@symerian/symi 2.8.13 → 2.8.15

package/dist/{reply-D7_t00Jt.js → reply-D455A6SA.js}

@@ -60,8 +60,8 @@ import { r as getDiagnosticSessionState } from "./diagnostic-session-state-CUslJ
 import { A as hasBotMention, B as resolveSenderAllowMatch, C as buildTelegramGroupPeerId, D as describeReplyTarget, E as buildTypingThreadParams, F as resolveTelegramReplyId, G as toLocationContext, H as isSenderIdAllowed, I as resolveTelegramStreamMode, J as parseTelegramTarget, K as withTelegramApiErrorLogging, L as resolveTelegramThreadSpec, M as resolveTelegramForumThreadId, N as resolveTelegramGroupAllowFromContext, O as expandTextLinks, P as resolveTelegramMediaPlaceholder, R as isSenderAllowed$1, S as buildTelegramGroupFrom, T as buildTelegramThreadParams, U as mergeAllowFromSources, V as firstDefined$1, W as formatLocationText, Y as resolveTelegramTargetChatType, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildSenderLabel, c as sendStickerTelegram, d as wasSentByBot, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as normalizeForwardedContext, k as extractTelegramLocation, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as isVoiceCompatibleAudio, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramParentPeer, x as buildSenderName, y as buildGroupLabel, z as normalizeAllowFromWithStore$1 } from "./send-DpMnSIi5.js";
 import { a as buildModelAliasLines, n as resolveModel } from "./model-ECsJuJew.js";
 import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-CE2YmmsD.js";
-import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-0jm-n36m.js";
-import { a as resolveMemorySearchConfig, t as MemoryIndexManager } from "./manager-TOeH0D8K.js";
+import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-DRLrIa8h.js";
+import { a as resolveMemorySearchConfig, t as MemoryIndexManager } from "./manager-wF-n_prX.js";
 import { n as retryAsync } from "./retry-BoS4e4X_.js";
 import { c as imageResultFromFile, d as readNumberParam, f as readReactionParams, h as readStringParam, l as jsonResult, m as readStringOrNumberParam, n as missingTargetError, o as createActionGate, p as readStringArrayParam, r as unknownTargetError, s as imageResult, t as ambiguousTargetError, u as parseAvailableTags } from "./target-errors-C9e6dMU_.js";
 import { a as chunkText, c as resolveChunkMode, d as isSafeFenceBreak, f as parseFenceSpans, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit, o as chunkTextWithMode, r as chunkMarkdownText, t as chunkByNewline, u as findFenceSpanAt } from "./chunk-DIi9uyC6.js";
@@ -69,8 +69,8 @@ import { n as resolveMarkdownTableMode } from "./markdown-tables-kCfKPOgH.js";
 import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-jTXFdH5R.js";
 import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled, n as isNativeCommandsExplicitlyDisabled, r as isRestartEnabled, t as isCommandFlagEnabled } from "./commands-vWB85AXk.js";
 import { a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, i as listChatCommands, l as parseCommandArgs, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices } from "./commands-registry-D_uByLpw.js";
-import { It as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-C7AOOnKZ.js";
-import { a as randomIdempotencyKey, d as resolveLeastPrivilegeOperatorScopesForMethod, n as callGateway, r as callGatewayLeastPrivilege, t as buildGatewayConnectionDetails } from "./call-Cmb04dff.js";
+import { Lt as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-CYsBIR3j.js";
+import { a as randomIdempotencyKey, d as resolveLeastPrivilegeOperatorScopesForMethod, n as callGateway, r as callGatewayLeastPrivilege, t as buildGatewayConnectionDetails } from "./call-BkJK3eYP.js";
 import { n as formatTimeAgo } from "./format-relative-CviDPm2s.js";
 import { n as normalizePollInput } from "./polls-DZoQqmds.js";
 import { n as recordChannelActivity, r as createDiscordRetryRunner, t as getChannelActivity } from "./channel-activity-CoTZV03i.js";
@@ -86,7 +86,7 @@ import { b as ensureSkillsWatcher, i as resolveSkillCommandInvocation, n as list
 import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-C87_fedd.js";
 import { c as hasNonzeroUsage, l as normalizeUsage, n as loadCostUsageSummary, o as derivePromptTokens, r as loadSessionCostSummary, s as deriveSessionTotalTokens } from "./session-cost-usage-RPrhIvZF.js";
 import { a as normalizeIMessageHandle, c as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, i as isAllowedIMessageSender, o as parseIMessageTarget, r as formatIMessageChatTarget, s as createIMessageRpcClient, t as sendMessageIMessage } from "./send-SF7x1UHb.js";
-import { r as detectBinary } from "./onboard-helpers-C8f_xi6R.js";
+import { r as detectBinary } from "./onboard-helpers-B7jBYbCU.js";
 import { t as resolvePairingIdLabel } from "./pairing-labels-CTL1gXZb.js";
 import { i as resolveModelCostConfig, n as formatTokenCount$2, r as formatUsd, t as estimateUsageCost } from "./usage-format-D4P4IiJ6.js";
 import { t as getActiveWebListener } from "./active-listener-Cif6x8mY.js";
@@ -94,7 +94,7 @@ import { _ as getTrustedSafeBinDirs, b as buildSafeShellCommand, d as resolveExe
 import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as writeCameraClipPayloadToFile, f as writeUrlToFile, g as normalizePathPrepend, h as mergePathPrepend, i as parseEnvPairs, l as parseCameraSnapPayload, m as applyPathPrepend, n as screenRecordTempPath, o as parseCanvasSnapshotPayload, p as buildNodeShellCommand, r as writeScreenRecordToFile, s as cameraTempPath, t as parseScreenRecordPayload, u as writeBase64ToFile } from "./nodes-screen-BZS89z6C.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-D3rffA64.js";
