squidclaw 3.0.13 → 3.0.14

package/dist/{prompt-select-styled-CSMviLJY.js → prompt-select-styled-DL2p1pfi.js}

@@ -1,58 +1,58 @@
 import { d as resolveIsNixMode, g as resolveStateDir, m as resolveOAuthDir, t as CONFIG_PATH, u as resolveGatewayPort, y as resolveRequiredHomeDir } from "./paths-mdt1HFK2.js";
 import { g as getResolvedLoggerSettings } from "./globals-xfUIfxbE.js";
 import { C as sleep, S as shortenHomePath, y as resolveUserPath } from "./utils-DMGXr25O.js";
-import { Kt as analyzeBootstrapBudget, a as buildAuthHealthSummary, ft as loadSquidClawPlugins, gr as resolveBootstrapContextForRun, i as DEFAULT_OAUTH_WARN_MS, o as formatRemainingShort, qt as buildBootstrapInjectionStats, ri as resolveAgentSessionDirs } from "./reply-CeUYZhWu.js";
-import { a as resolveAgentDir, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, u as resolveAgentWorkspaceDir } from "./agent-scope-tUxfsPYq.js";
+import { Kt as analyzeBootstrapBudget, a as buildAuthHealthSummary, ft as loadSquidClawPlugins, gr as resolveBootstrapContextForRun, i as DEFAULT_OAUTH_WARN_MS, o as formatRemainingShort, qt as buildBootstrapInjectionStats, ri as resolveAgentSessionDirs } from "./reply-BWXzPVSJ.js";
+import { a as resolveAgentDir, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, u as resolveAgentWorkspaceDir } from "./agent-scope-C1XMay0T.js";
 import { d as defaultRuntime } from "./subsystem-DC87CPVS.js";
 import { E as parseAgentSessionKey } from "./session-key-CIXZm7v4.js";
-import { t as resolveSquidClawPackageRoot } from "./squidclaw-root-BcB7vo9M.js";
+import { t as resolveSquidClawPackageRoot } from "./squidclaw-root-CnE19yKj.js";
 import { n as runExec, t as runCommandWithTimeout } from "./exec-Dfgi8amS.js";
-import { Bi as DEFAULT_MODEL, Ct as resolveProfileUnusableUntilForDisplay, Mi as CLAUDE_CLI_PROFILE_ID, Ni as CODEX_CLI_PROFILE_ID, Si as updateAuthProfileStoreWithLock, Tt as resolveApiKeyForProfile, Vi as DEFAULT_PROVIDER, _ as resolveHooksGmailModel, a as getModelRefStatus, an as writeConfigFile, h as resolveConfiguredModelRef, rt as resolveApiKeyForProvider, tn as readConfigFileSnapshot, ui as repairOAuthProfileIdMismatch, vi as ensureAuthProfileStore } from "./model-selection-ZV3PuYVR.js";
+import { Bi as DEFAULT_MODEL, Ct as resolveProfileUnusableUntilForDisplay, Mi as CLAUDE_CLI_PROFILE_ID, Ni as CODEX_CLI_PROFILE_ID, Si as updateAuthProfileStoreWithLock, Tt as resolveApiKeyForProfile, Vi as DEFAULT_PROVIDER, _ as resolveHooksGmailModel, a as getModelRefStatus, an as writeConfigFile, h as resolveConfiguredModelRef, rt as resolveApiKeyForProvider, tn as readConfigFileSnapshot, ui as repairOAuthProfileIdMismatch, vi as ensureAuthProfileStore } from "./model-selection-QgM_TOjC.js";
 import { A as hasConfiguredSecretInput } from "./registry-CpzNS8-a.js";
 import { t as formatCliCommand } from "./command-format-z1t1m-Kx.js";
 import { t as isTruthyEnvValue$1 } from "./env-DeB9SeAQ.js";
-import { n as listChannelPlugins } from "./plugins-Cl_3OCyK.js";
-import { $ as resolveMainSessionKey, ct as cleanStaleLockFiles, it as isPrimarySessionTranscriptFileName, o as loadSessionStore, rt as formatSessionArchiveTimestamp } from "./sessions-CmjcNTJ3.js";
-import { B as resolveBootstrapTotalMaxChars, R as resolveBootstrapMaxChars } from "./pi-embedded-helpers-D8WkqLZt.js";
-import { D as DEFAULT_SANDBOX_COMMON_IMAGE, E as DEFAULT_SANDBOX_BROWSER_IMAGE, O as DEFAULT_SANDBOX_IMAGE, p as resolveSandboxScope } from "./sandbox-BgsD1lf7.js";
-import { d as resolveGatewayBindHost, i as isLoopbackHost } from "./ws-Bx8lpC1N.js";
-import { a as resolveGatewayAuth } from "./auth-HYiP0mxx.js";
-import { a as inspectPortUsage, l as formatPortDiagnostics } from "./ports-Bop51hz6.js";
+import { n as listChannelPlugins } from "./plugins-H53_4Gxb.js";
+import { $ as resolveMainSessionKey, ct as cleanStaleLockFiles, it as isPrimarySessionTranscriptFileName, o as loadSessionStore, rt as formatSessionArchiveTimestamp } from "./sessions-C5H_BZSr.js";
+import { B as resolveBootstrapTotalMaxChars, R as resolveBootstrapMaxChars } from "./pi-embedded-helpers-DctimJJI.js";
+import { D as DEFAULT_SANDBOX_COMMON_IMAGE, E as DEFAULT_SANDBOX_BROWSER_IMAGE, O as DEFAULT_SANDBOX_IMAGE, p as resolveSandboxScope } from "./sandbox-Cuk1IWYT.js";
+import { d as resolveGatewayBindHost, i as isLoopbackHost } from "./ws-DKt5HoA5.js";
+import { a as resolveGatewayAuth } from "./auth-DHSeaNcB.js";
+import { a as inspectPortUsage, l as formatPortDiagnostics } from "./ports-CKXuQJST.js";
 import { c as resolveStorePath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-B9v1dJHA.js";
-import { n as loadModelCatalog } from "./model-catalog-kpDOW8eY.js";
-import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-DbkLm3eP.js";
-import { l as resolveDmAllowState } from "./pi-tools.policy-DCE9mhtw.js";
-import { r as isWSLEnv, t as isWSL } from "./wsl-wYxPJ8EO.js";
