@symerian/symi 3.4.25 → 3.4.26

package/dist/{models-cli-CZgkOUZB.js → models-cli-C7UZtCdE.js}

@@ -1,4 +1,4 @@
-import { On as describeFailoverError, _t as buildAuthHealthSummary, gt as DEFAULT_OAUTH_WARN_MS, ht as maskApiKey, t as runAgentTurn, vt as formatRemainingShort } from "./unified-runner-DZAjU6aB.js";
+import { On as describeFailoverError, _t as buildAuthHealthSummary, gt as DEFAULT_OAUTH_WARN_MS, ht as maskApiKey, t as runAgentTurn, vt as formatRemainingShort } from "./unified-runner-DOYB1_-K.js";
 import { A as isRich$1, j as theme, k as colorize } from "./registry-Sbac4a4z.js";
 import { t as CONFIG_PATH } from "./paths-By0XjHBk.js";
 import { v as shortenHomePath } from "./utils-CTPsqyE_.js";
@@ -10,20 +10,20 @@ import { D as resolveDefaultAgentWorkspaceDir, a as resolveAgentModelFallbacksOv
 import { C as DEFAULT_MODEL, _ as resolveModelRefFromString, a as findNormalizedProviderValue, c as modelKey, d as parseModelRef, h as resolveDefaultModelForAgent, m as resolveConfiguredModelRef, r as buildModelAliasIndex, u as normalizeProviderId, w as DEFAULT_PROVIDER } from "./model-selection-7wdmO-Iw.js";
 import "./file-lock-BVUYnlQv.js";
 import { t as resolveSymiAgentDir } from "./agent-paths-BbZSGrUA.js";
-import "./pi-embedded-helpers-B5cWV7_y.js";
+import "./pi-embedded-helpers-x7n6pMgT.js";
 import { f as parseDurationMs, i as loadConfig } from "./config-D7SS4vdk.js";
 import "./boolean-CbZoNRMn.js";
 import "./env-BRnPI9sO.js";
 import { o as shouldEnableShellEnvFallback, t as getShellEnvAppliedKeys } from "./shell-env-Dc3iU7HK.js";
 import "./manifest-registry-D1MLZEjS.js";
-import "./sandbox-Dx8IMw-E.js";
-import "./chrome-rzK8edU7.js";
+import "./sandbox-DR_uvPm8.js";
+import "./chrome-xlyBE8q3.js";
 import "./tailscale-DpKBMIvx.js";
 import "./auth-Bkx-QuRN.js";
-import "./server-context--mmXXEkE.js";
+import "./server-context-DZK_rfwz.js";
 import "./frontmatter-B_jqcova.js";
 import "./skills-BwDmcZdt.js";
-import "./routes-C-rIjd8Z.js";
+import "./routes-DIFuU49J.js";
 import "./redact-B3O-RBO1.js";
 import "./errors-bI7Tdx75.js";
 import "./fs-safe-BdejYjW8.js";
@@ -49,10 +49,10 @@ import { t as ensureSymiModelsJson } from "./models-config-CRnTzdFs.js";
 import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-Db8XJVGL.js";
 import "./session-cost-usage-D6Ocwmq1.js";
 import { _ as loadProviderUsageSummary, b as resolveUsageProviderId, y as formatUsageWindowSummary } from "./session-utils-BZnPW904.js";
-import "./with-timeout-B5zAsivw.js";
+import "./with-timeout-CGWq0-d5.js";
 import "./reply-prefix-BFNeXT65.js";
-import "./memory-B4DsKRSc.js";
-import "./manager-BLg6zbeA.js";
+import "./memory-D_CuTCAW.js";
+import "./manager-C1bLWQJb.js";
 import "./sqlite-Cod7C5ba.js";
 import "./chunk-BxfKjCUx.js";
 import "./markdown-tables-CS1Tvb3z.js";
@@ -60,8 +60,8 @@ import "./fetch-guard-JHxT9355.js";
 import "./local-roots-CgDCgCuM.js";
 import "./commands-DUzLGgEZ.js";
 import "./commands-registry-VfAQOVZO.js";
-import "./client-BzUAFrla.js";
-import "./call-BouPakqe.js";
+import "./client-iv2QpsT1.js";
+import "./call-BOE4s-tQ.js";
 import "./pairing-token-Dcy37-4s.js";
 import "./tool-display-DFOL6UQ9.js";
 import "./skills-remote-bz71Bstn.js";
@@ -72,7 +72,7 @@ import "./skill-commands-yPirQFOb.js";
 import "./pairing-store-BNhJOnWn.js";
 import "./exec-approvals-DioSaIeH.js";
 import "./nodes-screen-De9ma6e1.js";
-import "./control-service-Ry7Le68N.js";
+import "./control-service-BgfKoTwJ.js";
 import "./stagger-DUVGiPYV.js";
 import "./channel-selection-DF4bza2Q.js";
 import "./delivery-queue-RUd4NhRw.js";
@@ -82,22 +82,22 @@ import { t as formatDocsLink } from "./links-TQwptN6q.js";
 import { n as runCommandWithRuntime, t as resolveOptionFromCommand } from "./cli-utils-tNdOjVQI.js";
 import "./help-format-CPT6NY3h.js";
 import { r as withProgressTotals } from "./progress-HNhsbm0E.js";
-import "./memory-cli-DotHyA76.js";
+import "./memory-cli-XxOC0_-M.js";
 import "./logging-Czh4x_NQ.js";
 import "./replies-DzsYQ8Md.js";
-import "./pi-tools.policy-BdGVEMZn.js";
+import "./pi-tools.policy-J58A7qFU.js";
 import { i as resolveForwardCompatModel, r as ANTIGRAVITY_OPUS_46_FORWARD_COMPAT_CANDIDATES } from "./model-DsMHOvMn.js";
 import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-BEDZROvQ.js";
 import "./note-DlaPViz1.js";
 import { t as createClackPrompter } from "./clack-prompter-Dw5j2O2o.js";
-import { f as openUrl } from "./onboard-helpers---sZ9pdZ.js";
+import { f as openUrl } from "./onboard-helpers-DP7FgSbE.js";
 import { t as renderTable } from "./table-D902H0x3.js";
 import { t as inferParamBFromIdOrName } from "./model-param-b-7eOskmw9.js";
 import { n as redactSecrets } from "./format-Bxjkt5ce.js";
 import { a as isLocalBaseUrl, c as normalizeAlias, d as resolveModelTarget, f as updateConfig, i as formatTokenK, l as resolveKnownAgentId, n as ensureFlagCompatibility, o as loadValidConfigOrThrow, r as formatMs, s as mergePrimaryFallbackConfig, t as applyDefaultModelPrimaryUpdate, u as resolveModelKeysFromEntries } from "./shared-DJFwvlUi.js";
 import { d as applyAuthProfileConfig, n as validateAnthropicSetupToken } from "./auth-token-DgRRSbEX.js";
 import { n as logConfigUpdated } from "./logging-CoYSc9bY.js";
-import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-2x7YxT5F.js";
+import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-BCiBe4Q9.js";
 import crypto from "node:crypto";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{node-cli-BXv9SEDG.js → node-cli-DBa3SOQb.js}

