@visorcraft/idlehands 4.3.0 → 4.4.0

package/dist/{gateway-cli-CQmvl7sG.js → gateway-cli-BmwR5tHy.js}

@@ -1,14 +1,14 @@
 import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-Cn44w-EB.js";
 import { B as theme, D as isPlainObject, E as truncateUtf16Safe, H as getLogger, M as logVerbose, P as setVerbose, R as colorize, S as shortenHomePath, U as getResolvedLoggerSettings, V as getChildLogger, c as ensureDir, r as clamp, y as resolveUserPath, z as isRich } from "./utils-CXzXXV2o.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-EAliFiVK.js";
-import { $ as normalizeOptionalAgentId, $n as resolveTtsAutoMode, $t as resolveAgentAvatar, A as resolveOutboundSessionRoute, B as setGatewaySigusr1RestartPolicy, Bn as buildOutboundSessionContext, Br as DEFAULT_INPUT_TIMEOUT_MS, Bt as createOutboundSendDeps, C as loadCombinedSessionStoreForGateway, Cn as formatZonedTimestamp, Cr as enqueueSystemEvent, D as resolveSessionModelRef, Dr as requestHeartbeatNow, Dt as requestBodyErrorToText, E as resolveGatewaySessionStoreTarget, En as getTotalPendingReplies, Et as readJsonBodyWithLimit, F as deferGatewayRestartUntilIdle, Fn as listDescendantRunsForRequester, Fr as normalizeSendPolicy, Gn as onAgentEvent, Gr as resolveAgentTimeoutMs, Gt as setCliSessionId, H as consumeRestartSentinel, Hn as clearAgentRunContext, Hr as extractImageContentFromSource, Ht as parseVerboseOverride, I as emitGatewayRestart, Ir as resolveSendPolicy, J as writeRestartSentinel, Jn as clearBootstrapSnapshot, K as summarizeRestartSentinel, Kn as registerAgentRunContext, Kt as runCliAgent, L as isGatewaySigusr1RestartExternallyAllowed, Ln as runSubagentAnnounceFlow, Lr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Lt as resolveOutboundTarget, M as resetDirectoryCache, Mn as stopSubagentsForRequester, Mr as ACP_SESSION_IDENTITY_RENDERER_VERSION, Nn as countActiveDescendantRuns, Nr as getAcpSessionManager, Nt as resolveAgentDeliveryPlan, Ot as computeBackoff, P as consumeGatewaySigusr1RestartAuthorization, Pn as initSubagentRegistry, Pr as resolveAgentSessionDirs, Pt as resolveAgentOutboundTarget, Q as inferLegacyName, Qn as resolveTtsApiKey, Qt as resolveSessionAuthProfileOverride, R as markGatewaySigusr1RestartHandled, Rn as resolveAnnounceTargetFromKey, Rr as DEFAULT_INPUT_IMAGE_MIMES, Rt as resolveSessionDeliveryTarget, S as listSessionsFromStore, T as pruneLegacyStoreKeys, Tn as createReplyDispatcher, Tt as handleSlackHttpRequest, U as formatDoctorNonInteractiveHint, Un as emitAgentEvent, Ur as normalizeMimeList, Ut as runWithModelFallback, V as setPreRestartDeferralCheck, Vn as clearSessionQueues, Vr as extractFileContentFromSource, Vt as applyVerboseOverride, W as formatRestartSentinelMessage, Wn as getAgentRunContext, Wr as resolveInputFileLimits, Wt as getCliSessionId, X as normalizeCronJobCreate, Xn as isTtsEnabled, Xt as lookupContextTokens, Y as normalizeHttpWebhookUrl, Yn as getTtsProvider, Yt as applyModelOverrideToSessionEntry, Z as normalizeCronJobPatch, Zn as isTtsProviderConfigured, _t as normalizeGroupActivation, an as getHookType, ar as textToSpeech, at as buildDeliveryFromLegacyPayload, br as stripHeartbeatToken, cr as getActiveTaskCount, d as runEmbeddedPiAgent, dn as buildHistoryContextFromEntries, dr as markGatewayDraining, dt as persistBrowserProxyFiles, er as resolveTtsConfig, et as normalizeOptionalSessionKey, f as abortEmbeddedPiRun, fr as resetAllLanes, ft as getPluginToolMeta, g as buildDefaultToolPolicyPipelineSteps, gr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, h as applyToolPolicyPipeline, hr as CommandLane, ht as loadIdleHandsPlugins, i as resolveCronStyleNow, in as detectSuspiciousPatterns, ir as setTtsProvider, it as migrateLegacyCronPayload, jn as isAbortRequestText, jt as agentCommand, k as ensureOutboundSessionEntry, kt as sleepWithAbort, m as waitForEmbeddedPiRunEnd, mr as waitForActiveTasks, n as BARE_SESSION_RESET_PROMPT, nr as resolveTtsProviderOrder, nt as normalizePayloadToSystemText, on as isExternalHookSession, or as OPENAI_TTS_MODELS, ot as hasLegacyDeliveryHints, p as getActiveEmbeddedRunCount, pr as setCommandLaneConcurrency, pt as resolvePluginTools, qn as resolveUserTimezone, rn as buildSafeExternalPrompt, rr as setTtsEnabled, rt as normalizeRequiredName, sn as unbindThreadBindingsBySessionKey, sr as OPENAI_TTS_VOICES, st as stripLegacyDeliveryFields, tr as resolveTtsPrefsPath, tt as normalizeOptionalText, ur as getTotalQueueSize, ut as applyBrowserProxyPaths, v as createIdleHandsTools, w as loadSessionEntry, wn as dispatchInboundMessage, wr as isSystemEventContextChanged, x as listAgentsForGateway, y as canonicalizeSpawnedByForAgent, yt as loadProviderUsageSummary, z as scheduleGatewaySigusr1Restart, zn as readLatestAssistantReply, zr as DEFAULT_INPUT_MAX_REDIRECTS, zt as resolveOutboundChannelPlugin } from "./reply-FU1dcyha.js";
+import { $ as normalizeOptionalAgentId, $n as resolveTtsAutoMode, $t as resolveAgentAvatar, A as resolveOutboundSessionRoute, B as setGatewaySigusr1RestartPolicy, Bn as buildOutboundSessionContext, Br as DEFAULT_INPUT_TIMEOUT_MS, Bt as createOutboundSendDeps, C as loadCombinedSessionStoreForGateway, Cn as formatZonedTimestamp, Cr as enqueueSystemEvent, D as resolveSessionModelRef, Dr as requestHeartbeatNow, Dt as requestBodyErrorToText, E as resolveGatewaySessionStoreTarget, En as getTotalPendingReplies, Et as readJsonBodyWithLimit, F as deferGatewayRestartUntilIdle, Fn as listDescendantRunsForRequester, Fr as normalizeSendPolicy, Gn as onAgentEvent, Gr as resolveAgentTimeoutMs, Gt as setCliSessionId, H as consumeRestartSentinel, Hn as clearAgentRunContext, Hr as extractImageContentFromSource, Ht as parseVerboseOverride, I as emitGatewayRestart, Ir as resolveSendPolicy, J as writeRestartSentinel, Jn as clearBootstrapSnapshot, K as summarizeRestartSentinel, Kn as registerAgentRunContext, Kt as runCliAgent, L as isGatewaySigusr1RestartExternallyAllowed, Ln as runSubagentAnnounceFlow, Lr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Lt as resolveOutboundTarget, M as resetDirectoryCache, Mn as stopSubagentsForRequester, Mr as ACP_SESSION_IDENTITY_RENDERER_VERSION, Nn as countActiveDescendantRuns, Nr as getAcpSessionManager, Nt as resolveAgentDeliveryPlan, Ot as computeBackoff, P as consumeGatewaySigusr1RestartAuthorization, Pn as initSubagentRegistry, Pr as resolveAgentSessionDirs, Pt as resolveAgentOutboundTarget, Q as inferLegacyName, Qn as resolveTtsApiKey, Qt as resolveSessionAuthProfileOverride, R as markGatewaySigusr1RestartHandled, Rn as resolveAnnounceTargetFromKey, Rr as DEFAULT_INPUT_IMAGE_MIMES, Rt as resolveSessionDeliveryTarget, S as listSessionsFromStore, T as pruneLegacyStoreKeys, Tn as createReplyDispatcher, Tt as handleSlackHttpRequest, U as formatDoctorNonInteractiveHint, Un as emitAgentEvent, Ur as normalizeMimeList, Ut as runWithModelFallback, V as setPreRestartDeferralCheck, Vn as clearSessionQueues, Vr as extractFileContentFromSource, Vt as applyVerboseOverride, W as formatRestartSentinelMessage, Wn as getAgentRunContext, Wr as resolveInputFileLimits, Wt as getCliSessionId, X as normalizeCronJobCreate, Xn as isTtsEnabled, Xt as lookupContextTokens, Y as normalizeHttpWebhookUrl, Yn as getTtsProvider, Yt as applyModelOverrideToSessionEntry, Z as normalizeCronJobPatch, Zn as isTtsProviderConfigured, _t as normalizeGroupActivation, an as getHookType, ar as textToSpeech, at as buildDeliveryFromLegacyPayload, br as stripHeartbeatToken, cr as getActiveTaskCount, d as runEmbeddedPiAgent, dn as buildHistoryContextFromEntries, dr as markGatewayDraining, dt as persistBrowserProxyFiles, er as resolveTtsConfig, et as normalizeOptionalSessionKey, f as abortEmbeddedPiRun, fr as resetAllLanes, ft as getPluginToolMeta, g as buildDefaultToolPolicyPipelineSteps, gr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, h