squidclaw 3.0.23 → 3.0.24

package/dist/deps-send-whatsapp.runtime-CU257URT.js

@@ -0,0 +1,119 @@
+import "./globals-BrhVUl-N.js";
+import "./paths-CHIu6D1E.js";
+import "./subsystem-Bw5n50gj.js";
+import "./boolean-DtWR5bt3.js";
+import "./auth-profiles-9T4j6jMy.js";
+import "./agent-scope-nEVgVklg.js";
+import "./utils-D6vohX1h.js";
+import "./squidclaw-root-JXyRbQLJ.js";
+import "./logger-DL3N22PJ.js";
+import "./exec-TSiqsZw1.js";
+import "./registry-BXcl3IkC.js";
+import "./github-copilot-token-CxitgiZA.js";
+import "./host-env-security-lcjXF83D.js";
+import "./version-3so140Zi.js";
+import "./env-vars-mSSOl7Rv.js";
+import "./manifest-registry-1ACGW3OR.js";
+import "./dock-W3cGg46W.js";
+import "./model-D7hZpWTB.js";
+import "./pi-model-discovery-Cr1q2cJt.js";
+import "./diagnostic-B4w80e4D.js";
+import "./frontmatter-CFoRh1fy.js";
+import "./skills-EwyaIyKC.js";
+import "./path-alias-guards-DeOVetT7.js";
+import "./message-channel-DqvtYF2o.js";
+import "./sessions-DgnXAQCc.js";
+import "./plugins-Bc7YM9X-.js";
+import "./accounts-BH9Qo1sQ.js";
+import "./accounts-Cuwg9Tan.js";
+import "./logging-CcxUDNcI.js";
+import "./accounts-B1RxFghM.js";
+import "./send-BpkluEZ5.js";
+import "./send-Do2preUU.js";
+import "./subagent-registry-CQA6P2FO.js";
+import "./paths-Dn_rzeZN.js";
+import "./chat-envelope-thy05gXR.js";
+import "./client-COy24r9W.js";
+import "./call-D7jOWSFr.js";
+import "./pairing-token-B_ig96RO.js";
+import "./net-CIh5ellr.js";
+import "./tailnet-DJq7Mi1o.js";
+import "./tokens-DOVPgjwZ.js";
+import "./with-timeout-CFfRudNc.js";
+import "./deliver-D-IQEJ52.js";
+import "./image-ops-LFsSCTyI.js";
+import "./send-BVyLW1cn.js";
+import "./pi-embedded-helpers-DtCOZSv-.js";
+import "./sandbox-ixDhkfHu.js";
+import "./tool-catalog-BRRysafL.js";
+import "./chrome-DiktJpMU.js";
+import "./tailscale-DHGqQR08.js";
+import "./auth-BlP9BwaD.js";
+import "./server-context-Dd8UynDU.js";
+import "./paths-D6mnO6Ni.js";
+import "./redact-DknVdX-O.js";
+import "./errors-BnRmsfe-.js";
+import "./fs-safe-BPQ-per2.js";
+import "./proxy-env-BiKHVg2h.js";
+import "./store-BTkIx401.js";
+import "./ports-DMeUt80n.js";
+import "./trash-DUuU677G.js";
+import "./server-middleware-B_LyQkOL.js";
+import "./tool-images-D6mmxuWS.js";
+import "./thinking-CrcT589P.js";
+import "./models-config-DAastTau.js";
+import "./exec-approvals-allowlist-B9bcJkGP.js";
+import "./exec-safe-bin-runtime-policy-DECo77U6.js";
+import "./model-catalog-Drh9Rois.js";
+import "./fetch-lq0SDLLE.js";
+import "./audio-transcription-runner-D-uxpkbd.js";
+import "./fetch-guard-CbtWqa1E.js";
+import "./image-BcYt63Jx.js";
+import "./tool-display-BisOZb2_.js";
+import "./api-key-rotation-JPmjv-c0.js";
+import "./proxy-fetch-DfeBVFag.js";
+import "./ir-C7He5vmn.js";
+import "./render-CCLsW6Lz.js";
+import "./target-errors-C_rnMuJ2.js";
+import "./commands-DDHiW-As.js";
+import "./commands-registry--ITOJ-cM.js";
+import "./fetch-By9arPco.js";
+import "./pairing-store-BC4mnG9S.js";
+import "./exec-approvals-Db6myg-N.js";
+import "./nodes-screen-BrMJzhot.js";
+import "./system-run-command-BaSqmSwR.js";
+import "./session-utils-D12gSo5W.js";
+import "./session-cost-usage-BL2HPuc5.js";
+import "./skill-commands-BcigmiOW.js";
+import "./workspace-dirs-D8D-Ghcl.js";
+import "./channel-activity-wuB3-cfR.js";
+import "./tables-CGh4CW_h.js";
+import "./server-lifecycle-BEZ2jsQ6.js";
+import "./stagger-C4U8O7GM.js";
+import "./channel-selection-CFWQq1nS.js";
+import "./plugin-auto-enable-a3TK3OPT.js";
+import "./send-BPgrWmUX.js";
+import "./outbound-attachment-Bedqixj2.js";
+import "./delivery-queue-D-91NTFS.js";
+import "./send-BuBTLRMz.js";
+import "./pi-tools.policy-D3RA94WF.js";
+import "./proxy-Dgwoliym.js";
+import "./runtime-config-collectors-Bsjz4isf.js";
+import "./command-secret-targets-CZjP-Bm5.js";
+import "./onboard-helpers-DwEZeaoe.js";
+import "./prompt-style-D_i_ws0g.js";
+import "./pairing-labels-CX4CtqRa.js";
+import "./memory-cli-u8eyO3Ec.js";
+import "./manager-BVfTfggO.js";
+import "./query-expansion-C0HUJbRn.js";
+import "./links-Dye6HsRG.js";
+import "./cli-utils-BKqG4ZT-.js";
+import "./help-format-CpR5cEGe.js";
+import "./progress-DuhDspl6.js";
+import { t as sendMessageWhatsApp } from "./outbound-CwzUo-rx.js";
+import "./channel-web-C1qYz-HK.js";
+import "./session-eXSdl5mb.js";
+import "./login-CjzRATwO.js";
+import "./web-w04Gvwqi.js";
+
+export { sendMessageWhatsApp };

