@visorcraft/idlehands 4.0.17 → 4.0.19

package/dist/{fs-safe-DNFrxDS-.js → fs-safe-_JQUGpZf.js}

@@ -1,8 +1,8 @@
-import { d as isNotFoundPathError, f as isPathInside, p as isSymlinkOpenError, s as sameFileIdentity } from "./idlehands-root-DFL2GrNW.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-BCskHdfJ.js";
+import { d as isNotFoundPathError, f as isPathInside, p as isSymlinkOpenError, s as sameFileIdentity } from "./idlehands-root-B8cUs-5M.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-FXBVVTLw.js";
 import { constants } from "node:fs";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/fs-safe.ts
 var SafeOpenError = class extends Error {
@@ -19,20 +19,20 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function openVerifiedLocalFile(filePath, options) {
 	let handle;
 	try {
-		handle = await fsPromises.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fsPromises.realpath(filePath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -50,7 +50,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function openFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -94,7 +94,7 @@ async function readLocalFileSafely(params) {
 async function writeFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -111,10 +111,10 @@ async function writeFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fsPromises.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fsPromises.realpath(resolved);
+		const resolvedRealPath = await fs$1.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("invalid-path", "path escapes root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -123,19 +123,19 @@ async function writeFileWithinRoot(params) {
 	}
 	let handle;
 	try {
-		handle = await fsPromises.open(ioPath, OPEN_WRITE_FLAGS, 384);
+		handle = await fs$1.open(ioPath, OPEN_WRITE_FLAGS, 384);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("invalid-path", "symlink open blocked", { cause: err });
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(ioPath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(ioPath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
-		const realPath = await fsPromises.realpath(ioPath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(ioPath);
+		const realStat = await fs$1.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("invalid-path", "path escapes root");

package/dist/{gateway-cli-DSJcNJYR.js → gateway-cli-Ccd1ukWq.js}

@@ -28,12 +28,12 @@ import "./logging-Bgrm4o7g.js";
 import "./auth-store-D9BmR4S6.js";
 import "./send-m4lQkQcY.js";
 import "./send-CCiDIuX4.js";
-import { $n as stopSubagentsForRequester, A as createOutboundSendDeps, An as requestHeartbeatNow, Ar as clearAgentRunContext, At as normalizeHttpWebhookUrl, Bn as DEFAULT_INPUT_MAX_REDIRECTS, Bt as buildDeliveryFromLegacyPayload, C as computeBackoff, Cr as waitForActiveTasks, Ct as consumeRestartSentinel, Dn as isSystemEventContextChanged, Dt as summarizeRestartSentinel, E as agentCommand, En as enqueueSystemEvent, Fn as ACP_SESSION_IDENTITY_RENDERER_VERSION, Ft as normalizeOptionalSessionKey, Gn as resolveInputFileLimits, Gt as buildSafeExternalPrompt, Hn as extractFileContentFromSource, Ht as stripLegacyDeliveryFields, In as getAcpSessionManager, It as normalizeOptionalText, Jn as resolveSendPolicy, Jt as isExternalHookSession, Kn as resolveAgentTimeoutMs, Kt as detectSuspiciousPatterns, Ln as resolveAgentSessionDirs, Lt as normalizePayloadToSystemText, Mr as getAgentRunContext, Mt as normalizeCronJobPatch, Nr as onAgentEvent, Nt as inferLegacyName, O as resolveAgentDeliveryPlan, Pr as registerAgentRunContext, Pt as normalizeOptionalAgentId, Q as getTotalPendingReplies, Qn as isAbortRequestText, R as buildHistoryContextFromEntries, Rn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Rt as normalizeRequiredName, S as requestBodyErrorToText, Sr as