@symerian/symi 2.8.17 → 2.9.0

package/dist/{unified-runner-JQaSdhSg.js → unified-runner-BhnvjB1J.js}

@@ -10,10 +10,10 @@ import { $ as resolveAuthProfileDisplayLabel, B as resolveApiKeyForProvider, C a
 import { n as formatCliCommand, r as resolveCliName, t as isTruthyEnvValue } from "./env-BDXYbTKj.js";
 import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-cCYzSU9h.js";
 import { t as parseBooleanValue$1 } from "./boolean-CE7i9tBR.js";
-import { $ as normalizeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, G as updateLastRoute, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as isCacheEnabled, Jt as ensureSessionHeader, K as updateSessionStore, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as mergeDeliveryContext, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as deliveryContextFromSession, Xt as resolveBootstrapTotalMaxChars, Y as resolveCacheTtlMs$1, Yt as resolveBootstrapMaxChars, Z as deliveryContextKey, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as resolveFreshSessionTotalTokens, a as isMessagingToolDuplicateNormalized, at as extractToolCallNames, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as hasInterSessionUserProvenance, d as isAntigravityClaude, dt as evaluateSessionFreshness, et as normalizeSessionDeliveryFields, f as isGoogleModelApi, ft as resolveChannelResetConfig, g as formatBillingErrorMessage, gt as DEFAULT_RESET_TRIGGERS, h as formatAssistantErrorText, ht as resolveThreadFlag, it as countToolResults, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as normalizeInputProvenance, m as classifyFailoverReason, mt as resolveSessionResetType, n as validateGeminiTurns, nt as archiveSessionTranscripts, o as normalizeTextForComparison, ot as INPUT_PROVENANCE_KIND_VALUES, p as BILLING_ERROR_USER_MESSAGE, pt as resolveSessionResetPolicy, q as updateSessionStoreEntry, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as capArrayByJsonBytes, s as sanitizeSessionMessagesImages, st as applyInputProvenanceToUserMessage, t as validateAnthropicTurns, tt as normalizeAccountId$3, u as downgradeOpenAIReasoningBlocks, ut as resolveSessionKey, v as getApiErrorPayloadFingerprint, vt as canonicalizeMainSessionAlias, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-P13adotN.js";
+import { $ as normalizeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, G as updateLastRoute, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as isCacheEnabled, Jt as ensureSessionHeader, K as updateSessionStore, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as mergeDeliveryContext, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as deliveryContextFromSession, Xt as resolveBootstrapTotalMaxChars, Y as resolveCacheTtlMs$1, Yt as resolveBootstrapMaxChars, Z as deliveryContextKey, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as resolveFreshSessionTotalTokens, a as isMessagingToolDuplicateNormalized, at as extractToolCallNames, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as hasInterSessionUserProvenance, d as isAntigravityClaude, dt as evaluateSessionFreshness, et as normalizeSessionDeliveryFields, f as isGoogleModelApi, ft as resolveChannelResetConfig, g as formatBillingErrorMessage, gt as DEFAULT_RESET_TRIGGERS, h as formatAssistantErrorText, ht as resolveThreadFlag, it as countToolResults, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as normalizeInputProvenance, m as classifyFailoverReason, mt as resolveSessionResetType, n as validateGeminiTurns, nt as archiveSessionTranscripts, o as normalizeTextForComparison, ot as INPUT_PROVENANCE_KIND_VALUES, p as BILLING_ERROR_USER_MESSAGE, pt as resolveSessionResetPolicy, q as updateSessionStoreEntry, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as capArrayByJsonBytes, s as sanitizeSessionMessagesImages, st as applyInputProvenanceToUserMessage, t as validateAnthropicTurns, tt as normalizeAccountId$3, u as downgradeOpenAIReasoningBlocks, ut as resolveSessionKey, v as getApiErrorPayloadFingerprint, vt as canonicalizeMainSessionAlias, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-D1_Sab0M.js";
 import { A as VERSION, C as getConfigValueAtPath, D as isSafeExecutableValue, E as unsetConfigValueAtPath, O as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, S as unsetConfigOverride, T as setConfigValueAtPath, _ as parseDurationMs, a as writeConfigFile, b as resetConfigOverrides, c as TELEGRAM_COMMAND_NAME_PATTERN, f as isInboundPathAllowed, g as normalizeScpRemoteHost, h as resolveIMessageRemoteAttachmentRoots, i as resolveConfigSnapshotHash, k as resolveAgentMaxConcurrent, l as normalizeTelegramCommandName, m as resolveIMessageAttachmentRoots, n as loadConfig, o as validateConfigObjectWithPlugins, r as readConfigFileSnapshot, u as resolveTelegramCustomCommands, v as validateJsonSchemaValue, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-BkZ9HOKT.js";
