@symerian/symi 3.4.25 → 3.4.27

package/dist/{unified-runner-DZAjU6aB.js → unified-runner-BIUJm_Iv.js}

@@ -3,91 +3,91 @@ import { D as shouldLogVerbose, H as createInternalHookEvent, M as getChildLogge
 import { _ as resolveStateDir, u as resolveGatewayPort } from "./paths-By0XjHBk.js";
 import { S as isPlainObject, _ as shortenHomeInString, b as sliceUtf16Safe, c as escapeRegExp, h as resolveUserPath, r as clampInt, t as CONFIG_DIR, u as isRecord, v as shortenHomePath, x as truncateUtf16Safe, y as sleep } from "./utils-CTPsqyE_.js";
 import { d as createNonExitingRuntime, f as defaultRuntime, t as createSubsystemLogger } from "./subsystem-CHbO_DkH.js";
-import { T as resolveAuthProfileDisplayLabel, a as markAuthProfileFailure, b as ensureAuthProfileStore, g as markAuthProfileGood, h as listProfilesForProvider, i as isProfileInCooldown, n as resolveAuthProfileOrder, o as markAuthProfileUsed, r as getSoonestCooldownExpiry, w as resolveAuthStorePathForDisplay } from "./auth-profiles-Ce7R_25e.js";
+import { T as resolveAuthProfileDisplayLabel, a as markAuthProfileFailure, b as ensureAuthProfileStore, g as markAuthProfileGood, h as listProfilesForProvider, i as isProfileInCooldown, n as resolveAuthProfileOrder, o as markAuthProfileUsed, r as getSoonestCooldownExpiry, w as resolveAuthStorePathForDisplay } from "./auth-profiles-D5nYBj_Z.js";
 import { t as formatCliCommand } from "./command-format-BzjsXBTi.js";
 import { S as resolveThreadParentSessionKey, _ as isAcpSessionKey, a as classifySessionKeyShape, b as isSubagentSessionKey, c as resolveAgentIdFromSessionKey, g as getSubagentDepth, l as resolveThreadSessionKeys, m as normalizeAccountId, o as normalizeAgentId, p as DEFAULT_ACCOUNT_ID, r as buildAgentMainSessionKey, s as normalizeMainKey, t as DEFAULT_AGENT_ID, u as sanitizeAgentId, x as parseAgentSessionKey, y as isCronSessionKey } from "./session-key-DUSb7CCb.js";
-import { n as resolveSymiPackageRootSync, t as resolveSymiPackageRoot } from "./symi-root-BQ0IpoW2.js";
+import { n as resolveSymiPackageRootSync, t as resolveSymiPackageRoot } from "./symi-root-DeCVdZB4.js";
 import { a as logError, i as logDebug, n as runExec, o as logInfo, r as spawnWithFallback, s as logWarn, t as runCommandWithTimeout } from "./exec-DuYbft0z.js";
-import { C as ensureAgentWorkspace, E as loadWorkspaceBootstrapFiles, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, f as resolveSessionAgentIds, h as DEFAULT_BOOTSTRAP_FILENAME, i as resolveAgentDir, l as resolveDefaultAgentId, m as DEFAULT_AGENT_WORKSPACE_DIR, r as resolveAgentConfig, s as resolveAgentSkillsFilter, w as filterBootstrapFilesForSession } from "./agent-scope-DOrZjOnW.js";
-import { C as DEFAULT_MODEL, S as DEFAULT_CONTEXT_TOKENS, _ as resolveModelRefFromString, a as findNormalizedProviderValue, b as resolveThinkingDefault, c as modelKey, h as resolveDefaultModelForAgent, l as normalizeModelRef$1, m as resolveConfiguredModelRef, n as buildConfiguredAllowlistKeys, r as buildModelAliasIndex, t as buildAllowedModelSet, u as normalizeProviderId, w as DEFAULT_PROVIDER, x as getProviderAdapter, y as resolveSubagentSpawnModelSelection } from "./model-selection-7wdmO-Iw.js";
+import { C as ensureAgentWorkspace, E as loadWorkspaceBootstrapFiles, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, f as resolveSessionAgentIds, h as DEFAULT_BOOTSTRAP_FILENAME, i as resolveAgentDir, l as resolveDefaultAgentId, m as DEFAULT_AGENT_WORKSPACE_DIR, r as resolveAgentConfig, s as resolveAgentSkillsFilter, w as filterBootstrapFilesForSession } from "./agent-scope-Bnsyyeci.js";
+import { C as DEFAULT_MODEL, S as DEFAULT_CONTEXT_TOKENS, _ as resolveModelRefFromString, a as findNormalizedProviderValue, b as resolveThinkingDefault, c as modelKey, h as resolveDefaultModelForAgent, l as normalizeModelRef$1, m as resolveConfiguredModelRef, n as buildConfiguredAllowlistKeys, r as buildModelAliasIndex, t as buildAllowedModelSet, u as normalizeProviderId, w as DEFAULT_PROVIDER, x as getProviderAdapter, y as resolveSubagentSpawnModelSelection } from "./model-selection-CCTzD29o.js";
 import { n as normalizeSecretInput } from "./normalize-secret-input-DjGU5EXe.js";
 import { n as saveJsonFile, t as loadJsonFile } from "./json-file-CNp4GTiH.js";
 import { t as resolveSymiAgentDir } from "./agent-paths-BbZSGrUA.js";
-import { A as isRawApiErrorPayload, B as sanitizeGoogleTurnOrdering, C as isCloudCodeAssistFormatError, D as isFailoverErrorMessage, E as isFailoverAssistantError, F as sanitizeUserFacingText, I as buildBootstrapContextFiles, L as ensureSessionHeader, M as isTransientHttpError, N as parseImageDimensionError, O as isLikelyContextOverflowError, P as parseImageSizeError, R as resolveBootstrapMaxChars, S as isBillingAssistantError, T as isContextOverflowError, _ as formatAssistantErrorText, a as normalizeTextForComparison, b as getApiErrorPayloadFingerprint, c as sanitizeToolResultImages, d as extractToolResultId, f as downgradeOpenAIReasoningBlocks, g as classifyFailoverReason, h as BILLING_ERROR_USER_MESSAGE, i as isMessagingToolDuplicateNormalized, j as isTimeoutErrorMessage, k as isRateLimitAssistantError, l as resolveImageSanitizationLimits, m as isGoogleModelApi, n as validateGeminiTurns, o as sanitizeSessionMessagesImages, p as isAntigravityClaude, r as pickFallbackThinkingLevel, s as sanitizeImageBlocks, t as validateAnthropicTurns, u as extractToolCallsFromAssistant, v as formatBillingErrorMessage, w as isCompactionFailureError, x as isAuthAssistantError, y as formatRawAssistantErrorForUi, z as resolveBootstrapTotalMaxChars } from "./pi-embedded-helpers-B5cWV7_y.js";
-import { A as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, C as unsetConfigValueAtPath, N as VERSION, S as setConfigValueAtPath, _ as resetConfigOverrides, b as getConfigValueAtPath, c as resolveConfigSnapshotHash, f as parseDurationMs, g as getConfigOverrides, h as validateJsonSchemaValue, i as loadConfig, l as writeConfigFile, o as readConfigFileSnapshot, u as validateConfigObjectWithPlugins, v as setConfigOverride, x as parseConfigPath, y as unsetConfigOverride } from "./config-D7SS4vdk.js";