 import { n as recordCommandPoll, r as resetCommandPollCount } from "./command-poll-backoff-CjL9F9WT.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, r as resolveEffectiveToolPolicy, t as filterToolsByPolicy } from "./pi-tools.policy-BZrM6a-w.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, r as resolveEffectiveToolPolicy, t as filterToolsByPolicy } from "./pi-tools.policy-Bx5zp45n.js";
 import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-C0pRqIFv.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-CZ1Rrj7O.js";
 import { c as resolveGatewayLaunchAgentLabel, d as resolveGatewaySystemdServiceName } from "./constants-DF8wPn-_.js";
@@ -28996,6 +28996,7 @@ async function resolveDetachScriptPath(params) {
 	return cachedScriptPath;
 }
 async function buildLongTaskPromptSuffix(params) {
+	if (params.cronEnabled === false) return "";
 	const scriptPath = await resolveDetachScriptPath(params);
 	if (!scriptPath) return "";
 	return "\n\n" + [
@@ -29010,12 +29011,13 @@ async function buildLongTaskPromptSuffix(params) {
 		"- Register a cron monitor via the `cron` tool's `add` action. Use the schema documented in that tool's own description for the exact field names — do NOT guess. The monitor should fire roughly every 3 minutes as an isolated agentTurn job, and its message must literally contain the task-id, PID, log path, and status path so the future turn has enough context without re-deriving them.",
 		"- Safe status read (inside the monitor turn):",
 		"  `status=$(cat \"<workdir>/task-<id>.status\" 2>/dev/null || echo missing)`",
-		"  Possible values: `running pid=<N> started=<ISO>`, `complete rc=<N> ended=<ISO>`, `aborted rc=<N> signal=<TERM|INT|HUP> ended=<ISO>`, or `missing` if the file was cleaned up.",
+		"  Possible values: `running pid=<N> started=<ISO>`, `complete rc=<N> ended=<ISO>`, `aborted rc=<N> signal=<TERM|INT|HUP> ended=<ISO>`, `archived swept-from=… at=<ISO>` if the janitor archived an old finished task, or `missing` only when neither `.status` nor `.archived` exists (task crashed or workdir was wiped).",
 		"- Monitor responsibilities each tick:",
 		"  • If status begins with `running`: tail -n 20 <log>, post a one-sentence progress line.",
 		"  • If status begins with `complete`: post a final summary with rc and tail, then call cron action=remove on this job id.",
 		"  • If status begins with `aborted`: post a failure summary with signal and tail, then call cron action=remove.",
-		"  • Never leave stale monitors running after the task finishes."
+		"  • Never leave stale monitors running after the task finishes.",
+		"- Inspecting and killing tasks: use `task_list` to enumerate detached tasks in the workspace (returns id/pid/alive/status/started for each), and `task_cancel` with `taskId` (and optional `signal`, default SIGTERM) to terminate a running task. Prefer these over raw `kill`/`ps` exec calls — they share the detach script's task-id allow-list and report alreadyDead cleanly."
 	].join("\n");
 }
 
@@ -30088,7 +30090,8 @@ async function runEmbeddedAttempt(params) {
 		const longTaskSuffix = await buildLongTaskPromptSuffix({
 			argv1: process.argv[1],
 			cwd: process.cwd(),
-			moduleUrl: import.meta.url
+			moduleUrl: import.meta.url,
+			cronEnabled: process.env.SYMI_SKIP_CRON !== "1" && params.config?.cron?.enabled !== false
 		});
 		const emailCapabilitySuffix = buildEmailCapabilityPromptSuffix();
 		const systemPromptText = createSystemPromptOverride(appendPrompt + longTaskSuffix + emailCapabilitySuffix + profilePromptSuffix)();
@@ -31932,7 +31935,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-Bdebat5l.js");
+			const { sendMessageWhatsApp } = await import("./web-Dhh_eI3q.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -50363,7 +50366,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-Bdebat5l.js");
+	webChannelPromise ??= import("./web-Dhh_eI3q.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -52119,7 +52122,7 @@ async function resolveSandboxWorkdir(params) {
 		};
 	}
 }
-function resolveWorkdir(workdir, warnings) {
+function resolveWorkdir$1(workdir, warnings) {
 	const fallback = safeCwd() ?? homedir();
 	try {
 		if (statSync(workdir).isDirectory()) return workdir;
@@ -53191,7 +53194,7 @@ function createExecTool(defaults) {
 				});
 				workdir = resolved.hostWorkdir;
 				containerWorkdir = resolved.containerWorkdir;
-			} else workdir = resolveWorkdir(rawWorkdir, warnings);
+			} else workdir = resolveWorkdir$1(rawWorkdir, warnings);
 			const baseEnv = coerceEnv(process.env);
 			if (host !== "sandbox" && params.env) validateHostEnv(params.env);
 			const mergedEnv = params.env ? {
@@ -63408,6 +63411,301 @@ function createSubagentsTool(opts) {
 	};
 }
 
+//#endregion
+//#region src/infra/long-task-state.ts
+/**
+* Shared helpers for reading the on-disk state files written by
+* skills/long-task/scripts/detach-task.sh:
+*
+*   task-<id>.pid       — PID of the detached process
+*   task-<id>.cmd       — literal command line
+*   task-<id>.started   — ISO-8601 start timestamp
+*   task-<id>.log       — combined stdout + stderr
+*   task-<id>.status    — current state line
+*   task-<id>.archived  — tombstone written by the janitor when it sweeps
+*                         a finished task more than 7 days old
+*
+* Both the agent-facing tools (task_list / task_cancel) and the gateway's
+* tasks.list RPC consume this helper so the two views stay in sync.
