@symerian/symi 2.8.17 → 2.9.0

package/dist/{server-methods-D_g3GJhv.js → server-methods-DDpCXuOU.js}

@@ -12,7 +12,7 @@ import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, i as isGatewayMessa
 import { c as writeJsonAtomic, o as createAsyncLock, s as readJsonFile } from "./pairing-token-Byh6drgn.js";
 import { s as pickPrimaryLanIPv4 } from "./net-DZ5Ayk-W.js";
 import { i as normalizeInputProvenance } from "./input-provenance-D0lNkCf6.js";
-import { $n as resolveTtsApiKey, B as dispatchInboundMessage, C as resolveAgentDeliveryPlan, Cn as parseVerboseOverride, D as createOutboundSendDeps, Dt as normalizeCronJobCreate, G as BARE_SESSION_RESET_PROMPT, Gn as isAbortTrigger, Gt as applyBrowserProxyPaths, Hn as formatZonedTimestamp, Kn as stopSubagentsForRequester, Kt as persistBrowserProxyFiles, Ln as resolveAgentTimeoutMs, Ot as normalizeCronJobPatch, Qn as isTtsProviderConfigured, Qt as scheduleGatewaySigusr1Restart, Sn as applyVerboseOverride, Tn as isSystemEventContextChanged, Tr as registerAgentRunContext, Tt as writeRestartSentinel, V as createReplyDispatcher, Xn as getTtsProvider, Y as abortEmbeddedPiRun, Yn as resolveUserTimezone, Z as waitForEmbeddedPiRunEnd, Zn as isTtsEnabled, a as listSubagentRunsForRequester, ar as setTtsProvider, bt as formatDoctorNonInteractiveHint, c as clearSessionQueues, cr as OPENAI_TTS_VOICES, ct as ensureOutboundSessionEntry, er as resolveTtsAutoMode, ft as resolveOutboundTarget, gn as resolveSendPolicy, hn as normalizeSendPolicy, i as listDescendantRunsForRequester, in as loadProviderUsageSummary, ir as setTtsEnabled, it as listTasksInWorkdir, lt as resolveOutboundSessionRoute, m as loadSymiPlugins, nn as normalizeGroupActivation, nr as resolveTtsPrefsPath, or as textToSpeech, rr as resolveTtsProviderOrder, sr as OPENAI_TTS_MODELS, tn as unbindThreadBindingsBySessionKey, tr as resolveTtsConfig, w as resolveAgentOutboundTarget, wn as enqueueSystemEvent, wr as onAgentEvent, x as agentCommand, xn as applyModelOverrideToSessionEntry } from "./subagent-registry-CncIZPCd.js";
+import { $n as resolveTtsApiKey, B as dispatchInboundMessage, C as resolveAgentDeliveryPlan, Cn as parseVerboseOverride, D as createOutboundSendDeps, Dt as normalizeCronJobCreate, G as BARE_SESSION_RESET_PROMPT, Gn as isAbortTrigger, Gt as applyBrowserProxyPaths, Hn as formatZonedTimestamp, Kn as stopSubagentsForRequester, Kt as persistBrowserProxyFiles, Ln as resolveAgentTimeoutMs, Ot as normalizeCronJobPatch, Qn as isTtsProviderConfigured, Qt as scheduleGatewaySigusr1Restart, Sn as applyVerboseOverride, Tn as isSystemEventContextChanged, Tr as registerAgentRunContext, Tt as writeRestartSentinel, V as createReplyDispatcher, Xn as getTtsProvider, Y as abortEmbeddedPiRun, Yn as resolveUserTimezone, Z as waitForEmbeddedPiRunEnd, Zn as isTtsEnabled, a as listSubagentRunsForRequester, ar as setTtsProvider, bt as formatDoctorNonInteractiveHint, c as clearSessionQueues, cr as OPENAI_TTS_VOICES, ct as ensureOutboundSessionEntry, er as resolveTtsAutoMode, ft as resolveOutboundTarget, gn as resolveSendPolicy, hn as normalizeSendPolicy, i as listDescendantRunsForRequester, in as loadProviderUsageSummary, ir as setTtsEnabled, it as listTasksInWorkdir, lt as resolveOutboundSessionRoute, m as loadSymiPlugins, nn as normalizeGroupActivation, nr as resolveTtsPrefsPath, or as textToSpeech, rr as resolveTtsProviderOrder, sr as OPENAI_TTS_MODELS, tn as unbindThreadBindingsBySessionKey, tr as resolveTtsConfig, w as resolveAgentOutboundTarget, wn as enqueueSystemEvent, wr as onAgentEvent, x as agentCommand, xn as applyModelOverrideToSessionEntry } from "./subagent-registry-D0IYimMO.js";