-import { h as randomToken, n as applyWizardMetadata, p as printWizardHeader, s as guardCancel } from "./onboard-helpers-Bcs_1b81.js";
+import { n as loadModelCatalog } from "./model-catalog-BfoWgIDd.js";
+import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-DkR5OGhh.js";
+import { l as resolveDmAllowState } from "./pi-tools.policy-CXvZtJB7.js";
+import { r as isWSLEnv, t as isWSL } from "./wsl-CgxzAzRe.js";
+import { h as randomToken, n as applyWizardMetadata, p as printWizardHeader, s as guardCancel } from "./onboard-helpers-DRk4Y5uA.js";
 import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-BoYH_ODs.js";
-import { i as resolveMemoryBackendConfig } from "./memory-cli-Bhoc-n_1.js";
-import { n as DEFAULT_LOCAL_MODEL, r as resolveMemorySearchConfig } from "./manager-DBgRFvYb.js";
+import { i as resolveMemoryBackendConfig } from "./memory-cli-BUJHSsW6.js";
+import { n as DEFAULT_LOCAL_MODEL, r as resolveMemorySearchConfig } from "./manager-XeZQ6ws7.js";
 import { f as resolveGatewaySystemdServiceName, h as resolveNodeLaunchAgentLabel, l as resolveGatewayLaunchAgentLabel, p as resolveGatewayWindowsTaskName } from "./constants-JYGbA1vc.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-BCU-5otB.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-DQw98BkG.js";
 import { t as note$1 } from "./note-CBt9wSWa.js";
-import { t as collectChannelStatusIssues } from "./channels-status-issues-DeoqSoo-.js";
-import { d as resolveSystemNodeInfo, l as renderSystemNodeWarning, n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-Cdo6Pryw.js";
+import { t as collectChannelStatusIssues } from "./channels-status-issues-N9kzQrD8.js";
+import { d as resolveSystemNodeInfo, l as renderSystemNodeWarning, n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-a4pGEsbA.js";
 import { n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Di8BSZyD.js";
-import { l as uninstallLegacySystemdUnits, r as isSystemdUserServiceAvailable } from "./systemd-zbKl2Q3E.js";
-import { a as launchAgentPlistExists, i as isLaunchAgentLoaded, o as repairLaunchAgentBootstrap, r as isLaunchAgentListed, s as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-Dk-UMipf.js";
-import { i as auditGatewayServiceConfig, n as renderSystemdUnavailableHints, o as needsNodeRuntimeMigration, r as SERVICE_AUDIT_CODES, s as formatRuntimeStatus, t as isSystemdUnavailableDetail } from "./systemd-hints-C9_7ouv7.js";
-import { t as readLastGatewayErrorLine } from "./diagnostics-C0CazfQM.js";
-import { n as renderGatewayServiceCleanupHints, t as findExtraGatewayServices } from "./inspect-D5T8Bbzl.js";
-import { r as healthCommand } from "./health-BZcB9SMe.js";
-import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-x69xyZH-.js";
-import { t as resolveDefaultChannelAccountContext } from "./channel-account-context-C_WQRa6U.js";
-import { t as runGatewayUpdate } from "./update-runner-DOXPSA_-.js";
+import { l as uninstallLegacySystemdUnits, r as isSystemdUserServiceAvailable } from "./systemd-fP8tz4aL.js";
+import { a as launchAgentPlistExists, i as isLaunchAgentLoaded, o as repairLaunchAgentBootstrap, r as isLaunchAgentListed, s as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-D4y0_Q5Z.js";
+import { i as auditGatewayServiceConfig, n as renderSystemdUnavailableHints, o as needsNodeRuntimeMigration, r as SERVICE_AUDIT_CODES, s as formatRuntimeStatus, t as isSystemdUnavailableDetail } from "./systemd-hints-BG_t__ZD.js";
+import { t as readLastGatewayErrorLine } from "./diagnostics-DZ99A0EW.js";
+import { n as renderGatewayServiceCleanupHints, t as findExtraGatewayServices } from "./inspect-C3PHuODr.js";
+import { r as healthCommand } from "./health-Cia3g9r1.js";
+import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-Bz7TCLpb.js";
+import { t as resolveDefaultChannelAccountContext } from "./channel-account-context-e4ysObLI.js";
+import { t as runGatewayUpdate } from "./update-runner-C2UrF4oZ.js";
 import { n as logConfigUpdated } from "./logging-AGpu_2Pc.js";
-import { n as detectLegacyStateMigrations, r as runLegacyStateMigrations, t as loadAndMaybeMigrateDoctorConfig } from "./doctor-config-flow-DSA-JE3n.js";
+import { n as detectLegacyStateMigrations, r as runLegacyStateMigrations, t as loadAndMaybeMigrateDoctorConfig } from "./doctor-config-flow-DDWA3Z2D.js";
 import { n as noteOpenAIOAuthTlsPrerequisites } from "./oauth-tls-preflight-CqqomOFQ.js";
-import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-BM6JyzAr.js";
+import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-DgK8uuKY.js";
 import { t as formatHealthCheckFailure } from "./health-format-B3bJdIC6.js";
-import { n as doctorShellCompletion } from "./doctor-completion-Emprau8v.js";
+import { n as doctorShellCompletion } from "./doctor-completion-CGmYWy0n.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { promisify } from "node:util";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { execFile } from "node:child_process";
 import { confirm, intro, outro, select } from "@clack/prompts";
 
