@symerian/symi 2.8.17 → 2.9.0

package/dist/plugin-sdk/{reply-BI7Rf3_S.js → reply-Cjjf4VYT.js}

@@ -53,7 +53,7 @@ import { S as minimaxUnderstandImage, _ as stripThinkingTagsFromText, a as decod
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-LbcEa65a.js";
 import { c as normalizeExtraMemoryPaths, m as runTasksWithConcurrency, s as listMemoryFiles } from "./internal-Qi-tyvHh.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-Wd5tNeQG.js";
-import { a as resolveMemorySearchConfig, i as resolveOllamaBaseUrl, r as probeOllamaEmbeddingModels, t as MemoryIndexManager } from "./manager-CvrDwB1Q.js";
+import { a as resolveMemorySearchConfig, i as resolveOllamaBaseUrl, r as probeOllamaEmbeddingModels, t as MemoryIndexManager } from "./manager-DdOb0Em2.js";
 import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-BuYpmEx-.js";
 import { c as signalRpcRequest, l as streamSignalEvents, n as sendReadReceiptSignal, o as resolveSignalRpcContext, r as sendTypingSignal, s as signalCheck, t as sendMessageSignal } from "./send-CGhw9mO3.js";
 import { t as makeProxyFetch } from "./proxy-D27OUbrW.js";
@@ -11638,7 +11638,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-CvrDwB1Q.js").then((n) => n.n);
+						const { MemoryIndexManager } = await import("./manager-DdOb0Em2.js").then((n) => n.n);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -11651,7 +11651,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-CvrDwB1Q.js").then((n) => n.n);
+		const { MemoryIndexManager } = await import("./manager-DdOb0Em2.js").then((n) => n.n);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -14964,16 +14964,16 @@ function shouldComputeCommandAuthorized(text, cfg, options) {
 
 //#endregion
 //#region src/channels/sender-label.ts
-function normalize(value) {
+function normalize$1(value) {
 	const trimmed = value?.trim();
 	return trimmed ? trimmed : void 0;
 }
 function resolveSenderLabel(params) {
-	const name = normalize(params.name);
-	const username = normalize(params.username);
-	const tag = normalize(params.tag);
-	const e164 = normalize(params.e164);
-	const id = normalize(params.id);
+	const name = normalize$1(params.name);
+	const username = normalize$1(params.username);
+	const tag = normalize$1(params.tag);
+	const e164 = normalize$1(params.e164);
+	const id = normalize$1(params.id);
 	const display = name ?? username ?? tag ?? "";
 	const idPart = e164 ?? id ?? "";
 	if (display && idPart && display !== idPart) return `${display} (${idPart})`;
@@ -36901,7 +36901,7 @@ async function runAgentTurn(params) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-D2WrY-DI.js");
+			const { sendMessageWhatsApp } = await import("./web-B8upqMUo.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -54339,7 +54339,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-D2WrY-DI.js");
+	webChannelPromise ??= import("./web-B8upqMUo.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -59821,6 +59821,91 @@ function isToolAllowedByPolicies(name, policies) {
 	return policies.every((policy) => isToolAllowedByPolicyName(name, policy));
 }
 
