@symerian/symi 3.0.6 → 3.0.7

package/dist/{onboarding-3Zmxzq_U.js → onboarding-B-gCsRKr.js}

@@ -223,7 +223,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const { ensureAuthProfileStore } = await import("./auth-profiles-B5Csh1eO.js").then((n) => n.t);
 	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-DF6R_pgV.js").then((n) => n.t);
 	const { promptCustomApiConfig } = await import("./onboard-custom-D1bZYymg.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-54kgymsK.js").then((n) => n.t);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-BPmdR0Zg.js").then((n) => n.t);
 	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-BO_XjLs5.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
@@ -276,7 +276,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-DTKQE9kt.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-C9yhPSG7.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-jMIN_VEb.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -302,7 +302,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-DYIUxpai.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-TzNrDgVI.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding-BT5x19Ld.js → onboarding-C0pJSLCL.js}

@@ -225,7 +225,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const { ensureAuthProfileStore } = await import("./auth-profiles-HXq6s5EV.js").then((n) => n.t);
 	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-PeQmwVpp.js").then((n) => n.t);
 	const { promptCustomApiConfig } = await import("./onboard-custom-BZNMW8nN.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-D-6X8Ju1.js").then((n) => n.t);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-BqParF2V.js").then((n) => n.t);
 	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-CdgzsHoJ.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
@@ -278,7 +278,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-BL5D1_sT.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-DjyTcloL.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-puKAWnzj.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -304,7 +304,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-Di8oo0E9.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-CwYMMBek.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding.finalize-Di8oo0E9.js → onboarding.finalize-CwYMMBek.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { h as pathExists, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./tokens-Cz6cgZ7r.js";
-import "./unified-runner-NjwIEpGt.js";
+import "./unified-runner-CzxCpDUC.js";
 import "./registry-ClO_zVv-.js";
 import { p as restoreTerminalState } from "./subsystem-zqierDLj.js";
 import "./auth-profiles-HXq6s5EV.js";
@@ -56,8 +56,8 @@ import "./send-DNJPCiwf.js";
 import "./model-DIO3dH08.js";
 import "./pi-model-discovery-CXXH7biP.js";
 import "./reply-prefix-DnXliXio.js";
-import "./memory-cli-BFgNzW3D.js";
-import "./manager-DdfJ-DW0.js";
+import "./memory-cli-LV7-59SK.js";
+import "./manager-_IXN4-V8.js";
 import "./gemini-auth-D7Wqp9Ma.js";
 import "./retry-DYICeae5.js";
 import "./sqlite-CRogFEk1.js";
@@ -103,18 +103,18 @@ import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks,
 import "./prompt-style-CSNJI4MG.js";
 import "./pairing-labels-6wdVkxUt.js";
 import "./pi-tools.policy-CQ0NqaBl.js";
-import "./heartbeat-visibility-DiKuGlXT.js";
+import "./heartbeat-visibility-D7nLp3pi.js";
 import "./runtime-guard-dBbuLE2m.js";
-import "./program-context-DUf2HkNT.js";
+import "./program-context-ClWlMpYr.js";
 import "./note-CYS1SoX6.js";
-import { r as installCompletion } from "./completion-cli-CtslzC-3.js";
+import { r as installCompletion } from "./completion-cli-Jc5c91D9.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-BR2zWQaj.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-z4aO4iTi.js";
 import { t as resolveGatewayService } from "./service-CW2RUNzh.js";
-import { r as healthCommand } from "./health-Ux1rRtE3.js";
+import { r as healthCommand } from "./health-CcIuOt6-.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-CtKVON4w.js";
 import { t as formatHealthCheckFailure } from "./health-format-Ct4VWeSk.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-C7FYoFcz.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-efxxrdhl.js";
 import { t as runTui } from "./tui-Cb1kUTIe.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{onboarding.finalize-DYIUxpai.js → onboarding.finalize-TzNrDgVI.js}

