tesseract-agent 0.11.16 → 0.11.18

package/dist-bundle/cli.js

@@ -20222,6 +20222,21 @@ Rules:
 - Plain words a non-expert understands. No jargon, no file paths, no command names unless the suggestion itself names them.
 - Address the developer directly ("This would\u2026"). Never answer the suggestion, never do the work, never ask a question.
 - Two sentences maximum. Stop.`
+      },
+      {
+        id: "side-llm.summarize-turn",
+        group: "side-llm",
+        label: "Conversation tab summariser",
+        help: "One short line describing what the conversation has DONE so far, shown in the tab's hover tooltip under the title. Rebuilt after each turn. The \u226412-word / one-sentence limit is the whole contract \u2014 it sits in a small tooltip, so anything longer is clipped; and it must read as a status of work done, never as a reply to the developer.",
+        vars: [],
+        content: `A developer is working with an AI coding agent. Summarise, in ONE short sentence, what this conversation has accomplished SO FAR \u2014 the kind of line that belongs under a browser-tab title.
+Rules:
+- Output ONLY the sentence. No markdown, no quotes, no preamble, no trailing period.
+- 12 words MAXIMUM. Shorter is better.
+- Describe the WORK DONE, not what is planned or being asked. Past/perfect or a noun phrase ("Added tab tooltips and per-turn summaries", "Debugging the failing image upload").
+- Weight the MOST RECENT messages most heavily: if the topic shifted, describe where it is now, not where it started.
+- Plain, concrete words. Name the real feature/file/thing when it is clear. No filler like "The agent\u2026" or "This conversation\u2026".
+- Never answer the developer, never do the work, never ask a question.`
       },
       {
         id: "side-llm.project-inspect",
@@ -23061,7 +23076,7 @@ var init_capabilities = __esm({
         label: "Create a presentation",
         help: "What the model is told the `present.create_deck` App-Control capability does (present domain, write).",
         vars: [],
-        content: `Make a new, empty Tesseract Stage presentation in the user's library (~/Documents/Tesseract/Presentations) and return its deck folder. This is how you make a presentation \u2014 NOT a PowerPoint file, NOT markdown, NOT an HTML canvas. Pass the title in the user's own words and language. Optionally set a theme: CSS custom properties every slide inherits, e.g. { "--bg": "#FFFFFF", "--ink": "#16130F", "--accent": "#D97757" }. Then write slides with write_slide.`
+        content: `Make a new, empty Tesseract Stage presentation and return its deck handle. It lands in the project the user has open \u2014 beside the files it is about \u2014 or in their library (~/Documents/Tesseract/Presentations) when no project is open. This is how you make a presentation \u2014 NOT a PowerPoint file, NOT markdown, NOT an HTML canvas. Pass the title in the user's own words and language. Optionally set a theme: CSS custom properties every slide inherits, e.g. { "--bg": "#FFFFFF", "--ink": "#16130F", "--accent": "#D97757" }. Then write slides with write_slide.`
       },
       {
         id: "capability.present.write_slide",
@@ -26821,38 +26836,7 @@ function recordFailure(creds3, id, errorCode, now2, opts) {
       return c;
     advanced = true;
     const consecutiveFailures = (c.consecutiveFailures ?? 0) + 1;
-    if (errorCode === "auth_expired") {
-      return {
-        ...c,
-        status: "expired",
-        quarantineUntil: now2 + QUARANTINE_MS,
-        lastErrorCode: errorCode,
-        consecutiveFailures
-      };
-    }
-    if (errorCode === "invalid_key") {
-      return {
-        ...c,
-        status: "revoked",
-        quarantineUntil: now2 + QUARANTINE_MS,
-        lastErrorCode: errorCode,
-        consecutiveFailures
-      };
-    }
-    if (errorCode === "credit_exhausted") {
-      const until = opts?.cooldownUntil && opts.cooldownUntil > now2 ? opts.cooldownUntil : now2 + QUARANTINE_MS;
-      return {
-        ...c,
-        status: "cooldown",
-        cooldownUntil: until,
-        quarantineUntil: until,
-        lastErrorCode: errorCode,
-        consecutiveFailures
-      };
-    }
-    const backoff3 = Math.min(COOLDOWN_BASE_MS * 2 ** (consecutiveFailures - 1), COOLDOWN_MAX_MS);
-    const cooldownUntil = opts?.cooldownUntil && opts.cooldownUntil > now2 ? opts.cooldownUntil : now2 + backoff3;
-    return { ...c, status: "cooldown", cooldownUntil, lastErrorCode: errorCode, consecutiveFailures };
+    return { ...c, lastErrorCode: errorCode, consecutiveFailures };
   });
   return { next, advanced };
 }
@@ -26869,12 +26853,10 @@ function recordSuccess(creds3, id, now2) {
     lastErrorCode: void 0
   } : c);
 }
-var COOLDOWN_BASE_MS, COOLDOWN_MAX_MS, QUARANTINE_MS;
+var QUARANTINE_MS;
 var init_rotation = __esm({
   "../../packages/shared/dist/rotation.js"() {
     "use strict";
-    COOLDOWN_BASE_MS = 6e4;
-    COOLDOWN_MAX_MS = 36e5;
     QUARANTINE_MS = 24 * 60 * 60 * 1e3;
   }
 });
