@visorcraft/idlehands 4.0.21 → 4.1.0

package/dist/{reply-prefix-C3y4zpTl.js → reply-prefix-BMEdvSpA.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { i as resolveAgentConfig } from "./agent-scope-RA0zXRpu.js";
+import { i as resolveAgentConfig } from "./agent-scope-Bn39ugK4.js";
 
 //#region src/agents/identity.ts
 const DEFAULT_ACK_REACTION = "👀";

package/dist/{resolve-route-D_AbcmD6.js → resolve-route-Ef_Yt2Dw.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { F as shouldLogVerbose } from "./utils-CXzXXV2o.js";
-import { d as resolveDefaultAgentId } from "./agent-scope-RA0zXRpu.js";
+import { d as resolveDefaultAgentId } from "./agent-scope-Bn39ugK4.js";
 import { d as sanitizeAgentId, h as normalizeAccountId, i as buildAgentPeerSessionKey, m as DEFAULT_ACCOUNT_ID, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID } from "./session-key-Cuihcz_O.js";
 import { i as logDebug } from "./exec-CKHMT0tZ.js";
 import { t as normalizeChatType } from "./chat-type-3FRbbjbq.js";
-import { n as listBindings } from "./bindings-B59Q7nsk.js";
+import { n as listBindings } from "./bindings-DZjkLUU_.js";
 
 //#region src/routing/resolve-route.ts
 var resolve_route_exports = /* @__PURE__ */ __exportAll({

package/dist/{rpc-Cf9OK5Yk.js → rpc-CNqnw2FL.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-DVauVtrg.js";
-import { a as randomIdempotencyKey, n as callGateway } from "./call-BpWhjuOg.js";
+import { a as randomIdempotencyKey, n as callGateway } from "./call-Du-oBD99.js";
 import { n as parseNodeList, r as parsePairingList, t as resolveNodeIdFromCandidates } from "./node-match-CZ8lT9jK.js";
 import { n as withProgress } from "./progress-BQLz1r3L.js";
 

package/dist/{run-main-BCX3UZMR.js → run-main-9A7FdIR1.js}

@@ -261,7 +261,7 @@ const routes = [
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
 			const json = hasFlag(argv, "--json");
-			const { runConfigGet } = await import("./config-cli-Bt7n6ZJS.js");
+			const { runConfigGet } = await import("./config-cli-98ASrAou.js");
 			await runConfigGet({
 				path: pathArg,
 				json
@@ -274,7 +274,7 @@ const routes = [
 		run: async (argv) => {
 			const pathArg = getCommandPositionals(argv)[2];
 			if (!pathArg) return false;
-			const { runConfigUnset } = await import("./config-cli-Bt7n6ZJS.js");
+			const { runConfigUnset } = await import("./config-cli-98ASrAou.js");
 			await runConfigUnset({ path: pathArg });
 			return true;
 		}
@@ -397,7 +397,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-vH6RTUOw.js");
+	const { buildProgram } = await import("./program-Do2-I4y3.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -410,10 +410,10 @@ async function runCli(argv = process$1.argv) {
 		const { getProgramContext } = await import("./program-context-BrqeiWcA.js").then((n) => n.n);
 		const ctx = getProgramContext(program);
 		if (ctx) {
-			const { registerCoreCliByName } = await import("./command-registry-CWDCVzZv.js").then((n) => n.t);
+			const { registerCoreCliByName } = await import("./command-registry-esizscE2.js").then((n) => n.t);
 			await registerCoreCliByName(program, ctx, primary, parseArgv);
 		}
-		const { registerSubCliByName } = await import("./register.subclis-CrcOefJY.js").then((n) => n.a);
+		const { registerSubCliByName } = await import("./register.subclis-CuNL7Zgu.js").then((n) => n.a);
 		await registerSubCliByName(program, primary);
 	}
 	if (!shouldSkipPluginCommandRegistration({

package/dist/{runner-DzszLzI4.js → runner-BFG54hnb.js}

@@ -1,22 +1,22 @@
 import { F as shouldLogVerbose, M as logVerbose, et as resolvePreferredIdleHandsTmpDir } from "./utils-CXzXXV2o.js";
-import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-RA0zXRpu.js";
+import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-Bn39ugK4.js";
 import { n as runExec } from "./exec-CKHMT0tZ.js";
-import { J as requireApiKey, Jt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, Xt as mergeInboundPathRoots, Y as resolveApiKeyForProvider, Yt as isInboundPathAllowed, Zt as resolveIMessageAttachmentRoots, k as normalizeGoogleModelId, u as normalizeProviderId } from "./model-selection-0dGxYGp8.js";
+import { J as requireApiKey, Jt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, Xt as mergeInboundPathRoots, Y as resolveApiKeyForProvider, Yt as isInboundPathAllowed, Zt as resolveIMessageAttachmentRoots, k as normalizeGoogleModelId, u as normalizeProviderId } from "./model-selection-CSn9tUuH.js";
 import { t as normalizeChatType } from "./chat-type-3FRbbjbq.js";
-import { t as describeImageWithModel } from "./image-DSDEbSiO.js";
+import { t as describeImageWithModel } from "./image-C2JZiK-6.js";
 import { r as formatUncaughtError, t as extractErrorCode } from "./errors-DZDuPc3M.js";
-import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-BU-VdLZu.js";
+import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-BkoEFRYH.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-Tud5uP5n.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-yUZu1Vzc.js";
-import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-B-FTJm5p.js";
-import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, r as MediaFetchError } from "./local-roots-q0xbefkf.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-D9no0CH2.js";
+import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-nXQVJErE.js";
+import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, r as MediaFetchError } from "./local-roots-Cco87A2_.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-BCsDrrvq.js";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import crypto from "node:crypto";
 