package/dist/{devices-cli-DlQGTogF.js → devices-cli-CPgutgUT.js}

@@ -2,10 +2,10 @@ import { p as theme } from "./globals-BrhVUl-N.js";
 import "./paths-CHIu6D1E.js";
 import { d as defaultRuntime } from "./subsystem-Bw5n50gj.js";
 import "./boolean-DtWR5bt3.js";
-import "./auth-profiles-CX4YYu7Z.js";
-import "./agent-scope-Cq4vDGrK.js";
+import "./auth-profiles-9T4j6jMy.js";
+import "./agent-scope-nEVgVklg.js";
 import "./utils-D6vohX1h.js";
-import "./squidclaw-root-BQfLymzj.js";
+import "./squidclaw-root-JXyRbQLJ.js";
 import "./logger-DL3N22PJ.js";
 import "./exec-TSiqsZw1.js";
 import "./registry-BXcl3IkC.js";
@@ -13,13 +13,13 @@ import "./github-copilot-token-CxitgiZA.js";
 import "./host-env-security-lcjXF83D.js";
 import "./version-3so140Zi.js";
 import "./env-vars-mSSOl7Rv.js";
-import "./manifest-registry-7kwtbCH-.js";
+import "./manifest-registry-1ACGW3OR.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-DqvtYF2o.js";
-import { Vt as approveDevicePairing, Wt as listDevicePairing, Xt as summarizeDeviceTokens } from "./client-G9E5HGM2.js";
-import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-BlWEBz99.js";
+import { Vt as approveDevicePairing, Wt as listDevicePairing, Xt as summarizeDeviceTokens } from "./client-COy24r9W.js";
+import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-D7jOWSFr.js";
 import "./pairing-token-B_ig96RO.js";
-import { r as isLoopbackHost } from "./net-CCnbGop3.js";
-import "./tailnet-CZANZjq6.js";
+import { r as isLoopbackHost } from "./net-CIh5ellr.js";
+import "./tailnet-DJq7Mi1o.js";
 import { n as formatTimeAgo } from "./format-relative-Czf5fUjn.js";
 import { n as withProgress } from "./progress-DuhDspl6.js";
 import { t as renderTable } from "./table-DbDCX_6t.js";

package/dist/{diagnostic-CLEtu0MC.js → diagnostic-B4w80e4D.js}

@@ -1,5 +1,5 @@
 import { t as createSubsystemLogger } from "./subsystem-Bw5n50gj.js";
-import { z as loadConfig } from "./auth-profiles-CX4YYu7Z.js";
+import { z as loadConfig } from "./auth-profiles-9T4j6jMy.js";
 
 //#region src/logging/diagnostic-session-state.ts
 const diagnosticSessionStates = /* @__PURE__ */ new Map();

package/dist/{diagnostic-C2lklhkn.js → diagnostic-CnVwZNbm.js}

@@ -1,5 +1,5 @@
-import { t as createSubsystemLogger } from "./subsystem-BaLYRf7D.js";
-import { X as loadConfig } from "./model-selection-CHnojCCK.js";
+import { t as createSubsystemLogger } from "./subsystem-6v7sWnAD.js";
+import { X as loadConfig } from "./model-selection-DuNLFQPR.js";
 
