@symerian/symi 3.5.21 → 3.5.23

package/dist/{docs-cli-Ct1STieY.js → docs-cli-PS8m1er7.js}

@@ -7,7 +7,7 @@ import { t as runCommandWithTimeout } from "./exec-DuYbft0z.js";
 import "./boolean-CbZoNRMn.js";
 import "./manifest-registry-D1MLZEjS.js";
 import { d as hasBinary } from "./frontmatter-B_jqcova.js";
-import "./skills-CYcBtLGH.js";
+import "./skills-BwDmcZdt.js";
 import "./redact-B3O-RBO1.js";
 import "./errors-bI7Tdx75.js";
 import { t as formatDocsLink } from "./links-Bqr0FxXx.js";

package/dist/{doctor-completion-CL7MyXlo.js → doctor-completion-BpUGRguQ.js}

@@ -1,7 +1,7 @@
 import { n as resolveCliName } from "./cli-name-CzMV-gJF.js";
-import { t as resolveSymiPackageRoot } from "./symi-root-DeCVdZB4.js";
+import { t as resolveSymiPackageRoot } from "./symi-root-BQ0IpoW2.js";
 import { t as note } from "./note-D9FXI2qW.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-Cn_81QBb.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-Dd56ibFZ.js";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
 

package/dist/{doctor-config-flow-ljVnQJjo.js → doctor-config-flow-C52W1uUK.js}

@@ -2,17 +2,17 @@ import { _ as resolveStateDir, h as resolveOAuthDir, m as resolveNewStateDir, p
 import { m as resolveHomeDir, u as isRecord } from "./utils-CTPsqyE_.js";
 import { t as formatCliCommand } from "./command-format-BzjsXBTi.js";
 import { n as DEFAULT_MAIN_KEY, o as normalizeAgentId, p as DEFAULT_ACCOUNT_ID, r as buildAgentMainSessionKey } from "./session-key-DUSb7CCb.js";
-import { l as resolveDefaultAgentId } from "./agent-scope-Bnsyyeci.js";
-import { d as SymiSchema, n as migrateLegacyConfig, o as readConfigFileSnapshot } from "./config-BngIfn5l.js";
-import { l as saveSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-BCc3THTm.js";
+import { l as resolveDefaultAgentId } from "./agent-scope-DOrZjOnW.js";
+import { d as SymiSchema, n as migrateLegacyConfig, o as readConfigFileSnapshot } from "./config-B4jkreCN.js";
+import { l as saveSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-Dxf5Kjig.js";
 import { t as note } from "./note-D9FXI2qW.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-BXSJTxI7.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-DJBhDIMq.js";
 import { t as isWithinDir } from "./path-safety-CkXjT453.js";
 import path from "node:path";
 import fs from "node:fs";
 import os from "node:os";
 import JSON5 from "json5";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/commands/doctor-legacy-config.ts
 function normalizeLegacyConfigValues(cfg) {
@@ -1063,7 +1063,7 @@ async function maybeMigrateLegacyConfig() {
 	const targetDir = path.join(home, ".symi");
 	const targetPath = path.join(targetDir, "symi.json");
 	try {
-		await fsPromises.access(targetPath);
+		await fs$1.access(targetPath);
 		return changes;
 	} catch {}
 	const legacyCandidates = [
@@ -1073,14 +1073,14 @@ async function maybeMigrateLegacyConfig() {
 	];
 	let legacyPath = null;
 	for (const candidate of legacyCandidates) try {
-		await fsPromises.access(candidate);
+		await fs$1.access(candidate);
 		legacyPath = candidate;
 		break;
 	} catch {}
 	if (!legacyPath) return changes;
-	await fsPromises.mkdir(targetDir, { recursive: true });
+	await fs$1.mkdir(targetDir, { recursive: true });
 	try {
-		await fsPromises.copyFile(legacyPath, targetPath, fsPromises.constants.COPYFILE_EXCL);
+		await fs$1.copyFile(legacyPath, targetPath, fs$1.constants.COPYFILE_EXCL);
 		changes.push(`Migrated legacy config: ${legacyPath} -> ${targetPath}`);
 	} catch {}
 	return changes;

package/dist/{exec-approvals-cli-DsBoQu5H.js → exec-approvals-cli-CzvIqBUd.js}

@@ -3,29 +3,29 @@ import "./paths-By0XjHBk.js";
 import "./utils-CTPsqyE_.js";
 import { f as defaultRuntime } from "./subsystem-CHbO_DkH.js";
 import "./exec-DuYbft0z.js";
-import "./agent-scope-Bnsyyeci.js";
-import "./model-selection-CCTzD29o.js";
-import "./config-BngIfn5l.js";
+import "./agent-scope-DOrZjOnW.js";
+import "./model-selection-7wdmO-Iw.js";
+import "./config-B4jkreCN.js";
 import "./boolean-CbZoNRMn.js";
 import "./env-BRnPI9sO.js";
 import "./shell-env-Dc3iU7HK.js";
 import "./manifest-registry-D1MLZEjS.js";
 import "./message-channel-DgjXWzf-.js";
-import "./client-CTrfpKT3.js";
-import "./call-Bpjj5p7I.js";
-import "./pairing-token-B703A1U3.js";
+import "./client-Cs9Bh-G0.js";
+import "./call-xdEE97oU.js";
+import "./pairing-token-Dcy37-4s.js";
 import { n as formatTimeAgo } from "./format-relative-D4GQsWlP.js";
 import { c as readExecApprovalsSnapshot, p as saveExecApprovals } from "./exec-approvals-DioSaIeH.js";
 import { t as formatDocsLink } from "./links-Bqr0FxXx.js";
