@symerian/symi 3.0.2 → 3.0.3

package/dist/{onboarding-BngFnwT6.js → onboarding-BZVJ24wI.js}

@@ -223,7 +223,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const { ensureAuthProfileStore } = await import("./auth-profiles-BSkXADb-.js").then((n) => n.t);
 	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-DF6R_pgV.js").then((n) => n.t);
 	const { promptCustomApiConfig } = await import("./onboard-custom-CWYKA3Nv.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-bOht3his.js").then((n) => n.t);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-CSXt138B.js").then((n) => n.t);
 	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-d0bCdcqT.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
@@ -276,7 +276,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-DTKQE9kt.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-C5sKGabO.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-CkFD8gYa.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -302,7 +302,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-BA8-Tnhc.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-YB2UOZUK.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding-DNIz481s.js → onboarding-DgpTBpWU.js}

@@ -225,7 +225,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const { ensureAuthProfileStore } = await import("./auth-profiles-CtBXKml4.js").then((n) => n.t);
 	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-PeQmwVpp.js").then((n) => n.t);
 	const { promptCustomApiConfig } = await import("./onboard-custom-C_87_dQz.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-kJVkaHx6.js").then((n) => n.t);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-BrH3g0l7.js").then((n) => n.t);
 	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-BxJYfB1N.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
@@ -278,7 +278,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-BL5D1_sT.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-B1fWI5k5.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-Cky54l0-.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -304,7 +304,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-B-x_trN9.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-DVSMLcSy.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding.finalize-B-x_trN9.js → onboarding.finalize-DVSMLcSy.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { h as pathExists, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./tokens-Cz6cgZ7r.js";
-import "./unified-runner-CdBxbcO2.js";
+import "./unified-runner-DWZT5BCl.js";
 import "./registry-ClO_zVv-.js";
 import { p as restoreTerminalState } from "./subsystem-zqierDLj.js";
 import "./auth-profiles-CtBXKml4.js";
@@ -56,8 +56,8 @@ import "./send-CrFVrFoV.js";
 import "./model-JOScPOPJ.js";
 import "./pi-model-discovery-CXXH7biP.js";
 import "./reply-prefix-DnXliXio.js";
-import "./memory-cli-BEZM7jn9.js";
-import "./manager-DKUOUCmo.js";
+import "./memory-cli-D69x8sVz.js";
+import "./manager-DjHARmFk.js";
 import "./gemini-auth-rYBkv11i.js";
 import "./retry-DYICeae5.js";
 import "./sqlite-CRogFEk1.js";
@@ -103,18 +103,18 @@ import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks,
 import "./prompt-style-CSNJI4MG.js";
 import "./pairing-labels-DJfFSZUS.js";
 import "./pi-tools.policy-D4i_i5CV.js";
-import "./heartbeat-visibility-C4Sg0QOd.js";
+import "./heartbeat-visibility-_mPYbQT2.js";
 import "./runtime-guard-dBbuLE2m.js";
-import "./program-context-Baw4Oc1H.js";
+import "./program-context-DlM7Bnwp.js";
 import "./note-CYS1SoX6.js";
-import { r as installCompletion } from "./completion-cli-IKI4BpqL.js";
+import { r as installCompletion } from "./completion-cli-EvxmKJ-O.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-CNvz5bbJ.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-z4aO4iTi.js";
 import { t as resolveGatewayService } from "./service-CW2RUNzh.js";
-import { r as healthCommand } from "./health-CCKCR4oM.js";
+import { r as healthCommand } from "./health-N-jvgpZZ.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-CtKVON4w.js";
 import { t as formatHealthCheckFailure } from "./health-format-Ct4VWeSk.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-VAGhCLD5.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-Cts2UOop.js";
 import { t as runTui } from "./tui-BnwK5KK5.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{onboarding.finalize-BA8-Tnhc.js → onboarding.finalize-YB2UOZUK.js}