 //#region src/auto-reply/templating.ts
@@ -954,7 +954,7 @@ var MediaAttachmentCache = class {
 			const size = await this.ensureLocalStat(entry);
 			if (entry.resolvedPath) {
 				if (size !== void 0 && size > params.maxBytes) throw new MediaUnderstandingSkipError("maxBytes", `Attachment ${params.attachmentIndex + 1} exceeds maxBytes ${params.maxBytes}`);
-				const buffer = await fs$1.readFile(entry.resolvedPath);
+				const buffer = await fsPromises.readFile(entry.resolvedPath);
 				entry.buffer = buffer;
 				entry.bufferMime = entry.bufferMime ?? entry.attachment.mime ?? await detectMime({
 					buffer,
@@ -1024,10 +1024,10 @@ var MediaAttachmentCache = class {
 			prefix: "idlehands-media",
 			extension: path.extname(bufferResult.fileName || "") || ""
 		});
-		await fs$1.writeFile(tmpPath, bufferResult.buffer);
+		await fsPromises.writeFile(tmpPath, bufferResult.buffer);
 		entry.tempPath = tmpPath;
 		entry.tempCleanup = async () => {
-			await fs$1.unlink(tmpPath).catch(() => {});
+			await fsPromises.unlink(tmpPath).catch(() => {});
 		};
 		return {
 			path: tmpPath,
@@ -1074,12 +1074,12 @@ var MediaAttachmentCache = class {
 		if (entry.statSize !== void 0) return entry.statSize;
 		try {
 			const currentPath = entry.resolvedPath;
-			const stat = await fs$1.stat(currentPath);
+			const stat = await fsPromises.stat(currentPath);
 			if (!stat.isFile()) {
 				entry.resolvedPath = void 0;
 				return;
 			}
-			const canonicalPath = await fs$1.realpath(currentPath).catch(() => currentPath);
+			const canonicalPath = await fsPromises.realpath(currentPath).catch(() => currentPath);
 			if (!isInboundPathAllowed({
 				filePath: canonicalPath,
 				roots: await this.getCanonicalLocalPathRoots()
@@ -1101,7 +1101,7 @@ var MediaAttachmentCache = class {
 		if (this.canonicalLocalPathRoots) return await this.canonicalLocalPathRoots;
 		this.canonicalLocalPathRoots = (async () => mergeInboundPathRoots(this.localPathRoots, await Promise.all(this.localPathRoots.map(async (root) => {
 			if (root.includes("*")) return root;
-			return await fs$1.realpath(root).catch(() => root);
+			return await fsPromises.realpath(root).catch(() => root);
 		}))))();
 		return await this.canonicalLocalPathRoots;
 	}
@@ -1112,7 +1112,7 @@ var MediaAttachmentCache = class {
 async function fileExists(filePath) {
 	if (!filePath) return false;
 	try {
-		await fs$1.stat(filePath);
+		await fsPromises.stat(filePath);
 		return true;
 	} catch {
 		return false;
@@ -1212,7 +1212,7 @@ async function resolveCliOutput(params) {
 	const commandId = commandBase(params.command);
 	const fileOutput = commandId === "whisper-cli" ? resolveWhisperCppOutputPath(params.args) : commandId === "whisper" ? resolveWhisperOutputPath(params.args, params.mediaPath) : null;
 	if (fileOutput && await fileExists(fileOutput)) try {
-		const content = await fs$1.readFile(fileOutput, "utf8");
+		const content = await fsPromises.readFile(fileOutput, "utf8");
 		if (content.trim()) return content.trim();
 	} catch {}
 	if (commandId === "gemini") {
@@ -1517,7 +1517,7 @@ async function runCliEntry(params) {
 		maxBytes,
 		timeoutMs
 	});
-	const outputDir = await fs$1.mkdtemp(path.join(resolvePreferredIdleHandsTmpDir(), "idlehands-media-cli-"));
+	const outputDir = await fsPromises.mkdtemp(path.join(resolvePreferredIdleHandsTmpDir(), "idlehands-media-cli-"));
 	const mediaPath = pathResult.path;
 	const outputBase = path.join(outputDir, path.parse(mediaPath).name);
 	const templCtx = {
@@ -1551,7 +1551,7 @@ async function runCliEntry(params) {
 			model: command
 		};
 	} finally {
-		await fs$1.rm(outputDir, {
+		await fsPromises.rm(outputDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -1595,9 +1595,9 @@ function candidateBinaryNames(name) {
 }
 async function isExecutable(filePath) {
 	try {
-		if (!(await fs$1.stat(filePath)).isFile()) return false;
+		if (!(await fsPromises.stat(filePath)).isFile()) return false;
 		if (process.platform === "win32") return true;
-		await fs$1.access(filePath, constants.X_OK);
+		await fsPromises.access(filePath, constants.X_OK);
 		return true;
 	} catch {
 		return false;