@@ -11,11 +11,11 @@ import "./boolean-CbZoNRMn.js";
 import "./env-BRnPI9sO.js";
 import "./shell-env-Dc3iU7HK.js";
 import { _ as sanitizeHostExecEnv } from "./manifest-registry-D1MLZEjS.js";
-import "./chrome-rzK8edU7.js";
+import "./chrome-xlyBE8q3.js";
 import "./tailscale-DpKBMIvx.js";
 import "./auth-Bkx-QuRN.js";
-import { i as resolveBrowserConfig } from "./server-context--mmXXEkE.js";
-import "./routes-C-rIjd8Z.js";
+import { i as resolveBrowserConfig } from "./server-context-DZK_rfwz.js";
+import "./routes-DIFuU49J.js";
 import "./redact-B3O-RBO1.js";
 import "./errors-bI7Tdx75.js";
 import "./fs-safe-BdejYjW8.js";
@@ -25,12 +25,12 @@ import { c as detectMime } from "./image-ops-L70xVnpG.js";
 import "./ports-gxLM5ahL.js";
 import "./trash-_YhavPQI.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-DgjXWzf-.js";
-import { n as createBrowserRouteDispatcher, r as getMachineDisplayName, t as withTimeout } from "./with-timeout-B5zAsivw.js";
-import { rn as loadOrCreateDeviceIdentity, t as GatewayClient } from "./client-BzUAFrla.js";
+import { n as createBrowserRouteDispatcher, r as getMachineDisplayName, t as withTimeout } from "./with-timeout-CGWq0-d5.js";
+import { rn as loadOrCreateDeviceIdentity, t as GatewayClient } from "./client-iv2QpsT1.js";
 import "./pairing-token-Dcy37-4s.js";
 import { _ as getTrustedSafeBinDirs, a as mergeExecApprovalsSocketDefaults, c as readExecApprovalsSnapshot, d as resolveExecApprovals, g as resolveSafeBins, h as evaluateShellAllowlist, l as recordAllowlistUse, m as evaluateExecAllowlist, n as addAllowlistEntry, p as saveExecApprovals, r as ensureExecApprovals, s as normalizeExecApprovals, u as requiresExecApproval, v as analyzeArgvCommand, x as requestJsonlSocket } from "./exec-approvals-DioSaIeH.js";
 import { g as resolveNodeWindowsTaskName, h as resolveNodeSystemdServiceName, m as resolveNodeLaunchAgentLabel, s as formatNodeServiceDescription } from "./constants-ChnKXZKi.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-Ry7Le68N.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-BgfKoTwJ.js";
 import { t as formatDocsLink } from "./links-TQwptN6q.js";
 import { t as formatHelpExamples } from "./help-format-CPT6NY3h.js";
 import "./logging-Czh4x_NQ.js";

package/dist/{nodes-cli-Cim3ANNU.js → nodes-cli-Dx8iwcda.js}

@@ -13,8 +13,8 @@ import "./manifest-registry-D1MLZEjS.js";
 import "./redact-B3O-RBO1.js";
 import "./errors-bI7Tdx75.js";
 import "./message-channel-DgjXWzf-.js";
-import "./client-BzUAFrla.js";
-import { a as randomIdempotencyKey } from "./call-BouPakqe.js";
+import "./client-iv2QpsT1.js";
+import { a as randomIdempotencyKey } from "./call-BOE4s-tQ.js";
 import "./pairing-token-Dcy37-4s.js";
 import { n as formatTimeAgo } from "./format-relative-D4GQsWlP.js";
 import { f as resolveExecApprovalsFromFile, i as maxAsk, o as minSecurity, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-DioSaIeH.js";
@@ -26,7 +26,7 @@ import { n as runCommandWithRuntime } from "./cli-utils-tNdOjVQI.js";
 import { t as formatHelpExamples } from "./help-format-CPT6NY3h.js";
 import "./progress-HNhsbm0E.js";
 import { t as renderTable } from "./table-D902H0x3.js";
-import { a as unauthorizedHintForMessage, i as resolveNodeId, n as callGatewayCli, o as formatPermissions, r as nodesCallOpts, t as buildNodeInvokeParams } from "./rpc-BkFkeuJ6.js";
+import { a as unauthorizedHintForMessage, i as resolveNodeId, n as callGatewayCli, o as formatPermissions, r as nodesCallOpts, t as buildNodeInvokeParams } from "./rpc-DfaVxm4P.js";
 import fs from "node:fs/promises";
 
