squidclaw 3.0.23 → 3.0.25

package/dist/{prompt-select-styled-BsheNEnh.js → prompt-select-styled-7mnlZgrQ.js}

@@ -2,58 +2,58 @@ import { g as getResolvedLoggerSettings } from "./globals-BrhVUl-N.js";
 import { d as resolveIsNixMode, g as resolveStateDir, m as resolveOAuthDir, t as CONFIG_PATH, u as resolveGatewayPort, y as resolveRequiredHomeDir } from "./paths-CHIu6D1E.js";
 import { d as defaultRuntime } from "./subsystem-Bw5n50gj.js";
 import { r as isTruthyEnvValue$1 } from "./entry.js";
-import { Bi as CLAUDE_CLI_PROFILE_ID, Er as resolveConfiguredModelRef, G as writeConfigFile, Ii as DEFAULT_MODEL, Kn as repairOAuthProfileIdMismatch, Li as DEFAULT_PROVIDER, Or as resolveHooksGmailModel, V as readConfigFileSnapshot, Vi as CODEX_CLI_PROFILE_ID, d as resolveApiKeyForProfile, er as ensureAuthProfileStore, gr as getModelRefStatus, ir as updateAuthProfileStoreWithLock, l as resolveProfileUnusableUntilForDisplay, mi as resolveApiKeyForProvider } from "./auth-profiles-CX4YYu7Z.js";
+import { Bi as CLAUDE_CLI_PROFILE_ID, Er as resolveConfiguredModelRef, G as writeConfigFile, Ii as DEFAULT_MODEL, Kn as repairOAuthProfileIdMismatch, Li as DEFAULT_PROVIDER, Or as resolveHooksGmailModel, V as readConfigFileSnapshot, Vi as CODEX_CLI_PROFILE_ID, d as resolveApiKeyForProfile, er as ensureAuthProfileStore, gr as getModelRefStatus, ir as updateAuthProfileStoreWithLock, l as resolveProfileUnusableUntilForDisplay, mi as resolveApiKeyForProvider } from "./auth-profiles-9T4j6jMy.js";
 import { t as formatCliCommand } from "./command-format-D8-lYArk.js";
-import { a as resolveAgentDir, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, u as resolveAgentWorkspaceDir } from "./agent-scope-Cq4vDGrK.js";
+import { a as resolveAgentDir, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, u as resolveAgentWorkspaceDir } from "./agent-scope-nEVgVklg.js";
 import { E as parseAgentSessionKey } from "./session-key-k6urs9r-.js";
 import { S as sleep, v as resolveUserPath, x as shortenHomePath } from "./utils-D6vohX1h.js";
-import { t as resolveSquidClawPackageRoot } from "./squidclaw-root-BQfLymzj.js";
+import { t as resolveSquidClawPackageRoot } from "./squidclaw-root-JXyRbQLJ.js";
 import { n as runExec, t as runCommandWithTimeout } from "./exec-TSiqsZw1.js";
 import { A as hasConfiguredSecretInput } from "./registry-BXcl3IkC.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-DkO7rxE8.js";
-import { B as cleanStaleLockFiles, o as loadSessionStore, ot as formatSessionArchiveTimestamp, st as isPrimarySessionTranscriptFileName, tt as resolveMainSessionKey } from "./sessions-BWptzMw0.js";
-import { n as listChannelPlugins } from "./plugins-BDTkSIi7.js";
-import { Nn as analyzeBootstrapBudget, Pn as buildBootstrapInjectionStats, b as loadSquidClawPlugins, dn as buildAuthHealthSummary, fn as formatRemainingShort, un as DEFAULT_OAUTH_WARN_MS, vr as resolveAgentSessionDirs, wr as resolveBootstrapContextForRun } from "./subagent-registry-CIgFD2oi.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-Bv8Xt7Lc.js";
+import { B as cleanStaleLockFiles, o as loadSessionStore, ot as formatSessionArchiveTimestamp, st as isPrimarySessionTranscriptFileName, tt as resolveMainSessionKey } from "./sessions-DgnXAQCc.js";
+import { n as listChannelPlugins } from "./plugins-Bc7YM9X-.js";
+import { Nn as analyzeBootstrapBudget, Pn as buildBootstrapInjectionStats, b as loadSquidClawPlugins, dn as buildAuthHealthSummary, fn as formatRemainingShort, un as DEFAULT_OAUTH_WARN_MS, vr as resolveAgentSessionDirs, wr as resolveBootstrapContextForRun } from "./subagent-registry-CQA6P2FO.js";
 import { c as resolveStorePath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-Dn_rzeZN.js";
-import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-BlWEBz99.js";
-import { r as isLoopbackHost, u as resolveGatewayBindHost } from "./net-CCnbGop3.js";
-import { B as resolveBootstrapTotalMaxChars, R as resolveBootstrapMaxChars } from "./pi-embedded-helpers-qCAK_a65.js";
-import { D as DEFAULT_SANDBOX_COMMON_IMAGE, E as DEFAULT_SANDBOX_BROWSER_IMAGE, O as DEFAULT_SANDBOX_IMAGE, p as resolveSandboxScope } from "./sandbox-C3TbYIHd.js";
-import { a as resolveGatewayAuth } from "./auth-CuObxnC4.js";
-import { n as inspectPortUsage, o as formatPortDiagnostics } from "./ports-0jLyYbvQ.js";
-import { n as loadModelCatalog } from "./model-catalog-BWuvEv1x.js";
+import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-D7jOWSFr.js";
+import { r as isLoopbackHost, u as resolveGatewayBindHost } from "./net-CIh5ellr.js";
+import { B as resolveBootstrapTotalMaxChars, R as resolveBootstrapMaxChars } from "./pi-embedded-helpers-DtCOZSv-.js";
+import { D as DEFAULT_SANDBOX_COMMON_IMAGE, E as DEFAULT_SANDBOX_BROWSER_IMAGE, O as DEFAULT_SANDBOX_IMAGE, p as resolveSandboxScope } from "./sandbox-ixDhkfHu.js";
+import { a as resolveGatewayAuth } from "./auth-BlP9BwaD.js";
+import { n as inspectPortUsage, o as formatPortDiagnostics } from "./ports-DMeUt80n.js";