package/dist/{runner-DjDddZhb.js → runner-BkCU-kqs.js}

@@ -5,7 +5,7 @@ import { _ as runExec } from "./workspace-tAtkoD_r.js";
 import { J as isInboundPathAllowed, R as loadConfig, T as resolveApiKeyForProvider, X as resolveIMessageAttachmentRoots, Y as mergeInboundPathRoots, c as normalizeProviderId, dn as resolveIdleHandsAgentDir, g as normalizeGoogleModelId, q as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, w as requireApiKey } from "./model-selection-C5hI1dum.js";
 import { t as normalizeChatType } from "./chat-type-BPBtOjer.js";
 import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-J8P5zOFm.js";
-import { t as describeImageWithModel, w as ensureIdleHandsModelsJson } from "./image-D9D-lzCw.js";
+import { t as describeImageWithModel, w as ensureIdleHandsModelsJson } from "./image-Dlu13Ebx.js";
 import { n as collectProviderApiKeysForExecution, r as executeWithApiKeyRotation, t as parseGeminiAuth } from "./gemini-auth-DLSGffQK.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-3YYM8QuM.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-CcfDZXe9.js";

package/dist/{runner-CZW_eyf2.js → runner-Bv_BA3vd.js}

@@ -4,7 +4,7 @@ import { A as shouldLogVerbose, D as logVerbose, K as resolvePreferredIdleHandsT
 import { C as requireApiKey, J as mergeInboundPathRoots, K as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, L as loadConfig, Y as resolveIMessageAttachmentRoots, c as normalizeProviderId, fn as resolveIdleHandsAgentDir, h as normalizeGoogleModelId, q as isInboundPathAllowed, w as resolveApiKeyForProvider } from "./model-selection-D3Jhcvg-.js";
 import { t as normalizeChatType } from "./chat-type-DLInEbxd.js";
 import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-BDG-MYYV.js";
-import { t as describeImageWithModel, w as ensureIdleHandsModelsJson } from "./image-C_aN5P6-.js";
+import { t as describeImageWithModel, w as ensureIdleHandsModelsJson } from "./image-BAsQlUqT.js";
 import { n as collectProviderApiKeysForExecution, r as executeWithApiKeyRotation, t as parseGeminiAuth } from "./gemini-auth-m2hi6OmF.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-B7YMixjc.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-BdCPmLBP.js";

package/dist/{runtime-XmXLaHNk.js → runtime-DEmy759r.js}

@@ -1,6 +1,6 @@
 import { y as resolveUserPath } from "./utils-CXzXXV2o.js";
-import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-RA0zXRpu.js";
-import { Ct as isRecord, Ir as resolveIdleHandsAgentDir, Jr as coerceSecretRef, Mr as replaceRuntimeAuthProfileStoreSnapshots, Or as clearRuntimeAuthProfileStoreSnapshots, Pt as clearRuntimeConfigSnapshot, St as isNonEmptyString, Vt as setRuntimeConfigSnapshot, in as secretRefKey, jr as loadAuthProfileStoreForSecretsRuntime, xt as resolveSecretRefValues } from "./model-selection-0dGxYGp8.js";
+import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-Bn39ugK4.js";
+import { Ct as isRecord, Ir as resolveIdleHandsAgentDir, Jr as coerceSecretRef, Mr as replaceRuntimeAuthProfileStoreSnapshots, Or as clearRuntimeAuthProfileStoreSnapshots, Pt as clearRuntimeConfigSnapshot, St as isNonEmptyString, Vt as setRuntimeConfigSnapshot, in as secretRefKey, jr as loadAuthProfileStoreForSecretsRuntime, xt as resolveSecretRefValues } from "./model-selection-CSn9tUuH.js";
 
 //#region src/secrets/runtime.ts
 let activeSnapshot = null;