setCommandLaneConcurrency, Tr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Tt as formatRestartSentinelMessage, Un as extractImageContentFromSource, Vn as DEFAULT_INPUT_TIMEOUT_MS, Vt as hasLegacyDeliveryHints, Wn as normalizeMimeList, X as dispatchInboundMessage, Xt as persistBrowserProxyFiles, Yt as applyBrowserProxyPaths, Z as createReplyDispatcher, Zt as resolveSessionAuthProfileOverride, _ as loadIdleHandsPlugins, _r as getActiveTaskCount, _t as resolveOutboundChannelPlugin, a as runSubagentAnnounceFlow, an as deferGatewayRestartUntilIdle, ar as isTtsEnabled, at as setCliSessionId, b as handleSlackHttpRequest, bn as buildOutboundSessionContext, br as markGatewayDraining, c as abortEmbeddedPiRun, cn as markGatewaySigusr1RestartHandled, cr as resolveTtsAutoMode, ct as readLatestAssistantReply, d as applyToolPolicyPipeline, dn as setPreRestartDeferralCheck, dr as resolveTtsProviderOrder, dt as ensureOutboundSessionEntry, f as buildDefaultToolPolicyPipelineSteps, fn as unbindThreadBindingsBySessionKey, fr as setTtsEnabled, ft as resolveOutboundSessionRoute, gr as OPENAI_TTS_VOICES, gt as resolveSessionDeliveryTarget, h as resolvePluginTools, hn as loadProviderUsageSummary, hr as OPENAI_TTS_MODELS, ht as resolveOutboundTarget, in as consumeGatewaySigusr1RestartAuthorization, ir as getTtsProvider, it as getCliSessionId, j as resolveAgentAvatar, jr as emitAgentEvent, jt as normalizeCronJobCreate, k as resolveAgentOutboundTarget, kr as stripHeartbeatToken, kt as writeRestartSentinel, l as getActiveEmbeddedRunCount, ln as scheduleGatewaySigusr1Restart, lr as resolveTtsConfig, lt as resolveAnnounceTargetFromKey, m as getPluginToolMeta, mr as textToSpeech, n as initSubagentRegistry, nn as applyVerboseOverride, nr as resolveUserTimezone, o as clearSessionQueues, on as emitGatewayRestart, or as isTtsProviderConfigured, ot as runCliAgent, pn as normalizeGroupActivation, pr as setTtsProvider, qn as normalizeSendPolicy, qt as getHookType, r as listDescendantRunsForRequester, rn as parseVerboseOverride, rr as clearBootstrapSnapshot, rt as resolveCronStyleNow, s as runEmbeddedPiAgent, sn as isGatewaySigusr1RestartExternallyAllowed, sr as resolveTtsApiKey, st as createIdleHandsTools, t as countActiveDescendantRuns, tn as applyModelOverrideToSessionEntry, tt as BARE_SESSION_RESET_PROMPT, u as waitForEmbeddedPiRunEnd, un as setGatewaySigusr1RestartPolicy, ur as resolveTtsPrefsPath, w as sleepWithAbort, wr as CommandLane, wt as formatDoctorNonInteractiveHint, x as readJsonBodyWithLimit, xn as formatZonedTimestamp, xr as resetAllLanes, xt as runWithModelFallback, yr as getTotalQueueSize, yt as resetDirectoryCache, zn as DEFAULT_INPUT_IMAGE_MIMES, zt as migrateLegacyCronPayload } from "./subagent-registry-CTZmDdGV.js";
+import { $n as stopSubagentsForRequester, A as createOutboundSendDeps, An as requestHeartbeatNow, Ar as clearAgentRunContext, At as normalizeHttpWebhookUrl, Bn as DEFAULT_INPUT_MAX_REDIRECTS, Bt as buildDeliveryFromLegacyPayload, C as computeBackoff, Cr as waitForActiveTasks, Ct as consumeRestartSentinel, Dn as isSystemEventContextChanged, Dt as summarizeRestartSentinel, E as agentCommand, En as enqueueSystemEvent, Fn as ACP_SESSION_IDENTITY_RENDERER_VERSION, Ft as normalizeOptionalSessionKey, Gn as resolveInputFileLimits, Gt as buildSafeExternalPrompt, Hn as extractFileContentFromSource, Ht as stripLegacyDeliveryFields, In as getAcpSessionManager, It as normalizeOptionalText, Jn as resolveSendPolicy, Jt as isExternalHookSession, Kn as resolveAgentTimeoutMs, Kt as detectSuspiciousPatterns, Ln as resolveAgentSessionDirs, Lt as normalizePayloadToSystemText, Mr as getAgentRunContext, Mt as normalizeCronJobPatch, Nr as onAgentEvent, Nt as inferLegacyName, O as resolveAgentDeliveryPlan, Pr as registerAgentRunContext, Pt as normalizeOptionalAgentId, Q as getTotalPendingReplies, Qn as isAbortRequestText, R as