@visorcraft/idlehands 4.1.0 → 4.2.0

package/dist/{emergency-stop-DtVFxCO1.js → emergency-stop-BtasjDnU.js}

@@ -1,120 +1,120 @@
 import "./paths-Cn44w-EB.js";
 import { M as logVerbose } from "./utils-CXzXXV2o.js";
 import "./thinking-EAliFiVK.js";
-import { An as formatAbortReplyText, Mn as stopSubagentsForRequester, Vn as clearSessionQueues, f as abortEmbeddedPiRun, jn as isAbortRequestText } from "./reply-CdFdL9nL.js";
-import "./agent-scope-Bn39ugK4.js";
+import { An as formatAbortReplyText, Mn as stopSubagentsForRequester, Vn as clearSessionQueues, f as abortEmbeddedPiRun, jn as isAbortRequestText } from "./reply-BDr-UY9O.js";
+import "./agent-scope-RA0zXRpu.js";
 import "./subsystem-CGZX2PBV.js";
 import "./runtime-44j_X4Y6.js";
-import "./idlehands-root-DFL2GrNW.js";
+import "./idlehands-root-B8cUs-5M.js";
 import "./exec-CKHMT0tZ.js";
-import "./model-selection-CSn9tUuH.js";
+import "./model-selection-0dGxYGp8.js";
 import "./github-copilot-token-D7lpquOO.js";
 import "./boolean-BsqeuxE6.js";
 import "./env-Bx-F45X5.js";
 import "./host-env-security-DkAVVuaw.js";
 import "./env-vars-sTMVGyld.js";
-import "./manifest-registry-RfRn8HJx.js";
-import "./dock-CzF5XYGd.js";
+import "./manifest-registry-Bak1x76G.js";
+import "./dock-Y96MzKuM.js";
 import "./message-channel-DVauVtrg.js";
-import "./send-CVIXqubC.js";
-import "./runner-BFG54hnb.js";
-import "./image-C2JZiK-6.js";
-import "./models-config-lQpqp472.js";
-import "./pi-model-discovery-Bt79ifyi.js";
-import "./pi-embedded-helpers-BkzrQ5bZ.js";
-import "./sandbox-CfPbhDY_.js";
+import "./send-DwdHiC7_.js";
+import "./runner-DzszLzI4.js";
+import "./image-DSDEbSiO.js";
+import "./models-config-C5A1wDWh.js";
+import "./pi-model-discovery-BIP3RjXl.js";
+import "./pi-embedded-helpers-BCsfqpDt.js";
+import "./sandbox-DcUw5h3p.js";
 import "./tool-catalog-4_Wxc542.js";
-import "./chrome-YguTEaLx.js";
+import "./chrome-VBsQfIrt.js";
 import "./tailscale-B5Irc_Bi.js";
 import "./ip-DJ5wsTQn.js";
 import "./tailnet-C9lH_YnG.js";
 import "./ws-XBTtYpJc.js";
 import "./auth-heRVBxh2.js";
-import "./server-context-BxNSTpH6.js";
+import "./server-context-DI0W_H7R.js";
 import "./frontmatter-D-sQ_Hqk.js";
-import "./skills-TIyQDZx7.js";
-import "./path-alias-guards-BCskHdfJ.js";
-import "./paths-Bt0fZexW.js";
+import "./skills-DlvDyK8L.js";
+import "./path-alias-guards-FXBVVTLw.js";
+import "./paths-B-CLQ5RT.js";
 import "./redact-B_4KNlXs.js";
 import "./errors-DZDuPc3M.js";
-import "./fs-safe-DNFrxDS-.js";
+import "./fs-safe-_JQUGpZf.js";
 import "./ssrf-Dw9zzKSM.js";
-import "./image-ops-BkoEFRYH.js";
-import "./store-CLNuI8-G.js";
-import "./ports-DWJO5S52.js";
+import "./image-ops-BU-VdLZu.js";
+import "./store-kH9wHHbO.js";
+import "./ports-SQy1d-RL.js";
 import "./trash-CUFiyQN5.js";
 import "./server-middleware-BC21xYvr.js";
-import { c as loadSessionStore } from "./sessions-BqWocozB.js";
-import "./plugins-B4hASNc2.js";
-import "./accounts-D-hQsUw-.js";
-import "./accounts-DsVN0UNw.js";
-import "./accounts-D87a1Y_K.js";
-import "./bindings-DZjkLUU_.js";
+import { c as loadSessionStore } from "./sessions-BtPXimXQ.js";
+import "./plugins-D46VZh7u.js";
+import "./accounts-DLTODa_Z.js";
+import "./accounts-3HS_UAhJ.js";
+import "./accounts-DgbTKQoW.js";
+import "./bindings-B59Q7nsk.js";
 import "./logging-q4KyMmY-.js";
-import "./auth-store-CMyrmmSF.js";
-import "./send-BPwTl4-K.js";
+import "./auth-store-DDzIMy8_.js";
+import "./send-DuwdEkLw.js";
 import { r as resolveDefaultSessionStorePath } from "./paths-DRz46q00.js";
 import "./chat-envelope-Bebo3vwl.js";
-import "./tool-images-DZHrc4pq.js";
+import "./tool-images-CHqepyF_.js";
