@symerian/symi 2.8.16 → 2.9.0

package/dist/{register.subclis-8cGjLTmN.js → register.subclis-ByZAz4st.js}

@@ -41,7 +41,7 @@ const entries = [
 		description: "Agent Control Protocol tools",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./acp-cli-D1JYg9c1.js")).registerAcpCli(program);
+			(await import("./acp-cli-Bav1bRj2.js")).registerAcpCli(program);
 		}
 	},
 	{
@@ -49,7 +49,7 @@ const entries = [
 		description: "Run, inspect, and query the WebSocket Gateway",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./gateway-cli-DGMuMxMT.js")).registerGatewayCli(program);
+			(await import("./gateway-cli-Bnh42-56.js")).registerGatewayCli(program);
 		}
 	},
 	{
@@ -57,7 +57,7 @@ const entries = [
 		description: "Gateway service (legacy alias)",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./daemon-cli-CweMes2K.js").then((n) => n.t)).registerDaemonCli(program);
+			(await import("./daemon-cli-BFoJGCHZ.js").then((n) => n.t)).registerDaemonCli(program);
 		}
 	},
 	{
@@ -65,7 +65,7 @@ const entries = [
 		description: "Tail gateway file logs via RPC",
 		hasSubcommands: false,
 		register: async (program) => {
-			(await import("./logs-cli-1hn28HCu.js")).registerLogsCli(program);
+			(await import("./logs-cli-N5jQvJTm.js")).registerLogsCli(program);
 		}
 	},
 	{
@@ -73,7 +73,7 @@ const entries = [
 		description: "System events, heartbeat, and presence",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./system-cli-BN9MXNk7.js")).registerSystemCli(program);
+			(await import("./system-cli-BERSpUjO.js")).registerSystemCli(program);
 		}
 	},
 	{
@@ -81,7 +81,7 @@ const entries = [
 		description: "Discover, scan, and configure models",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./models-cli-CXW-3Zot.js")).registerModelsCli(program);
+			(await import("./models-cli-Cy6H1sFq.js")).registerModelsCli(program);
 		}
 	},
 	{
@@ -89,7 +89,7 @@ const entries = [
 		description: "Manage exec approvals (gateway or node host)",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./exec-approvals-cli-CTEn_Eu_.js")).registerExecApprovalsCli(program);
+			(await import("./exec-approvals-cli-CKRDAo17.js")).registerExecApprovalsCli(program);
 		}
 	},
 	{
@@ -97,7 +97,7 @@ const entries = [
 		description: "Manage gateway-owned node pairing and node commands",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./nodes-cli-DE60dv81.js")).registerNodesCli(program);
+			(await import("./nodes-cli-Dv0NXhCO.js")).registerNodesCli(program);
 		}
 	},
 	{
@@ -105,7 +105,7 @@ const entries = [
 		description: "Device pairing + token management",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./devices-cli-DeoPyzAd.js")).registerDevicesCli(program);
+			(await import("./devices-cli-BXc6DPkC.js")).registerDevicesCli(program);
 		}
 	},
 	{
@@ -113,7 +113,7 @@ const entries = [
 		description: "Run and manage the headless node host service",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./node-cli-BBN6PoOG.js")).registerNodeCli(program);
+			(await import("./node-cli-BD4E-Y8a.js")).registerNodeCli(program);
 		}
 	},
 	{