 import "./progress-swt2y17x.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-gaoD882s.js";
-import "./systemd-CsoVnIbM.js";
-import "./service-CRZoXO_n.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-BTGT1SuZ.js";
+import "./systemd-CUIM0n5P.js";
+import "./service-e6MzlLCd.js";
 import { t as renderTable } from "./table-0A3xKJVC.js";
-import { t as describeUnknownError } from "./shared-C39SiDDJ.js";
-import { i as resolveNodeId, r as nodesCallOpts } from "./rpc-CwxSZZOx.js";
+import { t as describeUnknownError } from "./shared-1xPo9ygd.js";
+import { i as resolveNodeId, r as nodesCallOpts } from "./rpc-DjqFrbOc.js";
 import JSON5 from "json5";
-import fsPromises from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/cli/exec-approvals-cli.ts
 async function readStdin() {
@@ -315,7 +315,7 @@ function registerExecApprovalsCli(program) {
 			if (!opts.file && !opts.stdin) exitWithError("Provide --file or --stdin.");
 			if (opts.file && opts.stdin) exitWithError("Use either --file or --stdin (not both).");
 			const { source, nodeId, targetLabel, baseHash } = await loadWritableSnapshotTarget(opts);
-			const raw = opts.stdin ? await readStdin() : await fsPromises.readFile(String(opts.file), "utf8");
+			const raw = opts.stdin ? await readStdin() : await fs.readFile(String(opts.file), "utf8");
 			let file;
 			try {
 				file = JSON5.parse(raw);

package/dist/{file-lock-2AecMjCa.js → file-lock-BVUYnlQv.js}

@@ -1,6 +1,6 @@
 import { n as isPidAlive, t as resolveProcessScopedMap } from "./process-scoped-map-lWFQjQ3p.js";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/plugin-sdk/file-lock.ts
 const HELD_LOCKS = resolveProcessScopedMap(Symbol.for("symi.fileLockHeldLocks"));
@@ -11,7 +11,7 @@ function computeDelayMs(retries, attempt) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fsPromises.readFile(lockPath, "utf8");
+		const raw = await fs.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number" || typeof parsed.createdAt !== "string") return null;
 		return {
@@ -25,9 +25,9 @@ async function readLockPayload(lockPath) {
 async function resolveNormalizedFilePath(filePath) {
 	const resolved = path.resolve(filePath);
 	const dir = path.dirname(resolved);
-	await fsPromises.mkdir(dir, { recursive: true });
+	await fs.mkdir(dir, { recursive: true });
 	try {
-		const realDir = await fsPromises.realpath(dir);
+		const realDir = await fs.realpath(dir);
 		return path.join(realDir, path.basename(resolved));
 	} catch {
 		return resolved;
@@ -41,7 +41,7 @@ async function isStaleLock(lockPath, staleMs) {
 		if (!Number.isFinite(createdAt) || Date.now() - createdAt > staleMs) return true;
 	}
 	try {
-		const stat = await fsPromises.stat(lockPath);
+		const stat = await fs.stat(lockPath);
 		return Date.now() - stat.mtimeMs > staleMs;
 	} catch {
 		return true;
@@ -54,7 +54,7 @@ async function releaseHeldLock(normalizedFile) {
 	if (current.count > 0) return;
 	HELD_LOCKS.delete(normalizedFile);
 	await current.handle.close().catch(() => void 0);
-	await fsPromises.rm(current.lockPath, { force: true }).catch(() => void 0);
+	await fs.rm(current.lockPath, { force: true }).catch(() => void 0);
 }
 async function acquireFileLock(filePath, options) {
 	const normalizedFile = await resolveNormalizedFilePath(filePath);
@@ -69,7 +69,7 @@ async function acquireFileLock(filePath, options) {
 	}
 	const attempts = Math.max(1, options.retries.retries + 1);
 	for (let attempt = 0; attempt < attempts; attempt += 1) try {
-		const handle = await fsPromises.open(lockPath, "wx");
+		const handle = await fs.open(lockPath, "wx");
 		await handle.writeFile(JSON.stringify({
 			pid: process.pid,
 			createdAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -86,7 +86,7 @@ async function acquireFileLock(filePath, options) {
 	} catch (err) {
 		if (err.code !== "EEXIST") throw err;
 		if (await isStaleLock(lockPath, options.stale)) {
-			await fsPromises.rm(lockPath, { force: true }).catch(() => void 0);
+			await fs.rm(lockPath, { force: true }).catch(() => void 0);
 			continue;
 		}
 		if (attempt >= attempts - 1) break;

package/dist/{fs-safe-B0Is-oLk.js → fs-safe-BdejYjW8.js}

@@ -1,6 +1,6 @@
 import path from "node:path";
 import { constants } from "node:fs";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/fs-safe.ts
 var SafeOpenError = class extends Error {
@@ -20,19 +20,19 @@ const isSymlinkOpenError = (err) => isNodeError(err) && (err.code === "ELOOP" ||
 async function openVerifiedLocalFile(filePath) {
 	let handle;
 	try {