 import { a as applyTestPluginDefaults, c as resolveMemorySlotDecision, d as isDangerousHostEnvVarName, i as safeStatSync, n as discoverSymiPlugins, o as normalizePluginsConfig, r as isPathInside, s as resolveEnableState, t as loadPluginManifestRegistry, u as isPathInsideWithRealpath } from "./manifest-registry-CBCGTsIb.js";
-import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-C08Z0XAa.js";
+import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-ROtrXlNs.js";
 import { c as assertSandboxPath, d as resolveSandboxedMediaSource, f as applySkillEnvOverrides, i as resolveSkillsPromptForRun, l as resolveSandboxInputPath, n as buildWorkspaceSkillSnapshot, p as applySkillEnvOverridesFromSnapshot, r as loadWorkspaceSkillEntries, s as assertMediaNotDataUrl } from "./skills-CXxrn_e2.js";
 import { n as formatErrorMessage, r as formatUncaughtError } from "./errors-XIsvXeC-.js";
 import { c as detectMime, d as imageMimeFromFormat, f as isAudioFileName, g as MAX_IMAGE_BYTES, i as getImageMetadata, l as extensionForMime, p as isGifMedia, s as resizeToJpeg, v as mediaKindFromMime } from "./image-ops-C7CauEK8.js";
@@ -31,16 +31,16 @@ import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i
 import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as resolveTimestampMs, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as resolveDiscordSystemLocation, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordShouldRequireMention, a as removeReactionDiscord, at as resolveDiscordChannelId, b as sendWebhookMessageDiscord, bt as formatDiscordReactionEmoji, c as formatDiscordComponentEventText, ct as allowListMatches$1, d as parseDiscordModalCustomId, dt as normalizeDiscordSlug, et as hasAnyGuildPermissionDiscord, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordAllowListMatch, g as sendMessageDiscord, gt as resolveDiscordOwnerAllowFrom, h as resolveDiscordModalEntry, ht as resolveDiscordMemberAccessState, i as removeOwnReactionsDiscord, it as parseDiscordTarget, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as isDiscordGroupAllowedByPolicy, m as resolveDiscordComponentEntry, mt as resolveDiscordGuildEntry, n as fetchReactionsDiscord, nt as createDiscordClient, o as sendDiscordComponentMessage, ot as listDiscordDirectoryGroupsLive, p as readDiscordComponentSpec, pt as resolveDiscordChannelConfigWithFallback, q as deleteChannelDiscord, r as reactMessageDiscord, rt as createDiscordRestClient, s as createDiscordFormModal, st as listDiscordDirectoryPeersLive, tt as chunkDiscordTextWithMode, u as parseDiscordComponentCustomIdForCarbon, ut as normalizeDiscordAllowList, v as sendStickerDiscord, vt as resolveGroupDmAllow, w as fetchMessageDiscord, wt as fetchDiscord, x as createThreadDiscord, xt as formatDiscordUserTag, y as sendVoiceMessageDiscord, yt as shouldEmitDiscordReactionNotification, z as listGuildChannelsDiscord } from "./send-C0QjmPaf.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-BBh3Gsrx.js";
 import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-SqqWIT22.js";
-import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-qUx-eLKt.js";
+import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-B0OUq6RP.js";
 import { a as logMessageProcessed, c as logWebhookError, d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, i as logLaneEnqueue, l as logWebhookProcessed, m as isDiagnosticsEnabled, o as logMessageQueued, p as emitDiagnosticEvent, r as logLaneDequeue, s as logSessionStateChange, t as diag, u as logWebhookReceived } from "./diagnostic-BUcR3Meg.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-Zw87xFym.js";
-import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-C6rCON9L.js";
+import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-BuVL0jHI.js";
 import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-RXOlh8ar.js";
 import { a as isSilentReplyText, i as isSilentReplyPrefixText, n as SILENT_REPLY_TOKEN, r as SYMIPULSE_TOKEN, t as HEARTBEAT_TOKEN } from "./tokens-W0JzCJJM.js";
 import { $ as isVoiceCompatibleAudio, A as extractTelegramLocation, B as normalizeAllowFromWithStore$1, C as buildTelegramGroupFrom, D as buildTypingThreadParams, E as buildTelegramThreadParams, F as resolveTelegramMediaPlaceholder, G as formatLocationText, H as firstDefined$1, I as resolveTelegramReplyId, J as readChannelAllowFromStore, K as toLocationContext, L as resolveTelegramStreamMode, M as normalizeForwardedContext, N as resolveTelegramForumThreadId, O as describeReplyTarget, P as resolveTelegramGroupAllowFromContext, Q as listPairingChannels, R as resolveTelegramThreadSpec, S as buildSenderName, T as buildTelegramParentPeer, U as isSenderIdAllowed, V as resolveSenderAllowMatch, W as mergeAllowFromSources, X as upsertChannelPairingRequest, Y as removeChannelAllowFromStoreEntry, Z as getPairingAdapter, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildGroupLabel, c as sendStickerTelegram, d as wasSentByBot, et as parseTelegramTarget, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as hasBotMention, k as expandTextLinks, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as addChannelAllowFromStoreEntry, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, tt as resolveTelegramTargetChatType, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramGroupPeerId, x as buildSenderLabel, y as withTelegramApiErrorLogging, z as isSenderAllowed$1 } from "./send-Bb4it0te.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-CuZX_Q4t.js";