 import { F as resolveMainSessionKey, I as resolveMainSessionKeyFromConfig, J as normalizeSessionDeliveryFields, N as resolveAgentMainSessionKey, P as resolveExplicitAgentSessionKey, R as snapshotSessionOrigin, S as stripEnvelopeFromMessages, _ as capArrayByJsonBytes, d as updateSessionStore, g as archiveSessionTranscripts, h as archiveFileOnDisk, o as loadSessionStore, t as extractDeliveryInfo, v as readSessionMessages, x as resolveSessionTranscriptCandidates, y as readSessionPreviewItemsFromTranscript } from "./sessions-BPD85pWA.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
 import { n as createBrowserRouteDispatcher } from "./with-timeout-BuIx7QnX.js";
@@ -21,7 +21,7 @@ import { t as movePathToTrash } from "./trash-CWQQXWX3.js";
 import { c as resolveStorePath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-DNdWAq7b.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-8sKPnzpp.js";
 import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-BUN71nd5.js";
-import { r as getMemorySearchManager } from "./memory-cli-lJe72a5i.js";
+import { r as getMemorySearchManager } from "./memory-cli-OW9XfyYu.js";
 import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, i as listSessionsFromStore, l as resolveSessionModelRef, o as loadSessionEntry, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent } from "./session-utils-DaBIs243.js";
 import { _ as requestNodePairing, g as renamePairedNode, h as rejectNodePairing, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, y as verifyNodeToken } from "./skill-commands-DrX4xCNq.js";
 import { t as listAgentWorkspaceDirs } from "./workspace-dirs-DVn-uDvF.js";
@@ -38,14 +38,14 @@ import { t as WizardCancelledError } from "./prompts-DbHSz44H.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-gWnZ9zWR.js";
 import { t as buildChannelAccountSnapshot } from "./status-B8TZsG0t.js";
 import { o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-CuKP86d_.js";
-import { r as getStatusSummary } from "./status-Ca_VZkZV.js";
-import { c as setHeartbeatsEnabled } from "./health-C4tWTDu_.js";
+import { r as getStatusSummary } from "./status-PfvX-BjO.js";
+import { c as setHeartbeatsEnabled } from "./health-CcV5nKIK.js";
 import { m as normalizeUpdateChannel } from "./update-check-BNjupSIM.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-Cj10sUbK.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Cu9zTq04.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration } from "./push-apns-d9qKGKPe.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BCgY5FjE.js";
 import { t as resolveSystemRunCommand } from "./system-run-command-B_qw8CXP.js";
 import { t as installSkill } from "./skills-install-BnEN_qla.js";
-import { t as runGatewayUpdate } from "./update-runner-Df4mjndq.js";
+import { t as runGatewayUpdate } from "./update-runner-Bmq67eos.js";
 import { spawnSync } from "node:child_process";
 import * as os$1 from "node:os";
 import os from "node:os";
@@ -7507,7 +7507,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-BZN3RZ8H.js");
+			const { handleNodeEvent } = await import("./server-node-events-BBEMSKVE.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,