 //#region src/cli/nodes-cli/cli-utils.ts

package/dist/{onboard-CuLvp4Ds.js → onboard-CvXaQ6g7.js}

@@ -11,11 +11,11 @@ import { t as assertSupportedRuntime } from "./runtime-guard-DfRLODeV.js";
 import { t as WizardCancelledError } from "./prompts-GoDC3iAV.js";
 import { t as createClackPrompter } from "./clack-prompter-Dw5j2O2o.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-tZgIbDPz.js";
-import { a as ensureWorkspaceAndSessions, b as waitForGatewayReachable, c as handleReset, g as resolveControlUiLinks, h as randomToken, n as applyWizardMetadata, t as DEFAULT_WORKSPACE } from "./onboard-helpers---sZ9pdZ.js";
+import { a as ensureWorkspaceAndSessions, b as waitForGatewayReachable, c as handleReset, g as resolveControlUiLinks, h as randomToken, n as applyWizardMetadata, t as DEFAULT_WORKSPACE } from "./onboard-helpers-DP7FgSbE.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DRpQb_L1.js";
 import { t as resolveGatewayService } from "./service-CyEDtYLq.js";
-import { r as healthCommand } from "./health-DZ0aipDZ.js";
-import { t as runOnboardingWizard } from "./onboarding-BWMBA6cP.js";
+import { r as healthCommand } from "./health-B92I0vwb.js";
+import { t as runOnboardingWizard } from "./onboarding-Dhjsa9Kl.js";
 import { $ as setHuggingfaceApiKey, A as applyXaiConfig, B as applyVercelAiGatewayConfig, E as applyTogetherConfig, I as applyLitellmConfig, M as applyXiaomiConfig, O as applyVeniceConfig, P as applyZaiConfig, Q as setGeminiApiKey, R as applyCloudflareAiGatewayConfig, S as applyQianfanConfig, X as setAnthropicApiKey, Z as setCloudflareAiGatewayConfig, _ as applyMoonshotConfigCn, a as applyMinimaxApiConfig, at as setOpenrouterApiKey, b as applyOpenrouterConfig, ct as setTogetherApiKey, d as applyAuthProfileConfig, dt as setXaiApiKey, et as setKimiCodingApiKey, f as applyHuggingfaceConfig, ft as setXiaomiApiKey, g as applyMoonshotConfig, it as setOpencodeZenApiKey, l as applyMinimaxConfig, lt as setVeniceApiKey, m as applyKimiCodeConfig, n as validateAnthropicSetupToken, nt as setMinimaxApiKey, o as applyMinimaxApiConfigCn, ot as setQianfanApiKey, pt as setZaiApiKey, r as applyOpencodeZenConfig, rt as setMoonshotApiKey, st as setSyntheticApiKey, t as buildTokenProfileId, tt as setLitellmApiKey, ut as setVercelAiGatewayApiKey, w as applySyntheticConfig } from "./auth-token-DgRRSbEX.js";
 import { n as logConfigUpdated } from "./logging-CoYSc9bY.js";
 import { n as isDeprecatedAuthChoice, r as normalizeLegacyOnboardAuthChoice } from "./auth-choice-legacy-GGnDhlyD.js";

package/dist/{onboard-BXI02b3e.js → onboard-CvspL8de.js}

@@ -13,7 +13,7 @@ import { a as ensureWorkspaceAndSessions, b as waitForGatewayReachable, c as han
 import { r as isSystemdUserServiceAvailable } from "./systemd-krdArbOb.js";
 import { t as resolveGatewayService } from "./service-Bhr6wh5u.js";
 import { r as healthCommand } from "./health-CXUnVb6i.js";
-import { t as runOnboardingWizard } from "./onboarding-BeYl1Egj.js";
+import { t as runOnboardingWizard } from "./onboarding-Bkqm3GYG.js";
 import { $ as setHuggingfaceApiKey, A as applyXaiConfig, B as applyVercelAiGatewayConfig, E as applyTogetherConfig, I as applyLitellmConfig, M as applyXiaomiConfig, O as applyVeniceConfig, P as applyZaiConfig, Q as setGeminiApiKey, R as applyCloudflareAiGatewayConfig, S as applyQianfanConfig, X as setAnthropicApiKey, Z as setCloudflareAiGatewayConfig, _ as applyMoonshotConfigCn, a as applyMinimaxApiConfig, at as setOpenrouterApiKey, b as applyOpenrouterConfig, ct as setTogetherApiKey, d as applyAuthProfileConfig, dt as setXaiApiKey, et as setKimiCodingApiKey, f as applyHuggingfaceConfig, ft as setXiaomiApiKey, g as applyMoonshotConfig, it as setOpencodeZenApiKey, l as applyMinimaxConfig, lt as setVeniceApiKey, m as applyKimiCodeConfig, n as validateAnthropicSetupToken, nt as setMinimaxApiKey, o as applyMinimaxApiConfigCn, ot as setQianfanApiKey, pt as setZaiApiKey, r as applyOpencodeZenConfig, rt as setMoonshotApiKey, st as setSyntheticApiKey, t as buildTokenProfileId, tt as setLitellmApiKey, ut as setVercelAiGatewayApiKey, w as applySyntheticConfig } from "./auth-token-DUIqGPhx.js";
 import { n as logConfigUpdated } from "./logging-BqCc-3Ld.js";
 import { n as isDeprecatedAuthChoice, r as normalizeLegacyOnboardAuthChoice } from "./auth-choice-legacy-Ay7AiVPU.js";

package/dist/{onboard-channels-E5NIYGJz.js → onboard-channels-Bf0N23cr.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { o as createPluginLoaderLogger, s as loadSymiPlugins } from "./unified-runner-DZAjU6aB.js";
+import { o as createPluginLoaderLogger, s as loadSymiPlugins } from "./unified-runner-DOYB1_-K.js";
 import { a as formatChannelSelectionLine, i as formatChannelPrimerLine, s as listChatChannels } from "./registry-Sbac4a4z.js";
 import { t as createSubsystemLogger } from "./subsystem-CHbO_DkH.js";
 import { t as formatCliCommand } from "./command-format-BzjsXBTi.js";

package/dist/{onboard-channels-A6_QP7MR.js → onboard-channels-MlbB9sk1.js}

@@ -3,7 +3,7 @@ import { E as formatChannelSelectionLine, O as listChatChannels, T as formatChan
 import { t as formatCliCommand } from "./command-format-B3nkKRhC.js";
 import { m as normalizeAccountId, p as DEFAULT_ACCOUNT_ID } from "./session-key-CFxFgYxM.js";
 import { c as resolveAgentWorkspaceDir, l as resolveDefaultAgentId } from "./agent-scope-C-Jte08L.js";
-import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-Dkif1XYO.js";
+import { m as loadSymiPlugins, p as createPluginLoaderLogger } from "./subagent-registry-8gdHiRIg.js";
 import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-BsEhWvLn.js";
 import { t as formatDocsLink } from "./links-BDe4dm1J.js";
 import { r as listChannelPluginCatalogEntries } from "./catalog-CPv67Mhc.js";

package/dist/{onboard-helpers---sZ9pdZ.js → onboard-helpers-DP7FgSbE.js}

@@ -8,7 +8,7 @@ import { n as pickPrimaryTailnetIPv4 } from "./tailnet-XKACsamF.js";
 import { c as pickPrimaryLanIPv4, o as isValidIPv4 } from "./ws-C7Ktmt-R.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-DgjXWzf-.js";
 import { s as resolveSessionTranscriptsDirForAgent } from "./paths-BtvQ7JvU.js";
-import { n as callGateway } from "./call-BouPakqe.js";
+import { n as callGateway } from "./call-BOE4s-tQ.js";
 import { r as stylePromptTitle } from "./prompt-style-BEDZROvQ.js";
 import { t as isWSL } from "./wsl-DMA0sTvh.js";
 import crypto from "node:crypto";