as applyToolPolicyPipeline, hr as CommandLane, ht as loadIdleHandsPlugins, i as resolveCronStyleNow, in as detectSuspiciousPatterns, ir as setTtsProvider, it as migrateLegacyCronPayload, jn as isAbortRequestText, jt as agentCommand, k as ensureOutboundSessionEntry, kt as sleepWithAbort, m as waitForEmbeddedPiRunEnd, mr as waitForActiveTasks, n as BARE_SESSION_RESET_PROMPT, nr as resolveTtsProviderOrder, nt as normalizePayloadToSystemText, on as isExternalHookSession, or as OPENAI_TTS_MODELS, ot as hasLegacyDeliveryHints, p as getActiveEmbeddedRunCount, pr as setCommandLaneConcurrency, pt as resolvePluginTools, qn as resolveUserTimezone, rn as buildSafeExternalPrompt, rr as setTtsEnabled, rt as normalizeRequiredName, sn as unbindThreadBindingsBySessionKey, sr as OPENAI_TTS_VOICES, st as stripLegacyDeliveryFields, tr as resolveTtsPrefsPath, tt as normalizeOptionalText, ur as getTotalQueueSize, ut as applyBrowserProxyPaths, v as createIdleHandsTools, w as loadSessionEntry, wn as dispatchInboundMessage, wr as isSystemEventContextChanged, x as listAgentsForGateway, y as canonicalizeSpawnedByForAgent, yt as loadProviderUsageSummary, z as scheduleGatewaySigusr1Restart, zn as readLatestAssistantReply, zr as DEFAULT_INPUT_MAX_REDIRECTS, zt as resolveOutboundChannelPlugin } from "./reply-vDM22Gez.js";
 import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-RA0zXRpu.js";
 import { F as triggerInternalHook, M as clearInternalHooks, N as createInternalHookEvent, P as registerInternalHook, a as setConsoleSubsystemFilter, b as getActivePluginRegistry, d as CHANNEL_IDS, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger, w as createEmptyPluginRegistry } from "./subsystem-CGZX2PBV.js";
 import { n as defaultRuntime } from "./runtime-44j_X4Y6.js";
 import { C as isSubagentSessionKey, c as normalizeMainKey, f as toAgentRequestSessionKey, h as normalizeAccountId$1, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, o as classifySessionKeyShape, p as toAgentStoreSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, w as parseAgentSessionKey, x as isCronRunSessionKey } from "./session-key-Cuihcz_O.js";
 import { a as openBoundaryFileSync, d as isNotFoundPathError, i as openBoundaryFile, m as matchesSkillFilter, o as openVerifiedFileSync, s as sameFileIdentity, t as resolveIdleHandsPackageRoot } from "./idlehands-root-B8cUs-5M.js";
 import { i as logDebug, n as runExec, s as logWarn, t as runCommandWithTimeout } from "./exec-CKHMT0tZ.js";
-import { $r as DEFAULT_PROVIDER, Bt as resolveConfigSnapshotHash, Ft as createConfigIO, Ht as writeConfigFile, It as loadConfig, Lt as parseConfigJson5, Nt as migrateLegacyConfig, Qr as DEFAULT_MODEL, Rt as readConfigFileSnapshot, Ut as validateConfigObjectWithPlugins, Wr as normalizeSecretInput, Wt as IdleHandsSchema, Zr as DEFAULT_CONTEXT_TOKENS, _n as looksLikeAvatarPath, a as getModelRefStatus, cn as parseDurationMs, dr as buildTalkConfigResponse, f as resolveAllowedModelRef, fn as isAvatarHttpUrl, g as resolveHooksGmailModel, h as resolveDefaultModelForAgent, ln as parseByteSize, m as resolveConfiguredModelRef, mr as resolveSubagentMaxConcurrent, nr as applyLegacyMigrations, pn as isAvatarImageDataUrl, pr as resolveAgentMaxConcurrent, s as isCliProvider, t as buildAllowedModelSet, tr as applyMergePatch, un as AVATAR_MAX_BYTES, x as resolveThinkingDefault, y as resolveSubagentConfiguredModelSelection, zr as isPidAlive, zt as readConfigFileSnapshotForWrite } from "./model-selection-0dGxYGp8.js";
+import { $r as DEFAULT_PROVIDER, Bt as resolveConfigSnapshotHash, Ft as createConfigIO, Ht as writeConfigFile, It as loadConfig, Lt as parseConfigJson5, Nt as migrateLegacyConfig, Qr as DEFAULT_MODEL, Rt as readConfigFileSnapshot, Ut as validateConfigObjectWithPlugins, Wr as normalizeSecretInput, Wt as IdleHandsSchema, Zr as DEFAULT_CONTEXT_TOKENS, _n as looksLikeAvatarPath, a as getModelRefStatus, cn as parseDurationMs, dr as buildTalkConfigResponse, f as resolveAllowedModelRef, fn as isAvatarHttpUrl, g as resolveHooksGmailModel, h as resolveDefaultModelForAgent, ln as parseByteSize, m as resolveConfiguredModelRef, mr as resolveSubagentMaxConcurrent, nr as applyLegacyMigrations, pn as isAvatarImageDataUrl, pr as resolveAgentMaxConcurrent, s as isCliProvider, t as buildAllowedModelSet, tr as applyMergePatch, un as AVATAR_MAX_BYTES, x as resolveThinkingDefault, y as resolveSubagentConfiguredModelSelection, zr as isPidAlive, zt as readConfigFileSnapshotForWrite } from "./model-selection-BzMkl275.js";
 import "./github-copilot-token-D7lpquOO.js";
 import { t as formatCliCommand } from "./command-format-DInZLuZ8.js";
 import "./boolean-BsqeuxE6.js";
@@ -18,22 +18,22 @@ import { i as resolveRuntimeServiceVersion, r as VERSION } from "./env-vars-sTMV
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-Bak1x76G.js";
 import "./dock-Y96MzKuM.js";
 import { _ as normalizeGatewayClientMode, f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-DVauVtrg.js";
-import "./send-DwdHiC7_.js";
-import { d as registerUnhandledRejectionHandler } from "./runner-DzszLzI4.js";
-import { x as extractTextFromChatContent } from "./image-DSDEbSiO.js";
-import "./models-config-C5A1wDWh.js";
-import "./pi-model-discovery-BIP3RjXl.js";
-import "./pi-embedded-helpers-BCsfqpDt.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-DcUw5h3p.js";
+import "./send-CkbYe0pP.js";
+import { d as registerUnhandledRejectionHandler } from "./runner-B4uTxrBK.js";
+import { x as extractTextFromChatContent } from "./image-B-32uaKt.js";
+import "./models-config-CKIP_s6b.js";
+import "./pi-model-discovery-CjpIIOVJ.js";
+import "./pi-embedded-helpers-DYnSUWtr.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-DK406zbE.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-4_Wxc542.js";
-import "./chrome-VBsQfIrt.js";
+import "./chrome-rWfyHiLu.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-B5Irc_Bi.js";
 import { t as safeEqualSecret } from "./secret-equal-D_OXOV-d.js";
 import "./ip-DJ5wsTQn.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-C9lH_YnG.js";
 import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, p as resolveHostName, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-XBTtYpJc.js";
 import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-heRVBxh2.js";
-import { c as ensureGatewayStartupAuth, l as mergeGatewayTailscaleConfig } from "./server-context-DI0W_H7R.js";
+import { c as ensureGatewayStartupAuth, l as mergeGatewayTailscaleConfig } from "./server-context-CSswoHXT.js";
 import { d as hasBinary } from "./frontmatter-D-sQ_Hqk.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-DlvDyK8L.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-FXBVVTLw.js";
@@ -47,7 +47,7 @@ import "./store-kH9wHHbO.js";
 import { a as inspectPortUsage, l as formatPortDiagnostics, r as ensurePortAvailable } from "./ports-SQy1d-RL.js";
 import { t as movePathToTrash } from "./trash-CUFiyQN5.js";
 import "./server-middleware-BC21xYvr.js";
-import { $ as resolveExplicitAgentSessionKey, A as cleanupArchivedSessionTranscripts, C as mergeDeliveryContext, D as archiveFileOnDisk, F as stripEnvelopeFromMessage, H as evaluateSessionFreshness, I as stripEnvelopeFromMessages, J as mergeSessionEntry, M as readSessionPreviewItemsFromTranscript, O as archiveSessionTranscripts, P as resolveSessionTranscriptCandidates, Q as resolveAgentMainSessionKey, R as stripInlineDirectiveTagsForDisplay, T as normalizeSessionDeliveryFields, W as resolveSessionResetPolicy, X as setSessionRuntimeModel, Z as canonicalizeMainSessionAlias, c as loadSessionStore, et as resolveMainSessionKey, g as updateSessionStore, j as readSessionMessages, k as capArrayByJsonBytes, lt as cleanStaleLockFiles, n as extractDeliveryInfo, r as parseSessionThreadInfo, rt as snapshotSessionOrigin, tt as resolveMainSessionKeyFromConfig, x as deliveryContextFromSession, z as stripInlineDirectiveTagsFromMessageForDisplay } from "./sessions-BtPXimXQ.js";