package/dist/{sandbox-DcUw5h3p.js → sandbox-CfPbhDY_.js}

@@ -1,23 +1,23 @@
 import { r as STATE_DIR } from "./paths-Cn44w-EB.js";
 import { y as resolveUserPath } from "./utils-CXzXXV2o.js";
-import { C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, T as DEFAULT_USER_FILENAME, _ as DEFAULT_AGENT_WORKSPACE_DIR, b as DEFAULT_IDENTITY_FILENAME, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, m as resolveSessionAgentId, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-RA0zXRpu.js";
+import { C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, T as DEFAULT_USER_FILENAME, _ as DEFAULT_AGENT_WORKSPACE_DIR, b as DEFAULT_IDENTITY_FILENAME, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, m as resolveSessionAgentId, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-Bn39ugK4.js";
 import { d as CHANNEL_IDS, t as createSubsystemLogger } from "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
 import { l as resolveAgentIdFromSessionKey, s as normalizeAgentId } from "./session-key-Cuihcz_O.js";
-import { i as openBoundaryFile, u as resolvePathViaExistingAncestorSync } from "./idlehands-root-B8cUs-5M.js";
-import { It as loadConfig, an as getBlockedNetworkModeReason } from "./model-selection-0dGxYGp8.js";
+import { i as openBoundaryFile, u as resolvePathViaExistingAncestorSync } from "./idlehands-root-DFL2GrNW.js";
+import { It as loadConfig, an as getBlockedNetworkModeReason } from "./model-selection-CSn9tUuH.js";
 import { t as formatCliCommand } from "./command-format-DInZLuZ8.js";
 import { a as resolveCoreToolProfilePolicy, t as CORE_TOOL_GROUPS } from "./tool-catalog-4_Wxc542.js";
-import { O as DEFAULT_BROWSER_EVALUATE_ENABLED, j as DEFAULT_IDLEHANDS_BROWSER_PROFILE_NAME, k as DEFAULT_IDLEHANDS_BROWSER_COLOR } from "./chrome-VBsQfIrt.js";
+import { O as DEFAULT_BROWSER_EVALUATE_ENABLED, j as DEFAULT_IDLEHANDS_BROWSER_PROFILE_NAME, k as DEFAULT_IDLEHANDS_BROWSER_COLOR } from "./chrome-YguTEaLx.js";
 import { i as isLoopbackHost } from "./ws-XBTtYpJc.js";
-import { a as resolveProfile, o as ensureBrowserControlAuth, r as registerBrowserRoutes, s as resolveBrowserControlAuth, t as createBrowserRouteContext } from "./server-context-DI0W_H7R.js";
-import { d as resolveSandboxInputPath, f as resolveSandboxPath, g as sanitizeEnvVars, o as syncSkillsToWorkspace } from "./skills-DlvDyK8L.js";
-import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-FXBVVTLw.js";
+import { a as resolveProfile, o as ensureBrowserControlAuth, r as registerBrowserRoutes, s as resolveBrowserControlAuth, t as createBrowserRouteContext } from "./server-context-BxNSTpH6.js";
+import { d as resolveSandboxInputPath, f as resolveSandboxPath, g as sanitizeEnvVars, o as syncSkillsToWorkspace } from "./skills-TIyQDZx7.js";
+import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-BCskHdfJ.js";
 import { n as installBrowserCommonMiddleware, t as installBrowserAuthMiddleware } from "./server-middleware-BC21xYvr.js";
-import { Q as resolveAgentMainSessionKey, Z as canonicalizeMainSessionAlias, ct as acquireSessionWriteLock } from "./sessions-BtPXimXQ.js";
+import { Q as resolveAgentMainSessionKey, Z as canonicalizeMainSessionAlias, ct as acquireSessionWriteLock } from "./sessions-BqWocozB.js";
 import fs from "node:fs";
 import path, { posix } from "node:path";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { spawn } from "node:child_process";
 import crypto from "node:crypto";
 import express from "express";
@@ -613,7 +613,7 @@ async function withRegistryLock(registryPath, fn) {
 }
 async function readRegistryFromFile(registryPath, mode) {
 	try {
-		const raw = await fs$1.readFile(registryPath, "utf-8");
+		const raw = await fsPromises.readFile(registryPath, "utf-8");
 		const parsed = JSON.parse(raw);
 		if (isRegistryFile(parsed)) return parsed;
 		if (mode === "fallback") return { entries: [] };
@@ -626,15 +626,15 @@ async function readRegistryFromFile(registryPath, mode) {
 	}
 }
 async function writeRegistryFile(registryPath, registry) {
-	await fs$1.mkdir(SANDBOX_STATE_DIR, { recursive: true });
+	await fsPromises.mkdir(SANDBOX_STATE_DIR, { recursive: true });
 	const payload = `${JSON.stringify(registry, null, 2)}\n`;
 	const registryDir = path.dirname(registryPath);
 	const tempPath = path.join(registryDir, `${path.basename(registryPath)}.${crypto.randomUUID()}.tmp`);
-	await fs$1.writeFile(tempPath, payload, "utf-8");
+	await fsPromises.writeFile(tempPath, payload, "utf-8");
 	try {
-		await fs$1.rename(tempPath, registryPath);
+		await fsPromises.rename(tempPath, registryPath);
 	} catch (error) {
-		await fs$1.rm(tempPath, { force: true });
+		await fsPromises.rm(tempPath, { force: true });
 		throw error;
 	}
 }
@@ -2088,7 +2088,7 @@ function formatSandboxToolPolicyBlockedMessage(params) {
 //#endregion
 //#region src/agents/sandbox/workspace.ts
 async function ensureSandboxWorkspace(workspaceDir, seedFrom, skipBootstrap) {
-	await fs$1.mkdir(workspaceDir, { recursive: true });
+	await fsPromises.mkdir(workspaceDir, { recursive: true });
 	if (seedFrom) {
 		const seed = resolveUserPath(seedFrom);
 		const files = [
@@ -2104,11 +2104,11 @@ async function ensureSandboxWorkspace(workspaceDir, seedFrom, skipBootstrap) {
 			const src = path.join(seed, name);
 			const dest = path.join(workspaceDir, name);
 			try {
-				await fs$1.access(dest);
+				await fsPromises.access(dest);
 			} catch {
 				try {
-					const content = await fs$1.readFile(src, "utf-8");
-					await fs$1.writeFile(dest, content, {
+					const content = await fsPromises.readFile(src, "utf-8");
+					await fsPromises.writeFile(dest, content, {
 						encoding: "utf-8",
 						flag: "wx"
 					});
@@ -2143,7 +2143,7 @@ async function ensureSandboxWorkspaceLayout(params) {
 			const message = error instanceof Error ? error.message : JSON.stringify(error);
 			defaultRuntime.error?.(`Sandbox skill sync failed: ${message}`);
 		}
-	} else await fs$1.mkdir(workspaceDir, { recursive: true });
+	} else await fsPromises.mkdir(workspaceDir, { recursive: true });
 	return {
 		agentWorkspaceDir,
 		scopeKey,
@@ -2153,7 +2153,7 @@ async function ensureSandboxWorkspaceLayout(params) {
 }
 async function resolveSandboxDockerUser(params) {
 	if (params.docker.user?.trim()) return params.docker;
-	const stat = params.stat ?? ((workspaceDir) => fs$1.stat(workspaceDir));
+	const stat = params.stat ?? ((workspaceDir) => fsPromises.stat(workspaceDir));
 	try {
 		const workspaceStat = await stat(params.workspaceDir);
 		const uid = Number.isInteger(workspaceStat.uid) ? workspaceStat.uid : null;