+*/
+const TASK_FILE_PREFIX = "task-";
+const TASK_ID_RE = /^[a-zA-Z0-9_][a-zA-Z0-9._-]{0,59}$/;
+const TASK_FILE_SUFFIXES = [
+	".pid",
+	".status",
+	".started",
+	".cmd",
+	".log",
+	".archived"
+];
+function defaultIsPidAlive(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (err) {
+		if (err.code === "EPERM") return true;
+		return false;
+	}
+}
+async function safeRead(filePath) {
+	try {
+		return (await fs.promises.readFile(filePath, "utf8")).trim();
+	} catch {
+		return null;
+	}
+}
+async function readTaskInfo(workdir, id, isPidAlive = defaultIsPidAlive) {
+	const pidPath = path.join(workdir, `${TASK_FILE_PREFIX}${id}.pid`);
+	const statusPath = path.join(workdir, `${TASK_FILE_PREFIX}${id}.status`);
+	const archivedPath = path.join(workdir, `${TASK_FILE_PREFIX}${id}.archived`);
+	const logPath = path.join(workdir, `${TASK_FILE_PREFIX}${id}.log`);
+	const [pidText, status, started, cmd, archived] = await Promise.all([
+		safeRead(pidPath),
+		safeRead(statusPath),
+		safeRead(path.join(workdir, `${TASK_FILE_PREFIX}${id}.started`)),
+		safeRead(path.join(workdir, `${TASK_FILE_PREFIX}${id}.cmd`)),
+		safeRead(archivedPath)
+	]);
+	let pid = null;
+	if (pidText) {
+		const parsed = Number.parseInt(pidText, 10);
+		if (Number.isFinite(parsed) && parsed > 0) pid = parsed;
+	}
+	let resolvedStatus;
+	if (status) resolvedStatus = status;
+	else if (archived) resolvedStatus = archived;
+	else resolvedStatus = "missing";
+	return {
+		id,
+		pid,
+		alive: pid !== null && isPidAlive(pid),
+		archived: archived !== null,
+		status: resolvedStatus,
+		started,
+		cmd,
+		pidPath,
+		statusPath,
+		archivedPath,
+		logPath
+	};
+}
+async function listTasksInWorkdir(workdir, isPidAlive = defaultIsPidAlive) {
+	let entries;
+	try {
+		entries = await fs.promises.readdir(workdir);
+	} catch {
+		return [];
+	}
+	const taskIds = /* @__PURE__ */ new Set();
+	for (const entry of entries) {
+		if (!entry.startsWith(TASK_FILE_PREFIX)) continue;
+		for (const suffix of TASK_FILE_SUFFIXES) if (entry.endsWith(suffix)) {
+			const id = entry.slice(5, -suffix.length);
+			if (id.length > 0 && TASK_ID_RE.test(id)) taskIds.add(id);
+			break;
+		}
+	}
+	return await Promise.all([...taskIds].toSorted().map((id) => readTaskInfo(workdir, id, isPidAlive)));
+}
+
+//#endregion
+//#region src/agents/tools/task-tool.ts
+/**
+* Long-task management tools (task_list, task_cancel).
+*
+* Companions to the detach-task pattern in skills/long-task. The detach
+* script writes task-<id>.{pid,cmd,started,log,status} state files into
+* the agent's workspace; these tools read and act on those files so the
+* agent can answer "what's running?" and kill a task without needing
+* shell access. Shared scanning logic lives in
+* src/infra/long-task-state.ts so the gateway's tasks.list RPC and these
+* agent tools agree on every shape detail.
+*
+* task-id allow-list mirrors detach-task.sh: 1–60 chars from
+* [a-zA-Z0-9._-], must not start with '.' or '-'. Diverging would let the
+* agent kill processes it never spawned via path traversal.
+*/
+const ALLOWED_SIGNALS = new Set([
+	"SIGTERM",
+	"SIGINT",
+	"SIGHUP",
+	"SIGQUIT",
+	"SIGKILL",
+	"SIGUSR1",
+	"SIGUSR2"
+]);
+const TaskListSchema = Type.Object({ workdir: Type.Optional(Type.String()) });
+const TaskCancelSchema = Type.Object({
+	taskId: Type.String(),
+	workdir: Type.Optional(Type.String()),
+	signal: Type.Optional(Type.String())
+});
+function normaliseSignal(input) {
+	if (!input) return "SIGTERM";
+	const upper = input.trim().toUpperCase();
+	const candidate = upper.startsWith("SIG") ? upper : `SIG${upper}`;
+	if (ALLOWED_SIGNALS.has(candidate)) return candidate;
+	throw new Error(`Unsupported signal: ${input}. Allowed: TERM, INT, HUP, QUIT, KILL, USR1, USR2.`);
+}
+function isPidAlive(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (err) {
+		if (err.code === "EPERM") return true;
+		return false;
+	}
+}
+function resolveWorkdir(deps, override) {
+	const raw = override?.trim();
+	if (!raw) return deps.workspaceDir;
+	if (!path.isAbsolute(raw)) throw new Error(`workdir must be an absolute path (got: ${raw})`);
+	return raw;
+}
+function createTaskListTool(deps) {
+	return {
+		label: "Task List",
+		name: "task_list",
+		description: `List long-running detached tasks in the agent's workspace.
+
+Globs task-<id>.{pid,status,started,cmd,log,archived} files, reads their
+state, and checks each PID's liveness. Use this to find the task-id of a
+running detach-task before calling task_cancel, or to answer "what's
+running right now?" without re-asking the user.
+
+Returns: { workdir, tasks: [{ id, pid, alive, status, archived, started, cmd, pidPath, statusPath, archivedPath, logPath }] }.
+- archived=true means the janitor swept this task's live state files (>7d
+  dead) and replaced them with a tombstone. The canonical end status is
+  preserved in the .archived file. Distinct from "missing" (no tombstone,
+  no live files) which means the task crashed or its workdir was wiped.