+//#endregion
+//#region src/agents/pi-tools.read-edit-guard.ts
+const RETRY_GUIDANCE_SUFFIX$1 = " Read the file first, then retry the edit.";
+function readGuardError(filePath) {
+	return /* @__PURE__ */ new Error(`Edit refused: '${filePath}' has not been read in this session. The edit tool requires the agent to read the file first so oldText can match real content rather than hallucinated content.${RETRY_GUIDANCE_SUFFIX$1}`);
+}
+function extractPath(args) {
+	if (!args || typeof args !== "object") return;
+	const record = args;
+	const candidate = record.path ?? record.file_path;
+	if (typeof candidate !== "string") return;
+	const trimmed = candidate.trim();
+	return trimmed.length > 0 ? trimmed : void 0;
+}
+function wrapReadToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordRead(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapWriteToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordWrite(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapEditToolWithGuard(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const filePath = extractPath(args);
+			if (filePath && !tracker.hasObserved(filePath)) throw readGuardError(filePath);
+			return tool.execute(toolCallId, args, signal, onUpdate);
+		}
+	};
+}
+
+//#endregion
+//#region src/agents/pi-tools.read-edit-tracker.ts
+function normalize(filePath, workspaceRoot) {
+	if (!workspaceRoot) return filePath;
+	if (path.isAbsolute(filePath)) return path.normalize(filePath);
+	return path.resolve(workspaceRoot, filePath);
+}
+function createReadEditTracker(opts = {}) {
+	const observed = /* @__PURE__ */ new Map();
+	const record = (filePath, kind) => {
+		if (typeof filePath !== "string" || !filePath.trim()) return;
+		const key = normalize(filePath.trim(), opts.workspaceRoot);
+		const prior = observed.get(key);
+		if (kind === "written" || prior !== "written") observed.set(key, kind);
+	};
+	return {
+		recordRead: (filePath) => record(filePath, "read"),
+		recordWrite: (filePath) => record(filePath, "written"),
+		observation: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return null;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.get(key) ?? null;
+		},
+		hasObserved: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return false;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.has(key);
+		},
+		reset: () => {
+			observed.clear();
+		}
+	};
+}
+
 //#endregion
 //#region src/media/sniff-mime-from-base64.ts
 async function sniffMimeFromBase64(base64) {
@@ -62832,8 +62917,39 @@ const GatewayToolSchema = Type.Object({
 	baseHash: Type.Optional(Type.String()),
 	sessionKey: Type.Optional(Type.String()),
 	note: Type.Optional(Type.String()),
-	restartDelayMs: Type.Optional(Type.Number())
+	restartDelayMs: Type.Optional(Type.Number()),
+	userRequestAcknowledgment: Type.Optional(Type.String())
 });
+/** Actions that mutate gateway state and require explicit user authorization. */
+const DESTRUCTIVE_ACTIONS = new Set([
+	"config.apply",
+	"config.patch",
+	"update.run"
+]);
+/** Minimum length for a meaningful authorization message. */
+const MIN_AUTHORIZATION_LENGTH = 10;
+/**
+* Asserts the user's request was explicitly acknowledged for destructive
+* actions. Throws a descriptive error if the acknowledgment is missing,
+* empty, or trivially short.
+*
+* NOTE: This is defense-in-depth, not a hard barrier. A determined model
+* could still populate the field with fabricated text. The barrier exists
+* to:
+*   1. Force the agent to deliberately compose a justification (vs. blind
+*      tool invocation).
+*   2. Provide an audit trail (the acknowledgment is logged with the tool
+*      call args).
+*   3. Surface for future tightening (e.g., matching against real session
+*      history).
+*/
+function assertUserAuthorization(action, params) {
+	if (!DESTRUCTIVE_ACTIONS.has(action)) return;
+	const ack = params.userRequestAcknowledgment;
+	const trimmed = typeof ack === "string" ? ack.trim() : "";
+	if (!trimmed) throw new Error(`Action '${action}' requires an explicit user authorization. Pass userRequestAcknowledgment with a paraphrase of the user's request (e.g., "user said: please update Symi"). If the user did not explicitly request this action, ask them first instead of invoking it.`);
+	if (trimmed.length < MIN_AUTHORIZATION_LENGTH) throw new Error(`Action '${action}' requires a substantive userRequestAcknowledgment (minimum ${MIN_AUTHORIZATION_LENGTH} characters describing the user's request). Received: ${JSON.stringify(trimmed)}.`);
+}
 function createGatewayTool(opts) {
 	return {
 		label: "Gateway",
@@ -62844,6 +62960,7 @@ function createGatewayTool(opts) {
 		execute: async (_toolCallId, args) => {
 			const params = args;
 			const action = readStringParam(params, "action", { required: true });
+			assertUserAuthorization(action, params);
 			if (action === "restart") {
 				if (!isRestartEnabled(opts?.config)) throw new Error("Gateway restart is disabled (commands.restart=false).");
 				const sessionKey = typeof params.sessionKey === "string" && params.sessionKey.trim() ? params.sessionKey.trim() : opts?.agentSessionKey?.trim() || void 0;
@@ -70587,33 +70704,34 @@ function createSymiCodingTools(options) {
 	});
 	if (sandboxRoot && !sandboxFsBridge) throw new Error("Sandbox filesystem bridge is unavailable.");
 	const imageSanitization = resolveImageSanitizationLimits(options?.config);
+	const readEditTracker = createReadEditTracker({ workspaceRoot: sandboxRoot ?? workspaceRoot });
 	const base = codingTools.flatMap((tool) => {
 		if (tool.name === readTool.name) {
 			if (sandboxRoot) {
-				const sandboxed = createSandboxedReadTool({
+				const tracked = wrapReadToolWithTracker(createSandboxedReadTool({
 					root: sandboxRoot,
 					bridge: sandboxFsBridge,
 					modelContextWindowTokens: options?.modelContextWindowTokens,
 					imageSanitization
-				});
-				return [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxed, sandboxRoot) : sandboxed];
+				}), readEditTracker);
+				return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, sandboxRoot) : tracked];
 			}
-			const wrapped = createSymiReadTool(createReadTool(workspaceRoot), {
+			const tracked = wrapReadToolWithTracker(createSymiReadTool(createReadTool(workspaceRoot), {
 				modelContextWindowTokens: options?.modelContextWindowTokens,
 				imageSanitization
-			});
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			}), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "bash" || tool.name === execToolName) return [];
 		if (tool.name === "write") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const tracked = wrapWriteToolWithTracker(wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "edit") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const guarded = wrapEditToolWithGuard(wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(guarded, workspaceRoot) : guarded];
 		}
 		return [tool];
 	});
@@ -70656,22 +70774,18 @@ function createSymiCodingTools(options) {
 		} : void 0,
 		workspaceOnly: applyPatchWorkspaceOnly
 	});
+	const sandboxedEditTool = sandboxRoot ? wrapEditToolWithGuard(createSandboxedEditTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
+	const sandboxedWriteTool = sandboxRoot ? wrapWriteToolWithTracker(createSandboxedWriteTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
 	const withHooks = applyToolPolicyPipeline({
 		tools: applyOwnerOnlyToolPolicy([
 			...base,
-			...sandboxRoot ? allowWorkspaceWrites ? [workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			})] : [] : [],
+			...sandboxRoot ? allowWorkspaceWrites && sandboxedEditTool && sandboxedWriteTool ? [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedEditTool, sandboxRoot) : sandboxedEditTool, workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedWriteTool, sandboxRoot) : sandboxedWriteTool] : [] : [],
 			...applyPatchTool ? [applyPatchTool] : [],
 			execTool,
 			processTool,