@@ -15,7 +15,7 @@ import "./client-CJIMV1WD.js";
 import "./call-DgBbW7bk.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-B4gg8TFc.js";
+import "./subagent-registry-k0ZBnJuU.js";
 import "./sessions-D94fC0u0.js";
 import "./tokens-BEvOiQ65.js";
 import "./plugins-DTKQE9kt.js";
@@ -53,8 +53,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-BEX8iiQb.js";
 import "./reply-prefix-Pz-5t5RS.js";
-import "./memory-cli-CEvfDody.js";
-import "./manager-OL6o99xD.js";
+import "./memory-cli-CFc9bXRp.js";
+import "./manager-DrpXfTr8.js";
 import "./gemini-auth-48fFOTO4.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -99,20 +99,20 @@ import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks,
 import "./prompt-style-BxVdnrLq.js";
 import "./pairing-labels-D5bj-6hr.js";
 import "./pi-tools.policy-Dcon0Kdw.js";
-import "./heartbeat-visibility-BOc3XHJM.js";
+import "./heartbeat-visibility-C1vHOBwO.js";
 import "./note-DewoEWtc.js";
-import "./register.subclis-Bd9G7Uhk.js";
-import "./command-registry-BuNPoTgT.js";
+import "./register.subclis-BOf3y4FX.js";
+import "./command-registry-DPjt2ua4.js";
 import "./program-context-DeZ44oQ9.js";
-import { r as installCompletion } from "./completion-cli-CslG8pRZ.js";
+import { r as installCompletion } from "./completion-cli-DUHXuBGj.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-zr84-Tnf.js";
 import "./runtime-guard-BofkqBu7.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-CJ5L2ee4.js";
 import { t as resolveGatewayService } from "./service-RxN7lQKN.js";
-import { r as healthCommand } from "./health-BJOdskDn.js";
+import { r as healthCommand } from "./health-CMNaNxdO.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DKcwWWGv.js";
 import { t as formatHealthCheckFailure } from "./health-format-DkjSgkDx.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-BdPD9NXi.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-DRSIyjR1.js";
 import { t as runTui } from "./tui-lLpf5sOM.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{pi-embedded-DiktDTAb.js → pi-embedded-D9KmgdGY.js}