@@ -129,7 +129,7 @@ const entries = [
 		description: "Open a terminal UI connected to the Gateway",
 		hasSubcommands: false,
 		register: async (program) => {
-			(await import("./tui-cli-DC9Bq-N_.js")).registerTuiCli(program);
+			(await import("./tui-cli-BD1cbShC.js")).registerTuiCli(program);
 		}
 	},
 	{
@@ -137,7 +137,7 @@ const entries = [
 		description: "Manage cron jobs via the Gateway scheduler",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./cron-cli-Dq2FEfK1.js")).registerCronCli(program);
+			(await import("./cron-cli-BEdmHCWZ.js")).registerCronCli(program);
 		}
 	},
 	{
@@ -161,7 +161,7 @@ const entries = [
 		description: "Manage internal agent hooks",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./hooks-cli-Dm2SU8AY.js")).registerHooksCli(program);
+			(await import("./hooks-cli-CTcHtm_0.js")).registerHooksCli(program);
 		}
 	},
 	{
@@ -185,7 +185,7 @@ const entries = [
 		description: "Secure DM pairing (approve inbound requests)",
 		hasSubcommands: true,
 		register: async (program) => {
-			const { registerPluginCliCommands } = await import("./cli-RIwsXnB-.js");
+			const { registerPluginCliCommands } = await import("./cli-BX54CAM7.js");
 			registerPluginCliCommands(program, await loadConfig());
 			(await import("./pairing-cli-7X1qlhzF.js")).registerPairingCli(program);
 		}
@@ -195,8 +195,8 @@ const entries = [
 		description: "Manage Symi plugins and extensions",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./plugins-cli-DGWVBlc8.js")).registerPluginsCli(program);
-			const { registerPluginCliCommands } = await import("./cli-RIwsXnB-.js");
+			(await import("./plugins-cli-3h1N5N8n.js")).registerPluginsCli(program);
+			const { registerPluginCliCommands } = await import("./cli-BX54CAM7.js");
 			registerPluginCliCommands(program, await loadConfig());
 		}
 	},
@@ -205,7 +205,7 @@ const entries = [
 		description: "Manage connected chat channels (Telegram, Discord, etc.)",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./channels-cli-Bn6mTlYq.js")).registerChannelsCli(program);
+			(await import("./channels-cli-h3GnmmM9.js")).registerChannelsCli(program);
 		}
 	},
 	{
@@ -221,7 +221,7 @@ const entries = [
 		description: "Security tools and local config audits",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./security-cli-B8gavsuQ.js")).registerSecurityCli(program);
+			(await import("./security-cli-CIB7kqEk.js")).registerSecurityCli(program);
 		}
 	},
 	{
@@ -237,7 +237,7 @@ const entries = [
 		description: "Update Symi and inspect update channel status",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./update-cli-CwtAWyeY.js")).registerUpdateCli(program);
+			(await import("./update-cli-CL1_LPBS.js")).registerUpdateCli(program);
 		}
 	},
 	{
@@ -245,7 +245,7 @@ const entries = [
 		description: "Generate shell completion script",
 		hasSubcommands: false,
 		register: async (program) => {
-			(await import("./completion-cli-BVG9ZtBG.js").then((n) => n.n)).registerCompletionCli(program);
+			(await import("./completion-cli-BYXofVqv.js").then((n) => n.n)).registerCompletionCli(program);
 		}
 	}
 ];