@@ -15,7 +15,7 @@ import "./client-CJIMV1WD.js";
 import "./call-e869fla2.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-DXCGIrYv.js";
+import "./subagent-registry-Y_8a_o-m.js";
 import "./sessions-CBlCXpU2.js";
 import "./tokens-BEvOiQ65.js";
 import "./plugins-DTKQE9kt.js";
@@ -53,8 +53,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-BjWk_WQa.js";
 import "./reply-prefix-Pz-5t5RS.js";
-import "./memory-cli-D4lLSeA1.js";
-import "./manager-B6EhIj3H.js";
+import "./memory-cli-z9Rsga03.js";
+import "./manager-DnkWmUWs.js";
 import "./gemini-auth-CdtQ-GuM.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -99,20 +99,20 @@ import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks,
 import "./prompt-style-BxVdnrLq.js";
 import "./pairing-labels-B6chnvfn.js";
 import "./pi-tools.policy-DcwVdzSK.js";
-import "./heartbeat-visibility-CG080wT5.js";
+import "./heartbeat-visibility-D6uZvFVV.js";
 import "./note-DewoEWtc.js";
-import "./register.subclis-p-z6ekaE.js";
-import "./command-registry-C-c2RS-n.js";
+import "./register.subclis-DOLKNKZj.js";
+import "./command-registry-BRN6NMOS.js";
 import "./program-context-DeZ44oQ9.js";
-import { r as installCompletion } from "./completion-cli-BLO_wsYD.js";
+import { r as installCompletion } from "./completion-cli-CQtI0ASD.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-EeFXD_no.js";
 import "./runtime-guard-BofkqBu7.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-CJ5L2ee4.js";
 import { t as resolveGatewayService } from "./service-RxN7lQKN.js";
-import { r as healthCommand } from "./health-BnGM6Yux.js";
+import { r as healthCommand } from "./health-DZB8SV6G.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DKcwWWGv.js";
 import { t as formatHealthCheckFailure } from "./health-format-DkjSgkDx.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-C7SuoBlz.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-BmjVxgkV.js";
 import { t as runTui } from "./tui-BDPCKXK5.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{pi-embedded-DUJ9Ytfn.js → pi-embedded-C6GkUoi8.js}

@@ -37,7 +37,7 @@ import { i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as re
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-C8Tqw4td.js";
 import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-CdTyeTEN.js";
 import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-DfzwGNoa.js";
-import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-Mm_GQxOU.js";
+import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-Dp_9v8j5.js";
 import { c as normalizeExtraMemoryPaths, f as runTasksWithConcurrency, s as listMemoryFiles } from "./internal-479FB0St.js";
 import { n as retryAsync } from "./retry-QGp0jvVi.js";
 import { a as createActionGate, c as jsonResult, d as readReactionParams, f as readStringArrayParam, l as parseAvailableTags, m as readStringParam, n as missingTargetError, o as imageResult, p as readStringOrNumberParam, r as unknownTargetError, s as imageResultFromFile, t as ambiguousTargetError, u as readNumberParam } from "./target-errors-43lkDH_r.js";
@@ -3473,7 +3473,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-Mm_GQxOU.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-Dp_9v8j5.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -3486,7 +3486,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-Mm_GQxOU.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-Dp_9v8j5.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -22484,6 +22484,11 @@ function buildAgentSystemPrompt(params) {
 		"If a task is more complex or takes longer, spawn a sub-agent. Completion is push-based: it will auto-announce when done.",
 		"Do not poll `subagents list` / `sessions_list` in a loop; only check status on-demand (for intervention, debugging, or when explicitly asked).",
 		"",
+		"## Tool Use Discipline (mandatory)",
+		"- If the user explicitly tells you to use a tool (e.g., \"use exec to run X\", \"read the file with read\", \"check the hostname\"), you MUST invoke that tool. Do not answer from training data or memory in place of the tool call.",
+		"- Never narrate or quote tool output you did not actually receive from a real tool result. Writing \"I ran X and got Y\" without a corresponding tool invocation is fabrication and breaks user trust.",
+		"- For factual local-system lookups (hostname, file contents, process state, env vars, current dir, system info), the answer comes from invoking the appropriate tool — not from priors. Always invoke.",
+		"",
 		...compactMode ? [] : [
 			"## Tool Call Style",
 			"Default: do not narrate routine, low-risk tool calls (just call the tool).",
@@ -40654,7 +40659,11 @@ const SAFETY_AND_STYLE_ADDITIONS = [
 	"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
 	"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
 	"- If you need to verify your work, do so before writing your response, not after.",
-	"- Send brief progress updates on long tasks so the user knows you are active."
+	"- Send brief progress updates on long tasks so the user knows you are active.",
+	"TOOL USE DISCIPLINE (no fabrication):",
+	"- If the user asks you to use a tool (e.g., 'use exec to run X', 'read the file', 'check the hostname'), you MUST invoke that tool. Do not answer from training data or priors in place of an actual tool call.",
+	"- Never narrate or quote tool output you did not receive from a real tool result. Writing 'I ran X and got Y' without a corresponding tool call is fabrication.",
+	"- For local-system facts (hostname, file contents, process state, env vars, current dir), the answer comes from running the tool, not from priors — always invoke."
 ];
 /** Hint for native-reasoning models (Nemotron, Qwen 3.5/3.6) to keep
 * planning internal. Not applied to Gemma/Ollama because those models
@@ -60927,7 +60936,7 @@ function setCliSessionId(entry, provider, sessionId) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-COnC7jb4.js");
+			const { sendMessageWhatsApp } = await import("./web-DuUOtg8X.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -76207,7 +76216,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-COnC7jb4.js");
+	webChannelPromise ??= import("./web-DuUOtg8X.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{plugin-registry-C1xFJkog.js → plugin-registry-2T2NDPGh.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { s as loadSymiPlugins } from "./unified-runner-CdBxbcO2.js";
+import { s as loadSymiPlugins } from "./unified-runner-DWZT5BCl.js";
 import { d as getActivePluginRegistry } from "./registry-ClO_zVv-.js";
 import { t as createSubsystemLogger } from "./subsystem-zqierDLj.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-BajBuriF.js";

