@visorcraft/idlehands 4.2.3 → 4.2.5

package/dist/emergency-stop-zy54uJoE.js

@@ -0,0 +1,162 @@
+import "./paths-Cn44w-EB.js";
+import { M as logVerbose } from "./utils-CXzXXV2o.js";
+import "./thinking-EAliFiVK.js";
+import { An as formatAbortReplyText, Mn as stopSubagentsForRequester, Vn as clearSessionQueues, f as abortEmbeddedPiRun, jn as isAbortRequestText } from "./reply-DfRr_KdS.js";
+import "./agent-scope-RA0zXRpu.js";
+import "./subsystem-CGZX2PBV.js";
+import "./runtime-44j_X4Y6.js";
+import "./idlehands-root-B8cUs-5M.js";
+import "./exec-CKHMT0tZ.js";
+import "./model-selection-0dGxYGp8.js";
+import "./github-copilot-token-D7lpquOO.js";
+import "./boolean-BsqeuxE6.js";
+import "./env-Bx-F45X5.js";
+import "./host-env-security-DkAVVuaw.js";
+import "./env-vars-sTMVGyld.js";
+import "./manifest-registry-Bak1x76G.js";
+import "./dock-Y96MzKuM.js";
+import "./message-channel-DVauVtrg.js";
+import "./send-DwdHiC7_.js";
+import "./runner-DzszLzI4.js";
+import "./image-DSDEbSiO.js";
+import "./models-config-C5A1wDWh.js";
+import "./pi-model-discovery-BIP3RjXl.js";
+import "./pi-embedded-helpers-BCsfqpDt.js";
+import "./sandbox-DcUw5h3p.js";
+import "./tool-catalog-4_Wxc542.js";
+import "./chrome-VBsQfIrt.js";
+import "./tailscale-B5Irc_Bi.js";
+import "./ip-DJ5wsTQn.js";
+import "./tailnet-C9lH_YnG.js";
+import "./ws-XBTtYpJc.js";
+import "./auth-heRVBxh2.js";
+import "./server-context-DI0W_H7R.js";
+import "./frontmatter-D-sQ_Hqk.js";
+import "./skills-DlvDyK8L.js";
+import "./path-alias-guards-FXBVVTLw.js";
+import "./paths-B-CLQ5RT.js";
+import "./redact-B_4KNlXs.js";
+import "./errors-DZDuPc3M.js";
+import "./fs-safe-_JQUGpZf.js";
+import "./ssrf-Dw9zzKSM.js";
+import "./image-ops-BU-VdLZu.js";
+import "./store-kH9wHHbO.js";
+import "./ports-SQy1d-RL.js";
+import "./trash-CUFiyQN5.js";
+import "./server-middleware-BC21xYvr.js";
+import { c as loadSessionStore } from "./sessions-BtPXimXQ.js";
+import "./plugins-D46VZh7u.js";
+import "./accounts-DLTODa_Z.js";
+import "./accounts-3HS_UAhJ.js";
+import "./accounts-DgbTKQoW.js";
+import "./bindings-B59Q7nsk.js";
+import "./logging-q4KyMmY-.js";
+import "./auth-store-DDzIMy8_.js";
+import "./send-DuwdEkLw.js";
+import { r as resolveDefaultSessionStorePath } from "./paths-DRz46q00.js";
+import "./chat-envelope-Bebo3vwl.js";
+import "./tool-images-CHqepyF_.js";
+import "./tool-display-Dac7lHGW.js";
+import "./fetch-guard-yUZu1Vzc.js";
+import "./api-key-rotation-B-FTJm5p.js";
+import "./local-roots-q0xbefkf.js";
+import "./model-catalog-D9no0CH2.js";
+import "./tokens-Dg-QZ_pN.js";
+import "./deliver--kttnrER.js";
+import "./commands-Dj5LalLo.js";
+import "./commands-registry-CURlRZQJ.js";
+import "./client-DtnD-ee9.js";
+import "./call-BpWhjuOg.js";
+import "./pairing-token-lKXTMQ_M.js";
+import "./fetch-CYe1ekSh.js";
+import "./retry-Db05aSB8.js";
+import "./pairing-store-CPpEEQJO.js";
+import "./exec-approvals-C2s2dPha.js";
+import "./exec-approvals-allowlist-Co2tJSEo.js";
+import "./exec-safe-bin-runtime-policy-DaoU9-ni.js";
+import "./nodes-screen-CcpPaFxa.js";
+import "./target-errors-bLIVFsbF.js";
+import "./diagnostic-session-state-CJHdRyOy.js";
+import "./with-timeout-DEdycYxq.js";
+import "./diagnostic-ByHpt6q8.js";
+import "./send--lzpNy4f.js";
+import "./model-C-icShH2.js";
+import "./reply-prefix-C3y4zpTl.js";
+import "./memory-cli-CUGwnVIY.js";
+import "./manager-BMAFgXyU.js";
+import "./query-expansion-Clts_AGz.js";
+import "./chunk-ClMFHJu-.js";
+import "./markdown-tables-DZClqsNo.js";
+import "./ir-VncGpwA1.js";
+import "./render-DC4qnRqG.js";
+import "./pi-tools.policy-DfITIKZj.js";
+import "./channel-activity-DaCsrdWK.js";
+import "./tables-g9xkflht.js";
+import "./send-C4v0Leny.js";
+import "./proxy-yk1Oqe9p.js";
+import "./links-15764jZB.js";
+import "./cli-utils-CH2y4E2f.js";
+import "./help-format-CMAqOikG.js";
+import "./progress-BQLz1r3L.js";
+import "./resolve-route-D_AbcmD6.js";
+import "./replies-hSFVxL4h.js";
+import "./skill-commands-BFzmZAfo.js";
+import "./workspace-dirs-SsExQ3Bz.js";
+import "./deps-IpeS3x5O.js";
+import "./plugin-auto-enable-7DUxMy6A.js";
+import "./channel-selection-ZxRkxpuF.js";
+import "./outbound-attachment-Bot3bRnK.js";
+import "./delivery-queue-BvDRo8CK.js";
+import "./session-cost-usage-DS1rjzML.js";
+import "./send-DQiw_nGD.js";
+import "./onboard-helpers-mzy38DiC.js";
+import "./prompt-style-kmKiCZnm.js";
+import "./pairing-labels-ChQJzbS9.js";
+import "./server-lifecycle-B5PlrlbG.js";
+import "./stagger-rQoQSWkz.js";
+import "./system-run-command-qJdgzxLp.js";
+
+//#region src/auto-reply/reply/emergency-stop.ts
+/**
+* Emergency stop — bypass all queues and debouncing.
+* Called at the earliest ingress point (before debouncer) to guarantee immediate execution.
+*/
+/**
+* Execute an emergency stop for a session.
+* Clears all queues, aborts embedded runs, and stops subagents.
+* Returns the reply text to send to the user.
+*/
+function emergencyStop(params) {
+	const { cfg, sessionKey, sessionId } = params;
+	const cleared = clearSessionQueues([sessionKey, sessionId]);
+	if (cleared.followupCleared > 0 || cleared.laneCleared > 0) logVerbose(`emergency-stop: cleared followups=${cleared.followupCleared} lane=${cleared.laneCleared} keys=${cleared.keys.join(",")}`);
+	if (sessionId) abortEmbeddedPiRun(sessionId);
+	const { stopped } = stopSubagentsForRequester({
+		cfg,
+		requesterSessionKey: sessionKey
+	});
+	logVerbose(`emergency-stop: sessionKey=${sessionKey} sessionId=${sessionId} stoppedSubagents=${stopped}`);
+	return {
+		aborted: true,
+		replyText: formatAbortReplyText(stopped),
+		sessionKey
+	};
+}
+/**
+* Resolve session info from the session store for emergency stop.
+* Lightweight — just reads the store, no locks.
+*/
+function resolveSessionForEmergencyStop(sessionKey) {
+	try {
+		const store = loadSessionStore(resolveDefaultSessionStorePath());
+		return {
+			sessionId: store[sessionKey]?.sessionId,
+			store
+		};
+	} catch {
+		return {};
+	}
+}
+
+//#endregion
+export { emergencyStop, isAbortRequestText, resolveSessionForEmergencyStop };