package/dist/{server-node-events-BZN3RZ8H.js → server-node-events-BBEMSKVE.js}

@@ -15,7 +15,7 @@ import "./client-CJIMV1WD.js";
 import "./call-M4YyUnwu.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { T as createOutboundSendDeps, fn as requestHeartbeatNow, ft as resolveOutboundTarget, wn as enqueueSystemEvent, x as agentCommand } from "./subagent-registry-CncIZPCd.js";
+import { T as createOutboundSendDeps, fn as requestHeartbeatNow, ft as resolveOutboundTarget, wn as enqueueSystemEvent, x as agentCommand } from "./subagent-registry-D0IYimMO.js";
 import { d as updateSessionStore } from "./sessions-BPD85pWA.js";
 import "./tokens-Csntmwwn.js";
 import { r as normalizeChannelId } from "./plugins-CwSlLxM8.js";
@@ -53,8 +53,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-J1x_DaPn.js";
 import "./reply-prefix-BUN71nd5.js";
-import "./memory-cli-lJe72a5i.js";
-import "./manager-CgQo1mIM.js";
+import "./memory-cli-OW9XfyYu.js";
+import "./manager-QPF0UtOC.js";
 import "./gemini-auth-DEakvf-D.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -99,7 +99,7 @@ import "./onboard-helpers-DWDNKmkJ.js";
 import "./prompt-style-BxVdnrLq.js";
 import "./pairing-labels-BHx_CdbP.js";
 import "./pi-tools.policy-o0ytjRqu.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-Cj10sUbK.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-d9qKGKPe.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{server-node-events-Cvgmf8fS.js → server-node-events-BUEZ3py9.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { Dt as agentCommand, Ft as createOutboundSendDeps, Nt as resolveOutboundTarget, Sr as enqueueSystemEvent, b as pruneLegacyStoreKeys, ct as requestHeartbeatNow, x as resolveGatewaySessionStoreTarget, y as loadSessionEntry } from "./reply-2awhibgG.js";
+import { Dt as agentCommand, Ft as createOutboundSendDeps, Nt as resolveOutboundTarget, Sr as enqueueSystemEvent, b as pruneLegacyStoreKeys, ct as requestHeartbeatNow, x as resolveGatewaySessionStoreTarget, y as loadSessionEntry } from "./reply-CgyjcoxC.js";
 import { c as normalizeMainKey } from "./session-key-DCt45XZa.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -61,8 +61,8 @@ import "./diagnostic-session-state-CUslJyKP.js";
 import "./send-DpMnSIi5.js";
 import "./model-ECsJuJew.js";
 import "./reply-prefix-CE2YmmsD.js";
-import "./memory-cli-BMb31chU.js";
-import "./manager-DhGfNqfc.js";
+import "./memory-cli-BTByRgM0.js";
+import "./manager-9Mni2AA9.js";
 import "./retry-BoS4e4X_.js";
 import "./sqlite-D55gRQbH.js";
 import "./target-errors-C9e6dMU_.js";
@@ -103,7 +103,7 @@ import "./pi-tools.policy-Bx5zp45n.js";
 import "./control-service-C0pRqIFv.js";
 import "./stagger-CZ1Rrj7O.js";
 import "./channel-selection-9fIQGtZy.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-CRD9IH1s.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-BNzgqUl3.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{status-CwqBkxi2.js → status-BjMiGq0n.js}

@@ -1,4 +1,4 @@
-import { ft as createPluginLoaderLogger, pt as loadSymiPlugins } from "./reply-2awhibgG.js";
+import { ft as createPluginLoaderLogger, pt as loadSymiPlugins } from "./reply-CgyjcoxC.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import { D as resolveDefaultAgentWorkspaceDir, c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-CgUHAtCo.js";
 import { i as loadConfig } from "./config-PXAJCHa5.js";

