@symerian/symi 2.8.17 → 2.9.1

package/dist/{pi-embedded-BUYKq7Wv.js → pi-embedded-q_tNOp_h.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { c as expandHomePrefix, i as resolveGatewayPort, n as resolveConfigPath, s as resolveStateDir, t as STATE_DIR, u as resolveRequiredHomeDir } from "./paths-CE7eVGHg.js";
 import { _ as isCronSessionKey, b as resolveThreadParentSessionKey, c as normalizeMainKey, d as sanitizeAgentId, f as DEFAULT_ACCOUNT_ID, g as isAcpSessionKey, h as getSubagentDepth, l as resolveAgentIdFromSessionKey, o as classifySessionKeyShape, p as normalizeAccountId$2, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, u as resolveThreadSessionKeys, v as isSubagentSessionKey, y as parseAgentSessionKey } from "./session-key-BCzIW1Y2.js";
 import { $ as isRich, A as normalizeE164, D as isRecord$1, E as formatTerminalLink, H as isPlainObject, I as shortenHomeInString, J as setVerbose, K as logVerbose, L as shortenHomePath, P as resolveUserPath, Q as colorize, R as sleep$1, S as clampInt, T as escapeRegExp, U as danger, V as truncateUtf16Safe, Y as shouldLogVerbose, Z as warn, _ as matchPluginCommand, a as normalizeAnyChannelId, b as CONFIG_DIR, d as createPluginRegistry, et as theme, f as normalizePluginHttpPath, g as listPluginCommands, h as getPluginCommandSpecs, l as requireActivePluginRegistry, lt as resolvePreferredSymiTmpDir, m as executePluginCommand, n as CHAT_CHANNEL_ORDER, o as normalizeChannelId, p as clearPluginCommands, r as DEFAULT_CHAT_CHANNEL, st as normalizeLogLevel, tt as getChildLogger, u as setActivePluginRegistry, v as createInternalHookEvent, w as ensureDir$3, y as triggerInternalHook, z as sliceUtf16Safe } from "./registry-BhoUuugi.js";
-import { A as logInfo, C as resolveSymiPackageRoot, D as spawnWithFallback, E as runExec, O as logDebug, S as loadWorkspaceBootstrapFiles, T as runCommandWithTimeout, a as resolveAgentModelPrimary, b as ensureAgentWorkspace, c as resolveDefaultAgentId, d as resolveSessionAgentIds, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, j as logWarn, k as logError, l as resolveEffectiveModelFallbacks, m as DEFAULT_BOOTSTRAP_FILENAME, n as resolveAgentConfig, o as resolveAgentSkillsFilter, p as DEFAULT_AGENT_WORKSPACE_DIR, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentId, x as filterBootstrapFilesForSession } from "./agent-scope-Cbl5pNe1.js";
+import { A as logInfo, C as resolveSymiPackageRoot, D as spawnWithFallback, E as runExec, O as logDebug, S as loadWorkspaceBootstrapFiles, T as runCommandWithTimeout, a as resolveAgentModelPrimary, b as ensureAgentWorkspace, c as resolveDefaultAgentId, d as resolveSessionAgentIds, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, j as logWarn, k as logError, l as resolveEffectiveModelFallbacks, m as DEFAULT_BOOTSTRAP_FILENAME, n as resolveAgentConfig, o as resolveAgentSkillsFilter, p as DEFAULT_AGENT_WORKSPACE_DIR, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentId, w as resolveSymiPackageRootSync, x as filterBootstrapFilesForSession } from "./agent-scope-Cbl5pNe1.js";
 import { a as registerActiveProgressLine, i as clearActiveProgressLine, n as createNonExitingRuntime, o as unregisterActiveProgressLine, r as defaultRuntime, t as createSubsystemLogger } from "./subsystem-CZixfwU8.js";
 import { $ as DEFAULT_MODEL, A as resolveShellEnvFallbackTimeoutMs, B as dedupeProfileIds, C as getCustomProviderApiKey, D as resolveModelAuthMode, E as resolveEnvApiKey, F as getSoonestCooldownExpiry, G as resolveSymiAgentDir, H as markAuthProfileGood, I as isProfileInCooldown, K as withFileLock, L as markAuthProfileFailure, O as getShellPathFromLoginShell, P as resolveAuthProfileOrder, Q as DEFAULT_CONTEXT_TOKENS, R as markAuthProfileUsed, S as getApiKeyForModel, T as resolveApiKeyForProvider, U as ensureAuthProfileStore, V as listProfilesForProvider, W as resolveAuthStorePathForDisplay, X as normalizeSecretInput, Z as resolveAuthProfileDisplayLabel, a as isCliProvider, b as OLLAMA_NATIVE_BASE_URL, c as normalizeProviderId, d as resolveDefaultModelForAgent, et as DEFAULT_PROVIDER, f as resolveModelRefFromString, i as findNormalizedProviderValue, m as resolveThinkingDefault, n as buildConfiguredAllowlistKeys, o as modelKey, p as resolveSubagentSpawnModelSelection, r as buildModelAliasIndex, s as normalizeModelRef$2, t as buildAllowedModelSet, u as resolveConfiguredModelRef, w as requireApiKey, x as createOllamaStreamFn, z as resolveApiKeyForProfile } from "./model-selection-vHAQ4r1b.js";
 import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-K_J_nfgx.js";
@@ -12,20 +12,20 @@ import { a as isSilentReplyText, i as isSilentReplyPrefixText, n as SILENT_REPLY
 import { _ as resolveDiscordAccount, a as normalizeWhatsAppTarget, c as listTelegramAccountIds, d as resolveSlackAccount, g as listEnabledDiscordAccounts, h as createDiscordActionGate, i as isWhatsAppGroupJid, l as resolveTelegramAccount, m as resolveSlackBotToken, n as listChannelPlugins, o as createTelegramActionGate, p as resolveSlackAppToken, r as normalizeChannelId$1, s as listEnabledTelegramAccounts, t as getChannelPlugin, u as resolveTelegramToken, v as normalizeDiscordToken } from "./plugins-71oIavrF.js";
 import { a as logoutWeb, i as logWebSelfId, l as readWebSelfId, p as webAuthExists, r as getWebAuthAgeMs, t as resolveWhatsAppAccount } from "./accounts-DDEyGwby.js";
 import { t as normalizeChatType } from "./chat-type-DFDuk3FY.js";
-import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i as createSlackWebClient, l as parseSlackTarget, o as parseSlackBlocksInput, s as validateSlackBlocksArray, t as sendMessageSlack, u as resolveSlackChannelId } from "./send-BaBv1rAU.js";
-import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as resolveTimestampMs, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as resolveDiscordSystemLocation, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordShouldRequireMention, a as removeReactionDiscord, at as resolveDiscordChannelId, b as sendWebhookMessageDiscord, bt as formatDiscordReactionEmoji, c as formatDiscordComponentEventText, ct as allowListMatches$1, d as parseDiscordModalCustomId, dt as normalizeDiscordSlug, et as hasAnyGuildPermissionDiscord, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordAllowListMatch, g as sendMessageDiscord, gt as resolveDiscordOwnerAllowFrom, h as resolveDiscordModalEntry, ht as resolveDiscordMemberAccessState, i as removeOwnReactionsDiscord, it as parseDiscordTarget, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as isDiscordGroupAllowedByPolicy, m as resolveDiscordComponentEntry, mt as resolveDiscordGuildEntry, n as fetchReactionsDiscord, nt as createDiscordClient, o as sendDiscordComponentMessage, ot as listDiscordDirectoryGroupsLive, p as readDiscordComponentSpec, pt as resolveDiscordChannelConfigWithFallback, q as deleteChannelDiscord, r as reactMessageDiscord, rt as createDiscordRestClient, s as createDiscordFormModal, st as listDiscordDirectoryPeersLive, tt as chunkDiscordTextWithMode, u as parseDiscordComponentCustomIdForCarbon, ut as normalizeDiscordAllowList, v as sendStickerDiscord, vt as resolveGroupDmAllow, w as fetchMessageDiscord, wt as fetchDiscord, x as createThreadDiscord, xt as formatDiscordUserTag, y as sendVoiceMessageDiscord, yt as shouldEmitDiscordReactionNotification, z as listGuildChannelsDiscord } from "./send-DLVrnezL.js";
-import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver-D0bWiRCg.js";