 import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-CvEIl6_d.js";
-import { a as resolveMemorySearchConfig, i as resolveOllamaBaseUrl, r as probeOllamaEmbeddingModels, t as MemoryIndexManager } from "./manager-BaSutzfz.js";
+import { a as resolveMemorySearchConfig, i as resolveOllamaBaseUrl, r as probeOllamaEmbeddingModels, t as MemoryIndexManager } from "./manager-CjW8kPVc.js";
 import { c as normalizeExtraMemoryPaths, f as runTasksWithConcurrency, s as listMemoryFiles } from "./internal-DjnxpF_K.js";
 import { n as retryAsync } from "./retry-B-y5suGA.js";
 import { a as createActionGate, c as jsonResult, d as readReactionParams, f as readStringArrayParam, l as parseAvailableTags, m as readStringParam, n as missingTargetError, o as imageResult, p as readStringOrNumberParam, r as unknownTargetError, s as imageResultFromFile, t as ambiguousTargetError, u as readNumberParam } from "./target-errors-DeJTztcq.js";
@@ -50,7 +50,7 @@ import { n as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-CVCB
 import { a as readResponseWithLimit, i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, o as fetchWithSsrFGuard, t as getAgentScopedMediaLocalRoots } from "./local-roots-ClipCZ9s.js";
 import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-7tMVY7D_.js";
 import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-DxbSTLNQ.js";
-import { _ as CLI_OUTPUT_MAX_BUFFER, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as resolveMediaUnderstandingScope, h as normalizeMediaUnderstandingChatType, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveTimeoutMs$1, n as createMediaAttachmentCache, o as runCapability, p as resolveConcurrency, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as applyTemplate, y as registerUnhandledRejectionHandler } from "./runner-D633VT13.js";
+import { _ as CLI_OUTPUT_MAX_BUFFER, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as resolveMediaUnderstandingScope, h as normalizeMediaUnderstandingChatType, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveTimeoutMs$1, n as createMediaAttachmentCache, o as runCapability, p as resolveConcurrency, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as applyTemplate, y as registerUnhandledRejectionHandler } from "./runner-ecX1WzDt.js";
 import { c as getSkillsSnapshotVersion, d as createAsyncLock, f as readJsonFile, i as resolveSkillCommandInvocation, l as pruneExpiredPending, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, p as writeJsonAtomic, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as resolvePairingPaths } from "./skill-commands-DG2lcozb.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-DZQU0r3y.js";
 import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-ClslA6GS.js";
@@ -81,7 +81,7 @@ import AjvPkg from "ajv";
 import { CURRENT_SESSION_VERSION, DefaultResourceLoader, SessionManager, SettingsManager, codingTools, createAgentSession, createEditTool, createReadTool, createWriteTool, estimateTokens, generateSummary, readTool } from "@mariozechner/pi-coding-agent";
 import { createServer } from "node:http";
 import { ProxyAgent, fetch as fetch$1 } from "undici";
-import WebSocket$1, { WebSocket } from "ws";
+import WebSocket, { WebSocket as WebSocket$1 } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { EdgeTTS } from "node-edge-tts";
 import { createJiti } from "jiti";
@@ -4340,7 +4340,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-BaSutzfz.js").then((n) => n.n);
+						const { MemoryIndexManager } = await import("./manager-CjW8kPVc.js").then((n) => n.n);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -4353,7 +4353,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-BaSutzfz.js").then((n) => n.n);
+		const { MemoryIndexManager } = await import("./manager-CjW8kPVc.js").then((n) => n.n);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -8955,7 +8955,7 @@ var GatewayClient = class {
 				if (fingerprint !== expected) return /* @__PURE__ */ new Error("gateway tls fingerprint mismatch");
 			});
 		}
-		this.ws = new WebSocket(url, wsOptions);
+		this.ws = new WebSocket$1(url, wsOptions);
 		this.ws.on("open", () => {
 			if (url.startsWith("wss://") && this.opts.tlsFingerprint) {