+- Tasks whose .pid file is missing are still listed (alive=false, pid=null)
+  so the agent can spot orphan state files.`,
+		parameters: TaskListSchema,
+		execute: async (_toolCallId, args) => {
+			const override = readStringParam(args, "workdir");
+			let workdir;
+			try {
+				workdir = resolveWorkdir(deps, override);
+			} catch (err) {
+				return jsonResult({
+					workdir: override ?? deps.workspaceDir,
+					tasks: [],
+					error: err instanceof Error ? err.message : String(err)
+				});
+			}
+			try {
+				const tasks = await listTasksInWorkdir(workdir, isPidAlive);
+				return jsonResult({
+					workdir,
+					tasks
+				});
+			} catch (err) {
+				return jsonResult({
+					workdir,
+					tasks: [],
+					error: err instanceof Error ? err.message : String(err)
+				});
+			}
+		}
+	};
+}
+function createTaskCancelTool(deps) {
+	return {
+		label: "Task Cancel",
+		name: "task_cancel",
+		description: `Send a signal (default SIGTERM) to a running detached task.
+
+Reads task-<id>.pid in the workdir, validates the recorded PID is alive,
+and sends the signal via process.kill. The task's TERM/INT/HUP trap will
+write an "aborted" status before exiting, so a follow-up task_list call
+sees the canonical end state.
+
+task-id must match the same allow-list as detach-task.sh: 1–60 chars from
+[a-zA-Z0-9._-], no leading '.' or '-'. signal accepts TERM (default), INT,
+HUP, QUIT, KILL, USR1, USR2 — with or without the "SIG" prefix.
+
+Returns: { ok, taskId, pid, sentSignal, alreadyDead?, error? }.`,
+		parameters: TaskCancelSchema,
+		execute: async (_toolCallId, args) => {
+			const params = args;
+			const taskId = readStringParam(params, "taskId", { required: true });
+			if (!TASK_ID_RE.test(taskId)) return jsonResult({
+				ok: false,
+				taskId,
+				error: "taskId must be 1–60 chars from [a-zA-Z0-9._-] and must not start with '.' or '-'."
+			});
+			const override = readStringParam(params, "workdir");
+			let workdir;
+			try {
+				workdir = resolveWorkdir(deps, override);
+			} catch (err) {
+				return jsonResult({
+					ok: false,
+					taskId,
+					error: err instanceof Error ? err.message : String(err)
+				});
+			}
+			const signalRaw = readStringParam(params, "signal");
+			let signal;
+			try {
+				signal = normaliseSignal(signalRaw);
+			} catch (err) {
+				return jsonResult({
+					ok: false,
+					taskId,
+					error: err instanceof Error ? err.message : String(err)
+				});
+			}
+			const pidPath = path.join(workdir, `${TASK_FILE_PREFIX}${taskId}.pid`);
+			let pidText;
+			try {
+				pidText = (await fs.promises.readFile(pidPath, "utf8")).trim();
+			} catch (err) {
+				if (err.code === "ENOENT") return jsonResult({
+					ok: false,
+					taskId,
+					error: `no pid file at ${pidPath} — task is unknown or already cleaned up`
+				});
+				return jsonResult({
+					ok: false,
+					taskId,
+					error: err instanceof Error ? err.message : String(err)
+				});
+			}
+			const pid = Number.parseInt(pidText, 10);
+			if (!Number.isFinite(pid) || pid <= 0) return jsonResult({
+				ok: false,
+				taskId,
+				error: `pid file at ${pidPath} did not contain a positive integer`
+			});
+			if (!isPidAlive(pid)) return jsonResult({
+				ok: false,
+				taskId,
+				pid,
+				alreadyDead: true,
+				error: "process is no longer running"
+			});
+			try {
+				process.kill(pid, signal);
+			} catch (err) {
+				return jsonResult({
+					ok: false,
+					taskId,
+					pid,
+					sentSignal: signal,
+					error: err instanceof Error ? err.message : String(err)
+				});
+			}
+			return jsonResult({
+				ok: true,
+				taskId,
+				pid,
+				sentSignal: signal
+			});
+		}
+	};
+}
+
 //#endregion
 //#region src/agents/tools/tts-tool.ts
 const TtsToolSchema = Type.Object({
@@ -64708,6 +65006,8 @@ function createSymiTools(options) {
 			config: options?.config
 		}),
 		createCronTool({ agentSessionKey: options?.agentSessionKey }),
+		createTaskListTool({ workspaceDir }),
+		createTaskCancelTool({ workspaceDir }),
 		...messageTool ? [messageTool] : [],
 		createTtsTool({
 			agentChannel: options?.agentChannel,
@@ -73948,4 +74248,4 @@ async function getReplyFromConfig(ctx, opts, configOverride) {
 }
 
 //#endregion