@@ -37,7 +37,7 @@ import { i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as re
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-C8Tqw4td.js";
 import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-CdTyeTEN.js";
 import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-BwUdkv5g.js";
-import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-D7uDkX3d.js";
+import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-ba9NOjzn.js";
 import { c as normalizeExtraMemoryPaths, f as runTasksWithConcurrency, s as listMemoryFiles } from "./internal-479FB0St.js";
 import { n as retryAsync } from "./retry-QGp0jvVi.js";
 import { a as createActionGate, c as jsonResult, d as readReactionParams, f as readStringArrayParam, l as parseAvailableTags, m as readStringParam, n as missingTargetError, o as imageResult, p as readStringOrNumberParam, r as unknownTargetError, s as imageResultFromFile, t as ambiguousTargetError, u as readNumberParam } from "./target-errors-43lkDH_r.js";
@@ -3473,7 +3473,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-D7uDkX3d.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-ba9NOjzn.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -3486,7 +3486,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-D7uDkX3d.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-ba9NOjzn.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -22489,6 +22489,11 @@ function buildAgentSystemPrompt(params) {
 		"- Never narrate or quote tool output you did not actually receive from a real tool result. Writing \"I ran X and got Y\" without a corresponding tool invocation is fabrication and breaks user trust.",
 		"- For factual local-system lookups (hostname, file contents, process state, env vars, current dir, system info), the answer comes from invoking the appropriate tool — not from priors. Always invoke.",
 		"",
+		"Example — when the user explicitly names a tool:",
+		"  User: \"Use the exec tool to run: echo hi\"",
+		"  Correct: call exec with command=\"echo hi\", then summarise the actual stdout you received.",
+		"  Wrong:   emit \"hi\" as text without calling exec — that's fabrication.",
+		"",
 		...compactMode ? [] : [
 			"## Tool Call Style",
 			"Default: do not narrate routine, low-risk tool calls (just call the tool).",
@@ -41604,6 +41609,91 @@ function createOutputNormalizer(profile, modelId) {
 //#endregion
 //#region src/agents/model-aware-stream.ts
 /**
+* Match imperative tool requests:
+*   "Use the exec tool to run X"
+*   "use exec to ..."
+*   "Please invoke the read tool"
+*   "call memory_search with ..."
+*
+* Anchored to start-of-string, start-of-line, or after a closing-bracket
+* delimiter `] ` (covers Symi's `[Thu 2026-04-30 20:48 EDT] ` timestamp
+* envelope, the `[Outlook 365] ` plugin banner, and similar prefixes that
+* gateway middleware can inject before the user's actual prompt — verified
+* live: `chat.send` from Glass UI ships content like
+*
+*   Conversation info (untrusted metadata):
+*   ```json
+*   { "message_id": "...", ... }
+*   ```
+*
+*   [Thu 2026-04-30 20:48 EDT] Use the exec tool to run: hostname
+*
+* so the `Use` is preceded by `] ` not by `\n` or `^`).
+*
+* Verb list is conservative (use/invoke/call/please-{use,call}) — pure
+* imperative verbs that read unambiguously as "do this for me." Tool name
+* must match EXPLICIT_TOOL_NAMES exactly to keep "use poetic language" /
+* "use clear writing" / etc. from triggering.
+*/
+const EXPLICIT_TOOL_REQUEST_PATTERN = new RegExp(String.raw`(?:^|\n|\]\s)\s*(?:please\s+)?(?:use|invoke|call)\s+(?:the\s+)?(?:` + [
+	"exec",
+	"bash",
+	"read",
+	"write",
+	"edit",
+	"patch",
+	"web_search",
+	"web_fetch",
+	"browser",
+	"browser_navigate",
+	"browser_snapshot",
+	"browser_click",
+	"browser_type",
+	"memory_search",
+	"memory_get",
+	"memory_pin",
+	"memory_unpin",
+	"spawn_agent",
+	"message",
+	"task_list",
+	"task_cancel",
+	"cron",
+	"fetch",
+	"skill_search"
+].map((n) => n.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|") + String.raw`)(?:\s+tool)?\b`, "i");
+/**
+* Extract the user-role text ONLY when it's the LAST message in the
+* conversation (i.e., we're at the start of a fresh turn, not in the
+* middle of an agent loop). Returns "" when:
+*  - messages isn't an array
+*  - the last message isn't user-role (= we're after a tool_call /
+*    tool_result and the model is continuing — forcing tool_choice
+*    "required" here would loop the agent: model must call a tool →
+*    tool result → model must call ANOTHER tool → tool result → ...)
+*
+* Verified live on 3.0.7 dev: with the original "find any prior user
+* message" implementation, every agent-loop iteration saw the same
+* matching userText and re-forced tool_choice="required", spinning the
+* model in an infinite tool-call loop and timing out at 180s.
+*/
+function extractLastUserText(messages) {
+	if (!Array.isArray(messages) || messages.length === 0) return "";
+	const last = messages[messages.length - 1];
+	if (!last || typeof last !== "object") return "";
+	const msg = last;
+	if (msg.role !== "user") return "";
+	if (typeof msg.content === "string") return msg.content;
+	if (Array.isArray(msg.content)) {
+		const parts = [];
+		for (const part of msg.content) if (part && typeof part === "object") {
+			const block = part;
+			if (block.type === "text" && typeof block.text === "string") parts.push(block.text);
+		}
+		return parts.join("\n");
+	}
+	return "";
+}
+/**
 * Create a single stream function wrapper that handles all provider-specific
 * param injection via one onPayload hook.
 *
@@ -41651,6 +41741,10 @@ function createModelAwareStreamFn(opts) {
 				delete p.store;
 			}
 			if (Array.isArray(p.tools) && p.tools.length > 0 && p.tool_choice === void 0) p.tool_choice = "auto";
+			if (Array.isArray(p.tools) && p.tools.length > 0 && p.tool_choice === "auto") {
+				const userText = extractLastUserText(p.messages);
+				if (userText && EXPLICIT_TOOL_REQUEST_PATTERN.test(userText)) p.tool_choice = "required";
+			}
 		}
 		callerOnPayload?.(payload);
 	};
@@ -60936,7 +61030,7 @@ function setCliSessionId(entry, provider, sessionId) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-BPiGXIj5.js");
+			const { sendMessageWhatsApp } = await import("./web-gqbdxJga.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -76216,7 +76310,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-BPiGXIj5.js");
+	webChannelPromise ??= import("./web-gqbdxJga.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {

package/dist/{plugin-registry-Dv9QEb6z.js → plugin-registry-B33lS3i0.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { s as loadSymiPlugins } from "./unified-runner-NjwIEpGt.js";
+import { s as loadSymiPlugins } from "./unified-runner-CzxCpDUC.js";
 import { d as getActivePluginRegistry } from "./registry-ClO_zVv-.js";
 import { t as createSubsystemLogger } from "./subsystem-zqierDLj.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-BajBuriF.js";

package/dist/{plugin-registry-DSVGT3l_.js → plugin-registry-DzQCMRvf.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { M as getActivePluginRegistry, o as createSubsystemLogger } from "./entry.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-xM36I1Em.js";
 import { i as loadConfig } from "./config-CE_yCGtB.js";
-import { m as loadSymiPlugins } from "./subagent-registry-B4gg8TFc.js";
+import { m as loadSymiPlugins } from "./subagent-registry-k0ZBnJuU.js";
 