 import "./tool-display-Dac7lHGW.js";
 import "./fetch-guard-yUZu1Vzc.js";
-import "./api-key-rotation-nXQVJErE.js";
-import "./local-roots-Cco87A2_.js";
-import "./model-catalog-BCsDrrvq.js";
+import "./api-key-rotation-B-FTJm5p.js";
+import "./local-roots-q0xbefkf.js";
+import "./model-catalog-D9no0CH2.js";
 import "./tokens-Dg-QZ_pN.js";
-import "./deliver-yTpXc5sv.js";
-import "./commands-D3BU_t7G.js";
-import "./commands-registry-Cj4D_1tw.js";
-import "./client-Dl5EAvfO.js";
-import "./call-Du-oBD99.js";
-import "./pairing-token-3hoCgQqp.js";
+import "./deliver--kttnrER.js";
+import "./commands-Dj5LalLo.js";
+import "./commands-registry-CURlRZQJ.js";
+import "./client-DtnD-ee9.js";
+import "./call-BpWhjuOg.js";
+import "./pairing-token-lKXTMQ_M.js";
 import "./fetch-CYe1ekSh.js";
 import "./retry-Db05aSB8.js";
-import "./pairing-store-qvpPoWL_.js";
+import "./pairing-store-CPpEEQJO.js";
 import "./exec-approvals-C2s2dPha.js";
-import "./exec-approvals-allowlist-8AkOwwIr.js";
-import "./exec-safe-bin-runtime-policy-DYXuBKqH.js";
-import "./nodes-screen-CIAn0wXq.js";
-import "./target-errors-BYuWhuLU.js";
+import "./exec-approvals-allowlist-Co2tJSEo.js";
+import "./exec-safe-bin-runtime-policy-DaoU9-ni.js";
+import "./nodes-screen-CcpPaFxa.js";
+import "./target-errors-bLIVFsbF.js";
 import "./diagnostic-session-state-CJHdRyOy.js";
-import "./with-timeout-BodPmGCY.js";
+import "./with-timeout-DEdycYxq.js";
 import "./diagnostic-ByHpt6q8.js";
-import "./send-DDMaLJAQ.js";
-import "./model-Bd-05WpB.js";
-import "./reply-prefix-BMEdvSpA.js";
-import "./memory-cli-4wfelGdK.js";
-import "./manager-BBeTPO2h.js";
-import "./query-expansion-i5I3yavb.js";
+import "./send--lzpNy4f.js";
+import "./model-C-icShH2.js";
+import "./reply-prefix-C3y4zpTl.js";
+import "./memory-cli-CUGwnVIY.js";
+import "./manager-BMAFgXyU.js";
+import "./query-expansion-Clts_AGz.js";
 import "./chunk-ClMFHJu-.js";
-import "./markdown-tables-C5hTDqNm.js";
-import "./ir-DV0Hszc8.js";
+import "./markdown-tables-DZClqsNo.js";
+import "./ir-VncGpwA1.js";
 import "./render-DC4qnRqG.js";
-import "./pi-tools.policy-B_ME3yF6.js";
+import "./pi-tools.policy-DfITIKZj.js";
 import "./channel-activity-DaCsrdWK.js";
-import "./tables-CZSD889r.js";
-import "./send-BCPkAE2k.js";
+import "./tables-g9xkflht.js";
+import "./send-C4v0Leny.js";
 import "./proxy-yk1Oqe9p.js";
 import "./links-15764jZB.js";
 import "./cli-utils-CH2y4E2f.js";
 import "./help-format-CMAqOikG.js";
 import "./progress-BQLz1r3L.js";
-import "./resolve-route-Ef_Yt2Dw.js";
-import "./replies-Czp4hvpS.js";
-import "./skill-commands-BwIRWSCI.js";
-import "./workspace-dirs-D3bousoX.js";
-import "./deps-BotXja4Z.js";
-import "./plugin-auto-enable-BMuSi4aV.js";
-import "./channel-selection-3jUl-PyW.js";
-import "./outbound-attachment-jYdMgCml.js";
+import "./resolve-route-D_AbcmD6.js";
+import "./replies-hSFVxL4h.js";
+import "./skill-commands-BFzmZAfo.js";
+import "./workspace-dirs-SsExQ3Bz.js";
+import "./deps-Bq7jJLyN.js";
+import "./plugin-auto-enable-7DUxMy6A.js";
+import "./channel-selection-ZxRkxpuF.js";
+import "./outbound-attachment-Bot3bRnK.js";
 import "./delivery-queue-BvDRo8CK.js";
 import "./session-cost-usage-DS1rjzML.js";
-import "./send-CEavqqEz.js";
-import "./onboard-helpers-CdzbIhrm.js";
+import "./send-DQiw_nGD.js";
+import "./onboard-helpers-mzy38DiC.js";
 import "./prompt-style-kmKiCZnm.js";
-import "./pairing-labels-DuZ7ih-T.js";
-import "./server-lifecycle-CGKrGrhM.js";
+import "./pairing-labels-ChQJzbS9.js";
+import "./server-lifecycle-B5PlrlbG.js";
 import "./stagger-rQoQSWkz.js";
-import "./system-run-command-BIhrK3OI.js";
+import "./system-run-command-qJdgzxLp.js";
 