package/dist/{onboard-remote-BUB3VPBP.js → onboard-remote-KlZ04Ycj.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { r as detectBinary } from "./onboard-helpers---sZ9pdZ.js";
+import { r as detectBinary } from "./onboard-helpers-DP7FgSbE.js";
 import { n as resolveWideAreaDiscoveryDomain } from "./widearea-dns-CK7KqIOE.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-C44-sj_H.js";
 

package/dist/{onboard-skills-Cs3BZ4VJ.js → onboard-skills-C2YVZLtY.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { t as formatCliCommand } from "./command-format-BzjsXBTi.js";
 import { n as normalizeSecretInput } from "./normalize-secret-input-DjGU5EXe.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-iltfI_bO.js";
-import { _ as resolveNodeManagerOptions, r as detectBinary } from "./onboard-helpers---sZ9pdZ.js";
+import { _ as resolveNodeManagerOptions, r as detectBinary } from "./onboard-helpers-DP7FgSbE.js";
 import { t as installSkill } from "./skills-install-CLN_Ks5r.js";
 
 //#region src/commands/onboard-skills.ts

package/dist/{onboarding-BeYl1Egj.js → onboarding-Bkqm3GYG.js}

@@ -223,7 +223,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const { ensureAuthProfileStore } = await import("./auth-profiles-D11Xw15i.js").then((n) => n.t);
 	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-BMT9i-O0.js").then((n) => n.t);
 	const { promptCustomApiConfig } = await import("./onboard-custom-BcR121kZ.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-Ryx7oj6G.js").then((n) => n.t);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-BkSsm1pk.js").then((n) => n.t);
 	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-BAKALONd.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
@@ -276,7 +276,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-BsEhWvLn.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-A6_QP7MR.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-MlbB9sk1.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -302,7 +302,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-Bk-XW8b3.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-Dj2kTz2P.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding-BWMBA6cP.js → onboarding-Dhjsa9Kl.js}

@@ -36,7 +36,7 @@ async function requireRiskAcknowledgement(params) {
 	})) throw new WizardCancelledError("risk not accepted");
 }
 async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
-	const onboardHelpers = await import("./onboard-helpers---sZ9pdZ.js").then((n) => n.d);
+	const onboardHelpers = await import("./onboard-helpers-DP7FgSbE.js").then((n) => n.d);
 	onboardHelpers.printWizardHeader(runtime);
 	await prompter.intro("Symi onboarding");
 	await requireRiskAcknowledgement({
@@ -204,7 +204,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		}]
 	}));
 	if (mode === "remote") {
-		const { promptRemoteGatewayConfig } = await import("./onboard-remote-BUB3VPBP.js").then((n) => n.t);
+		const { promptRemoteGatewayConfig } = await import("./onboard-remote-KlZ04Ycj.js").then((n) => n.t);
 		const { logConfigUpdated } = await import("./logging-CoYSc9bY.js").then((n) => n.r);
 		let nextConfig = await promptRemoteGatewayConfig(baseConfig, prompter);
 		nextConfig = onboardHelpers.applyWizardMetadata(nextConfig, {
@@ -225,7 +225,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const { ensureAuthProfileStore } = await import("./auth-profiles-Ce7R_25e.js").then((n) => n.t);
 	const { promptAuthChoiceGrouped } = await import("./auth-choice-prompt-D8hErqN3.js").then((n) => n.t);
 	const { promptCustomApiConfig } = await import("./onboard-custom-BrtjWDlX.js").then((n) => n.r);
-	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-DwXdS4c2.js").then((n) => n.t);
+	const { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff } = await import("./auth-choice-L6_DvGSb.js").then((n) => n.t);
 	const { applyPrimaryModel, promptDefaultModel } = await import("./model-picker-D4TY_tPx.js").then((n) => n.i);
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
@@ -263,7 +263,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		if (modelSelection.model) nextConfig = applyPrimaryModel(nextConfig, modelSelection.model);
 	}
 	await warnIfModelConfigLooksOff(nextConfig, prompter);
-	const { configureGatewayForOnboarding } = await import("./onboarding.gateway-config-arRNxrI9.js");
+	const { configureGatewayForOnboarding } = await import("./onboarding.gateway-config-1PP2Esxt.js");
 	const gateway = await configureGatewayForOnboarding({
 		flow,
 		baseConfig,
@@ -278,7 +278,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
 	else {
 		const { listChannelPlugins } = await import("./plugins-CF5skkHh.js").then((n) => n.i);
-		const { setupChannels } = await import("./onboard-channels-E5NIYGJz.js").then((n) => n.n);
+		const { setupChannels } = await import("./onboard-channels-Bf0N23cr.js").then((n) => n.n);
 		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
 		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
 			allowSignalInstall: true,
@@ -294,7 +294,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	await onboardHelpers.ensureWorkspaceAndSessions(workspaceDir, runtime, { skipBootstrap: Boolean(nextConfig.agents?.defaults?.skipBootstrap) });
 	if (opts.skipSkills) await prompter.note("Skipping skills setup.", "Skills");
 	else {
-		const { setupSkills } = await import("./onboard-skills-Cs3BZ4VJ.js").then((n) => n.t);
+		const { setupSkills } = await import("./onboard-skills-C2YVZLtY.js").then((n) => n.t);
 		nextConfig = await setupSkills(nextConfig, workspaceDir, runtime, prompter);
 	}
 	const { setupInternalHooks } = await import("./onboard-hooks-CtIRdncr.js");
@@ -304,7 +304,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-CH8dBgA2.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-DEnbT-08.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding.finalize-CH8dBgA2.js → onboarding.finalize-DEnbT-08.js}