+import { A as isRawApiErrorPayload, B as sanitizeGoogleTurnOrdering, C as isCloudCodeAssistFormatError, D as isFailoverErrorMessage, E as isFailoverAssistantError, F as sanitizeUserFacingText, I as buildBootstrapContextFiles, L as ensureSessionHeader, M as isTransientHttpError, N as parseImageDimensionError, O as isLikelyContextOverflowError, P as parseImageSizeError, R as resolveBootstrapMaxChars, S as isBillingAssistantError, T as isContextOverflowError, _ as formatAssistantErrorText, a as normalizeTextForComparison, b as getApiErrorPayloadFingerprint, c as sanitizeToolResultImages, d as extractToolResultId, f as downgradeOpenAIReasoningBlocks, g as classifyFailoverReason, h as BILLING_ERROR_USER_MESSAGE, i as isMessagingToolDuplicateNormalized, j as isTimeoutErrorMessage, k as isRateLimitAssistantError, l as resolveImageSanitizationLimits, m as isGoogleModelApi, n as validateGeminiTurns, o as sanitizeSessionMessagesImages, p as isAntigravityClaude, r as pickFallbackThinkingLevel, s as sanitizeImageBlocks, t as validateAnthropicTurns, u as extractToolCallsFromAssistant, v as formatBillingErrorMessage, w as isCompactionFailureError, x as isAuthAssistantError, y as formatRawAssistantErrorForUi, z as resolveBootstrapTotalMaxChars } from "./pi-embedded-helpers-y3vJmW6T.js";
+import { A as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, C as unsetConfigValueAtPath, N as VERSION, S as setConfigValueAtPath, _ as resetConfigOverrides, b as getConfigValueAtPath, c as resolveConfigSnapshotHash, f as parseDurationMs, g as getConfigOverrides, h as validateJsonSchemaValue, i as loadConfig, l as writeConfigFile, o as readConfigFileSnapshot, u as validateConfigObjectWithPlugins, v as setConfigOverride, x as parseConfigPath, y as unsetConfigOverride } from "./config-D-PYSlE8.js";
 import { t as parseBooleanValue } from "./boolean-CbZoNRMn.js";
 import { t as isTruthyEnvValue } from "./env-BRnPI9sO.js";
 import { i as resolveShellEnvFallbackTimeoutMs, n as getShellPathFromLoginShell } from "./shell-env-Dc3iU7HK.js";
 import { a as safeStatSync, c as applyTestPluginDefaults, d as resolveEnableState, f as resolveMemorySlotDecision, h as isDangerousHostEnvVarName, i as isPathInside, n as loadPluginManifestRegistry, r as discoverSymiPlugins, u as normalizePluginsConfig } from "./manifest-registry-D1MLZEjS.js";
 import { a as isPathInsideWithRealpath } from "./legacy-names-BQ9vKISY.js";
-import { C as stripPluginOnlyAllowlist, S as resolveToolProfilePolicy, T as matchesAnyGlobPattern, _ as collectExplicitAllowlist, a as ensureSandboxWorkspaceForSession, b as mergeAlsoAllowPolicy, c as resolveSandboxRuntimeStatus, d as getBridgeAuthForPort, g as buildPluginToolGroups, h as applyOwnerOnlyToolPolicy, o as resolveSandboxContext, v as expandPolicyWithPluginGroups, w as compileGlobPatterns, x as normalizeToolName } from "./sandbox-Dx8IMw-E.js";
-import { T as DEFAULT_AI_SNAPSHOT_MAX_CHARS } from "./chrome-rzK8edU7.js";
-import { i as resolveBrowserConfig, m as resolveBrowserControlAuth } from "./server-context--mmXXEkE.js";
+import { C as stripPluginOnlyAllowlist, S as resolveToolProfilePolicy, T as matchesAnyGlobPattern, _ as collectExplicitAllowlist, a as ensureSandboxWorkspaceForSession, b as mergeAlsoAllowPolicy, c as resolveSandboxRuntimeStatus, d as getBridgeAuthForPort, g as buildPluginToolGroups, h as applyOwnerOnlyToolPolicy, o as resolveSandboxContext, v as expandPolicyWithPluginGroups, w as compileGlobPatterns, x as normalizeToolName } from "./sandbox-DQCaejcD.js";
+import { T as DEFAULT_AI_SNAPSHOT_MAX_CHARS } from "./chrome-pFBxO63W.js";
+import { i as resolveBrowserConfig, m as resolveBrowserControlAuth } from "./server-context-CXVq7gZ7.js";
 import { l as parseFrontmatterBlock } from "./frontmatter-B_jqcova.js";
-import { a as resolveSkillsPromptForRun, d as resolveSandboxInputPath, h as applySkillEnvOverridesFromSnapshot, i as loadWorkspaceSkillEntries, l as assertMediaNotDataUrl, m as applySkillEnvOverrides, p as resolveSandboxedMediaSource, r as buildWorkspaceSkillSnapshot, u as assertSandboxPath } from "./skills-BwDmcZdt.js";
-import { n as getMediaDir, r as saveMediaBuffer } from "./routes-C-rIjd8Z.js";
+import { a as resolveSkillsPromptForRun, d as resolveSandboxInputPath, h as applySkillEnvOverridesFromSnapshot, i as loadWorkspaceSkillEntries, l as assertMediaNotDataUrl, m as applySkillEnvOverrides, p as resolveSandboxedMediaSource, r as buildWorkspaceSkillSnapshot, u as assertSandboxPath } from "./skills-CYcBtLGH.js";
+import { n as getMediaDir, r as saveMediaBuffer } from "./routes-zpAUwtCG.js";
 import { n as formatErrorMessage, r as formatUncaughtError, t as extractErrorCode } from "./errors-bI7Tdx75.js";
-import { i as resolveExistingPathsWithinRoot, r as DEFAULT_UPLOAD_DIR } from "./paths-DObzwe08.js";
+import { i as resolveExistingPathsWithinRoot, r as DEFAULT_UPLOAD_DIR } from "./paths-BWqg8NZT.js";
 import { i as isBlockedHostnameOrIp, o as normalizeHostname, t as SsrFBlockedError } from "./ssrf-DOZRI5XH.js";
-import { _ as mediaKindFromMime, c as detectMime, d as imageMimeFromFormat, f as isAudioFileName, h as MAX_IMAGE_BYTES, i as getImageMetadata, l as extensionForMime, m as normalizeMimeType$1, p as kindFromMime, s as resizeToJpeg, u as getFileExtension } from "./image-ops-L70xVnpG.js";
-import { C as capArrayByJsonBytes, F as resolveSessionResetType, H as resolveMainSessionKey, I as resolveThreadFlag, J as acquireSessionWriteLock, L as DEFAULT_RESET_TRIGGERS, M as evaluateSessionFreshness, N as resolveChannelResetConfig, P as resolveSessionResetPolicy, R as resolveFreshSessionTotalTokens, S as archiveSessionTranscripts, W as deriveSessionMetaPatch, X as resolveSessionLockMaxHoldFromTimeout, _ as mergeDeliveryContext, a as resolveAndPersistSessionFile, c as recordSessionMetaFromInbound, d as updateSessionStore, f as updateSessionStoreEntry, g as deliveryContextKey, h as deliveryContextFromSession, j as resolveSessionKey, m as resolveCacheTtlMs$1, o as loadSessionStore, p as isCacheEnabled, q as resolveGroupSessionKey, r as appendAssistantMessageToSessionTranscript, s as readSessionUpdatedAt, t as extractDeliveryInfo, u as updateLastRoute, v as normalizeDeliveryContext, y as normalizeSessionDeliveryFields } from "./sessions-optZRB57.js";
+import { _ as mediaKindFromMime, c as detectMime, d as imageMimeFromFormat, f as isAudioFileName, h as MAX_IMAGE_BYTES, i as getImageMetadata, l as extensionForMime, m as normalizeMimeType$1, p as kindFromMime, s as resizeToJpeg, u as getFileExtension } from "./image-ops-BzCBIakN.js";