 				const tlsError = this.validateTlsFingerprint();
@@ -9174,7 +9174,7 @@ var GatewayClient = class {
 		return null;
 	}
 	async request(method, params, opts) {
-		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error("gateway not connected");
+		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error("gateway not connected");
 		const id = randomUUID();
 		const frame = {
 			type: "req",
@@ -10443,7 +10443,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-qUx-eLKt.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-B0OUq6RP.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -13328,16 +13328,16 @@ function shouldComputeCommandAuthorized(text, cfg, options) {
 
 //#endregion
 //#region src/channels/sender-label.ts
-function normalize(value) {
+function normalize$1(value) {
 	const trimmed = value?.trim();
 	return trimmed ? trimmed : void 0;
 }
 function resolveSenderLabel(params) {
-	const name = normalize(params.name);
-	const username = normalize(params.username);
-	const tag = normalize(params.tag);
-	const e164 = normalize(params.e164);
-	const id = normalize(params.id);
+	const name = normalize$1(params.name);
+	const username = normalize$1(params.username);
+	const tag = normalize$1(params.tag);
+	const e164 = normalize$1(params.e164);
+	const id = normalize$1(params.id);
 	const display = name ?? username ?? tag ?? "";
 	const idPart = e164 ?? id ?? "";
 	if (display && idPart && display !== idPart) return `${display} (${idPart})`;
@@ -32995,8 +32995,39 @@ const GatewayToolSchema = Type.Object({
 	baseHash: Type.Optional(Type.String()),
 	sessionKey: Type.Optional(Type.String()),
 	note: Type.Optional(Type.String()),
-	restartDelayMs: Type.Optional(Type.Number())
+	restartDelayMs: Type.Optional(Type.Number()),
+	userRequestAcknowledgment: Type.Optional(Type.String())
 });
+/** Actions that mutate gateway state and require explicit user authorization. */
+const DESTRUCTIVE_ACTIONS = new Set([
+	"config.apply",
+	"config.patch",
+	"update.run"
+]);
+/** Minimum length for a meaningful authorization message. */
+const MIN_AUTHORIZATION_LENGTH = 10;
+/**
+* Asserts the user's request was explicitly acknowledged for destructive
+* actions. Throws a descriptive error if the acknowledgment is missing,
+* empty, or trivially short.
+*
+* NOTE: This is defense-in-depth, not a hard barrier. A determined model
+* could still populate the field with fabricated text. The barrier exists
+* to:
+*   1. Force the agent to deliberately compose a justification (vs. blind
+*      tool invocation).
+*   2. Provide an audit trail (the acknowledgment is logged with the tool
+*      call args).
+*   3. Surface for future tightening (e.g., matching against real session
+*      history).
+*/
+function assertUserAuthorization(action, params) {
+	if (!DESTRUCTIVE_ACTIONS.has(action)) return;
+	const ack = params.userRequestAcknowledgment;
+	const trimmed = typeof ack === "string" ? ack.trim() : "";
+	if (!trimmed) throw new Error(`Action '${action}' requires an explicit user authorization. Pass userRequestAcknowledgment with a paraphrase of the user's request (e.g., "user said: please update Symi"). If the user did not explicitly request this action, ask them first instead of invoking it.`);
+	if (trimmed.length < MIN_AUTHORIZATION_LENGTH) throw new Error(`Action '${action}' requires a substantive userRequestAcknowledgment (minimum ${MIN_AUTHORIZATION_LENGTH} characters describing the user's request). Received: ${JSON.stringify(trimmed)}.`);
+}
 function createGatewayTool(opts) {
 	return {
 		label: "Gateway",
@@ -33007,6 +33038,7 @@ function createGatewayTool(opts) {
 		execute: async (_toolCallId, args) => {
 			const params = args;
 			const action = readStringParam(params, "action", { required: true });
+			assertUserAuthorization(action, params);
 			if (action === "restart") {
 				if (!isRestartEnabled(opts?.config)) throw new Error("Gateway restart is disabled (commands.restart=false).");
 				const sessionKey = typeof params.sessionKey === "string" && params.sessionKey.trim() ? params.sessionKey.trim() : opts?.agentSessionKey?.trim() || void 0;
@@ -44204,7 +44236,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-qUx-eLKt.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-B0OUq6RP.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -47650,7 +47682,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-C6rCON9L.js").then((n) => n.n);
+		const { describeImageWithModel } = await import("./image-BuVL0jHI.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -50399,7 +50431,7 @@ async function preflightDiscordMessage(params) {
 	let preflightTranscript;
 	const hasAudioAttachment = message.attachments?.some((att) => att.contentType?.startsWith("audio/"));