+import { n as loadModelCatalog } from "./model-catalog-Drh9Rois.js";
 import { f as resolveGatewaySystemdServiceName, h as resolveNodeLaunchAgentLabel, l as resolveGatewayLaunchAgentLabel, p as resolveGatewayWindowsTaskName } from "./constants-vBANYkEo.js";
-import { l as resolveDmAllowState } from "./pi-tools.policy-BwWnFLLV.js";
-import { r as isWSLEnv, t as isWSL } from "./wsl-CvQfS6aU.js";
-import { h as randomToken, n as applyWizardMetadata, p as printWizardHeader, s as guardCancel } from "./onboard-helpers-BP429__H.js";
+import { l as resolveDmAllowState } from "./pi-tools.policy-D3RA94WF.js";
+import { r as isWSLEnv, t as isWSL } from "./wsl-CsGe5QCP.js";
+import { h as randomToken, n as applyWizardMetadata, p as printWizardHeader, s as guardCancel } from "./onboard-helpers-DwEZeaoe.js";
 import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-D_i_ws0g.js";
-import { i as resolveMemoryBackendConfig } from "./memory-cli-Dj8tyFtt.js";
-import { n as DEFAULT_LOCAL_MODEL, r as resolveMemorySearchConfig } from "./manager-5OzUkYLf.js";
+import { i as resolveMemoryBackendConfig } from "./memory-cli-u8eyO3Ec.js";
+import { n as DEFAULT_LOCAL_MODEL, r as resolveMemorySearchConfig } from "./manager-BVfTfggO.js";
 import { t as note$1 } from "./note-IoQo8Ol0.js";
-import { t as collectChannelStatusIssues } from "./channels-status-issues-Dz1_R7Ah.js";
-import { d as resolveSystemNodeInfo, l as renderSystemNodeWarning, n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-CJtiW2RE.js";
+import { t as collectChannelStatusIssues } from "./channels-status-issues-Erzzhl2e.js";
+import { d as resolveSystemNodeInfo, l as renderSystemNodeWarning, n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-CZDVO_MU.js";
 import { n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Dgg-ogyc.js";
-import { l as uninstallLegacySystemdUnits, r as isSystemdUserServiceAvailable } from "./systemd-Cj2cX_ZP.js";
-import { a as launchAgentPlistExists, i as isLaunchAgentLoaded, o as repairLaunchAgentBootstrap, r as isLaunchAgentListed, s as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-DSqxS6_D.js";
-import { i as auditGatewayServiceConfig, n as renderSystemdUnavailableHints, o as needsNodeRuntimeMigration, r as SERVICE_AUDIT_CODES, s as formatRuntimeStatus, t as isSystemdUnavailableDetail } from "./systemd-hints-46PqJfaq.js";
-import { t as readLastGatewayErrorLine } from "./diagnostics--O6mo6KH.js";
-import { n as renderGatewayServiceCleanupHints, t as findExtraGatewayServices } from "./inspect-4c1uL0x5.js";
-import { r as healthCommand } from "./health-XFKFZ7ZJ.js";
-import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-BYEy341x.js";
-import { t as resolveDefaultChannelAccountContext } from "./channel-account-context-CQ6rCiGI.js";
-import { t as runGatewayUpdate } from "./update-runner-BBJZmfZ4.js";
+import { l as uninstallLegacySystemdUnits, r as isSystemdUserServiceAvailable } from "./systemd-B86VePXs.js";
+import { a as launchAgentPlistExists, i as isLaunchAgentLoaded, o as repairLaunchAgentBootstrap, r as isLaunchAgentListed, s as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-B5T42CWZ.js";
+import { i as auditGatewayServiceConfig, n as renderSystemdUnavailableHints, o as needsNodeRuntimeMigration, r as SERVICE_AUDIT_CODES, s as formatRuntimeStatus, t as isSystemdUnavailableDetail } from "./systemd-hints-BmFWZu_j.js";
+import { t as readLastGatewayErrorLine } from "./diagnostics-m7hHHbuE.js";
+import { n as renderGatewayServiceCleanupHints, t as findExtraGatewayServices } from "./inspect-CzsXBsew.js";
+import { r as healthCommand } from "./health-CjXrJkCb.js";
+import { n as resolveControlUiDistIndexHealth, r as resolveControlUiDistIndexPathForRoot } from "./control-ui-assets-d6VtDSeo.js";
+import { t as resolveDefaultChannelAccountContext } from "./channel-account-context-DJ3rHgVO.js";
+import { t as runGatewayUpdate } from "./update-runner-DdA6xBa9.js";
 import { n as logConfigUpdated } from "./logging-ZAeFsd9K.js";
-import { n as detectLegacyStateMigrations, r as runLegacyStateMigrations, t as loadAndMaybeMigrateDoctorConfig } from "./doctor-config-flow-C-h3yV4z.js";
+import { n as detectLegacyStateMigrations, r as runLegacyStateMigrations, t as loadAndMaybeMigrateDoctorConfig } from "./doctor-config-flow-BDF7TR6O.js";
 import { n as noteOpenAIOAuthTlsPrerequisites } from "./oauth-tls-preflight-6-9iUInB.js";
-import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-6Jd9K5p2.js";
+import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-w7fvBU-1.js";
 import { t as formatHealthCheckFailure } from "./health-format-eNDYxTNS.js";
-import { n as doctorShellCompletion } from "./doctor-completion-CZoEdMS-.js";
+import { n as doctorShellCompletion } from "./doctor-completion--7PR_Vqz.js";
 import { execFile } from "node:child_process";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs";
 import { promisify } from "node:util";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { confirm, intro, outro, select } from "@clack/prompts";
 