 //#region src/auto-reply/reply/emergency-stop.ts
 /**

package/dist/emergency-stop-CVO75pTD.js

@@ -0,0 +1,113 @@
+import "./agent-scope-DyP_tr7s.js";
+import "./paths-BYNVLNi_.js";
+import "./subsystem-tzu-rIAJ.js";
+import { D as logVerbose } from "./utils-CTFLl_ji.js";
+import "./runtime-8mi3mpYB.js";
+import "./workspace-DBFSzT6O.js";
+import "./model-selection-1MMYqY6M.js";
+import "./github-copilot-token-Dgt6cnsM.js";
+import "./boolean-CE7i9tBR.js";
+import "./env-B5G1qwGc.js";
+import "./dock-BgOmHcbh.js";
+import "./tokens-BRLyURxW.js";
+import { B as clearSessionQueues, F as isAbortRequestText, I as stopSubagentsForRequester, P as formatAbortReplyText, n as abortEmbeddedPiRun } from "./pi-embedded-C6RDRgJM.js";
+import "./plugins-CRB60mCJ.js";
+import "./accounts-Dk8mJIrQ.js";
+import "./bindings-D3b5Fmc9.js";
+import "./auth-store-DXT-l7fO.js";
+import "./send-BeIZJuy4.js";
+import "./send-DmLC7aEF.js";
+import "./deliver-BUiQ-9fE.js";
+import "./diagnostic-4owMk4vH.js";
+import "./diagnostic-session-state-BGF2r-kt.js";
+import "./accounts-BDVs8LTu.js";
+import "./send-Dfa3sn6r.js";
+import "./image-ops-D1KtygWz.js";
+import "./pi-model-discovery-Bb__OY-j.js";
+import "./message-channel-C8QtrwEU.js";
+import "./pi-embedded-helpers-CghCLoPo.js";
+import "./chrome-BcJB6PcM.js";
+import "./ssrf-CZeHDwVZ.js";
+import "./frontmatter-BOudmHMS.js";
+import "./skills-CnAPWfca.js";
+import "./path-alias-guards-Cu1nXNMM.js";
+import "./redact-Bvpf-ATQ.js";
+import "./errors-C_0nm4TJ.js";
+import "./fs-safe-CYUaAFO9.js";
+import "./store-CvMgrKWx.js";
+import { s as loadSessionStore } from "./sessions-3ioSeOA1.js";
+import "./accounts-CIvVRRHb.js";
+import { r as resolveDefaultSessionStorePath } from "./paths-D_qUel1T.js";
+import "./tool-images-CcGZpzmq.js";
+import "./thinking-z4_linel.js";
+import "./image-D8b_rlQC.js";
+import "./reply-prefix-BUgeSN2R.js";
+import "./manager-BE_76jWB.js";
+import "./gemini-auth-CIyaa44H.js";
+import "./fetch-guard-iuQsIjqN.js";
+import "./query-expansion-DEq020GG.js";
+import "./retry-BeB9WenR.js";
+import "./target-errors-BPfQrPim.js";
+import "./chunk-CMpX7Jaz.js";
+import "./markdown-tables-CzsockiZ.js";
+import "./local-roots-KN4Hp1yZ.js";
+import "./ir-B7IBoKLy.js";
+import "./render-MTSxc7LK.js";
+import "./commands-registry-j4vAzcF2.js";
+import "./skill-commands-Ck3flWX7.js";
+import "./runner-PgRFPYUj.js";
+import "./fetch-CsfR_943.js";
+import "./channel-activity-D_TMOGQ0.js";
+import "./tables-5k-zOZ-s.js";
+import "./send-C1hvd3bt.js";
+import "./outbound-attachment-3I6GzwDe.js";
+import "./send-D4bMycQu.js";
+import "./resolve-route-DuttYY7A.js";
+import "./proxy-CRB9oCP5.js";
+import "./replies-6_GxvQYe.js";
+import "./deps-B4J8H6nI.js";
+
+//#region src/auto-reply/reply/emergency-stop.ts
+/**