package/dist/{sandbox-cli-DGvJ7Eeq.js → sandbox-cli-B4wLJr21.js}

@@ -1,51 +1,51 @@
 import "./paths-Cn44w-EB.js";
 import { B as theme, R as colorize, z as isRich } from "./utils-CXzXXV2o.js";
-import { i as resolveAgentConfig } from "./agent-scope-RA0zXRpu.js";
+import { i as resolveAgentConfig } from "./agent-scope-Bn39ugK4.js";
 import { _ as normalizeAnyChannelId } from "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
 import { c as normalizeMainKey, l as resolveAgentIdFromSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, w as parseAgentSessionKey } from "./session-key-Cuihcz_O.js";
-import "./idlehands-root-B8cUs-5M.js";
+import "./idlehands-root-DFL2GrNW.js";
 import "./exec-CKHMT0tZ.js";
-import { It as loadConfig } from "./model-selection-0dGxYGp8.js";
+import { It as loadConfig } from "./model-selection-CSn9tUuH.js";
 import "./github-copilot-token-D7lpquOO.js";
 import { t as formatCliCommand } from "./command-format-DInZLuZ8.js";
 import "./boolean-BsqeuxE6.js";
 import "./env-Bx-F45X5.js";
 import "./host-env-security-DkAVVuaw.js";
 import "./env-vars-sTMVGyld.js";
-import "./manifest-registry-Bak1x76G.js";
-import "./dock-Y96MzKuM.js";
+import "./manifest-registry-RfRn8HJx.js";
+import "./dock-CzF5XYGd.js";
 import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-DVauVtrg.js";
-import { f as resolveSandboxConfigForAgent, i as removeSandboxContainer, m as resolveSandboxToolPolicyForAgent, n as listSandboxContainers, r as removeSandboxBrowserContainer, t as listSandboxBrowsers } from "./sandbox-DcUw5h3p.js";
+import { f as resolveSandboxConfigForAgent, i as removeSandboxContainer, m as resolveSandboxToolPolicyForAgent, n as listSandboxContainers, r as removeSandboxBrowserContainer, t as listSandboxBrowsers } from "./sandbox-CfPbhDY_.js";
 import "./tool-catalog-4_Wxc542.js";
-import "./chrome-VBsQfIrt.js";
+import "./chrome-YguTEaLx.js";
 import "./tailscale-B5Irc_Bi.js";
 import "./ip-DJ5wsTQn.js";
 import "./tailnet-C9lH_YnG.js";
 import "./ws-XBTtYpJc.js";
 import "./auth-heRVBxh2.js";
-import "./server-context-DI0W_H7R.js";
+import "./server-context-BxNSTpH6.js";
 import "./frontmatter-D-sQ_Hqk.js";
-import "./skills-DlvDyK8L.js";
-import "./path-alias-guards-FXBVVTLw.js";
-import "./paths-B-CLQ5RT.js";
+import "./skills-TIyQDZx7.js";
+import "./path-alias-guards-BCskHdfJ.js";
+import "./paths-Bt0fZexW.js";
 import "./redact-B_4KNlXs.js";
 import "./errors-DZDuPc3M.js";
-import "./fs-safe-_JQUGpZf.js";
+import "./fs-safe-DNFrxDS-.js";
 import "./ssrf-Dw9zzKSM.js";
-import "./image-ops-BU-VdLZu.js";
-import "./store-kH9wHHbO.js";
-import "./ports-SQy1d-RL.js";
+import "./image-ops-BkoEFRYH.js";
+import "./store-CLNuI8-G.js";
+import "./ports-DWJO5S52.js";
 import "./trash-CUFiyQN5.js";
 import "./server-middleware-BC21xYvr.js";
-import { Q as resolveAgentMainSessionKey, c as loadSessionStore, et as resolveMainSessionKey } from "./sessions-BtPXimXQ.js";
-import "./plugins-D46VZh7u.js";
-import "./accounts-DLTODa_Z.js";
-import "./accounts-3HS_UAhJ.js";
-import "./accounts-DgbTKQoW.js";
-import "./bindings-B59Q7nsk.js";
+import { Q as resolveAgentMainSessionKey, c as loadSessionStore, et as resolveMainSessionKey } from "./sessions-BqWocozB.js";
+import "./plugins-B4hASNc2.js";
+import "./accounts-D-hQsUw-.js";
+import "./accounts-DsVN0UNw.js";
+import "./accounts-D87a1Y_K.js";
+import "./bindings-DZjkLUU_.js";
 import "./logging-q4KyMmY-.js";
-import "./auth-store-DDzIMy8_.js";
+import "./auth-store-CMyrmmSF.js";
 import { u as resolveStorePath } from "./paths-DRz46q00.js";
 import "./chat-envelope-Bebo3vwl.js";
 import { t as formatDurationCompact } from "./format-duration-C9ZBnsdW.js";

