@visorcraft/idlehands 4.0.17 → 4.0.19

package/dist/{reply-prefix-BMEdvSpA.js → reply-prefix-C3y4zpTl.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { i as resolveAgentConfig } from "./agent-scope-Bn39ugK4.js";
+import { i as resolveAgentConfig } from "./agent-scope-RA0zXRpu.js";
 
 //#region src/agents/identity.ts
 const DEFAULT_ACK_REACTION = "👀";

package/dist/{resolve-route-Ef_Yt2Dw.js → resolve-route-D_AbcmD6.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { F as shouldLogVerbose } from "./utils-CXzXXV2o.js";
-import { d as resolveDefaultAgentId } from "./agent-scope-Bn39ugK4.js";
+import { d as resolveDefaultAgentId } from "./agent-scope-RA0zXRpu.js";
 import { d as sanitizeAgentId, h as normalizeAccountId, i as buildAgentPeerSessionKey, m as DEFAULT_ACCOUNT_ID, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID } from "./session-key-Cuihcz_O.js";
 import { i as logDebug } from "./exec-CKHMT0tZ.js";
 import { t as normalizeChatType } from "./chat-type-3FRbbjbq.js";
-import { n as listBindings } from "./bindings-DZjkLUU_.js";
+import { n as listBindings } from "./bindings-B59Q7nsk.js";
 
 //#region src/routing/resolve-route.ts
 var resolve_route_exports = /* @__PURE__ */ __exportAll({

package/dist/{rpc-DDTp_J6f.js → rpc-Cf9OK5Yk.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-DVauVtrg.js";
-import { a as randomIdempotencyKey, n as callGateway } from "./call-DnTBT02D.js";
+import { a as randomIdempotencyKey, n as callGateway } from "./call-BpWhjuOg.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-CZ8lT9jK.js";
 import { n as withProgress } from "./progress-BQLz1r3L.js";
 

package/dist/{rpc-CasD0keJ.js → rpc-DVTovtI3.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-Qpj4ExtQ.js";
-import { a as randomIdempotencyKey, n as callGateway } from "./call-DuNslqj2.js";
+import { a as randomIdempotencyKey, n as callGateway } from "./call-C82rD2Wn.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-BT886LNK.js";
 import { n as withProgress } from "./progress-B76RkFx7.js";
 