@@ -32986,8 +32968,9 @@ ${JSON.stringify(r, null, 2)}`
         domain: "present",
         title: "Create a presentation",
         input: external_exports.object({
-          title: external_exports.string().describe("What the presentation is called. Shown in the library and used for its folder name; keep the user's own wording and language."),
+          title: external_exports.string().describe("What the presentation is called. Used for its folder name; keep the user's own wording and language."),
           description: external_exports.string().optional().describe("One line about what it is for."),
+          root: external_exports.string().optional().describe("Folder to create it in. Leave unset \u2014 it then lands in the project the user has open, which is almost always what they want. Only set this if they asked for somewhere specific."),
           theme: external_exports.record(external_exports.string(), external_exports.string()).optional().describe('CSS custom properties applied to every slide, e.g. { "--bg": "#FFFFFF", "--ink": "#16130F", "--accent": "#D97757" }.')
         }),
         mutation: "write",
@@ -33000,7 +32983,7 @@ ${JSON.stringify(r, null, 2)}`
         domain: "present",
         title: "Write a slide",
         input: external_exports.object({
-          deck: external_exports.string().describe("The deck folder, exactly as `list_decks` or `create_deck` returned it (ends in .tessdeck)."),
+          deck: external_exports.string().describe("The deck handle, exactly as `list_decks` or `create_deck` returned it. Either a folder name or an absolute path, both ending in .tessdeck \u2014 pass it back unchanged rather than rebuilding it."),
           path: external_exports.string().describe('Path inside the presentation, e.g. "slides/03-pricing.tsx". Filename order IS slide order, so number the prefixes. Helper files may live anywhere in the package.'),
           source: external_exports.string().describe("The whole file. A slide exports `meta` ({ id, title, summary?, notes?, transition?, builds? }) and a default React component.")
         }),
@@ -33014,7 +32997,7 @@ ${JSON.stringify(r, null, 2)}`
         domain: "present",
         title: "Read a slide",
         input: external_exports.object({
-          deck: external_exports.string().describe("The deck folder."),
+          deck: external_exports.string().describe("The deck handle, exactly as it was returned to you."),
           path: external_exports.string().describe('Path inside the presentation, e.g. "slides/03-pricing.tsx".')
         }),
         mutation: "read",
@@ -33026,7 +33009,7 @@ ${JSON.stringify(r, null, 2)}`
         domain: "present",
         title: "Delete a slide",
         input: external_exports.object({
-          deck: external_exports.string().describe("The deck folder."),
+          deck: external_exports.string().describe("The deck handle, exactly as it was returned to you."),
           path: external_exports.string().describe("Path inside the presentation.")
         }),
         mutation: "write",
@@ -33038,7 +33021,7 @@ ${JSON.stringify(r, null, 2)}`
         id: "present.validate_deck",
         domain: "present",
         title: "Check a presentation",
-        input: external_exports.object({ deck: external_exports.string().describe("The deck folder.") }),
+        input: external_exports.object({ deck: external_exports.string().describe("The deck handle, exactly as it was returned to you.") }),
         mutation: "read",
         availability: "desktop",
         binding: { kind: "ipc", channel: "decklib", verb: "validate" },
@@ -33049,7 +33032,7 @@ ${JSON.stringify(r, null, 2)}`
         domain: "present",
         title: "Set a presentation\u2019s theme",
         input: external_exports.object({
-          deck: external_exports.string().describe("The deck folder."),
+          deck: external_exports.string().describe("The deck handle, exactly as it was returned to you."),
           theme: external_exports.record(external_exports.string(), external_exports.string()).describe(`CSS custom properties, e.g. { "--bg": "#0C0A14", "--ink": "#FFFFFF" }. Replaces the deck's current theme.`)
         }),
         mutation: "write",
@@ -33062,7 +33045,7 @@ ${JSON.stringify(r, null, 2)}`
         domain: "present",
         title: "Add an image to a presentation",
         input: external_exports.object({
-          deck: external_exports.string().describe("The deck folder."),
+          deck: external_exports.string().describe("The deck handle, exactly as it was returned to you."),
           source_path: external_exports.string().describe("Absolute path of the file to copy in \u2014 a generated image, a photo, an audio clip."),
           name: external_exports.string().optional().describe("Filename to use inside the presentation.")
         }),
@@ -33075,7 +33058,7 @@ ${JSON.stringify(r, null, 2)}`
         id: "present.open_deck",
         domain: "present",
         title: "Open a presentation",
-        input: external_exports.object({ deck: external_exports.string().describe("The deck folder.") }),