package/dist/{secrets-cli-CR3h2TBy.js → secrets-cli-DP718vNZ.js}

@@ -1,28 +1,28 @@
 import { g as resolveStateDir } from "./paths-Cn44w-EB.js";
 import { B as theme, O as danger, g as resolveConfigDir, y as resolveUserPath } from "./utils-CXzXXV2o.js";
-import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-RA0zXRpu.js";
+import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-Bn39ugK4.js";
 import "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
-import "./idlehands-root-B8cUs-5M.js";
+import "./idlehands-root-DFL2GrNW.js";
 import "./exec-CKHMT0tZ.js";
-import { Ct as isRecord, Ft as createConfigIO, Jr as coerceSecretRef, Pr as resolveAuthStorePath, St as isNonEmptyString, bt as resolveSecretRefValue, en as SecretProviderSchema, in as secretRefKey, jr as loadAuthProfileStoreForSecretsRuntime, rn as resolveDefaultSecretProviderAlias, rr as isSafeExecutableValue, u as normalizeProviderId, wt as writeTextFileAtomic, xt as resolveSecretRefValues } from "./model-selection-0dGxYGp8.js";
+import { Ct as isRecord, Ft as createConfigIO, Jr as coerceSecretRef, Pr as resolveAuthStorePath, St as isNonEmptyString, bt as resolveSecretRefValue, en as SecretProviderSchema, in as secretRefKey, jr as loadAuthProfileStoreForSecretsRuntime, rn as resolveDefaultSecretProviderAlias, rr as isSafeExecutableValue, u as normalizeProviderId, wt as writeTextFileAtomic, xt as resolveSecretRefValues } from "./model-selection-CSn9tUuH.js";
 import "./github-copilot-token-D7lpquOO.js";
 import "./boolean-BsqeuxE6.js";
 import "./env-Bx-F45X5.js";
 import "./host-env-security-DkAVVuaw.js";
 import "./env-vars-sTMVGyld.js";
-import "./manifest-registry-Bak1x76G.js";
+import "./manifest-registry-RfRn8HJx.js";
 import "./message-channel-DVauVtrg.js";
 import "./ip-DJ5wsTQn.js";
 import "./tailnet-C9lH_YnG.js";
 import "./ws-XBTtYpJc.js";
-import "./client-DtnD-ee9.js";
-import "./call-BpWhjuOg.js";
-import "./pairing-token-lKXTMQ_M.js";
+import "./client-Dl5EAvfO.js";
+import "./call-Du-oBD99.js";
+import "./pairing-token-3hoCgQqp.js";
 import { t as formatDocsLink } from "./links-15764jZB.js";
 import "./progress-BQLz1r3L.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-BBFG1T-M.js";
-import { i as prepareSecretsRuntimeSnapshot } from "./runtime-XmXLaHNk.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-IpZymG6F.js";
+import { i as prepareSecretsRuntimeSnapshot } from "./runtime-DEmy759r.js";
 import { n as listKnownSecretEnvVarNames } from "./provider-env-vars-lF9nr_3F.js";
 import fs from "node:fs";
 import os from "node:os";