package/dist/{run-main-BwWO5erE.js → run-main-BCX3UZMR.js}

@@ -25,11 +25,11 @@ import "./logging-Bgrm4o7g.js";
 import "./auth-store-D9BmR4S6.js";
 import "./send-m4lQkQcY.js";
 import "./send-CCiDIuX4.js";
-import "./subagent-registry-CTZmDdGV.js";
+import "./subagent-registry-BH5O1rxK.js";
 import "./paths-CC17i2eK.js";
 import "./chat-envelope-Dedaetiq.js";
-import "./client-Brv1GCwX.js";
-import "./call-DuNslqj2.js";
+import "./client-udFMSDes.js";
+import "./call-C82rD2Wn.js";
 import "./pairing-token-CnnKAS6M.js";
 import "./net-CE_62H5R.js";
 import "./ip-Y1214nEL.js";
@@ -108,15 +108,15 @@ import "./cli-utils-BfsDuRZS.js";
 import "./help-format-CldHB7lS.js";
 import "./progress-B76RkFx7.js";
 import "./replies-DSfpze17.js";
-import "./deps-BUUwigzc.js";
-import "./onboard-helpers-Dp6wXNs7.js";
+import "./deps-CjWcQwlX.js";
+import "./onboard-helpers-DWivfzcc.js";
 import "./prompt-style-XmK49QYK.js";
 import "./pairing-labels-D7xcHkxi.js";
 import { t as ensureIdleHandsCliOnPath } from "./path-env-cPX3lugV.js";
 import "./note-C2HHth6G.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-CncOKeD3.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-BY85d-vE.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-DTSD0F6o.js";
-import { t as emitCliBanner } from "./banner-Dv_eAAWw.js";
+import { t as emitCliBanner } from "./banner-CFKoGAzN.js";
 import "./doctor-config-flow-BvGvt5rT.js";
 import { n as ensureConfigReady } from "./config-guard-7CCnD0lc.js";
 import process$1 from "node:process";
@@ -131,7 +131,7 @@ const routeHealth = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { healthCommand } = await import("./health-BN8WNyon.js").then((n) => n.i);
+		const { healthCommand } = await import("./health-HEN6Wk9G.js").then((n) => n.i);
 		await healthCommand({
 			json,
 			timeoutMs,
@@ -151,7 +151,7 @@ const routeStatus = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { statusCommand } = await import("./status-BE1Y0CKS.js").then((n) => n.t);
+		const { statusCommand } = await import("./status-ClMOrHdT.js").then((n) => n.t);
 		await statusCommand({
 			json,
 			deep,
@@ -190,7 +190,7 @@ const routeAgentsList = {
 	run: async (argv) => {
 		const json = hasFlag(argv, "--json");
 		const bindings = hasFlag(argv, "--bindings");
-		const { agentsListCommand } = await import("./agents-BLa67Gdv.js").then((n) => n.t);
+		const { agentsListCommand } = await import("./agents-DdTECKDf.js").then((n) => n.t);
 		await agentsListCommand({
 			json,
 			bindings
@@ -261,7 +261,7 @@ const routes = [
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
 			const json = hasFlag(argv, "--json");
-			const { runConfigGet } = await import("./config-cli-Bq_MWzp9.js");
+			const { runConfigGet } = await import("./config-cli-Bt7n6ZJS.js");
 			await runConfigGet({
 				path: pathArg,
 				json
@@ -274,7 +274,7 @@ const routes = [
 		run: async (argv) => {
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
-			const { runConfigUnset } = await import("./config-cli-Bq_MWzp9.js");
+			const { runConfigUnset } = await import("./config-cli-Bt7n6ZJS.js");
 			await runConfigUnset({ path: pathArg });
 			return true;
 		}
@@ -288,7 +288,7 @@ const routes = [
 			const local = hasFlag(argv, "--local");
 			const json = hasFlag(argv, "--json");
 			const plain = hasFlag(argv, "--plain");
-			const { modelsListCommand } = await import("./models-mQeB9JXZ.js").then((n) => n.t);
+			const { modelsListCommand } = await import("./models-tZYpgts_.js").then((n) => n.t);
 			await modelsListCommand({
 				all,
 				local,
@@ -319,7 +319,7 @@ const routes = [
 			const plain = hasFlag(argv, "--plain");
 			const check = hasFlag(argv, "--check");
 			const probe = hasFlag(argv, "--probe");
-			const { modelsStatusCommand } = await import("./models-mQeB9JXZ.js").then((n) => n.t);
+			const { modelsStatusCommand } = await import("./models-tZYpgts_.js").then((n) => n.t);
 			await modelsStatusCommand({
 				json,
 				plain,
@@ -397,7 +397,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-DyMaBEqF.js");
+	const { buildProgram } = await import("./program-vH6RTUOw.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -410,10 +410,10 @@ async function runCli(argv = process$1.argv) {
 		const { getProgramContext } = await import("./program-context-BrqeiWcA.js").then((n) => n.n);
 		const ctx = getProgramContext(program);
 		if (ctx) {
-			const { registerCoreCliByName } = await import("./command-registry-DZZAmcbA.js").then((n) => n.t);
+			const { registerCoreCliByName } = await import("./command-registry-CWDCVzZv.js").then((n) => n.t);
 			await registerCoreCliByName(program, ctx, primary, parseArgv);
 		}
-		const { registerSubCliByName } = await import("./register.subclis-YeKuHCRg.js").then((n) => n.a);
+		const { registerSubCliByName } = await import("./register.subclis-CrcOefJY.js").then((n) => n.a);
 		await registerSubCliByName(program, primary);
 	}
 	if (!shouldSkipPluginCommandRegistration({
@@ -421,7 +421,7 @@ async function runCli(argv = process$1.argv) {
 		primary,
 		hasBuiltinPrimary: primary !== null && program.commands.some((command) => command.name() === primary)
 	})) {
-		const { registerPluginCliCommands } = await import("./cli-j1A8WKSj.js");
+		const { registerPluginCliCommands } = await import("./cli-Hplv9sD1.js");
 		const { loadConfig } = await import("./auth-profiles-Baj5ImDJ.js").then((n) => n.D);
 		registerPluginCliCommands(program, loadConfig());
 	}