buildHistoryContextFromEntries, Rn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Rt as normalizeRequiredName, S as requestBodyErrorToText, Sr as setCommandLaneConcurrency, Tr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Tt as formatRestartSentinelMessage, Un as extractImageContentFromSource, Vn as DEFAULT_INPUT_TIMEOUT_MS, Vt as hasLegacyDeliveryHints, Wn as normalizeMimeList, X as dispatchInboundMessage, Xt as persistBrowserProxyFiles, Yt as applyBrowserProxyPaths, Z as createReplyDispatcher, Zt as resolveSessionAuthProfileOverride, _ as loadIdleHandsPlugins, _r as getActiveTaskCount, _t as resolveOutboundChannelPlugin, a as runSubagentAnnounceFlow, an as deferGatewayRestartUntilIdle, ar as isTtsEnabled, at as setCliSessionId, b as handleSlackHttpRequest, bn as buildOutboundSessionContext, br as markGatewayDraining, c as abortEmbeddedPiRun, cn as markGatewaySigusr1RestartHandled, cr as resolveTtsAutoMode, ct as readLatestAssistantReply, d as applyToolPolicyPipeline, dn as setPreRestartDeferralCheck, dr as resolveTtsProviderOrder, dt as ensureOutboundSessionEntry, f as buildDefaultToolPolicyPipelineSteps, fn as unbindThreadBindingsBySessionKey, fr as setTtsEnabled, ft as resolveOutboundSessionRoute, gr as OPENAI_TTS_VOICES, gt as resolveSessionDeliveryTarget, h as resolvePluginTools, hn as loadProviderUsageSummary, hr as OPENAI_TTS_MODELS, ht as resolveOutboundTarget, in as consumeGatewaySigusr1RestartAuthorization, ir as getTtsProvider, it as getCliSessionId, j as resolveAgentAvatar, jr as emitAgentEvent, jt as normalizeCronJobCreate, k as resolveAgentOutboundTarget, kr as stripHeartbeatToken, kt as writeRestartSentinel, l as getActiveEmbeddedRunCount, ln as scheduleGatewaySigusr1Restart, lr as resolveTtsConfig, lt as resolveAnnounceTargetFromKey, m as getPluginToolMeta, mr as textToSpeech, n as initSubagentRegistry, nn as applyVerboseOverride, nr as resolveUserTimezone, o as clearSessionQueues, on as emitGatewayRestart, or as isTtsProviderConfigured, ot as runCliAgent, pn as normalizeGroupActivation, pr as setTtsProvider, qn as normalizeSendPolicy, qt as getHookType, r as listDescendantRunsForRequester, rn as parseVerboseOverride, rr as clearBootstrapSnapshot, rt as resolveCronStyleNow, s as runEmbeddedPiAgent, sn as isGatewaySigusr1RestartExternallyAllowed, sr as resolveTtsApiKey, st as createIdleHandsTools, t as countActiveDescendantRuns, tn as applyModelOverrideToSessionEntry, tt as BARE_SESSION_RESET_PROMPT, u as waitForEmbeddedPiRunEnd, un as setGatewaySigusr1RestartPolicy, ur as resolveTtsPrefsPath, w as sleepWithAbort, wr as CommandLane, wt as formatDoctorNonInteractiveHint, x as readJsonBodyWithLimit, xn as formatZonedTimestamp, xr as resetAllLanes, xt as runWithModelFallback, yr as getTotalQueueSize, yt as resetDirectoryCache, zn as DEFAULT_INPUT_IMAGE_MIMES, zt as migrateLegacyCronPayload } from "./subagent-registry-BH5O1rxK.js";
 import { a as resolveSessionFilePathOptions, i as resolveSessionFilePath, l as resolveSessionTranscriptsDirForAgent, o as resolveSessionTranscriptPath, u as resolveStorePath } from "./paths-CC17i2eK.js";
 import { i as normalizeInputProvenance } from "./input-provenance-iBlnbS1d.js";
 import "./chat-envelope-Dedaetiq.js";
-import { $ as validateNodePairRejectParams, A as validateCronStatusParams, At as PROTOCOL_VERSION, B as validateExecApprovalsGetParams, Bt as getPairedDevice, C as validateConfigSetParams, Ct as validateWakeParams, D as validateCronRemoveParams, Dt as validateWizardNextParams, E as validateCronListParams, Et as validateWizardCancelParams, F as validateDevicePairRemoveParams, Ft as buildDeviceAuthPayload, G as validateModelsListParams, Gt as revokeDeviceToken, H as validateExecApprovalsNodeSetParams, Ht as rejectDevicePairing, I as validateDeviceTokenRevokeParams, It as buildDeviceAuthPayloadV3, J as validateNodeInvokeParams, Jt as updatePairedDeviceMetadata, K as