 	if (!isDirectMessage && shouldRequireMention && hasAudioAttachment && !baseText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-rjCWpcfE.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-Cb-T0r6e.js");
 		const audioPaths = message.attachments?.filter((att) => att.contentType?.startsWith("audio/")).map((att) => att.url) ?? [];
 		if (audioPaths.length > 0) preflightTranscript = await transcribeFirstAudio({
 			ctx: {
@@ -54405,7 +54437,7 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-BEDc6iEz.js");
+			const { sendMessageWhatsApp } = await import("./web-DCO_YCRw.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -57310,7 +57342,7 @@ function createDiscordGatewayPlugin(params) {
 				super(options);
 			}
 			createWebSocket(url) {
-				return new WebSocket$1(url, { agent });
+				return new WebSocket(url, { agent });
 			}
 		}
 		return new ProxyGatewayPlugin();
@@ -67528,7 +67560,7 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	const hasAudio = allMedia.some((media) => media.contentType?.startsWith("audio/"));
 	let preflightTranscript;
 	if (isGroup && requireMention && hasAudio && !hasUserText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-rjCWpcfE.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-Cb-T0r6e.js");
 		preflightTranscript = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: allMedia.length > 0 ? allMedia.map((m) => m.path) : void 0,
@@ -69685,7 +69717,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-BEDc6iEz.js");
+	webChannelPromise ??= import("./web-DCO_YCRw.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -71154,6 +71186,91 @@ function isToolAllowedByPolicies(name, policies) {
 	return policies.every((policy) => isToolAllowedByPolicyName(name, policy));
 }
 
+//#endregion
+//#region src/agents/pi-tools.read-edit-guard.ts
+const RETRY_GUIDANCE_SUFFIX$1 = " Read the file first, then retry the edit.";
+function readGuardError(filePath) {
+	return /* @__PURE__ */ new Error(`Edit refused: '${filePath}' has not been read in this session. The edit tool requires the agent to read the file first so oldText can match real content rather than hallucinated content.${RETRY_GUIDANCE_SUFFIX$1}`);
+}
+function extractPath(args) {
+	if (!args || typeof args !== "object") return;
+	const record = args;
+	const candidate = record.path ?? record.file_path;
+	if (typeof candidate !== "string") return;
+	const trimmed = candidate.trim();
+	return trimmed.length > 0 ? trimmed : void 0;
+}
+function wrapReadToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordRead(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapWriteToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordWrite(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapEditToolWithGuard(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const filePath = extractPath(args);
+			if (filePath && !tracker.hasObserved(filePath)) throw readGuardError(filePath);
+			return tool.execute(toolCallId, args, signal, onUpdate);
+		}
+	};
+}
+
+//#endregion
+//#region src/agents/pi-tools.read-edit-tracker.ts
+function normalize(filePath, workspaceRoot) {
+	if (!workspaceRoot) return filePath;
+	if (path.isAbsolute(filePath)) return path.normalize(filePath);
+	return path.resolve(workspaceRoot, filePath);
+}
+function createReadEditTracker(opts = {}) {
+	const observed = /* @__PURE__ */ new Map();
+	const record = (filePath, kind) => {
+		if (typeof filePath !== "string" || !filePath.trim()) return;
+		const key = normalize(filePath.trim(), opts.workspaceRoot);
+		const prior = observed.get(key);
+		if (kind === "written" || prior !== "written") observed.set(key, kind);
+	};
+	return {
+		recordRead: (filePath) => record(filePath, "read"),
+		recordWrite: (filePath) => record(filePath, "written"),
+		observation: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return null;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.get(key) ?? null;
+		},
+		hasObserved: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return false;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.has(key);
+		},
+		reset: () => {
+			observed.clear();
+		}
+	};
+}
+
 //#endregion
 //#region src/media/sniff-mime-from-base64.ts
 async function sniffMimeFromBase64(base64) {
@@ -71781,33 +71898,34 @@ function createSymiCodingTools(options) {
 	});
 	if (sandboxRoot && !sandboxFsBridge) throw new Error("Sandbox filesystem bridge is unavailable.");
 	const imageSanitization = resolveImageSanitizationLimits(options?.config);
+	const readEditTracker = createReadEditTracker({ workspaceRoot: sandboxRoot ?? workspaceRoot });
 	const base = codingTools.flatMap((tool) => {
 		if (tool.name === readTool.name) {
 			if (sandboxRoot) {
-				const sandboxed = createSandboxedReadTool({
+				const tracked = wrapReadToolWithTracker(createSandboxedReadTool({
 					root: sandboxRoot,
 					bridge: sandboxFsBridge,