+import { $ as resolveExplicitAgentSessionKey, A as cleanupArchivedSessionTranscripts, C as mergeDeliveryContext, D as archiveFileOnDisk, F as stripEnvelopeFromMessage, H as evaluateSessionFreshness, I as stripEnvelopeFromMessages, J as mergeSessionEntry, M as readSessionPreviewItemsFromTranscript, O as archiveSessionTranscripts, P as resolveSessionTranscriptCandidates, Q as resolveAgentMainSessionKey, R as stripInlineDirectiveTagsForDisplay, T as normalizeSessionDeliveryFields, W as resolveSessionResetPolicy, X as setSessionRuntimeModel, Z as canonicalizeMainSessionAlias, c as loadSessionStore, et as resolveMainSessionKey, g as updateSessionStore, j as readSessionMessages, k as capArrayByJsonBytes, lt as cleanStaleLockFiles, n as extractDeliveryInfo, r as parseSessionThreadInfo, rt as snapshotSessionOrigin, tt as resolveMainSessionKeyFromConfig, x as deliveryContextFromSession, z as stripInlineDirectiveTagsFromMessageForDisplay } from "./sessions-DUD0izIj.js";
 import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-D46VZh7u.js";
 import { i as resolveWhatsAppAccount } from "./accounts-DLTODa_Z.js";
 import "./accounts-3HS_UAhJ.js";
@@ -55,72 +55,72 @@ import "./accounts-DgbTKQoW.js";
 import { t as buildChannelAccountBindings } from "./bindings-B59Q7nsk.js";
 import "./logging-q4KyMmY-.js";
 import "./auth-store-DDzIMy8_.js";
-import "./send-DuwdEkLw.js";
+import "./send-WkuVWNS6.js";
 import { a as resolveSessionFilePathOptions, i as resolveSessionFilePath, l as resolveSessionTranscriptsDirForAgent, o as resolveSessionTranscriptPath, u as resolveStorePath } from "./paths-DRz46q00.js";
 import { i as normalizeInputProvenance } from "./input-provenance-CTnwu8Ge.js";
 import "./chat-envelope-Bebo3vwl.js";
 import "./tool-images-CHqepyF_.js";
 import "./tool-display-Dac7lHGW.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-yUZu1Vzc.js";
-import "./api-key-rotation-B-FTJm5p.js";
+import "./api-key-rotation-YdGMPTz0.js";
 import "./local-roots-q0xbefkf.js";
-import { n as loadModelCatalog } from "./model-catalog-D9no0CH2.js";
+import { n as loadModelCatalog } from "./model-catalog-DqObBjh3.js";
 import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-Dg-QZ_pN.js";
-import { S as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, w as runGlobalGatewayStopSafely } from "./deliver--kttnrER.js";
+import { S as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, w as runGlobalGatewayStopSafely } from "./deliver-C8qc5JkL.js";
 import { r as isRestartEnabled } from "./commands-Dj5LalLo.js";
-import "./commands-registry-CURlRZQJ.js";
+import "./commands-registry-CWCNmH14.js";
 import { $ as validateNodePairRejectParams, A as validateCronStatusParams, At as PROTOCOL_VERSION, B as validateExecApprovalsGetParams, Bt as getPairedDevice, C as validateConfigSetParams, Ct as validateWakeParams, D as validateCronRemoveParams, Dt as validateWizardNextParams, E as validateCronListParams, Et as validateWizardCancelParams, F as validateDevicePairRemoveParams, Ft as buildDeviceAuthPayload, G as validateModelsListParams, Gt as revokeDeviceToken, H as validateExecApprovalsNodeSetParams, Ht as rejectDevicePairing, I as validateDeviceTokenRevokeParams, It as buildDeviceAuthPayloadV3, J as validateNodeInvokeParams, Jt as updatePairedDeviceMetadata, K as validateNodeDescribeParams, Kt as rotateDeviceToken, L as validateDeviceTokenRotateParams, Lt as normalizeDeviceMetadataForAuth, M as validateDevicePairApproveParams, Mt as errorShape, N as validateDevicePairListParams, O as validateCronRunParams, Ot as validateWizardStartParams, P as validateDevicePairRejectParams, Pt as parseSessionLabel, Q as validateNodePairListParams, Qt as deriveDeviceIdFromPublicKey, R as validateExecApprovalRequestParams, Rt as approveDevicePairing, S as validateConfigSchemaParams, St as validateUpdateRunParams, T as validateCronAddParams, Tt as validateWebLoginWaitParams, U as validateExecApprovalsSetParams, Ut as removePairedDevice, V as validateExecApprovalsNodeGetParams, Vt as listDevicePairing, W as validateLogsTailParams, Wt as requestDevicePairing, X as validateNodeListParams, Xt as roleScopesAllow, Y as validateNodeInvokeResultParams, Yt as verifyDeviceToken, Z as validateNodePairApproveParams, _ as validateChatInjectParams, _t as validateSkillsStatusParams, a as validateAgentWaitParams, at as validateRequestFrame, b as validateConfigGetParams, bt as validateTalkModeParams, c as validateAgentsFilesGetParams, ct as validateSessionsDeleteParams, d as validateAgentsListParams, dt as validateSessionsPreviewParams, en as normalizeDevicePublicKeyBase64Url, et as validateNodePairRequestParams, f as validateAgentsUpdateParams, ft as validateSessionsResetParams, g as validateChatHistoryParams, gt as validateSkillsInstallParams, h as validateChatAbortParams, ht as validateSkillsBinsParams, i as validateAgentParams, it as validatePushTestParams, j as validateCronUpdateParams, jt as ErrorCodes, k as validateCronRunsParams, kt as validateWizardStatusParams, l as validateAgentsFilesListParams, lt as validateSessionsListParams, m as validateChannelsStatusParams, mt as validateSessionsUsageParams, n as formatValidationErrors, nt as validateNodeRenameParams, o as validateAgentsCreateParams, ot as validateSendParams, p as validateChannelsLogoutParams, pt as validateSessionsResolveParams, q as validateNodeEventParams, qt as summarizeDeviceTokens, r as validateAgentIdentityParams, rt as validatePollParams, s as validateAgentsDeleteParams, st as validateSessionsCompactParams, tn as verifyDeviceSignature, tt as validateNodePairVerifyParams, u as validateAgentsFilesSetParams, ut as validateSessionsPatchParams, v as validateChatSendParams, vt as validateSkillsUpdateParams, w as validateConnectParams, wt as validateWebLoginStartParams, x as validateConfigPatchParams, xt as validateToolsCatalogParams, y as validateConfigApplyParams, yt as validateTalkConfigParams, z as validateExecApprovalResolveParams, zt as ensureDeviceToken } from "./client-DtnD-ee9.js";
-import { f as loadGatewayTlsRuntime$1, l as authorizeOperatorScopesForMethod, n as callGateway, s as ADMIN_SCOPE$3, u as isNodeRoleMethod } from "./call-BpWhjuOg.js";
+import { f as loadGatewayTlsRuntime$1, l as authorizeOperatorScopesForMethod, n as callGateway, s as ADMIN_SCOPE$3, u as isNodeRoleMethod } from "./call-C8V5ivtz.js";
 import { c as readJsonFile, l as writeJsonAtomic, s as createAsyncLock } from "./pairing-token-lKXTMQ_M.js";
 import "./fetch-CYe1ekSh.js";
 import "./retry-Db05aSB8.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-CPpEEQJO.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-5ej7ieCd.js";
 import { a as mergeExecApprovalsSocketDefaults, c as readExecApprovalsSnapshot, p as saveExecApprovals, r as ensureExecApprovals, s as normalizeExecApprovals, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-C2s2dPha.js";
-import "./exec-approvals-allowlist-Co2tJSEo.js";
-import "./exec-safe-bin-runtime-policy-DaoU9-ni.js";
+import "./exec-approvals-allowlist-8sJfUTLW.js";
+import "./exec-safe-bin-runtime-policy-BrbwOxsh.js";
 import "./nodes-screen-CcpPaFxa.js";
 import { a as ToolInputError } from "./target-errors-bLIVFsbF.js";
 import "./diagnostic-session-state-CJHdRyOy.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-DEdycYxq.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-DCVS-tFj.js";
 import { f as startDiagnosticHeartbeat, h as isDiagnosticsEnabled, p as stopDiagnosticHeartbeat } from "./diagnostic-ByHpt6q8.js";
-import { d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send--lzpNy4f.js";