package/dist/{plugin-registry-CZS8ioCg.js → plugin-registry-739qhWq3.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { M as getActivePluginRegistry, o as createSubsystemLogger } from "./entry.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-xM36I1Em.js";
 import { i as loadConfig } from "./config-BaxT9cN4.js";
-import { m as loadSymiPlugins } from "./subagent-registry-DXCGIrYv.js";
+import { m as loadSymiPlugins } from "./subagent-registry-Y_8a_o-m.js";
 
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/plugin-sdk/{channel-web-B_XlrV_E.js → channel-web-DAJtsqF_.js}

@@ -1,6 +1,6 @@
 import { a as buildGroupHistoryKey, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-C_0eELjb.js";
 import { f as readWebSelfId, o as getWebAuthAgeMs, r as resolveWhatsAppAccount } from "./accounts-D9zGZU5t.js";
-import { G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as formatInboundEnvelope, b as shouldComputeCommandAuthorized, c as buildPairingReply, d as formatDurationPrecise, f as enqueueSystemEvent, g as resolveInboundDebounceMs, h as createInboundDebouncer, ht as createDedupeCache, l as dispatchReplyWithBufferedBlockDispatcher, m as parseActivationCommand, nt as buildMentionRegexes, o as computeBackoff, p as normalizeGroupActivation, rt as normalizeMentionText, s as sleepWithAbort, tt as recordPendingHistoryEntryIfEnabled, v as resolveEnvelopeFormatOptions, y as hasControlCommand } from "./unified-runner-BNQKFoGX.js";
+import { G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as formatInboundEnvelope, b as shouldComputeCommandAuthorized, c as buildPairingReply, d as formatDurationPrecise, f as enqueueSystemEvent, g as resolveInboundDebounceMs, h as createInboundDebouncer, ht as createDedupeCache, l as dispatchReplyWithBufferedBlockDispatcher, m as parseActivationCommand, nt as buildMentionRegexes, o as computeBackoff, p as normalizeGroupActivation, rt as normalizeMentionText, s as sleepWithAbort, tt as recordPendingHistoryEntryIfEnabled, v as resolveEnvelopeFormatOptions, y as hasControlCommand } from "./unified-runner-KBVvJUFF.js";
 import { A as normalizeE164, B as toWhatsappJid, K as logVerbose, N as resolveJidToE164, O as isSelfChatMode, R as sleep, Y as shouldLogVerbose, k as jidToE164, s as normalizeChatChannelId, tt as getChildLogger, x as clamp } from "./registry--_pGht6S.js";
 import { n as loadConfig } from "./config-BBBu18xQ.js";
 import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-Coz2AgU8.js";