@@ -604,16 +604,16 @@ async function cleanupLegacyLaunchdService(params) {
 	await execFileAsync$1("launchctl", ["unload", params.plistPath]).catch(() => void 0);
 	const trashDir = path.join(os.homedir(), ".Trash");
 	try {
-		await fsPromises.mkdir(trashDir, { recursive: true });
+		await fs$1.mkdir(trashDir, { recursive: true });
 	} catch {}
 	try {
-		await fsPromises.access(params.plistPath);
+		await fs$1.access(params.plistPath);
 	} catch {
 		return null;
 	}
 	const dest = path.join(trashDir, `${params.label}-${Date.now()}.plist`);
 	try {
-		await fsPromises.rename(params.plistPath, dest);
+		await fs$1.rename(params.plistPath, dest);
 		return dest;
 	} catch {
 		return null;
@@ -1952,11 +1952,11 @@ async function maybeRepairUiProtocolFreshness(_runtime, prompter) {
 		argv1: process.argv[1]
 	})).indexPath ?? resolveControlUiDistIndexPathForRoot(root);
 	try {
-		const [schemaStats, uiStats] = await Promise.all([fsPromises.stat(schemaPath).catch(() => null), fsPromises.stat(uiIndexPath).catch(() => null)]);
+		const [schemaStats, uiStats] = await Promise.all([fs$1.stat(schemaPath).catch(() => null), fs$1.stat(uiIndexPath).catch(() => null)]);
 		if (schemaStats && !uiStats) {
 			note$1(["- Control UI assets are missing.", "- Run: pnpm ui:build"].join("\n"), "UI");
 			const uiSourcesPath = path.join(root, "ui/package.json");
-			if (!await fsPromises.stat(uiSourcesPath).catch(() => null)) {
+			if (!await fs$1.stat(uiSourcesPath).catch(() => null)) {
 				note$1("Skipping UI build: ui/ sources not present.", "UI");
 				return;
 			}
@@ -2001,7 +2001,7 @@ async function maybeRepairUiProtocolFreshness(_runtime, prompter) {
 					initialValue: true
 				})) {
 					const uiSourcesPath = path.join(root, "ui/package.json");
-					if (!await fsPromises.stat(uiSourcesPath).catch(() => null)) {
+					if (!await fs$1.stat(uiSourcesPath).catch(() => null)) {
 						note$1("Skipping UI rebuild: ui/ sources not present.", "UI");
 						return;
 					}

package/dist/{provider-auth-helpers-CgNWlsqs.js → provider-auth-helpers-BqWiy-r-.js}