package/dist/{status-Dkr4Celv.js → status-CG5iHUJ6.js}

@@ -1,6 +1,6 @@
 import { u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, k as info, z as isRich } from "./utils-B-0b9bGM.js";
-import { B as readRestartSentinel, S as resolveSessionModelRef, Tr as peekSystemEvents, V as summarizeRestartSentinel, Yt as sha256HexPrefix, _t as loadProviderUsageSummary, a as buildChannelSummary, g as listAgentsForGateway, h as classifySessionKey, mr as lookupContextTokens, o as buildChannelAccountSnapshot, s as formatChannelAllowFrom, vt as formatUsageReportLines } from "./reply-2awhibgG.js";
+import { B as readRestartSentinel, S as resolveSessionModelRef, Tr as peekSystemEvents, V as summarizeRestartSentinel, Yt as sha256HexPrefix, _t as loadProviderUsageSummary, a as buildChannelSummary, g as listAgentsForGateway, h as classifySessionKey, mr as lookupContextTokens, o as buildChannelAccountSnapshot, s as formatChannelAllowFrom, vt as formatUsageReportLines } from "./reply-CgyjcoxC.js";
 import { S as parseAgentSessionKey } from "./session-key-DCt45XZa.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { n as runExec } from "./exec-CWkblSrI.js";
@@ -13,7 +13,7 @@ import { a as inspectPortUsage, s as formatPortDiagnostics } from "./ports-BOmtx
 import { H as resolveMainSessionKey, R as resolveFreshSessionTotalTokens, o as loadSessionStore } from "./sessions-BeYHj0gr.js";
 import { n as listChannelPlugins } from "./plugins-DKDeQZF0.js";
 import { c as resolveStorePath } from "./paths-CyhzMxFA.js";
-import { r as getMemorySearchManager } from "./memory-cli-BMb31chU.js";
+import { r as getMemorySearchManager } from "./memory-cli-BTByRgM0.js";
 import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-DYfKEdwh.js";
 import { n as formatTimeAgo } from "./format-relative-CviDPm2s.js";
 import { n as withProgress } from "./progress-WhkkDU0H.js";
@@ -28,7 +28,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-D0P5lDGf.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-1uBuB9IE.js";
 import { t as renderTable } from "./table-BWuvjnmY.js";
 import { a as resolveGatewayProbeAuth$1, c as probeGateway, t as runSecurityAudit } from "./audit-C9nq99IR.js";
-import { a as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-dA8r4WJ4.js";
+import { a as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-Dl2WRoTa.js";
 import { g as resolveUpdateChannelDisplay, i as formatGitInstallLabel, m as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-Bbvpax6u.js";
 import { t as resolveNodeService } from "./node-service-DxPZ_ZFk.js";
 import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-DNqZrSx7.js";

package/dist/{status-DcxWlds6.js → status-CpvzoCOC.js}

@@ -1,7 +1,7 @@
 import { o as createSubsystemLogger } from "./entry.js";
 import { D as resolveDefaultAgentWorkspaceDir, c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-D-jRCY0d.js";
 import { i as loadConfig } from "./config-DXt3pc08.js";