package/dist/{reply-CaGCmutq.js → reply-CgyjcoxC.js}

@@ -60,8 +60,8 @@ import { r as getDiagnosticSessionState } from "./diagnostic-session-state-CUslJ
 import { A as hasBotMention, B as resolveSenderAllowMatch, C as buildTelegramGroupPeerId, D as describeReplyTarget, E as buildTypingThreadParams, F as resolveTelegramReplyId, G as toLocationContext, H as isSenderIdAllowed, I as resolveTelegramStreamMode, J as parseTelegramTarget, K as withTelegramApiErrorLogging, L as resolveTelegramThreadSpec, M as resolveTelegramForumThreadId, N as resolveTelegramGroupAllowFromContext, O as expandTextLinks, P as resolveTelegramMediaPlaceholder, R as isSenderAllowed$1, S as buildTelegramGroupFrom, T as buildTelegramThreadParams, U as mergeAllowFromSources, V as firstDefined$1, W as formatLocationText, Y as resolveTelegramTargetChatType, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildSenderLabel, c as sendStickerTelegram, d as wasSentByBot, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as normalizeForwardedContext, k as extractTelegramLocation, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as isVoiceCompatibleAudio, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramParentPeer, x as buildSenderName, y as buildGroupLabel, z as normalizeAllowFromWithStore$1 } from "./send-DpMnSIi5.js";
 import { a as buildModelAliasLines, n as resolveModel } from "./model-ECsJuJew.js";
 import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-CE2YmmsD.js";
-import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-BOxWccJu.js";
-import { a as resolveMemorySearchConfig, t as MemoryIndexManager } from "./manager-BOvfAdfG.js";
+import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-BTByRgM0.js";
+import { a as resolveMemorySearchConfig, t as MemoryIndexManager } from "./manager-9Mni2AA9.js";
 import { n as retryAsync } from "./retry-BoS4e4X_.js";
 import { c as imageResultFromFile, d as readNumberParam, f as readReactionParams, h as readStringParam, l as jsonResult, m as readStringOrNumberParam, n as missingTargetError, o as createActionGate, p as readStringArrayParam, r as unknownTargetError, s as imageResult, t as ambiguousTargetError, u as parseAvailableTags } from "./target-errors-C9e6dMU_.js";
 import { a as chunkText, c as resolveChunkMode, d as isSafeFenceBreak, f as parseFenceSpans, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit, o as chunkTextWithMode, r as chunkMarkdownText, t as chunkByNewline, u as findFenceSpanAt } from "./chunk-DIi9uyC6.js";
@@ -69,8 +69,8 @@ import { n as resolveMarkdownTableMode } from "./markdown-tables-kCfKPOgH.js";
 import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-jTXFdH5R.js";
 import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled, n as isNativeCommandsExplicitlyDisabled, r as isRestartEnabled, t as isCommandFlagEnabled } from "./commands-vWB85AXk.js";
 import { a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, i as listChatCommands, l as parseCommandArgs, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices } from "./commands-registry-D_uByLpw.js";
-import { Lt as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-CYsBIR3j.js";
-import { a as randomIdempotencyKey, d as resolveLeastPrivilegeOperatorScopesForMethod, n as callGateway, r as callGatewayLeastPrivilege, t as buildGatewayConnectionDetails } from "./call-BkJK3eYP.js";
+import { Rt as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-pd8kwOFJ.js";
+import { a as randomIdempotencyKey, d as resolveLeastPrivilegeOperatorScopesForMethod, n as callGateway, r as callGatewayLeastPrivilege, t as buildGatewayConnectionDetails } from "./call-DYfKEdwh.js";
 import { n as formatTimeAgo } from "./format-relative-CviDPm2s.js";
 import { n as normalizePollInput } from "./polls-DZoQqmds.js";
 import { n as recordChannelActivity, r as createDiscordRetryRunner, t as getChannelActivity } from "./channel-activity-CoTZV03i.js";
@@ -86,7 +86,7 @@ import { b as ensureSkillsWatcher, i as resolveSkillCommandInvocation, n as list
 import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-C87_fedd.js";
 import { c as hasNonzeroUsage, l as normalizeUsage, n as loadCostUsageSummary, o as derivePromptTokens, r as loadSessionCostSummary, s as deriveSessionTotalTokens } from "./session-cost-usage-RPrhIvZF.js";
 import { a as normalizeIMessageHandle, c as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, i as isAllowedIMessageSender, o as parseIMessageTarget, r as formatIMessageChatTarget, s as createIMessageRpcClient, t as sendMessageIMessage } from "./send-SF7x1UHb.js";
-import { r as detectBinary } from "./onboard-helpers-B7jBYbCU.js";
+import { r as detectBinary } from "./onboard-helpers-CBxazphs.js";
 import { t as resolvePairingIdLabel } from "./pairing-labels-CTL1gXZb.js";
 import { i as resolveModelCostConfig, n as formatTokenCount$2, r as formatUsd, t as estimateUsageCost } from "./usage-format-D4P4IiJ6.js";
 import { t as getActiveWebListener } from "./active-listener-Cif6x8mY.js";
@@ -9782,16 +9782,16 @@ function shouldComputeCommandAuthorized(text, cfg, options) {
 