validateNodeDescribeParams, Kt as rotateDeviceToken, L as validateDeviceTokenRotateParams, Lt as normalizeDeviceMetadataForAuth, M as validateDevicePairApproveParams, Mt as errorShape, N as validateDevicePairListParams, O as validateCronRunParams, Ot as validateWizardStartParams, P as validateDevicePairRejectParams, Pt as parseSessionLabel, Q as validateNodePairListParams, Qt as deriveDeviceIdFromPublicKey, R as validateExecApprovalRequestParams, Rt as approveDevicePairing, S as validateConfigSchemaParams, St as validateUpdateRunParams, T as validateCronAddParams, Tt as validateWebLoginWaitParams, U as validateExecApprovalsSetParams, Ut as removePairedDevice, V as validateExecApprovalsNodeGetParams, Vt as listDevicePairing, W as validateLogsTailParams, Wt as requestDevicePairing, X as validateNodeListParams, Xt as roleScopesAllow, Y as validateNodeInvokeResultParams, Yt as verifyDeviceToken, Z as validateNodePairApproveParams, _ as validateChatInjectParams, _t as validateSkillsStatusParams, a as validateAgentWaitParams, at as validateRequestFrame, b as validateConfigGetParams, bt as validateTalkModeParams, c as validateAgentsFilesGetParams, ct as validateSessionsDeleteParams, d as validateAgentsListParams, dt as validateSessionsPreviewParams, en as normalizeDevicePublicKeyBase64Url, et as validateNodePairRequestParams, f as validateAgentsUpdateParams, ft as validateSessionsResetParams, g as validateChatHistoryParams, gt as validateSkillsInstallParams, h as validateChatAbortParams, ht as validateSkillsBinsParams, i as validateAgentParams, it as validatePushTestParams, j as validateCronUpdateParams, jt as ErrorCodes, k as validateCronRunsParams, kt as validateWizardStatusParams, l as validateAgentsFilesListParams, lt as validateSessionsListParams, m as validateChannelsStatusParams, mt as validateSessionsUsageParams, n as formatValidationErrors, nt as validateNodeRenameParams, o as validateAgentsCreateParams, ot as validateSendParams, p as validateChannelsLogoutParams, pt as validateSessionsResolveParams, q as validateNodeEventParams, qt as summarizeDeviceTokens, r as validateAgentIdentityParams, rt as validatePollParams, s as validateAgentsDeleteParams, st as validateSessionsCompactParams, tn as verifyDeviceSignature, tt as validateNodePairVerifyParams, u as validateAgentsFilesSetParams, ut as validateSessionsPatchParams, v as validateChatSendParams, vt as validateSkillsUpdateParams, w as validateConnectParams, wt as validateWebLoginStartParams, x as validateConfigPatchParams, xt as validateToolsCatalogParams, y as validateConfigApplyParams, yt as validateTalkConfigParams, z as validateExecApprovalResolveParams, zt as ensureDeviceToken } from "./client-Brv1GCwX.js";
-import { f as loadGatewayTlsRuntime$1, l as authorizeOperatorScopesForMethod, n as callGateway, s as ADMIN_SCOPE$3, u as isNodeRoleMethod } from "./call-DuNslqj2.js";
+import { $ as validateNodePairRejectParams, A as validateCronStatusParams, At as PROTOCOL_VERSION, B as validateExecApprovalsGetParams, Bt as getPairedDevice, C as validateConfigSetParams, Ct as validateWakeParams, D as validateCronRemoveParams, Dt as validateWizardNextParams, E as validateCronListParams, Et as validateWizardCancelParams, F as validateDevicePairRemoveParams, Ft as buildDeviceAuthPayload, G as validateModelsListParams, Gt as revokeDeviceToken, H as validateExecApprovalsNodeSetParams, Ht as rejectDevicePairing, I as validateDeviceTokenRevokeParams, It as buildDeviceAuthPayloadV3, J as validateNodeInvokeParams, Jt as updatePairedDeviceMetadata, K as validateNodeDescribeParams, Kt as rotateDeviceToken, L as validateDeviceTokenRotateParams, Lt as normalizeDeviceMetadataForAuth, M as validateDevicePairApproveParams, Mt as errorShape, N as validateDevicePairListParams, O as validateCronRunParams, Ot as validateWizardStartParams, P as validateDevicePairRejectParams, Pt