-import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-CncIZPCd.js";
+import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-D0IYimMO.js";
 
 //#region src/plugins/status.ts
 const log = createSubsystemLogger("plugins");

package/dist/{status-Ca_VZkZV.js → status-PfvX-BjO.js}

@@ -9,13 +9,13 @@ import { c as resolveAgentWorkspaceDir } from "./agent-scope-D-jRCY0d.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-DODCG6UU.js";
 import { H as VERSION, i as loadConfig, o as readConfigFileSnapshot } from "./config-DXt3pc08.js";
 import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-M4YyUnwu.js";
-import { Ct as summarizeRestartSentinel, Dn as peekSystemEvents, St as readRestartSentinel, an as formatUsageReportLines, cn as buildChannelSummary, in as loadProviderUsageSummary, ln as buildChannelAccountSnapshot, nt as sha256HexPrefix, un as formatChannelAllowFrom } from "./subagent-registry-CncIZPCd.js";
+import { Ct as summarizeRestartSentinel, Dn as peekSystemEvents, St as readRestartSentinel, an as formatUsageReportLines, cn as buildChannelSummary, in as loadProviderUsageSummary, ln as buildChannelAccountSnapshot, nt as sha256HexPrefix, un as formatChannelAllowFrom } from "./subagent-registry-D0IYimMO.js";
 import { F as resolveMainSessionKey, j as resolveFreshSessionTotalTokens, o as loadSessionStore } from "./sessions-BPD85pWA.js";
 import { n as listChannelPlugins } from "./plugins-CwSlLxM8.js";
 import { o as getTailnetHostname, s as readTailscaleStatusJson } from "./tailscale-CbbvYNVw.js";
 import { i as formatPortDiagnostics, n as inspectPortUsage } from "./ports-2xFXbwLq.js";
 import { c as resolveStorePath } from "./paths-DNdWAq7b.js";
-import { r as getMemorySearchManager } from "./memory-cli-lJe72a5i.js";
+import { r as getMemorySearchManager } from "./memory-cli-OW9XfyYu.js";
 import { n as formatTimeAgo } from "./format-relative-BDwAggS5.js";
 import { l as resolveSessionModelRef, n as classifySessionKey, r as listAgentsForGateway, u as lookupContextTokens } from "./session-utils-DaBIs243.js";
 import { o as getRemoteSkillEligibility } from "./skill-commands-DrX4xCNq.js";
@@ -29,7 +29,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-DJYthOLz.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-C6xPE2ln.js";
 import { t as renderTable } from "./table-Bka4fasy.js";
 import { a as resolveGatewayProbeAuth$1, c as probeGateway, t as runSecurityAudit } from "./audit-CuKP86d_.js";
-import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-C4tWTDu_.js";
+import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-CcV5nKIK.js";
 import { g as resolveUpdateChannelDisplay, i as formatGitInstallLabel, m as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-BNjupSIM.js";
 import { t as resolveNodeService } from "./node-service-B-qdOCNb.js";
 import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-yQZNwAF2.js";