package/dist/{enable-ztZSnOGv.js → enable-o_s6PBsC.js}

@@ -1,5 +1,5 @@
-import { y as normalizeChatChannelId } from "./subsystem-BTkYq-SM.js";
-import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-CU8IfpBV.js";
+import { y as normalizeChatChannelId } from "./subsystem-CGZX2PBV.js";
+import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-7DUxMy6A.js";
 
 //#region src/plugins/toggle-config.ts
 function setPluginEnabledInConfig(config, pluginId, enabled) {

package/dist/entry.js

@@ -2566,7 +2566,7 @@ if (!isMainModule({
 			applyCliProfileEnv({ profile: parsed.profile });
 			process$1.argv = parsed.argv;
 		}
-		import("./run-main-xc_0T201.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
+		import("./run-main-Bj-8MZGb.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
 			console.error("[idlehands] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 			process$1.exitCode = 1;
 		});

package/dist/{env-q-PhWbb_.js → env-B5G1qwGc.js}

@@ -1,4 +1,4 @@
-import { t as createSubsystemLogger } from "./subsystem-D7ZepYT1.js";
+import { t as createSubsystemLogger } from "./subsystem-tzu-rIAJ.js";
 import { t as parseBooleanValue } from "./boolean-CE7i9tBR.js";
 