+import { a as resolveSlackWebClientOptions, c as buildSlackBlocksFallbackText, i as createSlackWebClient, l as parseSlackTarget, o as parseSlackBlocksInput, s as validateSlackBlocksArray, t as sendMessageSlack, u as resolveSlackChannelId } from "./send-vmIzYMwN.js";
+import { $ as fetchChannelPermissionsDiscord, A as unpinMessageDiscord, B as listScheduledEventsDiscord, C as editMessageDiscord, Ct as resolveTimestampMs, D as pinMessageDiscord, Dt as normalizeChannelSlug, E as listThreadsDiscord, Et as buildChannelKeyCandidates, F as fetchMemberInfoDiscord, G as uploadStickerDiscord, H as timeoutMemberDiscord, I as fetchRoleInfoDiscord, J as editChannelDiscord, K as createChannelDiscord, L as fetchVoiceStatusDiscord, M as banMemberDiscord, N as createScheduledEventDiscord, O as readMessagesDiscord, Ot as resolveChannelEntryMatchWithFallback, P as fetchChannelInfoDiscord, Q as stripUndefinedFields, R as kickMemberDiscord, S as deleteMessageDiscord, St as resolveDiscordSystemLocation, T as listPinsDiscord, Tt as applyChannelMatchMeta, U as listGuildEmojisDiscord, V as removeRoleDiscord, W as uploadEmojiDiscord, X as removeChannelPermissionDiscord, Y as moveChannelDiscord, Z as setChannelPermissionDiscord, _ as sendPollDiscord, _t as resolveDiscordShouldRequireMention, a as removeReactionDiscord, at as resolveDiscordChannelId, b as sendWebhookMessageDiscord, bt as formatDiscordReactionEmoji, c as formatDiscordComponentEventText, ct as allowListMatches$1, d as parseDiscordModalCustomId, dt as normalizeDiscordSlug, et as hasAnyGuildPermissionDiscord, f as parseDiscordModalCustomIdForCarbon, ft as resolveDiscordAllowListMatch, g as sendMessageDiscord, gt as resolveDiscordOwnerAllowFrom, h as resolveDiscordModalEntry, ht as resolveDiscordMemberAccessState, i as removeOwnReactionsDiscord, it as parseDiscordTarget, j as addRoleDiscord, k as searchMessagesDiscord, l as parseDiscordComponentCustomId, lt as isDiscordGroupAllowedByPolicy, m as resolveDiscordComponentEntry, mt as resolveDiscordGuildEntry, n as fetchReactionsDiscord, nt as createDiscordClient, o as sendDiscordComponentMessage, ot as listDiscordDirectoryGroupsLive, p as readDiscordComponentSpec, pt as resolveDiscordChannelConfigWithFallback, q as deleteChannelDiscord, r as reactMessageDiscord, rt as createDiscordRestClient, s as createDiscordFormModal, st as listDiscordDirectoryPeersLive, tt as chunkDiscordTextWithMode, u as parseDiscordComponentCustomIdForCarbon, ut as normalizeDiscordAllowList, v as sendStickerDiscord, vt as resolveGroupDmAllow, w as fetchMessageDiscord, wt as fetchDiscord, x as createThreadDiscord, xt as formatDiscordUserTag, y as sendVoiceMessageDiscord, yt as shouldEmitDiscordReactionNotification, z as listGuildChannelsDiscord } from "./send-CfejAK2u.js";
+import { C as getGlobalHookRunner, S as parseInlineDirectives$1, _ as normalizeTargetForProvider, a as normalizeOutboundPayloadsForJson, b as MEDIA_TOKEN_RE, c as applyReplyThreading, d as isRenderablePayload, f as shouldSuppressMessagingToolReplies, g as normalizeChannelTargetInput, h as buildTargetResolverSignature, i as normalizeOutboundPayloads, l as filterMessagingToolDuplicates, m as resolveReplyToMode, o as normalizeReplyPayloadsForDelivery, p as createReplyToModeFilterForChannel, r as formatOutboundPayloadLog, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as filterMessagingToolMediaDuplicates, v as throwIfAborted, w as initializeGlobalHookRunner, x as splitMediaFromOutput, y as parseReplyDirectives } from "./deliver--ff__Iq0.js";
 import { a as logMessageProcessed, c as logWebhookError, d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, i as logLaneEnqueue, l as logWebhookProcessed, m as isDiagnosticsEnabled, o as logMessageQueued, p as emitDiagnosticEvent, r as logLaneDequeue, s as logSessionStateChange, t as diag, u as logWebhookReceived } from "./diagnostic-Kbl70eCP.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-C1vRJs5w.js";
 import { n as resolveSignalAccount, t as listEnabledSignalAccounts } from "./accounts-8zZqL37v.js";
-import { $ as isVoiceCompatibleAudio, A as extractTelegramLocation, B as normalizeAllowFromWithStore$1, C as buildTelegramGroupFrom, D as buildTypingThreadParams, E as buildTelegramThreadParams, F as resolveTelegramMediaPlaceholder, G as formatLocationText, H as firstDefined$1, I as resolveTelegramReplyId, J as readChannelAllowFromStore, K as toLocationContext, L as resolveTelegramStreamMode, M as normalizeForwardedContext, N as resolveTelegramForumThreadId, O as describeReplyTarget, P as resolveTelegramGroupAllowFromContext, Q as listPairingChannels, R as resolveTelegramThreadSpec, S as buildSenderName, T as buildTelegramParentPeer, U as isSenderIdAllowed, V as resolveSenderAllowMatch, W as mergeAllowFromSources, X as upsertChannelPairingRequest, Y as removeChannelAllowFromStoreEntry, Z as getPairingAdapter, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildGroupLabel, c as sendStickerTelegram, d as wasSentByBot, et as parseTelegramTarget, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as hasBotMention, k as expandTextLinks, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as addChannelAllowFromStoreEntry, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, tt as resolveTelegramTargetChatType, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramGroupPeerId, x as buildSenderLabel, y as withTelegramApiErrorLogging, z as isSenderAllowed$1 } from "./send-B5kAnKqP.js";
+import { $ as isVoiceCompatibleAudio, A as extractTelegramLocation, B as normalizeAllowFromWithStore$1, C as buildTelegramGroupFrom, D as buildTypingThreadParams, E as buildTelegramThreadParams, F as resolveTelegramMediaPlaceholder, G as formatLocationText, H as firstDefined$1, I as resolveTelegramReplyId, J as readChannelAllowFromStore, K as toLocationContext, L as resolveTelegramStreamMode, M as normalizeForwardedContext, N as resolveTelegramForumThreadId, O as describeReplyTarget, P as resolveTelegramGroupAllowFromContext, Q as listPairingChannels, R as resolveTelegramThreadSpec, S as buildSenderName, T as buildTelegramParentPeer, U as isSenderIdAllowed, V as resolveSenderAllowMatch, W as mergeAllowFromSources, X as upsertChannelPairingRequest, Y as removeChannelAllowFromStoreEntry, Z as getPairingAdapter, _ as resolveTelegramFetch, a as reactMessageTelegram, b as buildGroupLabel, c as sendStickerTelegram, d as wasSentByBot, et as parseTelegramTarget, f as isRecoverableTelegramNetworkError, g as wrapFileReferencesInHtml, h as renderTelegramHtmlText, i as editMessageTelegram, j as hasBotMention, k as expandTextLinks, m as markdownToTelegramHtml, n as createForumTopicTelegram, o as sendMessageTelegram, p as markdownToTelegramChunks, q as addChannelAllowFromStoreEntry, r as deleteMessageTelegram, s as sendPollTelegram, t as buildInlineKeyboard, tt as resolveTelegramTargetChatType, u as resolveTelegramVoiceSend, v as splitTelegramCaption, w as buildTelegramGroupPeerId, x as buildSenderLabel, y as withTelegramApiErrorLogging, z as isSenderAllowed$1 } from "./send-_CmB6CKB.js";
 import { d as detectMime, f as extensionForMime, g as isGifMedia, h as isAudioFileName, i as getImageMetadata, m as imageMimeFromFormat, s as resizeToJpeg, x as mediaKindFromMime, y as MAX_IMAGE_BYTES } from "./image-ops-ByaQt43P.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-j5tVLINv.js";
 import { a as isMarkdownCapableMessageChannel, c as resolveGatewayMessageChannel, d as GATEWAY_CLIENT_MODES, f as GATEWAY_CLIENT_NAMES, i as isInternalMessageChannel, l as resolveMessageChannel, n as isDeliverableMessageChannel, o as listDeliverableMessageChannels, r as isGatewayMessageChannel, s as normalizeMessageChannel, t as INTERNAL_MESSAGE_CHANNEL, u as GATEWAY_CLIENT_IDS } from "./message-channel-BQINJQIT.js";