package/dist/{runner-PgRFPYUj.js → runner-BzNdfqDz.js}

@@ -5,7 +5,7 @@ import { _ as runExec } from "./workspace-DBFSzT6O.js";
 import { J as isInboundPathAllowed, R as loadConfig, T as resolveApiKeyForProvider, X as resolveIMessageAttachmentRoots, Y as mergeInboundPathRoots, c as normalizeProviderId, dn as resolveIdleHandsAgentDir, g as normalizeGoogleModelId, q as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, w as requireApiKey } from "./model-selection-1MMYqY6M.js";
 import { t as normalizeChatType } from "./chat-type-BPBtOjer.js";
 import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-D1KtygWz.js";
-import { t as describeImageWithModel, w as ensureIdleHandsModelsJson } from "./image-D8b_rlQC.js";
+import { t as describeImageWithModel, w as ensureIdleHandsModelsJson } from "./image-COw__ACq.js";
 import { n as collectProviderApiKeysForExecution, r as executeWithApiKeyRotation, t as parseGeminiAuth } from "./gemini-auth-CIyaa44H.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-3YYM8QuM.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-iuQsIjqN.js";

package/dist/{runner-BFG54hnb.js → runner-DzszLzI4.js}

@@ -1,22 +1,22 @@
 import { F as shouldLogVerbose, M as logVerbose, et as resolvePreferredIdleHandsTmpDir } from "./utils-CXzXXV2o.js";
-import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-Bn39ugK4.js";
+import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-RA0zXRpu.js";
 import { n as runExec } from "./exec-CKHMT0tZ.js";
-import { J as requireApiKey, Jt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, Xt as mergeInboundPathRoots, Y as resolveApiKeyForProvider, Yt as isInboundPathAllowed, Zt as resolveIMessageAttachmentRoots, k as normalizeGoogleModelId, u as normalizeProviderId } from "./model-selection-CSn9tUuH.js";
+import { J as requireApiKey, Jt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, Xt as mergeInboundPathRoots, Y as resolveApiKeyForProvider, Yt as isInboundPathAllowed, Zt as resolveIMessageAttachmentRoots, k as normalizeGoogleModelId, u as normalizeProviderId } from "./model-selection-0dGxYGp8.js";
 import { t as normalizeChatType } from "./chat-type-3FRbbjbq.js";
-import { t as describeImageWithModel } from "./image-C2JZiK-6.js";
+import { t as describeImageWithModel } from "./image-DSDEbSiO.js";
 import { r as formatUncaughtError, t as extractErrorCode } from "./errors-DZDuPc3M.js";
-import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-BkoEFRYH.js";
+import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-BU-VdLZu.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-Tud5uP5n.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-yUZu1Vzc.js";
-import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-nXQVJErE.js";
-import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, r as MediaFetchError } from "./local-roots-Cco87A2_.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-BCsDrrvq.js";
+import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-B-FTJm5p.js";
+import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, r as MediaFetchError } from "./local-roots-q0xbefkf.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-D9no0CH2.js";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import crypto from "node:crypto";
 