 //#region src/infra/env.ts

package/dist/{env-dMo-pLSc.js → env-Bx-F45X5.js}

@@ -1,4 +1,4 @@
-import { t as createSubsystemLogger } from "./subsystem-BTkYq-SM.js";
+import { t as createSubsystemLogger } from "./subsystem-CGZX2PBV.js";
 import { t as parseBooleanValue } from "./boolean-BsqeuxE6.js";
 
 //#region src/infra/env.ts

package/dist/{errors-C4SHjIZK.js → errors-C_0nm4TJ.js}

@@ -1,4 +1,4 @@
-import { t as redactSensitiveText } from "./redact-1Y0KPNtr.js";
+import { t as redactSensitiveText } from "./redact-Bvpf-ATQ.js";
 
 //#region src/infra/errors.ts
 function extractErrorCode(err) {

package/dist/{errors-BNr2qnai.js → errors-DZDuPc3M.js}

@@ -1,4 +1,4 @@
-import { n as redactSensitiveText } from "./redact-CIBM9Zli.js";
+import { n as redactSensitiveText } from "./redact-B_4KNlXs.js";
 
 //#region src/infra/errors.ts
 function extractErrorCode(err) {

package/dist/{exec-B9xbr2pN.js → exec-CKHMT0tZ.js}

@@ -1,5 +1,5 @@
-import { F as shouldLogVerbose, H as getLogger, L as warn, N as logVerboseConsole, O as danger, k as info } from "./utils-BfmeFj7S.js";
-import { t as createSubsystemLogger } from "./subsystem-BTkYq-SM.js";
+import { F as shouldLogVerbose, H as getLogger, L as warn, N as logVerboseConsole, O as danger, k as info } from "./utils-CXzXXV2o.js";
+import { t as createSubsystemLogger } from "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
 import path from "node:path";
 import { promisify } from "node:util";

package/dist/{exec-approvals-allowlist-BzsyDGgt.js → exec-approvals-allowlist-Co2tJSEo.js}

@@ -1,4 +1,4 @@
-import { Bn as resolveAllowlistCandidatePath, Gn as isDispatchWrapperExecutable, In as isWindowsPlatform, Kn as isShellWrapperExecutable, Ln as splitCommandChain, Mn as validateSafeBinArgv, Pn as analyzeShellCommand, Qn as SAFE_BIN_PROFILES, Rn as DEFAULT_SAFE_BINS, Un as extractShellWrapperInlineCommand, Vn as resolveCommandResolutionFromArgv, Xn as unwrapKnownShellMultiplexerInvocation, Yn as unwrapKnownDispatchWrapperInvocation, kn as isTrustedSafeBinPath, zn as matchAllowlist } from "./model-selection-Df4-bBn3.js";
+import { Bn as resolveAllowlistCandidatePath, Gn as isDispatchWrapperExecutable, In as isWindowsPlatform, Kn as isShellWrapperExecutable, Ln as splitCommandChain, Mn as validateSafeBinArgv, Pn as analyzeShellCommand, Qn as SAFE_BIN_PROFILES, Rn as DEFAULT_SAFE_BINS, Un as extractShellWrapperInlineCommand, Vn as resolveCommandResolutionFromArgv, Xn as unwrapKnownShellMultiplexerInvocation, Yn as unwrapKnownDispatchWrapperInvocation, kn as isTrustedSafeBinPath, zn as matchAllowlist } from "./model-selection-0dGxYGp8.js";
 import path from "node:path";
 