@@ -7,20 +7,20 @@ import { t as formatCliCommand } from "./command-format-BzjsXBTi.js";
 import "./exec-DuYbft0z.js";
 import { h as DEFAULT_BOOTSTRAP_FILENAME } from "./agent-scope-DOrZjOnW.js";
 import "./model-selection-7wdmO-Iw.js";
-import "./pi-embedded-helpers-B5cWV7_y.js";
+import "./pi-embedded-helpers-x7n6pMgT.js";
 import "./config-D7SS4vdk.js";
 import "./boolean-CbZoNRMn.js";
 import "./env-BRnPI9sO.js";
 import "./shell-env-Dc3iU7HK.js";
 import "./manifest-registry-D1MLZEjS.js";
-import "./sandbox-Dx8IMw-E.js";
-import "./chrome-rzK8edU7.js";
+import "./sandbox-DR_uvPm8.js";
+import "./chrome-xlyBE8q3.js";
 import "./tailscale-DpKBMIvx.js";
 import "./auth-Bkx-QuRN.js";
-import "./server-context--mmXXEkE.js";
+import "./server-context-DZK_rfwz.js";
 import "./frontmatter-B_jqcova.js";
 import "./skills-BwDmcZdt.js";
-import "./routes-C-rIjd8Z.js";
+import "./routes-DIFuU49J.js";
 import "./redact-B3O-RBO1.js";
 import "./errors-bI7Tdx75.js";
 import "./fs-safe-BdejYjW8.js";
@@ -37,26 +37,26 @@ import "./paths-BtvQ7JvU.js";
 import "./thinking-COroyVA5.js";
 import "./commands-DUzLGgEZ.js";
 import "./commands-registry-VfAQOVZO.js";
-import "./client-BzUAFrla.js";
-import "./call-BouPakqe.js";
+import "./client-iv2QpsT1.js";
+import "./call-BOE4s-tQ.js";
 import "./pairing-token-Dcy37-4s.js";
 import "./tool-display-DFOL6UQ9.js";
 import "./bindings-CLS_owm_.js";
 import "./progress-HNhsbm0E.js";
 import "./runtime-guard-DfRLODeV.js";
-import "./program-context-ByiEP1Lk.js";
+import "./program-context-DFJyoCC0.js";
 import "./prompt-style-BEDZROvQ.js";
 import "./note-DlaPViz1.js";
-import { r as installCompletion } from "./completion-cli-Bc1jojml.js";
+import { r as installCompletion } from "./completion-cli-DvaCHwGr.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-tZgIbDPz.js";
-import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, m as probeGatewayReachable, o as formatControlUiSshHint } from "./onboard-helpers---sZ9pdZ.js";
+import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, m as probeGatewayReachable, o as formatControlUiSshHint } from "./onboard-helpers-DP7FgSbE.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DRpQb_L1.js";
 import { t as resolveGatewayService } from "./service-CyEDtYLq.js";
-import { r as healthCommand } from "./health-DZ0aipDZ.js";
+import { r as healthCommand } from "./health-B92I0vwb.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DuDhl0co.js";
 import { t as formatHealthCheckFailure } from "./health-format-CUEM0lJl.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-B6OPl_GZ.js";
-import { t as runTui } from "./tui-CqrM_Fj2.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-C4vmp9I7.js";
+import { t as runTui } from "./tui-BADAjgA5.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";

package/dist/{onboarding.finalize-Bk-XW8b3.js → onboarding.finalize-Dj2kTz2P.js}

@@ -40,10 +40,10 @@ import "./bindings-BpMZcmYL.js";
 import "./progress-CqV5lJkt.js";
 import "./prompt-style-BIa9VCNS.js";
 import "./note--x67NNhv.js";
-import "./register.subclis-D9uGnVGm.js";
-import "./command-registry-DAy62yhH.js";
+import "./register.subclis-BVReTdEZ.js";
+import "./command-registry-CZrQWdR_.js";
 import "./program-context-4vIUuzQk.js";
-import { r as installCompletion } from "./completion-cli-Bh-Y2NVp.js";
+import { r as installCompletion } from "./completion-cli-CPiZTObN.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Cyqcsmvq.js";
 import "./runtime-guard-C8jl1lEu.js";
 import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, m as probeGatewayReachable, o as formatControlUiSshHint } from "./onboard-helpers-Cut7JJgz.js";
@@ -52,7 +52,7 @@ import { t as resolveGatewayService } from "./service-Bhr6wh5u.js";
 import { r as healthCommand } from "./health-CXUnVb6i.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-C_5Ba0OA.js";
 import { t as formatHealthCheckFailure } from "./health-format-y74JTiFu.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-BZJWX3Dr.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-CBs1R4s0.js";
 import { t as runTui } from "./tui-KP3CPTV4.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{onboarding.gateway-config-arRNxrI9.js → onboarding.gateway-config-1PP2Esxt.js}

@@ -16,11 +16,11 @@ import "./dock-hF45sewN.js";
 import "./message-channel-DgjXWzf-.js";
 import "./plugins-CF5skkHh.js";
 import "./paths-BtvQ7JvU.js";
-import "./client-BzUAFrla.js";
-import "./call-BouPakqe.js";
+import "./client-iv2QpsT1.js";
+import "./call-BOE4s-tQ.js";
 import "./pairing-token-Dcy37-4s.js";
 import "./prompt-style-BEDZROvQ.js";
-import { h as randomToken, u as normalizeGatewayTokenInput, y as validateGatewayPasswordInput } from "./onboard-helpers---sZ9pdZ.js";
+import { h as randomToken, u as normalizeGatewayTokenInput, y as validateGatewayPasswordInput } from "./onboard-helpers-DP7FgSbE.js";
 import { i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-Coaw2jro.js";
 