-import "./model-C-icShH2.js";
+import { d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-gOQxsu3X.js";
+import "./model-CMWITe66.js";
 import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-C3y4zpTl.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-CUGwnVIY.js";
-import { n as resolveMemorySearchConfig } from "./manager-BMAFgXyU.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-CVzU_J-C.js";
+import { n as resolveMemorySearchConfig } from "./manager-DvKWYP8R.js";
 import "./query-expansion-Clts_AGz.js";
 import "./chunk-ClMFHJu-.js";
 import "./markdown-tables-DZClqsNo.js";
 import "./ir-VncGpwA1.js";
 import "./render-DC4qnRqG.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-DfITIKZj.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BYXViqHJ.js";
 import { n as normalizePollInput } from "./polls-CGpoOVqd.js";
 import { t as getChannelActivity } from "./channel-activity-DaCsrdWK.js";
 import "./tables-g9xkflht.js";
-import "./send-C4v0Leny.js";
+import "./send-CcZKZfWf.js";
 import "./proxy-yk1Oqe9p.js";
 import { t as formatDocsLink } from "./links-15764jZB.js";
 import { n as runCommandWithRuntime } from "./cli-utils-CH2y4E2f.js";
 import { t as formatHelpExamples } from "./help-format-CMAqOikG.js";
 import { n as withProgress } from "./progress-BQLz1r3L.js";
 import "./resolve-route-D_AbcmD6.js";
-import "./replies-hSFVxL4h.js";
-import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-BFzmZAfo.js";
+import "./replies-Bt95GAew.js";
+import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-23SP2OFQ.js";
 import { t as listAgentWorkspaceDirs } from "./workspace-dirs-SsExQ3Bz.js";
-import { n as createOutboundSendDeps$1, t as createDefaultDeps } from "./deps-aEUIKhtw.js";
-import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-7DUxMy6A.js";
+import { n as createOutboundSendDeps$1, t as createDefaultDeps } from "./deps-SgroTRjf.js";
+import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-DyNeRjEL.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-ZxRkxpuF.js";
 import "./outbound-attachment-Bot3bRnK.js";
 import "./delivery-queue-BvDRo8CK.js";
 import { c as hasNonzeroUsage, i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, s as deriveSessionTotalTokens, t as discoverAllSessions } from "./session-cost-usage-DS1rjzML.js";
-import "./send-DQiw_nGD.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-mzy38DiC.js";
+import "./send-Bn6Z3ngH.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-Blxjx6R6.js";
 import "./prompt-style-kmKiCZnm.js";
-import "./pairing-labels-ChQJzbS9.js";
+import "./pairing-labels-DWdqhnXA.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-D1JXJKiz.js";
-import "./server-lifecycle-B5PlrlbG.js";
+import "./server-lifecycle-DMOhxIYC.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-rQoQSWkz.js";
-import { n as resolveSystemRunCommand } from "./system-run-command-qJdgzxLp.js";
+import { n as resolveSystemRunCommand } from "./system-run-command-P86Xjnl8.js";
 import { i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-CVWq9u04.js";
 import { t as ensureIdleHandsCliOnPath } from "./path-env-CKSLQUS1.js";
 import "./runtime-guard-X6f4YmTM.js";
@@ -130,39 +130,39 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-ulSRJzn7.
 import { n as inheritOptionFromParent } from "./command-options-D4MmqoOd.js";
 import { t as WizardCancelledError } from "./prompts-9ZBCWbQB.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-C6eW1WGZ.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BY5PHIXx.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BDQ4Bu0B.js";
 import { t as isWithinDir } from "./path-safety-DwibX65n.js";
 import "./install-safe-path-ChNR9pl6.js";
 import "./skill-scanner-D7mzXRXd.js";
 import { t as buildChannelAccountSnapshot } from "./status-D8Z2uvBM.js";
 import "./channels-status-issues-CDpWjdI3.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-BbEVKv0k.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-Dz__XA1n.js";
 import "./daemon-install-helpers-BZY9-jNW.js";
 import "./systemd-CaCR5CyM.js";
 import "./service-C8NMS3m_.js";
-import "./lifecycle-core-B6UoqYTJ.js";
+import "./lifecycle-core-dd6-ntqw.js";
 import "./systemd-hints-DHu-HVFx.js";
 import { t as parsePort$1 } from "./parse-port-l2c0Yyf3.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-DUg-s4LG.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-Bcl3Y7NQ.js";
 import "./diagnostics-DmZbQ8Nc.js";
 import "./table-B9AmL3M1.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-FDdFH5E8.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-DpLSpJIl.js";
-import { a as isNodeCommandAllowed, n as collectEnabledInsecureOrDangerousFlags, o as resolveNodeCommandAllowlist, s as probeGateway } from "./audit-CKeZnjft.js";
+import { a as isNodeCommandAllowed, n as collectEnabledInsecureOrDangerousFlags, o as resolveNodeCommandAllowlist, s as probeGateway } from "./audit-k9xjNToB.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-DMslm8Hx.js";
-import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-C80KAfkh.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-DydHrawb.js";
+import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-ZUnD4Pgf.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-DXbufVL-.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-C7ZpN9hN.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-CDbY5AIr.js";
-import { i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-XmXLaHNk.js";
-import { t as runOnboardingWizard } from "./onboarding-DH5sux_u.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-DKEkqP3i.js";
+import { i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-DkR7DBA9.js";
+import { t as runOnboardingWizard } from "./onboarding-BfAhtIYl.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-Cou7KeCj.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-DRJTQOMM.js";
 import "./node-service-C3vyxHLA.js";
 import "./status.update-CTi6vuWj.js";
-import { a as matchSystemRunApprovalBindingV1, i as buildSystemRunApprovalBindingV1, n as resolveSystemRunApprovalRequestContext, o as missingSystemRunApprovalBindingV1, r as resolveSystemRunApprovalRuntimeContext, s as toSystemRunApprovalMismatchError } from "./system-run-approval-context-CISBXlNw.js";
+import { a as matchSystemRunApprovalBindingV1, i as buildSystemRunApprovalBindingV1, n as resolveSystemRunApprovalRequestContext, o as missingSystemRunApprovalBindingV1, r as resolveSystemRunApprovalRuntimeContext, s as toSystemRunApprovalMismatchError } from "./system-run-approval-context-C5Al8NNk.js";
 import { t as installSkill } from "./skills-install-tr6wRWZj.js";
-import { t as runGatewayUpdate } from "./update-runner-ba7IRoZC.js";
+import { t as runGatewayUpdate } from "./update-runner-C44em-38.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-D3pARwoB.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
@@ -12694,7 +12694,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-D67Czp49.js");
+			const { handleNodeEvent } = await import("./server-node-events-CraqSZJR.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -15680,7 +15680,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.IDLEHANDS_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.IDLEHANDS_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-D6MltJIF.js");
+	const mod = override ? await import(override) : await import("./server-CTZVIJFZ.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -21360,7 +21360,7 @@ async function startGatewayServer(port = 1013, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-BvDRo8CK.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver--kttnrER.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-C8qc5JkL.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),