 //#region src/infra/diagnostic-events.ts
 function getDiagnosticEventsState() {

package/dist/{diagnostics--O6mo6KH.js → diagnostics-m7hHHbuE.js}

@@ -1,5 +1,5 @@
-import { s as resolveGatewayLogPaths } from "./service-DSqxS6_D.js";
-import fs from "node:fs/promises";
+import { s as resolveGatewayLogPaths } from "./service-B5T42CWZ.js";
+import fsPromises from "node:fs/promises";
 
 //#region src/daemon/diagnostics.ts
 const GATEWAY_LOG_ERROR_PATTERNS = [
@@ -11,7 +11,7 @@ const GATEWAY_LOG_ERROR_PATTERNS = [
 ];
 async function readLastLogLine(filePath) {
 	try {
-		const lines = (await fs.readFile(filePath, "utf8")).split(/\r?\n/).map((line) => line.trim());
+		const lines = (await fsPromises.readFile(filePath, "utf8")).split(/\r?\n/).map((line) => line.trim());
 		for (let i = lines.length - 1; i >= 0; i -= 1) if (lines[i]) return lines[i];
 		return null;
 	} catch {
@@ -20,8 +20,8 @@ async function readLastLogLine(filePath) {
 }
 async function readLastGatewayErrorLine(env) {
 	const { stdoutPath, stderrPath } = resolveGatewayLogPaths(env);
-	const stderrRaw = await fs.readFile(stderrPath, "utf8").catch(() => "");
-	const stdoutRaw = await fs.readFile(stdoutPath, "utf8").catch(() => "");
+	const stderrRaw = await fsPromises.readFile(stderrPath, "utf8").catch(() => "");
+	const stdoutRaw = await fsPromises.readFile(stdoutPath, "utf8").catch(() => "");
 	const lines = [...stderrRaw.split(/\r?\n/), ...stdoutRaw.split(/\r?\n/)].map((line) => line.trim());
 	for (let i = lines.length - 1; i >= 0; i -= 1) {
 		const line = lines[i];

package/dist/{directory-cli-K9qIwxYa.js → directory-cli-DqObADBL.js}

@@ -2,10 +2,10 @@ import { p as theme, t as danger } from "./globals-BrhVUl-N.js";
 import "./paths-CHIu6D1E.js";
 import { d as defaultRuntime } from "./subsystem-Bw5n50gj.js";
 import "./boolean-DtWR5bt3.js";
-import { z as loadConfig } from "./auth-profiles-CX4YYu7Z.js";
-import "./agent-scope-Cq4vDGrK.js";
+import { z as loadConfig } from "./auth-profiles-9T4j6jMy.js";
+import "./agent-scope-nEVgVklg.js";
 import "./utils-D6vohX1h.js";
-import "./squidclaw-root-BQfLymzj.js";
+import "./squidclaw-root-JXyRbQLJ.js";
 import "./logger-DL3N22PJ.js";
 import "./exec-TSiqsZw1.js";
 import "./registry-BXcl3IkC.js";
@@ -13,12 +13,12 @@ import "./github-copilot-token-CxitgiZA.js";
 import "./host-env-security-lcjXF83D.js";
 import "./version-3so140Zi.js";
 import "./env-vars-mSSOl7Rv.js";
-import "./manifest-registry-7kwtbCH-.js";
+import "./manifest-registry-1ACGW3OR.js";
 import "./message-channel-DqvtYF2o.js";
-import { t as getChannelPlugin } from "./plugins-BDTkSIi7.js";
-import "./accounts-BK8I0Svb.js";
+import { t as getChannelPlugin } from "./plugins-Bc7YM9X-.js";
+import "./accounts-BH9Qo1sQ.js";
 import "./logging-CcxUDNcI.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-BqwS1Rlq.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-CFWQq1nS.js";
 import { t as formatDocsLink } from "./links-Dye6HsRG.js";
 import { t as formatHelpExamples } from "./help-format-CpR5cEGe.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-D7MilaX-.js";