-import { $ as mergeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as updateSessionStoreEntry, Jt as ensureSessionHeader, K as updateLastRoute, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as deliveryContextKey, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as resolveCacheTtlMs$1, Xt as resolveBootstrapTotalMaxChars, Y as isCacheEnabled, Yt as resolveBootstrapMaxChars, Z as deliveryContextFromSession, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as DEFAULT_RESET_TRIGGERS, a as isMessagingToolDuplicateNormalized, at as countToolResults, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as applyInputProvenanceToUserMessage, d as isAntigravityClaude, dt as resolveSessionKey, et as normalizeDeliveryContext, f as isGoogleModelApi, ft as evaluateSessionFreshness, g as formatBillingErrorMessage, gt as resolveThreadFlag, h as formatAssistantErrorText, ht as resolveSessionResetType, it as capArrayByJsonBytes, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as hasInterSessionUserProvenance, m as classifyFailoverReason, mt as resolveSessionResetPolicy, n as validateGeminiTurns, nt as normalizeAccountId$3, o as normalizeTextForComparison, ot as extractToolCallNames, p as BILLING_ERROR_USER_MESSAGE, pt as resolveChannelResetConfig, q as updateSessionStore, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as archiveSessionTranscripts, s as sanitizeSessionMessagesImages, st as INPUT_PROVENANCE_KIND_VALUES, t as validateAnthropicTurns, tt as normalizeSessionDeliveryFields, u as downgradeOpenAIReasoningBlocks, ut as normalizeInputProvenance, v as getApiErrorPayloadFingerprint, vt as resolveFreshSessionTotalTokens, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, yt as canonicalizeMainSessionAlias, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-TcYQOZAY.js";
-import { A as VERSION, C as getConfigValueAtPath, D as isSafeExecutableValue, E as unsetConfigValueAtPath, O as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, S as unsetConfigOverride, T as setConfigValueAtPath, _ as parseDurationMs, a as writeConfigFile, b as resetConfigOverrides, c as TELEGRAM_COMMAND_NAME_PATTERN, f as isInboundPathAllowed, g as normalizeScpRemoteHost, h as resolveIMessageRemoteAttachmentRoots, i as resolveConfigSnapshotHash, k as resolveAgentMaxConcurrent, l as normalizeTelegramCommandName, m as resolveIMessageAttachmentRoots, n as loadConfig, o as validateConfigObjectWithPlugins, r as readConfigFileSnapshot, u as resolveTelegramCustomCommands, v as validateJsonSchemaValue, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-BAVNLbja.js";
+import { $ as mergeDeliveryContext, A as isTransientHttpError, At as DEFAULT_UPLOAD_DIR, Bt as expandToolGroups, C as isContextOverflowError, Ct as resolveGroupSessionKey, D as isRateLimitAssistantError, Dt as registerBrowserRoutes, E as isLikelyContextOverflowError, Et as createBrowserRouteContext, F as resolveSandboxContext, Ft as resolveSandboxConfigForAgent, Gt as compileGlobPatterns, H as loadSessionStore, Ht as normalizeToolName, I as resolveSandboxRuntimeStatus, It as applyOwnerOnlyToolPolicy, J as updateSessionStoreEntry, Jt as ensureSessionHeader, K as updateLastRoute, Kt as matchesAnyGlobPattern, L as extractDeliveryInfo, Lt as buildPluginToolGroups, M as parseImageSizeError, Mt as getBridgeAuthForPort, N as sanitizeUserFacingText, Nt as ensureBrowserControlAuth, O as isRawApiErrorPayload, Ot as resolveBrowserConfig, P as ensureSandboxWorkspaceForSession, Pt as resolveBrowserControlAuth, Q as deliveryContextKey, R as parseSessionThreadInfo, Rt as collectExplicitAllowlist, S as isCompactionFailureError, St as deriveSessionMetaPatch, T as isFailoverErrorMessage, Tt as resolveSessionLockMaxHoldFromTimeout, U as readSessionUpdatedAt, Ut as resolveToolProfilePolicy, V as resolveAndPersistSessionFile, Vt as mergeAlsoAllowPolicy, W as recordSessionMetaFromInbound, Wt as stripPluginOnlyAllowlist, X as resolveCacheTtlMs$1, Xt as resolveBootstrapTotalMaxChars, Y as isCacheEnabled, Yt as resolveBootstrapMaxChars, Z as deliveryContextFromSession, Zt as sanitizeGoogleTurnOrdering, _ as formatRawAssistantErrorForUi, _t as DEFAULT_RESET_TRIGGERS, a as isMessagingToolDuplicateNormalized, at as countToolResults, b as isBillingAssistantError, bt as resolveExplicitAgentSessionKey, c as extractToolCallsFromAssistant, ct as applyInputProvenanceToUserMessage, d as isAntigravityClaude, dt as resolveSessionKey, et as normalizeDeliveryContext, f as isGoogleModelApi, ft as evaluateSessionFreshness, g as formatBillingErrorMessage, gt as resolveThreadFlag, h as formatAssistantErrorText, ht as resolveSessionResetType, it as capArrayByJsonBytes, j as parseImageDimensionError, jt as resolveExistingPathsWithinRoot, k as isTimeoutErrorMessage, kt as resolveProfile, l as extractToolResultId, lt as hasInterSessionUserProvenance, m as classifyFailoverReason, mt as resolveSessionResetPolicy, n as validateGeminiTurns, nt as normalizeAccountId$3, o as normalizeTextForComparison, ot as extractToolCallNames, p as BILLING_ERROR_USER_MESSAGE, pt as resolveChannelResetConfig, q as updateSessionStore, qt as buildBootstrapContextFiles, r as pickFallbackThinkingLevel, rt as archiveSessionTranscripts, s as sanitizeSessionMessagesImages, st as INPUT_PROVENANCE_KIND_VALUES, t as validateAnthropicTurns, tt as normalizeSessionDeliveryFields, u as downgradeOpenAIReasoningBlocks, ut as normalizeInputProvenance, v as getApiErrorPayloadFingerprint, vt as resolveFreshSessionTotalTokens, w as isFailoverAssistantError, wt as acquireSessionWriteLock, x as isCloudCodeAssistFormatError, xt as resolveMainSessionKey, y as isAuthAssistantError, yt as canonicalizeMainSessionAlias, z as appendAssistantMessageToSessionTranscript, zt as expandPolicyWithPluginGroups } from "./pi-embedded-helpers-BPP4adeW.js";
+import { A as VERSION, C as getConfigValueAtPath, D as isSafeExecutableValue, E as unsetConfigValueAtPath, O as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, S as unsetConfigOverride, T as setConfigValueAtPath, _ as parseDurationMs, a as writeConfigFile, b as resetConfigOverrides, c as TELEGRAM_COMMAND_NAME_PATTERN, f as isInboundPathAllowed, g as normalizeScpRemoteHost, h as resolveIMessageRemoteAttachmentRoots, i as resolveConfigSnapshotHash, k as resolveAgentMaxConcurrent, l as normalizeTelegramCommandName, m as resolveIMessageAttachmentRoots, n as loadConfig, o as validateConfigObjectWithPlugins, r as readConfigFileSnapshot, u as resolveTelegramCustomCommands, v as validateJsonSchemaValue, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-CbBZUq-Q.js";
 import { c as normalizePluginsConfig, f as isPathInsideWithRealpath, i as safeStatSync, l as resolveEnableState, n as discoverSymiPlugins, p as isDangerousHostEnvVarName, r as isPathInside, s as applyTestPluginDefaults, t as loadPluginManifestRegistry, u as resolveMemorySlotDecision } from "./manifest-registry-DWdYdchb.js";
-import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-B14NNyfm.js";
+import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-t-stBgN6.js";
 import { c as assertSandboxPath, d as resolveSandboxedMediaSource, f as applySkillEnvOverrides, i as resolveSkillsPromptForRun, l as resolveSandboxInputPath, n as buildWorkspaceSkillSnapshot, p as applySkillEnvOverridesFromSnapshot, r as loadWorkspaceSkillEntries, s as assertMediaNotDataUrl } from "./skills-XEbTRNYL.js";