package/dist/plugin-sdk/index.js

@@ -1,6 +1,6 @@
 import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-C_0eELjb.js";
 import { _ as createAccountListHelpers, i as resolveWhatsAppAuthDir, n as resolveDefaultWhatsAppAccountId, r as resolveWhatsAppAccount, t as listWhatsAppAccountIds } from "./accounts-D9zGZU5t.js";
-import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as processLineMessage, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, E as attachFooterText, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as hasMarkdownToConvert, St as listThreadBindingsBySessionKey, T as createReceiptCard, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as resolveLineAccount, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as resolveDefaultLineAccountId, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, n as listLineAccountIds, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, r as normalizeAccountId$1, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as stripMarkdown, wt as formatAllowlistMatchMeta, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./unified-runner-BNQKFoGX.js";
+import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as processLineMessage, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, E as attachFooterText, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as hasMarkdownToConvert, St as listThreadBindingsBySessionKey, T as createReceiptCard, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as resolveLineAccount, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as resolveDefaultLineAccountId, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, n as listLineAccountIds, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, r as normalizeAccountId$1, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as stripMarkdown, wt as formatAllowlistMatchMeta, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./unified-runner-KBVvJUFF.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import { D as resolveSlackAccount, E as resolveDefaultSlackAccountId, F as resolveDiscordAccount, M as listDiscordAccountIds, O as resolveSlackReplyToMode, P as resolveDefaultDiscordAccountId, S as resolveTelegramAccount, T as listSlackAccountIds, _ as normalizeWhatsAppTarget, a as listDiscordDirectoryPeersFromConfig, b as listTelegramAccountIds, c as listTelegramDirectoryGroupsFromConfig, d as listWhatsAppDirectoryPeersFromConfig, f as looksLikeSlackTargetId, g as isWhatsAppGroupJid, i as listDiscordDirectoryGroupsFromConfig, l as listTelegramDirectoryPeersFromConfig, o as listSlackDirectoryGroupsFromConfig, p as normalizeSlackMessagingTarget, s as listSlackDirectoryPeersFromConfig, u as listWhatsAppDirectoryGroupsFromConfig, w as listEnabledSlackAccounts, x as resolveDefaultTelegramAccountId } from "./plugins-muf5lfx-.js";
@@ -47,12 +47,12 @@ import "./paths-A0xdf3yk.js";
 import { h as onDiagnosticEvent, m as isDiagnosticsEnabled, p as emitDiagnosticEvent } from "./diagnostic-fnIb_o_V.js";
 import { n as extractOriginalFilename } from "./store-uf7TpQm3.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-BkHNUpdB.js";
-import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-B_XlrV_E.js";
+import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-DAJtsqF_.js";
 import "./diagnostic-session-state-DnkpMfCl.js";
 import "./image-B7fj8HDX.js";
 import "./pi-auth-json-BOqOPkC8.js";
 import "./pi-model-discovery-Cdz3tuFk.js";
-import "./manager-CJd0vK4S.js";
+import "./manager-DhiL-RSO.js";
 import "./gemini-auth-lC1AI-WK.js";
 import "./sqlite-BflKfcLD.js";
 import "./commands-registry-L_7UhT9Y.js";