 //#region src/auto-reply/templating.ts
@@ -954,7 +954,7 @@ var MediaAttachmentCache = class {
 			const size = await this.ensureLocalStat(entry);
 			if (entry.resolvedPath) {
 				if (size !== void 0 && size > params.maxBytes) throw new MediaUnderstandingSkipError("maxBytes", `Attachment ${params.attachmentIndex + 1} exceeds maxBytes ${params.maxBytes}`);
-				const buffer = await fsPromises.readFile(entry.resolvedPath);
+				const buffer = await fs$1.readFile(entry.resolvedPath);
 				entry.buffer = buffer;
 				entry.bufferMime = entry.bufferMime ?? entry.attachment.mime ?? await detectMime({
 					buffer,
@@ -1024,10 +1024,10 @@ var MediaAttachmentCache = class {
 			prefix: "idlehands-media",
 			extension: path.extname(bufferResult.fileName || "") || ""
 		});
-		await fsPromises.writeFile(tmpPath, bufferResult.buffer);
+		await fs$1.writeFile(tmpPath, bufferResult.buffer);
 		entry.tempPath = tmpPath;
 		entry.tempCleanup = async () => {
-			await fsPromises.unlink(tmpPath).catch(() => {});
+			await fs$1.unlink(tmpPath).catch(() => {});
 		};
 		return {
 			path: tmpPath,
@@ -1074,12 +1074,12 @@ var MediaAttachmentCache = class {
 		if (entry.statSize !== void 0) return entry.statSize;
 		try {
 			const currentPath = entry.resolvedPath;
-			const stat = await fsPromises.stat(currentPath);
+			const stat = await fs$1.stat(currentPath);
 			if (!stat.isFile()) {
 				entry.resolvedPath = void 0;
 				return;
 			}
-			const canonicalPath = await fsPromises.realpath(currentPath).catch(() => currentPath);
+			const canonicalPath = await fs$1.realpath(currentPath).catch(() => currentPath);
 			if (!isInboundPathAllowed({
 				filePath: canonicalPath,
 				roots: await this.getCanonicalLocalPathRoots()
@@ -1101,7 +1101,7 @@ var MediaAttachmentCache = class {
 		if (this.canonicalLocalPathRoots) return await this.canonicalLocalPathRoots;
 		this.canonicalLocalPathRoots = (async () => mergeInboundPathRoots(this.localPathRoots, await Promise.all(this.localPathRoots.map(async (root) => {
 			if (root.includes("*")) return root;
-			return await fsPromises.realpath(root).catch(() => root);
+			return await fs$1.realpath(root).catch(() => root);
 		}))))();
 		return await this.canonicalLocalPathRoots;
 	}
@@ -1112,7 +1112,7 @@ var MediaAttachmentCache = class {
 async function fileExists(filePath) {
 	if (!filePath) return false;
 	try {
-		await fsPromises.stat(filePath);
+		await fs$1.stat(filePath);
 		return true;
 	} catch {
 		return false;
@@ -1212,7 +1212,7 @@ async function resolveCliOutput(params) {
 	const commandId = commandBase(params.command);
 	const fileOutput = commandId === "whisper-cli" ? resolveWhisperCppOutputPath(params.args) : commandId === "whisper" ? resolveWhisperOutputPath(params.args, params.mediaPath) : null;
 	if (fileOutput && await fileExists(fileOutput)) try {
-		const content = await fsPromises.readFile(fileOutput, "utf8");
+		const content = await fs$1.readFile(fileOutput, "utf8");
 		if (content.trim()) return content.trim();
 	} catch {}
 	if (commandId === "gemini") {
@@ -1517,7 +1517,7 @@ async function runCliEntry(params) {
 		maxBytes,
 		timeoutMs
 	});
-	const outputDir = await fsPromises.mkdtemp(path.join(resolvePreferredIdleHandsTmpDir(), "idlehands-media-cli-"));
+	const outputDir = await fs$1.mkdtemp(path.join(resolvePreferredIdleHandsTmpDir(), "idlehands-media-cli-"));
 	const mediaPath = pathResult.path;
 	const outputBase = path.join(outputDir, path.parse(mediaPath).name);
 	const templCtx = {
@@ -1551,7 +1551,7 @@ async function runCliEntry(params) {
 			model: command
 		};
 	} finally {
-		await fsPromises.rm(outputDir, {
+		await fs$1.rm(outputDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -1595,9 +1595,9 @@ function candidateBinaryNames(name) {
 }
 async function isExecutable(filePath) {
 	try {
-		if (!(await fsPromises.stat(filePath)).isFile()) return false;
+		if (!(await fs$1.stat(filePath)).isFile()) return false;
 		if (process.platform === "win32") return true;
-		await fsPromises.access(filePath, constants.X_OK);
+		await fs$1.access(filePath, constants.X_OK);
 		return true;
 	} catch {
 		return false;

package/dist/{runtime-DEmy759r.js → runtime-XmXLaHNk.js}

@@ -1,6 +1,6 @@
 import { y as resolveUserPath } from "./utils-CXzXXV2o.js";
-import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-Bn39ugK4.js";
-import { Ct as isRecord, Ir as resolveIdleHandsAgentDir, Jr as coerceSecretRef, Mr as replaceRuntimeAuthProfileStoreSnapshots, Or as clearRuntimeAuthProfileStoreSnapshots, Pt as clearRuntimeConfigSnapshot, St as isNonEmptyString, Vt as setRuntimeConfigSnapshot, in as secretRefKey, jr as loadAuthProfileStoreForSecretsRuntime, xt as resolveSecretRefValues } from "./model-selection-CSn9tUuH.js";
+import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-RA0zXRpu.js";
+import { Ct as isRecord, Ir as resolveIdleHandsAgentDir, Jr as coerceSecretRef, Mr as replaceRuntimeAuthProfileStoreSnapshots, Or as clearRuntimeAuthProfileStoreSnapshots, Pt as clearRuntimeConfigSnapshot, St as isNonEmptyString, Vt as setRuntimeConfigSnapshot, in as secretRefKey, jr as loadAuthProfileStoreForSecretsRuntime, xt as resolveSecretRefValues } from "./model-selection-0dGxYGp8.js";
 