 //#endregion
 //#region src/channels/sender-label.ts
-function normalize(value) {
+function normalize$1(value) {
 	const trimmed = value?.trim();
 	return trimmed ? trimmed : void 0;
 }
 function resolveSenderLabel(params) {
-	const name = normalize(params.name);
-	const username = normalize(params.username);
-	const tag = normalize(params.tag);
-	const e164 = normalize(params.e164);
-	const id = normalize(params.id);
+	const name = normalize$1(params.name);
+	const username = normalize$1(params.username);
+	const tag = normalize$1(params.tag);
+	const e164 = normalize$1(params.e164);
+	const id = normalize$1(params.id);
 	const display = name ?? username ?? tag ?? "";
 	const idPart = e164 ?? id ?? "";
 	if (display && idPart && display !== idPart) return `${display} (${idPart})`;
@@ -31935,7 +31935,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-N4FG6nyF.js");
+			const { sendMessageWhatsApp } = await import("./web-DmgQtLx3.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -50366,7 +50366,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-N4FG6nyF.js");
+	webChannelPromise ??= import("./web-DmgQtLx3.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -54060,6 +54060,91 @@ function wrapToolWithAbortSignal(tool, abortSignal) {
 	};
 }
 
+//#endregion
+//#region src/agents/pi-tools.read-edit-guard.ts
+const RETRY_GUIDANCE_SUFFIX$1 = " Read the file first, then retry the edit.";
+function readGuardError(filePath) {
+	return /* @__PURE__ */ new Error(`Edit refused: '${filePath}' has not been read in this session. The edit tool requires the agent to read the file first so oldText can match real content rather than hallucinated content.${RETRY_GUIDANCE_SUFFIX$1}`);
+}
+function extractPath(args) {
+	if (!args || typeof args !== "object") return;
+	const record = args;
+	const candidate = record.path ?? record.file_path;
+	if (typeof candidate !== "string") return;
+	const trimmed = candidate.trim();
+	return trimmed.length > 0 ? trimmed : void 0;
+}
+function wrapReadToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordRead(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapWriteToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordWrite(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapEditToolWithGuard(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const filePath = extractPath(args);
+			if (filePath && !tracker.hasObserved(filePath)) throw readGuardError(filePath);
+			return tool.execute(toolCallId, args, signal, onUpdate);
+		}
+	};
+}
+
+//#endregion
+//#region src/agents/pi-tools.read-edit-tracker.ts
+function normalize(filePath, workspaceRoot) {
+	if (!workspaceRoot) return filePath;
+	if (path.isAbsolute(filePath)) return path.normalize(filePath);
+	return path.resolve(workspaceRoot, filePath);
+}
+function createReadEditTracker(opts = {}) {
+	const observed = /* @__PURE__ */ new Map();
+	const record = (filePath, kind) => {
+		if (typeof filePath !== "string" || !filePath.trim()) return;
+		const key = normalize(filePath.trim(), opts.workspaceRoot);
+		const prior = observed.get(key);
+		if (kind === "written" || prior !== "written") observed.set(key, kind);
+	};
+	return {
+		recordRead: (filePath) => record(filePath, "read"),
+		recordWrite: (filePath) => record(filePath, "written"),
+		observation: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return null;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.get(key) ?? null;
+		},
+		hasObserved: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return false;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.has(key);
+		},
+		reset: () => {
+			observed.clear();
+		}
+	};
+}
+
 //#endregion
 //#region src/media/sniff-mime-from-base64.ts
 async function sniffMimeFromBase64(base64) {
@@ -56961,8 +57046,39 @@ const GatewayToolSchema = Type.Object({
 	baseHash: Type.Optional(Type.String()),
 	sessionKey: Type.Optional(Type.String()),
 	note: Type.Optional(Type.String()),
-	restartDelayMs: Type.Optional(Type.Number())
+	restartDelayMs: Type.Optional(Type.Number()),
+	userRequestAcknowledgment: Type.Optional(Type.String())
 });
+/** Actions that mutate gateway state and require explicit user authorization. */
+const DESTRUCTIVE_ACTIONS = new Set([
+	"config.apply",
+	"config.patch",
+	"update.run"
+]);
+/** Minimum length for a meaningful authorization message. */
+const MIN_AUTHORIZATION_LENGTH = 10;
+/**
+* Asserts the user's request was explicitly acknowledged for destructive
+* actions. Throws a descriptive error if the acknowledgment is missing,
+* empty, or trivially short.
+*