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/plugin-sdk/agents/model-aware-stream.d.ts

@@ -13,6 +13,26 @@
 import type { StreamFn } from "@mariozechner/pi-agent-core";
 import type { SymiConfig } from "../config/config.js";
 import type { ModelProfile } from "../config/model-profiles.js";
+/**
+ * Extract the user-role text ONLY when it's the LAST message in the
+ * conversation (i.e., we're at the start of a fresh turn, not in the
+ * middle of an agent loop). Returns "" when:
+ *  - messages isn't an array
+ *  - the last message isn't user-role (= we're after a tool_call /
+ *    tool_result and the model is continuing — forcing tool_choice
+ *    "required" here would loop the agent: model must call a tool →
+ *    tool result → model must call ANOTHER tool → tool result → ...)
+ *
+ * Verified live on 3.0.7 dev: with the original "find any prior user
+ * message" implementation, every agent-loop iteration saw the same
+ * matching userText and re-forced tool_choice="required", spinning the
+ * model in an infinite tool-call loop and timing out at 180s.
+ */
+declare function extractLastUserText(messages: unknown): string;
+/** Exposed for unit tests. */
+export declare const __EXPLICIT_TOOL_REQUEST_PATTERN: RegExp;
+/** Exposed for unit tests. */
+export declare const __extractLastUserText: typeof extractLastUserText;
 export interface ModelAwareStreamOptions {
     /** Base streaming function — streamSimple or createOllamaStreamFn. */
     baseStreamFn?: StreamFn;
@@ -39,3 +59,4 @@ export interface ModelAwareStreamOptions {
 export declare function createModelAwareStreamFn(opts: ModelAwareStreamOptions): StreamFn;
 /** Detect vLLM providers by model hints or baseUrl patterns. */
 export declare function isVllmProvider(provider: string, modelId: string, config?: SymiConfig): boolean;
+export {};

package/dist/plugin-sdk/{channel-web-CQucEpek.js → channel-web-oG-aaS67.js}

@@ -1,6 +1,6 @@
 import { a as buildGroupHistoryKey, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-C_0eELjb.js";
 import { f as readWebSelfId, o as getWebAuthAgeMs, r as resolveWhatsAppAccount } from "./accounts-D9zGZU5t.js";
-import { G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as formatInboundEnvelope, b as shouldComputeCommandAuthorized, c as buildPairingReply, d as formatDurationPrecise, f as enqueueSystemEvent, g as resolveInboundDebounceMs, h as createInboundDebouncer, ht as createDedupeCache, l as dispatchReplyWithBufferedBlockDispatcher, m as parseActivationCommand, nt as buildMentionRegexes, o as computeBackoff, p as normalizeGroupActivation, rt as normalizeMentionText, s as sleepWithAbort, tt as recordPendingHistoryEntryIfEnabled, v as resolveEnvelopeFormatOptions, y as hasControlCommand } from "./unified-runner-DPD66ppH.js";
+import { G as resolveMentionGating, W as shouldAckReactionForWhatsApp, X as buildHistoryContextFromEntries, Y as DEFAULT_GROUP_HISTORY_LIMIT, _ as formatInboundEnvelope, b as shouldComputeCommandAuthorized, c as buildPairingReply, d as formatDurationPrecise, f as enqueueSystemEvent, g as resolveInboundDebounceMs, h as createInboundDebouncer, ht as createDedupeCache, l as dispatchReplyWithBufferedBlockDispatcher, m as parseActivationCommand, nt as buildMentionRegexes, o as computeBackoff, p as normalizeGroupActivation, rt as normalizeMentionText, s as sleepWithAbort, tt as recordPendingHistoryEntryIfEnabled, v as resolveEnvelopeFormatOptions, y as hasControlCommand } from "./unified-runner-CZE3p9mg.js";
 import { A as normalizeE164, B as toWhatsappJid, K as logVerbose, N as resolveJidToE164, O as isSelfChatMode, R as sleep, Y as shouldLogVerbose, k as jidToE164, s as normalizeChatChannelId, tt as getChildLogger, x as clamp } from "./registry--_pGht6S.js";
 import { n as loadConfig } from "./config-Bv0LE_Mp.js";
 import { i as defaultRuntime, t as createSubsystemLogger } from "./subsystem-Coz2AgU8.js";