+* Emergency stop — bypass all queues and debouncing.
+* Called at the earliest ingress point (before debouncer) to guarantee immediate execution.
+*/
+/**
+* Execute an emergency stop for a session.
+* Clears all queues, aborts embedded runs, and stops subagents.
+* Returns the reply text to send to the user.
+*/
+function emergencyStop(params) {
+	const { cfg, sessionKey, sessionId } = params;
+	const cleared = clearSessionQueues([sessionKey, sessionId]);
+	if (cleared.followupCleared > 0 || cleared.laneCleared > 0) logVerbose(`emergency-stop: cleared followups=${cleared.followupCleared} lane=${cleared.laneCleared} keys=${cleared.keys.join(",")}`);
+	if (sessionId) abortEmbeddedPiRun(sessionId);
+	const { stopped } = stopSubagentsForRequester({
+		cfg,
+		requesterSessionKey: sessionKey
+	});
+	logVerbose(`emergency-stop: sessionKey=${sessionKey} sessionId=${sessionId} stoppedSubagents=${stopped}`);
+	return {
+		aborted: true,
+		replyText: formatAbortReplyText(stopped),
+		sessionKey
+	};
+}
+/**
+* Resolve session info from the session store for emergency stop.
+* Lightweight — just reads the store, no locks.
+*/
+function resolveSessionForEmergencyStop(sessionKey) {
+	try {
+		const store = loadSessionStore(resolveDefaultSessionStorePath());
+		return {
+			sessionId: store[sessionKey]?.sessionId,
+			store
+		};
+	} catch {
+		return {};
+	}
+}
+
+//#endregion
+export { emergencyStop, isAbortRequestText, resolveSessionForEmergencyStop };

package/dist/{emergency-stop-CDozqde9.js → emergency-stop-D_bTOufu.js}

@@ -25,7 +25,7 @@ import "./logging-Bgrm4o7g.js";
 import "./auth-store-D9BmR4S6.js";
 import "./send-m4lQkQcY.js";
 import "./send-CCiDIuX4.js";
-import { $n as stopSubagentsForRequester, Qn as isAbortRequestText, Zn as formatAbortReplyText, c as abortEmbeddedPiRun, o as clearSessionQueues } from "./subagent-registry-BH5O1rxK.js";
+import { $n as stopSubagentsForRequester, Qn as isAbortRequestText, Zn as formatAbortReplyText, c as abortEmbeddedPiRun, o as clearSessionQueues } from "./subagent-registry-Dclk-Ews.js";
 import { r as resolveDefaultSessionStorePath } from "./paths-CC17i2eK.js";
 import "./chat-envelope-Dedaetiq.js";
 import "./client-udFMSDes.js";
@@ -108,7 +108,7 @@ import "./cli-utils-BfsDuRZS.js";
 import "./help-format-CldHB7lS.js";
 import "./progress-B76RkFx7.js";
 import "./replies-DSfpze17.js";
-import "./deps-CjWcQwlX.js";
+import "./deps-AEDT3iDX.js";
 import "./onboard-helpers-DWivfzcc.js";
 import "./prompt-style-XmK49QYK.js";
 import "./pairing-labels-D7xcHkxi.js";

package/dist/{enable-DaA_orGN.js → enable-o_s6PBsC.js}

@@ -1,5 +1,5 @@
 import { y as normalizeChatChannelId } from "./subsystem-CGZX2PBV.js";
-import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-BMuSi4aV.js";
+import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-7DUxMy6A.js";
 