 //#region src/wizard/onboarding.gateway-config.ts

package/dist/{pi-embedded-0I7WdtRz.js → pi-embedded-DisxTf9Y.js}

@@ -9,7 +9,7 @@ import { i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as reso
 import { t as normalizeChatType } from "./chat-type-Acj2OK2p.js";
 import { i as resolveSlackAccount, n as listChannelPlugins, o as resolveSlackAppToken, r as normalizeChannelId$1, s as resolveSlackBotToken, t as getChannelPlugin } from "./plugins-CZ_mYwXq.js";
 import { S as resolveSlackChannelId, _ as resolveSlackWebClientOptions, a as sendMessageSlack, b as buildSlackBlocksFallbackText, c as getDefaultLocalRoots, d as fetchRemoteMedia, f as readResponseWithLimit, g as createSlackWebClient, h as fetchWithTimeout, i as resolveSlackThreadTs, l as loadWebMedia, m as bindAbortRelay, n as deliverReplies, o as renderMarkdownWithMarkers, p as fetchWithSsrFGuard, s as markdownToIRWithMeta, t as createSlackReplyDeliveryPlan, u as MediaFetchError, v as parseSlackBlocksInput, x as parseSlackTarget, y as validateSlackBlocksArray } from "./replies-BYF1gbJf.js";
-import { $ as loadSessionStore, $t as resolveToolProfilePolicy, A as formatRawAssistantErrorForUi, At as resolveMainSessionKey, B as isRateLimitAssistantError, Bt as saveMediaBuffer, C as downgradeOpenAIReasoningBlocks, Ct as resolveChannelResetConfig, D as classifyFailoverReason, Dt as DEFAULT_RESET_TRIGGERS, E as BILLING_ERROR_USER_MESSAGE, Et as resolveThreadFlag, F as isCompactionFailureError, Ft as createBrowserRouteContext, G as parseImageSizeError, Gt as resolveBrowserControlAuth, H as isTimeoutErrorMessage, Ht as resolveExistingPathsWithinRoot, I as isContextOverflowError, It as registerBrowserRoutes, J as resolveSandboxContext, Jt as collectExplicitAllowlist, K as sanitizeUserFacingText, Kt as applyOwnerOnlyToolPolicy, L as isFailoverAssistantError, Lt as resolveBrowserConfig, M as isAuthAssistantError, Mt as resolveGroupSessionKey, N as isBillingAssistantError, Nt as acquireSessionWriteLock, O as formatAssistantErrorText, Ot as resolveFreshSessionTotalTokens, P as isCloudCodeAssistFormatError, Pt as resolveSessionLockMaxHoldFromTimeout, Q as resolveAndPersistSessionFile, Qt as normalizeToolName$1, R as isFailoverErrorMessage, Rt as resolveProfile, S as extractToolResultId, St as evaluateSessionFreshness, T as isGoogleModelApi, Tt as resolveSessionResetType, U as isTransientHttpError, Ut as getBridgeAuthForPort, V as isRawApiErrorPayload, Vt as DEFAULT_UPLOAD_DIR, W as parseImageDimensionError, Wt as ensureBrowserControlAuth, X as extractDeliveryInfo, Xt as expandToolGroups, Y as resolveSandboxRuntimeStatus, Yt as expandPolicyWithPluginGroups, Z as appendAssistantMessageToSessionTranscript, Zt as mergeAlsoAllowPolicy, _ as sanitizeSessionMessagesImages, _t as INPUT_PROVENANCE_KIND_VALUES, a as normalizeChannelTargetInput, an as resolveBootstrapMaxChars, at as updateSessionStoreEntry, b as resolveImageSanitizationLimits, bt as normalizeInputProvenance, c as parseReplyDirectives, cn as getGlobalHookRunner, ct as deliveryContextFromSession, d as parseInlineDirectives$1, dt as normalizeDeliveryContext, en as stripPluginOnlyAllowlist, et as readSessionUpdatedAt, f as validateAnthropicTurns, ft as normalizeSessionDeliveryFields, g as normalizeTextForComparison, gt as extractToolCallNames, h as isMessagingToolDuplicateNormalized, ht as countToolResults, i as buildTargetResolverSignature, in as ensureSessionHeader, it as updateSessionStore, j as getApiErrorPayloadFingerprint, jt as deriveSessionMetaPatch, k as formatBillingErrorMessage, kt as canonicalizeMainSessionAlias, l as MEDIA_TOKEN_RE, ln as initializeGlobalHookRunner, lt as deliveryContextKey, m as pickFallbackThinkingLevel, mt as capArrayByJsonBytes, nn as matchesAnyGlobPattern, o as normalizeTargetForProvider, on as resolveBootstrapTotalMaxChars, ot as isCacheEnabled, p as validateGeminiTurns, pt as archiveSessionTranscripts, q as ensureSandboxWorkspaceForSession, qt as buildPluginToolGroups, r as normalizeReplyPayloadsForDelivery, rn as buildBootstrapContextFiles, rt as updateLastRoute, s as throwIfAborted, sn as sanitizeGoogleTurnOrdering, st as resolveCacheTtlMs$1, t as deliverOutboundPayloads, tn as compileGlobPatterns, tt as recordSessionMetaFromInbound, u as splitMediaFromOutput, ut as mergeDeliveryContext, v as sanitizeImageBlocks, vt as applyInputProvenanceToUserMessage, w as isAntigravityClaude, wt as resolveSessionResetPolicy, x as extractToolCallsFromAssistant, xt as resolveSessionKey, y as sanitizeToolResultImages, yt as hasInterSessionUserProvenance, z as isLikelyContextOverflowError, zt as getMediaDir } from "./deliver-oWGJwzFf.js";
+import { $ as loadSessionStore, $t as resolveToolProfilePolicy, A as formatRawAssistantErrorForUi, At as resolveMainSessionKey, B as isRateLimitAssistantError, Bt as saveMediaBuffer, C as downgradeOpenAIReasoningBlocks, Ct as resolveChannelResetConfig, D as classifyFailoverReason, Dt as DEFAULT_RESET_TRIGGERS, E as BILLING_ERROR_USER_MESSAGE, Et as resolveThreadFlag, F as isCompactionFailureError, Ft as createBrowserRouteContext, G as parseImageSizeError, Gt as resolveBrowserControlAuth, H as isTimeoutErrorMessage, Ht as resolveExistingPathsWithinRoot, I as isContextOverflowError, It as registerBrowserRoutes, J as resolveSandboxContext, Jt as collectExplicitAllowlist, K as sanitizeUserFacingText, Kt as applyOwnerOnlyToolPolicy, L as isFailoverAssistantError, Lt as resolveBrowserConfig, M as isAuthAssistantError, Mt as resolveGroupSessionKey, N as isBillingAssistantError, Nt as acquireSessionWriteLock, O as formatAssistantErrorText, Ot as resolveFreshSessionTotalTokens, P as isCloudCodeAssistFormatError, Pt as resolveSessionLockMaxHoldFromTimeout, Q as resolveAndPersistSessionFile, Qt as normalizeToolName$1, R as isFailoverErrorMessage, Rt as resolveProfile, S as extractToolResultId, St as evaluateSessionFreshness, T as isGoogleModelApi, Tt as resolveSessionResetType, U as isTransientHttpError, Ut as getBridgeAuthForPort, V as isRawApiErrorPayload, Vt as DEFAULT_UPLOAD_DIR, W as parseImageDimensionError, Wt as ensureBrowserControlAuth, X as extractDeliveryInfo, Xt as expandToolGroups, Y as resolveSandboxRuntimeStatus, Yt as expandPolicyWithPluginGroups, Z as appendAssistantMessageToSessionTranscript, Zt as mergeAlsoAllowPolicy, _ as sanitizeSessionMessagesImages, _t as INPUT_PROVENANCE_KIND_VALUES, a as normalizeChannelTargetInput, an as resolveBootstrapMaxChars, at as updateSessionStoreEntry, b as resolveImageSanitizationLimits, bt as normalizeInputProvenance, c as parseReplyDirectives, cn as getGlobalHookRunner, ct as deliveryContextFromSession, d as parseInlineDirectives$1, dt as normalizeDeliveryContext, en as stripPluginOnlyAllowlist, et as readSessionUpdatedAt, f as validateAnthropicTurns, ft as normalizeSessionDeliveryFields, g as normalizeTextForComparison, gt as extractToolCallNames, h as isMessagingToolDuplicateNormalized, ht as countToolResults, i as buildTargetResolverSignature, in as ensureSessionHeader, it as updateSessionStore, j as getApiErrorPayloadFingerprint, jt as deriveSessionMetaPatch, k as formatBillingErrorMessage, kt as canonicalizeMainSessionAlias, l as MEDIA_TOKEN_RE, ln as initializeGlobalHookRunner, lt as deliveryContextKey, m as pickFallbackThinkingLevel, mt as capArrayByJsonBytes, nn as matchesAnyGlobPattern, o as normalizeTargetForProvider, on as resolveBootstrapTotalMaxChars, ot as isCacheEnabled, p as validateGeminiTurns, pt as archiveSessionTranscripts, q as ensureSandboxWorkspaceForSession, qt as buildPluginToolGroups, r as normalizeReplyPayloadsForDelivery, rn as buildBootstrapContextFiles, rt as updateLastRoute, s as throwIfAborted, sn as sanitizeGoogleTurnOrdering, st as resolveCacheTtlMs$1, t as deliverOutboundPayloads, tn as compileGlobPatterns, tt as recordSessionMetaFromInbound, u as splitMediaFromOutput, ut as mergeDeliveryContext, v as sanitizeImageBlocks, vt as applyInputProvenanceToUserMessage, w as isAntigravityClaude, wt as resolveSessionResetPolicy, x as extractToolCallsFromAssistant, xt as resolveSessionKey, y as sanitizeToolResultImages, yt as hasInterSessionUserProvenance, z as isLikelyContextOverflowError, zt as getMediaDir } from "./deliver-Cjyb6h4g.js";