package/dist/plugin-sdk/index.js

@@ -1,6 +1,6 @@
 import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-C_0eELjb.js";
 import { _ as createAccountListHelpers, i as resolveWhatsAppAuthDir, n as resolveDefaultWhatsAppAccountId, r as resolveWhatsAppAccount, t as listWhatsAppAccountIds } from "./accounts-D9zGZU5t.js";
-import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as processLineMessage, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, E as attachFooterText, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as hasMarkdownToConvert, St as listThreadBindingsBySessionKey, T as createReceiptCard, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as resolveLineAccount, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as resolveDefaultLineAccountId, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, n as listLineAccountIds, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, r as normalizeAccountId$1, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as stripMarkdown, wt as formatAllowlistMatchMeta, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./unified-runner-DPD66ppH.js";
+import { $ as clearHistoryEntriesIfEnabled, A as resolveDiscordUserAllowlist, B as logTypingFailure, C as processLineMessage, Ct as unbindThreadBindingsBySessionKey, D as resolveSlackUserAllowlist, Dt as BLUEBUBBLES_ACTION_NAMES, E as attachFooterText, Et as BLUEBUBBLES_ACTIONS, F as stringEnum, G as resolveMentionGating, H as removeAckReactionAfterReply, I as recordInboundSession, J as summarizeMapping, K as resolveMentionGatingWithBypass, L as resolveControlCommandGate, M as collectDiscordAuditChannelIds, N as formatDocsLink, O as resolveSlackChannelAllowlist, Ot as BLUEBUBBLES_GROUP_ACTIONS, P as optionalStringEnum, Q as clearHistoryEntries, R as logAckFailure, S as hasMarkdownToConvert, St as listThreadBindingsBySessionKey, T as createReceiptCard, Tt as resolveAllowlistMatchSimple, U as shouldAckReaction, V as createTypingCallbacks, W as shouldAckReactionForWhatsApp, Y as DEFAULT_GROUP_HISTORY_LIMIT, Z as buildPendingHistoryContextFromMap, _t as listDevicePairing, a as resolveLineAccount, at as isWSLEnv, bt as registerPluginHttpRoute, ct as DEFAULT_WEBHOOK_MAX_BODY_BYTES, dt as isRequestBodyLimitError, et as recordPendingHistoryEntry, ft as readJsonBodyWithLimit, gt as approveDevicePairing, ht as createDedupeCache, i as resolveDefaultLineAccountId, it as isWSL2Sync, j as resolveDiscordChannelAllowlist, k as detectBinary, kt as CHANNEL_MESSAGE_ACTION_NAMES, lt as RequestBodyLimitError, mt as requestBodyErrorToText, n as listLineAccountIds, ot as isWSLSync, pt as readRequestBodyWithLimit, q as mergeAllowlist, r as normalizeAccountId$1, st as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, tt as recordPendingHistoryEntryIfEnabled, ut as installRequestBodyLimitGuard, vt as rejectDevicePairing, w as stripMarkdown, wt as formatAllowlistMatchMeta, xt as autoBindSpawnedDiscordSubagent, yt as extractToolSend, z as logInboundDrop } from "./unified-runner-CZE3p9mg.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import { D as resolveSlackAccount, E as resolveDefaultSlackAccountId, F as resolveDiscordAccount, M as listDiscordAccountIds, O as resolveSlackReplyToMode, P as resolveDefaultDiscordAccountId, S as resolveTelegramAccount, T as listSlackAccountIds, _ as normalizeWhatsAppTarget, a as listDiscordDirectoryPeersFromConfig, b as listTelegramAccountIds, c as listTelegramDirectoryGroupsFromConfig, d as listWhatsAppDirectoryPeersFromConfig, f as looksLikeSlackTargetId, g as isWhatsAppGroupJid, i as listDiscordDirectoryGroupsFromConfig, l as listTelegramDirectoryPeersFromConfig, o as listSlackDirectoryGroupsFromConfig, p as normalizeSlackMessagingTarget, s as listSlackDirectoryPeersFromConfig, u as listWhatsAppDirectoryGroupsFromConfig, w as listEnabledSlackAccounts, x as resolveDefaultTelegramAccountId } from "./plugins-muf5lfx-.js";
@@ -47,12 +47,12 @@ import "./paths-A0xdf3yk.js";
 import { h as onDiagnosticEvent, m as isDiagnosticsEnabled, p as emitDiagnosticEvent } from "./diagnostic-fnIb_o_V.js";
 import { n as extractOriginalFilename } from "./store-uf7TpQm3.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-BkHNUpdB.js";
-import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-CQucEpek.js";
+import { r as resolveWhatsAppHeartbeatRecipients } from "./channel-web-oG-aaS67.js";
 import "./diagnostic-session-state-DnkpMfCl.js";
 import "./image-Br537YWQ.js";
 import "./pi-auth-json-BMKHahdN.js";
 import "./pi-model-discovery-Cdz3tuFk.js";
-import "./manager-DMMQnz2r.js";
+import "./manager-hfHALsDs.js";
 import "./gemini-auth-BJBLsO9s.js";
 import "./sqlite-BflKfcLD.js";
 import "./commands-registry-BMqWVyks.js";