@@ -1,10 +1,10 @@
-import { dt as createPluginLoaderLogger, ft as loadSquidClawPlugins } from "./reply-CeUYZhWu.js";
+import { dt as createPluginLoaderLogger, ft as loadSquidClawPlugins } from "./reply-BWXzPVSJ.js";
 import { t as createSubsystemLogger } from "./subsystem-DC87CPVS.js";
-import { d as normalizeProviderId, hi as upsertAuthProfile, vi as ensureAuthProfileStore } from "./model-selection-ZV3PuYVR.js";
-import { r as isWSLEnv } from "./wsl-wYxPJ8EO.js";
+import { d as normalizeProviderId, hi as upsertAuthProfile, vi as ensureAuthProfileStore } from "./model-selection-QgM_TOjC.js";
+import { r as isWSLEnv } from "./wsl-CgxzAzRe.js";
 import { r as stylePromptTitle } from "./prompt-style-BoYH_ODs.js";
-import { f as updateConfig } from "./shared-BzY0v0tS.js";
-import { d as applyAuthProfileConfig } from "./auth-token-BQRI3c6e.js";
+import { f as updateConfig } from "./shared-CxdBWgym.js";
+import { d as applyAuthProfileConfig } from "./auth-token-BxYYHBlc.js";
 import { n as logConfigUpdated } from "./logging-AGpu_2Pc.js";
 import { intro, note, outro, spinner } from "@clack/prompts";
 

package/dist/{proxy-env-CRD7fbqp.js → proxy-env-D1tz4Z6a.js}

@@ -1,4 +1,4 @@
-import { An as isBlockedSpecialUseIpv4Address, Fn as isIpv4Address, Hn as parseCanonicalIpAddress, Ln as isLegacyIpv4Literal, Mn as isCanonicalDottedDecimalIPv4, Un as parseLooseIpAddress, jn as isBlockedSpecialUseIpv6Address, kn as extractEmbeddedIpv4FromIpv6 } from "./model-selection-ZV3PuYVR.js";
+import { An as isBlockedSpecialUseIpv4Address, Fn as isIpv4Address, Hn as parseCanonicalIpAddress, Ln as isLegacyIpv4Literal, Mn as isCanonicalDottedDecimalIPv4, Un as parseLooseIpAddress, jn as isBlockedSpecialUseIpv6Address, kn as extractEmbeddedIpv4FromIpv6 } from "./model-selection-QgM_TOjC.js";
 import { lookup } from "node:dns";
 import { lookup as lookup$1 } from "node:dns/promises";
 import { Agent } from "undici";

package/dist/{push-apns-DoYzx3tH.js → push-apns-C-YdARdy.js}

@@ -1,14 +1,14 @@
 import { g as resolveStateDir } from "./paths-mdt1HFK2.js";
 import { r as isVerbose } from "./globals-xfUIfxbE.js";
-import { b as sniffMimeFromBase64 } from "./reply-CeUYZhWu.js";
+import { b as sniffMimeFromBase64 } from "./reply-BWXzPVSJ.js";
 import { s as shouldLogSubsystemToConsole, t as createSubsystemLogger } from "./subsystem-DC87CPVS.js";
 import { E as parseAgentSessionKey } from "./session-key-CIXZm7v4.js";
 import { n as redactSensitiveText, t as getDefaultRedactPatterns } from "./redact-BHOzodtN.js";
-import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-DIEpaxUj.js";
-import { o as estimateBase64DecodedBytes } from "./tool-images-DTl_LHMa.js";
+import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-D6M304Qd.js";
+import { o as estimateBase64DecodedBytes } from "./tool-images-FhSCiY-o.js";
 import path from "node:path";
 import chalk from "chalk";
-import fsPromises from "node:fs/promises";
+import fs from "node:fs/promises";
 import { createHash, createPrivateKey, sign } from "node:crypto";
 import http2 from "node:http2";
 
@@ -526,7 +526,7 @@ async function resolveApnsAuthConfigFromEnv(env = process.env) {
 			value: {
 				teamId,
 				keyId,
-				privateKey: normalizePrivateKey(await fsPromises.readFile(keyPath, "utf8"))
+				privateKey: normalizePrivateKey(await fs.readFile(keyPath, "utf8"))
 			}
 		};
 	} catch (err) {