package/dist/plugin-sdk/{manager-CJd0vK4S.js → manager-DhiL-RSO.js}

@@ -3970,7 +3970,7 @@ var MemoryIndexManager = class MemoryIndexManager extends MemoryManagerEmbedding
 	* to bypass the min-interval guard (CLI use).
 	*/
 	async runL3CycleIfDue(params) {
-		const [{ runL3Cycle, runL3CycleIfDue }, { createSynthesizer }] = await Promise.all([import("./consolidate-BieO-_k_.js"), import("./synthesis-Cre_3fLT.js")]);
+		const [{ runL3Cycle, runL3CycleIfDue }, { createSynthesizer }] = await Promise.all([import("./consolidate-BieO-_k_.js"), import("./synthesis-cOQ27lCy.js")]);
 		const synthesize = createSynthesizer({
 			cfg: this.cfg,
 			agentId: this.agentId,

package/dist/plugin-sdk/{synthesis-Cre_3fLT.js → synthesis-cOQ27lCy.js}

@@ -1,5 +1,5 @@
 import "./accounts-D9zGZU5t.js";
-import { t as runAgentTurn } from "./unified-runner-BNQKFoGX.js";
+import { t as runAgentTurn } from "./unified-runner-KBVvJUFF.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import "./plugins-muf5lfx-.js";
@@ -49,7 +49,7 @@ import "./diagnostic-session-state-DnkpMfCl.js";
 import "./image-B7fj8HDX.js";
 import "./pi-auth-json-BOqOPkC8.js";
 import "./pi-model-discovery-Cdz3tuFk.js";
-import "./manager-CJd0vK4S.js";
+import "./manager-DhiL-RSO.js";
 import "./gemini-auth-lC1AI-WK.js";
 import "./sqlite-BflKfcLD.js";
 import "./commands-registry-L_7UhT9Y.js";

package/dist/plugin-sdk/{unified-runner-BNQKFoGX.js → unified-runner-KBVvJUFF.js}

@@ -52,7 +52,7 @@ import { r as getDiagnosticSessionState } from "./diagnostic-session-state-DnkpM
 import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-B7fj8HDX.js";
 import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-BOqOPkC8.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-Cdz3tuFk.js";
-import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-CJd0vK4S.js";
+import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-DhiL-RSO.js";
 import { c as normalizeExtraMemoryPaths, f as runTasksWithConcurrency, s as listMemoryFiles } from "./internal-BpFmQTvo.js";
 import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-L_7UhT9Y.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-5H7RKVif.js";
@@ -5900,7 +5900,11 @@ const SAFETY_AND_STYLE_ADDITIONS = [
 	"- Do not write verification checklists, self-assessments, or numbered assessment lists after your answer.",
 	"- Do not write 'Verification:', 'Requirements:', 'Status Check:', or 'Everything is correct'.",
 	"- If you need to verify your work, do so before writing your response, not after.",
-	"- Send brief progress updates on long tasks so the user knows you are active."
+	"- Send brief progress updates on long tasks so the user knows you are active.",
+	"TOOL USE DISCIPLINE (no fabrication):",
+	"- If the user asks you to use a tool (e.g., 'use exec to run X', 'read the file', 'check the hostname'), you MUST invoke that tool. Do not answer from training data or priors in place of an actual tool call.",
+	"- Never narrate or quote tool output you did not receive from a real tool result. Writing 'I ran X and got Y' without a corresponding tool call is fabrication.",
+	"- For local-system facts (hostname, file contents, process state, env vars, current dir), the answer comes from running the tool, not from priors — always invoke."
 ];
 /** Hint for native-reasoning models (Nemotron, Qwen 3.5/3.6) to keep
 * planning internal. Not applied to Gemma/Ollama because those models
@@ -9625,7 +9629,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-CJd0vK4S.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-DhiL-RSO.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -9638,7 +9642,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-CJd0vK4S.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-DhiL-RSO.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -12503,6 +12507,11 @@ function buildAgentSystemPrompt(params) {
 		"If a task is more complex or takes longer, spawn a sub-agent. Completion is push-based: it will auto-announce when done.",
 		"Do not poll `subagents list` / `sessions_list` in a loop; only check status on-demand (for intervention, debugging, or when explicitly asked).",
 		"",
+		"## Tool Use Discipline (mandatory)",
+		"- If the user explicitly tells you to use a tool (e.g., \"use exec to run X\", \"read the file with read\", \"check the hostname\"), you MUST invoke that tool. Do not answer from training data or memory in place of the tool call.",
+		"- Never narrate or quote tool output you did not actually receive from a real tool result. Writing \"I ran X and got Y\" without a corresponding tool invocation is fabrication and breaks user trust.",
+		"- For factual local-system lookups (hostname, file contents, process state, env vars, current dir, system info), the answer comes from invoking the appropriate tool — not from priors. Always invoke.",
+		"",
 		...compactMode ? [] : [
 			"## Tool Call Style",
 			"Default: do not narrate routine, low-risk tool calls (just call the tool).",
@@ -54609,7 +54618,7 @@ function setCliSessionId(entry, provider, sessionId) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-CE-OsTKq.js");
+			const { sendMessageWhatsApp } = await import("./web-Bj-jTlHW.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -69280,7 +69289,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-CE-OsTKq.js");
+	webChannelPromise ??= import("./web-Bj-jTlHW.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/plugin-sdk/{web-CE-OsTKq.js → web-Bj-jTlHW.js}