 //#region src/commands/doctor-auth.ts
@@ -604,16 +604,16 @@ async function cleanupLegacyLaunchdService(params) {
 	await execFileAsync$1("launchctl", ["unload", params.plistPath]).catch(() => void 0);
 	const trashDir = path.join(os.homedir(), ".Trash");
 	try {
-		await fs$1.mkdir(trashDir, { recursive: true });
+		await fsPromises.mkdir(trashDir, { recursive: true });
 	} catch {}
 	try {
-		await fs$1.access(params.plistPath);
+		await fsPromises.access(params.plistPath);
 	} catch {
 		return null;
 	}
 	const dest = path.join(trashDir, `${params.label}-${Date.now()}.plist`);
 	try {
-		await fs$1.rename(params.plistPath, dest);
+		await fsPromises.rename(params.plistPath, dest);
 		return dest;
 	} catch {
 		return null;
@@ -1952,11 +1952,11 @@ async function maybeRepairUiProtocolFreshness(_runtime, prompter) {
 		argv1: process.argv[1]
 	})).indexPath ?? resolveControlUiDistIndexPathForRoot(root);
 	try {
-		const [schemaStats, uiStats] = await Promise.all([fs$1.stat(schemaPath).catch(() => null), fs$1.stat(uiIndexPath).catch(() => null)]);
+		const [schemaStats, uiStats] = await Promise.all([fsPromises.stat(schemaPath).catch(() => null), fsPromises.stat(uiIndexPath).catch(() => null)]);
 		if (schemaStats && !uiStats) {
 			note$1(["- Control UI assets are missing.", "- Run: pnpm ui:build"].join("\n"), "UI");
 			const uiSourcesPath = path.join(root, "ui/package.json");
-			if (!await fs$1.stat(uiSourcesPath).catch(() => null)) {
+			if (!await fsPromises.stat(uiSourcesPath).catch(() => null)) {
 				note$1("Skipping UI build: ui/ sources not present.", "UI");
 				return;
 			}
@@ -2001,7 +2001,7 @@ async function maybeRepairUiProtocolFreshness(_runtime, prompter) {
 					initialValue: true
 				})) {
 					const uiSourcesPath = path.join(root, "ui/package.json");
-					if (!await fs$1.stat(uiSourcesPath).catch(() => null)) {
+					if (!await fsPromises.stat(uiSourcesPath).catch(() => null)) {
 						note$1("Skipping UI rebuild: ui/ sources not present.", "UI");
 						return;
 					}

package/dist/{provider-auth-helpers-B5kD4Lt6.js → provider-auth-helpers-_77rN3Zc.js}