package/dist/{pw-ai-yKJj32B4.js → pw-ai-SVeR5d2o.js}

@@ -1,12 +1,12 @@
 import "./paths-mdt1HFK2.js";
 import { k as resolvePreferredSquidClawTmpDir } from "./globals-xfUIfxbE.js";
 import "./utils-DMGXr25O.js";
-import "./agent-scope-tUxfsPYq.js";
+import "./agent-scope-C1XMay0T.js";
 import "./subsystem-DC87CPVS.js";
-import "./squidclaw-root-BcB7vo9M.js";
+import "./squidclaw-root-CnE19yKj.js";
 import "./logger-DEmOJ9C3.js";
 import "./exec-Dfgi8amS.js";
-import "./model-selection-ZV3PuYVR.js";
+import "./model-selection-QgM_TOjC.js";
 import "./registry-CpzNS8-a.js";
 import "./github-copilot-token-Xh3EqlDM.js";
 import { t as formatCliCommand } from "./command-format-z1t1m-Kx.js";
@@ -14,20 +14,20 @@ import "./boolean-BsqeuxE6.js";
 import "./env-DeB9SeAQ.js";
 import "./host-env-security-DkAVVuaw.js";
 import "./env-vars-DpyLwTjM.js";
-import "./manifest-registry-Cx3mB9zS.js";
-import { O as withNoProxyForCdpUrl, _ as appendCdpPath, b as getHeadersWithAuth, d as normalizeCdpWsUrl, g as withBrowserNavigationPolicy, h as assertBrowserNavigationResultAllowed, m as assertBrowserNavigationAllowed, t as getChromeWebSocketUrl, u as formatAriaSnapshot, v as fetchJson, x as withCdpSocket } from "./chrome-gIqO4t7T.js";
-import "./tailnet-gTCqUBfJ.js";
-import "./ws-Bx8lpC1N.js";
-import "./path-alias-guards-B7H6jIIw.js";
-import { a as resolveStrictExistingPathsWithinRoot, n as DEFAULT_TRACE_DIR, r as DEFAULT_UPLOAD_DIR, s as DEFAULT_FILL_FIELD_TYPE } from "./paths-BguvT84s.js";
+import "./manifest-registry-BaUPjNKb.js";
+import { O as withNoProxyForCdpUrl, _ as appendCdpPath, b as getHeadersWithAuth, d as normalizeCdpWsUrl, g as withBrowserNavigationPolicy, h as assertBrowserNavigationResultAllowed, m as assertBrowserNavigationAllowed, t as getChromeWebSocketUrl, u as formatAriaSnapshot, v as fetchJson, x as withCdpSocket } from "./chrome-BNfSmFAM.js";
+import "./tailnet-CLkKVwDq.js";
+import "./ws-DKt5HoA5.js";
+import "./path-alias-guards-CCRXJArp.js";
+import { a as resolveStrictExistingPathsWithinRoot, n as DEFAULT_TRACE_DIR, r as DEFAULT_UPLOAD_DIR, s as DEFAULT_FILL_FIELD_TYPE } from "./paths-Bg6h1q3v.js";
 import "./redact-BHOzodtN.js";
 import { r as formatErrorMessage } from "./errors-oMAXKmXG.js";
-import { c as writeFileFromPathWithinRoot } from "./fs-safe-CjHYKGbt.js";
-import "./proxy-env-CRD7fbqp.js";
-import "./ports-Bop51hz6.js";
-import { n as markPwAiLoaded } from "./whatsapp-actions-hN5bwjWU.js";
+import { c as writeFileFromPathWithinRoot } from "./fs-safe-CKHYu4Vz.js";
+import "./proxy-env-D1tz4Z6a.js";
+import "./ports-CKXuQJST.js";
+import { n as markPwAiLoaded } from "./whatsapp-actions-DhiV181U.js";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs from "node:fs/promises";
 import crypto from "node:crypto";
 import { chromium, devices } from "playwright-core";
 
@@ -547,9 +547,9 @@ function buildSiblingTempPath(targetPath) {
 	return path.join(path.dirname(targetPath), `.squidclaw-output-${id}-${safeTail}.part`);
 }
 async function writeViaSiblingTempPath(params) {
-	const rootDir = await fsPromises.realpath(path.resolve(params.rootDir)).catch(() => path.resolve(params.rootDir));
+	const rootDir = await fs.realpath(path.resolve(params.rootDir)).catch(() => path.resolve(params.rootDir));
 	const requestedTargetPath = path.resolve(params.targetPath);
-	const targetPath = await fsPromises.realpath(path.dirname(requestedTargetPath)).then((realDir) => path.join(realDir, path.basename(requestedTargetPath))).catch(() => requestedTargetPath);
+	const targetPath = await fs.realpath(path.dirname(requestedTargetPath)).then((realDir) => path.join(realDir, path.basename(requestedTargetPath))).catch(() => requestedTargetPath);
 	const relativeTargetPath = path.relative(rootDir, targetPath);
 	if (!relativeTargetPath || relativeTargetPath === ".." || relativeTargetPath.startsWith(`..${path.sep}`) || path.isAbsolute(relativeTargetPath)) throw new Error("Target path is outside the allowed root");
 	const tempPath = buildSiblingTempPath(targetPath);
@@ -564,7 +564,7 @@ async function writeViaSiblingTempPath(params) {
 		});
 		renameSucceeded = true;
 	} finally {
-		if (!renameSucceeded) await fsPromises.rm(tempPath, { force: true }).catch(() => {});
+		if (!renameSucceeded) await fs.rm(tempPath, { force: true }).catch(() => {});
 	}
 }
 