 //#region src/plugins/toggle-config.ts
 function setPluginEnabledInConfig(config, pluginId, enabled) {

package/dist/entry.js

@@ -2566,7 +2566,7 @@ if (!isMainModule({
 			applyCliProfileEnv({ profile: parsed.profile });
 			process$1.argv = parsed.argv;
 		}
-		import("./run-main-9A7FdIR1.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
+		import("./run-main-BDEztzfx.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
 			console.error("[idlehands] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 			process$1.exitCode = 1;
 		});

package/dist/{env-q-PhWbb_.js → env-B5G1qwGc.js}

@@ -1,4 +1,4 @@
-import { t as createSubsystemLogger } from "./subsystem-D7ZepYT1.js";
+import { t as createSubsystemLogger } from "./subsystem-tzu-rIAJ.js";
 import { t as parseBooleanValue } from "./boolean-CE7i9tBR.js";
 
 //#region src/infra/env.ts

package/dist/{errors-C4SHjIZK.js → errors-C_0nm4TJ.js}

@@ -1,4 +1,4 @@
-import { t as redactSensitiveText } from "./redact-1Y0KPNtr.js";
+import { t as redactSensitiveText } from "./redact-Bvpf-ATQ.js";
 
 //#region src/infra/errors.ts
 function extractErrorCode(err) {

package/dist/{exec-approvals-allowlist-8AkOwwIr.js → exec-approvals-allowlist-Co2tJSEo.js}

@@ -1,4 +1,4 @@
-import { Bn as resolveAllowlistCandidatePath, Gn as isDispatchWrapperExecutable, In as isWindowsPlatform, Kn as isShellWrapperExecutable, Ln as splitCommandChain, Mn as validateSafeBinArgv, Pn as analyzeShellCommand, Qn as SAFE_BIN_PROFILES, Rn as DEFAULT_SAFE_BINS, Un as extractShellWrapperInlineCommand, Vn as resolveCommandResolutionFromArgv, Xn as unwrapKnownShellMultiplexerInvocation, Yn as unwrapKnownDispatchWrapperInvocation, kn as isTrustedSafeBinPath, zn as matchAllowlist } from "./model-selection-CSn9tUuH.js";
+import { Bn as resolveAllowlistCandidatePath, Gn as isDispatchWrapperExecutable, In as isWindowsPlatform, Kn as isShellWrapperExecutable, Ln as splitCommandChain, Mn as validateSafeBinArgv, Pn as analyzeShellCommand, Qn as SAFE_BIN_PROFILES, Rn as DEFAULT_SAFE_BINS, Un as extractShellWrapperInlineCommand, Vn as resolveCommandResolutionFromArgv, Xn as unwrapKnownShellMultiplexerInvocation, Yn as unwrapKnownDispatchWrapperInvocation, kn as isTrustedSafeBinPath, zn as matchAllowlist } from "./model-selection-0dGxYGp8.js";
 import path from "node:path";
 