 //#region src/secrets/runtime.ts
 let activeSnapshot = null;

package/dist/{sandbox-CfPbhDY_.js → sandbox-DcUw5h3p.js}

@@ -1,23 +1,23 @@
 import { r as STATE_DIR } from "./paths-Cn44w-EB.js";
 import { y as resolveUserPath } from "./utils-CXzXXV2o.js";
-import { C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, T as DEFAULT_USER_FILENAME, _ as DEFAULT_AGENT_WORKSPACE_DIR, b as DEFAULT_IDENTITY_FILENAME, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, m as resolveSessionAgentId, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-Bn39ugK4.js";
+import { C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, T as DEFAULT_USER_FILENAME, _ as DEFAULT_AGENT_WORKSPACE_DIR, b as DEFAULT_IDENTITY_FILENAME, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, m as resolveSessionAgentId, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-RA0zXRpu.js";
 import { d as CHANNEL_IDS, t as createSubsystemLogger } from "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
 import { l as resolveAgentIdFromSessionKey, s as normalizeAgentId } from "./session-key-Cuihcz_O.js";
-import { i as openBoundaryFile, u as resolvePathViaExistingAncestorSync } from "./idlehands-root-DFL2GrNW.js";
-import { It as loadConfig, an as getBlockedNetworkModeReason } from "./model-selection-CSn9tUuH.js";
+import { i as openBoundaryFile, u as resolvePathViaExistingAncestorSync } from "./idlehands-root-B8cUs-5M.js";
+import { It as loadConfig, an as getBlockedNetworkModeReason } from "./model-selection-0dGxYGp8.js";
 import { t as formatCliCommand } from "./command-format-DInZLuZ8.js";
 import { a as resolveCoreToolProfilePolicy, t as CORE_TOOL_GROUPS } from "./tool-catalog-4_Wxc542.js";
-import { O as DEFAULT_BROWSER_EVALUATE_ENABLED, j as DEFAULT_IDLEHANDS_BROWSER_PROFILE_NAME, k as DEFAULT_IDLEHANDS_BROWSER_COLOR } from "./chrome-YguTEaLx.js";
+import { O as DEFAULT_BROWSER_EVALUATE_ENABLED, j as DEFAULT_IDLEHANDS_BROWSER_PROFILE_NAME, k as DEFAULT_IDLEHANDS_BROWSER_COLOR } from "./chrome-VBsQfIrt.js";
 import { i as isLoopbackHost } from "./ws-XBTtYpJc.js";
-import { a as resolveProfile, o as ensureBrowserControlAuth, r as registerBrowserRoutes, s as resolveBrowserControlAuth, t as createBrowserRouteContext } from "./server-context-BxNSTpH6.js";
-import { d as resolveSandboxInputPath, f as resolveSandboxPath, g as sanitizeEnvVars, o as syncSkillsToWorkspace } from "./skills-TIyQDZx7.js";
-import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-BCskHdfJ.js";
+import { a as resolveProfile, o as ensureBrowserControlAuth, r as registerBrowserRoutes, s as resolveBrowserControlAuth, t as createBrowserRouteContext } from "./server-context-DI0W_H7R.js";
+import { d as resolveSandboxInputPath, f as resolveSandboxPath, g as sanitizeEnvVars, o as syncSkillsToWorkspace } from "./skills-DlvDyK8L.js";
+import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-FXBVVTLw.js";
 import { n as installBrowserCommonMiddleware, t as installBrowserAuthMiddleware } from "./server-middleware-BC21xYvr.js";
-import { Q as resolveAgentMainSessionKey, Z as canonicalizeMainSessionAlias, ct as acquireSessionWriteLock } from "./sessions-BqWocozB.js";
+import { Q as resolveAgentMainSessionKey, Z as canonicalizeMainSessionAlias, ct as acquireSessionWriteLock } from "./sessions-BtPXimXQ.js";