+import { C as capArrayByJsonBytes, F as resolveSessionResetType, H as resolveMainSessionKey, I as resolveThreadFlag, J as acquireSessionWriteLock, L as DEFAULT_RESET_TRIGGERS, M as evaluateSessionFreshness, N as resolveChannelResetConfig, P as resolveSessionResetPolicy, R as resolveFreshSessionTotalTokens, S as archiveSessionTranscripts, W as deriveSessionMetaPatch, X as resolveSessionLockMaxHoldFromTimeout, _ as mergeDeliveryContext, a as resolveAndPersistSessionFile, c as recordSessionMetaFromInbound, d as updateSessionStore, f as updateSessionStoreEntry, g as deliveryContextKey, h as deliveryContextFromSession, j as resolveSessionKey, m as resolveCacheTtlMs$1, o as loadSessionStore, p as isCacheEnabled, q as resolveGroupSessionKey, r as appendAssistantMessageToSessionTranscript, s as readSessionUpdatedAt, t as extractDeliveryInfo, u as updateLastRoute, v as normalizeDeliveryContext, y as normalizeSessionDeliveryFields } from "./sessions-aSo5jsmg.js";
 import { c as normalizeStringEntries, i as resolveChannelGroupRequireMention, l as normalizeStringEntriesLower, n as listChannelDocks, o as normalizeAtHashSlug, r as resolveChannelGroupPolicy, s as normalizeHyphenSlug, t as getChannelDock } from "./dock-hF45sewN.js";
 import { a as isInternalMessageChannel, c as listDeliverableMessageChannels, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, o as isMarkdownCapableMessageChannel, p as GATEWAY_CLIENT_IDS, t as INTERNAL_MESSAGE_CHANNEL, u as resolveGatewayMessageChannel } from "./message-channel-DgjXWzf-.js";
 import { t as normalizeChatType } from "./chat-type-CUJqUqwu.js";
 import { n as resolveConversationLabel } from "./conversation-label-CffvEjpp.js";
 import { a as resolveSlackAccount, c as resolveSlackBotToken, n as listChannelPlugins, r as normalizeChannelId$1, s as resolveSlackAppToken, t as getChannelPlugin } from "./plugins-CF5skkHh.js";
-import { _ as resolveSlackChannelId, a as markdownToIRWithMeta, c as MediaFetchError, d as createSlackWebClient, f as resolveSlackWebClientOptions, g as parseSlackTarget, h as buildSlackBlocksFallbackText, i as renderMarkdownWithMarkers, l as fetchRemoteMedia, m as validateSlackBlocksArray, o as getDefaultLocalRoots, p as parseSlackBlocksInput, s as loadWebMedia, t as sendMessageSlack, u as readResponseWithLimit } from "./send-Cxu1tl56.js";
+import { _ as resolveSlackChannelId, a as markdownToIRWithMeta, c as MediaFetchError, d as createSlackWebClient, f as resolveSlackWebClientOptions, g as parseSlackTarget, h as buildSlackBlocksFallbackText, i as renderMarkdownWithMarkers, l as fetchRemoteMedia, m as validateSlackBlocksArray, o as getDefaultLocalRoots, p as parseSlackBlocksInput, s as loadWebMedia, t as sendMessageSlack, u as readResponseWithLimit } from "./send-QscYkkNh.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, t as resolveDefaultSessionStorePath } from "./paths-BtvQ7JvU.js";
 import { i as normalizeInputProvenance, n as applyInputProvenanceToUserMessage, r as hasInterSessionUserProvenance } from "./input-provenance-Dfn-vEsu.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-x1D4Vniz.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels, u as resolveResponseUsageMode } from "./thinking-COroyVA5.js";
 import { n as isSilentReplyText, t as SILENT_REPLY_TOKEN } from "./tokens-0yh2UnJq.js";
-import { c as normalizeChannelTargetInput, d as parseReplyDirectives, f as MEDIA_TOKEN_RE, g as initializeGlobalHookRunner, h as getGlobalHookRunner, l as normalizeTargetForProvider, m as parseInlineDirectives$1, o as normalizeReplyPayloadsForDelivery, p as splitMediaFromOutput, s as buildTargetResolverSignature, t as deliverOutboundPayloads, u as throwIfAborted } from "./deliver-DB4v0Tyl.js";
+import { c as normalizeChannelTargetInput, d as parseReplyDirectives, f as MEDIA_TOKEN_RE, g as initializeGlobalHookRunner, h as getGlobalHookRunner, l as normalizeTargetForProvider, m as parseInlineDirectives$1, o as normalizeReplyPayloadsForDelivery, p as splitMediaFromOutput, s as buildTargetResolverSignature, t as deliverOutboundPayloads, u as throwIfAborted } from "./deliver-C79-Umbk.js";
 import { a as logMessageProcessed, i as logLaneEnqueue, o as logMessageQueued, r as logLaneDequeue, s as logSessionStateChange, t as diag } from "./diagnostic-DbT9t0Sh.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-DnkpMfCl.js";
-import { i as resolveApiKeyForProvider, n as getCustomProviderApiKey, o as resolveEnvApiKey, r as requireApiKey, s as resolveModelAuthMode, t as getApiKeyForModel } from "./model-auth-1EAQvYRv.js";
-import { b as OLLAMA_NATIVE_BASE_URL, c as normalizeGoogleModelId, t as ensureSymiModelsJson, x as createOllamaStreamFn } from "./models-config-CRnTzdFs.js";
-import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-Db8XJVGL.js";
+import { i as resolveApiKeyForProvider, n as getCustomProviderApiKey, o as resolveEnvApiKey, r as requireApiKey, s as resolveModelAuthMode, t as getApiKeyForModel } from "./model-auth-_C07_3Yr.js";
+import { b as OLLAMA_NATIVE_BASE_URL, c as normalizeGoogleModelId, t as ensureSymiModelsJson, x as createOllamaStreamFn } from "./models-config-Dp5-tBqs.js";
+import { t as ensurePiAuthJsonFromAuthProfiles } from "./pi-auth-json-D-vdh-nY.js";
 import { c as hasNonzeroUsage, l as normalizeUsage, n as loadCostUsageSummary, o as derivePromptTokens, r as loadSessionCostSummary } from "./session-cost-usage-D6Ocwmq1.js";
-import { C as enqueueSystemEvent, E as buildChannelSummary, S as drainSystemEventEntries, _ as loadProviderUsageSummary, a as loadCombinedSessionStoreForGateway, b as resolveUsageProviderId, d as formatDoctorNonInteractiveHint, g as writeRestartSentinel, k as redactIdentifier, x as lookupContextTokens, y as formatUsageWindowSummary } from "./session-utils-BZnPW904.js";
-import { n as createBrowserRouteDispatcher, r as getMachineDisplayName, t as withTimeout$2 } from "./with-timeout-B5zAsivw.js";
-import { i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-BFNeXT65.js";
-import { n as resolveMemoryBackendConfig, t as getMemorySearchManager } from "./memory-B4DsKRSc.js";
-import { a as parseGeminiAuth, c as resolveMemorySearchConfig, n as retryAsync, o as collectProviderApiKeysForExecution, s as executeWithApiKeyRotation } from "./manager-BLg6zbeA.js";
-import { f as runTasksWithConcurrency } from "./internal-DVCddhhN.js";
+import { C as enqueueSystemEvent, E as buildChannelSummary, S as drainSystemEventEntries, _ as loadProviderUsageSummary, a as loadCombinedSessionStoreForGateway, b as resolveUsageProviderId, d as formatDoctorNonInteractiveHint, g as writeRestartSentinel, k as redactIdentifier, x as lookupContextTokens, y as formatUsageWindowSummary } from "./session-utils-lXjJoBxe.js";
+import { n as createBrowserRouteDispatcher, r as getMachineDisplayName, t as withTimeout$2 } from "./with-timeout-D1qzvPE0.js";