package/dist/{dns-cli-qtX-WNMF.js → dns-cli-CKbwsWBv.js}

@@ -2,10 +2,10 @@ import { p as theme } from "./globals-BrhVUl-N.js";
 import "./paths-CHIu6D1E.js";
 import { d as defaultRuntime } from "./subsystem-Bw5n50gj.js";
 import "./boolean-DtWR5bt3.js";
-import { z as loadConfig } from "./auth-profiles-CX4YYu7Z.js";
-import "./agent-scope-Cq4vDGrK.js";
+import { z as loadConfig } from "./auth-profiles-9T4j6jMy.js";
+import "./agent-scope-nEVgVklg.js";
 import "./utils-D6vohX1h.js";
-import "./squidclaw-root-BQfLymzj.js";
+import "./squidclaw-root-JXyRbQLJ.js";
 import "./logger-DL3N22PJ.js";
 import "./exec-TSiqsZw1.js";
 import "./registry-BXcl3IkC.js";
@@ -13,8 +13,8 @@ import "./github-copilot-token-CxitgiZA.js";
 import "./host-env-security-lcjXF83D.js";
 import "./version-3so140Zi.js";
 import "./env-vars-mSSOl7Rv.js";
-import "./manifest-registry-7kwtbCH-.js";
-import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-CZANZjq6.js";
+import "./manifest-registry-1ACGW3OR.js";
+import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-DJq7Mi1o.js";
 import { t as formatDocsLink } from "./links-Dye6HsRG.js";
 import { t as renderTable } from "./table-DbDCX_6t.js";
 import { n as resolveWideAreaDiscoveryDomain, t as getWideAreaZonePath } from "./widearea-dns-BCMIEFUS.js";

package/dist/{dock-DJJAj46v.js → dock-W3cGg46W.js}

@@ -1,10 +1,10 @@
 import { _ as normalizeAccountId } from "./session-key-k6urs9r-.js";
 import { c as escapeRegExp, p as normalizeE164 } from "./utils-D6vohX1h.js";
 import { a as getChatChannelMeta, n as CHAT_CHANNEL_ORDER, p as requireActivePluginRegistry } from "./registry-BXcl3IkC.js";
-import { b as resolveSlackReplyToMode, k as resolveDiscordAccount, l as resolveTelegramAccount, w as normalizeWhatsAppTarget, y as resolveSlackAccount } from "./plugins-BDTkSIi7.js";
-import { i as resolveWhatsAppAccount, y as resolveAccountEntry } from "./accounts-BK8I0Svb.js";
-import { r as resolveIMessageAccount } from "./accounts-DeqNOvBo.js";
-import { i as resolveSignalAccount } from "./accounts-KzgPbLHP.js";
+import { b as resolveSlackReplyToMode, k as resolveDiscordAccount, l as resolveTelegramAccount, w as normalizeWhatsAppTarget, y as resolveSlackAccount } from "./plugins-Bc7YM9X-.js";
+import { i as resolveWhatsAppAccount, y as resolveAccountEntry } from "./accounts-BH9Qo1sQ.js";
+import { r as resolveIMessageAccount } from "./accounts-Cuwg9Tan.js";
+import { i as resolveSignalAccount } from "./accounts-B1RxFghM.js";
 
 //#region src/config/types.tools.ts
 const TOOLS_BY_SENDER_KEY_TYPES = [

package/dist/{docs-cli--gGxz79Z.js → docs-cli-BpZtes_j.js}

@@ -4,15 +4,15 @@ import { d as defaultRuntime } from "./subsystem-Bw5n50gj.js";
 import "./boolean-DtWR5bt3.js";
 import { t as formatCliCommand } from "./command-format-D8-lYArk.js";
 import "./utils-D6vohX1h.js";
-import "./squidclaw-root-BQfLymzj.js";
+import "./squidclaw-root-JXyRbQLJ.js";
 import "./logger-DL3N22PJ.js";
 import { t as runCommandWithTimeout } from "./exec-TSiqsZw1.js";
 import "./registry-BXcl3IkC.js";
 import "./host-env-security-lcjXF83D.js";
-import "./manifest-registry-7kwtbCH-.js";
+import "./manifest-registry-1ACGW3OR.js";
 import { d as hasBinary } from "./frontmatter-CFoRh1fy.js";
-import "./skills-C85azDXm.js";
-import "./path-alias-guards-vfYYQFIg.js";
+import "./skills-EwyaIyKC.js";
+import "./path-alias-guards-DeOVetT7.js";
 import "./redact-DknVdX-O.js";
 import "./errors-BnRmsfe-.js";
 import { t as formatDocsLink } from "./links-Dye6HsRG.js";

package/dist/{doctor-completion-CZoEdMS-.js → doctor-completion--7PR_Vqz.js}

@@ -1,7 +1,7 @@
 import { r as resolveCliName } from "./command-format-D8-lYArk.js";
-import { t as resolveSquidClawPackageRoot } from "./squidclaw-root-BQfLymzj.js";
+import { t as resolveSquidClawPackageRoot } from "./squidclaw-root-JXyRbQLJ.js";
 import { t as note } from "./note-IoQo8Ol0.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-BR1r9_h4.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-DCTv7Ejv.js";
 import { spawnSync } from "node:child_process";
 import path from "node:path";
 