 //#region src/infra/exec-approvals-allowlist.ts

package/dist/{exec-approvals-cli-CbcJzCt0.js → exec-approvals-cli-D6XUzs4j.js}

@@ -1,37 +1,37 @@
 import "./paths-Cn44w-EB.js";
 import { B as theme, z as isRich } from "./utils-CXzXXV2o.js";
-import "./agent-scope-Bn39ugK4.js";
+import "./agent-scope-RA0zXRpu.js";
 import "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
-import "./idlehands-root-DFL2GrNW.js";
+import "./idlehands-root-B8cUs-5M.js";
 import "./exec-CKHMT0tZ.js";
-import "./model-selection-CSn9tUuH.js";
+import "./model-selection-0dGxYGp8.js";
 import "./github-copilot-token-D7lpquOO.js";
 import "./boolean-BsqeuxE6.js";
 import "./env-Bx-F45X5.js";
 import "./host-env-security-DkAVVuaw.js";
 import "./env-vars-sTMVGyld.js";
-import "./manifest-registry-RfRn8HJx.js";
+import "./manifest-registry-Bak1x76G.js";
 import "./message-channel-DVauVtrg.js";
 import "./ip-DJ5wsTQn.js";
 import "./tailnet-C9lH_YnG.js";
 import "./ws-XBTtYpJc.js";
-import "./client-Dl5EAvfO.js";
-import "./call-Du-oBD99.js";
-import "./pairing-token-3hoCgQqp.js";
+import "./client-DtnD-ee9.js";
+import "./call-BpWhjuOg.js";
+import "./pairing-token-lKXTMQ_M.js";
 import { n as formatTimeAgo } from "./format-relative-DcQZUAYl.js";
 import { c as readExecApprovalsSnapshot, p as saveExecApprovals } from "./exec-approvals-C2s2dPha.js";
-import "./exec-approvals-allowlist-8AkOwwIr.js";
+import "./exec-approvals-allowlist-Co2tJSEo.js";
 import { t as formatDocsLink } from "./links-15764jZB.js";
 import "./progress-BQLz1r3L.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-IpZymG6F.js";
-import "./systemd-DyrVLTI0.js";
-import "./service-Bj2oSfpw.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-BBFG1T-M.js";
+import "./systemd-CaCR5CyM.js";
+import "./service-C8NMS3m_.js";
 import { t as renderTable } from "./table-B9AmL3M1.js";
-import { t as describeUnknownError } from "./shared-Jzrx8DfN.js";
-import { i as resolveNodeId, r as nodesCallOpts } from "./rpc-CNqnw2FL.js";
+import { t as describeUnknownError } from "./shared-DpLSpJIl.js";
+import { i as resolveNodeId, r as nodesCallOpts } from "./rpc-Cf9OK5Yk.js";
 import JSON5 from "json5";
-import fsPromises from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/cli/exec-approvals-cli.ts
 async function readStdin() {
@@ -328,7 +328,7 @@ function registerExecApprovalsCli(program) {
 			if (!opts.file && !opts.stdin) exitWithError("Provide --file or --stdin.");
 			if (opts.file && opts.stdin) exitWithError("Use either --file or --stdin (not both).");
 			const { source, nodeId, targetLabel, baseHash } = await loadWritableSnapshotTarget(opts);
-			const raw = opts.stdin ? await readStdin() : await fsPromises.readFile(String(opts.file), "utf8");
+			const raw = opts.stdin ? await readStdin() : await fs.readFile(String(opts.file), "utf8");
 			let file;
 			try {
 				file = JSON5.parse(raw);

package/dist/{exec-safe-bin-runtime-policy-DYXuBKqH.js → exec-safe-bin-runtime-policy-DaoU9-ni.js}

@@ -1,5 +1,5 @@
-import { $n as normalizeSafeBinProfileFixtures, An as listWritableExplicitTrustedSafeBinDirs, On as getTrustedSafeBinDirs, er as resolveSafeBinProfiles, jn as normalizeTrustedSafeBinDirs } from "./model-selection-CSn9tUuH.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-8AkOwwIr.js";
+import { $n as normalizeSafeBinProfileFixtures, An as listWritableExplicitTrustedSafeBinDirs, On as getTrustedSafeBinDirs, er as resolveSafeBinProfiles, jn as normalizeTrustedSafeBinDirs } from "./model-selection-0dGxYGp8.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-Co2tJSEo.js";
 
 //#region src/infra/exec-safe-bin-runtime-policy.ts
 const INTERPRETER_LIKE_SAFE_BINS = new Set([

package/dist/extensionAPI.js

@@ -9,7 +9,7 @@ import "./github-copilot-token-D50c466d.js";
 import "./env-BpvqFD5n.js";
 import "./dock-QcCdS4qA.js";
 import "./tokens-Cg4XNE3H.js";
-import { B as resolveAgentTimeoutMs, t as runEmbeddedPiAgent } from "./pi-embedded-DMx6rHVL.js";
+import { B as resolveAgentTimeoutMs, t as runEmbeddedPiAgent } from "./pi-embedded-o6Xj8V4C.js";
 import "./plugins-D-_jp4FO.js";
 import "./accounts-BwrguHMw.js";
 import "./bindings-hT7SPhiA.js";
@@ -62,6 +62,6 @@ import "./send-Cn2wvd3W.js";
 import "./resolve-route-BI3VjtwE.js";
 import "./proxy-CNZpb4NE.js";
 import "./replies-CqYEEgmA.js";
-import "./deps-DR1eh_L_.js";
+import "./deps-Ch6bZ8PI.js";
 