+        input: external_exports.object({ deck: external_exports.string().describe("The deck handle, exactly as it was returned to you.") }),
         mutation: "write",
         availability: "desktop",
         binding: { kind: "ipc", channel: "decklib", verb: "open" },
@@ -33085,7 +33068,7 @@ ${JSON.stringify(r, null, 2)}`
         id: "present.delete_deck",
         domain: "present",
         title: "Delete a presentation",
-        input: external_exports.object({ deck: external_exports.string().describe("The deck folder.") }),
+        input: external_exports.object({ deck: external_exports.string().describe("The deck handle, exactly as it was returned to you.") }),
         mutation: "write",
         availability: "desktop",
         binding: { kind: "ipc", channel: "decklib", verb: "delete" },
@@ -48164,29 +48147,6 @@ function readDaemonAgentSettings() {
     return snap;
   }
 }
-function gatewayCanCall(model, snapshot4) {
-  const tiers2 = snapshot4.gatewayTiers;
-  if (!tiers2?.length)
-    return true;
-  return tiers2.includes(model) || snapshot4.gatewayDirectNaming === true;
-}
-function gatewayTierRejection(model) {
-  if (!model)
-    return null;
-  const snap = readDaemonAgentSettings();
-  if (gatewayCanCall(model, snap))
-    return null;
-  return { model, tiers: [...snap.gatewayTiers ?? []] };
-}
-function gatewayTierClamp(model) {
-  if (!model)
-    return model;
-  const snap = readDaemonAgentSettings();
-  if (gatewayCanCall(model, snap))
-    return model;
-  console.warn(`[gateway] Model "${model}" isn't served by this device's gateway key (${(snap.gatewayTiers ?? []).join(", ")}) \u2014 dropping it so the gateway picks one it can reach.`);
-  return void 0;
-}
 function chatSendToParams(msg, defaults) {
   return mergeDaemonAgentSettings({
     message: msg.message,
@@ -48227,7 +48187,6 @@ function chatSendToParams(msg, defaults) {
 function mergeDaemonAgentSettings(params) {
   const s = readDaemonAgentSettings();
   const hostModel = poolActiveModel() ?? s.model;
-  const clampToGatewayTier = gatewayTierClamp;
   return {
     ...params,
     mcpServers: params.mcpServers ?? s.mcpServers,
@@ -48237,16 +48196,15 @@ function mergeDaemonAgentSettings(params) {
     settingSources: params.settingSources ?? s.settingSources,
     maxTurns: params.maxTurns ?? s.maxTurns,
     maxBudgetUsd: params.maxBudgetUsd ?? s.maxBudgetUsd,
-    model: clampToGatewayTier(params.model ?? hostModel),
+    model: params.model ?? hostModel,
     hostInjectedModel: params.hostInjectedModel ?? (params.model === void 0 && hostModel !== void 0),
     permissionMode: params.permissionMode ?? s.permissionMode,
     effort: params.effort ?? s.effort,
     ultracode: params.ultracode ?? s.ultracode,
     // Model-level fallback: the engine switches models BEFORE the turn fails. Our runner
     // rotation works one level up (credential/config) and only AFTER a failure, so the two
-    // compose rather than compete. Clamped like `model` — a fallback the gateway key
-    // cannot serve would 403 exactly like a primary that cannot.
-    fallbackModel: clampToGatewayTier(params.fallbackModel ?? s.fallbackModel),
+    // compose rather than compete. Sent as named, like `model`.
+    fallbackModel: params.fallbackModel ?? s.fallbackModel,
     // Token budget the MODEL is told about, so it paces tool use and wraps up instead of
     // being cut off mid-thought (distinct from maxBudgetUsd, which is dollars and hard).
     taskBudget: params.taskBudget ?? s.taskBudget,
@@ -52206,7 +52164,7 @@ var require_deflate2 = __commonJS({
       options.raw = true;
       return deflate(input, options);
     }
-    function gzip(input, options) {
+    function gzip2(input, options) {
       options = options || {};
       options.gzip = true;
       return deflate(input, options);
@@ -52214,7 +52172,7 @@ var require_deflate2 = __commonJS({
     module.exports.Deflate = Deflate;
     module.exports.deflate = deflate;
     module.exports.deflateRaw = deflateRaw;
-    module.exports.gzip = gzip;
+    module.exports.gzip = gzip2;
     module.exports.constants = require_constants2();
   }
 });
@@ -54223,13 +54181,13 @@ var require_inflate2 = __commonJS({
 var require_pako = __commonJS({
   "../../node_modules/fast-png/node_modules/pako/index.js"(exports, module) {
     "use strict";
-    var { Deflate, deflate, deflateRaw, gzip } = require_deflate2();
+    var { Deflate, deflate, deflateRaw, gzip: gzip2 } = require_deflate2();
     var { Inflate, inflate, inflateRaw, ungzip } = require_inflate2();
     var constants = require_constants2();
     module.exports.Deflate = Deflate;
     module.exports.deflate = deflate;
     module.exports.deflateRaw = deflateRaw;
-    module.exports.gzip = gzip;
+    module.exports.gzip = gzip2;
     module.exports.Inflate = Inflate;
     module.exports.inflate = inflate;
     module.exports.inflateRaw = inflateRaw;
@@ -84115,7 +84073,6 @@ function toRewindOutcome(res, noHistory) {
 