package/dist/{gateway-cli-BaZbmOxF.js → gateway-cli-Cx3sGYvO.js}

@@ -1,6 +1,6 @@
 import { n as defaultRuntime } from "./runtime-CgcH_FLo.js";
 import { A as createEmptyPluginRegistry, Bt as resolveGatewayLockDir, Ct as getChildLogger, E as getActivePluginRegistry, Ft as isNixMode, Jt as clearInternalHooks, Lt as resolveConfigPath, Mt as CONFIG_PATH, Pt as STATE_DIR, St as theme, Tt as getResolvedLoggerSettings, Vt as resolveGatewayPort, W as ensureDir, Xt as registerInternalHook, Yt as createInternalHookEvent, Zt as triggerInternalHook, _ as CHANNEL_IDS, bt as colorize, c as runtimeForLogger, ct as truncateUtf16Safe, d as setConsoleSubsystemFilter, f as setConsoleTimestampPrefix, gt as setVerbose, i as logAcceptedEnvOption, it as shortenHomePath, lt as isPlainObject, mt as logVerbose, qt as resolveStateDir, r as isTruthyEnvValue, s as createSubsystemLogger, tt as resolveUserPath, wt as getLogger, xt as isRich, z as clamp } from "./entry.js";
-import { A as createConfigIO, An as isPidAlive, F as resolveConfigSnapshotHash, Fn as getModelRefStatus, Gn as resolveDefaultModelForAgent, Hn as resolveAllowedModelRef, Jr as DEFAULT_CONTEXT_TOKENS, Kn as resolveHooksGmailModel, L as writeConfigFile, Ln as isCliProvider, M as parseConfigJson5, N as readConfigFileSnapshot, O as migrateLegacyConfig, P as readConfigFileSnapshotForWrite, R as validateConfigObjectWithPlugins, Vr as normalizeSecretInput, Wn as resolveConfiguredModelRef, Xr as DEFAULT_PROVIDER, Xt as applyMergePatch, Yn as resolveSubagentConfiguredModelSelection, Yr as DEFAULT_MODEL, Zn as resolveThinkingDefault, Zt as applyLegacyMigrations, at as AVATAR_MAX_BYTES, cn as resolveAgentMaxConcurrent, ct as isAvatarImageDataUrl, ft as looksLikeAvatarPath, it as parseByteSize, j as loadConfig, jn as buildAllowedModelSet, ln as resolveSubagentMaxConcurrent, on as buildTalkConfigResponse, rt as parseDurationMs, st as isAvatarHttpUrl, z as IdleHandsSchema } from "./auth-profiles-Baj5ImDJ.js";
+import { A as createConfigIO, An as isPidAlive, F as resolveConfigSnapshotHash, Fn as getModelRefStatus, Gn as resolveDefaultModelForAgent, Hn as resolveAllowedModelRef, Jr as DEFAULT_CONTEXT_TOKENS, Kn as resolveHooksGmailModel, L as writeConfigFile, Ln as isCliProvider, M as parseConfigJson5, N as readConfigFileSnapshot, O as migrateLegacyConfig, P as readConfigFileSnapshotForWrite, R as validateConfigObjectWithPlugins, Vr as normalizeSecretInput, Wn as resolveConfiguredModelRef, Xr as DEFAULT_PROVIDER, Xt as applyMergePatch, Yn as resolveSubagentConfiguredModelSelection, Yr as DEFAULT_MODEL, Zn as resolveThinkingDefault, Zt as applyLegacyMigrations, at as AVATAR_MAX_BYTES, cn as resolveAgentMaxConcurrent, ct as isAvatarImageDataUrl, ft as looksLikeAvatarPath, it as parseByteSize, j as loadConfig, jn as buildAllowedModelSet, ln as resolveSubagentMaxConcurrent, on as buildTalkConfigResponse, rt as parseDurationMs, st as isAvatarHttpUrl, z as IdleHandsSchema } from "./auth-profiles-02PVCKaE.js";
 import { t as formatCliCommand } from "./command-format-CPa5ksO_.js";
 import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-mLXQGQde.js";
 import { C as isSubagentSessionKey, c as normalizeMainKey, f as toAgentRequestSessionKey, h as normalizeAccountId$1, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, o as classifySessionKeyShape, p as toAgentStoreSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, w as parseAgentSessionKey, x as isCronRunSessionKey } from "./session-key-B9ePuoPx.js";
@@ -11,14 +11,14 @@ import "./host-env-security-VbAkcANc.js";
 import { i as resolveRuntimeServiceVersion, r as VERSION } from "./env-vars-I4LX5XSX.js";
 import { l as isTestDefaultMemorySlotDisabled } from "./manifest-registry-ChP7-gzj.js";
 import "./dock-Cp5t0hi-.js";
-import "./model-CZMeWx-m.js";
-import "./pi-model-discovery-DM-7bLbH.js";
+import "./model-CJrOUPDY.js";
+import "./pi-model-discovery-DSGYVXZ_.js";
 import { d as hasBinary } from "./frontmatter-Cm_k1mAa.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-oSnCizZL.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-DXNP6Ugi.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-DEWCCZdI.js";
 import { _ as normalizeGatewayClientMode, f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-Qpj4ExtQ.js";
-import { $ as canonicalizeMainSessionAlias, A as cleanupArchivedSessionTranscripts, C as mergeDeliveryContext, D as archiveFileOnDisk, F as stripEnvelopeFromMessage, I as stripEnvelopeFromMessages, K as resolveSessionResetPolicy, M as readSessionPreviewItemsFromTranscript, O as archiveSessionTranscripts, P as resolveSessionTranscriptCandidates, Q as setSessionRuntimeModel, R as stripInlineDirectiveTagsForDisplay, T as normalizeSessionDeliveryFields, V as cleanStaleLockFiles, W as evaluateSessionFreshness, X as mergeSessionEntry, at as snapshotSessionOrigin, c as loadSessionStore, et as resolveAgentMainSessionKey, g as updateSessionStore, j as readSessionMessages, k as capArrayByJsonBytes, n as extractDeliveryInfo, nt as resolveMainSessionKey, r as parseSessionThreadInfo, rt as resolveMainSessionKeyFromConfig, tt as resolveExplicitAgentSessionKey, x as deliveryContextFromSession, z as stripInlineDirectiveTagsFromMessageForDisplay } from "./sessions-BoqJKVEs.js";
+import { $ as canonicalizeMainSessionAlias, A as cleanupArchivedSessionTranscripts, C as mergeDeliveryContext, D as archiveFileOnDisk, F as stripEnvelopeFromMessage, I as stripEnvelopeFromMessages, K as resolveSessionResetPolicy, M as readSessionPreviewItemsFromTranscript, O as archiveSessionTranscripts, P as resolveSessionTranscriptCandidates, Q as setSessionRuntimeModel, R as stripInlineDirectiveTagsForDisplay, T as normalizeSessionDeliveryFields, V as cleanStaleLockFiles, W as evaluateSessionFreshness, X as mergeSessionEntry, at as snapshotSessionOrigin, c as loadSessionStore, et as resolveAgentMainSessionKey, g as updateSessionStore, j as readSessionMessages, k as capArrayByJsonBytes, n as extractDeliveryInfo, nt as resolveMainSessionKey, r as parseSessionThreadInfo, rt as resolveMainSessionKeyFromConfig, tt as resolveExplicitAgentSessionKey, x as deliveryContextFromSession, z as stripInlineDirectiveTagsFromMessageForDisplay } from "./sessions-C1PbgPkg.js";
 import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CCrfZ49T.js";
 import { i as resolveWhatsAppAccount } from "./accounts-nuNP3OfB.js";
 import "./accounts-frp6YB8O.js";
@@ -26,33 +26,33 @@ import "./accounts-COaz4Gk1.js";
 import { t as buildChannelAccountBindings } from "./bindings-Ch_2VM9i.js";
 import "./logging-Bgrm4o7g.js";
 import "./auth-store-D9BmR4S6.js";
-import "./send-m4lQkQcY.js";
-import "./send-CCiDIuX4.js";
-import { $n as stopSubagentsForRequester, A as createOutboundSendDeps, An as requestHeartbeatNow, Ar as clearAgentRunContext, At as normalizeHttpWebhookUrl, Bn as DEFAULT_INPUT_MAX_REDIRECTS, Bt as buildDeliveryFromLegacyPayload, C as computeBackoff, Cr as waitForActiveTasks, Ct as consumeRestartSentinel, Dn as isSystemEventContextChanged, Dt as summarizeRestartSentinel, E as agentCommand, En as enqueueSystemEvent, Fn as ACP_SESSION_IDENTITY_RENDERER_VERSION, Ft as normalizeOptionalSessionKey, Gn as resolveInputFileLimits, Gt as buildSafeExternalPrompt, Hn as extractFileContentFromSource, Ht as stripLegacyDeliveryFields, In as getAcpSessionManager, It as normalizeOptionalText, Jn as resolveSendPolicy, Jt as isExternalHookSession, Kn as resolveAgentTimeoutMs, Kt as detectSuspiciousPatterns, Ln as resolveAgentSessionDirs, Lt as normalizePayloadToSystemText, Mr as getAgentRunContext, Mt as normalizeCronJobPatch, Nr as onAgentEvent, Nt as inferLegacyName, O as resolveAgentDeliveryPlan, Pr as registerAgentRunContext, Pt as normalizeOptionalAgentId, Q as getTotalPendingReplies, Qn as isAbortRequestText, R as buildHistoryContextFromEntries, Rn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Rt as normalizeRequiredName, S as requestBodyErrorToText, Sr as setCommandLaneConcurrency, Tr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Tt as formatRestartSentinelMessage, Un as extractImageContentFromSource, Vn as DEFAULT_INPUT_TIMEOUT_MS, Vt as hasLegacyDeliveryHints, Wn as normalizeMimeList, X as dispatchInboundMessage, Xt as persistBrowserProxyFiles, Yt as applyBrowserProxyPaths, Z as createReplyDispatcher, Zt as resolveSessionAuthProfileOverride, _ as loadIdleHandsPlugins, _r as getActiveTaskCount, _t as resolveOutboundChannelPlugin, a as runSubagentAnnounceFlow, an as deferGatewayRestartUntilIdle, ar as isTtsEnabled, at as setCliSessionId, b as handleSlackHttpRequest, bn as buildOutboundSessionContext, br as markGatewayDraining, c as abortEmbeddedPiRun, cn as markGatewaySigusr1RestartHandled, cr as resolveTtsAutoMode, ct as readLatestAssistantReply, d as applyToolPolicyPipeline, dn as setPreRestartDeferralCheck, dr as resolveTtsProviderOrder, dt as ensureOutboundSessionEntry, f as buildDefaultToolPolicyPipelineSteps, fn as unbindThreadBindingsBySessionKey, fr as setTtsEnabled, ft as resolveOutboundSessionRoute, gr as OPENAI_TTS_VOICES, gt as resolveSessionDeliveryTarget, h as resolvePluginTools, hn as loadProviderUsageSummary, hr as OPENAI_TTS_MODELS, ht as resolveOutboundTarget, in as consumeGatewaySigusr1RestartAuthorization, ir as getTtsProvider, it as getCliSessionId, j as resolveAgentAvatar, jr as emitAgentEvent, jt as normalizeCronJobCreate, k as resolveAgentOutboundTarget, kr as stripHeartbeatToken, kt as writeRestartSentinel, l as getActiveEmbeddedRunCount, ln as scheduleGatewaySigusr1Restart, lr as resolveTtsConfig, lt as resolveAnnounceTargetFromKey, m as getPluginToolMeta, mr as textToSpeech, n as initSubagentRegistry, nn as applyVerboseOverride, nr as resolveUserTimezone, o as clearSessionQueues, on as emitGatewayRestart, or as isTtsProviderConfigured, ot as runCliAgent, pn as normalizeGroupActivation, pr as setTtsProvider, qn as normalizeSendPolicy, qt as getHookType, r as listDescendantRunsForRequester, rn as parseVerboseOverride, rr as clearBootstrapSnapshot, rt as resolveCronStyleNow, s as runEmbeddedPiAgent, sn as isGatewaySigusr1RestartExternallyAllowed, sr as resolveTtsApiKey, st as createIdleHandsTools, t as countActiveDescendantRuns, tn as applyModelOverrideToSessionEntry, tt as BARE_SESSION_RESET_PROMPT, u as waitForEmbeddedPiRunEnd, un as setGatewaySigusr1RestartPolicy, ur as resolveTtsPrefsPath, w as sleepWithAbort, wr as CommandLane, wt as formatDoctorNonInteractiveHint, x as readJsonBodyWithLimit, xn as formatZonedTimestamp, xr as resetAllLanes, xt as runWithModelFallback, yr as getTotalQueueSize, yt as resetDirectoryCache, zn as DEFAULT_INPUT_IMAGE_MIMES, zt as migrateLegacyCronPayload } from "./subagent-registry-dBsIIN3w.js";