@@ -1,10 +1,10 @@
 import { t as createSubsystemLogger } from "./subsystem-Bw5n50gj.js";
-import { Sr as normalizeProviderId, Zn as upsertAuthProfile, er as ensureAuthProfileStore } from "./auth-profiles-CX4YYu7Z.js";
-import { b as loadSquidClawPlugins, y as createPluginLoaderLogger } from "./subagent-registry-CIgFD2oi.js";
-import { r as isWSLEnv } from "./wsl-CvQfS6aU.js";
+import { Sr as normalizeProviderId, Zn as upsertAuthProfile, er as ensureAuthProfileStore } from "./auth-profiles-9T4j6jMy.js";
+import { b as loadSquidClawPlugins, y as createPluginLoaderLogger } from "./subagent-registry-CQA6P2FO.js";
+import { r as isWSLEnv } from "./wsl-CsGe5QCP.js";
 import { r as stylePromptTitle } from "./prompt-style-D_i_ws0g.js";
-import { f as updateConfig } from "./shared-BbVxcRzb.js";
-import { d as applyAuthProfileConfig } from "./auth-token-Dlk7MMsC.js";
+import { f as updateConfig } from "./shared-BYny1RCF.js";
+import { d as applyAuthProfileConfig } from "./auth-token-BFc70pes.js";
 import { n as logConfigUpdated } from "./logging-ZAeFsd9K.js";
 import { intro, note, outro, spinner } from "@clack/prompts";
 

package/dist/{proxy-env-CQTuxZoS.js → proxy-env-BiKHVg2h.js}

@@ -1,4 +1,4 @@
-import { Ct as isLegacyIpv4Literal, Ot as parseCanonicalIpAddress, _t as isBlockedSpecialUseIpv6Address, gt as isBlockedSpecialUseIpv4Address, ht as extractEmbeddedIpv4FromIpv6, kt as parseLooseIpAddress, vt as isCanonicalDottedDecimalIPv4, xt as isIpv4Address } from "./auth-profiles-CX4YYu7Z.js";
+import { Ct as isLegacyIpv4Literal, Ot as parseCanonicalIpAddress, _t as isBlockedSpecialUseIpv6Address, gt as isBlockedSpecialUseIpv4Address, ht as extractEmbeddedIpv4FromIpv6, kt as parseLooseIpAddress, vt as isCanonicalDottedDecimalIPv4, xt as isIpv4Address } from "./auth-profiles-9T4j6jMy.js";
 import { lookup } from "node:dns";
 import { lookup as lookup$1 } from "node:dns/promises";
 import { Agent } from "undici";

package/dist/{push-apns-BbenjEX4.js → push-apns-Ce1zzNYB.js}

@@ -2,13 +2,13 @@ import { r as isVerbose } from "./globals-BrhVUl-N.js";
 import { g as resolveStateDir } from "./paths-CHIu6D1E.js";
 import { s as shouldLogSubsystemToConsole, t as createSubsystemLogger } from "./subsystem-Bw5n50gj.js";
 import { E as parseAgentSessionKey } from "./session-key-k6urs9r-.js";
-import { g as sniffMimeFromBase64 } from "./subagent-registry-CIgFD2oi.js";
-import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-CuJjdF_0.js";
+import { g as sniffMimeFromBase64 } from "./subagent-registry-CQA6P2FO.js";
+import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-rR19q30D.js";
 import { n as redactSensitiveText, t as getDefaultRedactPatterns } from "./redact-DknVdX-O.js";
-import { o as estimateBase64DecodedBytes } from "./tool-images-CyzWvDUu.js";
+import { o as estimateBase64DecodedBytes } from "./tool-images-D6mmxuWS.js";
 import path from "node:path";
 import chalk from "chalk";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { createHash, createPrivateKey, sign } from "node:crypto";
 import http2 from "node:http2";
 
@@ -526,7 +526,7 @@ async function resolveApnsAuthConfigFromEnv(env = process.env) {
 			value: {
 				teamId,
 				keyId,
-				privateKey: normalizePrivateKey(await fs.readFile(keyPath, "utf8"))
+				privateKey: normalizePrivateKey(await fsPromises.readFile(keyPath, "utf8"))
 			}
 		};
 	} catch (err) {