 // ../../packages/host-core/dist/control-link.js
 import { join as join67, basename as basename12 } from "node:path";
-import { randomUUID as randomUUID28 } from "node:crypto";
 import { mkdirSync as mkdirSync31 } from "node:fs";
 
 // ../../node_modules/ws/wrapper.mjs
@@ -101450,6 +101407,8 @@ function createDaemonVideoEditRunner() {
 // ../../packages/host-core/dist/support-submit.js
 init_credentials();
 import { openSync as openSync6, fstatSync, readSync as readSync5, closeSync as closeSync6 } from "node:fs";
+import { promisify as promisify2 } from "node:util";
+import { gzip } from "node:zlib";
 import { join as join49 } from "node:path";
 
 // ../../packages/host-core/dist/host-metrics.js
@@ -101485,7 +101444,7 @@ function dynamicMetrics() {
 }
 
 // ../../packages/host-core/dist/support-submit.js
-var LOG_TAIL_BYTES = 64 * 1024;
+var LOG_TAIL_BYTES = 4 * 1024 * 1024;
 function tail2(path6, bytes3 = LOG_TAIL_BYTES) {
   let fd = null;
   try {
@@ -101524,20 +101483,25 @@ function createDaemonSupportSubmit() {
       userId: creds3.userId,
       logs: { daemon: daemonLog }
     };
+    const payload = await promisify2(gzip)(Buffer.from(JSON.stringify({
+      type: input.type === "feature" ? "feature" : "issue",
+      title: input.title,
+      description: input.description,
+      // NEVER route logs to the PUBLIC issue on the agent path: they're auto-collected
+      // (not human-reviewed) and can carry usernames/paths/ids. The daemon log is already
+      // attached PRIVATELY via `diagnostics` above. Public logs are the desktop form's
+      // job (human-reviewed opt-in) only.
+      includeLogsInIssue: false,
+      diagnostics
+    }), "utf8"));
     const res = await fetch(`${creds3.apiOrigin.replace(/\/$/, "")}/api/core/tesseract/support/issue`, {
       method: "POST",
-      headers: { "Content-Type": "application/json", Authorization: `Bearer ${creds3.accessToken}` },
-      body: JSON.stringify({
-        type: input.type === "feature" ? "feature" : "issue",
-        title: input.title,
-        description: input.description,
-        // NEVER route logs to the PUBLIC issue on the agent path: they're auto-collected
-        // (not human-reviewed) and can carry usernames/paths/ids. The daemon log is already
-        // attached PRIVATELY via `diagnostics` above. Public logs are the desktop form's
-        // job (human-reviewed opt-in) only.
-        includeLogsInIssue: false,
-        diagnostics
-      }),
+      headers: {
+        "Content-Type": "application/json",
+        "Content-Encoding": "gzip",
+        Authorization: `Bearer ${creds3.accessToken}`
+      },
+      body: payload,
       signal: AbortSignal.timeout(3e4)
     });
     if (!res.ok) {
@@ -102883,7 +102847,7 @@ import { openSync as openSync7, readSync as readSync6, writeSync as writeSync2,
 import { tmpdir as tmpdir5 } from "node:os";
 import { basename as basename8, dirname as dirname21, join as join53, relative as relative6, resolve as resolve8, sep as sep7, isAbsolute as isAbsolute7 } from "node:path";
 import { execFile as execFile6 } from "node:child_process";
-import { promisify as promisify2 } from "node:util";
+import { promisify as promisify3 } from "node:util";
 