+import "./send-CuXAB8LA.js";
+import "./send-lf9ld4To.js";
+import { $n as stopSubagentsForRequester, A as createOutboundSendDeps, An as requestHeartbeatNow, Ar as clearAgentRunContext, At as normalizeHttpWebhookUrl, Bn as DEFAULT_INPUT_MAX_REDIRECTS, Bt as buildDeliveryFromLegacyPayload, C as computeBackoff, Cr as waitForActiveTasks, Ct as consumeRestartSentinel, Dn as isSystemEventContextChanged, Dt as summarizeRestartSentinel, E as agentCommand, En as enqueueSystemEvent, Fn as ACP_SESSION_IDENTITY_RENDERER_VERSION, Ft as normalizeOptionalSessionKey, Gn as resolveInputFileLimits, Gt as buildSafeExternalPrompt, Hn as extractFileContentFromSource, Ht as stripLegacyDeliveryFields, In as getAcpSessionManager, It as normalizeOptionalText, Jn as resolveSendPolicy, Jt as isExternalHookSession, Kn as resolveAgentTimeoutMs, Kt as detectSuspiciousPatterns, Ln as resolveAgentSessionDirs, Lt as normalizePayloadToSystemText, Mr as getAgentRunContext, Mt as normalizeCronJobPatch, Nr as onAgentEvent, Nt as inferLegacyName, O as resolveAgentDeliveryPlan, Pr as registerAgentRunContext, Pt as normalizeOptionalAgentId, Q as getTotalPendingReplies, Qn as isAbortRequestText, R as buildHistoryContextFromEntries, Rn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Rt as normalizeRequiredName, S as requestBodyErrorToText, Sr as setCommandLaneConcurrency, Tr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Tt as formatRestartSentinelMessage, Un as extractImageContentFromSource, Vn as DEFAULT_INPUT_TIMEOUT_MS, Vt as hasLegacyDeliveryHints, Wn as normalizeMimeList, X as dispatchInboundMessage, Xt as persistBrowserProxyFiles, Yt as applyBrowserProxyPaths, Z as createReplyDispatcher, Zt as resolveSessionAuthProfileOverride, _ as loadIdleHandsPlugins, _r as getActiveTaskCount, _t as resolveOutboundChannelPlugin, a as runSubagentAnnounceFlow, an as deferGatewayRestartUntilIdle, ar as isTtsEnabled, at as setCliSessionId, b as handleSlackHttpRequest, bn as buildOutboundSessionContext, br as markGatewayDraining, c as abortEmbeddedPiRun, cn as markGatewaySigusr1RestartHandled, cr as resolveTtsAutoMode, ct as readLatestAssistantReply, d as applyToolPolicyPipeline, dn as setPreRestartDeferralCheck, dr as resolveTtsProviderOrder, dt as ensureOutboundSessionEntry, f as buildDefaultToolPolicyPipelineSteps, fn as unbindThreadBindingsBySessionKey, fr as setTtsEnabled, ft as resolveOutboundSessionRoute, gr as OPENAI_TTS_VOICES, gt as resolveSessionDeliveryTarget, h as resolvePluginTools, hn as loadProviderUsageSummary, hr as OPENAI_TTS_MODELS, ht as resolveOutboundTarget, in as consumeGatewaySigusr1RestartAuthorization, ir as getTtsProvider, it as getCliSessionId, j as resolveAgentAvatar, jr as emitAgentEvent, jt as normalizeCronJobCreate, k as resolveAgentOutboundTarget, kr as stripHeartbeatToken, kt as writeRestartSentinel, l as getActiveEmbeddedRunCount, ln as scheduleGatewaySigusr1Restart, lr as resolveTtsConfig, lt as resolveAnnounceTargetFromKey, m as getPluginToolMeta, mr as textToSpeech, n as initSubagentRegistry, nn as applyVerboseOverride, nr as resolveUserTimezone, o as clearSessionQueues, on as emitGatewayRestart, or as isTtsProviderConfigured, ot as runCliAgent, pn as normalizeGroupActivation, pr as setTtsProvider, qn as normalizeSendPolicy, qt as getHookType, r as listDescendantRunsForRequester, rn as parseVerboseOverride, rr as clearBootstrapSnapshot, rt as resolveCronStyleNow, s as runEmbeddedPiAgent, sn as isGatewaySigusr1RestartExternallyAllowed, sr as resolveTtsApiKey, st as createIdleHandsTools, t as countActiveDescendantRuns, tn as applyModelOverrideToSessionEntry, tt as BARE_SESSION_RESET_PROMPT, u as waitForEmbeddedPiRunEnd, un as setGatewaySigusr1RestartPolicy, ur as resolveTtsPrefsPath, w as sleepWithAbort, wr as CommandLane, wt as formatDoctorNonInteractiveHint, x as readJsonBodyWithLimit, xn as formatZonedTimestamp, xr as resetAllLanes, xt as runWithModelFallback, yr as getTotalQueueSize, yt as resetDirectoryCache, zn as DEFAULT_INPUT_IMAGE_MIMES, zt as migrateLegacyCronPayload } from "./subagent-registry-l7V3IoLe.js";
 import { a as resolveSessionFilePathOptions, i as resolveSessionFilePath, l as resolveSessionTranscriptsDirForAgent, o as resolveSessionTranscriptPath, u as resolveStorePath } from "./paths-CC17i2eK.js";
 import { i as normalizeInputProvenance } from "./input-provenance-iBlnbS1d.js";
 import "./chat-envelope-Dedaetiq.js";
 import { $ as validateNodePairRejectParams, A as validateCronStatusParams, At as PROTOCOL_VERSION, B as validateExecApprovalsGetParams, Bt as getPairedDevice, C as validateConfigSetParams, Ct as validateWakeParams, D as validateCronRemoveParams, Dt as validateWizardNextParams, E as validateCronListParams, Et as validateWizardCancelParams, F as validateDevicePairRemoveParams, Ft as buildDeviceAuthPayload, G as validateModelsListParams, Gt as revokeDeviceToken, H as validateExecApprovalsNodeSetParams, Ht as rejectDevicePairing, I as validateDeviceTokenRevokeParams, It as buildDeviceAuthPayloadV3, J as validateNodeInvokeParams, Jt as updatePairedDeviceMetadata, K as validateNodeDescribeParams, Kt as rotateDeviceToken, L as validateDeviceTokenRotateParams, Lt as normalizeDeviceMetadataForAuth, M as validateDevicePairApproveParams, Mt as errorShape, N as validateDevicePairListParams, O as validateCronRunParams, Ot as validateWizardStartParams, P as validateDevicePairRejectParams, Pt as parseSessionLabel, Q as validateNodePairListParams, Qt as deriveDeviceIdFromPublicKey, R as validateExecApprovalRequestParams, Rt as approveDevicePairing, S as validateConfigSchemaParams, St as validateUpdateRunParams, T as validateCronAddParams, Tt as validateWebLoginWaitParams, U as validateExecApprovalsSetParams, Ut as removePairedDevice, V as validateExecApprovalsNodeGetParams, Vt as listDevicePairing, W as validateLogsTailParams, Wt as requestDevicePairing, X as validateNodeListParams, Xt as roleScopesAllow, Y as validateNodeInvokeResultParams, Yt as verifyDeviceToken, Z as validateNodePairApproveParams, _ as validateChatInjectParams, _t as validateSkillsStatusParams, a as validateAgentWaitParams, at as validateRequestFrame, b as validateConfigGetParams, bt as validateTalkModeParams, c as validateAgentsFilesGetParams, ct as validateSessionsDeleteParams, d as validateAgentsListParams, dt as validateSessionsPreviewParams, en as normalizeDevicePublicKeyBase64Url, et as validateNodePairRequestParams, f as validateAgentsUpdateParams, ft as validateSessionsResetParams, g as validateChatHistoryParams, gt as validateSkillsInstallParams, h as validateChatAbortParams, ht as validateSkillsBinsParams, i as validateAgentParams, it as validatePushTestParams, j as validateCronUpdateParams, jt as ErrorCodes, k as validateCronRunsParams, kt as validateWizardStatusParams, l as validateAgentsFilesListParams, lt as validateSessionsListParams, m as validateChannelsStatusParams, mt as validateSessionsUsageParams, n as formatValidationErrors, nt as validateNodeRenameParams, o as validateAgentsCreateParams, ot as validateSendParams, p as validateChannelsLogoutParams, pt as validateSessionsResolveParams, q as validateNodeEventParams, qt as summarizeDeviceTokens, r as validateAgentIdentityParams, rt as validatePollParams, s as validateAgentsDeleteParams, st as validateSessionsCompactParams, tn as verifyDeviceSignature, tt as validateNodePairVerifyParams, u as validateAgentsFilesSetParams, ut as validateSessionsPatchParams, v as validateChatSendParams, vt as validateSkillsUpdateParams, w as validateConnectParams, wt as validateWebLoginStartParams, x as validateConfigPatchParams, xt as validateToolsCatalogParams, y as validateConfigApplyParams, yt as validateTalkConfigParams, z as validateExecApprovalResolveParams, zt as ensureDeviceToken } from "./client-udFMSDes.js";
-import { f as loadGatewayTlsRuntime$1, l as authorizeOperatorScopesForMethod, n as callGateway, s as ADMIN_SCOPE$3, u as isNodeRoleMethod } from "./call-C82rD2Wn.js";
+import { f as loadGatewayTlsRuntime$1, l as authorizeOperatorScopesForMethod, n as callGateway, s as ADMIN_SCOPE$3, u as isNodeRoleMethod } from "./call-B9uIa0hd.js";
 import { c as readJsonFile, l as writeJsonAtomic, s as createAsyncLock } from "./pairing-token-CnnKAS6M.js";
 import { t as safeEqualSecret } from "./secret-equal-D-d0uTPY.js";
 import { a as isTrustedProxyAddress, c as pickPrimaryLanIPv4, d as resolveGatewayListenHosts, f as resolveHostName, l as resolveClientIp, n as isLoopbackAddress, o as isValidIPv4, p as rawDataToString, r as isLoopbackHost, s as normalizeHostHeader, t as isLocalishHost, u as resolveGatewayBindHost } from "./net-CE_62H5R.js";
 import "./ip-Y1214nEL.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-DQgxklZD.js";
 import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-DMP8C42Q.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-B-p7asBh.js";
-import { S as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, w as runGlobalGatewayStopSafely } from "./deliver-UdfAQA1U.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-qsZTfZ5k.js";
+import { S as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, w as runGlobalGatewayStopSafely } from "./deliver-CaD3Q14j.js";
 import { f as startDiagnosticHeartbeat, h as isDiagnosticsEnabled, p as stopDiagnosticHeartbeat } from "./diagnostic-CwBjx9GY.js";
 import "./diagnostic-session-state-CNfPjPJ9.js";
-import { d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-PtDa6Pf-.js";
+import { d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-D2eoLkFV.js";
 import { c as detectMime } from "./image-ops-CBbjuX7X.js";
-import "./pi-embedded-helpers-BcqMIiDW.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-BQ8eMycK.js";
+import "./pi-embedded-helpers-CuaLvLFa.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-R6BNCb8U.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-yfpackKg.js";
-import "./chrome-RxW7_mFf.js";
+import "./chrome-DuNAHpiu.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-CQwGqfET.js";