 //#region src/infra/exec-approvals-allowlist.ts

package/dist/{exec-approvals-cli-2SjGVbIm.js → exec-approvals-cli-D6XUzs4j.js}

@@ -1,36 +1,36 @@
 import "./paths-Cn44w-EB.js";
-import { B as theme, z as isRich } from "./utils-BfmeFj7S.js";
-import "./agent-scope-DbNnv10G.js";
-import "./subsystem-BTkYq-SM.js";
+import { B as theme, z as isRich } from "./utils-CXzXXV2o.js";
+import "./agent-scope-RA0zXRpu.js";
+import "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
 import "./idlehands-root-B8cUs-5M.js";
-import "./exec-B9xbr2pN.js";
-import "./model-selection-Df4-bBn3.js";
+import "./exec-CKHMT0tZ.js";
+import "./model-selection-0dGxYGp8.js";
 import "./github-copilot-token-D7lpquOO.js";
 import "./boolean-BsqeuxE6.js";
-import "./env-dMo-pLSc.js";
+import "./env-Bx-F45X5.js";
 import "./host-env-security-DkAVVuaw.js";
 import "./env-vars-sTMVGyld.js";
-import "./manifest-registry-cOeAg4W6.js";
-import "./message-channel-CRSTffWx.js";
+import "./manifest-registry-Bak1x76G.js";
+import "./message-channel-DVauVtrg.js";
 import "./ip-DJ5wsTQn.js";
 import "./tailnet-C9lH_YnG.js";
 import "./ws-XBTtYpJc.js";
-import "./client-Cagiy1nE.js";
-import "./call-SK4sGwpN.js";
+import "./client-DtnD-ee9.js";
+import "./call-BpWhjuOg.js";
 import "./pairing-token-lKXTMQ_M.js";
 import { n as formatTimeAgo } from "./format-relative-DcQZUAYl.js";
 import { c as readExecApprovalsSnapshot, p as saveExecApprovals } from "./exec-approvals-C2s2dPha.js";
-import "./exec-approvals-allowlist-BzsyDGgt.js";
-import { t as formatDocsLink } from "./links-DIG3qrf5.js";
-import "./progress-BN8aygvh.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-C_He5poS.js";
-import "./systemd-C9CCJ2y5.js";
-import "./service-fKr0VnMd.js";
-import { t as renderTable } from "./table-PG064F0C.js";
-import { t as describeUnknownError } from "./shared-pSfUCPxh.js";
-import { i as resolveNodeId, r as nodesCallOpts } from "./rpc-Dp_JZNAZ.js";
-import json5 from "json5";
+import "./exec-approvals-allowlist-Co2tJSEo.js";
+import { t as formatDocsLink } from "./links-15764jZB.js";
+import "./progress-BQLz1r3L.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-BBFG1T-M.js";
+import "./systemd-CaCR5CyM.js";
+import "./service-C8NMS3m_.js";
+import { t as renderTable } from "./table-B9AmL3M1.js";
+import { t as describeUnknownError } from "./shared-DpLSpJIl.js";
+import { i as resolveNodeId, r as nodesCallOpts } from "./rpc-Cf9OK5Yk.js";
+import JSON5 from "json5";
 import fs from "node:fs/promises";
 
 //#region src/cli/exec-approvals-cli.ts
@@ -331,7 +331,7 @@ function registerExecApprovalsCli(program) {
 			const raw = opts.stdin ? await readStdin() : await fs.readFile(String(opts.file), "utf8");
 			let file;
 			try {
-				file = json5.parse(raw);
+				file = JSON5.parse(raw);
 			} catch (err) {
 				exitWithError(`Failed to parse approvals JSON: ${String(err)}`);
 			}

package/dist/{exec-safe-bin-runtime-policy-bEV0LvVh.js → exec-safe-bin-runtime-policy-DaoU9-ni.js}

@@ -1,5 +1,5 @@
-import { $n as normalizeSafeBinProfileFixtures, An as listWritableExplicitTrustedSafeBinDirs, On as getTrustedSafeBinDirs, er as resolveSafeBinProfiles, jn as normalizeTrustedSafeBinDirs } from "./model-selection-Df4-bBn3.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-BzsyDGgt.js";
+import { $n as normalizeSafeBinProfileFixtures, An as listWritableExplicitTrustedSafeBinDirs, On as getTrustedSafeBinDirs, er as resolveSafeBinProfiles, jn as normalizeTrustedSafeBinDirs } from "./model-selection-0dGxYGp8.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-Co2tJSEo.js";
 
 //#region src/infra/exec-safe-bin-runtime-policy.ts
 const INTERPRETER_LIKE_SAFE_BINS = new Set([

package/dist/extensionAPI.js

@@ -9,14 +9,14 @@ import "./github-copilot-token-D50c466d.js";
 import "./env-BpvqFD5n.js";
 import "./dock-QcCdS4qA.js";
 import "./tokens-Cg4XNE3H.js";
-import { B as resolveAgentTimeoutMs, t as runEmbeddedPiAgent } from "./pi-embedded-E9CG0AZO.js";
+import { B as resolveAgentTimeoutMs, t as runEmbeddedPiAgent } from "./pi-embedded-0YMQWOc5.js";
 import "./plugins-D-_jp4FO.js";
 import "./accounts-BwrguHMw.js";
 import "./bindings-hT7SPhiA.js";
 import "./auth-store-D1JaYlig.js";
 import "./send-J10cQN4A.js";
 import "./send-DLZt92Da.js";
-import "./deliver-whAbSPLk.js";
+import "./deliver-5FLCa6tB.js";
 import "./diagnostic-jHCdo9Am.js";
 import "./diagnostic-session-state-Bx2Le86J.js";
 import "./accounts-BRVjft5i.js";
@@ -24,8 +24,8 @@ import "./send-Dd4xdAHf.js";
 import "./image-ops-BDG-MYYV.js";
 import "./pi-model-discovery-Dic-M5qw.js";
 import "./message-channel-DqqfOIdx.js";
-import "./pi-embedded-helpers-Ct2rwp-P.js";
-import "./chrome-Do5potHV.js";
+import "./pi-embedded-helpers-C2j0LfJC.js";
+import "./chrome-DEnkfZ9p.js";
 import "./ssrf-DappnhDp.js";
 import "./skills-nQcWk6Z6.js";
 import "./path-alias-guards-CGbCFqW8.js";
@@ -38,7 +38,7 @@ import "./accounts-CBoBCTgA.js";
 import { i as resolveSessionFilePath, u as resolveStorePath } from "./paths-vOrMwCEQ.js";
 import "./tool-images-CpZSs-zE.js";
 import "./thinking-BFsWfunr.js";
-import "./image-BAsQlUqT.js";
+import "./image-C_aN5P6-.js";
 import "./manager-DYOflU5p.js";
 import "./gemini-auth-m2hi6OmF.js";
 import "./fetch-guard-BdCPmLBP.js";
@@ -52,7 +52,7 @@ import "./ir-BwkcXPZC.js";
 import "./render-Ddkk6wf8.js";
 import "./commands-registry-1-Rv2-IS.js";
 import "./skill-commands-CHpRgsOw.js";
-import "./runner-Bv_BA3vd.js";
+import "./runner-CZW_eyf2.js";
 import "./fetch-ChVgjTkv.js";
 import "./channel-activity-C3LJmSjf.js";
 import "./tables-CJKtUpY0.js";
@@ -62,6 +62,6 @@ import "./send-Cn2wvd3W.js";
 import "./resolve-route-BI3VjtwE.js";
 import "./proxy-CNZpb4NE.js";
 import "./replies-CqYEEgmA.js";
-import "./deps-c-x2UBbd.js";
+import "./deps-CDLYb9a7.js";
 