 // ../../packages/host-core/dist/os-favorites.js
 init_base_paths();
@@ -103275,7 +103239,7 @@ async function codeStats(root) {
 }
 
 // ../../packages/host-core/dist/fs-remote.js
-var execFileAsync = promisify2(execFile6);
+var execFileAsync = promisify3(execFile6);
 function insideOk(p) {
   const c = resolveContainmentRoot();
   return c ? isInsideRoot(p, c) : true;
@@ -104948,7 +104912,25 @@ var PeerLinkManager = class {
       const socket2 = await q.makeQuicSocket(this.udpPort);
       this.quicSocket = socket2;
       await q.startQuicServerOnSocket({ socket: socket2, identity, onStream: (bs5) => this.acceptInbound(bs5, "punch") });
+      const disableQuicTier = (why) => {
+        if (this.quicUnavailable)
+          return;
+        this.quicUnavailable = true;
+        if (this.quicKeepalive) {
+          clearInterval(this.quicKeepalive);
+          this.quicKeepalive = null;
+        }
+        this.quicSocket = null;
+        try {
+          void socket2.stop({ force: true });
+        } catch {
+        }
+        console.warn(`[peer-link] QUIC tier disabled at runtime \u2014 ${why}. Using TCP tiers; a sandbox-safe @matrixai/quic rebuild re-enables it.`);
+      };
+      const isSandboxFailure = (m) => /create external arraybuffer failed/i.test(m);
       const refresh = async () => {
+        if (this.quicUnavailable)
+          return;
         const found = [];
         for (const { host, port } of resolveStunServers()) {
           try {
@@ -104958,7 +104940,12 @@ var PeerLinkManager = class {
             if (!found.some((c) => c.ip === cand.ip && c.port === cand.port))
               found.push(cand);
           } catch (e) {
-            console.warn(`[peer-link] srflx FAILED via ${host}:${port}: ${e.message}`);
+            const detail = e.message;
+            if (isSandboxFailure(detail)) {
+              disableQuicTier(`the native binding rejects this runtime's ArrayBuffers (${detail})`);
+              return;
+            }
+            console.warn(`[peer-link] srflx FAILED via ${host}:${port}: ${detail}`);
           }
         }
         if (found.length && JSON.stringify(found) !== JSON.stringify(this.quicSrflxList)) {
@@ -104966,6 +104953,14 @@ var PeerLinkManager = class {
           console.log(`[peer-link] srflx candidates: ${found.map((c) => `${c.ip}:${c.port}`).join(", ")}`);
         }
       };
+      const onUnhandled = (reason) => {
+        const m = reason instanceof Error ? reason.message : String(reason);
+        if (!isSandboxFailure(m))
+          return;
+        process.off("unhandledRejection", onUnhandled);
+        disableQuicTier(`the native binding rejects this runtime's ArrayBuffers (${m})`);
+      };
+      process.on("unhandledRejection", onUnhandled);
       await refresh();
       this.quicKeepalive = setInterval(() => {
         void refresh();
@@ -105938,8 +105933,8 @@ function absOf(root, rel) {
 