+* NOTE: This is defense-in-depth, not a hard barrier. A determined model
+* could still populate the field with fabricated text. The barrier exists
+* to:
+*   1. Force the agent to deliberately compose a justification (vs. blind
+*      tool invocation).
+*   2. Provide an audit trail (the acknowledgment is logged with the tool
+*      call args).
+*   3. Surface for future tightening (e.g., matching against real session
+*      history).
+*/
+function assertUserAuthorization(action, params) {
+	if (!DESTRUCTIVE_ACTIONS.has(action)) return;
+	const ack = params.userRequestAcknowledgment;
+	const trimmed = typeof ack === "string" ? ack.trim() : "";
+	if (!trimmed) throw new Error(`Action '${action}' requires an explicit user authorization. Pass userRequestAcknowledgment with a paraphrase of the user's request (e.g., "user said: please update Symi"). If the user did not explicitly request this action, ask them first instead of invoking it.`);
+	if (trimmed.length < MIN_AUTHORIZATION_LENGTH) throw new Error(`Action '${action}' requires a substantive userRequestAcknowledgment (minimum ${MIN_AUTHORIZATION_LENGTH} characters describing the user's request). Received: ${JSON.stringify(trimmed)}.`);
+}
 function createGatewayTool(opts) {
 	return {
 		label: "Gateway",
@@ -56973,6 +57089,7 @@ function createGatewayTool(opts) {
 		execute: async (_toolCallId, args) => {
 			const params = args;
 			const action = readStringParam(params, "action", { required: true });
+			assertUserAuthorization(action, params);
 			if (action === "restart") {
 				if (!isRestartEnabled(opts?.config)) throw new Error("Gateway restart is disabled (commands.restart=false).");
 				const sessionKey = typeof params.sessionKey === "string" && params.sessionKey.trim() ? params.sessionKey.trim() : opts?.agentSessionKey?.trim() || void 0;
@@ -65265,33 +65382,34 @@ function createSymiCodingTools(options) {
 	});
 	if (sandboxRoot && !sandboxFsBridge) throw new Error("Sandbox filesystem bridge is unavailable.");
 	const imageSanitization = resolveImageSanitizationLimits(options?.config);
+	const readEditTracker = createReadEditTracker({ workspaceRoot: sandboxRoot ?? workspaceRoot });
 	const base = codingTools.flatMap((tool) => {
 		if (tool.name === readTool.name) {
 			if (sandboxRoot) {
-				const sandboxed = createSandboxedReadTool({
+				const tracked = wrapReadToolWithTracker(createSandboxedReadTool({
 					root: sandboxRoot,
 					bridge: sandboxFsBridge,
 					modelContextWindowTokens: options?.modelContextWindowTokens,
 					imageSanitization
-				});
-				return [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxed, sandboxRoot) : sandboxed];
+				}), readEditTracker);
+				return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, sandboxRoot) : tracked];
 			}
-			const wrapped = createSymiReadTool(createReadTool(workspaceRoot), {
+			const tracked = wrapReadToolWithTracker(createSymiReadTool(createReadTool(workspaceRoot), {
 				modelContextWindowTokens: options?.modelContextWindowTokens,
 				imageSanitization
-			});
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			}), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "bash" || tool.name === execToolName) return [];
 		if (tool.name === "write") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const tracked = wrapWriteToolWithTracker(wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "edit") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const guarded = wrapEditToolWithGuard(wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(guarded, workspaceRoot) : guarded];
 		}
 		return [tool];
 	});
@@ -65334,22 +65452,18 @@ function createSymiCodingTools(options) {
 		} : void 0,
 		workspaceOnly: applyPatchWorkspaceOnly
 	});
+	const sandboxedEditTool = sandboxRoot ? wrapEditToolWithGuard(createSandboxedEditTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
+	const sandboxedWriteTool = sandboxRoot ? wrapWriteToolWithTracker(createSandboxedWriteTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
 	const withHooks = applyToolPolicyPipeline({
 		tools: applyOwnerOnlyToolPolicy([
 			...base,
-			...sandboxRoot ? allowWorkspaceWrites ? [workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			})] : [] : [],
+			...sandboxRoot ? allowWorkspaceWrites && sandboxedEditTool && sandboxedWriteTool ? [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedEditTool, sandboxRoot) : sandboxedEditTool, workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedWriteTool, sandboxRoot) : sandboxedWriteTool] : [] : [],
 			...applyPatchTool ? [applyPatchTool] : [],
 			execTool,
 			processTool,