-export { buildDeliveryFromLegacyPayload as $, OPENAI_TTS_MODELS as $n, parseIdentityMarkdown as $t, emitGatewayRestart as A, initSubagentRegistry as An, extractImageContentFromSource as Ar, resolveHeartbeatDeliveryTarget as At, summarizeRestartSentinel as B, registerAgentRunContext as Bn, abortEmbeddedPiRun as Bt, ensureOutboundSessionEntry as C, shouldComputeCommandAuthorized as Cn, peekSystemEventEntries as Cr, requestBodyErrorToText as Ct, CHANNEL_MESSAGE_ACTION_NAMES as D, normalizeMentionText as Dn, DEFAULT_INPUT_MAX_REDIRECTS as Dr, resolveSessionKeyForRequest as Dt, resetDirectoryCache as E, buildMentionRegexes as En, DEFAULT_INPUT_IMAGE_MIMES as Er, agentCommand as Et, setPreRestartDeferralCheck as F, readLatestAssistantReply as Fn, normalizeSendPolicy as Ft, normalizeCronJobPatch as G, resolveTtsApiKey as Gn, getCliSessionId as Gt, writeRestartSentinel as H, getTtsProvider as Hn, waitForEmbeddedPiRunEnd as Ht, consumeRestartSentinel as I, clearAgentRunContext as In, resolveSendPolicy as It, normalizeOptionalSessionKey as J, resolveTtsPrefsPath as Jn, sha256HexPrefix as Jt, inferLegacyName as K, resolveTtsAutoMode as Kn, setCliSessionId as Kt, formatDoctorNonInteractiveHint as L, emitAgentEvent as Ln, createDefaultDeps as Lt, markGatewaySigusr1RestartHandled as M, listSubagentRunsForRequester as Mn, resolveInputFileLimits as Mr, resolveOutboundTarget as Mt, scheduleGatewaySigusr1Restart as N, subagent_registry_exports as Nn, estimateBase64DecodedBytes as Nr, resolveSessionDeliveryTarget as Nt, consumeGatewaySigusr1RestartAuthorization as O, countActiveDescendantRuns as On, DEFAULT_INPUT_TIMEOUT_MS as Or, resolveAgentDeliveryPlan as Ot, setGatewaySigusr1RestartPolicy as P, runSubagentAnnounceFlow as Pn, resolveAgentTimeoutMs as Pr, createOutboundSendDeps as Pt, migrateLegacyCronPayload as Q, textToSpeech as Qn, loadAgentIdentityFromWorkspace as Qt, formatRestartSentinelMessage as R, getAgentRunContext as Rn, createOutboundSendDeps$1 as Rt, runMessageAction as S, hasControlCommand as Sn, isSystemEventContextChanged as Sr, readJsonBodyWithLimit as St, formatTargetDisplay as T, stopSubagentsForRequester as Tn, DEFAULT_INPUT_IMAGE_MAX_BYTES as Tr, sleepWithAbort as Tt, normalizeHttpWebhookUrl as U, isTtsEnabled as Un, resolveModelProfile as Ut, trimLogTail as V, resolveUserTimezone as Vn, getActiveEmbeddedRunCount as Vt, normalizeCronJobCreate as W, isTtsProviderConfigured as Wn, runWithModelFallback as Wt, normalizePayloadToSystemText as X, setTtsEnabled as Xn, resolveAgentAvatar as Xt, normalizeOptionalText as Y, resolveTtsProviderOrder as Yn, describeFailoverError as Yt, normalizeRequiredName as Z, setTtsProvider as Zn, identityHasValues as Zt, loadCombinedSessionStoreForGateway as _, createInboundDebouncer as _n, formatRemainingShort as _r, formatUsageReportLines as _t, buildChannelSummary as a, buildPairingReply as an, setCommandLaneConcurrency as ar, persistBrowserProxyFiles as at, resolveGatewaySessionStoreTarget as b, resolveEnvelopeFormatOptions as bn, parseVerboseOverride as br, resolveCommitHash as bt, clearSessionQueues as c, buildHistoryContextFromEntries as cn, DEFAULT_HEARTBEAT_ACK_MAX_CHARS as cr, setHeartbeatWakeHandler as ct, createSymiTools as d, dispatchReplyWithBufferedBlockDispatcher as dn, resolveHeartbeatPrompt as dr, createPluginLoaderLogger as dt, buildSafeExternalPrompt as en, OPENAI_TTS_VOICES as er, hasLegacyDeliveryHints as et, resolveAnnounceTargetFromKey as f, provider_dispatcher_exports as fn, stripHeartbeatToken as fr, loadSymiPlugins as ft, listSessionsFromStore as g, createDedupeCache as gn, buildAuthHealthSummary as gr, loadProviderUsageSummary as gt, listAgentsForGateway as h, getTotalPendingReplies as hn, DEFAULT_OAUTH_WARN_MS as hr, parseActivationCommand as ht, resolveCronStyleNow as i, unbindThreadBindingsBySessionKey as in, resetAllLanes as ir, applyBrowserProxyPaths as it, isGatewaySigusr1RestartExternallyAllowed as j, listDescendantRunsForRequester as jn, normalizeMimeList as jr, resolveHeartbeatSenderContext as jt, deferGatewayRestartUntilIdle as k, countActiveRunsForSession as kn, extractFileContentFromSource as kr, resolveAgentOutboundTarget as kt, applyToolPolicyPipeline as l, recordPendingHistoryEntryIfEnabled as ln, DEFAULT_HEARTBEAT_EVERY as lr, resolveHeartbeatReasonKind as lt, classifySessionKey as m, createReplyDispatcher as mn, maskApiKey as mr, normalizeGroupActivation as mt, BARE_SESSION_RESET_PROMPT as n, getHookType as nn, getQueueSize as nr, CHANNEL_TARGETS_DESCRIPTION as nt, buildChannelAccountSnapshot as o, resolveMentionGating as on, waitForActiveTasks as or, sniffMimeFromBase64 as ot, canonicalizeSpawnedByForAgent as p, dispatchInboundMessage as pn, lookupContextTokens as pr, deleteTelegramUpdateOffset as pt, normalizeOptionalAgentId as q, resolveTtsConfig as qn, runCliAgent as qt, appendCronStyleCurrentTimeLine as r, isExternalHookSession as rn, getTotalQueueSize as rr, CHANNEL_TARGET_DESCRIPTION as rt, formatChannelAllowFrom as s, DEFAULT_GROUP_HISTORY_LIMIT as sn, CommandLane as sr, requestHeartbeatNow as st, getReplyFromConfig as t, detectSuspiciousPatterns as tn, getActiveTaskCount as tr, stripLegacyDeliveryFields as tt, buildDefaultToolPolicyPipelineSteps as u, shouldAckReactionForWhatsApp as un, isHeartbeatContentEffectivelyEmpty as ur, getPluginToolMeta as ut, loadSessionEntry as v, resolveInboundDebounceMs as vn, applyModelOverrideToSessionEntry as vr, formatUsageWindowSummary as vt, resolveOutboundSessionRoute as w, isAbortTrigger as wn, peekSystemEvents as wr, computeBackoff as wt, resolveSessionModelRef as x, formatZonedTimestamp as xn, enqueueSystemEvent as xr, handleSlackHttpRequest as xt, pruneLegacyStoreKeys as y, formatInboundEnvelope as yn, applyVerboseOverride as yr, resolveUsageProviderId as yt, readRestartSentinel as z, onAgentEvent as zn, runAgentTurn as zt };