 // ../../packages/host-core/dist/active-link/gitignore.js
 import { execFile as execFile7 } from "node:child_process";
-import { promisify as promisify3 } from "node:util";
-var execFileAsync2 = promisify3(execFile7);
+import { promisify as promisify4 } from "node:util";
+var execFileAsync2 = promisify4(execFile7);
 async function gitSyncedFiles(root) {
   try {
     const { stdout } = await execFileAsync2("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard"], { cwd: root, maxBuffer: 128 * 1024 * 1024, windowsHide: true });
@@ -110532,23 +110527,7 @@ async function handleInboundAgent(msg, driverClientId) {
       void b.backgroundTask?.(msg.sessionId, msg.toolUseId, origin);
       break;
     case "agent:set_mode":
-      {
-        const rejected = gatewayTierRejection(msg.model);
-        if (rejected) {
-          send3("agent", {
-            type: "agent:notice",
-            sessionId: msg.sessionId,
-            noticeId: randomUUID28(),
-            category: "model",
-            level: "warning",
-            title: "That model is not available on this device",
-            body: `The gateway key on this machine serves ${rejected.tiers.join(", ")}, so "${rejected.model}" was not applied \u2014 the conversation is still on its previous model.`,
-            toast: true,
-            inline: true
-          }, route3);
-        }
-      }
-      void b.setRunMode?.(msg.sessionId, { permissionMode: msg.permissionMode, model: gatewayTierClamp(msg.model), maxThinkingTokens: msg.maxThinkingTokens, unattended: msg.unattended, reinforcedVerification: msg.reinforcedVerification, effort: msg.effort, ultracode: msg.ultracode });
+      void b.setRunMode?.(msg.sessionId, { permissionMode: msg.permissionMode, model: msg.model, maxThinkingTokens: msg.maxThinkingTokens, unattended: msg.unattended, reinforcedVerification: msg.reinforcedVerification, effort: msg.effort, ultracode: msg.ultracode });
       break;
     case "chat:permission":
       b.respondToPermission?.(msg.requestId, { behavior: msg.behavior, updatedInput: msg.updatedInput, persist: msg.persist, message: msg.message, interrupt: msg.interrupt }, origin);
@@ -111359,7 +111338,7 @@ init_base_paths();
 init_credentials();
 init_dist5();
 import { mkdirSync as mkdirSync32, readFileSync as readFileSync42, writeFileSync as writeFileSync28 } from "node:fs";
-import { randomUUID as randomUUID29 } from "node:crypto";
+import { randomUUID as randomUUID28 } from "node:crypto";
 import { dirname as dirname28 } from "node:path";
 var REFRESH_MS = 24 * 60 * 60 * 1e3;
 var TIMEOUT_MS2 = 1e4;
@@ -111375,7 +111354,7 @@ function deviceId2() {
       return raw.deviceId;
   } catch {
   }
-  const fresh = randomUUID29().slice(0, 8);
+  const fresh = randomUUID28().slice(0, 8);
   try {
     mkdirSync32(dirname28(DEVICE_ID()), { recursive: true });
     writeFileSync28(DEVICE_ID(), JSON.stringify({ deviceId: fresh }), { mode: 384 });
@@ -113456,7 +113435,6 @@ function stopSystemEvents() {
 }
 
 // ../../packages/host-core/dist/local-server.js
-import { randomUUID as randomUUID31 } from "node:crypto";
 init_daemon_settings();
 
 // ../../packages/host-core/dist/vault/manager.js
@@ -114052,7 +114030,7 @@ var XJSON_AAD = utf8("tesseract-vault-encrypted-json-v1");
 init_credentials();
 