package/dist/{subagent-registry-CncIZPCd.js → subagent-registry-D0IYimMO.js}

@@ -50,8 +50,8 @@ import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as san
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels, u as resolveResponseUsageMode } from "./thinking-8sKPnzpp.js";
 import { t as ensureSymiModelsJson } from "./models-config-J1x_DaPn.js";
 import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-BUN71nd5.js";
-import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-lJe72a5i.js";
-import { a as resolveMemorySearchConfig, t as MemoryIndexManager } from "./manager-CgQo1mIM.js";
+import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-OW9XfyYu.js";
+import { a as resolveMemorySearchConfig, t as MemoryIndexManager } from "./manager-QPF0UtOC.js";
 import { f as runTasksWithConcurrency } from "./internal-C2jxeHS9.js";
 import { n as retryAsync } from "./retry-C4Q_VPOo.js";
 import { c as imageResultFromFile, d as readNumberParam, f as readReactionParams, h as readStringParam, l as jsonResult, m as readStringOrNumberParam, n as missingTargetError, o as createActionGate, p as readStringArrayParam, r as unknownTargetError, s as imageResult, t as ambiguousTargetError, u as parseAvailableTags } from "./target-errors-Co0LcWKH.js";
@@ -4957,16 +4957,16 @@ function shouldComputeCommandAuthorized(text, cfg, options) {
 
 //#endregion
 //#region src/channels/sender-label.ts
-function normalize(value) {
+function normalize$1(value) {
 	const trimmed = value?.trim();
 	return trimmed ? trimmed : void 0;
 }
 function resolveSenderLabel(params) {
-	const name = normalize(params.name);
-	const username = normalize(params.username);
-	const tag = normalize(params.tag);
-	const e164 = normalize(params.e164);
-	const id = normalize(params.id);
+	const name = normalize$1(params.name);
+	const username = normalize$1(params.username);
+	const tag = normalize$1(params.tag);
+	const e164 = normalize$1(params.e164);
+	const id = normalize$1(params.id);
 	const display = name ?? username ?? tag ?? "";
 	const idPart = e164 ?? id ?? "";
 	if (display && idPart && display !== idPart) return `${display} (${idPart})`;
@@ -23720,8 +23720,39 @@ const GatewayToolSchema = Type.Object({
 	baseHash: Type.Optional(Type.String()),
 	sessionKey: Type.Optional(Type.String()),
 	note: Type.Optional(Type.String()),
-	restartDelayMs: Type.Optional(Type.Number())
+	restartDelayMs: Type.Optional(Type.Number()),
+	userRequestAcknowledgment: Type.Optional(Type.String())
 });
+/** Actions that mutate gateway state and require explicit user authorization. */
+const DESTRUCTIVE_ACTIONS = new Set([
+	"config.apply",
+	"config.patch",
+	"update.run"
+]);
+/** Minimum length for a meaningful authorization message. */
+const MIN_AUTHORIZATION_LENGTH = 10;
+/**
+* Asserts the user's request was explicitly acknowledged for destructive
+* actions. Throws a descriptive error if the acknowledgment is missing,
+* empty, or trivially short.
+*
+* NOTE: This is defense-in-depth, not a hard barrier. A determined model
+* could still populate the field with fabricated text. The barrier exists
+* to:
+*   1. Force the agent to deliberately compose a justification (vs. blind
+*      tool invocation).
+*   2. Provide an audit trail (the acknowledgment is logged with the tool
+*      call args).
+*   3. Surface for future tightening (e.g., matching against real session
+*      history).
+*/
+function assertUserAuthorization(action, params) {
+	if (!DESTRUCTIVE_ACTIONS.has(action)) return;
+	const ack = params.userRequestAcknowledgment;
+	const trimmed = typeof ack === "string" ? ack.trim() : "";
+	if (!trimmed) throw new Error(`Action '${action}' requires an explicit user authorization. Pass userRequestAcknowledgment with a paraphrase of the user's request (e.g., "user said: please update Symi"). If the user did not explicitly request this action, ask them first instead of invoking it.`);
+	if (trimmed.length < MIN_AUTHORIZATION_LENGTH) throw new Error(`Action '${action}' requires a substantive userRequestAcknowledgment (minimum ${MIN_AUTHORIZATION_LENGTH} characters describing the user's request). Received: ${JSON.stringify(trimmed)}.`);
+}
 function createGatewayTool(opts) {
 	return {
 		label: "Gateway",
@@ -23732,6 +23763,7 @@ function createGatewayTool(opts) {
 		execute: async (_toolCallId, args) => {
 			const params = args;
 			const action = readStringParam(params, "action", { required: true });
+			assertUserAuthorization(action, params);
 			if (action === "restart") {
 				if (!isRestartEnabled(opts?.config)) throw new Error("Gateway restart is disabled (commands.restart=false).");
 				const sessionKey = typeof params.sessionKey === "string" && params.sessionKey.trim() ? params.sessionKey.trim() : opts?.agentSessionKey?.trim() || void 0;
@@ -53882,7 +53914,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-CCEVjDcU.js");
+			const { sendMessageWhatsApp } = await import("./web-B0lZdBBl.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -69196,7 +69228,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-CCEVjDcU.js");
+	webChannelPromise ??= import("./web-B0lZdBBl.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -70458,6 +70490,91 @@ function wrapToolWithAbortSignal(tool, abortSignal) {
 	};
 }
 