+export { migrateLegacyCronPayload as $, textToSpeech as $n, loadAgentIdentityFromWorkspace as $t, deferGatewayRestartUntilIdle as A, countActiveRunsForSession as An, extractFileContentFromSource as Ar, resolveAgentOutboundTarget as At, readRestartSentinel as B, onAgentEvent as Bn, runAgentTurn as Bt, runMessageAction as C, hasControlCommand as Cn, isSystemEventContextChanged as Cr, readJsonBodyWithLimit as Ct, resetDirectoryCache as D, buildMentionRegexes as Dn, DEFAULT_INPUT_IMAGE_MIMES as Dr, agentCommand as Dt, formatTargetDisplay as E, stopSubagentsForRequester as En, DEFAULT_INPUT_IMAGE_MAX_BYTES as Er, sleepWithAbort as Et, setGatewaySigusr1RestartPolicy as F, runSubagentAnnounceFlow as Fn, resolveAgentTimeoutMs as Fr, createOutboundSendDeps as Ft, normalizeCronJobCreate as G, isTtsProviderConfigured as Gn, runWithModelFallback as Gt, trimLogTail as H, resolveUserTimezone as Hn, getActiveEmbeddedRunCount as Ht, setPreRestartDeferralCheck as I, readLatestAssistantReply as In, normalizeSendPolicy as It, normalizeOptionalAgentId as J, resolveTtsConfig as Jn, runCliAgent as Jt, normalizeCronJobPatch as K, resolveTtsApiKey as Kn, getCliSessionId as Kt, consumeRestartSentinel as L, clearAgentRunContext as Ln, resolveSendPolicy as Lt, isGatewaySigusr1RestartExternallyAllowed as M, listDescendantRunsForRequester as Mn, normalizeMimeList as Mr, resolveHeartbeatSenderContext as Mt, markGatewaySigusr1RestartHandled as N, listSubagentRunsForRequester as Nn, resolveInputFileLimits as Nr, resolveOutboundTarget as Nt, CHANNEL_MESSAGE_ACTION_NAMES as O, normalizeMentionText as On, DEFAULT_INPUT_MAX_REDIRECTS as Or, resolveSessionKeyForRequest as Ot, scheduleGatewaySigusr1Restart as P, subagent_registry_exports as Pn, estimateBase64DecodedBytes as Pr, resolveSessionDeliveryTarget as Pt, normalizeRequiredName as Q, setTtsProvider as Qn, identityHasValues as Qt, formatDoctorNonInteractiveHint as R, emitAgentEvent as Rn, createDefaultDeps as Rt, resolveSessionModelRef as S, formatZonedTimestamp as Sn, enqueueSystemEvent as Sr, handleSlackHttpRequest as St, resolveOutboundSessionRoute as T, isAbortTrigger as Tn, peekSystemEvents as Tr, computeBackoff as Tt, writeRestartSentinel as U, getTtsProvider as Un, waitForEmbeddedPiRunEnd as Ut, summarizeRestartSentinel as V, registerAgentRunContext as Vn, abortEmbeddedPiRun as Vt, normalizeHttpWebhookUrl as W, isTtsEnabled as Wn, resolveModelProfile as Wt, normalizeOptionalText as X, resolveTtsProviderOrder as Xn, describeFailoverError as Xt, normalizeOptionalSessionKey as Y, resolveTtsPrefsPath as Yn, sha256HexPrefix as Yt, normalizePayloadToSystemText as Z, setTtsEnabled as Zn, resolveAgentAvatar as Zt, listSessionsFromStore as _, createDedupeCache as _n, buildAuthHealthSummary as _r, loadProviderUsageSummary as _t, buildChannelSummary as a, unbindThreadBindingsBySessionKey as an, resetAllLanes as ar, applyBrowserProxyPaths as at, pruneLegacyStoreKeys as b, formatInboundEnvelope as bn, applyVerboseOverride as br, resolveUsageProviderId as bt, clearSessionQueues as c, DEFAULT_GROUP_HISTORY_LIMIT as cn, CommandLane as cr, requestHeartbeatNow as ct, createSymiTools as d, shouldAckReactionForWhatsApp as dn, isHeartbeatContentEffectivelyEmpty as dr, getPluginToolMeta as dt, parseIdentityMarkdown as en, OPENAI_TTS_MODELS as er, buildDeliveryFromLegacyPayload as et, listTasksInWorkdir as f, dispatchReplyWithBufferedBlockDispatcher as fn, resolveHeartbeatPrompt as fr, createPluginLoaderLogger as ft, listAgentsForGateway as g, getTotalPendingReplies as gn, DEFAULT_OAUTH_WARN_MS as gr, parseActivationCommand as gt, classifySessionKey as h, createReplyDispatcher as hn, maskApiKey as hr, normalizeGroupActivation as ht, resolveCronStyleNow as i, isExternalHookSession as in, getTotalQueueSize as ir, CHANNEL_TARGET_DESCRIPTION as it, emitGatewayRestart as j, initSubagentRegistry as jn, extractImageContentFromSource as jr, resolveHeartbeatDeliveryTarget as jt, consumeGatewaySigusr1RestartAuthorization as k, countActiveDescendantRuns as kn, DEFAULT_INPUT_TIMEOUT_MS as kr, resolveAgentDeliveryPlan as kt, applyToolPolicyPipeline as l, buildHistoryContextFromEntries as ln, DEFAULT_HEARTBEAT_ACK_MAX_CHARS as lr, setHeartbeatWakeHandler as lt, canonicalizeSpawnedByForAgent as m, dispatchInboundMessage as mn, lookupContextTokens as mr, deleteTelegramUpdateOffset as mt, BARE_SESSION_RESET_PROMPT as n, detectSuspiciousPatterns as nn, getActiveTaskCount as nr, stripLegacyDeliveryFields as nt, buildChannelAccountSnapshot as o, buildPairingReply as on, setCommandLaneConcurrency