 import { n as formatErrorMessage, r as formatUncaughtError } from "./errors-CPfngF0S.js";
 import { i as isBlockedHostnameOrIp, o as normalizeHostname, t as SsrFBlockedError } from "./ssrf-CxfFyMRZ.js";
@@ -36,8 +36,8 @@ import { t as resolveIMessageAccount } from "./accounts-DImOt9jX.js";
 import { i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as resolveSessionTranscriptsDirForAgent, r as resolveSessionFilePathOptions, s as resolveStorePath, t as resolveDefaultSessionStorePath } from "./paths-DkMamAQ-.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-C8Tqw4td.js";
 import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-ChC2CXaN.js";
-import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-MNvheU8U.js";
-import { a as resolveMemorySearchConfig, i as resolveOllamaBaseUrl, r as probeOllamaEmbeddingModels, t as MemoryIndexManager } from "./manager-D6E6EGWa.js";
+import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-D5bsPk2_.js";
+import { a as resolveMemorySearchConfig, i as resolveOllamaBaseUrl, r as probeOllamaEmbeddingModels, t as MemoryIndexManager } from "./manager-CztTHQhN.js";
 import { c as normalizeExtraMemoryPaths, f as runTasksWithConcurrency, s as listMemoryFiles } from "./internal-479FB0St.js";
 import { n as retryAsync } from "./retry-QGp0jvVi.js";
 import { a as createActionGate, c as jsonResult, d as readReactionParams, f as readStringArrayParam, l as parseAvailableTags, m as readStringParam, n as missingTargetError, o as imageResult, p as readStringOrNumberParam, r as unknownTargetError, s as imageResultFromFile, t as ambiguousTargetError, u as readNumberParam } from "./target-errors-Dm716SF3.js";
@@ -49,18 +49,18 @@ import { a as loadWebMedia, i as getDefaultLocalRoots } from "./ir-0kwEfxD4.js";
 import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-ke7KirEH.js";
 import { c as getSkillsSnapshotVersion, d as createAsyncLock, f as readJsonFile, i as resolveSkillCommandInvocation, l as pruneExpiredPending, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, p as writeJsonAtomic, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as resolvePairingPaths } from "./skill-commands-CSF7Poen.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-CgGv6nTy.js";
-import { _ as resolveMediaUnderstandingScope, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as normalizeMediaUnderstandingChatType, h as resolveTimeoutMs$1, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveConcurrency, n as createMediaAttachmentCache, o as runCapability, p as registerUnhandledRejectionHandler, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as CLI_OUTPUT_MAX_BUFFER, y as applyTemplate } from "./runner-DFuAePEr.js";
+import { _ as resolveMediaUnderstandingScope, a as resolveMediaAttachmentLocalRoots, c as loadModelCatalog, d as resolveAttachmentKind, f as buildRandomTempFilePath, g as normalizeMediaUnderstandingChatType, h as resolveTimeoutMs$1, i as resolveAutoImageModel, l as modelSupportsVision, m as resolveConcurrency, n as createMediaAttachmentCache, o as runCapability, p as registerUnhandledRejectionHandler, r as normalizeMediaAttachments, s as findModelInCatalog, t as buildProviderRegistry, v as CLI_OUTPUT_MAX_BUFFER, y as applyTemplate } from "./runner-B_6xBcPB.js";
 import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-WLZaC77l.js";
 import { n as recordCommandPoll, r as resetCommandPollCount } from "./command-poll-backoff-BaoETsQI.js";
 import { n as recordChannelActivity, r as createDiscordRetryRunner, t as getChannelActivity } from "./channel-activity-C-6tM-GK.js";
 import { n as normalizePollInput } from "./polls-Coxe0Akm.js";
 import { t as convertMarkdownTables } from "./tables-BE0lT1IV.js";
-import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal } from "./send-DGbBPbV0.js";
-import { a as formatIMessageChatTarget, c as parseIMessageTarget, i as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, o as isAllowedIMessageSender, r as createIMessageRpcClient, s as normalizeIMessageHandle, t as sendMessageIMessage } from "./send-Iocbaltq.js";
+import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal } from "./send-dohExhb8.js";
+import { a as formatIMessageChatTarget, c as parseIMessageTarget, i as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, o as isAllowedIMessageSender, r as createIMessageRpcClient, s as normalizeIMessageHandle, t as sendMessageIMessage } from "./send-C6-rN_Li.js";
 import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-Dd2_hyM2.js";
 import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-CFRe6XNa.js";
 import { t as makeProxyFetch } from "./proxy-DaT-KQ7w.js";
-import { a as createReplyReferencePlanner, i as resolveSlackThreadTs, n as deliverReplies$3, t as createSlackReplyDeliveryPlan } from "./replies-D0NFBbd-.js";
+import { a as createReplyReferencePlanner, i as resolveSlackThreadTs, n as deliverReplies$3, t as createSlackReplyDeliveryPlan } from "./replies-BV7oFP7Z.js";
 import { t as getActiveWebListener } from "./active-listener-OKZn7EWc.js";
 import { createRequire } from "node:module";
 import * as path$1 from "node:path";
@@ -3473,7 +3473,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-D6E6EGWa.js").then((n) => n.n);
+						const { MemoryIndexManager } = await import("./manager-CztTHQhN.js").then((n) => n.n);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -3486,7 +3486,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-D6E6EGWa.js").then((n) => n.n);
+		const { MemoryIndexManager } = await import("./manager-CztTHQhN.js").then((n) => n.n);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -7367,7 +7367,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-D0bWiRCg.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver--ff__Iq0.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -10252,16 +10252,16 @@ function shouldComputeCommandAuthorized(text, cfg, options) {
 
 //#endregion
 //#region src/channels/sender-label.ts
-function normalize(value) {
+function normalize$1(value) {
 	const trimmed = value?.trim();
 	return trimmed ? trimmed : void 0;
 }
 function resolveSenderLabel(params) {
-	const name = normalize(params.name);
-	const username = normalize(params.username);
-	const tag = normalize(params.tag);
-	const e164 = normalize(params.e164);
-	const id = normalize(params.id);
+	const name = normalize$1(params.name);
+	const username = normalize$1(params.username);
+	const tag = normalize$1(params.tag);
+	const e164 = normalize$1(params.e164);
+	const id = normalize$1(params.id);
 	const display = name ?? username ?? tag ?? "";
 	const idPart = e164 ?? id ?? "";
 	if (display && idPart && display !== idPart) return `${display} (${idPart})`;
@@ -30509,8 +30509,39 @@ const GatewayToolSchema = Type.Object({
 	baseHash: Type.Optional(Type.String()),
 	sessionKey: Type.Optional(Type.String()),
 	note: Type.Optional(Type.String()),
-	restartDelayMs: Type.Optional(Type.Number())
+	restartDelayMs: Type.Optional(Type.Number()),
+	userRequestAcknowledgment: Type.Optional(Type.String())
 });
+/** Actions that mutate gateway state and require explicit user authorization. */
+const DESTRUCTIVE_ACTIONS = new Set([
+	"config.apply",
+	"config.patch",
+	"update.run"
+]);
+/** Minimum length for a meaningful authorization message. */
+const MIN_AUTHORIZATION_LENGTH = 10;
+/**
+* Asserts the user's request was explicitly acknowledged for destructive
+* actions. Throws a descriptive error if the acknowledgment is missing,
+* empty, or trivially short.