package/dist/{doctor-config-flow-C-h3yV4z.js → doctor-config-flow-BDF7TR6O.js}

@@ -1,27 +1,27 @@
 import { f as resolveLegacyStateDirs, g as resolveStateDir, m as resolveOAuthDir, p as resolveNewStateDir, t as CONFIG_PATH } from "./paths-CHIu6D1E.js";
-import { Fn as resolveSlackNativeStreaming, I as migrateLegacyConfig, In as resolveSlackStreamingMode, Ln as resolveTelegramPreviewStreamMode, Mn as formatSlackStreamingBooleanMigrationMessage, Pn as resolveDiscordPreviewStreamMode, Qt as normalizeTrustedSafeBinDirs, V as readConfigFileSnapshot, Xt as isTrustedSafeBinPath, Yt as getTrustedSafeBinDirs, jn as formatSlackStreamModeMigrationMessage, ln as resolveCommandResolutionFromArgv, q as SquidClawSchema } from "./auth-profiles-CX4YYu7Z.js";
+import { Fn as resolveSlackNativeStreaming, I as migrateLegacyConfig, In as resolveSlackStreamingMode, Ln as resolveTelegramPreviewStreamMode, Mn as formatSlackStreamingBooleanMigrationMessage, Pn as resolveDiscordPreviewStreamMode, Qt as normalizeTrustedSafeBinDirs, V as readConfigFileSnapshot, Xt as isTrustedSafeBinPath, Yt as getTrustedSafeBinDirs, jn as formatSlackStreamModeMigrationMessage, ln as resolveCommandResolutionFromArgv, q as SquidClawSchema } from "./auth-profiles-9T4j6jMy.js";
 import { t as formatCliCommand } from "./command-format-D8-lYArk.js";
-import { d as resolveDefaultAgentId } from "./agent-scope-Cq4vDGrK.js";
+import { d as resolveDefaultAgentId } from "./agent-scope-nEVgVklg.js";
 import { _ as normalizeAccountId, c as normalizeAgentId, g as DEFAULT_ACCOUNT_ID, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, v as normalizeOptionalAccountId } from "./session-key-k6urs9r-.js";
 import { g as resolveHomeDir, u as isRecord } from "./utils-D6vohX1h.js";
 import { l as normalizeChatChannelId } from "./registry-BXcl3IkC.js";
-import { f as parseToolsBySenderTypedKey } from "./dock-DJJAj46v.js";
-import { Q as canonicalizeMainSessionAlias, l as saveSessionStore } from "./sessions-BWptzMw0.js";
-import { d as formatChannelAccountsDefaultPath, f as formatSetExplicitDefaultInstruction, l as resolveTelegramAccount, p as formatSetExplicitDefaultToConfiguredInstruction, s as listTelegramAccountIds } from "./plugins-BDTkSIi7.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-CfQeDABF.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-D0eOXyby.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-DJkHW_LG.js";
+import { f as parseToolsBySenderTypedKey } from "./dock-W3cGg46W.js";
+import { Q as canonicalizeMainSessionAlias, l as saveSessionStore } from "./sessions-DgnXAQCc.js";
+import { d as formatChannelAccountsDefaultPath, f as formatSetExplicitDefaultInstruction, l as resolveTelegramAccount, p as formatSetExplicitDefaultToConfiguredInstruction, s as listTelegramAccountIds } from "./plugins-Bc7YM9X-.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-DECo77U6.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-BC4mnG9S.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-a3TK3OPT.js";
 import { t as collectProviderDangerousNameMatchingScopes } from "./dangerous-name-matching-CXdnb6je.js";
 import { r as shouldMoveSingleAccountChannelKey, t as fetchTelegramChatId } from "./api-D_ieZ9ip.js";
 import { t as note } from "./note-IoQo8Ol0.js";
-import { t as isWithinDir } from "./path-safety-C95DzArw.js";
-import { n as formatConfigIssueLines } from "./issue-format-DCcINW-9.js";
+import { t as isWithinDir } from "./path-safety-D7CjFQvf.js";
+import { n as formatConfigIssueLines } from "./issue-format-CbTfB8Hy.js";
 import { a as isMattermostMutableAllowEntry, c as normalizeTelegramAllowFromEntry, i as isMSTeamsMutableAllowEntry, n as isGoogleChatMutableAllowEntry, o as isSlackMutableAllowEntry, r as isIrcMutableAllowEntry, s as isNumericTelegramUserId, t as isDiscordMutableAllowEntry } from "./mutable-allowlist-detectors-DHXBcz_e.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs";
 import JSON5 from "json5";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 
 //#region src/commands/doctor-legacy-config.ts
 function normalizeCompatibilityConfigValues(cfg) {
@@ -2134,7 +2134,7 @@ async function maybeMigrateLegacyConfig() {
 	const targetDir = path.join(home, ".squidclaw");
 	const targetPath = path.join(targetDir, "squidclaw.json");
 	try {
-		await fs$1.access(targetPath);
+		await fsPromises.access(targetPath);
 		return changes;
 	} catch {}
 	const legacyCandidates = [
@@ -2144,14 +2144,14 @@ async function maybeMigrateLegacyConfig() {
 	];
 	let legacyPath = null;
 	for (const candidate of legacyCandidates) try {
-		await fs$1.access(candidate);
+		await fsPromises.access(candidate);
 		legacyPath = candidate;
 		break;
 	} catch {}
 	if (!legacyPath) return changes;
-	await fs$1.mkdir(targetDir, { recursive: true });
+	await fsPromises.mkdir(targetDir, { recursive: true });
 	try {
-		await fs$1.copyFile(legacyPath, targetPath, fs$1.constants.COPYFILE_EXCL);
+		await fsPromises.copyFile(legacyPath, targetPath, fsPromises.constants.COPYFILE_EXCL);
 		changes.push(`Migrated legacy config: ${legacyPath} -> ${targetPath}`);
 	} catch {}
 	return changes;