package/dist/{rpc-St4eAsjR.js → rpc-BKlQ97aZ.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-aT-I_DTX.js";
-import { a as randomIdempotencyKey, n as callGateway } from "./call-BkJK3eYP.js";
+import { a as randomIdempotencyKey, n as callGateway } from "./call-DYfKEdwh.js";
 import { n as withProgress } from "./progress-WhkkDU0H.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-D3rffA64.js";
 

package/dist/{rpc-C3ZUAjXK.js → rpc-DC4ol5Xa.js}

@@ -1,4 +1,4 @@
-import { a as randomIdempotencyKey, n as callGateway } from "./call-CAGvQYXj.js";
+import { a as randomIdempotencyKey, n as callGateway } from "./call-M4YyUnwu.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-C9dERklz.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-DZCCI6Uk.js";
 import { n as withProgress } from "./progress-HK2tT7Yf.js";

package/dist/{run-main-BzZuJeMa.js → run-main-xmWpjZL9.js}

@@ -10,11 +10,11 @@ import "./frontmatter-B8duUx_6.js";
 import "./skills-D_oCiaQn.js";
 import "./manifest-registry-D5bnO5uA.js";
 import { H as VERSION, W as loadDotEnv } from "./config-DXt3pc08.js";
-import "./client-Cmq13-uF.js";
-import "./call-CAGvQYXj.js";
+import "./client-CJIMV1WD.js";
+import "./call-M4YyUnwu.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-DlIPWOrx.js";
+import "./subagent-registry-D0IYimMO.js";
 import "./sessions-BPD85pWA.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -52,8 +52,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-J1x_DaPn.js";
 import "./reply-prefix-BUN71nd5.js";
-import "./memory-cli-D2QHGsxh.js";
-import "./manager-DDboJTtn.js";
+import "./memory-cli-OW9XfyYu.js";
+import "./manager-QPF0UtOC.js";
 import "./gemini-auth-DEakvf-D.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -94,7 +94,7 @@ import "./cli-utils-CI_KkT8q.js";
 import "./help-format-nY42tGMB.js";
 import "./progress-HK2tT7Yf.js";
 import "./replies-Sxbew659.js";
-import "./onboard-helpers-DjlGq6iG.js";
+import "./onboard-helpers-DWDNKmkJ.js";
 import "./prompt-style-BxVdnrLq.js";
 import "./pairing-labels-BHx_CdbP.js";
 import "./pi-tools.policy-o0ytjRqu.js";
@@ -102,9 +102,9 @@ import { t as ensureSymiCliOnPath } from "./path-env-CaiY2aOj.js";
 import "./catalog-KcLvtTfa.js";
 import "./note-DewoEWtc.js";
 import "./plugin-auto-enable-pQEg2Mly.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-R7nyNT_4.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-Bn9Mj8mP.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-BofkqBu7.js";
-import { t as emitCliBanner } from "./banner-DSRsscTp.js";
+import { t as emitCliBanner } from "./banner-Bf46tqiY.js";
 import "./doctor-config-flow-B2dVxbL7.js";
 import { n as ensureConfigReady } from "./config-guard-BvqCjFPk.js";
 import process$1 from "node:process";
@@ -119,7 +119,7 @@ const routeHealth = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { healthCommand } = await import("./health-BrpUi4qW.js").then((n) => n.i);
+		const { healthCommand } = await import("./health-CcV5nKIK.js").then((n) => n.i);
 		await healthCommand({
 			json,
 			timeoutMs,
@@ -139,7 +139,7 @@ const routeStatus = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { statusCommand } = await import("./status-L76LBY6B.js").then((n) => n.t);
+		const { statusCommand } = await import("./status-PfvX-BjO.js").then((n) => n.t);
 		await statusCommand({
 			json,
 			deep,
@@ -173,7 +173,7 @@ const routeAgentsList = {
 	run: async (argv) => {
 		const json = hasFlag(argv, "--json");
 		const bindings = hasFlag(argv, "--bindings");