 import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-BCVe2frw.js";
-import { c as ensureGatewayStartupAuth, l as mergeGatewayTailscaleConfig } from "./server-context-ti-OcXbo.js";
+import { c as ensureGatewayStartupAuth, l as mergeGatewayTailscaleConfig } from "./server-context-DhxP9N-Q.js";
 import "./paths-gENQkNu5.js";
 import { i as compileSafeRegex } from "./redact-BkZY0bCJ.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-p-ipELrD.js";
@@ -64,13 +64,13 @@ import { t as movePathToTrash } from "./trash-M8V8OXzs.js";
 import "./server-middleware-C1_m2rU5.js";
 import "./tool-images-B3wb2vnc.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-CI7EnPCW.js";
-import "./models-config-fDNEH4C5.js";
-import "./exec-approvals-allowlist-B5d4ftdY.js";
-import "./exec-safe-bin-runtime-policy-Ozk71zDl.js";
+import "./models-config-BXEhHPnv.js";
+import "./exec-approvals-allowlist-BZ4flSrM.js";
+import "./exec-safe-bin-runtime-policy-BcZ1Ocjd.js";
 import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-Cdjojoaw.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-C_qWFNVQ.js";
-import { n as resolveMemorySearchConfig } from "./manager-KsO7drKq.js";
-import "./gemini-auth-D8Wg8hYo.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-CpcWRUgi.js";
+import { n as resolveMemorySearchConfig } from "./manager-Dt6uRdqZ.js";
+import "./gemini-auth-BsD1tapx.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-CTA5mfzq.js";
 import "./query-expansion-BX-t5dhX.js";
 import "./retry-7zFfTAkR.js";
@@ -81,84 +81,84 @@ import "./local-roots-BOyzcwDx.js";
 import "./ir-DsPso1n6.js";
 import "./render-C9RrMnL2.js";
 import { r as isRestartEnabled } from "./commands-DTEV70ns.js";
-import "./commands-registry-CAIz7Mb4.js";
-import { S as extractTextFromChatContent } from "./image-Wzw26f_Y.js";
+import "./commands-registry-BCKEmgO-.js";
+import { S as extractTextFromChatContent } from "./image-BhFGtZNf.js";
 import "./tool-display-T0ecjjB9.js";
-import { d as registerUnhandledRejectionHandler } from "./runner-D5gs_QqR.js";
-import { n as loadModelCatalog } from "./model-catalog-DYWymzg_.js";
+import { d as registerUnhandledRejectionHandler } from "./runner-SFVMFRne.js";
+import { n as loadModelCatalog } from "./model-catalog-DhBQWADs.js";
 import "./fetch-CqoBUl-N.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-DvJNQFGP.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-tS6wAx5_.js";
 import { a as mergeExecApprovalsSocketDefaults, c as readExecApprovalsSnapshot, p as saveExecApprovals, r as ensureExecApprovals, s as normalizeExecApprovals, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-D0gNVl2k.js";
 import "./nodes-screen-D3yZZVoV.js";
-import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, i as listSessionsFromStore, l as resolveSessionModelRef, o as loadSessionEntry, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as lookupContextTokens } from "./session-utils-D-GIguA5.js";
+import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, i as listSessionsFromStore, l as resolveSessionModelRef, o as loadSessionEntry, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as lookupContextTokens } from "./session-utils-CXqvJ-FS.js";
 import { c as hasNonzeroUsage, i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, s as deriveSessionTotalTokens, t as discoverAllSessions } from "./session-cost-usage-DM27Ch_3.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-0OBM0KEk.js";
-import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-BUc0PzZG.js";
+import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-DVNT_9nw.js";
 import { t as listAgentWorkspaceDirs } from "./workspace-dirs-BrJ0U9eT.js";
 import { t as getChannelActivity } from "./channel-activity-HZKjjxTV.js";
 import { n as normalizePollInput } from "./polls-BiNNPhjo.js";
 import "./tables-Cky5KdxE.js";
-import "./server-lifecycle-YVb_AavG.js";
+import "./server-lifecycle-D0GRRDF1.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-DBye_NlX.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-C6MdTaVn.js";
-import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-dpNitoNd.js";
-import "./send-D8lazhp4.js";
+import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-Bqk5Vib2.js";
+import "./send-C6jLYg5Y.js";
 import "./outbound-attachment-B4TOJ7pC.js";
 import "./delivery-queue-8ZQDjrbF.js";
-import "./send-YcXS-UZJ.js";
+import "./send-Df8cWzZN.js";
 import "./resolve-route-VUTvr63H.js";
-import { n as resolveSystemRunCommand } from "./system-run-command-BdQDLhIq.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-J6sS49Ac.js";
+import { n as resolveSystemRunCommand } from "./system-run-command-DlUQw1Ts.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-DfRwnwaU.js";
 import "./proxy-GJkoUC6V.js";
 import { t as formatDocsLink } from "./links-fKzK3pnZ.js";
 import { n as runCommandWithRuntime } from "./cli-utils-BfsDuRZS.js";
 import { t as formatHelpExamples } from "./help-format-CldHB7lS.js";
 import { n as withProgress } from "./progress-B76RkFx7.js";
-import "./replies-DSfpze17.js";
-import { n as createOutboundSendDeps$1, t as createDefaultDeps } from "./deps-CtU2Pokt.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-DWivfzcc.js";
+import "./replies-CmTF3tWU.js";
+import { n as createOutboundSendDeps$1, t as createDefaultDeps } from "./deps-CfQJK6WP.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-_Uk9P3FF.js";
 import "./prompt-style-XmK49QYK.js";
-import "./pairing-labels-D7xcHkxi.js";
+import "./pairing-labels-CLdV_RlM.js";
 import { i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-BucMb4Fx.js";
 import { t as ensureIdleHandsCliOnPath } from "./path-env-cPX3lugV.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-B1XEiDxB.js";
 import { n as inheritOptionFromParent } from "./command-options-CK65DMbR.js";
 import { t as WizardCancelledError } from "./prompts-D3HHe1ZZ.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CIyuenBU.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Cu9n1FMm.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BjMP6yqX.js";
 import { t as isWithinDir } from "./path-safety-O-JjyFjj.js";
 import "./install-safe-path-C7y57-yb.js";
 import "./skill-scanner-CdLElD51.js";
 import { t as buildChannelAccountSnapshot } from "./status-CzZ2Nnqd.js";
 import "./channels-status-issues-Bi00z1aP.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-K5EFkIbD.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-BE1mpVLb.js";
 import "./daemon-install-helpers-DUHqeg5Y.js";
 import "./runtime-guard-DTSD0F6o.js";
 import "./systemd-CYLBa7fG.js";
 import "./service-BzgRt9im.js";
-import "./lifecycle-core-DxExA9d3.js";
+import "./lifecycle-core-WMoTalaq.js";
 import "./systemd-hints-D7r4FWhK.js";
 import { t as parsePort$1 } from "./parse-port-a8kZfEbi.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-DOG5Mivy.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-D-vzzB6U.js";
 import "./diagnostics-BzCL1AMI.js";
 import "./table-aJzHv5Oe.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CDpGHfpS.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-KdaUmZfd.js";
-import { a as isNodeCommandAllowed, n as collectEnabledInsecureOrDangerousFlags, o as resolveNodeCommandAllowlist, s as probeGateway } from "./audit-C9PrbHng.js";
+import { a as isNodeCommandAllowed, n as collectEnabledInsecureOrDangerousFlags, o as resolveNodeCommandAllowlist, s as probeGateway } from "./audit-CdwW3NUX.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-xjvAm8hU.js";
-import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-Dej3rSxN.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-j-IZ4-9x.js";
+import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-D9fTji6b.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-F0lUmHT3.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B5haX6bT.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-ofowt_yq.js";
-import { i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-BsH_IMcC.js";
-import { t as runOnboardingWizard } from "./onboarding-KoIrYKty.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-DQ2zaRjy.js";
+import { i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-jH9YW2Qo.js";
+import { t as runOnboardingWizard } from "./onboarding-By12Oyni.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-CGUwMKT-.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-U10Ul2gc.js";
 import "./node-service-v7Nz7h4D.js";
 import "./status.update-BzUu2M5c.js";
-import { a as matchSystemRunApprovalBindingV1, i as buildSystemRunApprovalBindingV1, n as resolveSystemRunApprovalRequestContext, o as missingSystemRunApprovalBindingV1, r as resolveSystemRunApprovalRuntimeContext, s as toSystemRunApprovalMismatchError } from "./system-run-approval-context-DkX3cprL.js";
+import { a as matchSystemRunApprovalBindingV1, i as buildSystemRunApprovalBindingV1, n as resolveSystemRunApprovalRequestContext, o as missingSystemRunApprovalBindingV1, r as resolveSystemRunApprovalRuntimeContext, s as toSystemRunApprovalMismatchError } from "./system-run-approval-context-Cyc2bPHL.js";
 import { t as installSkill } from "./skills-install-DkQ2ndc6.js";
-import { t as runGatewayUpdate } from "./update-runner-BNnvswc6.js";
+import { t as runGatewayUpdate } from "./update-runner-BSsZSlwa.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-Dj1dL0rI.js";
 import { n as forceFreePortAndWait } from "./ports-CIJavqzS.js";
 import { spawn, spawnSync } from "node:child_process";
@@ -12691,7 +12691,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-Ds9lI_7v.js");
+			const { handleNodeEvent } = await import("./server-node-events-B7IQ1nzZ.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -15677,7 +15677,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.IDLEHANDS_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.IDLEHANDS_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-Bur-9ZhI.js");
+	const mod = override ? await import(override) : await import("./server-DbXkrhq1.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -21357,7 +21357,7 @@ async function startGatewayServer(port = 1013, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-8ZQDjrbF.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-UdfAQA1U.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CaD3Q14j.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),