 // ../../packages/host-core/dist/vault/store.js
-import { randomUUID as randomUUID30 } from "node:crypto";
+import { randomUUID as randomUUID29 } from "node:crypto";
 var b64 = (u) => Buffer.from(u).toString("base64");
 var u82 = (s) => new Uint8Array(Buffer.from(s, "base64"));
 var isServerRecoverableMeta = (m) => !m.wrappedVaultKey;
@@ -114354,7 +114332,7 @@ var VaultStore = class {
     const existing = input.id ? items.get(input.id) : void 0;
     const { id: _drop, name, folderId, favorite, reprompt, notes, tags, ...content } = input;
     const item = {
-      id: input.id ?? randomUUID30(),
+      id: input.id ?? randomUUID29(),
       name,
       folderId,
       favorite,
@@ -114383,7 +114361,7 @@ var VaultStore = class {
     const now2 = this.now();
     for (const d of drafts) {
       const { name, notes, favorite, tags, ...content } = d;
-      const item = { id: randomUUID30(), name, notes, favorite, tags, createdAt: now2, updatedAt: now2, ...content };
+      const item = { id: randomUUID29(), name, notes, favorite, tags, createdAt: now2, updatedAt: now2, ...content };
       items.set(item.id, item);
       this.enc.set(item.id, await encryptItem(key2, item));
       this.dirty.add(item.id);
@@ -115426,21 +115404,7 @@ async function startLocalServer(opts) {
           void b.backgroundTask?.(msg.sessionId, msg.toolUseId, loopbackOrigin);
           break;
         case "agent:set_mode": {
-          const rejected = gatewayTierRejection(msg.model);
-          if (rejected) {
-            send5("agent", {
-              type: "agent:notice",
-              sessionId: msg.sessionId,
-              noticeId: randomUUID31(),
-              category: "model",
-              level: "warning",
-              title: "That model is not available on this device",
-              body: `Your gateway key serves ${rejected.tiers.join(", ")}, so "${rejected.model}" was not applied \u2014 the conversation is still on its previous model.`,
-              toast: true,
-              inline: true
-            });
-          }
-          void b.setRunMode?.(msg.sessionId, { permissionMode: msg.permissionMode, model: gatewayTierClamp(msg.model), maxThinkingTokens: msg.maxThinkingTokens, unattended: msg.unattended, reinforcedVerification: msg.reinforcedVerification, effort: msg.effort, ultracode: msg.ultracode });
+          void b.setRunMode?.(msg.sessionId, { permissionMode: msg.permissionMode, model: msg.model, maxThinkingTokens: msg.maxThinkingTokens, unattended: msg.unattended, reinforcedVerification: msg.reinforcedVerification, effort: msg.effort, ultracode: msg.ultracode });
           break;
         }
         case "chat:permission":
@@ -119391,8 +119355,8 @@ function decryptStream(source, keyRaw) {
 // ../../packages/host-core/dist/drops/quarantine.js
 import { execFile as execFile9 } from "node:child_process";
 import { writeFile as writeFile15 } from "node:fs/promises";
-import { promisify as promisify4 } from "node:util";
-var exec = promisify4(execFile9);
+import { promisify as promisify5 } from "node:util";
+var exec = promisify5(execFile9);
 async function markQuarantined(path6, sourceLabel) {
   try {
     if (process.platform === "darwin") {
@@ -119489,7 +119453,7 @@ async function fetchBlobDrop(opts) {
 }
 
 // ../../packages/host-core/dist/chat-agent.js
-import { randomUUID as randomUUID32 } from "node:crypto";
+import { randomUUID as randomUUID30 } from "node:crypto";
 init_prompts();
 var TURN_TIMEOUT_MS = 4 * 6e4;
 var PARTIAL_INTERVAL_MS = 700;
@@ -119518,7 +119482,7 @@ function createChatAgentRunner(deps) {
   }
   async function runTurn(prompt2, onPartial) {
     const backend2 = await getSharedBackend();
-    const clientRequestId = `chat-agent-${randomUUID32()}`;
+    const clientRequestId = `chat-agent-${randomUUID30()}`;
     return new Promise((resolve16, reject) => {
       let text13 = "";
       let settled = false;
@@ -120809,11 +120773,11 @@ function fileShareToken() {
 
 // ../../packages/host-core/dist/file-share-mount.js
 import { execFile as execFile10 } from "node:child_process";
-import { promisify as promisify5 } from "node:util";
+import { promisify as promisify6 } from "node:util";
 import { homedir as homedir13 } from "node:os";
 import { existsSync as existsSync43, readFileSync as readFileSync56, appendFileSync as appendFileSync5, mkdirSync as mkdirSync42 } from "node:fs";
 import { join as join84, dirname as dirname37 } from "node:path";
-var run3 = promisify5(execFile10);
+var run3 = promisify6(execFile10);
 var OPTS = { timeout: 2e4, windowsHide: true };
 var mounted = false;
 var mountedAt = null;
@@ -120917,8 +120881,8 @@ import { join as join85 } from "node:path";
 