package/dist/plugin-sdk/{synthesis-B3z0Jqt1.js → synthesis-CZ8BYNXP.js}

@@ -1,5 +1,5 @@
 import "./accounts-D9zGZU5t.js";
-import { u as runAgentTurn } from "./reply-BI7Rf3_S.js";
+import { u as runAgentTurn } from "./reply-Cjjf4VYT.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import "./plugins-BbAvhC25.js";
@@ -49,7 +49,7 @@ import "./image-DFyINnvE.js";
 import "./pi-model-discovery-LbcEa65a.js";
 import "./api-key-rotation-CBsLb_4V.js";
 import "./diagnostic-session-state-Wd5tNeQG.js";
-import "./manager-CvrDwB1Q.js";
+import "./manager-DdOb0Em2.js";
 import "./sqlite-CmVrFEYD.js";
 import "./commands-registry-BuYpmEx-.js";
 import "./send-CGhw9mO3.js";

package/dist/plugin-sdk/{web-D2WrY-DI.js → web-B8upqMUo.js}

@@ -1,5 +1,5 @@
 import { a as WA_WEB_AUTH_DIR, g as webAuthExists, s as logWebSelfId, u as pickWebChannel } from "./accounts-D9zGZU5t.js";
-import "./reply-BI7Rf3_S.js";
+import "./reply-Cjjf4VYT.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import "./plugins-BbAvhC25.js";
@@ -45,12 +45,12 @@ import "./pi-embedded-helpers-BL7ZRhGv.js";
 import "./paths-A0xdf3yk.js";
 import "./diagnostic-_oc91gNi.js";
 import "./store-Do3t33-c.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-C7aP_KKZ.js";
+import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-BhqGIC7q.js";
 import "./image-DFyINnvE.js";
 import "./pi-model-discovery-LbcEa65a.js";
 import "./api-key-rotation-CBsLb_4V.js";
 import "./diagnostic-session-state-Wd5tNeQG.js";
-import "./manager-CvrDwB1Q.js";
+import "./manager-DdOb0Em2.js";
 import "./sqlite-CmVrFEYD.js";
 import "./commands-registry-BuYpmEx-.js";
 import "./send-CGhw9mO3.js";