package/dist/{enable-C8FNY18p.js → enable--Q7yLTZm.js}

@@ -1,5 +1,5 @@
 import { l as normalizeChatChannelId } from "./registry-BXcl3IkC.js";
-import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-DJkHW_LG.js";
+import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-a3TK3OPT.js";
 
 //#region src/plugins/toggle-config.ts
 function setPluginEnabledInConfig(config, pluginId, enabled) {

package/dist/entry.js

@@ -370,7 +370,7 @@ if (!isMainModule({
 	}
 	function tryHandleRootHelpFastPath(argv) {
 		if (!isRootHelpInvocation(argv)) return false;
-		import("./program-D_xdLzmM.js").then(({ buildProgram }) => {
+		import("./program-Nott_VTb.js").then(({ buildProgram }) => {
 			buildProgram().outputHelp();
 		}).catch((error) => {
 			console.error("[squidclaw] Failed to display help:", error instanceof Error ? error.stack ?? error.message : error);
@@ -389,7 +389,7 @@ if (!isMainModule({
 			applyCliProfileEnv({ profile: parsed.profile });
 			process$1.argv = parsed.argv;
 		}
-		if (!tryHandleRootVersionFastPath(process$1.argv) && !tryHandleRootHelpFastPath(process$1.argv)) import("./run-main-BcA22Ipv.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
+		if (!tryHandleRootVersionFastPath(process$1.argv) && !tryHandleRootHelpFastPath(process$1.argv)) import("./run-main-BF7ybLIy.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
 			console.error("[squidclaw] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 			process$1.exitCode = 1;
 		});

package/dist/{errors-DfgAh2Ml.js → errors-kkRuS2Cs.js}

@@ -1,4 +1,4 @@
-import { t as redactSensitiveText } from "./redact-NmPEVjIo.js";
+import { t as redactSensitiveText } from "./redact-DvzicBMu.js";
 
 //#region src/infra/errors.ts
 function extractErrorCode(err) {

package/dist/{exec-approvals-allowlist-CtSREgYh.js → exec-approvals-allowlist-B9bcJkGP.js}

@@ -1,4 +1,4 @@
-import { $t as validateSafeBinArgv, Xt as isTrustedSafeBinPath, an as splitCommandChain, cn as resolveAllowlistCandidatePath, fn as extractShellWrapperInlineCommand, hn as isShellWrapperExecutable, ln as resolveCommandResolutionFromArgv, mn as isDispatchWrapperExecutable, on as DEFAULT_SAFE_BINS, rn as isWindowsPlatform, sn as matchAllowlist, tn as analyzeShellCommand, vn as unwrapKnownDispatchWrapperInvocation, wn as SAFE_BIN_PROFILES, yn as unwrapKnownShellMultiplexerInvocation } from "./auth-profiles-CX4YYu7Z.js";
+import { $t as validateSafeBinArgv, Xt as isTrustedSafeBinPath, an as splitCommandChain, cn as resolveAllowlistCandidatePath, fn as extractShellWrapperInlineCommand, hn as isShellWrapperExecutable, ln as resolveCommandResolutionFromArgv, mn as isDispatchWrapperExecutable, on as DEFAULT_SAFE_BINS, rn as isWindowsPlatform, sn as matchAllowlist, tn as analyzeShellCommand, vn as unwrapKnownDispatchWrapperInvocation, wn as SAFE_BIN_PROFILES, yn as unwrapKnownShellMultiplexerInvocation } from "./auth-profiles-9T4j6jMy.js";
 import path from "node:path";
 