 import { a as logMessageProcessed, i as logLaneEnqueue, o as logMessageQueued, r as logLaneDequeue, s as logSessionStateChange, t as diag } from "./diagnostic-BdRnGknC.js";
 import { n as getDiagnosticSessionState } from "./diagnostic-session-state-DpxCUzoM.js";
 import { S as GATEWAY_CLIENT_NAMES, _ as listDeliverableMessageChannels, a as chunkText, b as GATEWAY_CLIENT_IDS, c as resolveChunkMode, d as isSafeFenceBreak, f as parseFenceSpans, g as isMarkdownCapableMessageChannel, h as isInternalMessageChannel, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit, m as isDeliverableMessageChannel, o as chunkTextWithMode, p as INTERNAL_MESSAGE_CHANNEL, r as chunkMarkdownText, t as chunkByNewline, u as findFenceSpanAt, v as normalizeMessageChannel, x as GATEWAY_CLIENT_MODES, y as resolveGatewayMessageChannel } from "./chunk-CAZujdOi.js";
@@ -18,7 +18,7 @@ import { C as unsetConfigValueAtPath, S as setConfigValueAtPath, T as VERSION, _
 import { t as parseBooleanValue } from "./boolean-BW6OTjPi.js";
 import { i as resolveShellEnvFallbackTimeoutMs, n as getShellPathFromLoginShell, s as isTruthyEnvValue } from "./shell-env-DgjeObDZ.js";
 import { c as normalizePluginsConfig, f as isPathInsideWithRealpath, i as safeStatSync, l as resolveEnableState, n as discoverSymiPlugins, p as isDangerousHostEnvVarName, r as isPathInside, s as applyTestPluginDefaults, t as loadPluginManifestRegistry, u as resolveMemorySlotDecision } from "./manifest-registry-CAWGTwb5.js";
-import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-B7-rO4i9.js";
+import { C as rawDataToString, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as isSecureWebSocketUrl, x as ensureChromeExtensionRelayServer } from "./chrome-BKUACyeO.js";
 import { n as resolveCliName, t as formatCliCommand } from "./command-format-DPd9RN2g.js";
 import { c as assertSandboxPath, d as resolveSandboxedMediaSource, f as applySkillEnvOverrides, h as parseFrontmatterBlock, i as resolveSkillsPromptForRun, l as resolveSandboxInputPath, n as buildWorkspaceSkillSnapshot, p as applySkillEnvOverridesFromSnapshot, r as loadWorkspaceSkillEntries, s as assertMediaNotDataUrl } from "./skills-DO7WNsVJ.js";
 import { n as redactToolDetail } from "./redact-DSOAcWMe.js";
@@ -29,7 +29,7 @@ import { n as resolveConversationLabel } from "./conversation-label-DTTqF8gH.js"
 import { i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as resolveSessionTranscriptsDirForAgent, r as resolveSessionFilePathOptions, s as resolveStorePath, t as resolveDefaultSessionStorePath } from "./paths-BsT3BvfH.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-ChU6IQwp.js";
 import { n as saveJsonFile, t as loadJsonFile } from "./json-file-B7D44OOV.js";
-import { a as parseGeminiAuth, c as resolveMemorySearchConfig, d as requireApiKey, f as resolveApiKeyForProvider, h as resolveModelAuthMode, i as resolveOllamaBaseUrl, l as getApiKeyForModel, m as resolveEnvApiKey, n as retryAsync, o as collectProviderApiKeysForExecution, p as resolveAwsSdkEnvVarName, r as probeOllamaEmbeddingModels, s as executeWithApiKeyRotation, u as getCustomProviderApiKey } from "./manager-DhHNnMyK.js";
+import { a as parseGeminiAuth, c as resolveMemorySearchConfig, d as requireApiKey, f as resolveApiKeyForProvider, h as resolveModelAuthMode, i as resolveOllamaBaseUrl, l as getApiKeyForModel, m as resolveEnvApiKey, n as retryAsync, o as collectProviderApiKeysForExecution, p as resolveAwsSdkEnvVarName, r as probeOllamaEmbeddingModels, s as executeWithApiKeyRotation, u as getCustomProviderApiKey } from "./manager-Dz4nKG33.js";
 import { r as resolveCopilotApiToken, t as DEFAULT_COPILOT_API_BASE_URL } from "./github-copilot-token-dYUr1mDQ.js";
 import { c as normalizeExtraMemoryPaths, f as runTasksWithConcurrency, s as listMemoryFiles } from "./internal-Ce-sg7EN.js";
 import { n as resolveMarkdownTableMode } from "./markdown-tables-jQzXAsf3.js";
@@ -53,7 +53,7 @@ import { fileURLToPath } from "node:url";
 import { CURRENT_SESSION_VERSION, DefaultResourceLoader, SessionManager, SettingsManager, codingTools, createAgentSession, createEditTool, createReadTool, createWriteTool, estimateTokens, generateSummary, readTool } from "@mariozechner/pi-coding-agent";
 import crypto, { X509Certificate, createHash, createHmac, randomBytes, randomUUID } from "node:crypto";
 import AjvPkg from "ajv";
-import { WebSocket as WebSocket$1 } from "ws";
+import { WebSocket } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { complete, createAssistantMessageEventStream, streamSimple } from "@mariozechner/pi-ai";
 import { BedrockClient, ListFoundationModelsCommand } from "@aws-sdk/client-bedrock";
@@ -3390,7 +3390,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-DhHNnMyK.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-Dz4nKG33.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -3403,7 +3403,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-DhHNnMyK.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-Dz4nKG33.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -5918,7 +5918,7 @@ var GatewayClient = class {
 				if (fingerprint !== expected) return /* @__PURE__ */ new Error("gateway tls fingerprint mismatch");
 			});
 		}
-		this.ws = new WebSocket$1(url, wsOptions);
+		this.ws = new WebSocket(url, wsOptions);
 		this.ws.on("open", () => {
 			if (url.startsWith("wss://") && this.opts.tlsFingerprint) {
 				const tlsError = this.validateTlsFingerprint();
@@ -6137,7 +6137,7 @@ var GatewayClient = class {
 		return null;
 	}
 	async request(method, params, opts) {
-		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error("gateway not connected");
+		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error("gateway not connected");
 		const id = randomUUID();
 		const frame = {
 			type: "req",
@@ -7084,7 +7084,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-oWGJwzFf.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-Cjyb6h4g.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -41140,7 +41140,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-oWGJwzFf.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-Cjyb6h4g.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -60903,6 +60903,44 @@ function applyToolPolicyPipeline(params) {
 	return filtered;
 }
 