+import { i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-CtZtkTJK.js";
+import { n as resolveMemoryBackendConfig, t as getMemorySearchManager } from "./memory-DgDnTEcB.js";
+import { a as parseGeminiAuth, c as resolveMemorySearchConfig, n as retryAsync, o as collectProviderApiKeysForExecution, s as executeWithApiKeyRotation } from "./manager-DyYRwHZt.js";
+import { f as runTasksWithConcurrency } from "./internal-csqU78gW.js";
 import { a as chunkText, c as resolveChunkMode, d as isSafeFenceBreak, f as parseFenceSpans, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit, o as chunkTextWithMode, r as chunkMarkdownText, t as chunkByNewline, u as findFenceSpanAt } from "./chunk-BxfKjCUx.js";
 import { n as resolveMarkdownTableMode } from "./markdown-tables-CS1Tvb3z.js";
 import { n as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-BhdrdVp5.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-JHxT9355.js";
-import { n as getDefaultMediaLocalRoots } from "./local-roots-CgDCgCuM.js";
+import { n as getDefaultMediaLocalRoots } from "./local-roots-2Jb79HZ8.js";
 import { i as resolveNativeSkillsEnabled, n as isRestartEnabled, r as resolveNativeCommandsEnabled, t as isCommandFlagEnabled } from "./commands-DUzLGgEZ.js";
-import { a as shouldHandleTextCommands, i as normalizeCommandBody, n as listChatCommands, r as listChatCommandsForConfig } from "./commands-registry-VfAQOVZO.js";
-import { zt as SESSION_LABEL_MAX_LENGTH } from "./client-BzUAFrla.js";
-import { a as randomIdempotencyKey, d as resolveLeastPrivilegeOperatorScopesForMethod, n as callGateway, r as callGatewayLeastPrivilege } from "./call-BouPakqe.js";
+import { a as shouldHandleTextCommands, i as normalizeCommandBody, n as listChatCommands, r as listChatCommandsForConfig } from "./commands-registry-BjcGLk4v.js";
+import { zt as SESSION_LABEL_MAX_LENGTH } from "./client-T5P9umyG.js";
+import { a as randomIdempotencyKey, d as resolveLeastPrivilegeOperatorScopesForMethod, n as callGateway, r as callGatewayLeastPrivilege } from "./call-CW8U1BPq.js";
 import { n as resolveToolDisplay, t as formatToolDetail } from "./tool-display-DFOL6UQ9.js";
 import { n as formatTimeAgo } from "./format-relative-D4GQsWlP.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-B7Rvs8pK.js";
-import { g as getSkillsSnapshotVersion, h as ensureSkillsWatcher, t as getRemoteSkillEligibility } from "./skills-remote-bz71Bstn.js";
+import { g as getSkillsSnapshotVersion, h as ensureSkillsWatcher, t as getRemoteSkillEligibility } from "./skills-remote-BcRQTDsZ.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-ClQLvlCW.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-DQTmHZK7.js";
-import { i as resolveSkillCommandInvocation, n as listSkillCommandsForAgents, r as listSkillCommandsForWorkspace, t as listReservedChatSlashCommandNames } from "./skill-commands-yPirQFOb.js";
-import { a as removeChannelAllowFromStoreEntry, c as listPairingChannels, i as readChannelAllowFromStore, o as upsertChannelPairingRequest, t as addChannelAllowFromStoreEntry } from "./pairing-store-BNhJOnWn.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-CeqDEWGz.js";
+import { i as resolveSkillCommandInvocation, n as listSkillCommandsForAgents, r as listSkillCommandsForWorkspace, t as listReservedChatSlashCommandNames } from "./skill-commands-C9WuAfb2.js";
+import { a as removeChannelAllowFromStoreEntry, c as listPairingChannels, i as readChannelAllowFromStore, o as upsertChannelPairingRequest, t as addChannelAllowFromStoreEntry } from "./pairing-store-Be-ZQK87.js";
 import { _ as getTrustedSafeBinDirs, b as buildSafeShellCommand, d as resolveExecApprovals, f as resolveExecApprovalsFromFile, g as resolveSafeBins, h as evaluateShellAllowlist, i as maxAsk, l as recordAllowlistUse, n as addAllowlistEntry, o as minSecurity, u as requiresExecApproval, y as buildSafeBinsShellCommand } from "./exec-approvals-DioSaIeH.js";
-import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as writeCameraClipPayloadToFile, f as writeUrlToFile, g as normalizePathPrepend, h as mergePathPrepend, i as parseEnvPairs, l as parseCameraSnapPayload, m as applyPathPrepend, n as screenRecordTempPath, o as parseCanvasSnapshotPayload, p as buildNodeShellCommand, r as writeScreenRecordToFile, s as cameraTempPath, t as parseScreenRecordPayload, u as writeBase64ToFile } from "./nodes-screen-De9ma6e1.js";
+import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as writeCameraClipPayloadToFile, f as writeUrlToFile, g as normalizePathPrepend, h as mergePathPrepend, i as parseEnvPairs, l as parseCameraSnapPayload, m as applyPathPrepend, n as screenRecordTempPath, o as parseCanvasSnapshotPayload, p as buildNodeShellCommand, r as writeScreenRecordToFile, s as cameraTempPath, t as parseScreenRecordPayload, u as writeBase64ToFile } from "./nodes-screen-Cp5QP3ET.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-N7nsmfM6.js";
 import { t as formatDurationCompact$1 } from "./format-duration-CIjmjQST.js";
 import { n as recordCommandPoll, r as resetCommandPollCount } from "./command-poll-backoff-9ygk6nTV.js";
 import { i as resolveModelCostConfig, n as formatTokenCount$2, r as formatUsd, t as estimateUsageCost } from "./usage-format-_37Bn-Jb.js";
 import { c as resolveGatewayLaunchAgentLabel, d as resolveGatewaySystemdServiceName } from "./constants-ChnKXZKi.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-Ry7Le68N.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-y53w3Jzy.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-DUVGiPYV.js";
 import { n as resolveMessageChannelSelection, t as listConfiguredMessageChannels } from "./channel-selection-DF4bza2Q.js";
-import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-Zww0Y-HJ.js";
+import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-B0i_o4Fo.js";
 import { t as parseTimeoutMs } from "./parse-timeout-DUdeaMqF.js";
-import { n as registerMemoryCli } from "./memory-cli-DotHyA76.js";
-import { i as resolveSlackThreadTs, n as deliverReplies, t as createSlackReplyDeliveryPlan } from "./replies-DzsYQ8Md.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, r as resolveEffectiveToolPolicy, t as filterToolsByPolicy } from "./pi-tools.policy-BdGVEMZn.js";
-import { a as buildModelAliasLines, n as resolveModel$2 } from "./model-DsMHOvMn.js";
+import { n as registerMemoryCli } from "./memory-cli-CfJkD7mO.js";