package/dist/{pw-ai-wo5t_KO_.js → pw-ai-CAhTwexx.js}

@@ -2,11 +2,11 @@ import { k as resolvePreferredSquidClawTmpDir } from "./globals-BrhVUl-N.js";
 import "./paths-CHIu6D1E.js";
 import "./subsystem-Bw5n50gj.js";
 import "./boolean-DtWR5bt3.js";
-import "./auth-profiles-CX4YYu7Z.js";
+import "./auth-profiles-9T4j6jMy.js";
 import { t as formatCliCommand } from "./command-format-D8-lYArk.js";
-import "./agent-scope-Cq4vDGrK.js";
+import "./agent-scope-nEVgVklg.js";
 import "./utils-D6vohX1h.js";
-import "./squidclaw-root-BQfLymzj.js";
+import "./squidclaw-root-JXyRbQLJ.js";
 import "./logger-DL3N22PJ.js";
 import "./exec-TSiqsZw1.js";
 import "./registry-BXcl3IkC.js";
@@ -14,20 +14,20 @@ import "./github-copilot-token-CxitgiZA.js";
 import "./host-env-security-lcjXF83D.js";
 import "./version-3so140Zi.js";
 import "./env-vars-mSSOl7Rv.js";
-import "./manifest-registry-7kwtbCH-.js";
-import "./path-alias-guards-vfYYQFIg.js";
-import "./net-CCnbGop3.js";
-import "./tailnet-CZANZjq6.js";
-import { O as withNoProxyForCdpUrl, _ as appendCdpPath, b as getHeadersWithAuth, d as normalizeCdpWsUrl, g as withBrowserNavigationPolicy, h as assertBrowserNavigationResultAllowed, m as assertBrowserNavigationAllowed, t as getChromeWebSocketUrl, u as formatAriaSnapshot, v as fetchJson, x as withCdpSocket } from "./chrome-CoRiYsNu.js";
-import { a as resolveStrictExistingPathsWithinRoot, n as DEFAULT_TRACE_DIR, r as DEFAULT_UPLOAD_DIR, s as DEFAULT_FILL_FIELD_TYPE } from "./paths-DfuVHiHu.js";
+import "./manifest-registry-1ACGW3OR.js";
+import "./path-alias-guards-DeOVetT7.js";
+import "./net-CIh5ellr.js";
+import "./tailnet-DJq7Mi1o.js";
+import { O as withNoProxyForCdpUrl, _ as appendCdpPath, b as getHeadersWithAuth, d as normalizeCdpWsUrl, g as withBrowserNavigationPolicy, h as assertBrowserNavigationResultAllowed, m as assertBrowserNavigationAllowed, t as getChromeWebSocketUrl, u as formatAriaSnapshot, v as fetchJson, x as withCdpSocket } from "./chrome-DiktJpMU.js";
+import { a as resolveStrictExistingPathsWithinRoot, n as DEFAULT_TRACE_DIR, r as DEFAULT_UPLOAD_DIR, s as DEFAULT_FILL_FIELD_TYPE } from "./paths-D6mnO6Ni.js";
 import "./redact-DknVdX-O.js";
 import { r as formatErrorMessage } from "./errors-BnRmsfe-.js";
-import { c as writeFileFromPathWithinRoot } from "./fs-safe-DPYj7h8A.js";
-import "./proxy-env-CQTuxZoS.js";
-import "./ports-0jLyYbvQ.js";
-import { n as markPwAiLoaded } from "./runtime-whatsapp-login.runtime-DRoK8G8H.js";
+import { c as writeFileFromPathWithinRoot } from "./fs-safe-BPQ-per2.js";
+import "./proxy-env-BiKHVg2h.js";
+import "./ports-DMeUt80n.js";
+import { n as markPwAiLoaded } from "./runtime-whatsapp-login.runtime-COUEKxmy.js";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import crypto from "node:crypto";
 import { chromium, devices } from "playwright-core";
 
@@ -547,9 +547,9 @@ function buildSiblingTempPath(targetPath) {
 	return path.join(path.dirname(targetPath), `.squidclaw-output-${id}-${safeTail}.part`);
 }
 async function writeViaSiblingTempPath(params) {
-	const rootDir = await fs.realpath(path.resolve(params.rootDir)).catch(() => path.resolve(params.rootDir));
+	const rootDir = await fsPromises.realpath(path.resolve(params.rootDir)).catch(() => path.resolve(params.rootDir));
 	const requestedTargetPath = path.resolve(params.targetPath);
-	const targetPath = await fs.realpath(path.dirname(requestedTargetPath)).then((realDir) => path.join(realDir, path.basename(requestedTargetPath))).catch(() => requestedTargetPath);
+	const targetPath = await fsPromises.realpath(path.dirname(requestedTargetPath)).then((realDir) => path.join(realDir, path.basename(requestedTargetPath))).catch(() => requestedTargetPath);
 	const relativeTargetPath = path.relative(rootDir, targetPath);
 	if (!relativeTargetPath || relativeTargetPath === ".." || relativeTargetPath.startsWith(`..${path.sep}`) || path.isAbsolute(relativeTargetPath)) throw new Error("Target path is outside the allowed root");
 	const tempPath = buildSiblingTempPath(targetPath);
@@ -564,7 +564,7 @@ async function writeViaSiblingTempPath(params) {
 		});
 		renameSucceeded = true;
 	} finally {
-		if (!renameSucceeded) await fs.rm(tempPath, { force: true }).catch(() => {});
+		if (!renameSucceeded) await fsPromises.rm(tempPath, { force: true }).catch(() => {});
 	}
 }
 