package/dist/{security-cli-B9_LV2po.js → security-cli-CG2_SV7b.js}

@@ -1,74 +1,74 @@
 import { g as resolveStateDir, m as resolveOAuthDir, o as resolveConfigPath } from "./paths-Cn44w-EB.js";
 import { B as theme, S as shortenHomePath, x as shortenHomeInString, z as isRich } from "./utils-CXzXXV2o.js";
-import { d as resolveDefaultAgentId } from "./agent-scope-RA0zXRpu.js";
+import { d as resolveDefaultAgentId } from "./agent-scope-Bn39ugK4.js";
 import "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
 import { m as DEFAULT_ACCOUNT_ID, s as normalizeAgentId } from "./session-key-Cuihcz_O.js";
-import "./idlehands-root-B8cUs-5M.js";
+import "./idlehands-root-DFL2GrNW.js";
 import { n as runExec } from "./exec-CKHMT0tZ.js";
-import { At as createIcaclsResetCommand, Ft as createConfigIO, It as loadConfig, jt as formatIcaclsResetCommand } from "./model-selection-0dGxYGp8.js";
+import { At as createIcaclsResetCommand, Ft as createConfigIO, It as loadConfig, jt as formatIcaclsResetCommand } from "./model-selection-CSn9tUuH.js";
 import "./github-copilot-token-D7lpquOO.js";
 import { t as formatCliCommand } from "./command-format-DInZLuZ8.js";
 import "./boolean-BsqeuxE6.js";
 import "./env-Bx-F45X5.js";
 import "./host-env-security-DkAVVuaw.js";
 import "./env-vars-sTMVGyld.js";
-import "./manifest-registry-Bak1x76G.js";
-import "./dock-Y96MzKuM.js";
+import "./manifest-registry-RfRn8HJx.js";
+import "./dock-CzF5XYGd.js";
 import "./message-channel-DVauVtrg.js";
-import "./sandbox-DcUw5h3p.js";
+import "./sandbox-CfPbhDY_.js";
 import "./tool-catalog-4_Wxc542.js";
-import "./chrome-VBsQfIrt.js";
+import "./chrome-YguTEaLx.js";
 import "./tailscale-B5Irc_Bi.js";
 import "./ip-DJ5wsTQn.js";
 import "./tailnet-C9lH_YnG.js";
 import "./ws-XBTtYpJc.js";
 import "./auth-heRVBxh2.js";
-import "./server-context-DI0W_H7R.js";
+import "./server-context-BxNSTpH6.js";
 import "./frontmatter-D-sQ_Hqk.js";
-import "./skills-DlvDyK8L.js";
-import "./path-alias-guards-FXBVVTLw.js";
-import "./paths-B-CLQ5RT.js";
+import "./skills-TIyQDZx7.js";
+import "./path-alias-guards-BCskHdfJ.js";
+import "./paths-Bt0fZexW.js";
 import "./redact-B_4KNlXs.js";
 import "./errors-DZDuPc3M.js";
-import "./fs-safe-_JQUGpZf.js";
+import "./fs-safe-DNFrxDS-.js";
 import "./ssrf-Dw9zzKSM.js";
-import "./image-ops-BU-VdLZu.js";
-import "./store-kH9wHHbO.js";
-import "./ports-SQy1d-RL.js";
+import "./image-ops-BkoEFRYH.js";
+import "./store-CLNuI8-G.js";
+import "./ports-DWJO5S52.js";
 import "./trash-CUFiyQN5.js";
 import "./server-middleware-BC21xYvr.js";
-import "./sessions-BtPXimXQ.js";
-import "./plugins-D46VZh7u.js";
-import "./accounts-DLTODa_Z.js";
-import "./accounts-3HS_UAhJ.js";
-import "./accounts-DgbTKQoW.js";
-import "./bindings-B59Q7nsk.js";
+import "./sessions-BqWocozB.js";
+import "./plugins-B4hASNc2.js";
+import "./accounts-D-hQsUw-.js";
+import "./accounts-DsVN0UNw.js";
+import "./accounts-D87a1Y_K.js";
+import "./bindings-DZjkLUU_.js";
 import "./logging-q4KyMmY-.js";
-import "./auth-store-DDzIMy8_.js";
+import "./auth-store-CMyrmmSF.js";
 import "./paths-DRz46q00.js";
 import "./chat-envelope-Bebo3vwl.js";
-import "./commands-Dj5LalLo.js";
-import "./client-DtnD-ee9.js";
-import "./call-BpWhjuOg.js";
-import "./pairing-token-lKXTMQ_M.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-CPpEEQJO.js";
-import "./exec-approvals-allowlist-Co2tJSEo.js";
-import "./exec-safe-bin-runtime-policy-DaoU9-ni.js";
-import "./pi-tools.policy-DfITIKZj.js";
+import "./commands-D3BU_t7G.js";
+import "./client-Dl5EAvfO.js";
+import "./call-Du-oBD99.js";
+import "./pairing-token-3hoCgQqp.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-qvpPoWL_.js";
+import "./exec-approvals-allowlist-8AkOwwIr.js";
+import "./exec-safe-bin-runtime-policy-DYXuBKqH.js";
+import "./pi-tools.policy-B_ME3yF6.js";
 import { t as formatDocsLink } from "./links-15764jZB.js";
 import { t as formatHelpExamples } from "./help-format-CMAqOikG.js";
-import "./workspace-dirs-SsExQ3Bz.js";
+import "./workspace-dirs-D3bousoX.js";
 import "./dangerous-tools-ulSRJzn7.js";
-import "./skill-scanner-D7mzXRXd.js";
-import { r as collectIncludePathsRecursive, t as runSecurityAudit } from "./audit-CKeZnjft.js";
+import "./skill-scanner-B4Ftsbd2.js";
+import { r as collectIncludePathsRecursive, t as runSecurityAudit } from "./audit-C5VPFgbJ.js";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 
 //#region src/security/fix.ts
 async function safeChmod(params) {
 	try {
-		const st = await fs.lstat(params.path);
+		const st = await fsPromises.lstat(params.path);
 		if (st.isSymbolicLink()) return {
 			kind: "chmod",
 			path: params.path,
@@ -97,7 +97,7 @@ async function safeChmod(params) {
 			ok: false,
 			skipped: "already"
 		};
-		await fs.chmod(params.path, params.mode);
+		await fsPromises.chmod(params.path, params.mode);
 		return {
 			kind: "chmod",
 			path: params.path,
@@ -127,7 +127,7 @@ async function safeAclReset(params) {
 		env: params.env
 	});
 	try {
-		const st = await fs.lstat(params.path);
+		const st = await fsPromises.lstat(params.path);
 		if (st.isSymbolicLink()) return {
 			kind: "icacls",
 			path: params.path,
@@ -266,7 +266,7 @@ async function chmodCredentialsAndAgentState(params) {
 		mode: 448,
 		require: "dir"
 	}));
-	const credsEntries = await fs.readdir(credsDir, { withFileTypes: true }).catch(() => []);
+	const credsEntries = await fsPromises.readdir(credsDir, { withFileTypes: true }).catch(() => []);
 	for (const entry of credsEntries) {
 		if (!entry.isFile()) continue;
 		if (!entry.name.endsWith(".json")) continue;
@@ -317,7 +317,7 @@ async function chmodCredentialsAndAgentState(params) {
 			mode: 384,
 			require: "file"
 		}));
-		const sessionEntries = await fs.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
+		const sessionEntries = await fsPromises.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
 		for (const entry of sessionEntries) {
 			if (!entry.isFile()) continue;
 			if (!entry.name.endsWith(".jsonl")) continue;