@@ -1,5 +1,5 @@
 import { a as WA_WEB_AUTH_DIR, g as webAuthExists, s as logWebSelfId, u as pickWebChannel } from "./accounts-D9zGZU5t.js";
-import "./unified-runner-BNQKFoGX.js";
+import "./unified-runner-KBVvJUFF.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import "./plugins-muf5lfx-.js";
@@ -45,12 +45,12 @@ import "./pi-embedded-helpers-YqYJ6xU1.js";
 import "./paths-A0xdf3yk.js";
 import "./diagnostic-fnIb_o_V.js";
 import "./store-uf7TpQm3.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-B_XlrV_E.js";
+import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-DAJtsqF_.js";
 import "./diagnostic-session-state-DnkpMfCl.js";
 import "./image-B7fj8HDX.js";
 import "./pi-auth-json-BOqOPkC8.js";
 import "./pi-model-discovery-Cdz3tuFk.js";
-import "./manager-CJd0vK4S.js";
+import "./manager-DhiL-RSO.js";
 import "./gemini-auth-lC1AI-WK.js";
 import "./sqlite-BflKfcLD.js";
 import "./commands-registry-L_7UhT9Y.js";

package/dist/{plugins-cli-BGccb2gT.js → plugins-cli-BrLY9BMq.js}

@@ -14,7 +14,7 @@ import "./client-CJIMV1WD.js";
 import "./call-e869fla2.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-DXCGIrYv.js";
+import "./subagent-registry-Y_8a_o-m.js";
 import "./sessions-CBlCXpU2.js";
 import "./tokens-BEvOiQ65.js";
 import "./plugins-DTKQE9kt.js";
@@ -52,8 +52,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-BjWk_WQa.js";
 import "./reply-prefix-Pz-5t5RS.js";
-import "./memory-cli-D4lLSeA1.js";
-import "./manager-B6EhIj3H.js";
+import "./memory-cli-z9Rsga03.js";
+import "./manager-DnkWmUWs.js";
 import "./gemini-auth-CdtQ-GuM.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -103,7 +103,7 @@ import "./npm-registry-spec-PuS2I1Em.js";
 import "./skill-scanner-BV3QHmsf.js";
 import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-B4sNNRaW.js";
 import { t as renderTable } from "./table-Bka4fasy.js";
-import { t as buildPluginStatusReport } from "./status-JL0CD-E1.js";
+import { t as buildPluginStatusReport } from "./status-DyQuiOVn.js";
 import { n as updateNpmInstalledPlugins } from "./update-DticqU4-.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{plugins-cli-f_Ncophh.js → plugins-cli-rLBIo-nA.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir } from "./paths-Cqn-zk3M.js";
 import { B as theme, S as shortenHomePath, g as resolveConfigDir, x as shortenHomeInString, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./tokens-Cz6cgZ7r.js";
-import "./unified-runner-CdBxbcO2.js";
+import "./unified-runner-DWZT5BCl.js";
 import "./registry-ClO_zVv-.js";
 import { f as defaultRuntime } from "./subsystem-zqierDLj.js";
 import "./auth-profiles-CtBXKml4.js";
@@ -55,8 +55,8 @@ import "./send-CrFVrFoV.js";
 import "./model-JOScPOPJ.js";
 import "./pi-model-discovery-CXXH7biP.js";
 import "./reply-prefix-DnXliXio.js";
-import "./memory-cli-BEZM7jn9.js";
-import "./manager-DKUOUCmo.js";
+import "./memory-cli-D69x8sVz.js";
+import "./manager-DjHARmFk.js";
 import "./gemini-auth-rYBkv11i.js";
 import "./retry-DYICeae5.js";
 import "./sqlite-CRogFEk1.js";
@@ -107,7 +107,7 @@ import "./npm-registry-spec-DzwsFqwv.js";
 import "./skill-scanner-DI28Pqv5.js";
 import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-DH3fKGSH.js";
 import { t as renderTable } from "./table-Cg6YZXv9.js";
-import { t as buildPluginStatusReport } from "./status-DFBG2hcx.js";
+import { t as buildPluginStatusReport } from "./status-DX8BiUs2.js";
 import { n as updateNpmInstalledPlugins } from "./update-BnkusEA2.js";
 import fs from "node:fs";
 import os from "node:os";