+import { i as resolveSlackThreadTs, n as deliverReplies, t as createSlackReplyDeliveryPlan } from "./replies-D3cffD5N.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, r as resolveEffectiveToolPolicy, t as filterToolsByPolicy } from "./pi-tools.policy-ji-L-Mpv.js";
+import { a as buildModelAliasLines, n as resolveModel$2 } from "./model-DbILYCfo.js";
 import { createRequire } from "node:module";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
@@ -96,7 +96,7 @@ import path from "node:path";
 import fs, { constants, existsSync, statSync } from "node:fs";
 import os, { homedir } from "node:os";
 import JSON5 from "json5";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { execFileSync, spawn, spawnSync } from "node:child_process";
 import { complete, createAssistantMessageEventStream, streamSimple } from "@mariozechner/pi-ai";
 import { CURRENT_SESSION_VERSION, DefaultResourceLoader, SessionManager, SettingsManager, codingTools, createAgentSession, createEditTool, createReadTool, createWriteTool, estimateTokens, generateSummary, readTool } from "@mariozechner/pi-coding-agent";
@@ -1846,7 +1846,7 @@ async function imageResult(params) {
 	}, params.label, params.imageSanitization);
 }
 async function imageResultFromFile(params) {
-	const buf = await fs$1.readFile(params.path);
+	const buf = await fsPromises.readFile(params.path);
 	const mimeType = await detectMime({ buffer: buf.slice(0, 256) }) ?? "image/png";
 	return await imageResult({
 		label: params.label,
@@ -5807,7 +5807,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-DB4v0Tyl.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-C79-Umbk.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -11648,7 +11648,7 @@ var MediaAttachmentCache = class {
 			const size = await this.ensureLocalStat(entry);
 			if (entry.resolvedPath) {
 				if (size !== void 0 && size > params.maxBytes) throw new MediaUnderstandingSkipError("maxBytes", `Attachment ${params.attachmentIndex + 1} exceeds maxBytes ${params.maxBytes}`);
-				const buffer = await fs$1.readFile(entry.resolvedPath);
+				const buffer = await fsPromises.readFile(entry.resolvedPath);
 				entry.buffer = buffer;
 				entry.bufferMime = entry.bufferMime ?? entry.attachment.mime ?? await detectMime({
 					buffer,
@@ -11718,10 +11718,10 @@ var MediaAttachmentCache = class {
 			prefix: "symi-media",
 			extension: path.extname(bufferResult.fileName || "") || ""
 		});
-		await fs$1.writeFile(tmpPath, bufferResult.buffer);
+		await fsPromises.writeFile(tmpPath, bufferResult.buffer);
 		entry.tempPath = tmpPath;
 		entry.tempCleanup = async () => {
-			await fs$1.unlink(tmpPath).catch(() => {});
+			await fsPromises.unlink(tmpPath).catch(() => {});
 		};
 		return {
 			path: tmpPath,
@@ -11768,12 +11768,12 @@ var MediaAttachmentCache = class {
 		if (entry.statSize !== void 0) return entry.statSize;
 		try {
 			const currentPath = entry.resolvedPath;
-			const stat = await fs$1.stat(currentPath);
+			const stat = await fsPromises.stat(currentPath);
 			if (!stat.isFile()) {
 				entry.resolvedPath = void 0;
 				return;
 			}
-			const canonicalPath = await fs$1.realpath(currentPath).catch(() => currentPath);
+			const canonicalPath = await fsPromises.realpath(currentPath).catch(() => currentPath);
 			if (!isInboundPathAllowed({
 				filePath: canonicalPath,
 				roots: await this.getCanonicalLocalPathRoots()
@@ -11795,7 +11795,7 @@ var MediaAttachmentCache = class {
 		if (this.canonicalLocalPathRoots) return await this.canonicalLocalPathRoots;
 		this.canonicalLocalPathRoots = (async () => mergeInboundPathRoots(this.localPathRoots, await Promise.all(this.localPathRoots.map(async (root) => {
 			if (root.includes("*")) return root;
-			return await fs$1.realpath(root).catch(() => root);
+			return await fsPromises.realpath(root).catch(() => root);
 		}))))();
 		return await this.canonicalLocalPathRoots;
 	}
@@ -11866,7 +11866,7 @@ function formatAudioTranscripts(outputs) {
 async function fileExists(filePath) {
 	if (!filePath) return false;
 	try {
-		await fs$1.stat(filePath);
+		await fsPromises.stat(filePath);
 		return true;
 	} catch {
 		return false;
@@ -11966,7 +11966,7 @@ async function resolveCliOutput(params) {
 	const commandId = commandBase(params.command);
 	const fileOutput = commandId === "whisper-cli" ? resolveWhisperCppOutputPath(params.args) : commandId === "whisper" ? resolveWhisperOutputPath(params.args, params.mediaPath) : null;
 	if (fileOutput && await fileExists(fileOutput)) try {
-		const content = await fs$1.readFile(fileOutput, "utf8");
+		const content = await fsPromises.readFile(fileOutput, "utf8");
 		if (content.trim()) return content.trim();
 	} catch {}
 	if (commandId === "gemini") {
@@ -12257,7 +12257,7 @@ async function runCliEntry(params) {
 		maxBytes,
 		timeoutMs
 	});
-	const outputDir = await fs$1.mkdtemp(path.join(os.tmpdir(), "symi-media-cli-"));
+	const outputDir = await fsPromises.mkdtemp(path.join(os.tmpdir(), "symi-media-cli-"));
 	const mediaPath = pathResult.path;
 	const outputBase = path.join(outputDir, path.parse(mediaPath).name);
 	const templCtx = {
@@ -12291,7 +12291,7 @@ async function runCliEntry(params) {
 			model: command
 		};
 	} finally {
-		await fs$1.rm(outputDir, {
+		await fsPromises.rm(outputDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -12335,9 +12335,9 @@ function candidateBinaryNames(name) {
 }
 async function isExecutable$1(filePath) {
 	try {
-		if (!(await fs$1.stat(filePath)).isFile()) return false;
+		if (!(await fsPromises.stat(filePath)).isFile()) return false;
 		if (process.platform === "win32") return true;
-		await fs$1.access(filePath, constants.X_OK);
+		await fsPromises.access(filePath, constants.X_OK);
 		return true;
 	} catch {
 		return false;
@@ -14041,7 +14041,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./auth-profiles-Ce7R_25e.js").then((n) => n.t);
+		const { ensureAuthProfileStore } = await import("./auth-profiles-D5nYBj_Z.js").then((n) => n.t);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -17185,7 +17185,7 @@ async function resolveSandboxWorkdir(params) {
 			cwd: process.cwd(),
 			root: params.sandbox.workspaceDir
 		});
-		if (!(await fs$1.stat(resolved.resolved)).isDirectory()) throw new Error("workdir is not a directory");
+		if (!(await fsPromises.stat(resolved.resolved)).isDirectory()) throw new Error("workdir is not a directory");
 		const relative = resolved.relative ? resolved.relative.split(path.sep).join(path.posix.sep) : "";
 		const containerWorkdir = relative ? path.posix.join(params.sandbox.containerWorkdir, relative) : params.sandbox.containerWorkdir;