 					modelContextWindowTokens: options?.modelContextWindowTokens,
 					imageSanitization
-				});
-				return [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxed, sandboxRoot) : sandboxed];
+				}), readEditTracker);
+				return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, sandboxRoot) : tracked];
 			}
-			const wrapped = createSymiReadTool(createReadTool(workspaceRoot), {
+			const tracked = wrapReadToolWithTracker(createSymiReadTool(createReadTool(workspaceRoot), {
 				modelContextWindowTokens: options?.modelContextWindowTokens,
 				imageSanitization
-			});
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			}), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "bash" || tool.name === execToolName) return [];
 		if (tool.name === "write") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const tracked = wrapWriteToolWithTracker(wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "edit") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const guarded = wrapEditToolWithGuard(wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(guarded, workspaceRoot) : guarded];
 		}
 		return [tool];
 	});
@@ -71850,22 +71968,18 @@ function createSymiCodingTools(options) {
 		} : void 0,
 		workspaceOnly: applyPatchWorkspaceOnly
 	});
+	const sandboxedEditTool = sandboxRoot ? wrapEditToolWithGuard(createSandboxedEditTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
+	const sandboxedWriteTool = sandboxRoot ? wrapWriteToolWithTracker(createSandboxedWriteTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
 	const withHooks = applyToolPolicyPipeline({
 		tools: applyOwnerOnlyToolPolicy([
 			...base,
-			...sandboxRoot ? allowWorkspaceWrites ? [workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			})] : [] : [],
+			...sandboxRoot ? allowWorkspaceWrites && sandboxedEditTool && sandboxedWriteTool ? [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedEditTool, sandboxRoot) : sandboxedEditTool, workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedWriteTool, sandboxRoot) : sandboxedWriteTool] : [] : [],
 			...applyPatchTool ? [applyPatchTool] : [],
 			execTool,
 			processTool,

package/dist/{update-cli-BO1uw-SU.js → update-cli-CL1_LPBS.js}

@@ -17,7 +17,7 @@ import "./client-CJIMV1WD.js";
 import "./call-M4YyUnwu.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { wt as trimLogTail } from "./subagent-registry-CncIZPCd.js";
+import { wt as trimLogTail } from "./subagent-registry-D0IYimMO.js";
 import "./sessions-BPD85pWA.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -55,8 +55,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-J1x_DaPn.js";
 import "./reply-prefix-BUN71nd5.js";
-import "./memory-cli-lJe72a5i.js";
-import "./manager-CgQo1mIM.js";
+import "./memory-cli-OW9XfyYu.js";
+import "./manager-QPF0UtOC.js";
 import "./gemini-auth-DEakvf-D.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -112,10 +112,10 @@ import "./npm-registry-spec-PuS2I1Em.js";
 import "./skill-scanner-BV3QHmsf.js";
 import "./installs-B4sNNRaW.js";
 import "./channels-status-issues-B-ssmZ8E.js";
-import "./register.subclis-17z5d7uO.js";
-import "./command-registry-uMOPbrbY.js";
+import "./register.subclis-ByZAz4st.js";
+import "./command-registry-BiRjJ2Sy.js";
 import "./program-context-DeZ44oQ9.js";
-import { r as installCompletion } from "./completion-cli-B6s_3rEE.js";
+import { r as installCompletion } from "./completion-cli-BYXofVqv.js";
 import "./daemon-runtime-D_elkkFW.js";
 import { r as parseSemver } from "./runtime-guard-BofkqBu7.js";
 import "./systemd-CJ5L2ee4.js";
@@ -125,19 +125,19 @@ import "./systemd-hints-Ct8ebNeC.js";
 import { i as runDaemonInstall, r as runDaemonRestart } from "./daemon-cli-BFoJGCHZ.js";
 import "./diagnostics-C6xPE2ln.js";
 import { t as renderTable } from "./table-Bka4fasy.js";
-import "./health-C4tWTDu_.js";
+import "./health-CcV5nKIK.js";
 import "./control-ui-assets-Clf7H-Sm.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, d as formatUpdateChannelLabel, g as resolveUpdateChannelDisplay, h as resolveEffectiveUpdateChannel, m as normalizeUpdateChannel, n as compareSemverStrings, r as fetchNpmTagVersion, s as DEFAULT_GIT_CHANNEL, t as checkUpdateStatus, u as channelToNpmTag } from "./update-check-BNjupSIM.js";
 import "./dm-policy-shared-JiSNSaKz.js";
 import { i as resolveUpdateAvailability, n as formatUpdateOneLiner, t as formatUpdateAvailableHint } from "./status.update-B5zI1_Id.js";
-import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-Df4mjndq.js";
+import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-Bmq67eos.js";
 import "./logging-PVQxLC6I.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-DticqU4-.js";
 import "./doctor-config-flow-B2dVxbL7.js";
 import "./systemd-linger-ipoPa7o0.js";
 import "./health-format-DkjSgkDx.js";