 export { DEFAULT_MODEL, DEFAULT_PROVIDER, ensureAgentWorkspace, loadSessionStore, resolveAgentDir, resolveAgentIdentity, resolveAgentTimeoutMs, resolveAgentWorkspaceDir, resolveSessionFilePath, resolveStorePath, resolveThinkingDefault, runEmbeddedPiAgent, saveSessionStore };

package/dist/{fetch-guard-CcfDZXe9.js → fetch-guard-iuQsIjqN.js}

@@ -1,4 +1,4 @@
-import { S as logWarn } from "./workspace-tAtkoD_r.js";
+import { S as logWarn } from "./workspace-DBFSzT6O.js";
 import { a as resolvePinnedHostnameWithPolicy, n as closeDispatcher, r as createPinnedDispatcher, t as SsrFBlockedError } from "./ssrf-CZeHDwVZ.js";
 import { t as bindAbortRelay } from "./fetch-timeout-3YYM8QuM.js";
 import { EnvHttpProxyAgent } from "undici";

package/dist/{fetch-guard-C-IWepjW.js → fetch-guard-yUZu1Vzc.js}

@@ -1,4 +1,4 @@
-import { s as logWarn } from "./exec-B9xbr2pN.js";
+import { s as logWarn } from "./exec-CKHMT0tZ.js";
 import { a as resolvePinnedHostnameWithPolicy, n as closeDispatcher, r as createPinnedDispatcher, t as SsrFBlockedError } from "./ssrf-Dw9zzKSM.js";
 import { t as bindAbortRelay } from "./fetch-timeout-Tud5uP5n.js";
 import { EnvHttpProxyAgent } from "undici";

package/dist/{frontmatter-pTUG4Sx_.js → frontmatter-BOudmHMS.js}

@@ -1,7 +1,7 @@
 import { t as parseBooleanValue } from "./boolean-CE7i9tBR.js";
 import { n as MANIFEST_KEY, t as LEGACY_MANIFEST_KEYS } from "./legacy-names-B4ZvHEmO.js";
 import path from "node:path";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import JSON5 from "json5";
 import YAML from "yaml";
 
@@ -93,7 +93,7 @@ function hasBinary(bin) {
 	for (const part of parts) for (const ext of extensions) {
 		const candidate = path.join(part, bin + ext);
 		try {
-			fs.accessSync(candidate, fs.constants.X_OK);
+			syncFs.accessSync(candidate, syncFs.constants.X_OK);
 			hasBinaryCache.set(bin, true);
 			return true;
 		} catch {}

package/dist/{frontmatter-x0EBRtDF.js → frontmatter-D-sQ_Hqk.js}

@@ -2,7 +2,7 @@ import { t as parseBooleanValue } from "./boolean-BsqeuxE6.js";
 import { n as MANIFEST_KEY, t as LEGACY_MANIFEST_KEYS } from "./legacy-names-DB161qHh.js";
 import fs from "node:fs";
 import path from "node:path";
-import json5 from "json5";
+import JSON5 from "json5";
 import YAML from "yaml";
 