 		return {
@@ -18199,13 +18199,13 @@ async function validateScriptFileForShellBleed(params) {
 			cwd: params.workdir,
 			root: params.workdir
 		});
-		stat = await fs$1.stat(absPath);
+		stat = await fsPromises.stat(absPath);
 	} catch {
 		return;
 	}
 	if (!stat.isFile()) return;
 	if (stat.size > 512 * 1024) return;
-	const content = await fs$1.readFile(absPath, "utf-8");
+	const content = await fsPromises.readFile(absPath, "utf-8");
 	const first = /\$[A-Z_][A-Z0-9_]{1,}/g.exec(content);
 	if (first) {
 		const idx = first.index;
@@ -22881,7 +22881,7 @@ async function handleCommands(params) {
 				try {
 					const messages = [];
 					if (sessionFile) {
-						const content = await fs$1.readFile(sessionFile, "utf-8");
+						const content = await fsPromises.readFile(sessionFile, "utf-8");
 						for (const line of content.split("\n")) {
 							if (!line.trim()) continue;
 							try {
@@ -25068,7 +25068,7 @@ async function readJsonlFromPath(jsonlPath) {
 		if (shouldLogVerbose()) logVerbose(`Blocked canvas jsonlPath outside allowed roots: ${resolved}`);
 		throw new Error("jsonlPath outside allowed roots");
 	}
-	const canonical = await fs$1.realpath(resolved).catch(() => resolved);
+	const canonical = await fsPromises.realpath(resolved).catch(() => resolved);
 	if (!isInboundPathAllowed({
 		filePath: canonical,
 		roots
@@ -25076,7 +25076,7 @@ async function readJsonlFromPath(jsonlPath) {
 		if (shouldLogVerbose()) logVerbose(`Blocked canvas jsonlPath outside allowed roots: ${canonical}`);
 		throw new Error("jsonlPath outside allowed roots");
 	}
-	return await fs$1.readFile(canonical, "utf8");
+	return await fsPromises.readFile(canonical, "utf8");
 }
 const CanvasToolSchema = Type.Object({
 	action: stringEnum(CANVAS_ACTIONS),
@@ -26607,7 +26607,7 @@ async function hydrateAttachmentPayload(params) {
 				accountId: params.accountId
 			}),
 			sandboxValidated: true,
-			readFile: (filePath) => fs$1.readFile(filePath)
+			readFile: (filePath) => fsPromises.readFile(filePath)
 		});
 		params.args.buffer = media.buffer.toString("base64");
 		if (!contentTypeParam && media.contentType) params.args.contentType = media.contentType;
@@ -32551,11 +32551,19 @@ function createWebSearchTool(options) {
 	const provider = resolveSearchProvider(search);
 	const perplexityConfig = resolvePerplexityConfig(search);
 	const grokConfig = resolveGrokConfig(search);
+	const description = provider === "perplexity" ? "Search the web using Perplexity Sonar (direct or via OpenRouter). Returns AI-synthesized answers with citations from real-time web search." : provider === "grok" ? "Search the web using xAI Grok. Returns AI-synthesized answers with citations from real-time web search." : "Search the web using Brave Search API. Supports region-specific and localized search via country and language parameters. Returns titles, URLs, and snippets for fast research.";
+	const resolveActiveApiKey = () => {
+		if (provider === "perplexity") return resolvePerplexityApiKey(perplexityConfig)?.apiKey;
+		if (provider === "grok") return resolveGrokApiKey(grokConfig);
+		return resolveSearchApiKey(search);
+	};
 	return {
 		label: "Web Search",
 		name: "web_search",
-		description: provider === "perplexity" ? "Search the web using Perplexity Sonar (direct or via OpenRouter). Returns AI-synthesized answers with citations from real-time web search." : provider === "grok" ? "Search the web using xAI Grok. Returns AI-synthesized answers with citations from real-time web search." : "Search the web using Brave Search API. Supports region-specific and localized search via country and language parameters. Returns titles, URLs, and snippets for fast research.",
+		description,
 		parameters: WebSearchSchema,
+		checkFn: () => Boolean(resolveActiveApiKey()),
+		requiredEnv: provider === "perplexity" ? ["PERPLEXITY_API_KEY", "OPENROUTER_API_KEY"] : provider === "grok" ? ["XAI_API_KEY"] : ["BRAVE_API_KEY"],
 		execute: async (_toolCallId, args) => {
 			const perplexityAuth = provider === "perplexity" ? resolvePerplexityApiKey(perplexityConfig) : void 0;
 			const apiKey = provider === "perplexity" ? perplexityAuth?.apiKey : provider === "grok" ? resolveGrokApiKey(grokConfig) : resolveSearchApiKey(search);
@@ -33101,7 +33109,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-DB4v0Tyl.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-C79-Umbk.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -33506,7 +33514,7 @@ async function stageSandboxMedia(params) {
 	};
 	try {
 		const destDir = sandbox ? path.join(effectiveWorkspaceDir, "media", "inbound") : effectiveWorkspaceDir;
-		await fs$1.mkdir(destDir, { recursive: true });
+		await fsPromises.mkdir(destDir, { recursive: true });
 		const remoteAttachmentRoots = resolveIMessageRemoteAttachmentRoots({
 			cfg,
 			accountId: ctx.AccountId
@@ -33556,7 +33564,7 @@ async function stageSandboxMedia(params) {
 			usedNames.add(fileName);
 			const dest = path.join(destDir, fileName);
 			if (ctx.MediaRemoteHost) await scpFile(ctx.MediaRemoteHost, source, dest);
-			else await fs$1.copyFile(source, dest);
+			else await fsPromises.copyFile(source, dest);
 			const stagedPath = sandbox ? path.posix.join("media", "inbound", fileName) : dest;
 			staged.set(source, stagedPath);
 		}
@@ -38867,7 +38875,7 @@ function readSlackExternalArgMenuToken(raw) {
 }
 let commandsRegistry;
 async function getCommandsRegistry() {
-	if (!commandsRegistry) commandsRegistry = await import("./commands-registry-VfAQOVZO.js").then((n) => n.t);
+	if (!commandsRegistry) commandsRegistry = await import("./commands-registry-BjcGLk4v.js").then((n) => n.t);
 	return commandsRegistry;
 }
 function encodeSlackCommandArgValue(parts) {
@@ -39209,11 +39217,11 @@ async function registerSlackMonitorSlashCommands(params) {
 			const channelName = channelInfo?.name;
 			const roomLabel = channelName ? `#${channelName}` : `#${command.channel_id}`;
 			const [{ resolveAgentRoute }, { finalizeInboundContext }, { dispatchReplyWithDispatcher }] = await Promise.all([
-				import("./resolve-route-Zww0Y-HJ.js").then((n) => n.r),
+				import("./resolve-route-B0i_o4Fo.js").then((n) => n.r),
 				import("./inbound-context-B7Rvs8pK.js").then((n) => n.n),
 				Promise.resolve().then(() => provider_dispatcher_exports)
 			]);
-			const [{ resolveConversationLabel }, { createReplyPrefixOptions }] = await Promise.all([import("./conversation-label-CffvEjpp.js").then((n) => n.t), import("./reply-prefix-BFNeXT65.js").then((n) => n.n)]);