+*
+* NOTE: This is defense-in-depth, not a hard barrier. A determined model
+* could still populate the field with fabricated text. The barrier exists
+* to:
+*   1. Force the agent to deliberately compose a justification (vs. blind
+*      tool invocation).
+*   2. Provide an audit trail (the acknowledgment is logged with the tool
+*      call args).
+*   3. Surface for future tightening (e.g., matching against real session
+*      history).
+*/
+function assertUserAuthorization(action, params) {
+	if (!DESTRUCTIVE_ACTIONS.has(action)) return;
+	const ack = params.userRequestAcknowledgment;
+	const trimmed = typeof ack === "string" ? ack.trim() : "";
+	if (!trimmed) throw new Error(`Action '${action}' requires an explicit user authorization. Pass userRequestAcknowledgment with a paraphrase of the user's request (e.g., "user said: please update Symi"). If the user did not explicitly request this action, ask them first instead of invoking it.`);
+	if (trimmed.length < MIN_AUTHORIZATION_LENGTH) throw new Error(`Action '${action}' requires a substantive userRequestAcknowledgment (minimum ${MIN_AUTHORIZATION_LENGTH} characters describing the user's request). Received: ${JSON.stringify(trimmed)}.`);
+}
 function createGatewayTool(opts) {
 	return {
 		label: "Gateway",
@@ -30521,6 +30552,7 @@ function createGatewayTool(opts) {
 		execute: async (_toolCallId, args) => {
 			const params = args;
 			const action = readStringParam(params, "action", { required: true });
+			assertUserAuthorization(action, params);
 			if (action === "restart") {
 				if (!isRestartEnabled(opts?.config)) throw new Error("Gateway restart is disabled (commands.restart=false).");
 				const sessionKey = typeof params.sessionKey === "string" && params.sessionKey.trim() ? params.sessionKey.trim() : opts?.agentSessionKey?.trim() || void 0;
@@ -39502,6 +39534,38 @@ function setCliSessionId(entry, provider, sessionId) {
 //#endregion
 //#region src/config/model-profiles-builtin.ts
 /**
+* Shared safety + output-style additions applied to most built-in profiles
+* and the Generic fallback. These rules came from a long history of
+* model-specific bugs (verification-monologue padding, "I have addressed"
+* preambles, post-answer assessment lists). Keeping them in one place
+* means a new profile inherits sane defaults instead of starting empty.
+*
+* Stage 2.4 of the prompt-reduction plan: rules that ALL profiles need
+* live here; profile-specific rules (control-token stripping, tool-arg
+* cleanup, reasoning hints) live in their own per-profile additions.
+*
+* Exported so resolve-model-profile.ts can apply the same additions to
+* the Generic fallback profile — no model resolves to "Generic" without
+* inheriting the safety/style rules.
+*/
+const SAFETY_AND_STYLE_ADDITIONS = [
+	"CRITICAL OUTPUT RULES:",
+	"- Your response ends when you have delivered the answer. Do not append anything after.",
+	"- Do not begin any sentence with 'I have addressed' or 'I've reviewed'.",
+	"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
+	"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
+	"- If you need to verify your work, do so before writing your response, not after.",
+	"- Send brief progress updates on long tasks so the user knows you are active."
+];
+/** Hint for native-reasoning models (Nemotron, Qwen 3.5/3.6) to keep
+* planning internal. Not applied to Gemma/Ollama because those models
+* don't have structured thinking and the rule confuses them. */
+const REASONING_DISCIPLINE_ADDITION = "- Keep planning and reasoning internal. Only speak when you have a result or need user input.";
+/** Hint for models that leak Gemma-style control tokens (Gemma family,
+* Ollama hosting any uncensored open model). Forces tool-arg cleanup and
+* forbids leaking turn markers in user-visible text. */
+const CONTROL_TOKEN_ADDITIONS = ["- Do not output raw control tokens, channel tags, or turn markers.", "- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."];
+/**
 * Built-in model profiles.  Ordered from most-specific to least-specific so
 * that `resolveModelProfile` can return the first match.
 *
@@ -39535,17 +39599,7 @@ const BUILTIN_PROFILES = [
 			hasStructuredThinking: false,
 			validateToolArgs: true
 		},
-		promptAdditions: [
-			"CRITICAL OUTPUT RULES:",
-			"- Your response ends when you have delivered the answer. Do not append anything after.",
-			"- Do not output raw control tokens, channel tags, or turn markers.",
-			"- Do not begin any sentence with 'I have addressed' or 'I've reviewed'.",
-			"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
-			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
-			"- If you need to verify your work, do so before writing your response, not after.",
-			"- Send brief progress updates on long tasks so the user knows you are active.",
-			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
-		],
+		promptAdditions: [...SAFETY_AND_STYLE_ADDITIONS, ...CONTROL_TOKEN_ADDITIONS],
 		ui: {
 			badge: "Local",
 			watchdogMs: 9e5,
@@ -39572,16 +39626,7 @@ const BUILTIN_PROFILES = [
 			hasStructuredThinking: true,
 			validateToolArgs: false
 		},
-		promptAdditions: [
-			"CRITICAL OUTPUT RULES:",
-			"- Your response ends when you have delivered the answer. Do not append anything after.",
-			"- Do not begin any sentence with 'I have addressed' or 'I've reviewed'.",
-			"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
-			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
-			"- If you need to verify your work, do so before writing your response, not after.",
-			"- Keep planning and reasoning internal. Only speak when you have a result or need user input.",
-			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active."