 //#region src/shared/config-eval.ts
@@ -224,7 +224,7 @@ function resolveIdleHandsManifestBlock(params) {
 	const raw = getFrontmatterString(params.frontmatter, params.key ?? "metadata");
 	if (!raw) return;
 	try {
-		const parsed = json5.parse(raw);
+		const parsed = JSON5.parse(raw);
 		if (!parsed || typeof parsed !== "object") return;
 		const manifestKeys = [MANIFEST_KEY, ...LEGACY_MANIFEST_KEYS];
 		for (const key of manifestKeys) {

package/dist/{fs-safe-2l05hI1Y.js → fs-safe-CYUaAFO9.js}

@@ -1,5 +1,5 @@
-import { A as isNotFoundPathError, E as sameFileIdentity, M as isSymlinkOpenError, j as isPathInside } from "./workspace-tAtkoD_r.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-BZmt6hFb.js";
+import { A as isNotFoundPathError, E as sameFileIdentity, M as isSymlinkOpenError, j as isPathInside } from "./workspace-DBFSzT6O.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-Cu1nXNMM.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { constants } from "node:fs";

package/dist/{gateway-cli-Bcamqq7Z.js → gateway-cli-E6DUzxEX.js}

@@ -28,7 +28,7 @@ import "./logging-Bgrm4o7g.js";
 import "./auth-store-D9BmR4S6.js";
 import "./send-m4lQkQcY.js";
 import "./send-CCiDIuX4.js";
-import { $n as stopSubagentsForRequester, A as createOutboundSendDeps, An as requestHeartbeatNow, Ar as clearAgentRunContext, At as normalizeHttpWebhookUrl, Bn as DEFAULT_INPUT_MAX_REDIRECTS, Bt as buildDeliveryFromLegacyPayload, C as computeBackoff, Cr as waitForActiveTasks, Ct as consumeRestartSentinel, Dn as isSystemEventContextChanged, Dt as summarizeRestartSentinel, E as agentCommand, En as enqueueSystemEvent, Fn as ACP_SESSION_IDENTITY_RENDERER_VERSION, Ft as normalizeOptionalSessionKey, Gn as resolveInputFileLimits, Gt as buildSafeExternalPrompt, Hn as extractFileContentFromSource, Ht as stripLegacyDeliveryFields, In as getAcpSessionManager, It as normalizeOptionalText, Jn as resolveSendPolicy, Jt as isExternalHookSession, Kn as resolveAgentTimeoutMs, Kt as detectSuspiciousPatterns, Ln as resolveAgentSessionDirs, Lt as normalizePayloadToSystemText, Mr as getAgentRunContext, Mt as normalizeCronJobPatch, Nr as onAgentEvent, Nt as inferLegacyName, O as resolveAgentDeliveryPlan, Pr as registerAgentRunContext, Pt as normalizeOptionalAgentId, Q as getTotalPendingReplies, Qn as isAbortRequestText, R as buildHistoryContextFromEntries, Rn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Rt as normalizeRequiredName, S as requestBodyErrorToText, Sr as setCommandLaneConcurrency, Tr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Tt as formatRestartSentinelMessage, Un as extractImageContentFromSource, Vn as DEFAULT_INPUT_TIMEOUT_MS, Vt as hasLegacyDeliveryHints, Wn as normalizeMimeList, X as dispatchInboundMessage, Xt as persistBrowserProxyFiles, Yt as applyBrowserProxyPaths, Z as createReplyDispatcher, Zt as resolveSessionAuthProfileOverride, _ as loadIdleHandsPlugins, _r as getActiveTaskCount, _t as resolveOutboundChannelPlugin, a as runSubagentAnnounceFlow, an as deferGatewayRestartUntilIdle, ar as isTtsEnabled, at as setCliSessionId, b as handleSlackHttpRequest, bn as buildOutboundSessionContext, br as markGatewayDraining, c as abortEmbeddedPiRun, cn as markGatewaySigusr1RestartHandled, cr as resolveTtsAutoMode, ct as readLatestAssistantReply, d as applyToolPolicyPipeline, dn as setPreRestartDeferralCheck, dr as resolveTtsProviderOrder, dt as ensureOutboundSessionEntry, f as buildDefaultToolPolicyPipelineSteps, fn as unbindThreadBindingsBySessionKey, fr as setTtsEnabled, ft as resolveOutboundSessionRoute, gr as OPENAI_TTS_VOICES, gt as resolveSessionDeliveryTarget, h as resolvePluginTools, hn as loadProviderUsageSummary, hr as OPENAI_TTS_MODELS, ht as resolveOutboundTarget, in as consumeGatewaySigusr1RestartAuthorization, ir as getTtsProvider, it as getCliSessionId, j as resolveAgentAvatar, jr as emitAgentEvent, jt as normalizeCronJobCreate, k as resolveAgentOutboundTarget, kr as stripHeartbeatToken, kt as writeRestartSentinel, l as getActiveEmbeddedRunCount, ln as scheduleGatewaySigusr1Restart, lr as resolveTtsConfig, lt as resolveAnnounceTargetFromKey, m as getPluginToolMeta, mr as textToSpeech, n as initSubagentRegistry, nn as applyVerboseOverride, nr as resolveUserTimezone, o as clearSessionQueues, on as emitGatewayRestart, or as