package/dist/{plugins-cli-ByG6o7D2.js → plugins-cli-3h1N5N8n.js}

@@ -14,7 +14,7 @@ import "./client-CJIMV1WD.js";
 import "./call-M4YyUnwu.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CncIZPCd.js";
+import "./subagent-registry-D0IYimMO.js";
 import "./sessions-BPD85pWA.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -52,8 +52,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-J1x_DaPn.js";
 import "./reply-prefix-BUN71nd5.js";
-import "./memory-cli-lJe72a5i.js";
-import "./manager-CgQo1mIM.js";
+import "./memory-cli-OW9XfyYu.js";
+import "./manager-QPF0UtOC.js";
 import "./gemini-auth-DEakvf-D.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -103,7 +103,7 @@ import "./npm-registry-spec-PuS2I1Em.js";
 import "./skill-scanner-BV3QHmsf.js";
 import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-B4sNNRaW.js";
 import { t as renderTable } from "./table-Bka4fasy.js";
-import { t as buildPluginStatusReport } from "./status-DcxWlds6.js";
+import { t as buildPluginStatusReport } from "./status-CpvzoCOC.js";
 import { n as updateNpmInstalledPlugins } from "./update-DticqU4-.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{plugins-cli-D1vPxTOQ.js → plugins-cli-CYOQh2DM.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { B as theme, S as shortenHomePath, g as resolveConfigDir, x as shortenHomeInString, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-2awhibgG.js";
+import "./reply-CgyjcoxC.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -60,8 +60,8 @@ import "./diagnostic-session-state-CUslJyKP.js";
 import "./send-DpMnSIi5.js";
 import "./model-ECsJuJew.js";
 import "./reply-prefix-CE2YmmsD.js";
-import "./memory-cli-BMb31chU.js";
-import "./manager-DhGfNqfc.js";
+import "./memory-cli-BTByRgM0.js";
+import "./manager-9Mni2AA9.js";
 import "./retry-BoS4e4X_.js";
 import "./sqlite-D55gRQbH.js";
 import "./target-errors-C9e6dMU_.js";
@@ -107,7 +107,7 @@ import "./npm-registry-spec-B98RgVZF.js";
 import "./skill-scanner-BTgjeQBf.js";
 import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-BPZKRjsO.js";
 import { t as renderTable } from "./table-BWuvjnmY.js";
-import { t as buildPluginStatusReport } from "./status-CwqBkxi2.js";
+import { t as buildPluginStatusReport } from "./status-BjMiGq0n.js";
 import { n as updateNpmInstalledPlugins } from "./update-D4uLu0dv.js";
 import fs from "node:fs";
 import os from "node:os";