-		handle = await fsPromises.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (stat.ino !== lstat.ino || stat.dev !== lstat.dev) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fsPromises.realpath(filePath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (stat.ino !== realStat.ino || stat.dev !== realStat.dev) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
 			handle,
@@ -49,7 +49,7 @@ async function openVerifiedLocalFile(filePath) {
 async function openFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;

package/dist/{gateway-cli-DG_2YZ8B.js → gateway-cli-D1d5YAt0.js}

@@ -1,146 +1,146 @@
-import { $ as isExternalHookSession, $t as emitAgentEvent, A as resolveSessionDeliveryTarget, At as resolveInputFileLimits, B as normalizeOptionalSessionKey, Bt as countActiveDescendantRuns, Cn as CommandLane, Ct as DEFAULT_INPUT_IMAGE_MAX_BYTES, Dn as runWithModelFallback, Dt as extractFileContentFromSource, Et as DEFAULT_INPUT_TIMEOUT_MS, F as normalizeHttpWebhookUrl, G as buildDeliveryFromLegacyPayload, H as normalizePayloadToSystemText, Ht as initSubagentRegistry, Jt as readLatestAssistantReply, K as hasLegacyDeliveryHints, Kt as resolveAgentTimeoutMs, N as resetDirectoryCache, O as resolveOutboundSessionRoute, Ot as extractImageContentFromSource, Q as getHookType, Qt as clearAgentRunContext, R as inferLegacyName, S as createSymiTools, Sn as waitForActiveTasks, T as resolveAnnounceTargetFromKey, Tn as resolveModelProfile, Tt as DEFAULT_INPUT_MAX_REDIRECTS, U as normalizeRequiredName, Ut as listDescendantRunsForRequester, V as normalizeOptionalText, Vt as countActiveRunsForSession, W as migrateLegacyCronPayload, X as buildSafeExternalPrompt, Z as detectSuspiciousPatterns, a as getPluginToolMeta, an as getActiveEmbeddedRunCount, at as isGatewaySigusr1RestartExternallyAllowed, bn as resetAllLanes, c as handleSlackHttpRequest, cn as registerUnhandledRejectionHandler, ct as setGatewaySigusr1RestartPolicy, d as buildHistoryContextFromEntries, dn as formatUserTime, en as getAgentRunContext, fn as resolveUserTimeFormat, h as getTotalPendingReplies, it as emitGatewayRestart, k as resolveOutboundTarget, kt as normalizeMimeList, l as readJsonBodyWithLimit, ln as ToolInputError, lt as setPreRestartDeferralCheck, n as applyToolPolicyPipeline, nn as registerAgentRunContext, nt as consumeGatewaySigusr1RestartAuthorization, ot as markGatewaySigusr1RestartHandled, pn as resolveUserTimezone, q as stripLegacyDeliveryFields, qt as runSubagentAnnounceFlow, r as buildDefaultToolPolicyPipelineSteps, rt as deferGatewayRestartUntilIdle, s as loadSymiPlugins, t as runAgentTurn, tn as onAgentEvent, u as requestBodyErrorToText, vn as getActiveTaskCount, wn as classifyOutboundMessage, wt as DEFAULT_INPUT_IMAGE_MIMES, xn as setCommandLaneConcurrency, yn as getTotalQueueSize, z as normalizeOptionalAgentId } from "./unified-runner-DXjH-prv.js";
+import { $ as isExternalHookSession, $t as emitAgentEvent, A as resolveSessionDeliveryTarget, At as resolveInputFileLimits, B as normalizeOptionalSessionKey, Bt as countActiveDescendantRuns, Cn as CommandLane, Ct as DEFAULT_INPUT_IMAGE_MAX_BYTES, Dn as runWithModelFallback, Dt as extractFileContentFromSource, Et as DEFAULT_INPUT_TIMEOUT_MS, F as normalizeHttpWebhookUrl, G as buildDeliveryFromLegacyPayload, H as normalizePayloadToSystemText, Ht as initSubagentRegistry, Jt as readLatestAssistantReply, K as hasLegacyDeliveryHints, Kt as resolveAgentTimeoutMs, N as resetDirectoryCache, O as resolveOutboundSessionRoute, Ot as extractImageContentFromSource, Q as getHookType, Qt as clearAgentRunContext, R as inferLegacyName, S as createSymiTools, Sn as waitForActiveTasks, T as resolveAnnounceTargetFromKey, Tn as resolveModelProfile, Tt as DEFAULT_INPUT_MAX_REDIRECTS, U as normalizeRequiredName, Ut as listDescendantRunsForRequester, V as normalizeOptionalText, Vt as countActiveRunsForSession, W as migrateLegacyCronPayload, X as buildSafeExternalPrompt, Z as detectSuspiciousPatterns, a as getPluginToolMeta, an as getActiveEmbeddedRunCount, at as isGatewaySigusr1RestartExternallyAllowed, bn as resetAllLanes, c as handleSlackHttpRequest, cn as registerUnhandledRejectionHandler, ct as setGatewaySigusr1RestartPolicy, d as buildHistoryContextFromEntries, dn as formatUserTime, en as getAgentRunContext, fn as resolveUserTimeFormat, h as getTotalPendingReplies, it as emitGatewayRestart, k as resolveOutboundTarget, kt as normalizeMimeList, l as readJsonBodyWithLimit, ln as ToolInputError, lt as setPreRestartDeferralCheck, n as applyToolPolicyPipeline, nn as registerAgentRunContext, nt as consumeGatewaySigusr1RestartAuthorization, ot as markGatewaySigusr1RestartHandled, pn as resolveUserTimezone, q as stripLegacyDeliveryFields, qt as runSubagentAnnounceFlow, r as buildDefaultToolPolicyPipelineSteps, rt as deferGatewayRestartUntilIdle, s as loadSymiPlugins, t as runAgentTurn, tn as onAgentEvent, u as requestBodyErrorToText, vn as getActiveTaskCount, wn as classifyOutboundMessage, wt as DEFAULT_INPUT_IMAGE_MIMES, xn as setCommandLaneConcurrency, yn as getTotalQueueSize, z as normalizeOptionalAgentId } from "./unified-runner-CznU7Ad0.js";