-		const { agentsListCommand } = await import("./agents-D6V12K_e.js").then((n) => n.t);
+		const { agentsListCommand } = await import("./agents-CvNeiuSB.js").then((n) => n.t);
 		await agentsListCommand({
 			json,
 			bindings
@@ -190,7 +190,7 @@ const routeMemoryStatus = {
 		const deep = hasFlag(argv, "--deep");
 		const index = hasFlag(argv, "--index");
 		const verbose = hasFlag(argv, "--verbose");
-		const { runMemoryStatus } = await import("./memory-cli-D2QHGsxh.js").then((n) => n.t);
+		const { runMemoryStatus } = await import("./memory-cli-OW9XfyYu.js").then((n) => n.t);
 		await runMemoryStatus({
 			agent,
 			json,
@@ -244,7 +244,7 @@ const routes = [
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
 			const json = hasFlag(argv, "--json");
-			const { runConfigGet } = await import("./config-cli-zd2upqe_.js");
+			const { runConfigGet } = await import("./config-cli-Deoo6r2K.js");
 			await runConfigGet({
 				path: pathArg,
 				json
@@ -257,7 +257,7 @@ const routes = [
 		run: async (argv) => {
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
-			const { runConfigUnset } = await import("./config-cli-zd2upqe_.js");
+			const { runConfigUnset } = await import("./config-cli-Deoo6r2K.js");
 			await runConfigUnset({ path: pathArg });
 			return true;
 		}
@@ -271,7 +271,7 @@ const routes = [
 			const local = hasFlag(argv, "--local");
 			const json = hasFlag(argv, "--json");
 			const plain = hasFlag(argv, "--plain");
-			const { modelsListCommand } = await import("./models-Cn1cbmce.js").then((n) => n.t);
+			const { modelsListCommand } = await import("./models-Q1jV8ArL.js").then((n) => n.t);
 			await modelsListCommand({
 				all,
 				local,
@@ -302,7 +302,7 @@ const routes = [
 			const plain = hasFlag(argv, "--plain");
 			const check = hasFlag(argv, "--check");
 			const probe = hasFlag(argv, "--probe");
-			const { modelsStatusCommand } = await import("./models-Cn1cbmce.js").then((n) => n.t);
+			const { modelsStatusCommand } = await import("./models-Q1jV8ArL.js").then((n) => n.t);
 			await modelsStatusCommand({
 				json,
 				plain,
@@ -380,7 +380,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-2jsiC85C.js");
+	const { buildProgram } = await import("./program-D3_xE9BL.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -412,10 +412,10 @@ async function runCli(argv = process$1.argv) {
 		const { getProgramContext } = await import("./program-context-DeZ44oQ9.js").then((n) => n.n);
 		const ctx = getProgramContext(program);
 		if (ctx) {
-			const { registerCoreCliByName } = await import("./command-registry-BiznuVYK.js").then((n) => n.t);
+			const { registerCoreCliByName } = await import("./command-registry-BiRjJ2Sy.js").then((n) => n.t);
 			await registerCoreCliByName(program, ctx, primary, parseArgv);
 		}
-		const { registerSubCliByName } = await import("./register.subclis-8cGjLTmN.js").then((n) => n.a);
+		const { registerSubCliByName } = await import("./register.subclis-ByZAz4st.js").then((n) => n.a);
 		await registerSubCliByName(program, primary);
 	}
 	const hasBuiltinPrimary = primary !== null && program.commands.some((command) => command.name() === primary);
@@ -424,7 +424,7 @@ async function runCli(argv = process$1.argv) {
 		primary,
 		hasBuiltinPrimary
 	})) {
-		const { registerPluginCliCommands } = await import("./cli-RIwsXnB-.js");
+		const { registerPluginCliCommands } = await import("./cli-BX54CAM7.js");
 		const { loadConfig } = await import("./config-DXt3pc08.js").then((n) => n.t);
 		registerPluginCliCommands(program, loadConfig());
 	}