package/dist/{program-Q44fKoq6.js → program-D3_xE9BL.js}

@@ -15,7 +15,7 @@ import "./client-CJIMV1WD.js";
 import "./call-M4YyUnwu.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-CncIZPCd.js";
+import "./subagent-registry-D0IYimMO.js";
 import "./sessions-BPD85pWA.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -53,8 +53,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-J1x_DaPn.js";
 import "./reply-prefix-BUN71nd5.js";
-import "./memory-cli-lJe72a5i.js";
-import "./manager-CgQo1mIM.js";
+import "./memory-cli-OW9XfyYu.js";
+import "./manager-QPF0UtOC.js";
 import "./gemini-auth-DEakvf-D.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -100,13 +100,13 @@ import "./prompt-style-BxVdnrLq.js";
 import "./pairing-labels-BHx_CdbP.js";
 import "./pi-tools.policy-o0ytjRqu.js";
 import "./catalog-KcLvtTfa.js";
-import "./plugin-registry-DEhkDNDx.js";
-import { n as resolveCliChannelOptions } from "./channel-options-C0v4BJgp.js";
-import { t as getSubCliCommandsWithSubcommands } from "./register.subclis-17z5d7uO.js";
-import { a as registerProgramCommands, r as getCoreCliCommandsWithSubcommands } from "./command-registry-uMOPbrbY.js";
+import "./plugin-registry-Bn9Mj8mP.js";
+import { n as resolveCliChannelOptions } from "./channel-options-Bqc2VCgt.js";
+import { t as getSubCliCommandsWithSubcommands } from "./register.subclis-ByZAz4st.js";
+import { a as registerProgramCommands, r as getCoreCliCommandsWithSubcommands } from "./command-registry-BiRjJ2Sy.js";
 import { r as setProgramContext } from "./program-context-DeZ44oQ9.js";
 import { t as forceFreePort } from "./ports-DQg7kV5s.js";
-import { n as formatCliBannerLine, r as hasEmittedCliBanner, t as emitCliBanner } from "./banner-S1NGA6-s.js";
+import { n as formatCliBannerLine, r as hasEmittedCliBanner, t as emitCliBanner } from "./banner-Bf46tqiY.js";
 import { Command } from "commander";
 
 //#region src/cli/program/context.ts
@@ -214,7 +214,7 @@ function registerPreActionHooks(program, programVersion) {
 			commandPath
 		});
 		if (PLUGIN_REQUIRED_COMMANDS.has(commandPath[0])) {
-			const { ensurePluginRegistryLoaded } = await import("./plugin-registry-DEhkDNDx.js").then((n) => n.n);
+			const { ensurePluginRegistryLoaded } = await import("./plugin-registry-Bn9Mj8mP.js").then((n) => n.n);
 			ensurePluginRegistryLoaded();
 		}
 	});