package/dist/plugin-sdk/{manager-DMMQnz2r.js → manager-hfHALsDs.js}

@@ -3972,7 +3972,7 @@ var MemoryIndexManager = class MemoryIndexManager extends MemoryManagerEmbedding
 	* to bypass the min-interval guard (CLI use).
 	*/
 	async runL3CycleIfDue(params) {
-		const [{ runL3Cycle, runL3CycleIfDue }, { createSynthesizer }] = await Promise.all([import("./consolidate-BieO-_k_.js"), import("./synthesis-B3oSNA87.js")]);
+		const [{ runL3Cycle, runL3CycleIfDue }, { createSynthesizer }] = await Promise.all([import("./consolidate-BieO-_k_.js"), import("./synthesis-BWBeCBqa.js")]);
 		const synthesize = createSynthesizer({
 			cfg: this.cfg,
 			agentId: this.agentId,

package/dist/plugin-sdk/{synthesis-B3oSNA87.js → synthesis-BWBeCBqa.js}

@@ -1,5 +1,5 @@
 import "./accounts-D9zGZU5t.js";
-import { t as runAgentTurn } from "./unified-runner-DPD66ppH.js";
+import { t as runAgentTurn } from "./unified-runner-CZE3p9mg.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import "./plugins-muf5lfx-.js";
@@ -49,7 +49,7 @@ import "./diagnostic-session-state-DnkpMfCl.js";
 import "./image-Br537YWQ.js";
 import "./pi-auth-json-BMKHahdN.js";
 import "./pi-model-discovery-Cdz3tuFk.js";
-import "./manager-DMMQnz2r.js";
+import "./manager-hfHALsDs.js";
 import "./gemini-auth-BJBLsO9s.js";
 import "./sqlite-BflKfcLD.js";
 import "./commands-registry-BMqWVyks.js";

package/dist/plugin-sdk/{unified-runner-DPD66ppH.js → unified-runner-CZE3p9mg.js}