+//#endregion
+//#region src/agents/pi-tools.read-edit-guard.ts
+const RETRY_GUIDANCE_SUFFIX$1 = " Read the file first, then retry the edit.";
+function readGuardError(filePath) {
+	return /* @__PURE__ */ new Error(`Edit refused: '${filePath}' has not been read in this session. The edit tool requires the agent to read the file first so oldText can match real content rather than hallucinated content.${RETRY_GUIDANCE_SUFFIX$1}`);
+}
+function extractPath(args) {
+	if (!args || typeof args !== "object") return;
+	const record = args;
+	const candidate = record.path ?? record.file_path;
+	if (typeof candidate !== "string") return;
+	const trimmed = candidate.trim();
+	return trimmed.length > 0 ? trimmed : void 0;
+}
+function wrapReadToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordRead(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapWriteToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordWrite(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapEditToolWithGuard(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const filePath = extractPath(args);
+			if (filePath && !tracker.hasObserved(filePath)) throw readGuardError(filePath);
+			return tool.execute(toolCallId, args, signal, onUpdate);
+		}
+	};
+}
+
+//#endregion
+//#region src/agents/pi-tools.read-edit-tracker.ts
+function normalize(filePath, workspaceRoot) {
+	if (!workspaceRoot) return filePath;
+	if (path.isAbsolute(filePath)) return path.normalize(filePath);
+	return path.resolve(workspaceRoot, filePath);
+}
+function createReadEditTracker(opts = {}) {
+	const observed = /* @__PURE__ */ new Map();
+	const record = (filePath, kind) => {
+		if (typeof filePath !== "string" || !filePath.trim()) return;
+		const key = normalize(filePath.trim(), opts.workspaceRoot);
+		const prior = observed.get(key);
+		if (kind === "written" || prior !== "written") observed.set(key, kind);
+	};
+	return {
+		recordRead: (filePath) => record(filePath, "read"),
+		recordWrite: (filePath) => record(filePath, "written"),
+		observation: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return null;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.get(key) ?? null;
+		},
+		hasObserved: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return false;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.has(key);
+		},
+		reset: () => {
+			observed.clear();
+		}
+	};
+}
+
 //#endregion
 //#region src/media/sniff-mime-from-base64.ts
 async function sniffMimeFromBase64(base64) {
@@ -71085,33 +71202,34 @@ function createSymiCodingTools(options) {
 	});
 	if (sandboxRoot && !sandboxFsBridge) throw new Error("Sandbox filesystem bridge is unavailable.");
 	const imageSanitization = resolveImageSanitizationLimits(options?.config);
+	const readEditTracker = createReadEditTracker({ workspaceRoot: sandboxRoot ?? workspaceRoot });
 	const base = codingTools.flatMap((tool) => {
 		if (tool.name === readTool.name) {
 			if (sandboxRoot) {
-				const sandboxed = createSandboxedReadTool({
+				const tracked = wrapReadToolWithTracker(createSandboxedReadTool({
 					root: sandboxRoot,
 					bridge: sandboxFsBridge,
 					modelContextWindowTokens: options?.modelContextWindowTokens,
 					imageSanitization
-				});
-				return [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxed, sandboxRoot) : sandboxed];
+				}), readEditTracker);
+				return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, sandboxRoot) : tracked];
 			}
-			const wrapped = createSymiReadTool(createReadTool(workspaceRoot), {
+			const tracked = wrapReadToolWithTracker(createSymiReadTool(createReadTool(workspaceRoot), {
 				modelContextWindowTokens: options?.modelContextWindowTokens,
 				imageSanitization
-			});
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			}), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "bash" || tool.name === execToolName) return [];
 		if (tool.name === "write") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const tracked = wrapWriteToolWithTracker(wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "edit") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const guarded = wrapEditToolWithGuard(wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(guarded, workspaceRoot) : guarded];
 		}
 		return [tool];
 	});
@@ -71154,22 +71272,18 @@ function createSymiCodingTools(options) {
 		} : void 0,
 		workspaceOnly: applyPatchWorkspaceOnly
 	});
+	const sandboxedEditTool = sandboxRoot ? wrapEditToolWithGuard(createSandboxedEditTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
+	const sandboxedWriteTool = sandboxRoot ? wrapWriteToolWithTracker(createSandboxedWriteTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
 	const withHooks = applyToolPolicyPipeline({
 		tools: applyOwnerOnlyToolPolicy([
 			...base,
-			...sandboxRoot ? allowWorkspaceWrites ? [workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			})] : [] : [],
+			...sandboxRoot ? allowWorkspaceWrites && sandboxedEditTool && sandboxedWriteTool ? [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedEditTool, sandboxRoot) : sandboxedEditTool, workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedWriteTool, sandboxRoot) : sandboxedWriteTool] : [] : [],
 			...applyPatchTool ? [applyPatchTool] : [],
 			execTool,
 			processTool,