-import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-DBVeLysq.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-Bf6dN4D-.js";
+import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-D88AWCeM.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-woDYSVtY.js";
 import { spawn, spawnSync } from "node:child_process";
 import os from "node:os";
 import path from "node:path";

package/dist/{update-cli-CplnPSZ5.js → update-cli-D3K4mhrr.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { B as theme, h as pathExists } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import { H as trimLogTail } from "./reply-2awhibgG.js";
+import { H as trimLogTail } from "./reply-CgyjcoxC.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import "./registry-Cja8eT7G.js";
 import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
@@ -62,8 +62,8 @@ import "./diagnostic-session-state-CUslJyKP.js";
 import "./send-DpMnSIi5.js";
 import "./model-ECsJuJew.js";
 import "./reply-prefix-CE2YmmsD.js";
-import "./memory-cli-BMb31chU.js";
-import "./manager-DhGfNqfc.js";
+import "./memory-cli-BTByRgM0.js";
+import "./manager-9Mni2AA9.js";
 import "./retry-BoS4e4X_.js";
 import "./sqlite-D55gRQbH.js";
 import "./target-errors-C9e6dMU_.js";
@@ -107,7 +107,7 @@ import "./stagger-CZ1Rrj7O.js";
 import { c as resolveGatewayLaunchAgentLabel, d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName } from "./constants-DF8wPn-_.js";
 import "./channel-selection-9fIQGtZy.js";
 import { r as parseSemver } from "./runtime-guard-BKFbNplo.js";
-import "./program-context-C3QEc34t.js";
+import "./program-context-COwsYCbf.js";
 import "./catalog-KW3oyt3k.js";
 import "./skills-status-D1IW8MhS.js";
 import { n as inheritOptionFromParent } from "./command-options-DOOvAdsg.js";
@@ -118,7 +118,7 @@ import "./npm-registry-spec-B98RgVZF.js";
 import "./skill-scanner-BTgjeQBf.js";
 import "./installs-BPZKRjsO.js";
 import "./channels-status-issues-BVpj6wWd.js";
-import { r as installCompletion } from "./completion-cli-DVD79pVj.js";
+import { r as installCompletion } from "./completion-cli-C8K5J1ld.js";
 import "./daemon-runtime-Cp7obV7Q.js";
 import "./systemd-Xs16roN5.js";
 import { t as resolveGatewayService } from "./service-DzLem5vL.js";
@@ -127,19 +127,19 @@ import "./systemd-hints-vhJS1sOh.js";
 import { i as runDaemonInstall, r as runDaemonRestart } from "./daemon-cli-D6wyb9bo.js";
 import "./diagnostics-1uBuB9IE.js";
 import { t as renderTable } from "./table-BWuvjnmY.js";
-import "./health-dA8r4WJ4.js";
+import "./health-Dl2WRoTa.js";
 import "./control-ui-assets-BrP31IQR.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, d as formatUpdateChannelLabel, g as resolveUpdateChannelDisplay, h as resolveEffectiveUpdateChannel, m as normalizeUpdateChannel, n as compareSemverStrings, r as fetchNpmTagVersion, s as DEFAULT_GIT_CHANNEL, t as checkUpdateStatus, u as channelToNpmTag } from "./update-check-Bbvpax6u.js";
 import "./dm-policy-shared-KlzpDeT_.js";
 import { i as resolveUpdateAvailability, n as formatUpdateOneLiner, t as formatUpdateAvailableHint } from "./status.update-8HXdAdwz.js";
-import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-DFp9PDMN.js";
+import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-DMucmRlv.js";
 import "./logging-CZuxhCZR.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-D4uLu0dv.js";
 import "./doctor-config-flow-BCMxS2lf.js";
 import "./systemd-linger-0C265XKH.js";
 import "./health-format-Ct4VWeSk.js";
-import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-BSZrZcW2.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-BkwgaO4G.js";
+import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-rKPBDv7n.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-gMWymNcA.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{update-runner-Df4mjndq.js → update-runner-Bmq67eos.js}

@@ -1,6 +1,6 @@
 import { nt as pathExists } from "./entry.js";
 import { t as runCommandWithTimeout } from "./exec-CBKBIMpA.js";
-import { wt as trimLogTail } from "./subagent-registry-CncIZPCd.js";
+import { wt as trimLogTail } from "./subagent-registry-D0IYimMO.js";
 import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-Clf7H-Sm.js";
 import { c as DEFAULT_PACKAGE_CHANNEL, f as isBetaTag, l as DEV_BRANCH, n as compareSemverStrings, o as detectPackageManager$1, p as isStableTag, u as channelToNpmTag } from "./update-check-BNjupSIM.js";
 import os from "node:os";

package/dist/{update-runner-DFp9PDMN.js → update-runner-DMucmRlv.js}

@@ -1,5 +1,5 @@
 import { h as pathExists } from "./utils-B-0b9bGM.js";
-import { H as trimLogTail } from "./reply-2awhibgG.js";
+import { H as trimLogTail } from "./reply-CgyjcoxC.js";
 import { t as runCommandWithTimeout } from "./exec-CWkblSrI.js";
 import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-BrP31IQR.js";