as parseSessionLabel, Q as validateNodePairListParams, Qt as deriveDeviceIdFromPublicKey, R as validateExecApprovalRequestParams, Rt as approveDevicePairing, S as validateConfigSchemaParams, St as validateUpdateRunParams, T as validateCronAddParams, Tt as validateWebLoginWaitParams, U as validateExecApprovalsSetParams, Ut as removePairedDevice, V as validateExecApprovalsNodeGetParams, Vt as listDevicePairing, W as validateLogsTailParams, Wt as requestDevicePairing, X as validateNodeListParams, Xt as roleScopesAllow, Y as validateNodeInvokeResultParams, Yt as verifyDeviceToken, Z as validateNodePairApproveParams, _ as validateChatInjectParams, _t as validateSkillsStatusParams, a as validateAgentWaitParams, at as validateRequestFrame, b as validateConfigGetParams, bt as validateTalkModeParams, c as validateAgentsFilesGetParams, ct as validateSessionsDeleteParams, d as validateAgentsListParams, dt as validateSessionsPreviewParams, en as normalizeDevicePublicKeyBase64Url, et as validateNodePairRequestParams, f as validateAgentsUpdateParams, ft as validateSessionsResetParams, g as validateChatHistoryParams, gt as validateSkillsInstallParams, h as validateChatAbortParams, ht as validateSkillsBinsParams, i as validateAgentParams, it as validatePushTestParams, j as validateCronUpdateParams, jt as ErrorCodes, k as validateCronRunsParams, kt as validateWizardStatusParams, l as validateAgentsFilesListParams, lt as validateSessionsListParams, m as validateChannelsStatusParams, mt as validateSessionsUsageParams, n as formatValidationErrors, nt as validateNodeRenameParams, o as validateAgentsCreateParams, ot as validateSendParams, p as validateChannelsLogoutParams, pt as validateSessionsResolveParams, q as validateNodeEventParams, qt as summarizeDeviceTokens, r as validateAgentIdentityParams, rt as validatePollParams, s as validateAgentsDeleteParams, st as validateSessionsCompactParams, tn as verifyDeviceSignature, tt as validateNodePairVerifyParams, u as validateAgentsFilesSetParams, ut as validateSessionsPatchParams, v as validateChatSendParams, vt as validateSkillsUpdateParams, w as validateConnectParams, wt as validateWebLoginStartParams, x as validateConfigPatchParams, xt as validateToolsCatalogParams, y as validateConfigApplyParams, yt as validateTalkConfigParams, z as validateExecApprovalResolveParams, zt as ensureDeviceToken } from "./client-udFMSDes.js";
+import { f as loadGatewayTlsRuntime$1, l as authorizeOperatorScopesForMethod, n as callGateway, s as ADMIN_SCOPE$3, u as isNodeRoleMethod } from "./call-C82rD2Wn.js";
 import { c as readJsonFile, l as writeJsonAtomic, s as createAsyncLock } from "./pairing-token-CnnKAS6M.js";
 import { t as safeEqualSecret } from "./secret-equal-D-d0uTPY.js";
 import { a as isTrustedProxyAddress, c as pickPrimaryLanIPv4, d as resolveGatewayListenHosts, f as resolveHostName, l as resolveClientIp, n as isLoopbackAddress, o as isValidIPv4, p as rawDataToString, r as isLoopbackHost, s as normalizeHostHeader, t as isLocalishHost, u as resolveGatewayBindHost } from "./net-CE_62H5R.js";
@@ -115,8 +115,8 @@ import { n as runCommandWithRuntime } from "./cli-utils-BfsDuRZS.js";
 import { t as formatHelpExamples } from "./help-format-CldHB7lS.js";
 import { n as withProgress } from "./progress-B76RkFx7.js";
 import "./replies-DSfpze17.js";
-import { n as createOutboundSendDeps$1, t as createDefaultDeps } from "./deps-BUUwigzc.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-Dp6wXNs7.js";
+import { n as createOutboundSendDeps$1, t as createDefaultDeps } from "./deps-CjWcQwlX.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-DWivfzcc.js";
 import "./prompt-style-XmK49QYK.js";
 import "./pairing-labels-D7xcHkxi.js";
 import { i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-BucMb4Fx.js";
@@ -125,7 +125,7 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-B1XEiDxB.