 import { A as isRich, E as setVerbose, H as createInternalHookEvent, M as getChildLogger, N as getLogger, P as getResolvedLoggerSettings, U as registerInternalHook, V as clearInternalHooks, W as triggerInternalHook, j as theme, k as colorize, m as createEmptyPluginRegistry, r as DEFAULT_CHAT_CHANNEL } from "./registry-Sbac4a4z.js";
 import { _ as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort, v as expandHomePrefix } from "./paths-By0XjHBk.js";
 import { h as resolveUserPath, s as ensureDir, t as CONFIG_DIR, v as shortenHomePath, x as truncateUtf16Safe } from "./utils-CTPsqyE_.js";
 import { a as setConsoleSubsystemFilter, f as defaultRuntime, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-CHbO_DkH.js";
-import "./auth-profiles-D5nYBj_Z.js";
+import "./auth-profiles-Ce7R_25e.js";
 import { t as formatCliCommand } from "./command-format-BzjsXBTi.js";
 import { b as isSubagentSessionKey, c as resolveAgentIdFromSessionKey, d as toAgentRequestSessionKey, f as toAgentStoreSessionKey, o as normalizeAgentId, p as DEFAULT_ACCOUNT_ID, r as buildAgentMainSessionKey, s as normalizeMainKey, t as DEFAULT_AGENT_ID, v as isCronRunSessionKey, x as parseAgentSessionKey } from "./session-key-DUSb7CCb.js";
-import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-DeCVdZB4.js";
+import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-BQ0IpoW2.js";
 import { i as logDebug, n as runExec, s as logWarn, t as runCommandWithTimeout } from "./exec-DuYbft0z.js";
-import { C as ensureAgentWorkspace, D as resolveDefaultAgentWorkspaceDir, O as resolveWorkspaceTemplateDir, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter } from "./agent-scope-Bnsyyeci.js";
-import { C as DEFAULT_MODEL, S as DEFAULT_CONTEXT_TOKENS, b as resolveThinkingDefault, f as resolveAllowedModelRef, g as resolveHooksGmailModel, m as resolveConfiguredModelRef, o as getModelRefStatus, s as isCliProvider, w as DEFAULT_PROVIDER } from "./model-selection-CCTzD29o.js";
+import { C as ensureAgentWorkspace, D as resolveDefaultAgentWorkspaceDir, O as resolveWorkspaceTemplateDir, a as resolveAgentModelFallbacksOverride, c as resolveAgentWorkspaceDir, d as resolveSessionAgentId, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter } from "./agent-scope-DOrZjOnW.js";
+import { C as DEFAULT_MODEL, S as DEFAULT_CONTEXT_TOKENS, b as resolveThinkingDefault, f as resolveAllowedModelRef, g as resolveHooksGmailModel, m as resolveConfiguredModelRef, o as getModelRefStatus, s as isCliProvider, w as DEFAULT_PROVIDER } from "./model-selection-7wdmO-Iw.js";
 import { n as isPidAlive } from "./process-scoped-map-lWFQjQ3p.js";
-import "./file-lock-2AecMjCa.js";
+import "./file-lock-BVUYnlQv.js";
 import "./agent-paths-BbZSGrUA.js";
-import "./pi-embedded-helpers-j1JrlsI0.js";
-import { M as resolveSubagentMaxConcurrent, N as VERSION, P as resolveRuntimeServiceVersion, f as parseDurationMs, i as loadConfig, j as resolveAgentMaxConcurrent, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-BngIfn5l.js";
+import "./pi-embedded-helpers-D-OFjhdI.js";
+import { M as resolveSubagentMaxConcurrent, N as VERSION, P as resolveRuntimeServiceVersion, f as parseDurationMs, i as loadConfig, j as resolveAgentMaxConcurrent, l as writeConfigFile, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-B4jkreCN.js";
 import "./boolean-CbZoNRMn.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-BRnPI9sO.js";
 import "./shell-env-Dc3iU7HK.js";
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-D1MLZEjS.js";
 import { a as isPathInsideWithRealpath } from "./legacy-names-BQ9vKISY.js";
-import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-CZGTCone.js";
-import "./chrome-38OnGyuN.js";
+import { S as resolveToolProfilePolicy, _ as collectExplicitAllowlist, b as mergeAlsoAllowPolicy } from "./sandbox-BkznAPKO.js";
+import "./chrome-DJChpTwP.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-DpKBMIvx.js";
 import { t as safeEqualSecret } from "./secret-equal-CbntzRkh.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-XKACsamF.js";