as or, persistBrowserProxyFiles as ot, resolveAnnounceTargetFromKey as p, provider_dispatcher_exports as pn, stripHeartbeatToken as pr, loadSymiPlugins as pt, inferLegacyName as q, resolveTtsAutoMode as qn, setCliSessionId as qt, appendCronStyleCurrentTimeLine as r, getHookType as rn, getQueueSize as rr, CHANNEL_TARGETS_DESCRIPTION as rt, formatChannelAllowFrom as s, resolveMentionGating as sn, waitForActiveTasks as sr, sniffMimeFromBase64 as st, getReplyFromConfig as t, buildSafeExternalPrompt as tn, OPENAI_TTS_VOICES as tr, hasLegacyDeliveryHints as tt, buildDefaultToolPolicyPipelineSteps as u, recordPendingHistoryEntryIfEnabled as un, DEFAULT_HEARTBEAT_EVERY as ur, resolveHeartbeatReasonKind as ut, loadCombinedSessionStoreForGateway as v, createInboundDebouncer as vn, formatRemainingShort as vr, formatUsageReportLines as vt, ensureOutboundSessionEntry as w, shouldComputeCommandAuthorized as wn, peekSystemEventEntries as wr, requestBodyErrorToText as wt, resolveGatewaySessionStoreTarget as x, resolveEnvelopeFormatOptions as xn, parseVerboseOverride as xr, resolveCommitHash as xt, loadSessionEntry as y, resolveInboundDebounceMs as yn, applyModelOverrideToSessionEntry as yr, formatUsageWindowSummary as yt, formatRestartSentinelMessage as z, getAgentRunContext as zn, createOutboundSendDeps$1 as zt };

package/dist/{rpc-DYHXLh0P.js → rpc-C3ZUAjXK.js}

@@ -1,4 +1,4 @@
-import { a as randomIdempotencyKey, n as callGateway } from "./call-BrRWr7Lj.js";
+import { a as randomIdempotencyKey, n as callGateway } from "./call-CAGvQYXj.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-C9dERklz.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-DZCCI6Uk.js";
 import { n as withProgress } from "./progress-HK2tT7Yf.js";

package/dist/{rpc-DdlEeEXT.js → rpc-St4eAsjR.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-aT-I_DTX.js";
-import { a as randomIdempotencyKey, n as callGateway } from "./call-Cmb04dff.js";
+import { a as randomIdempotencyKey, n as callGateway } from "./call-BkJK3eYP.js";
 import { n as withProgress } from "./progress-WhkkDU0H.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-D3rffA64.js";
 

package/dist/{run-main-7BEaNeDG.js → run-main-CnqZnevI.js}

@@ -10,11 +10,11 @@ import "./frontmatter-B8duUx_6.js";
 import "./skills-D_oCiaQn.js";
 import "./manifest-registry-D5bnO5uA.js";
 import { H as VERSION, W as loadDotEnv } from "./config-DXt3pc08.js";
-import "./client-qUlxXXVJ.js";
-import "./call-BrRWr7Lj.js";
+import "./client-Cmq13-uF.js";
+import "./call-CAGvQYXj.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-BvP8AGdE.js";
+import "./subagent-registry-B1HJJs3Q.js";
 import "./sessions-BPD85pWA.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -52,8 +52,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-J1x_DaPn.js";
 import "./reply-prefix-BUN71nd5.js";
-import "./memory-cli-BSOOwpt1.js";
-import "./manager-syNf_ZrI.js";
+import "./memory-cli-eSWCbEiS.js";
+import "./manager-B60Ncruq.js";
 import "./gemini-auth-DEakvf-D.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -94,17 +94,17 @@ import "./cli-utils-CI_KkT8q.js";
 import "./help-format-nY42tGMB.js";
 import "./progress-HK2tT7Yf.js";
 import "./replies-Sxbew659.js";
-import "./onboard-helpers-CF0Cp3OB.js";
+import "./onboard-helpers-DjlGq6iG.js";
 import "./prompt-style-BxVdnrLq.js";
 import "./pairing-labels-BHx_CdbP.js";
-import "./pi-tools.policy-QIVWAVVI.js";
+import "./pi-tools.policy-o0ytjRqu.js";
 import { t as ensureSymiCliOnPath } from "./path-env-CaiY2aOj.js";
 import "./catalog-KcLvtTfa.js";
 import "./note-DewoEWtc.js";
 import "./plugin-auto-enable-pQEg2Mly.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-Cy1kfzAy.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-kiYkB_km.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-BofkqBu7.js";
-import { t as emitCliBanner } from "./banner-CX5CuLWQ.js";
+import { t as emitCliBanner } from "./banner-CiHQEfyr.js";
 import "./doctor-config-flow-B2dVxbL7.js";
 import { n as ensureConfigReady } from "./config-guard-BvqCjFPk.js";
 import process$1 from "node:process";
@@ -119,7 +119,7 @@ const routeHealth = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { healthCommand } = await import("./health-fOu0S75U.js").then((n) => n.i);
+		const { healthCommand } = await import("./health-DMy1nA4K.js").then((n) => n.i);
 		await healthCommand({
 			json,
 			timeoutMs,
@@ -139,7 +139,7 @@ const routeStatus = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { statusCommand } = await import("./status-DMigoL7q.js").then((n) => n.t);
+		const { statusCommand } = await import("./status-Qt6QDFJ1.js").then((n) => n.t);
 		await statusCommand({
 			json,
 			deep,
@@ -173,7 +173,7 @@ const routeAgentsList = {
 	run: async (argv) => {
 		const json = hasFlag(argv, "--json");
 		const bindings = hasFlag(argv, "--bindings");