 import { n as inheritOptionFromParent } from "./command-options-CK65DMbR.js";
 import { t as WizardCancelledError } from "./prompts-D3HHe1ZZ.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CIyuenBU.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-ADCeu0yD.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-D2EbQiOx.js";
 import { t as isWithinDir } from "./path-safety-O-JjyFjj.js";
 import "./install-safe-path-C7y57-yb.js";
 import "./skill-scanner-CdLElD51.js";
@@ -139,26 +139,26 @@ import "./service-BzgRt9im.js";
 import "./lifecycle-core-DxExA9d3.js";
 import "./systemd-hints-D7r4FWhK.js";
 import { t as parsePort$1 } from "./parse-port-a8kZfEbi.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-yC6gq-yv.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-DOG5Mivy.js";
 import "./diagnostics-BzCL1AMI.js";
 import "./table-aJzHv5Oe.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CDpGHfpS.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-KdaUmZfd.js";
-import { a as isNodeCommandAllowed, n as collectEnabledInsecureOrDangerousFlags, o as resolveNodeCommandAllowlist, s as probeGateway } from "./audit-Bkd4fvVb.js";
+import { a as isNodeCommandAllowed, n as collectEnabledInsecureOrDangerousFlags, o as resolveNodeCommandAllowlist, s as probeGateway } from "./audit-C9PrbHng.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-xjvAm8hU.js";
-import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-BE1Y0CKS.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-BN8WNyon.js";
+import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-ClMOrHdT.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-HEN6Wk9G.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B5haX6bT.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-ofowt_yq.js";
 import { i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-BsH_IMcC.js";
-import { t as runOnboardingWizard } from "./onboarding-BgHfZNln.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-BNxgGXQy.js";
+import { t as runOnboardingWizard } from "./onboarding-DikyMlYG.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-CHmvuoMu.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-U10Ul2gc.js";
 import "./node-service-v7Nz7h4D.js";
 import "./status.update-BzUu2M5c.js";
 import { a as matchSystemRunApprovalBindingV1, i as buildSystemRunApprovalBindingV1, n as resolveSystemRunApprovalRequestContext, o as missingSystemRunApprovalBindingV1, r as resolveSystemRunApprovalRuntimeContext, s as toSystemRunApprovalMismatchError } from "./system-run-approval-context-DkX3cprL.js";
 import { t as installSkill } from "./skills-install-DkQ2ndc6.js";
-import { t as runGatewayUpdate } from "./update-runner-BvaywdEe.js";
+import { t as runGatewayUpdate } from "./update-runner-tu2Aiphu.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-Dj1dL0rI.js";
 import { n as forceFreePortAndWait } from "./ports-CIJavqzS.js";
 import { spawn, spawnSync } from "node:child_process";
@@ -8601,6 +8601,7 @@ const agentHandlers = {
 		let resolvedGroupSpace = groupSpaceRaw || void 0;
 		let spawnedByValue = typeof request.spawnedBy === "string" ? request.spawnedBy.trim() : void 0;
 		const inputProvenance = normalizeInputProvenance(request.inputProvenance);
+		const requestedWorkspaceDir = typeof request.workspaceDir === "string" && request.workspaceDir.trim() ? request.workspaceDir.trim() : void 0;
 		const cached = context.dedupe.get(`agent:${idem}`);
 		if (cached) {
 			respond(cached.ok, cached.payload, cached.error, { cached: true });
@@ -8725,6 +8726,7 @@ const agentHandlers = {
 				label: labelValue,
 				spawnedBy: spawnedByValue,
 				spawnDepth: entry?.spawnDepth,
+				workspaceDir: requestedWorkspaceDir ?? entry?.workspaceDir,
 				channel: entry?.channel ?? request.channel?.trim(),
 				groupId: resolvedGroupId ?? entry?.groupId,
 				groupChannel: resolvedGroupChannel ?? entry?.groupChannel,
@@ -8878,6 +8880,7 @@ const agentHandlers = {
 			runId,
 			lane: request.lane,
 			extraSystemPrompt: request.extraSystemPrompt,
+			workspaceDir: requestedWorkspaceDir,
 			inputProvenance
 		}, defaultRuntime, context.deps).then((result) => {
 			const payload = {
@@ -12688,7 +12691,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-lbb8M18B.js");
+			const { handleNodeEvent } = await import("./server-node-events-CbVkqOtV.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,