isTtsProviderConfigured, ot as runCliAgent, pn as normalizeGroupActivation, pr as setTtsProvider, qn as normalizeSendPolicy, qt as getHookType, r as listDescendantRunsForRequester, rn as parseVerboseOverride, rr as clearBootstrapSnapshot, rt as resolveCronStyleNow, s as runEmbeddedPiAgent, sn as isGatewaySigusr1RestartExternallyAllowed, sr as resolveTtsApiKey, st as createIdleHandsTools, t as countActiveDescendantRuns, tn as applyModelOverrideToSessionEntry, tt as BARE_SESSION_RESET_PROMPT, u as waitForEmbeddedPiRunEnd, un as setGatewaySigusr1RestartPolicy, ur as resolveTtsPrefsPath, w as sleepWithAbort, wr as CommandLane, wt as formatDoctorNonInteractiveHint, x as readJsonBodyWithLimit, xn as formatZonedTimestamp, xr as resetAllLanes, xt as runWithModelFallback, yr as getTotalQueueSize, yt as resetDirectoryCache, zn as DEFAULT_INPUT_IMAGE_MIMES, zt as migrateLegacyCronPayload } from "./subagent-registry-CJX_DOgh.js";
+import { $n as stopSubagentsForRequester, A as createOutboundSendDeps, An as requestHeartbeatNow, Ar as clearAgentRunContext, At as normalizeHttpWebhookUrl, Bn as DEFAULT_INPUT_MAX_REDIRECTS, Bt as buildDeliveryFromLegacyPayload, C as computeBackoff, Cr as waitForActiveTasks, Ct as consumeRestartSentinel, Dn as isSystemEventContextChanged, Dt as summarizeRestartSentinel, E as agentCommand, En as enqueueSystemEvent, Fn as ACP_SESSION_IDENTITY_RENDERER_VERSION, Ft as normalizeOptionalSessionKey, Gn as resolveInputFileLimits, Gt as buildSafeExternalPrompt, Hn as extractFileContentFromSource, Ht as stripLegacyDeliveryFields, In as getAcpSessionManager, It as normalizeOptionalText, Jn as resolveSendPolicy, Jt as isExternalHookSession, Kn as resolveAgentTimeoutMs, Kt as detectSuspiciousPatterns, Ln as resolveAgentSessionDirs, Lt as normalizePayloadToSystemText, Mr as getAgentRunContext, Mt as normalizeCronJobPatch, Nr as onAgentEvent, Nt as inferLegacyName, O as resolveAgentDeliveryPlan, Pr as registerAgentRunContext, Pt as normalizeOptionalAgentId, Q as getTotalPendingReplies, Qn as isAbortRequestText, R as buildHistoryContextFromEntries, Rn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Rt as normalizeRequiredName, S as requestBodyErrorToText, Sr as setCommandLaneConcurrency, Tr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Tt as formatRestartSentinelMessage, Un as extractImageContentFromSource, Vn as DEFAULT_INPUT_TIMEOUT_MS, Vt as hasLegacyDeliveryHints, Wn as normalizeMimeList, X as dispatchInboundMessage, Xt as persistBrowserProxyFiles, Yt as applyBrowserProxyPaths, Z as createReplyDispatcher, Zt as resolveSessionAuthProfileOverride, _ as loadIdleHandsPlugins, _r as getActiveTaskCount, _t as resolveOutboundChannelPlugin, a as runSubagentAnnounceFlow, an as deferGatewayRestartUntilIdle, ar as isTtsEnabled, at as setCliSessionId, b as handleSlackHttpRequest, bn as buildOutboundSessionContext, br as markGatewayDraining, c as abortEmbeddedPiRun, cn as markGatewaySigusr1RestartHandled, cr as resolveTtsAutoMode, ct as readLatestAssistantReply, d as applyToolPolicyPipeline, dn as setPreRestartDeferralCheck, dr as resolveTtsProviderOrder, dt as ensureOutboundSessionEntry, f as buildDefaultToolPolicyPipelineSteps, fn as unbindThreadBindingsBySessionKey, fr as setTtsEnabled, ft as resolveOutboundSessionRoute, gr as OPENAI_TTS_VOICES, gt as resolveSessionDeliveryTarget, h as resolvePluginTools, hn as loadProviderUsageSummary, hr as OPENAI_TTS_MODELS, ht as resolveOutboundTarget, in as consumeGatewaySigusr1RestartAuthorization, ir as getTtsProvider, it as getCliSessionId, j as resolveAgentAvatar, jr as emitAgentEvent, jt as normalizeCronJobCreate, k as resolveAgentOutboundTarget, kr as stripHeartbeatToken, kt as writeRestartSentinel, l as getActiveEmbeddedRunCount, ln as scheduleGatewaySigusr1Restart, lr as resolveTtsConfig, lt as resolveAnnounceTargetFromKey, m as getPluginToolMeta, mr as textToSpeech, n as initSubagentRegistry, nn as applyVerboseOverride, nr as resolveUserTimezone, o as clearSessionQueues, on as emitGatewayRestart, or as isTtsProviderConfigured, ot as runCliAgent, pn as normalizeGroupActivation, pr as setTtsProvider, qn as normalizeSendPolicy, qt as getHookType, r as listDescendantRunsForRequester, rn as parseVerboseOverride, rr as clearBootstrapSnapshot, rt as resolveCronStyleNow, s as runEmbeddedPiAgent, sn