 import { a as isTrustedProxyAddress, d as resolveGatewayListenHosts, f as resolveHostName, l as resolveClientIp, n as isLoopbackAddress, o as isValidIPv4, r as isLoopbackHost, s as normalizeHostHeader, t as rawDataToString, u as resolveGatewayBindHost } from "./ws-C7Ktmt-R.js";
 import { a as resolveGatewayAuth, c as createAuthRateLimiter, i as isLocalDirectRequest, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-Bkx-QuRN.js";
-import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-DXdk410X.js";
+import { g as mergeGatewayTailscaleConfig, h as ensureGatewayStartupAuth } from "./server-context-ChcbJgNo.js";
 import { d as hasBinary } from "./frontmatter-B_jqcova.js";
-import { r as buildWorkspaceSkillSnapshot } from "./skills-CYcBtLGH.js";
-import "./routes-BwTUoI5h.js";
+import { r as buildWorkspaceSkillSnapshot } from "./skills-BwDmcZdt.js";
+import "./routes-ivqbutvM.js";
 import "./redact-B3O-RBO1.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-bI7Tdx75.js";
-import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-B0Is-oLk.js";
-import "./paths-BWqg8NZT.js";
+import { n as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-BdejYjW8.js";
+import "./paths-DObzwe08.js";
 import { t as SsrFBlockedError } from "./ssrf-DOZRI5XH.js";
-import { c as detectMime } from "./image-ops-BzCBIakN.js";
-import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-CB_Iu83U.js";
+import { c as detectMime } from "./image-ops-L70xVnpG.js";
+import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-gxLM5ahL.js";
 import "./trash-_YhavPQI.js";
-import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-BCc3THTm.js";
+import { B as resolveAgentMainSessionKey, H as resolveMainSessionKey, M as evaluateSessionFreshness, P as resolveSessionResetPolicy, U as resolveMainSessionKeyFromConfig, Y as cleanStaleLockFiles, _ as mergeDeliveryContext, d as updateSessionStore, h as deliveryContextFromSession, n as parseSessionThreadInfo, o as loadSessionStore, z as canonicalizeMainSessionAlias } from "./sessions-Dxf5Kjig.js";
 import "./dock-hF45sewN.js";
 import { _ as normalizeGatewayClientMode, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient } from "./message-channel-DgjXWzf-.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CF5skkHh.js";
-import "./send-CxjvucMO.js";
+import "./send-B0jHSNMF.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, s as resolveSessionTranscriptsDirForAgent } from "./paths-BtvQ7JvU.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-COroyVA5.js";
 import { n as isSilentReplyText, t as SILENT_REPLY_TOKEN } from "./tokens-0yh2UnJq.js";
-import { _ as runGlobalGatewayStopSafely, h as getGlobalHookRunner, t as deliverOutboundPayloads } from "./deliver-CWMFmMCv.js";
+import { _ as runGlobalGatewayStopSafely, h as getGlobalHookRunner, t as deliverOutboundPayloads } from "./deliver-lTZLIQqf.js";
 import { c as startDiagnosticHeartbeat, l as stopDiagnosticHeartbeat, u as isDiagnosticsEnabled } from "./diagnostic-DbT9t0Sh.js";
 import "./diagnostic-session-state-DnkpMfCl.js";
-import "./model-auth-_C07_3Yr.js";
+import "./model-auth-1EAQvYRv.js";
 import "./github-copilot-token-D-FdDfee.js";
-import "./models-config-DlXge3Sd.js";
-import "./pi-auth-json-D-vdh-nY.js";
+import "./models-config-B5Xxy-c-.js";
+import "./pi-auth-json-Db8XJVGL.js";
 import { c as hasNonzeroUsage, s as deriveSessionTotalTokens } from "./session-cost-usage-D3mgssM_.js";
-import { C as enqueueSystemEvent, a as loadCombinedSessionStoreForGateway, f as formatRestartSentinelMessage, i as listSessionsFromStore, m as summarizeRestartSentinel, o as loadSessionEntry, u as consumeRestartSentinel, x as lookupContextTokens } from "./session-utils-CJhcRx3E.js";
-import { r as getMachineDisplayName } from "./with-timeout-CLrF-Yr_.js";
-import { a as resolveAgentIdentity } from "./reply-prefix-CtZtkTJK.js";
-import { n as resolveMemoryBackendConfig, t as getMemorySearchManager } from "./memory-BFnx3v3_.js";
-import { c as resolveMemorySearchConfig } from "./manager-DG6PODgu.js";
-import "./sqlite-BpogPlQW.js";
+import { C as enqueueSystemEvent, a as loadCombinedSessionStoreForGateway, f as formatRestartSentinelMessage, i as listSessionsFromStore, m as summarizeRestartSentinel, o as loadSessionEntry, u as consumeRestartSentinel, x as lookupContextTokens } from "./session-utils-Cs1jlD-q.js";
+import { r as getMachineDisplayName } from "./with-timeout-DPR4A2dx.js";
+import { a as resolveAgentIdentity } from "./reply-prefix-BFNeXT65.js";
+import { n as resolveMemoryBackendConfig, t as getMemorySearchManager } from "./memory-B067LTL9.js";
+import { c as resolveMemorySearchConfig } from "./manager-CoCX7L5u.js";