-		],
+		promptAdditions: [...SAFETY_AND_STYLE_ADDITIONS, REASONING_DISCIPLINE_ADDITION],
 		ui: {
 			badge: "Local",
 			watchdogMs: 9e5,
@@ -39607,7 +39652,7 @@ const BUILTIN_PROFILES = [
 			hasStructuredThinking: true,
 			validateToolArgs: false
 		},
-		promptAdditions: [],
+		promptAdditions: [...SAFETY_AND_STYLE_ADDITIONS],
 		ui: {
 			badge: "API",
 			watchdogMs: 3e5,
@@ -39640,15 +39685,7 @@ const BUILTIN_PROFILES = [
 			hasStructuredThinking: true,
 			validateToolArgs: false
 		},
-		promptAdditions: [
-			"CRITICAL OUTPUT RULES:",
-			"- Your response ends when you have delivered the answer. Do not append anything after.",
-			"- Do not begin any sentence with 'I have addressed' or 'I've reviewed'.",
-			"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
-			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
-			"- Keep planning and reasoning internal. Only speak when you have a result or need user input.",
-			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active."
-		],
+		promptAdditions: [...SAFETY_AND_STYLE_ADDITIONS, REASONING_DISCIPLINE_ADDITION],
 		ui: {
 			badge: "Spider",
 			watchdogMs: 9e5,
@@ -39681,16 +39718,7 @@ const BUILTIN_PROFILES = [
 			hasStructuredThinking: false,
 			validateToolArgs: true
 		},
-		promptAdditions: [
-			"CRITICAL OUTPUT RULES:",
-			"- Your response ends when you have delivered the answer. Do not append anything after.",
-			"- Do not output raw control tokens, channel tags, or turn markers.",
-			"- Do not begin any sentence with 'I have addressed' or 'I've reviewed'.",
-			"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
-			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
-			"- Send brief progress updates on long tasks so the user knows you are active.",
-			"- When calling tools, provide arguments as clean values only. Never include <|, |>, or XML-like tags in tool argument values. For exec/bash commands, provide only valid shell syntax."
-		],
+		promptAdditions: [...SAFETY_AND_STYLE_ADDITIONS, ...CONTROL_TOKEN_ADDITIONS],
 		ui: {
 			badge: "Spider",
 			watchdogMs: 6e5,
@@ -39722,16 +39750,7 @@ const BUILTIN_PROFILES = [
 			hasStructuredThinking: true,
 			validateToolArgs: false
 		},
-		promptAdditions: [
-			"CRITICAL OUTPUT RULES:",
-			"- Your response ends when you have delivered the answer. Do not append anything after.",
-			"- Do not begin any sentence with 'I have addressed' or 'I've reviewed'.",
-			"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
-			"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
-			"- If you need to verify your work, do so before writing your response, not after.",
-			"- Keep planning and reasoning internal. Only speak when you have a result or need user input.",
-			"- When working on multi-step tasks, send a brief one-line status update so the user knows you are active."
-		],
+		promptAdditions: [...SAFETY_AND_STYLE_ADDITIONS, REASONING_DISCIPLINE_ADDITION],
 		ui: {
 			badge: "CoreWeave",
 			watchdogMs: 9e5,
@@ -39742,7 +39761,15 @@ const BUILTIN_PROFILES = [
 
 //#endregion
 //#region src/config/resolve-model-profile.ts
-/** Default profile returned when no match is found. */
+/**
+* Default profile returned when no match is found.
+*
+* Stage 2.4 of the prompt-reduction plan: the Generic fallback now ships
+* the same safety+style additions as every named profile, so newly-added
+* models without a profile entry inherit sane defaults instead of
+* starting empty (which would silently regress safety rules until someone
+* notices and adds a profile).
+*/
 const FALLBACK_PROFILE = {
 	match: "*",
 	label: "Generic",
@@ -39761,7 +39788,7 @@ const FALLBACK_PROFILE = {
 		hasStructuredThinking: false,
 		validateToolArgs: false
 	},
-	promptAdditions: [],
+	promptAdditions: [...SAFETY_AND_STYLE_ADDITIONS],
 	ui: {
 		watchdogMs: 3e5,
 		armWatchdogOnSend: true
@@ -46347,10 +46374,90 @@ async function prepareSessionManagerForRun(params) {
 	}
 }
 
+//#endregion
+//#region src/agents/system-prompt-skills-autoload.ts
+const FRONTMATTER_RE = /^---\s*\n[\s\S]*?\n---\s*\n?/;
+let cachedPackageRoot;
+function getPackageRoot() {
+	if (cachedPackageRoot === void 0) cachedPackageRoot = resolveSymiPackageRootSync({});
+	return cachedPackageRoot;
+}
+function safeSkillName(name) {
+	return /^[a-zA-Z0-9_][a-zA-Z0-9._-]{0,59}$/.test(name);
+}
+function tryLoadSkill(skillName, root) {
+	const skillPath = path.join(root, "skills", skillName, "SKILL.md");
+	try {
+		if (!fs.statSync(skillPath).isFile()) return null;
+	} catch {
+		return null;
+	}
+	try {
+		return fs.readFileSync(skillPath, "utf8");
+	} catch {
+		return null;
+	}
+}
+function stripFrontmatter(body) {
+	return body.replace(FRONTMATTER_RE, "").trimStart();
+}
+/**
+* Resolves and loads each named skill. Returns the inlinable Markdown block,
+* or empty string when no skills loaded / minimal mode / no names supplied.