package/dist/{synthesis-CxvpkXBW.js → synthesis-BVZ5RJLg.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { Bt as runAgentTurn } from "./reply-2awhibgG.js";
+import { Bt as runAgentTurn } from "./reply-CgyjcoxC.js";
 import "./registry-Cja8eT7G.js";
 import { t as createSubsystemLogger } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -60,8 +60,8 @@ import "./diagnostic-session-state-CUslJyKP.js";
 import "./send-DpMnSIi5.js";
 import "./model-ECsJuJew.js";
 import "./reply-prefix-CE2YmmsD.js";
-import "./memory-cli-BMb31chU.js";
-import "./manager-DhGfNqfc.js";
+import "./memory-cli-BTByRgM0.js";
+import "./manager-9Mni2AA9.js";
 import "./retry-BoS4e4X_.js";
 import "./sqlite-D55gRQbH.js";
 import "./target-errors-C9e6dMU_.js";

package/dist/{synthesis-lD0Vb_9q.js → synthesis-CBwKBuLy.js}

@@ -3,16 +3,16 @@ import "./registry-DYq1AYOv.js";
 import "./agent-scope-CpEJ0B88.js";
 import { t as createSubsystemLogger } from "./subsystem-BjyjJF-d.js";
 import "./workspace-DscDraUb.js";
-import { t as runAgentTurn } from "./unified-runner-JQaSdhSg.js";
+import { t as runAgentTurn } from "./unified-runner-BhnvjB1J.js";
 import "./paths-CbQV9WEg.js";
 import "./auth-profiles-C2vj6htZ.js";
 import "./env-BDXYbTKj.js";
 import "./github-copilot-token-cCYzSU9h.js";
 import "./boolean-CE7i9tBR.js";
-import "./pi-embedded-helpers-P13adotN.js";
+import "./pi-embedded-helpers-D1_Sab0M.js";
 import "./config-BkZ9HOKT.js";
 import "./manifest-registry-CBCGTsIb.js";
-import "./chrome-C08Z0XAa.js";
+import "./chrome-ROtrXlNs.js";
 import "./frontmatter-CTR5f_Ez.js";
 import "./skills-CXxrn_e2.js";
 import "./redact-BDMXB06K.js";
@@ -30,16 +30,16 @@ import "./bindings-BsHoBLIE.js";
 import "./send-BKo1T3HF.js";
 import "./send-C0QjmPaf.js";
 import "./tool-images-SqqWIT22.js";
-import "./deliver-qUx-eLKt.js";
+import "./deliver-B0OUq6RP.js";
 import "./diagnostic-BUcR3Meg.js";
 import "./diagnostic-session-state-Zw87xFym.js";
-import "./image-C6rCON9L.js";
+import "./image-BuVL0jHI.js";
 import "./pi-auth-json-RXOlh8ar.js";
 import "./tokens-W0JzCJJM.js";
 import "./send-Bb4it0te.js";
 import "./pi-model-discovery-CuZX_Q4t.js";
 import "./reply-prefix-CvEIl6_d.js";
-import "./manager-BaSutzfz.js";
+import "./manager-CjW8kPVc.js";
 import "./gemini-auth-BefM10YB.js";
 import "./retry-B-y5suGA.js";
 import "./sqlite-BN_hIcmu.js";
@@ -50,7 +50,7 @@ import "./local-roots-ClipCZ9s.js";
 import "./ir-7tMVY7D_.js";
 import "./render-D1xvLuGo.js";
 import "./commands-registry-DxbSTLNQ.js";
-import "./runner-D633VT13.js";
+import "./runner-ecX1WzDt.js";
 import "./skill-commands-DG2lcozb.js";
 import "./fetch-ClslA6GS.js";
 import "./channel-activity-D8QD7GoV.js";

package/dist/{synthesis-CTC73eY9.js → synthesis-D55QrjAJ.js}

@@ -14,7 +14,7 @@ import "./client-CJIMV1WD.js";
 import "./call-M4YyUnwu.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { J as runAgentTurn } from "./subagent-registry-CncIZPCd.js";
+import { J as runAgentTurn } from "./subagent-registry-D0IYimMO.js";
 import "./sessions-BPD85pWA.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -52,8 +52,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-J1x_DaPn.js";
 import "./reply-prefix-BUN71nd5.js";
-import "./memory-cli-lJe72a5i.js";
-import "./manager-CgQo1mIM.js";
+import "./memory-cli-OW9XfyYu.js";
+import "./manager-QPF0UtOC.js";
 import "./gemini-auth-DEakvf-D.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";

package/dist/{synthesis-DOmJ2Gay.js → synthesis-itgrzpuj.js}

@@ -7,7 +7,7 @@ import "./reply-prefix-K_J_nfgx.js";
 import "./github-copilot-token-BbsJ0Qbo.js";
 import "./env-CQ_DQOwT.js";
 import "./tokens-Cn6drXx2.js";
-import { p as runAgentTurn } from "./pi-embedded-BUYKq7Wv.js";
+import { p as runAgentTurn } from "./pi-embedded-Bl3YkBkI.js";
 import "./plugins-71oIavrF.js";
 import "./accounts-DDEyGwby.js";
 import "./bindings-DYVakimr.js";
@@ -35,7 +35,7 @@ import "./accounts-DImOt9jX.js";
 import "./paths-DkMamAQ-.js";
 import "./tool-images-ChC2CXaN.js";
 import "./image-MNvheU8U.js";
-import "./manager-D6E6EGWa.js";
+import "./manager-C-H0XXJq.js";
 import "./gemini-auth-DVcG-42i.js";
 import "./retry-QGp0jvVi.js";
 import "./sqlite-Bo4pHfp8.js";