 import fs from "node:fs";
 import path, { posix } from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { spawn } from "node:child_process";
 import crypto from "node:crypto";
 import express from "express";
@@ -613,7 +613,7 @@ async function withRegistryLock(registryPath, fn) {
 }
 async function readRegistryFromFile(registryPath, mode) {
 	try {
-		const raw = await fsPromises.readFile(registryPath, "utf-8");
+		const raw = await fs$1.readFile(registryPath, "utf-8");
 		const parsed = JSON.parse(raw);
 		if (isRegistryFile(parsed)) return parsed;
 		if (mode === "fallback") return { entries: [] };
@@ -626,15 +626,15 @@ async function readRegistryFromFile(registryPath, mode) {
 	}
 }
 async function writeRegistryFile(registryPath, registry) {
-	await fsPromises.mkdir(SANDBOX_STATE_DIR, { recursive: true });
+	await fs$1.mkdir(SANDBOX_STATE_DIR, { recursive: true });
 	const payload = `${JSON.stringify(registry, null, 2)}\n`;
 	const registryDir = path.dirname(registryPath);
 	const tempPath = path.join(registryDir, `${path.basename(registryPath)}.${crypto.randomUUID()}.tmp`);
-	await fsPromises.writeFile(tempPath, payload, "utf-8");
+	await fs$1.writeFile(tempPath, payload, "utf-8");
 	try {
-		await fsPromises.rename(tempPath, registryPath);
+		await fs$1.rename(tempPath, registryPath);
 	} catch (error) {
-		await fsPromises.rm(tempPath, { force: true });
+		await fs$1.rm(tempPath, { force: true });
 		throw error;
 	}
 }
@@ -2088,7 +2088,7 @@ function formatSandboxToolPolicyBlockedMessage(params) {
 //#endregion
 //#region src/agents/sandbox/workspace.ts
 async function ensureSandboxWorkspace(workspaceDir, seedFrom, skipBootstrap) {
-	await fsPromises.mkdir(workspaceDir, { recursive: true });
+	await fs$1.mkdir(workspaceDir, { recursive: true });
 	if (seedFrom) {
 		const seed = resolveUserPath(seedFrom);
 		const files = [
@@ -2104,11 +2104,11 @@ async function ensureSandboxWorkspace(workspaceDir, seedFrom, skipBootstrap) {
 			const src = path.join(seed, name);
 			const dest = path.join(workspaceDir, name);
 			try {
-				await fsPromises.access(dest);
+				await fs$1.access(dest);
 			} catch {
 				try {
-					const content = await fsPromises.readFile(src, "utf-8");
-					await fsPromises.writeFile(dest, content, {
+					const content = await fs$1.readFile(src, "utf-8");
+					await fs$1.writeFile(dest, content, {
 						encoding: "utf-8",
 						flag: "wx"
 					});
@@ -2143,7 +2143,7 @@ async function ensureSandboxWorkspaceLayout(params) {
 			const message = error instanceof Error ? error.message : JSON.stringify(error);
 			defaultRuntime.error?.(`Sandbox skill sync failed: ${message}`);
 		}
-	} else await fsPromises.mkdir(workspaceDir, { recursive: true });
+	} else await fs$1.mkdir(workspaceDir, { recursive: true });
 	return {
 		agentWorkspaceDir,
 		scopeKey,
@@ -2153,7 +2153,7 @@ async function ensureSandboxWorkspaceLayout(params) {
 }
 async function resolveSandboxDockerUser(params) {
 	if (params.docker.user?.trim()) return params.docker;
-	const stat = params.stat ?? ((workspaceDir) => fsPromises.stat(workspaceDir));
+	const stat = params.stat ?? ((workspaceDir) => fs$1.stat(workspaceDir));
 	try {
 		const workspaceStat = await stat(params.workspaceDir);
 		const uid = Number.isInteger(workspaceStat.uid) ? workspaceStat.uid : null;