+*/
+function buildAutoLoadedSkillsBlock(opts) {
+	if (opts.minimalMode) return "";
+	const names = opts.skillNames.filter((n) => typeof n === "string" && n.trim().length > 0);
+	if (names.length === 0) return "";
+	const packageRoot = getPackageRoot();
+	const loaded = [];
+	for (const rawName of names) {
+		const name = rawName.trim();
+		if (!safeSkillName(name)) {
+			logWarn(`autoLoadInline: skipping invalid skill name '${rawName}'`);
+			continue;
+		}
+		let body = null;
+		let source = "bundled";
+		if (opts.workspaceDir) {
+			body = tryLoadSkill(name, opts.workspaceDir);
+			source = "workspace";
+		}
+		if (body === null && packageRoot) {
+			body = tryLoadSkill(name, packageRoot);
+			source = "bundled";
+		}
+		if (body === null) {
+			logWarn(`autoLoadInline: skill '${name}' not found in workspace or bundled skills`);
+			continue;
+		}
+		const stripped = stripFrontmatter(body).trim();
+		if (!stripped) {
+			logWarn(`autoLoadInline: skill '${name}' has empty body after frontmatter strip; skipping`);
+			continue;
+		}
+		loaded.push({
+			name,
+			body: stripped,
+			source
+		});
+	}
+	if (loaded.length === 0) return "";
+	return [
+		"",
+		"---",
+		"",
+		"## Auto-loaded Skills",
+		"",
+		loaded.map((skill) => `<!-- auto-loaded: ${skill.name} (${skill.source}) -->\n${skill.body}`).join("\n\n---\n\n"),
+		""
+	].join("\n");
+}
+
 //#endregion
 //#region src/agents/pi-embedded-runner/system-prompt.ts
 function buildEmbeddedSystemPrompt(params) {
-	return buildAgentSystemPrompt({
+	const corePrompt = buildAgentSystemPrompt({
 		workspaceDir: params.workspaceDir,
 		defaultThinkLevel: params.defaultThinkLevel,
 		reasoningLevel: params.reasoningLevel,
@@ -46378,6 +46485,14 @@ function buildEmbeddedSystemPrompt(params) {
 		contextFiles: params.contextFiles,
 		memoryCitationsMode: params.memoryCitationsMode
 	});
+	const promptMode = params.promptMode ?? "full";
+	const isMinimal = promptMode === "minimal" || promptMode === "none";
+	const skillsBlock = buildAutoLoadedSkillsBlock({
+		skillNames: params.autoLoadInlineSkills ?? [],
+		workspaceDir: params.workspaceDir,
+		minimalMode: isMinimal
+	});
+	return skillsBlock ? `${corePrompt}${skillsBlock}` : corePrompt;
 }
 function createSystemPromptOverride(systemPrompt) {
 	const override = systemPrompt.trim();
@@ -47165,7 +47280,8 @@ async function runEmbeddedAttempt(params) {
 			userTime,
 			userTimeFormat,
 			contextFiles,
-			memoryCitationsMode: params.config?.memory?.citations
+			memoryCitationsMode: params.config?.memory?.citations,
+			autoLoadInlineSkills: params.config?.skills?.autoLoadInline
 		});
 		const systemPromptReport = buildSystemPromptReport({
 			source: "run",
@@ -51648,7 +51764,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-D0bWiRCg.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver--ff__Iq0.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -55094,7 +55210,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-MNvheU8U.js").then((n) => n.n);
+		const { describeImageWithModel } = await import("./image-D5bsPk2_.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -55517,7 +55633,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-Apnag5S6.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-BBrzemk7.js");
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -57843,7 +57959,7 @@ async function preflightDiscordMessage(params) {
 	let preflightTranscript;
 	const hasAudioAttachment = message.attachments?.some((att) => att.contentType?.startsWith("audio/"));
 	if (!isDirectMessage && shouldRequireMention && hasAudioAttachment && !baseText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-C6vpFnOG.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-CMutcMs5.js");
 		const audioPaths = message.attachments?.filter((att) => att.contentType?.startsWith("audio/")).map((att) => att.url) ?? [];
 		if (audioPaths.length > 0) preflightTranscript = await transcribeFirstAudio({
 			ctx: {
@@ -61626,27 +61742,27 @@ function isVoiceChannelType(type) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-CZoQ03ZE.js");
+			const { sendMessageWhatsApp } = await import("./web-B8GaP73t.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
-			const { sendMessageTelegram } = await import("./send-B5kAnKqP.js").then((n) => n.l);
+			const { sendMessageTelegram } = await import("./send-_CmB6CKB.js").then((n) => n.l);
 			return await sendMessageTelegram(...args);
 		},
 		sendMessageDiscord: async (...args) => {
-			const { sendMessageDiscord } = await import("./send-DLVrnezL.js").then((n) => n.t);
+			const { sendMessageDiscord } = await import("./send-CfejAK2u.js").then((n) => n.t);
 			return await sendMessageDiscord(...args);
 		},
 		sendMessageSlack: async (...args) => {
-			const { sendMessageSlack } = await import("./send-BaBv1rAU.js").then((n) => n.n);
+			const { sendMessageSlack } = await import("./send-vmIzYMwN.js").then((n) => n.n);
 			return await sendMessageSlack(...args);
 		},
 		sendMessageSignal: async (...args) => {
-			const { sendMessageSignal } = await import("./send-DGbBPbV0.js").then((n) => n.i);
+			const { sendMessageSignal } = await import("./send-dohExhb8.js").then((n) => n.i);
 			return await sendMessageSignal(...args);
 		},
 		sendMessageIMessage: async (...args) => {
-			const { sendMessageIMessage } = await import("./send-Iocbaltq.js").then((n) => n.n);
+			const { sendMessageIMessage } = await import("./send-C6-rN_Li.js").then((n) => n.n);
 			return await sendMessageIMessage(...args);
 		}
 	};
@@ -72476,7 +72592,7 @@ async function registerSlackMonitorSlashCommands(params) {
 			});
 			const deliverSlashPayloads = async (replies) => {
 				const [{ deliverSlackSlashReplies }, { resolveChunkMode }, { resolveMarkdownTableMode }] = await Promise.all([
-					import("./replies-D0NFBbd-.js").then((n) => n.r),
+					import("./replies-BV7oFP7Z.js").then((n) => n.r),
 					import("./chunk-Bk95VMr4.js").then((n) => n.s),
 					import("./markdown-tables-XmEPv2t0.js").then((n) => n.t)
 				]);
@@ -74749,7 +74865,7 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	const hasAudio = allMedia.some((media) => media.contentType?.startsWith("audio/"));
 	let preflightTranscript;
 	if (isGroup && requireMention && hasAudio && !hasUserText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-C6vpFnOG.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-CMutcMs5.js");
 		preflightTranscript = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: allMedia.length > 0 ? allMedia.map((m) => m.path) : void 0,
@@ -76894,23 +77010,23 @@ let webLoginQrPromise = null;
 let webChannelPromise = null;
 let whatsappActionsPromise = null;
 function loadWebOutbound() {
-	webOutboundPromise ??= import("./outbound-mG1crIsY.js").then((n) => n.t);
+	webOutboundPromise ??= import("./outbound-CLCy4Nsg.js").then((n) => n.t);
 	return webOutboundPromise;
 }
 function loadWebLogin() {
-	webLoginPromise ??= import("./login-EYdkb0dH.js").then((n) => n.n);
+	webLoginPromise ??= import("./login-B7OJui4y.js").then((n) => n.n);
 	return webLoginPromise;
 }
 function loadWebLoginQr() {
-	webLoginQrPromise ??= import("./login-qr-Apnag5S6.js");
+	webLoginQrPromise ??= import("./login-qr-BBrzemk7.js");
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-CZoQ03ZE.js");
+	webChannelPromise ??= import("./web-B8GaP73t.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
-	whatsappActionsPromise ??= import("./whatsapp-actions-uEcDLORc.js");
+	whatsappActionsPromise ??= import("./whatsapp-actions-BV4mjN5j.js");
 	return whatsappActionsPromise;
 }
 function createPluginRuntime() {
@@ -78375,6 +78491,91 @@ function isToolAllowedByPolicies(name, policies) {
 	return policies.every((policy) => isToolAllowedByPolicyName(name, policy));
 }
 
+//#endregion
+//#region src/agents/pi-tools.read-edit-guard.ts
+const RETRY_GUIDANCE_SUFFIX$1 = " Read the file first, then retry the edit.";
+function readGuardError(filePath) {
+	return /* @__PURE__ */ new Error(`Edit refused: '${filePath}' has not been read in this session. The edit tool requires the agent to read the file first so oldText can match real content rather than hallucinated content.${RETRY_GUIDANCE_SUFFIX$1}`);
+}
+function extractPath(args) {
+	if (!args || typeof args !== "object") return;
+	const record = args;
+	const candidate = record.path ?? record.file_path;
+	if (typeof candidate !== "string") return;
+	const trimmed = candidate.trim();
+	return trimmed.length > 0 ? trimmed : void 0;
+}
+function wrapReadToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordRead(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapWriteToolWithTracker(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const result = await tool.execute(toolCallId, args, signal, onUpdate);
+			if (!(!!result && typeof result === "object" && result.isError === true)) {
+				const filePath = extractPath(args);
+				if (filePath) tracker.recordWrite(filePath);
+			}
+			return result;
+		}
+	};
+}
+function wrapEditToolWithGuard(tool, tracker) {
+	return {
+		...tool,
+		execute: async (toolCallId, args, signal, onUpdate) => {
+			const filePath = extractPath(args);
+			if (filePath && !tracker.hasObserved(filePath)) throw readGuardError(filePath);
+			return tool.execute(toolCallId, args, signal, onUpdate);
+		}
+	};
+}
+
+//#endregion
+//#region src/agents/pi-tools.read-edit-tracker.ts
+function normalize(filePath, workspaceRoot) {
+	if (!workspaceRoot) return filePath;
+	if (path.isAbsolute(filePath)) return path.normalize(filePath);
+	return path.resolve(workspaceRoot, filePath);
+}
+function createReadEditTracker(opts = {}) {
+	const observed = /* @__PURE__ */ new Map();
+	const record = (filePath, kind) => {
+		if (typeof filePath !== "string" || !filePath.trim()) return;
+		const key = normalize(filePath.trim(), opts.workspaceRoot);
+		const prior = observed.get(key);
+		if (kind === "written" || prior !== "written") observed.set(key, kind);
+	};
+	return {
+		recordRead: (filePath) => record(filePath, "read"),
+		recordWrite: (filePath) => record(filePath, "written"),
+		observation: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return null;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.get(key) ?? null;
+		},
+		hasObserved: (filePath) => {
+			if (typeof filePath !== "string" || !filePath.trim()) return false;
+			const key = normalize(filePath.trim(), opts.workspaceRoot);
+			return observed.has(key);
+		},
+		reset: () => {
+			observed.clear();
+		}
+	};
+}
+
 //#endregion
 //#region src/media/sniff-mime-from-base64.ts
 async function sniffMimeFromBase64(base64) {
@@ -78700,6 +78901,22 @@ function wrapToolParamNormalization(tool, requiredParamGroups) {
 		}
 	};
 }
+/**
+* Override a tool's description while preserving execute, parameters, and
+* other properties. Used by Stage 2.5 of the prompt-reduction plan to move
+* usage docs from the system prompt into tool descriptions where they
+* belong contextually.