 export { DEFAULT_MODEL, DEFAULT_PROVIDER, ensureAgentWorkspace, loadSessionStore, resolveAgentDir, resolveAgentIdentity, resolveAgentTimeoutMs, resolveAgentWorkspaceDir, resolveSessionFilePath, resolveStorePath, resolveThinkingDefault, runEmbeddedPiAgent, saveSessionStore };

package/dist/{fetch-guard-CcfDZXe9.js → fetch-guard-iuQsIjqN.js}

@@ -1,4 +1,4 @@
-import { S as logWarn } from "./workspace-tAtkoD_r.js";
+import { S as logWarn } from "./workspace-DBFSzT6O.js";
 import { a as resolvePinnedHostnameWithPolicy, n as closeDispatcher, r as createPinnedDispatcher, t as SsrFBlockedError } from "./ssrf-CZeHDwVZ.js";
 import { t as bindAbortRelay } from "./fetch-timeout-3YYM8QuM.js";
 import { EnvHttpProxyAgent } from "undici";

package/dist/{frontmatter-pTUG4Sx_.js → frontmatter-BOudmHMS.js}

@@ -1,7 +1,7 @@
 import { t as parseBooleanValue } from "./boolean-CE7i9tBR.js";
 import { n as MANIFEST_KEY, t as LEGACY_MANIFEST_KEYS } from "./legacy-names-B4ZvHEmO.js";
 import path from "node:path";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import JSON5 from "json5";
 import YAML from "yaml";
 
@@ -93,7 +93,7 @@ function hasBinary(bin) {
 	for (const part of parts) for (const ext of extensions) {
 		const candidate = path.join(part, bin + ext);
 		try {
-			fs.accessSync(candidate, fs.constants.X_OK);
+			syncFs.accessSync(candidate, syncFs.constants.X_OK);
 			hasBinaryCache.set(bin, true);
 			return true;
 		} catch {}

package/dist/{fs-safe-2l05hI1Y.js → fs-safe-CYUaAFO9.js}

@@ -1,5 +1,5 @@
-import { A as isNotFoundPathError, E as sameFileIdentity, M as isSymlinkOpenError, j as isPathInside } from "./workspace-tAtkoD_r.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-BZmt6hFb.js";
+import { A as isNotFoundPathError, E as sameFileIdentity, M as isSymlinkOpenError, j as isPathInside } from "./workspace-DBFSzT6O.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-Cu1nXNMM.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { constants } from "node:fs";

package/dist/{fs-safe-DNFrxDS-.js → fs-safe-_JQUGpZf.js}

@@ -1,8 +1,8 @@
-import { d as isNotFoundPathError, f as isPathInside, p as isSymlinkOpenError, s as sameFileIdentity } from "./idlehands-root-DFL2GrNW.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-BCskHdfJ.js";
+import { d as isNotFoundPathError, f as isPathInside, p as isSymlinkOpenError, s as sameFileIdentity } from "./idlehands-root-B8cUs-5M.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-FXBVVTLw.js";
 import { constants } from "node:fs";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/fs-safe.ts
 var SafeOpenError = class extends Error {
@@ -19,20 +19,20 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function openVerifiedLocalFile(filePath, options) {
 	let handle;
 	try {
-		handle = await fsPromises.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fsPromises.realpath(filePath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -50,7 +50,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function openFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -94,7 +94,7 @@ async function readLocalFileSafely(params) {
 async function writeFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -111,10 +111,10 @@ async function writeFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fsPromises.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fsPromises.realpath(resolved);
+		const resolvedRealPath = await fs$1.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("invalid-path", "path escapes root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -123,19 +123,19 @@ async function writeFileWithinRoot(params) {
 	}
 	let handle;
 	try {
-		handle = await fsPromises.open(ioPath, OPEN_WRITE_FLAGS, 384);
+		handle = await fs$1.open(ioPath, OPEN_WRITE_FLAGS, 384);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("invalid-path", "symlink open blocked", { cause: err });
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(ioPath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(ioPath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
-		const realPath = await fsPromises.realpath(ioPath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(ioPath);
+		const realStat = await fs$1.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("invalid-path", "path escapes root");