@@ -52,7 +52,7 @@ import { r as getDiagnosticSessionState } from "./diagnostic-session-state-DnkpM
 import { S as ensureSymiModelsJson, _ as stripMinimaxToolCallXml, a as decodeDataUrl, b as stripReasoningTagsFromText, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripDowngradedToolCallText, h as promoteThinkingTagsToBlocks, i as coerceImageModelConfig, l as extractAssistantThinking, m as isAssistantMessage, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, u as extractThinkingFromTaggedStream, v as stripThinkingTagsFromText, x as extractTextFromChatContent, y as resolveToolDisplay } from "./image-Br537YWQ.js";
 import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-BMKHahdN.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-Cdz3tuFk.js";
-import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-DMMQnz2r.js";
+import { i as resolveMemorySearchConfig, n as probeOllamaEmbeddingModels, r as resolveOllamaBaseUrl } from "./manager-hfHALsDs.js";
 import { c as normalizeExtraMemoryPaths, f as runTasksWithConcurrency, s as listMemoryFiles } from "./internal-BpFmQTvo.js";
 import { _ as resolveNativeCommandsEnabled, a as listChatCommandsForConfig, c as normalizeCommandBody, d as resolveCommandArgMenu, f as serializeCommandArgs, g as isRestartEnabled, h as isNativeCommandsExplicitlyDisabled, i as listChatCommands, l as parseCommandArgs, m as isCommandFlagEnabled, o as listNativeCommandSpecs, p as shouldHandleTextCommands, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as resolveCommandArgChoices, v as resolveNativeSkillsEnabled } from "./commands-registry-BMqWVyks.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-5H7RKVif.js";
@@ -9628,7 +9628,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-DMMQnz2r.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-hfHALsDs.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -9641,7 +9641,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-DMMQnz2r.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-hfHALsDs.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -12511,6 +12511,11 @@ function buildAgentSystemPrompt(params) {
 		"- Never narrate or quote tool output you did not actually receive from a real tool result. Writing \"I ran X and got Y\" without a corresponding tool invocation is fabrication and breaks user trust.",
 		"- For factual local-system lookups (hostname, file contents, process state, env vars, current dir, system info), the answer comes from invoking the appropriate tool — not from priors. Always invoke.",
 		"",
+		"Example — when the user explicitly names a tool:",
+		"  User: \"Use the exec tool to run: echo hi\"",
+		"  Correct: call exec with command=\"echo hi\", then summarise the actual stdout you received.",
+		"  Wrong:   emit \"hi\" as text without calling exec — that's fabrication.",
+		"",
 		...compactMode ? [] : [
 			"## Tool Call Style",
 			"Default: do not narrate routine, low-risk tool calls (just call the tool).",
@@ -54617,7 +54622,7 @@ function setCliSessionId(entry, provider, sessionId) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-O8zxjM0h.js");
+			const { sendMessageWhatsApp } = await import("./web-CD_2TcPx.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -69288,7 +69293,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-O8zxjM0h.js");
+	webChannelPromise ??= import("./web-CD_2TcPx.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -73998,6 +74003,91 @@ function createOutputNormalizer(profile, modelId) {
 //#endregion
 //#region src/agents/model-aware-stream.ts
 /**
+* Match imperative tool requests:
+*   "Use the exec tool to run X"
+*   "use exec to ..."
+*   "Please invoke the read tool"
+*   "call memory_search with ..."
+*
+* Anchored to start-of-string, start-of-line, or after a closing-bracket
+* delimiter `] ` (covers Symi's `[Thu 2026-04-30 20:48 EDT] ` timestamp
+* envelope, the `[Outlook 365] ` plugin banner, and similar prefixes that
+* gateway middleware can inject before the user's actual prompt — verified
+* live: `chat.send` from Glass UI ships content like
+*
+*   Conversation info (untrusted metadata):
+*   ```json
+*   { "message_id": "...", ... }
+*   ```
+*
+*   [Thu 2026-04-30 20:48 EDT] Use the exec tool to run: hostname
+*
+* so the `Use` is preceded by `] ` not by `\n` or `^`).
+*
+* Verb list is conservative (use/invoke/call/please-{use,call}) — pure
+* imperative verbs that read unambiguously as "do this for me." Tool name
+* must match EXPLICIT_TOOL_NAMES exactly to keep "use poetic language" /
+* "use clear writing" / etc. from triggering.
+*/
+const EXPLICIT_TOOL_REQUEST_PATTERN = new RegExp(String.raw`(?:^|\n|\]\s)\s*(?:please\s+)?(?:use|invoke|call)\s+(?:the\s+)?(?:` + [
+	"exec",
+	"bash",
+	"read",
+	"write",
+	"edit",
+	"patch",
+	"web_search",
+	"web_fetch",
+	"browser",
+	"browser_navigate",
+	"browser_snapshot",
+	"browser_click",
+	"browser_type",
+	"memory_search",
+	"memory_get",
+	"memory_pin",
+	"memory_unpin",
+	"spawn_agent",
+	"message",
+	"task_list",
+	"task_cancel",
+	"cron",
+	"fetch",
+	"skill_search"
+].map((n) => n.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|") + String.raw`)(?:\s+tool)?\b`, "i");
+/**
+* Extract the user-role text ONLY when it's the LAST message in the
+* conversation (i.e., we're at the start of a fresh turn, not in the
+* middle of an agent loop). Returns "" when:
+*  - messages isn't an array
+*  - the last message isn't user-role (= we're after a tool_call /
+*    tool_result and the model is continuing — forcing tool_choice
+*    "required" here would loop the agent: model must call a tool →
+*    tool result → model must call ANOTHER tool → tool result → ...)
+*
+* Verified live on 3.0.7 dev: with the original "find any prior user
+* message" implementation, every agent-loop iteration saw the same
+* matching userText and re-forced tool_choice="required", spinning the
+* model in an infinite tool-call loop and timing out at 180s.
+*/
+function extractLastUserText(messages) {
+	if (!Array.isArray(messages) || messages.length === 0) return "";
+	const last = messages[messages.length - 1];
+	if (!last || typeof last !== "object") return "";
+	const msg = last;
+	if (msg.role !== "user") return "";
+	if (typeof msg.content === "string") return msg.content;
+	if (Array.isArray(msg.content)) {
+		const parts = [];
+		for (const part of msg.content) if (part && typeof part === "object") {
+			const block = part;
+			if (block.type === "text" && typeof block.text === "string") parts.push(block.text);
+		}
+		return parts.join("\n");
+	}
+	return "";
+}
+/**
 * Create a single stream function wrapper that handles all provider-specific
 * param injection via one onPayload hook.
 *
@@ -74045,6 +74135,10 @@ function createModelAwareStreamFn(opts) {
 				delete p.store;
 			}
 			if (Array.isArray(p.tools) && p.tools.length > 0 && p.tool_choice === void 0) p.tool_choice = "auto";
+			if (Array.isArray(p.tools) && p.tools.length > 0 && p.tool_choice === "auto") {
+				const userText = extractLastUserText(p.messages);
+				if (userText && EXPLICIT_TOOL_REQUEST_PATTERN.test(userText)) p.tool_choice = "required";
+			}
 		}
 		callerOnPayload?.(payload);
 	};