package/dist/{program-5Hto31sk.js → program-CKansE2A.js}

@@ -15,7 +15,7 @@ import "./client-CJIMV1WD.js";
 import "./call-e869fla2.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-DXCGIrYv.js";
+import "./subagent-registry-Y_8a_o-m.js";
 import "./sessions-CBlCXpU2.js";
 import "./tokens-BEvOiQ65.js";
 import "./plugins-DTKQE9kt.js";
@@ -53,8 +53,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-BjWk_WQa.js";
 import "./reply-prefix-Pz-5t5RS.js";
-import "./memory-cli-D4lLSeA1.js";
-import "./manager-B6EhIj3H.js";
+import "./memory-cli-z9Rsga03.js";
+import "./manager-DnkWmUWs.js";
 import "./gemini-auth-CdtQ-GuM.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -100,13 +100,13 @@ import "./prompt-style-BxVdnrLq.js";
 import "./pairing-labels-B6chnvfn.js";
 import "./pi-tools.policy-DcwVdzSK.js";
 import "./catalog-KcLvtTfa.js";
-import "./plugin-registry-CZS8ioCg.js";
-import { n as resolveCliChannelOptions } from "./channel-options-C68HZtw7.js";
-import { t as getSubCliCommandsWithSubcommands } from "./register.subclis-p-z6ekaE.js";
-import { a as registerProgramCommands, r as getCoreCliCommandsWithSubcommands } from "./command-registry-C-c2RS-n.js";
+import "./plugin-registry-739qhWq3.js";
+import { n as resolveCliChannelOptions } from "./channel-options-BC-QbEPJ.js";
+import { t as getSubCliCommandsWithSubcommands } from "./register.subclis-DOLKNKZj.js";
+import { a as registerProgramCommands, r as getCoreCliCommandsWithSubcommands } from "./command-registry-BRN6NMOS.js";
 import { r as setProgramContext } from "./program-context-DeZ44oQ9.js";
 import { t as forceFreePort } from "./ports-DQg7kV5s.js";
-import { n as formatCliBannerLine, r as hasEmittedCliBanner, t as emitCliBanner } from "./banner--HSjGLhi.js";
+import { n as formatCliBannerLine, r as hasEmittedCliBanner, t as emitCliBanner } from "./banner-kkSwCGXn.js";
 import { Command } from "commander";
 
 //#region src/cli/program/context.ts
@@ -214,7 +214,7 @@ function registerPreActionHooks(program, programVersion) {
 			commandPath
 		});
 		if (PLUGIN_REQUIRED_COMMANDS.has(commandPath[0])) {
-			const { ensurePluginRegistryLoaded } = await import("./plugin-registry-CZS8ioCg.js").then((n) => n.n);
+			const { ensurePluginRegistryLoaded } = await import("./plugin-registry-739qhWq3.js").then((n) => n.n);
 			ensurePluginRegistryLoaded();
 		}
 	});