+			const [{ resolveConversationLabel }, { createReplyPrefixOptions }] = await Promise.all([import("./conversation-label-CffvEjpp.js").then((n) => n.t), import("./reply-prefix-CtZtkTJK.js").then((n) => n.n)]);
 			const route = resolveAgentRoute({
 				cfg,
 				channel: "slack",
@@ -39270,7 +39278,7 @@ async function registerSlackMonitorSlashCommands(params) {
 			});
 			const deliverSlashPayloads = async (replies) => {
 				const [{ deliverSlackSlashReplies }, { resolveChunkMode }, { resolveMarkdownTableMode }] = await Promise.all([
-					import("./replies-DzsYQ8Md.js").then((n) => n.r),
+					import("./replies-D3cffD5N.js").then((n) => n.r),
 					import("./chunk-BxfKjCUx.js").then((n) => n.s),
 					import("./markdown-tables-CS1Tvb3z.js").then((n) => n.t)
 				]);
@@ -39325,7 +39333,7 @@ async function registerSlackMonitorSlashCommands(params) {
 	let nativeCommands = [];
 	if (nativeEnabled) {
 		reg = await getCommandsRegistry();
-		const skillCommands = nativeSkillsEnabled ? (await import("./skill-commands-yPirQFOb.js").then((n) => n.a)).listSkillCommandsForAgents({ cfg }) : [];
+		const skillCommands = nativeSkillsEnabled ? (await import("./skill-commands-C9WuAfb2.js").then((n) => n.a)).listSkillCommandsForAgents({ cfg }) : [];
 		nativeCommands = reg.listNativeCommandSpecsForConfig(cfg, {
 			skillCommands,
 			provider: "slack"
@@ -40458,7 +40466,7 @@ function resolvePluginTools(params) {
 //#endregion
 //#region src/agents/apply-patch-update.ts
 async function defaultReadFile(filePath) {
-	return fs$1.readFile(filePath, "utf8");
+	return fsPromises.readFile(filePath, "utf8");
 }
 async function applyUpdateHunk(filePath, chunks, options) {
 	const originalLines = (await (options?.readFile ?? defaultReadFile)(filePath).catch((err) => {
@@ -40702,10 +40710,10 @@ function resolvePatchFileOps(options) {
 		};
 	}
 	return {
-		readFile: (filePath) => fs$1.readFile(filePath, "utf8"),
-		writeFile: (filePath, content) => fs$1.writeFile(filePath, content, "utf8"),
-		remove: (filePath) => fs$1.rm(filePath),
-		mkdirp: (dir) => fs$1.mkdir(dir, { recursive: true }).then(() => {})
+		readFile: (filePath) => fsPromises.readFile(filePath, "utf8"),
+		writeFile: (filePath, content) => fsPromises.writeFile(filePath, content, "utf8"),
+		remove: (filePath) => fsPromises.rm(filePath),
+		mkdirp: (dir) => fsPromises.mkdir(dir, { recursive: true }).then(() => {})
 	};
 }
 async function ensureDir(filePath, ops) {
@@ -41554,6 +41562,44 @@ function applyToolPolicyPipeline(params) {
 	return filtered;
 }
 
+//#endregion
+//#region src/agents/tools/availability-filter.ts
+const FORCE_ALL_TOOLS_ENV = "SYMI_FORCE_ALL_TOOLS";
+/**
+* Filter the tool palette by each tool's `checkFn`. Tools without a
+* checkFn pass through unchanged. Throwing checkFns are treated as
+* available (defensive). The `SYMI_FORCE_ALL_TOOLS=1` env bypasses the
+* filter entirely.
+*
+* Pure function — does not mutate the input array.
+*/
+function filterToolsByAvailability(tools) {
+	if (isTruthyEnvValue(process.env[FORCE_ALL_TOOLS_ENV])) return [...tools];
+	const out = [];
+	for (const tool of tools) {
+		if (!tool.checkFn) {
+			out.push(tool);
+			continue;
+		}
+		let available;
+		try {
+			available = tool.checkFn();
+		} catch (err) {
+			logVerbose(`tool availability: checkFn for "${getToolName(tool)}" threw — including tool anyway. ${String(err)}`);
+			out.push(tool);
+			continue;
+		}
+		if (available) out.push(tool);
+		else logVerbose(`tool availability: filtered out "${getToolName(tool)}" — checkFn returned false. Set ${FORCE_ALL_TOOLS_ENV}=1 to bypass this filter.`);
+	}
+	return out;
+}
+function getToolName(tool) {
+	const definition = tool.definition;
+	if (definition && typeof definition.name === "string") return definition.name;
+	return "(unknown tool)";
+}
+
 //#endregion
 //#region src/agents/pi-tools.ts
 function isOpenAIProvider(provider) {
@@ -41773,7 +41819,7 @@ function createSymiCodingTools(options) {
 		root: sandboxRoot,
 		bridge: sandboxFsBridge
 	}), readEditTracker) : null;
-	const withHooks = applyToolPolicyPipeline({
+	const withHooks = filterToolsByAvailability(applyToolPolicyPipeline({
 		tools: applyOwnerOnlyToolPolicy([
 			...base,
 			...sandboxRoot ? allowWorkspaceWrites && sandboxedEditTool && sandboxedWriteTool ? [workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedEditTool, sandboxRoot) : sandboxedEditTool, workspaceOnly ? wrapToolWorkspaceRootGuard(sandboxedWriteTool, sandboxRoot) : sandboxedWriteTool] : [] : [],
@@ -41845,7 +41891,7 @@ function createSymiCodingTools(options) {
 				label: "subagent tools.allow"
 			}
 		]
-	}).map((tool) => normalizeToolParameters(tool, { modelProvider: options?.modelProvider })).map((tool) => wrapToolWithBeforeToolCallHook(tool, {
+	})).map((tool) => normalizeToolParameters(tool, { modelProvider: options?.modelProvider })).map((tool) => wrapToolWithBeforeToolCallHook(tool, {
 		agentId,
 		sessionKey: options?.sessionKey,
 		loopDetection: resolveToolLoopDetectionConfig({
@@ -41872,7 +41918,7 @@ async function repairSessionFileIfNeeded(params) {
 	};
 	let content;
 	try {
-		content = await fs$1.readFile(sessionFile, "utf-8");
+		content = await fsPromises.readFile(sessionFile, "utf-8");
 	} catch (err) {
 		if (err?.code === "ENOENT") return {
 			repaired: false,
@@ -41920,15 +41966,15 @@ async function repairSessionFileIfNeeded(params) {
 	const backupPath = `${sessionFile}.bak-${process.pid}-${Date.now()}`;
 	const tmpPath = `${sessionFile}.repair-${process.pid}-${Date.now()}.tmp`;
 	try {
-		const stat = await fs$1.stat(sessionFile).catch(() => null);
-		await fs$1.writeFile(backupPath, content, "utf-8");
-		if (stat) await fs$1.chmod(backupPath, stat.mode);
-		await fs$1.writeFile(tmpPath, cleaned, "utf-8");
-		if (stat) await fs$1.chmod(tmpPath, stat.mode);
-		await fs$1.rename(tmpPath, sessionFile);
+		const stat = await fsPromises.stat(sessionFile).catch(() => null);
+		await fsPromises.writeFile(backupPath, content, "utf-8");
+		if (stat) await fsPromises.chmod(backupPath, stat.mode);
+		await fsPromises.writeFile(tmpPath, cleaned, "utf-8");
+		if (stat) await fsPromises.chmod(tmpPath, stat.mode);
+		await fsPromises.rename(tmpPath, sessionFile);
 	} catch (err) {
 		try {
-			await fs$1.unlink(tmpPath);
+			await fsPromises.unlink(tmpPath);
 		} catch (cleanupErr) {