 //#region src/infra/exec-approvals-allowlist.ts

package/dist/{exec-approvals-cli-BmM4RpVn.js → exec-approvals-cli-homtziYt.js}

@@ -2,10 +2,10 @@ import { f as isRich, p as theme } from "./globals-BrhVUl-N.js";
 import "./paths-CHIu6D1E.js";
 import { d as defaultRuntime } from "./subsystem-Bw5n50gj.js";
 import "./boolean-DtWR5bt3.js";
-import "./auth-profiles-CX4YYu7Z.js";
-import "./agent-scope-Cq4vDGrK.js";
+import "./auth-profiles-9T4j6jMy.js";
+import "./agent-scope-nEVgVklg.js";
 import "./utils-D6vohX1h.js";
-import "./squidclaw-root-BQfLymzj.js";
+import "./squidclaw-root-JXyRbQLJ.js";
 import "./logger-DL3N22PJ.js";
 import "./exec-TSiqsZw1.js";
 import "./registry-BXcl3IkC.js";
@@ -13,26 +13,26 @@ import "./github-copilot-token-CxitgiZA.js";
 import "./host-env-security-lcjXF83D.js";
 import "./version-3so140Zi.js";
 import "./env-vars-mSSOl7Rv.js";
-import "./manifest-registry-7kwtbCH-.js";
+import "./manifest-registry-1ACGW3OR.js";
 import "./message-channel-DqvtYF2o.js";
-import "./client-G9E5HGM2.js";
-import "./call-BlWEBz99.js";
+import "./client-COy24r9W.js";
+import "./call-D7jOWSFr.js";
 import "./pairing-token-B_ig96RO.js";
-import "./net-CCnbGop3.js";
-import "./tailnet-CZANZjq6.js";
-import "./exec-approvals-allowlist-CtSREgYh.js";
+import "./net-CIh5ellr.js";
+import "./tailnet-DJq7Mi1o.js";
+import "./exec-approvals-allowlist-B9bcJkGP.js";
 import { n as formatTimeAgo } from "./format-relative-Czf5fUjn.js";
 import { c as readExecApprovalsSnapshot, p as saveExecApprovals } from "./exec-approvals-Db6myg-N.js";
 import { t as formatDocsLink } from "./links-Dye6HsRG.js";
 import "./progress-DuhDspl6.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-D0AmaBzR.js";
-import "./systemd-Cj2cX_ZP.js";
-import "./service-DSqxS6_D.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-BBBN9ZJk.js";
+import "./systemd-B86VePXs.js";
+import "./service-B5T42CWZ.js";
 import { t as renderTable } from "./table-DbDCX_6t.js";
-import { t as describeUnknownError } from "./shared-D5DTxBPH.js";
-import { a as resolveNodeId, r as nodesCallOpts } from "./rpc-DA9IhLVG.js";
+import { t as describeUnknownError } from "./shared-By6_qr_R.js";
+import { a as resolveNodeId, r as nodesCallOpts } from "./rpc-mau2U4RG.js";
 import JSON5 from "json5";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 
 //#region src/cli/exec-approvals-cli.ts
 async function readStdin() {
@@ -329,7 +329,7 @@ function registerExecApprovalsCli(program) {
 			if (!opts.file && !opts.stdin) exitWithError("Provide --file or --stdin.");
 			if (opts.file && opts.stdin) exitWithError("Use either --file or --stdin (not both).");
 			const { source, nodeId, targetLabel, baseHash } = await loadWritableSnapshotTarget(opts);
-			const raw = opts.stdin ? await readStdin() : await fs.readFile(String(opts.file), "utf8");
+			const raw = opts.stdin ? await readStdin() : await fsPromises.readFile(String(opts.file), "utf8");
 			let file;
 			try {
 				file = JSON5.parse(raw);

package/dist/{exec-safe-bin-runtime-policy-CfQeDABF.js → exec-safe-bin-runtime-policy-DECo77U6.js}

@@ -1,5 +1,5 @@
-import { En as resolveSafeBinProfiles, Qt as normalizeTrustedSafeBinDirs, Tn as normalizeSafeBinProfileFixtures, Yt as getTrustedSafeBinDirs, Zt as listWritableExplicitTrustedSafeBinDirs } from "./auth-profiles-CX4YYu7Z.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-CtSREgYh.js";
+import { En as resolveSafeBinProfiles, Qt as normalizeTrustedSafeBinDirs, Tn as normalizeSafeBinProfileFixtures, Yt as getTrustedSafeBinDirs, Zt as listWritableExplicitTrustedSafeBinDirs } from "./auth-profiles-9T4j6jMy.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-B9bcJkGP.js";
 