@@ -955,7 +955,7 @@ async function saveDownloadPayload(download, outPath) {
 	const suggested = download.suggestedFilename?.() || "download.bin";
 	const requestedPath = outPath?.trim();
 	const resolvedOutPath = path.resolve(requestedPath || buildTempDownloadPath(suggested));
-	await fs.mkdir(path.dirname(resolvedOutPath), { recursive: true });
+	await fsPromises.mkdir(path.dirname(resolvedOutPath), { recursive: true });
 	if (!requestedPath) await download.saveAs?.(resolvedOutPath);
 	else await writeViaSiblingTempPath({
 		rootDir: path.dirname(resolvedOutPath),

package/dist/{qmd-manager-BkSWV1Q1.js → qmd-manager-BsL_hcOB.js}

@@ -1,22 +1,22 @@
 import "./globals-BrhVUl-N.js";
 import { g as resolveStateDir } from "./paths-CHIu6D1E.js";
 import { t as createSubsystemLogger } from "./subsystem-Bw5n50gj.js";
-import { u as resolveAgentWorkspaceDir } from "./agent-scope-Cq4vDGrK.js";
+import { u as resolveAgentWorkspaceDir } from "./agent-scope-nEVgVklg.js";
 import { E as parseAgentSessionKey } from "./session-key-k6urs9r-.js";
 import "./utils-D6vohX1h.js";
-import "./squidclaw-root-BQfLymzj.js";
+import "./squidclaw-root-JXyRbQLJ.js";
 import "./logger-DL3N22PJ.js";
 import "./exec-TSiqsZw1.js";
-import "./path-alias-guards-vfYYQFIg.js";
+import "./path-alias-guards-DeOVetT7.js";
 import "./paths-Dn_rzeZN.js";
 import "./redact-DknVdX-O.js";
-import { l as writeFileWithinRoot } from "./fs-safe-DPYj7h8A.js";
+import { l as writeFileWithinRoot } from "./fs-safe-BPQ-per2.js";
 import { n as resolveWindowsSpawnProgram, t as materializeWindowsSpawnProgram } from "./windows-spawn-BTikdM3p.js";
-import { _ as isFileMissingError, i as listSessionFilesForAgent, n as requireNodeSqlite, r as buildSessionEntry, t as extractKeywords, v as statRegularFile } from "./query-expansion-DI9INxTg.js";
+import { _ as isFileMissingError, i as listSessionFilesForAgent, n as requireNodeSqlite, r as buildSessionEntry, t as extractKeywords, v as statRegularFile } from "./query-expansion-C0HUJbRn.js";
 import { spawn } from "node:child_process";
 import os from "node:os";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import readline from "node:readline";
 