as isGatewaySigusr1RestartExternallyAllowed, sr as resolveTtsApiKey, st as createIdleHandsTools, t as countActiveDescendantRuns, tn as applyModelOverrideToSessionEntry, tt as BARE_SESSION_RESET_PROMPT, u as waitForEmbeddedPiRunEnd, un as setGatewaySigusr1RestartPolicy, ur as resolveTtsPrefsPath, w as sleepWithAbort, wr as CommandLane, wt as formatDoctorNonInteractiveHint, x as readJsonBodyWithLimit, xn as formatZonedTimestamp, xr as resetAllLanes, xt as runWithModelFallback, yr as getTotalQueueSize, yt as resetDirectoryCache, zn as DEFAULT_INPUT_IMAGE_MIMES, zt as migrateLegacyCronPayload } from "./subagent-registry-BcpHnckA.js";
 import { a as resolveSessionFilePathOptions, i as resolveSessionFilePath, l as resolveSessionTranscriptsDirForAgent, o as resolveSessionTranscriptPath, u as resolveStorePath } from "./paths-CC17i2eK.js";
 import { i as normalizeInputProvenance } from "./input-provenance-iBlnbS1d.js";
 import "./chat-envelope-Dedaetiq.js";
@@ -115,7 +115,7 @@ import { n as runCommandWithRuntime } from "./cli-utils-BfsDuRZS.js";
 import { t as formatHelpExamples } from "./help-format-CldHB7lS.js";
 import { n as withProgress } from "./progress-B76RkFx7.js";
 import "./replies-DSfpze17.js";
-import { n as createOutboundSendDeps$1, t as createDefaultDeps } from "./deps-BH4bzzRD.js";
+import { n as createOutboundSendDeps$1, t as createDefaultDeps } from "./deps-BV_-fxNb.js";
 import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-DWivfzcc.js";
 import "./prompt-style-XmK49QYK.js";
 import "./pairing-labels-D7xcHkxi.js";
@@ -125,7 +125,7 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-B1XEiDxB.
 import { n as inheritOptionFromParent } from "./command-options-CK65DMbR.js";
 import { t as WizardCancelledError } from "./prompts-D3HHe1ZZ.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CIyuenBU.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DmFqh5v8.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-B_6rOTVW.js";
 import { t as isWithinDir } from "./path-safety-O-JjyFjj.js";
 import "./install-safe-path-C7y57-yb.js";
 import "./skill-scanner-CdLElD51.js";
@@ -146,19 +146,19 @@ import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } fr
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-KdaUmZfd.js";
 import { a as isNodeCommandAllowed, n as collectEnabledInsecureOrDangerousFlags, o as resolveNodeCommandAllowlist, s as probeGateway } from "./audit-C9PrbHng.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-xjvAm8hU.js";
-import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-CV7OIIGl.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-BTU1dGHH.js";
+import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-DxcdgCyX.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-D60h_a2w.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B5haX6bT.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-ofowt_yq.js";
 import { i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-BsH_IMcC.js";
-import { t as runOnboardingWizard } from "./onboarding-BfDz8n6H.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-CJJ-O5fL.js";
+import { t as runOnboardingWizard } from "./onboarding-CpGBbVTj.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-Dz4hOY07.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-U10Ul2gc.js";
 import "./node-service-v7Nz7h4D.js";
 import "./status.update-BzUu2M5c.js";
 import { a as matchSystemRunApprovalBindingV1, i as buildSystemRunApprovalBindingV1, n as resolveSystemRunApprovalRequestContext, o as missingSystemRunApprovalBindingV1, r as resolveSystemRunApprovalRuntimeContext, s as toSystemRunApprovalMismatchError } from "./system-run-approval-context-DkX3cprL.js";
 import { t as installSkill } from "./skills-install-DkQ2ndc6.js";
-import { t as runGatewayUpdate } from "./update-runner-BkSrWsKc.js";
+import { t as runGatewayUpdate } from "./update-runner-BGAdvd0c.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-Dj1dL0rI.js";
 import { n as forceFreePortAndWait } from "./ports-CIJavqzS.js";
 import { spawn, spawnSync } from "node:child_process";
@@ -12691,7 +12691,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-Dj5jYSln.js");
+			const { handleNodeEvent } = await import("./server-node-events-Benu2lR2.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,