+import "./sqlite-Cod7C5ba.js";
 import "./chunk-BxfKjCUx.js";
 import "./markdown-tables-CS1Tvb3z.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-JHxT9355.js";
-import "./local-roots-2Jb79HZ8.js";
+import "./local-roots-CgDCgCuM.js";
 import { n as isRestartEnabled } from "./commands-DUzLGgEZ.js";
-import "./commands-registry-CwXsDVuO.js";
-import { Bt as ErrorCodes, Gt as approveDevicePairing, H as validateExecApprovalRequestParams, Kt as ensureDeviceToken, O as validateConnectParams, U as validateExecApprovalResolveParams, Vt as errorShape, Wt as buildDeviceAuthPayload, Zt as requestDevicePairing, an as deriveDeviceIdFromPublicKey, cn as verifyDeviceSignature, lt as validateRequestFrame, n as formatValidationErrors, nn as verifyDeviceToken, qt as getPairedDevice, rn as roleScopesAllow, sn as normalizeDevicePublicKeyBase64Url, tn as updatePairedDeviceMetadata, zt as PROTOCOL_VERSION } from "./client-CTrfpKT3.js";
-import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-Bpjj5p7I.js";
-import "./pairing-token-B703A1U3.js";
+import "./commands-registry-Ca5hh7nh.js";
+import { Bt as ErrorCodes, Gt as approveDevicePairing, H as validateExecApprovalRequestParams, Kt as ensureDeviceToken, O as validateConnectParams, U as validateExecApprovalResolveParams, Vt as errorShape, Wt as buildDeviceAuthPayload, Zt as requestDevicePairing, an as deriveDeviceIdFromPublicKey, cn as verifyDeviceSignature, lt as validateRequestFrame, n as formatValidationErrors, nn as verifyDeviceToken, qt as getPairedDevice, rn as roleScopesAllow, sn as normalizeDevicePublicKeyBase64Url, tn as updatePairedDeviceMetadata, zt as PROTOCOL_VERSION } from "./client-Cs9Bh-G0.js";
+import { f as loadGatewayTlsRuntime$1, n as callGateway } from "./call-xdEE97oU.js";
+import "./pairing-token-Dcy37-4s.js";
 import "./tool-display-DFOL6UQ9.js";
-import { _ as registerSkillsChangeListener, a as refreshRemoteNodeBins, g as getSkillsSnapshotVersion, i as refreshRemoteBinsForConnectedNodes, n as primeRemoteSkillsCache, o as removeRemoteNodeInfo, p as updatePairedNodeMetadata, r as recordRemoteNodeInfo, s as setSkillsRemoteRegistry, t as getRemoteSkillEligibility } from "./skills-remote-BcRQTDsZ.js";
-import "./workspace-dirs-DCICLTHx.js";
+import { _ as registerSkillsChangeListener, a as refreshRemoteNodeBins, g as getSkillsSnapshotVersion, i as refreshRemoteBinsForConnectedNodes, n as primeRemoteSkillsCache, o as removeRemoteNodeInfo, p as updatePairedNodeMetadata, r as recordRemoteNodeInfo, s as setSkillsRemoteRegistry, t as getRemoteSkillEligibility } from "./skills-remote-bz71Bstn.js";
+import "./workspace-dirs-jKFQf7of.js";
 import "./pi-model-discovery-ClQLvlCW.js";
-import { n as loadModelCatalog } from "./model-catalog-BWurV7gl.js";
-import "./skill-commands-DWvXs3lz.js";
-import "./pairing-store-Be-ZQK87.js";
+import { n as loadModelCatalog } from "./model-catalog-IWi6-nY9.js";
+import "./skill-commands-DDGGlq68.js";
+import "./pairing-store-BNhJOnWn.js";
 import { t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-DioSaIeH.js";
-import "./nodes-screen-Cp5QP3ET.js";
+import "./nodes-screen-De9ma6e1.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-DeczTGI-.js";
 import "./breakdown-B_Dhhm3K.js";
-import "./control-service-CUreKVeY.js";
+import "./control-service-D8kKOts5.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-DQs772BN.js";
 import { n as onSymframePush } from "./symframe-broadcast-CXo2qoxy.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-H1qOf0q-.js";
 import "./delivery-queue-OAc7hsIs.js";
 import { t as buildChannelAccountBindings } from "./bindings-DIhsYGa_.js";
-import "./resolve-route-Du0VftVs.js";
+import "./resolve-route-C1IIA6kH.js";
 import { t as formatDocsLink } from "./links-Bqr0FxXx.js";
 import { n as runCommandWithRuntime } from "./cli-utils-CuyGL3rq.js";
 import { t as formatHelpExamples } from "./help-format-7hFcsqss.js";
 import { n as withProgress } from "./progress-swt2y17x.js";
-import "./memory-cli-CHNghdrm.js";
+import "./memory-cli-D8Z_5-Nz.js";
 import "./logging-BWknayJl.js";
-import "./replies-B_3j7R_Q.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CvAqjEH9.js";
-import "./model-Cwbcw-km.js";
-import { t as createDefaultDeps } from "./deps-CdibsPMx.js";
+import "./replies-CbXXjn9X.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-H2t-Xkfc.js";
+import "./model-MUMSB_7d.js";
+import { t as createDefaultDeps } from "./deps-Bf9dt2UO.js";
 import { t as ensureSymiCliOnPath } from "./path-env-BY88zbPR.js";
 import "./runtime-guard-CWA00ZXa.js";