 //#region src/memory/qmd-scope.ts
@@ -292,10 +292,10 @@ var QmdMemoryManager = class QmdMemoryManager {
 	async initialize(mode) {
 		this.bootstrapCollections();
 		if (mode === "status") return;
-		await fs.mkdir(this.xdgConfigHome, { recursive: true });
-		await fs.mkdir(this.xdgCacheHome, { recursive: true });
-		await fs.mkdir(path.dirname(this.indexPath), { recursive: true });
-		if (this.sessionExporter) await fs.mkdir(this.sessionExporter.dir, { recursive: true });
+		await fsPromises.mkdir(this.xdgConfigHome, { recursive: true });
+		await fsPromises.mkdir(this.xdgCacheHome, { recursive: true });
+		await fsPromises.mkdir(path.dirname(this.indexPath), { recursive: true });
+		if (this.sessionExporter) await fsPromises.mkdir(this.sessionExporter.dir, { recursive: true });
 		await this.symlinkSharedModels();
 		await this.ensureCollections();
 		if (this.qmd.update.onBoot) {
@@ -388,7 +388,7 @@ var QmdMemoryManager = class QmdMemoryManager {
 	}
 	async ensureCollectionPath(collection) {
 		if (!this.isDirectoryGlobPattern(collection.pattern)) return;
-		await fs.mkdir(collection.path, { recursive: true });
+		await fsPromises.mkdir(collection.path, { recursive: true });
 	}
 	isDirectoryGlobPattern(pattern) {
 		return pattern.includes("*") || pattern.includes("?") || pattern.includes("[");
@@ -832,19 +832,19 @@ var QmdMemoryManager = class QmdMemoryManager {
 		const defaultModelsDir = path.join(defaultCacheHome, "qmd", "models");
 		const targetModelsDir = path.join(this.xdgCacheHome, "qmd", "models");
 		try {
-			if (!(await fs.stat(defaultModelsDir).catch((err) => {
+			if (!(await fsPromises.stat(defaultModelsDir).catch((err) => {
 				if (err.code === "ENOENT") return null;
 				throw err;
 			}))?.isDirectory()) return;
 			try {
-				await fs.lstat(targetModelsDir);
+				await fsPromises.lstat(targetModelsDir);
 				return;
 			} catch {}
 			try {
-				await fs.symlink(defaultModelsDir, targetModelsDir, "dir");
+				await fsPromises.symlink(defaultModelsDir, targetModelsDir, "dir");
 			} catch (symlinkErr) {
 				const code = symlinkErr.code;
-				if (process.platform === "win32" && (code === "EPERM" || code === "ENOTSUP")) await fs.symlink(defaultModelsDir, targetModelsDir, "junction");
+				if (process.platform === "win32" && (code === "EPERM" || code === "ENOTSUP")) await fsPromises.symlink(defaultModelsDir, targetModelsDir, "junction");
 				else throw symlinkErr;
 			}
 			log.debug(`symlinked qmd models: ${defaultModelsDir} → ${targetModelsDir}`);
@@ -1020,7 +1020,7 @@ var QmdMemoryManager = class QmdMemoryManager {
 		const count = Math.max(1, lines ?? Number.POSITIVE_INFINITY);
 		let handle;
 		try {
-			handle = await fs.open(absPath);
+			handle = await fsPromises.open(absPath);
 		} catch (err) {
 			if (isFileMissingError(err)) return { missing: true };
 			throw err;
@@ -1052,7 +1052,7 @@ var QmdMemoryManager = class QmdMemoryManager {
 		try {
 			return {
 				missing: false,
-				text: await fs.readFile(absPath, "utf-8")
+				text: await fsPromises.readFile(absPath, "utf-8")
 			};
 		} catch (err) {
 			if (isFileMissingError(err)) return { missing: true };
@@ -1069,7 +1069,7 @@ var QmdMemoryManager = class QmdMemoryManager {
 	async exportSessions() {
 		if (!this.sessionExporter) return;
 		const exportDir = this.sessionExporter.dir;
-		await fs.mkdir(exportDir, { recursive: true });
+		await fsPromises.mkdir(exportDir, { recursive: true });
 		const files = await listSessionFilesForAgent(this.agentId);
 		const keep = /* @__PURE__ */ new Set();
 		const tracked = /* @__PURE__ */ new Set();
@@ -1095,11 +1095,11 @@ var QmdMemoryManager = class QmdMemoryManager {
 			});
 			keep.add(target);
 		}
-		const exported = await fs.readdir(exportDir).catch(() => []);
+		const exported = await fsPromises.readdir(exportDir).catch(() => []);
 		for (const name of exported) {
 			if (!name.endsWith(".md")) continue;
 			const full = path.join(exportDir, name);
-			if (!keep.has(full)) await fs.rm(full, { force: true });
+			if (!keep.has(full)) await fsPromises.rm(full, { force: true });
 		}
 		for (const [sessionFile, state] of this.exportedSessionState) if (!tracked.has(sessionFile) || !state.target.startsWith(exportDir + path.sep)) this.exportedSessionState.delete(sessionFile);
 	}

package/dist/{qr-cli-DSMYIp-D.js → qr-cli-DzjBpGix.js}

@@ -2,10 +2,10 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { p as theme } from "./globals-BrhVUl-N.js";
 import { u as resolveGatewayPort } from "./paths-CHIu6D1E.js";
 import { d as defaultRuntime } from "./subsystem-Bw5n50gj.js";
-import { Et as isRfc1918Ipv4Address, lt as secretRefKey, x as resolveSecretRefValues, yt as isCarrierGradeNatIpv4Address, z as loadConfig } from "./auth-profiles-CX4YYu7Z.js";
+import { Et as isRfc1918Ipv4Address, lt as secretRefKey, x as resolveSecretRefValues, yt as isCarrierGradeNatIpv4Address, z as loadConfig } from "./auth-profiles-9T4j6jMy.js";
 import { t as runCommandWithTimeout } from "./exec-TSiqsZw1.js";
 import { F as resolveSecretInputRef, N as normalizeSecretInputString } from "./registry-BXcl3IkC.js";
-import { a as getQrRemoteCommandSecretTargetIds, s as resolveCommandSecretRefsViaGateway } from "./command-secret-targets-DAu5nw-j.js";
+import { a as getQrRemoteCommandSecretTargetIds, s as resolveCommandSecretRefsViaGateway } from "./command-secret-targets-CZjP-Bm5.js";
 import { t as formatDocsLink } from "./links-Dye6HsRG.js";
 import os from "node:os";
 import qrcode from "qrcode-terminal";

package/dist/{query-expansion-DI9INxTg.js → query-expansion-C0HUJbRn.js}

@@ -6,7 +6,7 @@ import { n as redactSensitiveText } from "./redact-DknVdX-O.js";
 import { createRequire } from "node:module";
 import path from "node:path";
 import fs from "node:fs";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import crypto from "node:crypto";
 