+*
+* The replacement description should include the upstream's tool-purpose
+* sentence so models that only read the description (without the prompt
+* section) still have the same baseline understanding.
+*/
+function wrapToolWithDescriptionOverride(tool, description) {
+	return {
+		...tool,
+		description
+	};
+}
 function wrapToolWorkspaceRootGuard(tool, root) {
 	return {
 		...tool,
@@ -78940,6 +79157,26 @@ function resolveToolLoopDetectionConfig(params) {
 		}
 	};
 }
+/**
+* Edit tool description. Replaces the upstream's terse one-liner with
+* usage notes migrated from the system prompt's "Edit Tool Best Practices"
+* section in Stage 2.5 of the prompt-reduction plan. Co-locating these
+* notes with the tool means they ship only when edit is in palette, and
+* the system prompt section can be deleted in Stage 4 without losing the
+* guidance.
+*
+* Combined with the read-before-edit guard (Stage 1.3) and the model's
+* own discipline, this should kill the hallucinated-oldText failure class
+* for any well-intentioned model.
+*/
+const EDIT_TOOL_DESCRIPTION = [
+	"Edit a file by replacing exact text. The oldText must match the file EXACTLY (whitespace, indentation, and all).",
+	"Best practices to avoid match failures:",
+	"- Use the SHORTEST unique snippet that identifies the edit location (1-3 lines). Do NOT paste large blocks.",
+	"- ALWAYS read the file first, then copy the exact text from the read output for oldText. The read-before-edit guard refuses edits to unread files.",
+	"- If an edit fails with 'Could not find the exact text', re-read the file and retry with the exact text from the fresh read. Do NOT skip to a different issue.",
+	"- Prefer lines with distinctive content (function names, unique strings) over generic code (braces, blank lines)."
+].join(" ");
 function createSymiCodingTools(options) {
 	const execToolName = "exec";
 	const sandbox = options?.sandbox?.enabled ? options.sandbox : void 0;
@@ -79002,33 +79239,34 @@ function createSymiCodingTools(options) {
 	});
 	if (sandboxRoot && !sandboxFsBridge) throw new Error("Sandbox filesystem bridge is unavailable.");
 	const imageSanitization = resolveImageSanitizationLimits(options?.config);
+	const readEditTracker = createReadEditTracker({ workspaceRoot: sandboxRoot ?? workspaceRoot });
 	const base = codingTools.flatMap((tool) => {
 		if (tool.name === readTool.name) {
 			if (sandboxRoot) {
-				const sandboxed = createSandboxedReadTool({
+				const tracked = wrapReadToolWithTracker(createSandboxedReadTool({
 					root: sandboxRoot,
 					bridge: sandboxFsBridge,
 					modelContextWindowTokens: options?.modelContextWindowTokens,
 					imageSanitization
-				});
-				return [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxed, sandboxRoot) : sandboxed];
+				}), readEditTracker);
+				return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, sandboxRoot) : tracked];
 			}
-			const wrapped = createSymiReadTool(createReadTool(workspaceRoot), {
+			const tracked = wrapReadToolWithTracker(createSymiReadTool(createReadTool(workspaceRoot), {
 				modelContextWindowTokens: options?.modelContextWindowTokens,
 				imageSanitization
-			});
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			}), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "bash" || tool.name === execToolName) return [];
 		if (tool.name === "write") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const tracked = wrapWriteToolWithTracker(wrapToolParamNormalization(createWriteTool(workspaceRoot), CLAUDE_PARAM_GROUPS.write), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(tracked, workspaceRoot) : tracked];
 		}
 		if (tool.name === "edit") {
 			if (sandboxRoot) return [];
-			const wrapped = wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit);
-			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
+			const guarded = wrapEditToolWithGuard(wrapToolWithDescriptionOverride(wrapToolParamNormalization(createEditTool(workspaceRoot), CLAUDE_PARAM_GROUPS.edit), EDIT_TOOL_DESCRIPTION), readEditTracker);
+			return [workspaceOnly ? wrapToolWorkspaceRootGuard(guarded, workspaceRoot) : guarded];
 		}
 		return [tool];
 	});
@@ -79071,22 +79309,18 @@ function createSymiCodingTools(options) {
 		} : void 0,
 		workspaceOnly: applyPatchWorkspaceOnly
 	});
+	const sandboxedEditTool = sandboxRoot ? wrapEditToolWithGuard(createSandboxedEditTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
+	const sandboxedWriteTool = sandboxRoot ? wrapWriteToolWithTracker(createSandboxedWriteTool({
+		root: sandboxRoot,
+		bridge: sandboxFsBridge
+	}), readEditTracker) : null;
 	const withHooks = applyToolPolicyPipeline({
 		tools: applyOwnerOnlyToolPolicy([
 			...base,
-			...sandboxRoot ? allowWorkspaceWrites ? [workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedEditTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), workspaceOnly ? wrapToolWorkspaceRootGuard(createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			}), sandboxRoot) : createSandboxedWriteTool({
-				root: sandboxRoot,
-				bridge: sandboxFsBridge
-			})] : [] : [],
+			...sandboxRoot ? allowWorkspaceWrites && sandboxedEditTool && sandboxedWriteTool ? [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedEditTool, sandboxRoot) : sandboxedEditTool, workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedWriteTool, sandboxRoot) : sandboxedWriteTool] : [] : [],
 			...applyPatchTool ? [applyPatchTool] : [],
 			execTool,
 			processTool,
@@ -79474,7 +79708,8 @@ async function compactEmbeddedPiSessionDirect(params) {
 			userTime,
 			userTimeFormat,
 			contextFiles,
-			memoryCitationsMode: params.config?.memory?.citations
+			memoryCitationsMode: params.config?.memory?.citations,
+			autoLoadInlineSkills: params.config?.skills?.autoLoadInline
 		}));
 		const sessionLock = await acquireSessionWriteLock({
 			sessionFile: params.sessionFile,