package/dist/{sandbox-cli-B4wLJr21.js → sandbox-cli-DGvJ7Eeq.js}

@@ -1,51 +1,51 @@
 import "./paths-Cn44w-EB.js";
 import { B as theme, R as colorize, z as isRich } from "./utils-CXzXXV2o.js";
-import { i as resolveAgentConfig } from "./agent-scope-Bn39ugK4.js";
+import { i as resolveAgentConfig } from "./agent-scope-RA0zXRpu.js";
 import { _ as normalizeAnyChannelId } from "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
 import { c as normalizeMainKey, l as resolveAgentIdFromSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, w as parseAgentSessionKey } from "./session-key-Cuihcz_O.js";
-import "./idlehands-root-DFL2GrNW.js";
+import "./idlehands-root-B8cUs-5M.js";
 import "./exec-CKHMT0tZ.js";
-import { It as loadConfig } from "./model-selection-CSn9tUuH.js";
+import { It as loadConfig } from "./model-selection-0dGxYGp8.js";
 import "./github-copilot-token-D7lpquOO.js";
 import { t as formatCliCommand } from "./command-format-DInZLuZ8.js";
 import "./boolean-BsqeuxE6.js";
 import "./env-Bx-F45X5.js";
 import "./host-env-security-DkAVVuaw.js";
 import "./env-vars-sTMVGyld.js";
-import "./manifest-registry-RfRn8HJx.js";
-import "./dock-CzF5XYGd.js";
+import "./manifest-registry-Bak1x76G.js";
+import "./dock-Y96MzKuM.js";
 import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-DVauVtrg.js";
-import { f as resolveSandboxConfigForAgent, i as removeSandboxContainer, m as resolveSandboxToolPolicyForAgent, n as listSandboxContainers, r as removeSandboxBrowserContainer, t as listSandboxBrowsers } from "./sandbox-CfPbhDY_.js";
+import { f as resolveSandboxConfigForAgent, i as removeSandboxContainer, m as resolveSandboxToolPolicyForAgent, n as listSandboxContainers, r as removeSandboxBrowserContainer, t as listSandboxBrowsers } from "./sandbox-DcUw5h3p.js";
 import "./tool-catalog-4_Wxc542.js";
-import "./chrome-YguTEaLx.js";
+import "./chrome-VBsQfIrt.js";
 import "./tailscale-B5Irc_Bi.js";
 import "./ip-DJ5wsTQn.js";
 import "./tailnet-C9lH_YnG.js";
 import "./ws-XBTtYpJc.js";
 import "./auth-heRVBxh2.js";
-import "./server-context-BxNSTpH6.js";
+import "./server-context-DI0W_H7R.js";
 import "./frontmatter-D-sQ_Hqk.js";
-import "./skills-TIyQDZx7.js";
-import "./path-alias-guards-BCskHdfJ.js";
-import "./paths-Bt0fZexW.js";
+import "./skills-DlvDyK8L.js";
+import "./path-alias-guards-FXBVVTLw.js";
+import "./paths-B-CLQ5RT.js";
 import "./redact-B_4KNlXs.js";
 import "./errors-DZDuPc3M.js";
-import "./fs-safe-DNFrxDS-.js";
+import "./fs-safe-_JQUGpZf.js";
 import "./ssrf-Dw9zzKSM.js";
-import "./image-ops-BkoEFRYH.js";
-import "./store-CLNuI8-G.js";
-import "./ports-DWJO5S52.js";
+import "./image-ops-BU-VdLZu.js";
+import "./store-kH9wHHbO.js";
+import "./ports-SQy1d-RL.js";
 import "./trash-CUFiyQN5.js";
 import "./server-middleware-BC21xYvr.js";
-import { Q as resolveAgentMainSessionKey, c as loadSessionStore, et as resolveMainSessionKey } from "./sessions-BqWocozB.js";
-import "./plugins-B4hASNc2.js";
-import "./accounts-D-hQsUw-.js";
-import "./accounts-DsVN0UNw.js";
-import "./accounts-D87a1Y_K.js";
-import "./bindings-DZjkLUU_.js";
+import { Q as resolveAgentMainSessionKey, c as loadSessionStore, et as resolveMainSessionKey } from "./sessions-BtPXimXQ.js";
+import "./plugins-D46VZh7u.js";
+import "./accounts-DLTODa_Z.js";
+import "./accounts-3HS_UAhJ.js";
+import "./accounts-DgbTKQoW.js";
+import "./bindings-B59Q7nsk.js";
 import "./logging-q4KyMmY-.js";
-import "./auth-store-CMyrmmSF.js";
+import "./auth-store-DDzIMy8_.js";
 import { u as resolveStorePath } from "./paths-DRz46q00.js";
 import "./chat-envelope-Bebo3vwl.js";
 import { t as formatDurationCompact } from "./format-duration-C9ZBnsdW.js";