@@ -955,7 +955,7 @@ async function saveDownloadPayload(download, outPath) {
 	const suggested = download.suggestedFilename?.() || "download.bin";
 	const requestedPath = outPath?.trim();
 	const resolvedOutPath = path.resolve(requestedPath || buildTempDownloadPath(suggested));
-	await fsPromises.mkdir(path.dirname(resolvedOutPath), { recursive: true });
+	await fs.mkdir(path.dirname(resolvedOutPath), { recursive: true });
 	if (!requestedPath) await download.saveAs?.(resolvedOutPath);
 	else await writeViaSiblingTempPath({
 		rootDir: path.dirname(resolvedOutPath),

package/dist/{qmd-manager-AYDUTXmc.js → qmd-manager-B-XXhWVw.js}

@@ -1,21 +1,21 @@
 import { g as resolveStateDir } from "./paths-mdt1HFK2.js";
 import "./globals-xfUIfxbE.js";
 import "./utils-DMGXr25O.js";
-import { u as resolveAgentWorkspaceDir } from "./agent-scope-tUxfsPYq.js";
+import { u as resolveAgentWorkspaceDir } from "./agent-scope-C1XMay0T.js";
 import { t as createSubsystemLogger } from "./subsystem-DC87CPVS.js";
 import { E as parseAgentSessionKey } from "./session-key-CIXZm7v4.js";
-import "./squidclaw-root-BcB7vo9M.js";
+import "./squidclaw-root-CnE19yKj.js";
 import "./logger-DEmOJ9C3.js";
 import "./exec-Dfgi8amS.js";
-import "./path-alias-guards-B7H6jIIw.js";
+import "./path-alias-guards-CCRXJArp.js";
 import "./redact-BHOzodtN.js";
-import { l as writeFileWithinRoot } from "./fs-safe-CjHYKGbt.js";
+import { l as writeFileWithinRoot } from "./fs-safe-CKHYu4Vz.js";
 import { n as resolveWindowsSpawnProgram, t as materializeWindowsSpawnProgram } from "./windows-spawn-Bo-pPi83.js";
 import "./paths-B9v1dJHA.js";
-import { _ as isFileMissingError, i as listSessionFilesForAgent, n as requireNodeSqlite, r as buildSessionEntry, t as extractKeywords, v as statRegularFile } from "./query-expansion-CV2Z4_mS.js";
+import { _ as isFileMissingError, i as listSessionFilesForAgent, n as requireNodeSqlite, r as buildSessionEntry, t as extractKeywords, v as statRegularFile } from "./query-expansion-Bf60ekMj.js";
 import os from "node:os";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs from "node:fs/promises";
 import { spawn } from "node:child_process";
 import readline from "node:readline";
 