-import { t as forceFreePortAndWait } from "./ports-Bi3V_3n9.js";
+import { t as forceFreePortAndWait } from "./ports-r7LBic2V.js";
 import "./catalog-BptA-dUv.js";
-import "./skills-status-DLnCHUZ2.js";
+import "./skills-status-BKX1PjCc.js";
 import { n as inheritOptionFromParent } from "./command-options-DDDwkB9t.js";
 import "./prompt-style-olk5zI5k.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-G6zuddmF.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-BXSJTxI7.js";
-import "./install-safe-path-BrpA09f2.js";
-import "./skill-scanner-CIlHPszT.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-DJBhDIMq.js";
+import "./install-safe-path-B2JrFspY.js";
+import "./skill-scanner-BCgVcIwi.js";
 import "./channels-status-issues-DLIzUsjR.js";
-import "./daemon-runtime-CKn0wmCk.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-BKejzolA.js";
-import "./systemd-CsoVnIbM.js";
-import "./service-CRZoXO_n.js";
-import "./lifecycle-core-cSR_xiIO.js";
-import "./systemd-hints-QISwLlFU.js";
+import "./daemon-runtime-DlQla_dA.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-CLXJ8zp0.js";
+import "./systemd-CUIM0n5P.js";
+import "./service-e6MzlLCd.js";
+import "./lifecycle-core-wFwnK_mD.js";
+import "./systemd-hints-CsrzMCTD.js";
 import { t as parsePort$1 } from "./parse-port-CMRD6fhd.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-qDdMg615.js";
-import "./diagnostics-CYkqD5lP.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-BYiG4GOU.js";
+import "./diagnostics-DlZODdRf.js";
 import "./table-0A3xKJVC.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DHO-Mc6G.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-C39SiDDJ.js";
-import { c as resolveNodeCommandAllowlist, l as probeGateway, n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./audit-CXIXYDRx.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-1xPo9ygd.js";
+import { c as resolveNodeCommandAllowlist, l as probeGateway, n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./audit-Ce-u6aaR.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-CWTnBKX8.js";
-import { r as pickGatewaySelfPresence } from "./status-BWxLtb3D.js";
-import { i as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-CMbUI4aN.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B8B9z_Ll.js";
-import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-u6Jgr1cz.js";
-import { t as runOnboardingWizard } from "./onboarding-DqlPV372.js";
-import { C as startGatewayConfigReloader, S as resolveCronRunLogPath, _ as MAX_PAYLOAD_BYTES, a as loadFavoritesSet, b as abortChatRunById, c as resolveAssistantIdentity, d as formatError, f as loadVoiceWakeConfig, g as MAX_BUFFERED_BYTES, h as HEALTH_REFRESH_INTERVAL_MS, i as safeParseJson, l as listSystemPresence, m as DEDUPE_TTL_MS, n as handleGatewayRequest, o as reconcileFavorites, p as DEDUPE_MAX, r as broadcastPresenceSnapshot, s as DEFAULT_ASSISTANT_IDENTITY, t as coreGatewayHandlers, u as upsertPresence, v as TICK_INTERVAL_MS, x as appendCronRunLog, y as getHandshakeTimeoutMs } from "./server-methods-DfVfzYqq.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-CBGvXev_.js";
+import { r as pickGatewaySelfPresence } from "./status-DHBVIMyL.js";
+import { i as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-DpE9GWGn.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-CJQ97d4u.js";
+import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-BCL_K7kx.js";
+import { t as runOnboardingWizard } from "./onboarding-BnoGiOh3.js";
+import { C as startGatewayConfigReloader, S as resolveCronRunLogPath, _ as MAX_PAYLOAD_BYTES, a as loadFavoritesSet, b as abortChatRunById, c as resolveAssistantIdentity, d as formatError, f as loadVoiceWakeConfig, g as MAX_BUFFERED_BYTES, h as HEALTH_REFRESH_INTERVAL_MS, i as safeParseJson, l as listSystemPresence, m as DEDUPE_TTL_MS, n as handleGatewayRequest, o as reconcileFavorites, p as DEDUPE_MAX, r as broadcastPresenceSnapshot, s as DEFAULT_ASSISTANT_IDENTITY, t as coreGatewayHandlers, u as upsertPresence, v as TICK_INTERVAL_MS, x as appendCronRunLog, y as getHandshakeTimeoutMs } from "./server-methods-B2tykucj.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-va-DRu4U.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CGaQ7-Vb.js";
-import { a as getCliSessionId, o as setCliSessionId, s as runCliAgent, t as agentCommand } from "./agent-NT0EKnK_.js";
+import { a as getCliSessionId, o as setCliSessionId, s as runCliAgent, t as agentCommand } from "./agent-CBfp75J4.js";
 import { t as createOutboundSendDeps } from "./outbound-send-deps--SpwgFhS.js";
-import { s as loadAgentIdentityFromWorkspace } from "./agents.config-DA0ISLi7.js";