package/dist/{gateway-rpc-5PTvwEfj.js → gateway-rpc-CTDQY6yE.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-Qpj4ExtQ.js";
-import { n as callGateway } from "./call-C82rD2Wn.js";
+import { n as callGateway } from "./call-B9uIa0hd.js";
 import { n as withProgress } from "./progress-B76RkFx7.js";
 
 //#region src/cli/gateway-rpc.ts

package/dist/{gateway-rpc-BBFG1T-M.js → gateway-rpc-Cu66JjIW.js}

@@ -1,5 +1,5 @@
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-DVauVtrg.js";
-import { n as callGateway } from "./call-BpWhjuOg.js";
+import { n as callGateway } from "./call-C8V5ivtz.js";
 import { n as withProgress } from "./progress-BQLz1r3L.js";
 
 //#region src/cli/gateway-rpc.ts

package/dist/{gemini-auth-D8Wg8hYo.js → gemini-auth-BsD1tapx.js}

@@ -1,4 +1,4 @@
-import { Bn as normalizeProviderId } from "./auth-profiles-Baj5ImDJ.js";
+import { Bn as normalizeProviderId } from "./auth-profiles-02PVCKaE.js";
 import { n as formatErrorMessage } from "./errors-p-ipELrD.js";
 
 //#region src/agents/live-auth-keys.ts

package/dist/{gemini-auth-CIyaa44H.js → gemini-auth-DwwgHLvI.js}

@@ -1,4 +1,4 @@
-import { c as normalizeProviderId } from "./model-selection-1MMYqY6M.js";
+import { c as normalizeProviderId } from "./model-selection-D5g8tXIY.js";
 import { n as formatErrorMessage } from "./errors-C_0nm4TJ.js";
 
 //#region src/agents/live-auth-keys.ts

package/dist/{gemini-auth-m2hi6OmF.js → gemini-auth-G-whJIrc.js}

@@ -1,4 +1,4 @@
-import { c as normalizeProviderId } from "./model-selection-D3Jhcvg-.js";
+import { c as normalizeProviderId } from "./model-selection-BCfCq125.js";
 import { n as formatErrorMessage } from "./errors-DbJPTH0P.js";
 
 //#region src/agents/live-auth-keys.ts