package/dist/{runner-D633VT13.js → runner-ecX1WzDt.js}

@@ -4,7 +4,7 @@ import { A as normalizeGoogleModelId, B as resolveApiKeyForProvider, C as normal
 import { d as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, f as isInboundPathAllowed, m as resolveIMessageAttachmentRoots, n as loadConfig, p as mergeInboundPathRoots } from "./config-BkZ9HOKT.js";
 import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-C7CauEK8.js";
 import { t as normalizeChatType } from "./chat-type-3FRbbjbq.js";
-import { S as ensureSymiModelsJson, t as describeImageWithModel } from "./image-C6rCON9L.js";
+import { S as ensureSymiModelsJson, t as describeImageWithModel } from "./image-BuVL0jHI.js";
 import { n as collectProviderApiKeysForExecution, r as executeWithApiKeyRotation, t as parseGeminiAuth } from "./gemini-auth-BefM10YB.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-CVCBkyv1.js";
 import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, o as fetchWithSsrFGuard, r as MediaFetchError } from "./local-roots-ClipCZ9s.js";

package/dist/{security-cli-BSvxNP9m.js → security-cli-BfiJ3e0Y.js}

@@ -40,8 +40,8 @@ import "./bindings-DFaVVCsf.js";
 import "./logging-w5jq5901.js";
 import "./paths-CyhzMxFA.js";
 import "./commands-vWB85AXk.js";
-import "./client-CYsBIR3j.js";
-import "./call-BkJK3eYP.js";
+import "./client-pd8kwOFJ.js";
+import "./call-DYfKEdwh.js";
 import "./pairing-token-pooyuU2J.js";
 import { i as readChannelAllowFromStore } from "./pairing-store-iAT1if6k.js";
 import { t as formatDocsLink } from "./links-DGINhC21.js";
@@ -50,7 +50,7 @@ import "./workspace-dirs-DHPWGRDp.js";
 import "./pi-tools.policy-Bx5zp45n.js";
 import "./dangerous-tools-m4gs9MB5.js";
 import "./skill-scanner-BTgjeQBf.js";
-import { i as collectIncludePathsRecursive, n as createIcaclsResetCommand, r as formatIcaclsResetCommand, t as runSecurityAudit } from "./audit-xiwEIT96.js";
+import { i as collectIncludePathsRecursive, n as createIcaclsResetCommand, r as formatIcaclsResetCommand, t as runSecurityAudit } from "./audit-C9nq99IR.js";
 import "./dm-policy-shared-KlzpDeT_.js";
 import path from "node:path";
 import fs from "node:fs/promises";