-import "./dm-policy-shared-B61_yf6G.js";
-import "./node-service-Cc18m-uk.js";
-import "./status.update-CKfyV6zw.js";
-import "./skills-install-BTa9IuQ6.js";
-import "./update-runner-G2YgEATs.js";
-import { t as resolveAgentSessionDirs } from "./session-dirs-a00Ad2SO.js";
+import { s as loadAgentIdentityFromWorkspace } from "./agents.config-B7sNDvhz.js";
+import "./dm-policy-shared-CeFt0nch.js";
+import "./node-service-BH08wY5j.js";
+import "./status.update-DGJi0OLl.js";
+import "./skills-install-Dwzsjoc8.js";
+import "./update-runner-BLV8SI96.js";
+import { t as resolveAgentSessionDirs } from "./session-dirs-C9E2G0yZ.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-dN7eNg6n.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -150,7 +150,7 @@ import * as fsSync from "node:fs";
 import fs from "node:fs";
 import os from "node:os";
 import JSON5 from "json5";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { spawn } from "node:child_process";
 import { z } from "zod";
 import net from "node:net";
@@ -1140,7 +1140,7 @@ function shouldSkipCheck(allowInTests) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fsPromises.readFile(statePath, "utf-8");
+		const raw = await fs$1.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1148,8 +1148,8 @@ async function readState(statePath) {
 	}
 }
 async function writeState(statePath, state) {
-	await fsPromises.mkdir(path.dirname(statePath), { recursive: true });
-	await fsPromises.writeFile(statePath, JSON.stringify(state, null, 2), "utf-8");
+	await fs$1.mkdir(path.dirname(statePath), { recursive: true });
+	await fs$1.writeFile(statePath, JSON.stringify(state, null, 2), "utf-8");
 }
 function sameUpdateAvailable(a, b) {
 	if (a === b) return true;
@@ -6562,7 +6562,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.SYMI_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.SYMI_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-CUreKVeY.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-D8kKOts5.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -6789,7 +6789,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fsPromises.lstat(candidate);
+		const st = await fs$1.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -6826,8 +6826,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fsPromises.stat(indexPath);
-		await fsPromises.stat(bundlePath);
+		await fs$1.stat(indexPath);
+		await fs$1.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -6836,7 +6836,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -7057,13 +7057,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fsPromises.realpath(rootDir);
+	const rootReal = await fs$1.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fsPromises.stat(indexPath);
+		await fs$1.stat(indexPath);
 	} catch {
 		try {
-			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -10000,7 +10000,7 @@ function resolveGatewayOwnerStatus(pid, payload, platform) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fsPromises.readFile(lockPath, "utf8");
+		const raw = await fs$1.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -10034,11 +10034,11 @@ async function acquireGatewayLock(opts = {}) {
 	const staleMs = opts.staleMs ?? DEFAULT_STALE_MS;
 	const platform = opts.platform ?? process.platform;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
+	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fsPromises.open(lockPath, "wx");
+		const handle = await fs$1.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -10052,7 +10052,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -10061,7 +10061,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? resolveGatewayOwnerStatus(ownerPid, lastPayload, platform) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fsPromises.rm(lockPath, { force: true });
+			await fs$1.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -10071,13 +10071,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fsPromises.stat(lockPath);
+				const st = await fs$1.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = true;
 			}
 			if (stale) {
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -11978,7 +11978,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-OAc7hsIs.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-CWMFmMCv.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-lTZLIQqf.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),
@@ -12051,7 +12051,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-Bof7krDJ.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-BH9WH_VN.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,