 			params.warn?.(`session file repair cleanup failed: ${cleanupErr instanceof Error ? cleanupErr.message : "unknown error"} (${path.basename(tmpPath)})`);
 		}
@@ -43201,7 +43247,7 @@ async function prewarmSessionFile(sessionFile) {
 	if (!isSessionManagerCacheEnabled()) return;
 	if (isSessionManagerCached(sessionFile)) return;
 	try {
-		const handle = await fs$1.open(sessionFile, "r");
+		const handle = await fsPromises.open(sessionFile, "r");
 		try {
 			const buffer = Buffer$1.alloc(4096);
 			await handle.read(buffer, 0, buffer.length, 0);
@@ -43341,7 +43387,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 	} catch (err) {
 		return fail(describeUnknownError(err));
 	}
-	await fs$1.mkdir(resolvedWorkspace, { recursive: true });
+	await fsPromises.mkdir(resolvedWorkspace, { recursive: true });
 	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
 	const sandbox = await resolveSandboxContext({
 		config: params.config,
@@ -43349,7 +43395,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 		workspaceDir: resolvedWorkspace
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
-	await fs$1.mkdir(effectiveWorkspace, { recursive: true });
+	await fsPromises.mkdir(effectiveWorkspace, { recursive: true });
 	await ensureSessionHeader({
 		sessionFile: params.sessionFile,
 		sessionId: params.sessionId,
@@ -43674,12 +43720,12 @@ function getQueuedFileWriter(writers, filePath) {
 	const existing = writers.get(filePath);
 	if (existing) return existing;
 	const dir = path.dirname(filePath);
-	const ready = fs$1.mkdir(dir, { recursive: true }).catch(() => void 0);
+	const ready = fsPromises.mkdir(dir, { recursive: true }).catch(() => void 0);
 	let queue = Promise.resolve();
 	const writer = {
 		filePath,
 		write: (line) => {
-			queue = queue.then(() => ready).then(() => fs$1.appendFile(filePath, line, "utf8")).catch(() => void 0);
+			queue = queue.then(() => ready).then(() => fsPromises.appendFile(filePath, line, "utf8")).catch(() => void 0);
 		}
 	};
 	writers.set(filePath, writer);
@@ -46859,7 +46905,7 @@ Use the message tool with buttons:
 */
 async function readSessionFile(sessionFile) {
 	try {
-		return await fs$1.readFile(sessionFile, "utf-8");
+		return await fsPromises.readFile(sessionFile, "utf-8");
 	} catch {
 		return null;
 	}
@@ -46868,8 +46914,8 @@ async function writeAtomically(sessionFile, text) {
 	const dir = path.dirname(sessionFile);
 	const base = path.basename(sessionFile);
 	const tmp = path.join(dir, `.${base}.prune-${process.pid}-${Date.now()}.tmp`);
-	await fs$1.writeFile(tmp, text, "utf-8");
-	await fs$1.rename(tmp, sessionFile);
+	await fsPromises.writeFile(tmp, text, "utf-8");
+	await fsPromises.rename(tmp, sessionFile);
 }
 /**
 * Remove empty assistant JSONL entries from the session file.
@@ -46971,7 +47017,7 @@ function isInPoisonRange(version) {
 */
 async function checkSessionPoison(sessionFile) {
 	try {
-		const firstLine = (await fs$1.readFile(sessionFile, "utf-8")).split("\n")[0];
+		const firstLine = (await fsPromises.readFile(sessionFile, "utf-8")).split("\n")[0];
 		if (!firstLine) return null;
 		const header = JSON.parse(firstLine);
 		if (header.type !== "session") return null;
@@ -46989,7 +47035,7 @@ async function checkSessionPoison(sessionFile) {
 */
 async function archivePoisonedSession(sessionFile) {
 	const archiveName = `${sessionFile}.archived-poison.${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
-	await fs$1.rename(sessionFile, archiveName);
+	await fsPromises.rename(sessionFile, archiveName);
 	return archiveName;
 }
 /**
@@ -46998,14 +47044,14 @@ async function archivePoisonedSession(sessionFile) {
 */
 async function stampSessionVersion(sessionFile) {
 	try {
-		const lines = (await fs$1.readFile(sessionFile, "utf-8")).split("\n");
+		const lines = (await fsPromises.readFile(sessionFile, "utf-8")).split("\n");
 		if (lines.length === 0) return;
 		const header = JSON.parse(lines[0]);
 		if (header.type !== "session") return;
 		if (header.symiVersion === VERSION) return;
 		header.symiVersion = VERSION;
 		lines[0] = JSON.stringify(header);
-		await fs$1.writeFile(sessionFile, lines.join("\n"), "utf-8");
+		await fsPromises.writeFile(sessionFile, lines.join("\n"), "utf-8");
 	} catch {}
 }
 /**
@@ -47234,7 +47280,7 @@ async function prepareSessionManagerForRun(params) {
 		return;
 	}
 	if (params.hadSessionFile && header && !hasAssistant) {
-		await fs$1.writeFile(params.sessionFile, "", "utf-8");
+		await fsPromises.writeFile(params.sessionFile, "", "utf-8");
 		sm.fileEntries = [header];
 		sm.byId?.clear?.();
 		sm.labelsById?.clear?.();
@@ -47792,7 +47838,7 @@ async function runEmbeddedAttempt(params) {
 	const prevCwd = process.cwd();
 	const runAbortController = new AbortController();
 	log$7.debug(`embedded run start: runId=${params.runId} sessionId=${params.sessionId} provider=${params.provider} model=${params.modelId} thinking=${params.thinkLevel} messageChannel=${params.messageChannel ?? params.messageProvider ?? "unknown"}`);
-	await fs$1.mkdir(resolvedWorkspace, { recursive: true });
+	await fsPromises.mkdir(resolvedWorkspace, { recursive: true });
 	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
 	const sandbox = await resolveSandboxContext({
 		config: params.config,
@@ -47800,7 +47846,7 @@ async function runEmbeddedAttempt(params) {
 		workspaceDir: resolvedWorkspace
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
-	await fs$1.mkdir(effectiveWorkspace, { recursive: true });
+	await fsPromises.mkdir(effectiveWorkspace, { recursive: true });
 	let restoreSkillEnv;
 	process.chdir(effectiveWorkspace);
 	try {
@@ -48009,7 +48055,7 @@ async function runEmbeddedAttempt(params) {
 				sessionFile: params.sessionFile,
 				warn: (message) => log$7.warn(message)
 			});
-			const hadSessionFile = await fs$1.stat(params.sessionFile).then(() => true).catch(() => false);
+			const hadSessionFile = await fsPromises.stat(params.sessionFile).then(() => true).catch(() => false);
 			const transcriptPolicy = resolveTranscriptPolicy({
 				modelApi: params.model?.api,
 				provider: params.provider,
@@ -49101,7 +49147,7 @@ async function runEmbeddedPiAgent(params) {
 				}
 				runLoopIterations += 1;
 				attemptedThinking.add(thinkLevel);
-				await fs$1.mkdir(resolvedWorkspace, { recursive: true });
+				await fsPromises.mkdir(resolvedWorkspace, { recursive: true });
 				const prompt = provider === "anthropic" ? scrubAnthropicRefusalMagic(params.prompt) : params.prompt;
 				const attempt = await runEmbeddedAttempt({
 					sessionId: params.sessionId,