+//#endregion
+//#region src/agents/tools/availability-filter.ts
+const FORCE_ALL_TOOLS_ENV = "SYMI_FORCE_ALL_TOOLS";
+/**
+* Filter the tool palette by each tool's `checkFn`. Tools without a
+* checkFn pass through unchanged. Throwing checkFns are treated as
+* available (defensive). The `SYMI_FORCE_ALL_TOOLS=1` env bypasses the
+* filter entirely.
+*
+* Pure function — does not mutate the input array.
+*/
+function filterToolsByAvailability(tools) {
+	if (isTruthyEnvValue(process.env[FORCE_ALL_TOOLS_ENV])) return [...tools];
+	const out = [];
+	for (const tool of tools) {
+		if (!tool.checkFn) {
+			out.push(tool);
+			continue;
+		}
+		let available;
+		try {
+			available = tool.checkFn();
+		} catch (err) {
+			logVerbose(`tool availability: checkFn for "${getToolName(tool)}" threw — including tool anyway. ${String(err)}`);
+			out.push(tool);
+			continue;
+		}
+		if (available) out.push(tool);
+		else logVerbose(`tool availability: filtered out "${getToolName(tool)}" — checkFn returned false. Set ${FORCE_ALL_TOOLS_ENV}=1 to bypass this filter.`);
+	}
+	return out;
+}
+function getToolName(tool) {
+	const definition = tool.definition;
+	if (definition && typeof definition.name === "string") return definition.name;
+	return "(unknown tool)";
+}
+
 //#endregion
 //#region src/agents/pi-tools.ts
 function isOpenAIProvider(provider) {
@@ -61122,7 +61160,7 @@ function createSymiCodingTools(options) {
 		root: sandboxRoot,
 		bridge: sandboxFsBridge
 	}), readEditTracker) : null;
-	const withHooks = applyToolPolicyPipeline({
+	const withHooks = filterToolsByAvailability(applyToolPolicyPipeline({
 		tools: applyOwnerOnlyToolPolicy([
 			...base,
 			...sandboxRoot ? allowWorkspaceWrites && sandboxedEditTool && sandboxedWriteTool ? [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedEditTool, sandboxRoot) : sandboxedEditTool, workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedWriteTool, sandboxRoot) : sandboxedWriteTool] : [] : [],
@@ -61194,7 +61232,7 @@ function createSymiCodingTools(options) {
 				label: "subagent tools.allow"
 			}
 		]
-	}).map((tool) => normalizeToolParameters(tool, { modelProvider: options?.modelProvider })).map((tool) => wrapToolWithBeforeToolCallHook(tool, {
+	})).map((tool) => normalizeToolParameters(tool, { modelProvider: options?.modelProvider })).map((tool) => wrapToolWithBeforeToolCallHook(tool, {
 		agentId,
 		sessionKey: options?.sessionKey,
 		loopDetection: resolveToolLoopDetectionConfig({

package/dist/{pi-embedded-helpers-B5cWV7_y.js → pi-embedded-helpers-x7n6pMgT.js}

@@ -1,6 +1,6 @@
 import { x as truncateUtf16Safe } from "./utils-CTPsqyE_.js";
 import { t as createSubsystemLogger } from "./subsystem-CHbO_DkH.js";
-import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-Dx8IMw-E.js";
+import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-DR_uvPm8.js";
 import { i as getImageMetadata, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS } from "./image-ops-L70xVnpG.js";
 import { s as normalizeThinkLevel } from "./thinking-COroyVA5.js";
 import { createHash } from "node:crypto";

package/dist/{pi-tools.policy-BdGVEMZn.js → pi-tools.policy-J58A7qFU.js}

@@ -1,7 +1,7 @@
 import { S as resolveThreadParentSessionKey, c as resolveAgentIdFromSessionKey } from "./session-key-DUSb7CCb.js";
 import { r as resolveAgentConfig } from "./agent-scope-DOrZjOnW.js";
 import { A as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH } from "./config-D7SS4vdk.js";
-import { T as matchesAnyGlobPattern, w as compileGlobPatterns, x as normalizeToolName, y as expandToolGroups } from "./sandbox-Dx8IMw-E.js";
+import { T as matchesAnyGlobPattern, w as compileGlobPatterns, x as normalizeToolName, y as expandToolGroups } from "./sandbox-DR_uvPm8.js";
 import { a as resolveChannelGroupToolsPolicy, t as getChannelDock } from "./dock-hF45sewN.js";
 import { l as normalizeMessageChannel } from "./message-channel-DgjXWzf-.js";