package/dist/{secrets-cli-Bx9bIigZ.js → secrets-cli-C4UBK_LV.js}

@@ -9,15 +9,15 @@ import "./host-env-security-VbAkcANc.js";
 import "./env-vars-I4LX5XSX.js";
 import "./manifest-registry-ChP7-gzj.js";
 import "./message-channel-Qpj4ExtQ.js";
-import "./client-Brv1GCwX.js";
-import "./call-DuNslqj2.js";
+import "./client-udFMSDes.js";
+import "./call-C82rD2Wn.js";
 import "./pairing-token-CnnKAS6M.js";
 import "./net-CE_62H5R.js";
 import "./ip-Y1214nEL.js";
 import "./tailnet-DQgxklZD.js";
 import { t as formatDocsLink } from "./links-fKzK3pnZ.js";
 import "./progress-B76RkFx7.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-CdfF0Zt5.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-5PTvwEfj.js";
 import { i as prepareSecretsRuntimeSnapshot } from "./runtime-BsH_IMcC.js";
 import { n as listKnownSecretEnvVarNames } from "./provider-env-vars-HjjRVgdE.js";
 import os from "node:os";

package/dist/{secrets-cli-CidAOBfl.js → secrets-cli-CR3h2TBy.js}

@@ -1,28 +1,28 @@
 import { g as resolveStateDir } from "./paths-Cn44w-EB.js";
 import { B as theme, O as danger, g as resolveConfigDir, y as resolveUserPath } from "./utils-CXzXXV2o.js";
-import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-Bn39ugK4.js";
+import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-RA0zXRpu.js";
 import "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
-import "./idlehands-root-DFL2GrNW.js";
+import "./idlehands-root-B8cUs-5M.js";
 import "./exec-CKHMT0tZ.js";
-import { Ct as isRecord, Ft as createConfigIO, Jr as coerceSecretRef, Pr as resolveAuthStorePath, St as isNonEmptyString, bt as resolveSecretRefValue, en as SecretProviderSchema, in as secretRefKey, jr as loadAuthProfileStoreForSecretsRuntime, rn as resolveDefaultSecretProviderAlias, rr as isSafeExecutableValue, u as normalizeProviderId, wt as writeTextFileAtomic, xt as resolveSecretRefValues } from "./model-selection-CSn9tUuH.js";
+import { Ct as isRecord, Ft as createConfigIO, Jr as coerceSecretRef, Pr as resolveAuthStorePath, St as isNonEmptyString, bt as resolveSecretRefValue, en as SecretProviderSchema, in as secretRefKey, jr as loadAuthProfileStoreForSecretsRuntime, rn as resolveDefaultSecretProviderAlias, rr as isSafeExecutableValue, u as normalizeProviderId, wt as writeTextFileAtomic, xt as resolveSecretRefValues } from "./model-selection-0dGxYGp8.js";
 import "./github-copilot-token-D7lpquOO.js";
 import "./boolean-BsqeuxE6.js";
 import "./env-Bx-F45X5.js";
 import "./host-env-security-DkAVVuaw.js";
 import "./env-vars-sTMVGyld.js";
-import "./manifest-registry-RfRn8HJx.js";
+import "./manifest-registry-Bak1x76G.js";
 import "./message-channel-DVauVtrg.js";
 import "./ip-DJ5wsTQn.js";
 import "./tailnet-C9lH_YnG.js";
 import "./ws-XBTtYpJc.js";
-import "./client-DIckPnsi.js";
-import "./call-DnTBT02D.js";
-import "./pairing-token-3hoCgQqp.js";
+import "./client-DtnD-ee9.js";
+import "./call-BpWhjuOg.js";
+import "./pairing-token-lKXTMQ_M.js";
 import { t as formatDocsLink } from "./links-15764jZB.js";
 import "./progress-BQLz1r3L.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-6vnhO4v8.js";
-import { i as prepareSecretsRuntimeSnapshot } from "./runtime-DEmy759r.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-BBFG1T-M.js";
+import { i as prepareSecretsRuntimeSnapshot } from "./runtime-XmXLaHNk.js";
 import { n as listKnownSecretEnvVarNames } from "./provider-env-vars-lF9nr_3F.js";
 import fs from "node:fs";
 import os from "node:os";