@@ -292,10 +292,10 @@ var QmdMemoryManager = class QmdMemoryManager {
 	async initialize(mode) {
 		this.bootstrapCollections();
 		if (mode === "status") return;
-		await fsPromises.mkdir(this.xdgConfigHome, { recursive: true });
-		await fsPromises.mkdir(this.xdgCacheHome, { recursive: true });
-		await fsPromises.mkdir(path.dirname(this.indexPath), { recursive: true });
-		if (this.sessionExporter) await fsPromises.mkdir(this.sessionExporter.dir, { recursive: true });
+		await fs.mkdir(this.xdgConfigHome, { recursive: true });
+		await fs.mkdir(this.xdgCacheHome, { recursive: true });
+		await fs.mkdir(path.dirname(this.indexPath), { recursive: true });
+		if (this.sessionExporter) await fs.mkdir(this.sessionExporter.dir, { recursive: true });
 		await this.symlinkSharedModels();
 		await this.ensureCollections();
 		if (this.qmd.update.onBoot) {
@@ -388,7 +388,7 @@ var QmdMemoryManager = class QmdMemoryManager {
 	}
 	async ensureCollectionPath(collection) {
 		if (!this.isDirectoryGlobPattern(collection.pattern)) return;
-		await fsPromises.mkdir(collection.path, { recursive: true });
+		await fs.mkdir(collection.path, { recursive: true });
 	}
 	isDirectoryGlobPattern(pattern) {
 		return pattern.includes("*") || pattern.includes("?") || pattern.includes("[");
@@ -832,19 +832,19 @@ var QmdMemoryManager = class QmdMemoryManager {
 		const defaultModelsDir = path.join(defaultCacheHome, "qmd", "models");
 		const targetModelsDir = path.join(this.xdgCacheHome, "qmd", "models");
 		try {
-			if (!(await fsPromises.stat(defaultModelsDir).catch((err) => {
+			if (!(await fs.stat(defaultModelsDir).catch((err) => {
 				if (err.code === "ENOENT") return null;
 				throw err;
 			}))?.isDirectory()) return;
 			try {
-				await fsPromises.lstat(targetModelsDir);
+				await fs.lstat(targetModelsDir);
 				return;
 			} catch {}
 			try {
-				await fsPromises.symlink(defaultModelsDir, targetModelsDir, "dir");
+				await fs.symlink(defaultModelsDir, targetModelsDir, "dir");
 			} catch (symlinkErr) {
 				const code = symlinkErr.code;
-				if (process.platform === "win32" && (code === "EPERM" || code === "ENOTSUP")) await fsPromises.symlink(defaultModelsDir, targetModelsDir, "junction");
+				if (process.platform === "win32" && (code === "EPERM" || code === "ENOTSUP")) await fs.symlink(defaultModelsDir, targetModelsDir, "junction");
 				else throw symlinkErr;
 			}
 			log.debug(`symlinked qmd models: ${defaultModelsDir} → ${targetModelsDir}`);
@@ -1020,7 +1020,7 @@ var QmdMemoryManager = class QmdMemoryManager {
 		const count = Math.max(1, lines ?? Number.POSITIVE_INFINITY);
 		let handle;
 		try {
-			handle = await fsPromises.open(absPath);
+			handle = await fs.open(absPath);
 		} catch (err) {
 			if (isFileMissingError(err)) return { missing: true };
 			throw err;
@@ -1052,7 +1052,7 @@ var QmdMemoryManager = class QmdMemoryManager {
 		try {
 			return {
 				missing: false,
-				text: await fsPromises.readFile(absPath, "utf-8")
+				text: await fs.readFile(absPath, "utf-8")
 			};
 		} catch (err) {
 			if (isFileMissingError(err)) return { missing: true };
@@ -1069,7 +1069,7 @@ var QmdMemoryManager = class QmdMemoryManager {
 	async exportSessions() {
 		if (!this.sessionExporter) return;
 		const exportDir = this.sessionExporter.dir;
-		await fsPromises.mkdir(exportDir, { recursive: true });
+		await fs.mkdir(exportDir, { recursive: true });
 		const files = await listSessionFilesForAgent(this.agentId);
 		const keep = /* @__PURE__ */ new Set();
 		const tracked = /* @__PURE__ */ new Set();
@@ -1095,11 +1095,11 @@ var QmdMemoryManager = class QmdMemoryManager {
 			});
 			keep.add(target);
 		}
-		const exported = await fsPromises.readdir(exportDir).catch(() => []);
+		const exported = await fs.readdir(exportDir).catch(() => []);
 		for (const name of exported) {
 			if (!name.endsWith(".md")) continue;
 			const full = path.join(exportDir, name);
-			if (!keep.has(full)) await fsPromises.rm(full, { force: true });
+			if (!keep.has(full)) await fs.rm(full, { force: true });
 		}
 		for (const [sessionFile, state] of this.exportedSessionState) if (!tracked.has(sessionFile) || !state.target.startsWith(exportDir + path.sep)) this.exportedSessionState.delete(sessionFile);
 	}

package/dist/{qr-cli-cikAHfYn.js → qr-cli-B4fjHvn1.js}

@@ -3,9 +3,9 @@ import { u as resolveGatewayPort } from "./paths-mdt1HFK2.js";
 import { p as theme } from "./globals-xfUIfxbE.js";
 import { d as defaultRuntime } from "./subsystem-DC87CPVS.js";
 import { t as runCommandWithTimeout } from "./exec-Dfgi8amS.js";
-import { $t as loadConfig, Bn as isRfc1918Ipv4Address, Cn as secretRefKey, Ft as resolveSecretRefValues, Nn as isCarrierGradeNatIpv4Address } from "./model-selection-ZV3PuYVR.js";
+import { $t as loadConfig, Bn as isRfc1918Ipv4Address, Cn as secretRefKey, Ft as resolveSecretRefValues, Nn as isCarrierGradeNatIpv4Address } from "./model-selection-QgM_TOjC.js";
 import { F as resolveSecretInputRef, N as normalizeSecretInputString } from "./registry-CpzNS8-a.js";
-import { a as getQrRemoteCommandSecretTargetIds, s as resolveCommandSecretRefsViaGateway } from "./command-secret-targets-BF4WzaME.js";
+import { a as getQrRemoteCommandSecretTargetIds, s as resolveCommandSecretRefsViaGateway } from "./command-secret-targets-WwcPUFAf.js";
 import { t as formatDocsLink } from "./links-De9M3AmU.js";
 import os from "node:os";
 import qrcode from "qrcode-terminal";

package/dist/{query-expansion-CV2Z4_mS.js → query-expansion-Bf60ekMj.js}

@@ -5,7 +5,7 @@ import { s as resolveSessionTranscriptsDirForAgent } from "./paths-B9v1dJHA.js";
 import { createRequire } from "node:module";
 import fs from "node:fs";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import crypto from "node:crypto";
 