-		const { agentsListCommand } = await import("./agents-CgCg4syn.js").then((n) => n.t);
+		const { agentsListCommand } = await import("./agents-BhhAcFrX.js").then((n) => n.t);
 		await agentsListCommand({
 			json,
 			bindings
@@ -190,7 +190,7 @@ const routeMemoryStatus = {
 		const deep = hasFlag(argv, "--deep");
 		const index = hasFlag(argv, "--index");
 		const verbose = hasFlag(argv, "--verbose");
-		const { runMemoryStatus } = await import("./memory-cli-BSOOwpt1.js").then((n) => n.t);
+		const { runMemoryStatus } = await import("./memory-cli-eSWCbEiS.js").then((n) => n.t);
 		await runMemoryStatus({
 			agent,
 			json,
@@ -244,7 +244,7 @@ const routes = [
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
 			const json = hasFlag(argv, "--json");
-			const { runConfigGet } = await import("./config-cli-DP0hP7WR.js");
+			const { runConfigGet } = await import("./config-cli-B7ZvHIMY.js");
 			await runConfigGet({
 				path: pathArg,
 				json
@@ -257,7 +257,7 @@ const routes = [
 		run: async (argv) => {
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
-			const { runConfigUnset } = await import("./config-cli-DP0hP7WR.js");
+			const { runConfigUnset } = await import("./config-cli-B7ZvHIMY.js");
 			await runConfigUnset({ path: pathArg });
 			return true;
 		}
@@ -271,7 +271,7 @@ const routes = [
 			const local = hasFlag(argv, "--local");
 			const json = hasFlag(argv, "--json");
 			const plain = hasFlag(argv, "--plain");
-			const { modelsListCommand } = await import("./models-sGeWQOmg.js").then((n) => n.t);
+			const { modelsListCommand } = await import("./models-B5H41UsH.js").then((n) => n.t);
 			await modelsListCommand({
 				all,
 				local,
@@ -302,7 +302,7 @@ const routes = [
 			const plain = hasFlag(argv, "--plain");
 			const check = hasFlag(argv, "--check");
 			const probe = hasFlag(argv, "--probe");
-			const { modelsStatusCommand } = await import("./models-sGeWQOmg.js").then((n) => n.t);
+			const { modelsStatusCommand } = await import("./models-B5H41UsH.js").then((n) => n.t);
 			await modelsStatusCommand({
 				json,
 				plain,
@@ -380,7 +380,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-CVy9LVoS.js");
+	const { buildProgram } = await import("./program-8Zg4CY5d.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -412,10 +412,10 @@ async function runCli(argv = process$1.argv) {
 		const { getProgramContext } = await import("./program-context-DeZ44oQ9.js").then((n) => n.n);
 		const ctx = getProgramContext(program);
 		if (ctx) {
-			const { registerCoreCliByName } = await import("./command-registry-cEqGIx4b.js").then((n) => n.t);
+			const { registerCoreCliByName } = await import("./command-registry-B8LVEWW9.js").then((n) => n.t);
 			await registerCoreCliByName(program, ctx, primary, parseArgv);
 		}
-		const { registerSubCliByName } = await import("./register.subclis-Bw8k5Z5C.js").then((n) => n.a);
+		const { registerSubCliByName } = await import("./register.subclis-CQtXpheE.js").then((n) => n.a);
 		await registerSubCliByName(program, primary);
 	}
 	const hasBuiltinPrimary = primary !== null && program.commands.some((command) => command.name() === primary);
@@ -424,7 +424,7 @@ async function runCli(argv = process$1.argv) {
 		primary,
 		hasBuiltinPrimary
 	})) {
-		const { registerPluginCliCommands } = await import("./cli-D4WYEtu4.js");
+		const { registerPluginCliCommands } = await import("./cli-DUiSlxsb.js");
 		const { loadConfig } = await import("./config-DXt3pc08.js").then((n) => n.t);
 		registerPluginCliCommands(program, loadConfig());
 	}

package/dist/{security-cli-BpnzAB5_.js → security-cli-B8gavsuQ.js}

@@ -9,8 +9,8 @@ import "./frontmatter-B8duUx_6.js";
 import "./skills-D_oCiaQn.js";
 import "./manifest-registry-D5bnO5uA.js";
 import { i as loadConfig, r as createConfigIO } from "./config-DXt3pc08.js";
-import "./client-qUlxXXVJ.js";
-import "./call-BrRWr7Lj.js";
+import "./client-Cmq13-uF.js";
+import "./call-CAGvQYXj.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
 import "./sessions-BPD85pWA.js";
@@ -42,10 +42,10 @@ import "./workspace-dirs-DVn-uDvF.js";
 import { i as readChannelAllowFromStore } from "./pairing-store-B2viSnRj.js";
 import { t as formatDocsLink } from "./links-CxyMXTsn.js";
 import { t as formatHelpExamples } from "./help-format-nY42tGMB.js";
-import "./pi-tools.policy-QIVWAVVI.js";
+import "./pi-tools.policy-o0ytjRqu.js";
 import "./dangerous-tools-Cw6NBIXW.js";
 import "./skill-scanner-BV3QHmsf.js";
-import { i as collectIncludePathsRecursive, n as createIcaclsResetCommand, r as formatIcaclsResetCommand, t as runSecurityAudit } from "./audit-Oa5dsn5p.js";
+import { i as collectIncludePathsRecursive, n as createIcaclsResetCommand, r as formatIcaclsResetCommand, t as runSecurityAudit } from "./audit-Dr_8rC6G.js";
 import "./dm-policy-shared-JiSNSaKz.js";
 import path from "node:path";
 import fs from "node:fs/promises";