package/dist/{send-C4v0Leny.js → send-BCPkAE2k.js}

@@ -1,13 +1,13 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { It as loadConfig } from "./model-selection-0dGxYGp8.js";
-import { v as mediaKindFromMime } from "./image-ops-BU-VdLZu.js";
+import { It as loadConfig } from "./model-selection-CSn9tUuH.js";
+import { v as mediaKindFromMime } from "./image-ops-BkoEFRYH.js";
 import { n as generateSecureUuid } from "./secure-random-B3f7Ri2X.js";
-import { i as resolveSignalAccount } from "./accounts-DgbTKQoW.js";
+import { i as resolveSignalAccount } from "./accounts-D87a1Y_K.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-Tud5uP5n.js";
 import { t as resolveFetch } from "./fetch-CYe1ekSh.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-DZClqsNo.js";
-import { n as markdownToIR, t as chunkMarkdownIR } from "./ir-VncGpwA1.js";
-import { t as resolveOutboundAttachmentFromUrl } from "./outbound-attachment-Bot3bRnK.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-C5hTDqNm.js";
+import { n as markdownToIR, t as chunkMarkdownIR } from "./ir-DV0Hszc8.js";
+import { t as resolveOutboundAttachmentFromUrl } from "./outbound-attachment-jYdMgCml.js";
 
 //#region src/signal/client.ts
 const DEFAULT_TIMEOUT_MS = 1e4;

package/dist/{send-DuwdEkLw.js → send-BPwTl4-K.js}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { M as logVerbose } from "./utils-CXzXXV2o.js";
-import { It as loadConfig } from "./model-selection-0dGxYGp8.js";
-import { h as resolveSlackAccount, v as resolveSlackBotToken } from "./plugins-D46VZh7u.js";
+import { It as loadConfig } from "./model-selection-CSn9tUuH.js";
+import { h as resolveSlackAccount, v as resolveSlackBotToken } from "./plugins-B4hASNc2.js";
 import { a as requireTargetKind, i as parseTargetPrefixes, n as ensureTargetId, r as parseTargetMention, t as buildMessagingTarget } from "./targets-C5D6YX7J.js";
 import { i as isSilentReplyText } from "./tokens-Dg-QZ_pN.js";
 import { c as resolveChunkMode, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit } from "./chunk-ClMFHJu-.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-DZClqsNo.js";
-import { a as loadWebMedia, n as markdownToIR, t as chunkMarkdownIR } from "./ir-VncGpwA1.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-C5hTDqNm.js";
+import { a as loadWebMedia, n as markdownToIR, t as chunkMarkdownIR } from "./ir-DV0Hszc8.js";
 import { t as renderMarkdownWithMarkers } from "./render-DC4qnRqG.js";
 import { WebClient } from "@slack/web-api";