW.js";
-import "./resolve-route-CHQ7BTlU.js";
-import "./replies-BR2TPTVW.js";
-import "./pi-auth-json-DiyK6bgV.js";
-import "./outbound-attachment-D7ME_Kib.js";
-import { n as sendMessageWhatsApp } from "./outbound-DW3cqlQW.js";
-import { i as waitForWaConnection, t as createWaSocket } from "./session-BfyK_04G.js";
-import { t as loginWeb } from "./login-K1YB_7-t.js";
-
-export { WA_WEB_AUTH_DIR, createWaSocket, logWebSelfId, loginWeb, monitorWebChannel, monitorWebInbox, pickWebChannel, sendMessageWhatsApp, waitForWaConnection, webAuthExists };