package/dist/{program-context-C3QEc34t.js → program-context-COwsYCbf.js}

@@ -43,7 +43,7 @@ const entries = [
 		description: "Run, inspect, and query the WebSocket Gateway",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./gateway-cli-7CVmb3cX.js")).registerGatewayCli(program);
+			(await import("./gateway-cli-DsnkTUOp.js")).registerGatewayCli(program);
 		}
 	},
 	{
@@ -75,7 +75,7 @@ const entries = [
 		description: "Discover, scan, and configure models",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./models-cli-C6JJWWoI.js")).registerModelsCli(program);
+			(await import("./models-cli-pfVmmgpv.js")).registerModelsCli(program);
 		}
 	},
 	{
@@ -155,7 +155,7 @@ const entries = [
 		description: "Manage internal agent hooks",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./hooks-cli-uGLWBIcW.js")).registerHooksCli(program);
+			(await import("./hooks-cli-DEJe3dUH.js")).registerHooksCli(program);
 		}
 	},
 	{
@@ -179,7 +179,7 @@ const entries = [
 		description: "Secure DM pairing (approve inbound requests)",
 		hasSubcommands: true,
 		register: async (program) => {
-			const { registerPluginCliCommands } = await import("./cli-Bx4RQCuK.js");
+			const { registerPluginCliCommands } = await import("./cli-BpQlSGVs.js");
 			registerPluginCliCommands(program, await loadConfig());
 			(await import("./pairing-cli-Cl4t3cDV.js")).registerPairingCli(program);
 		}
@@ -189,8 +189,8 @@ const entries = [
 		description: "Manage Symi plugins and extensions",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./plugins-cli-D1vPxTOQ.js")).registerPluginsCli(program);
-			const { registerPluginCliCommands } = await import("./cli-Bx4RQCuK.js");
+			(await import("./plugins-cli-CYOQh2DM.js")).registerPluginsCli(program);
+			const { registerPluginCliCommands } = await import("./cli-BpQlSGVs.js");
 			registerPluginCliCommands(program, await loadConfig());
 		}
 	},
@@ -199,7 +199,7 @@ const entries = [
 		description: "Manage connected chat channels (Telegram, Discord, etc.)",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./channels-cli-BhNHckMo.js")).registerChannelsCli(program);
+			(await import("./channels-cli-BFJcNLbB.js")).registerChannelsCli(program);
 		}
 	},
 	{
@@ -231,7 +231,7 @@ const entries = [
 		description: "Update Symi and inspect update channel status",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./update-cli-CplnPSZ5.js")).registerUpdateCli(program);
+			(await import("./update-cli-D3K4mhrr.js")).registerUpdateCli(program);
 		}
 	},
 	{
@@ -239,7 +239,7 @@ const entries = [
 		description: "Generate shell completion script",
 		hasSubcommands: false,
 		register: async (program) => {
-			(await import("./completion-cli-DVD79pVj.js").then((n) => n.n)).registerCompletionCli(program);
+			(await import("./completion-cli-C8K5J1ld.js").then((n) => n.n)).registerCompletionCli(program);
 		}
 	}
 ];
@@ -302,7 +302,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.setup-DzUZ2x6y.js")).registerSetupCommand(program);
+			(await import("./register.setup-W-oNfOp0.js")).registerSetupCommand(program);
 		}
 	},
 	{
@@ -312,7 +312,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.onboard-YCmMzAW-.js")).registerOnboardCommand(program);
+			(await import("./register.onboard-KR_-4TLY.js")).registerOnboardCommand(program);
 		}
 	},
 	{
@@ -322,7 +322,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.configure-FCTbPCwe.js")).registerConfigureCommand(program);
+			(await import("./register.configure-BWkkQhpH.js")).registerConfigureCommand(program);
 		}
 	},
 	{
@@ -332,7 +332,7 @@ const coreEntries = [
 			hasSubcommands: true
 		}],
 		register: async ({ program }) => {
-			(await import("./config-cli-DzudcNAD.js")).registerConfigCli(program);
+			(await import("./config-cli-BPPD3xqE.js")).registerConfigCli(program);
 		}
 	},
 	{
@@ -359,7 +359,7 @@ const coreEntries = [
 			}
 		],
 		register: async ({ program }) => {
-			(await import("./register.maintenance-DvDwpW6B.js")).registerMaintenanceCommands(program);
+			(await import("./register.maintenance-DJptz3DR.js")).registerMaintenanceCommands(program);
 		}
 	},
 	{
@@ -369,7 +369,7 @@ const coreEntries = [
 			hasSubcommands: true
 		}],
 		register: async ({ program, ctx }) => {
-			(await import("./register.message-mTqwOntI.js")).registerMessageCommands(program, ctx);
+			(await import("./register.message-BDTsiyrW.js")).registerMessageCommands(program, ctx);
 		}
 	},
 	{
@@ -379,7 +379,7 @@ const coreEntries = [
 			hasSubcommands: true
 		}],
 		register: async ({ program }) => {
-			(await import("./memory-cli-BMb31chU.js").then((n) => n.t)).registerMemoryCli(program);
+			(await import("./memory-cli-BTByRgM0.js").then((n) => n.t)).registerMemoryCli(program);
 		}
 	},
 	{
@@ -393,7 +393,7 @@ const coreEntries = [
 			hasSubcommands: true
 		}],
 		register: async ({ program, ctx }) => {
-			(await import("./register.agent-DGDnsvVd.js")).registerAgentCommands(program, { agentChannelOptions: ctx.agentChannelOptions });
+			(await import("./register.agent-BjaqQA02.js")).registerAgentCommands(program, { agentChannelOptions: ctx.agentChannelOptions });
 		}
 	},
 	{
@@ -415,7 +415,7 @@ const coreEntries = [
 			}
 		],
 		register: async ({ program }) => {
-			(await import("./register.status-health-sessions-DsptpS7K.js")).registerStatusHealthSessionsCommands(program);
+			(await import("./register.status-health-sessions-CT_SmmOH.js")).registerStatusHealthSessionsCommands(program);
 		}
 	},
 	{

package/dist/{prompt-select-styled-DBVeLysq.js → prompt-select-styled-D88AWCeM.js}