 //#region src/infra/exec-safe-bin-runtime-policy.ts
 const INTERPRETER_LIKE_SAFE_BINS = new Set([

package/dist/{fetch-b8tSR7_e.js → fetch-DP-JjB6Z.js}

@@ -1,8 +1,8 @@
-import { c as resolveAgentWorkspaceDir } from "./run-with-concurrency-FczpX8ng.js";
-import { c as resolveStateDir } from "./paths-CSdAWKDO.js";
-import { w as resolvePreferredSquidClawTmpDir } from "./subsystem-BaLYRf7D.js";
-import { b as detectMime, x as extensionForMime } from "./image-ops-BoN1E_WZ.js";
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-D16tjNsZ.js";
+import { c as resolveAgentWorkspaceDir } from "./run-with-concurrency-BFR3ReeF.js";
+import { c as resolveStateDir } from "./paths-DA5srn0U.js";
+import { w as resolvePreferredSquidClawTmpDir } from "./subsystem-6v7sWnAD.js";
+import { b as detectMime, x as extensionForMime } from "./image-ops-Dg8iraUV.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-BDy975wP.js";
 import path from "node:path";
 
 //#region src/media/local-roots.ts

package/dist/{fetch-guard-D16tjNsZ.js → fetch-guard-BDy975wP.js}

@@ -1,5 +1,5 @@
-import { i as logWarn } from "./logger-oGKcCLZ5.js";
-import { i as createPinnedDispatcher, n as SsrFBlockedError, r as closeDispatcher, s as resolvePinnedHostnameWithPolicy, t as hasProxyEnvConfigured } from "./proxy-env-DXXfs2WL.js";
+import { i as logWarn } from "./logger-CnTSBL7T.js";
+import { i as createPinnedDispatcher, n as SsrFBlockedError, r as closeDispatcher, s as resolvePinnedHostnameWithPolicy, t as hasProxyEnvConfigured } from "./proxy-env-D-fike7s.js";
 import { t as bindAbortRelay } from "./fetch-timeout-Wgx3OXYj.js";
 import { EnvHttpProxyAgent } from "undici";
 

package/dist/{fetch-guard-Dvzi3MjK.js → fetch-guard-CbtWqa1E.js}

@@ -1,5 +1,5 @@
 import { i as logWarn } from "./logger-DL3N22PJ.js";
-import { i as createPinnedDispatcher, n as SsrFBlockedError, r as closeDispatcher, s as resolvePinnedHostnameWithPolicy, t as hasProxyEnvConfigured } from "./proxy-env-CQTuxZoS.js";
+import { i as createPinnedDispatcher, n as SsrFBlockedError, r as closeDispatcher, s as resolvePinnedHostnameWithPolicy, t as hasProxyEnvConfigured } from "./proxy-env-BiKHVg2h.js";
 import { t as bindAbortRelay } from "./fetch-timeout-Mawkd1Br.js";
 import { EnvHttpProxyAgent } from "undici";
 

package/dist/{fetch-CtoC2wgs.js → fetch-lq0SDLLE.js}

@@ -1,8 +1,8 @@
 import { k as resolvePreferredSquidClawTmpDir } from "./globals-BrhVUl-N.js";
 import { g as resolveStateDir } from "./paths-CHIu6D1E.js";
-import { u as resolveAgentWorkspaceDir } from "./agent-scope-Cq4vDGrK.js";
-import { c as detectMime, l as extensionForMime } from "./image-ops-B2uuLIGD.js";
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-Dvzi3MjK.js";
+import { u as resolveAgentWorkspaceDir } from "./agent-scope-nEVgVklg.js";
+import { c as detectMime, l as extensionForMime } from "./image-ops-LFsSCTyI.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-CbtWqa1E.js";
 import path from "node:path";
 
 //#region src/media/local-roots.ts

package/dist/{frontmatter-CjKtFduT.js → frontmatter-Cq1TcIQ2.js}

@@ -1,6 +1,6 @@
-import { c as parseBooleanValue, n as MANIFEST_KEY, t as LEGACY_MANIFEST_KEYS } from "./legacy-names-B0wgIP0Q.js";
+import { c as parseBooleanValue, n as MANIFEST_KEY, t as LEGACY_MANIFEST_KEYS } from "./legacy-names-aGJJuzM_.js";
 import path from "node:path";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import JSON5 from "json5";
 import YAML from "yaml";
 
@@ -92,7 +92,7 @@ function hasBinary(bin) {
 	for (const part of parts) for (const ext of extensions) {
 		const candidate = path.join(part, bin + ext);
 		try {
-			fs.accessSync(candidate, fs.constants.X_OK);
+			syncFs.accessSync(candidate, syncFs.constants.X_OK);
 			hasBinaryCache.set(bin, true);
 			return true;
 		} catch {}