package/dist/plugin-sdk/{web-O8zxjM0h.js → web-CD_2TcPx.js}

@@ -1,5 +1,5 @@
 import { a as WA_WEB_AUTH_DIR, g as webAuthExists, s as logWebSelfId, u as pickWebChannel } from "./accounts-D9zGZU5t.js";
-import "./unified-runner-DPD66ppH.js";
+import "./unified-runner-CZE3p9mg.js";
 import "./paths-DR2yt_mP.js";
 import "./github-copilot-token-D9X2phUj.js";
 import "./plugins-muf5lfx-.js";
@@ -45,12 +45,12 @@ import "./pi-embedded-helpers-DLlOikDI.js";
 import "./paths-A0xdf3yk.js";
 import "./diagnostic-fnIb_o_V.js";
 import "./store-uf7TpQm3.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-CQucEpek.js";
+import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-oG-aaS67.js";
 import "./diagnostic-session-state-DnkpMfCl.js";
 import "./image-Br537YWQ.js";
 import "./pi-auth-json-BMKHahdN.js";
 import "./pi-model-discovery-Cdz3tuFk.js";
-import "./manager-DMMQnz2r.js";
+import "./manager-hfHALsDs.js";
 import "./gemini-auth-BJBLsO9s.js";
 import "./sqlite-BflKfcLD.js";
 import "./commands-registry-BMqWVyks.js";

package/dist/{plugins-cli-BKE00xaA.js → plugins-cli-BH-dPouA.js}

@@ -14,7 +14,7 @@ import "./client-CJIMV1WD.js";
 import "./call-DgBbW7bk.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-B4gg8TFc.js";
+import "./subagent-registry-k0ZBnJuU.js";
 import "./sessions-D94fC0u0.js";
 import "./tokens-BEvOiQ65.js";
 import "./plugins-DTKQE9kt.js";
@@ -52,8 +52,8 @@ import "./tool-images-CVLISeRT.js";
 import "./thinking-8sKPnzpp.js";
 import "./models-config-BEX8iiQb.js";
 import "./reply-prefix-Pz-5t5RS.js";
-import "./memory-cli-CEvfDody.js";
-import "./manager-OL6o99xD.js";
+import "./memory-cli-CFc9bXRp.js";
+import "./manager-DrpXfTr8.js";
 import "./gemini-auth-48fFOTO4.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -103,7 +103,7 @@ import "./npm-registry-spec-PuS2I1Em.js";
 import "./skill-scanner-BV3QHmsf.js";
 import { i as resolvePluginInstallDir, n as installPluginFromNpmSpec, r as installPluginFromPath, t as recordPluginInstall } from "./installs-B4sNNRaW.js";
 import { t as renderTable } from "./table-Bka4fasy.js";
-import { t as buildPluginStatusReport } from "./status-B5SAsM15.js";
+import { t as buildPluginStatusReport } from "./status-CvJZLdWA.js";
 import { n as updateNpmInstalledPlugins } from "./update-DticqU4-.js";
 import os from "node:os";
 import path from "node:path";