 import { c as DEFAULT_PACKAGE_CHANNEL, f as isBetaTag, l as DEV_BRANCH, n as compareSemverStrings, o as detectPackageManager$1, p as isStableTag, u as channelToNpmTag } from "./update-check-Bbvpax6u.js";

package/dist/{web-CCEVjDcU.js → web-B0lZdBBl.js}

@@ -16,7 +16,7 @@ import "./client-CJIMV1WD.js";
 import "./call-M4YyUnwu.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import { Bn as formatInboundEnvelope, F as buildHistoryContextFromEntries, I as recordPendingHistoryEntryIfEnabled, Jn as normalizeMentionText, L as shouldAckReactionForWhatsApp, M as buildPairingReply, N as resolveMentionGating, P as DEFAULT_GROUP_HISTORY_LIMIT, R as dispatchReplyWithBufferedBlockDispatcher, Rn as createInboundDebouncer, U as createDedupeCache, Un as hasControlCommand, Vn as resolveEnvelopeFormatOptions, W as getReplyFromConfig, Wn as shouldComputeCommandAuthorized, b as sleepWithAbort, nn as normalizeGroupActivation, qn as buildMentionRegexes, rn as parseActivationCommand, wn as enqueueSystemEvent, y as computeBackoff, zn as resolveInboundDebounceMs } from "./subagent-registry-CncIZPCd.js";
+import { Bn as formatInboundEnvelope, F as buildHistoryContextFromEntries, I as recordPendingHistoryEntryIfEnabled, Jn as normalizeMentionText, L as shouldAckReactionForWhatsApp, M as buildPairingReply, N as resolveMentionGating, P as DEFAULT_GROUP_HISTORY_LIMIT, R as dispatchReplyWithBufferedBlockDispatcher, Rn as createInboundDebouncer, U as createDedupeCache, Un as hasControlCommand, Vn as resolveEnvelopeFormatOptions, W as getReplyFromConfig, Wn as shouldComputeCommandAuthorized, b as sleepWithAbort, nn as normalizeGroupActivation, qn as buildMentionRegexes, rn as parseActivationCommand, wn as enqueueSystemEvent, y as computeBackoff, zn as resolveInboundDebounceMs } from "./subagent-registry-D0IYimMO.js";
 import { B as resolveGroupSessionKey, c as recordSessionMetaFromInbound, o as loadSessionStore, s as readSessionUpdatedAt, u as updateLastRoute } from "./sessions-BPD85pWA.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -54,8 +54,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-J1x_DaPn.js";
 import { c as resolveIdentityNamePrefix, l as resolveMessagePrefix, t as createReplyPrefixOptions } from "./reply-prefix-BUN71nd5.js";
-import "./memory-cli-lJe72a5i.js";
-import "./manager-CgQo1mIM.js";
+import "./memory-cli-OW9XfyYu.js";
+import "./manager-QPF0UtOC.js";
 import "./gemini-auth-DEakvf-D.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";

package/dist/{web-CZoQ03ZE.js → web-C1HPdY_D.js}

@@ -8,7 +8,7 @@ import { c as resolveIdentityNamePrefix, l as resolveMessagePrefix, t as createR
 import "./github-copilot-token-BbsJ0Qbo.js";
 import { r as formatCliCommand } from "./env-CQ_DQOwT.js";
 import "./tokens-Cn6drXx2.js";
-import { C as hasControlCommand, E as normalizeMentionText, S as resolveEnvelopeFormatOptions, T as buildMentionRegexes, _ as formatDurationPrecise, a as DEFAULT_GROUP_HISTORY_LIMIT, b as resolveInboundDebounceMs, c as shouldAckReactionForWhatsApp, d as createDedupeCache, f as getReplyFromConfig, g as parseActivationCommand, h as normalizeGroupActivation, i as resolveMentionGating, l as dispatchReplyWithBufferedBlockDispatcher, n as sleepWithAbort, o as buildHistoryContextFromEntries, r as buildPairingReply, s as recordPendingHistoryEntryIfEnabled, t as computeBackoff, v as enqueueSystemEvent, w as shouldComputeCommandAuthorized, x as formatInboundEnvelope, y as createInboundDebouncer } from "./pi-embedded-BUYKq7Wv.js";
+import { C as hasControlCommand, E as normalizeMentionText, S as resolveEnvelopeFormatOptions, T as buildMentionRegexes, _ as formatDurationPrecise, a as DEFAULT_GROUP_HISTORY_LIMIT, b as resolveInboundDebounceMs, c as shouldAckReactionForWhatsApp, d as createDedupeCache, f as getReplyFromConfig, g as parseActivationCommand, h as normalizeGroupActivation, i as resolveMentionGating, l as dispatchReplyWithBufferedBlockDispatcher, n as sleepWithAbort, o as buildHistoryContextFromEntries, r as buildPairingReply, s as recordPendingHistoryEntryIfEnabled, t as computeBackoff, v as enqueueSystemEvent, w as shouldComputeCommandAuthorized, x as formatInboundEnvelope, y as createInboundDebouncer } from "./pi-embedded-Bl3YkBkI.js";
 import "./plugins-71oIavrF.js";
 import { i as logWebSelfId, l as readWebSelfId, n as WA_WEB_AUTH_DIR, p as webAuthExists, r as getWebAuthAgeMs, s as pickWebChannel, t as resolveWhatsAppAccount } from "./accounts-DDEyGwby.js";
 import "./bindings-DYVakimr.js";
@@ -36,7 +36,7 @@ import "./accounts-DImOt9jX.js";
 import { s as resolveStorePath } from "./paths-DkMamAQ-.js";
 import "./tool-images-ChC2CXaN.js";
 import "./image-MNvheU8U.js";
-import "./manager-D6E6EGWa.js";
+import "./manager-C-H0XXJq.js";
 import "./gemini-auth-DVcG-42i.js";
 import "./retry-QGp0jvVi.js";
 import "./sqlite-Bo4pHfp8.js";