@@ -8,15 +8,15 @@ import { t as buildWorkspaceSkillStatus } from "./skills-status-DODCG6UU.js";
 import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-DXt3pc08.js";
 import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-M4YyUnwu.js";
 import { l as resolveGatewayBindHost, n as isLoopbackHost } from "./net-DZ5Ayk-W.js";
-import { bn as formatRemainingShort, m as loadSymiPlugins, vn as DEFAULT_OAUTH_WARN_MS, yn as buildAuthHealthSummary } from "./subagent-registry-CncIZPCd.js";
+import { bn as formatRemainingShort, m as loadSymiPlugins, vn as DEFAULT_OAUTH_WARN_MS, yn as buildAuthHealthSummary } from "./subagent-registry-D0IYimMO.js";
 import { F as resolveMainSessionKey, H as cleanStaleLockFiles, o as loadSessionStore } from "./sessions-BPD85pWA.js";
 import { n as listChannelPlugins } from "./plugins-CwSlLxM8.js";
 import { D as DEFAULT_SANDBOX_COMMON_IMAGE, E as DEFAULT_SANDBOX_BROWSER_IMAGE, O as DEFAULT_SANDBOX_IMAGE, p as resolveSandboxScope } from "./sandbox-WWVXeHlA.js";
 import { a as resolveGatewayAuth } from "./auth-BfDMhFAj.js";
 import { i as formatPortDiagnostics, n as inspectPortUsage } from "./ports-2xFXbwLq.js";
 import { c as resolveStorePath, n as resolveSessionFilePath, s as resolveSessionTranscriptsDirForAgent } from "./paths-DNdWAq7b.js";
-import { i as resolveMemoryBackendConfig } from "./memory-cli-lJe72a5i.js";
-import { a as resolveMemorySearchConfig } from "./manager-CgQo1mIM.js";
+import { i as resolveMemoryBackendConfig } from "./memory-cli-OW9XfyYu.js";
+import { a as resolveMemorySearchConfig } from "./manager-QPF0UtOC.js";
 import { n as loadModelCatalog } from "./model-catalog-BuYrTTBn.js";
 import { c as resolveGatewayLaunchAgentLabel, d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, m as resolveNodeLaunchAgentLabel } from "./constants-l9TQg-aP.js";
 import { h as randomToken, n as applyWizardMetadata, p as printWizardHeader, s as guardCancel } from "./onboard-helpers-DWDNKmkJ.js";
@@ -31,16 +31,16 @@ import { a as launchAgentPlistExists, i as isLaunchAgentLoaded, o as repairLaunc
 import { i as auditGatewayServiceConfig, n as renderSystemdUnavailableHints, o as needsNodeRuntimeMigration, r as SERVICE_AUDIT_CODES, s as formatRuntimeStatus, t as isSystemdUnavailableDetail } from "./systemd-hints-Ct8ebNeC.js";
 import { t as readLastGatewayErrorLine } from "./diagnostics-C6xPE2ln.js";
 import { n as renderGatewayServiceCleanupHints, t as findExtraGatewayServices } from "./inspect-ClE25QpT.js";
-import { r as healthCommand } from "./health-C4tWTDu_.js";
+import { r as healthCommand } from "./health-CcV5nKIK.js";
 import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-Clf7H-Sm.js";
 import { t as resolveDmAllowState } from "./dm-policy-shared-JiSNSaKz.js";
-import { t as runGatewayUpdate } from "./update-runner-Df4mjndq.js";
+import { t as runGatewayUpdate } from "./update-runner-Bmq67eos.js";
 import { t as resolveAgentSessionDirs } from "./session-dirs-Dgz7kkUM.js";
 import { n as logConfigUpdated } from "./logging-PVQxLC6I.js";
 import { n as detectLegacyStateMigrations, r as runLegacyStateMigrations, t as loadAndMaybeMigrateDoctorConfig } from "./doctor-config-flow-B2dVxbL7.js";
 import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-ipoPa7o0.js";
 import { t as formatHealthCheckFailure } from "./health-format-DkjSgkDx.js";
-import { n as doctorShellCompletion } from "./doctor-completion-Bf6dN4D-.js";
+import { n as doctorShellCompletion } from "./doctor-completion-woDYSVtY.js";
 import { execFile } from "node:child_process";
 import os from "node:os";
 import path from "node:path";