 //#region src/memory/fs-utils.ts
@@ -16,7 +16,7 @@ function isFileMissingError(err) {
 async function statRegularFile(absPath) {
 	let stat;
 	try {
-		stat = await fs$1.lstat(absPath);
+		stat = await fsPromises.lstat(absPath);
 	} catch (err) {
 		if (isFileMissingError(err)) return { missing: true };
 		throw err;
@@ -51,7 +51,7 @@ function isMemoryPath(relPath) {
 	return normalized.startsWith("memory/");
 }
 async function walkDir(dir, files) {
-	const entries = await fs$1.readdir(dir, { withFileTypes: true });
+	const entries = await fsPromises.readdir(dir, { withFileTypes: true });
 	for (const entry of entries) {
 		const full = path.join(dir, entry.name);
 		if (entry.isSymbolicLink()) continue;
@@ -71,7 +71,7 @@ async function listMemoryFiles(workspaceDir, extraPaths) {
 	const memoryDir = path.join(workspaceDir, "memory");
 	const addMarkdownFile = async (absPath) => {
 		try {
-			const stat = await fs$1.lstat(absPath);
+			const stat = await fsPromises.lstat(absPath);
 			if (stat.isSymbolicLink() || !stat.isFile()) return;
 			if (!absPath.endsWith(".md")) return;
 			result.push(absPath);
@@ -80,12 +80,12 @@ async function listMemoryFiles(workspaceDir, extraPaths) {
 	await addMarkdownFile(memoryFile);
 	await addMarkdownFile(altMemoryFile);
 	try {
-		const dirStat = await fs$1.lstat(memoryDir);
+		const dirStat = await fsPromises.lstat(memoryDir);
 		if (!dirStat.isSymbolicLink() && dirStat.isDirectory()) await walkDir(memoryDir, result);
 	} catch {}
 	const normalizedExtraPaths = normalizeExtraMemoryPaths(workspaceDir, extraPaths);
 	if (normalizedExtraPaths.length > 0) for (const inputPath of normalizedExtraPaths) try {
-		const stat = await fs$1.lstat(inputPath);
+		const stat = await fsPromises.lstat(inputPath);
 		if (stat.isSymbolicLink()) continue;
 		if (stat.isDirectory()) {
 			await walkDir(inputPath, result);
@@ -99,7 +99,7 @@ async function listMemoryFiles(workspaceDir, extraPaths) {
 	for (const entry of result) {
 		let key = entry;
 		try {
-			key = await fs$1.realpath(entry);
+			key = await fsPromises.realpath(entry);
 		} catch {}
 		if (seen.has(key)) continue;
 		seen.add(key);
@@ -113,14 +113,14 @@ function hashText(value) {
 async function buildFileEntry(absPath, workspaceDir) {
 	let stat;
 	try {
-		stat = await fs$1.stat(absPath);
+		stat = await fsPromises.stat(absPath);
 	} catch (err) {
 		if (isFileMissingError(err)) return null;
 		throw err;
 	}
 	let content;
 	try {
-		content = await fs$1.readFile(absPath, "utf-8");
+		content = await fsPromises.readFile(absPath, "utf-8");
 	} catch (err) {
 		if (isFileMissingError(err)) return null;
 		throw err;
@@ -254,7 +254,7 @@ const log = createSubsystemLogger("memory");
 async function listSessionFilesForAgent(agentId) {
 	const dir = resolveSessionTranscriptsDirForAgent(agentId);
 	try {
-		return (await fs$1.readdir(dir, { withFileTypes: true })).filter((entry) => entry.isFile()).map((entry) => entry.name).filter((name) => name.endsWith(".jsonl")).map((name) => path.join(dir, name));
+		return (await fsPromises.readdir(dir, { withFileTypes: true })).filter((entry) => entry.isFile()).map((entry) => entry.name).filter((name) => name.endsWith(".jsonl")).map((name) => path.join(dir, name));
 	} catch {
 		return [];
 	}
@@ -284,8 +284,8 @@ function extractSessionText(content) {
 }
 async function buildSessionEntry(absPath) {
 	try {
-		const stat = await fs$1.stat(absPath);
-		const lines = (await fs$1.readFile(absPath, "utf-8")).split("\n");
+		const stat = await fsPromises.stat(absPath);
+		const lines = (await fsPromises.readFile(absPath, "utf-8")).split("\n");
 		const collected = [];
 		const lineMap = [];
 		for (let jsonlIdx = 0; jsonlIdx < lines.length; jsonlIdx++) {

package/dist/{redact-snapshot-B2YFI3cO.js → redact-snapshot-C0McNGqh.js}

@@ -1,5 +1,5 @@
 import { t as createSubsystemLogger } from "./subsystem-Bw5n50gj.js";
-import { at as sensitive } from "./auth-profiles-CX4YYu7Z.js";
+import { at as sensitive } from "./auth-profiles-9T4j6jMy.js";
 import JSON5 from "json5";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";