 //#region src/memory/fs-utils.ts
@@ -15,7 +15,7 @@ function isFileMissingError(err) {
 async function statRegularFile(absPath) {
 	let stat;
 	try {
-		stat = await fsPromises.lstat(absPath);
+		stat = await fs$1.lstat(absPath);
 	} catch (err) {
 		if (isFileMissingError(err)) return { missing: true };
 		throw err;
@@ -50,7 +50,7 @@ function isMemoryPath(relPath) {
 	return normalized.startsWith("memory/");
 }
 async function walkDir(dir, files) {
-	const entries = await fsPromises.readdir(dir, { withFileTypes: true });
+	const entries = await fs$1.readdir(dir, { withFileTypes: true });
 	for (const entry of entries) {
 		const full = path.join(dir, entry.name);
 		if (entry.isSymbolicLink()) continue;
@@ -70,7 +70,7 @@ async function listMemoryFiles(workspaceDir, extraPaths) {
 	const memoryDir = path.join(workspaceDir, "memory");
 	const addMarkdownFile = async (absPath) => {
 		try {
-			const stat = await fsPromises.lstat(absPath);
+			const stat = await fs$1.lstat(absPath);
 			if (stat.isSymbolicLink() || !stat.isFile()) return;
 			if (!absPath.endsWith(".md")) return;
 			result.push(absPath);
@@ -79,12 +79,12 @@ async function listMemoryFiles(workspaceDir, extraPaths) {
 	await addMarkdownFile(memoryFile);
 	await addMarkdownFile(altMemoryFile);
 	try {
-		const dirStat = await fsPromises.lstat(memoryDir);
+		const dirStat = await fs$1.lstat(memoryDir);
 		if (!dirStat.isSymbolicLink() && dirStat.isDirectory()) await walkDir(memoryDir, result);
 	} catch {}
 	const normalizedExtraPaths = normalizeExtraMemoryPaths(workspaceDir, extraPaths);
 	if (normalizedExtraPaths.length > 0) for (const inputPath of normalizedExtraPaths) try {
-		const stat = await fsPromises.lstat(inputPath);
+		const stat = await fs$1.lstat(inputPath);
 		if (stat.isSymbolicLink()) continue;
 		if (stat.isDirectory()) {
 			await walkDir(inputPath, result);
@@ -98,7 +98,7 @@ async function listMemoryFiles(workspaceDir, extraPaths) {
 	for (const entry of result) {
 		let key = entry;
 		try {
-			key = await fsPromises.realpath(entry);
+			key = await fs$1.realpath(entry);
 		} catch {}
 		if (seen.has(key)) continue;
 		seen.add(key);
@@ -112,14 +112,14 @@ function hashText(value) {
 async function buildFileEntry(absPath, workspaceDir) {
 	let stat;
 	try {
-		stat = await fsPromises.stat(absPath);
+		stat = await fs$1.stat(absPath);
 	} catch (err) {
 		if (isFileMissingError(err)) return null;
 		throw err;
 	}
 	let content;
 	try {
-		content = await fsPromises.readFile(absPath, "utf-8");
+		content = await fs$1.readFile(absPath, "utf-8");
 	} catch (err) {
 		if (isFileMissingError(err)) return null;
 		throw err;
@@ -253,7 +253,7 @@ const log = createSubsystemLogger("memory");
 async function listSessionFilesForAgent(agentId) {
 	const dir = resolveSessionTranscriptsDirForAgent(agentId);
 	try {
-		return (await fsPromises.readdir(dir, { withFileTypes: true })).filter((entry) => entry.isFile()).map((entry) => entry.name).filter((name) => name.endsWith(".jsonl")).map((name) => path.join(dir, name));
+		return (await fs$1.readdir(dir, { withFileTypes: true })).filter((entry) => entry.isFile()).map((entry) => entry.name).filter((name) => name.endsWith(".jsonl")).map((name) => path.join(dir, name));
 	} catch {
 		return [];
 	}
@@ -283,8 +283,8 @@ function extractSessionText(content) {
 }
 async function buildSessionEntry(absPath) {
 	try {
-		const stat = await fsPromises.stat(absPath);
-		const lines = (await fsPromises.readFile(absPath, "utf-8")).split("\n");
+		const stat = await fs$1.stat(absPath);
+		const lines = (await fs$1.readFile(absPath, "utf-8")).split("\n");
 		const collected = [];
 		const lineMap = [];
 		for (let jsonlIdx = 0; jsonlIdx < lines.length; jsonlIdx++) {

package/dist/{redact-snapshot-C9T1079O.js → redact-snapshot-DRqM8Vla.js}

@@ -1,5 +1,5 @@
 import { t as createSubsystemLogger } from "./subsystem-DC87CPVS.js";
-import { yn as sensitive } from "./model-selection-ZV3PuYVR.js";
+import { yn as sensitive } from "./model-selection-QgM_TOjC.js";
 import JSON5 from "json5";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";