 // ../../packages/host-core/dist/vault/peer-verify.js
 import { execFile as execFile11 } from "node:child_process";
-import { promisify as promisify6 } from "node:util";
-var run4 = promisify6(execFile11);
+import { promisify as promisify7 } from "node:util";
+var run4 = promisify7(execFile11);
 var APPEX_IDENTIFIER = "dev.tesseract.AutoFill";
 async function teamIdOf(path6) {
   try {
@@ -121544,7 +121508,7 @@ init_credentials();
 init_base_paths();
 import { existsSync as existsSync47, mkdirSync as mkdirSync46, readFileSync as readFileSync57, writeFileSync as writeFileSync43 } from "node:fs";
 import { dirname as dirname39, join as join88 } from "node:path";
-import { randomUUID as randomUUID33 } from "node:crypto";
+import { randomUUID as randomUUID31 } from "node:crypto";
 function deviceIdFile() {
   return join88(tesseractHome(), "device-id.json");
 }
@@ -121560,7 +121524,7 @@ function persistentDeviceId() {
   const cur = readPersistedDeviceId();
   if (cur)
     return cur;
-  const id = randomUUID33().slice(0, 8);
+  const id = randomUUID31().slice(0, 8);
   try {
     const f = deviceIdFile();
     const dir2 = dirname39(f);
@@ -121575,7 +121539,7 @@ function persistentDeviceId() {
 // ../../packages/host-core/dist/error-report.js
 init_dist2();
 init_credentials();
-import { randomUUID as randomUUID34 } from "node:crypto";
+import { randomUUID as randomUUID32 } from "node:crypto";
 import { release as osRelease, arch as osArch } from "node:os";
 var MAX_QUEUE = 100;
 var FLUSH_INTERVAL_MS = 3e4;
@@ -121627,7 +121591,7 @@ function captureDaemonError(error51, opts = {}) {
       return;
     const creds3 = readCredentials();
     const report = {
-      reportId: randomUUID34(),
+      reportId: randomUUID32(),
       occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
       schemaVersion: 1,
       surface,
@@ -123071,7 +123035,7 @@ init_credentials();
 import { execFile as execFile16 } from "node:child_process";
 import { existsSync as existsSync52, readFileSync as readFileSync61, statSync as statSync21 } from "node:fs";
 import { dirname as dirname41, join as join93 } from "node:path";
-import { promisify as promisify11 } from "node:util";
+import { promisify as promisify12 } from "node:util";
 
 // ../../packages/host-core/dist/net-service/launchd-system.js
 import { spawn as spawn9 } from "node:child_process";
@@ -123103,8 +123067,8 @@ function parseOwnerUid(text13) {
 
 // ../../packages/host-core/dist/net-service/elevation.js
 import { execFile as execFile12 } from "node:child_process";
-import { promisify as promisify7 } from "node:util";
-var run5 = promisify7(execFile12);
+import { promisify as promisify8 } from "node:util";
+var run5 = promisify8(execFile12);
 async function alreadyElevated() {
   if (process.platform === "win32") {
     try {
@@ -123344,8 +123308,8 @@ import { existsSync as existsSync51, readFileSync as readFileSync60 } from "node
 
 // ../../packages/host-core/dist/service/exec.js
 import { execFile as execFile13, spawn as spawn10 } from "node:child_process";
-import { promisify as promisify8 } from "node:util";
-var run6 = promisify8(execFile13);
+import { promisify as promisify9 } from "node:util";
+var run6 = promisify9(execFile13);
 function runInherit(cmd, args) {
   return new Promise((resolve16) => {
     const p = spawn10(cmd, args, { stdio: "inherit" });
@@ -123547,8 +123511,8 @@ import { execFile as execFile14, spawn as spawn12 } from "node:child_process";
 import { mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync46, rmSync as rmSync12 } from "node:fs";
 import { tmpdir as tmpdir7 } from "node:os";
 import { join as join92, win32 } from "node:path";
-import { promisify as promisify9 } from "node:util";
-var run7 = promisify9(execFile14);
+import { promisify as promisify10 } from "node:util";
+var run7 = promisify10(execFile14);
 var SERVICE = "TesseractNetd";
 var DISPLAY = "Tesseract network helper";
 function windowsHelperDir() {
@@ -123727,8 +123691,8 @@ function makeWindowsService() {
 
 // ../../packages/host-core/dist/net-service/windows-nat.js
 import { execFile as execFile15 } from "node:child_process";
-import { promisify as promisify10 } from "node:util";
-var run8 = promisify10(execFile15);
+import { promisify as promisify11 } from "node:util";
+var run8 = promisify11(execFile15);
 var NAT_FEATURE = "Containers-HNS";
 async function natCapability() {
   if (process.platform !== "win32") {
@@ -123842,7 +123806,7 @@ async function ownerSid() {
   if (process.platform !== "win32")
     return void 0;
   try {
-    const { stdout } = await promisify11(execFile16)("whoami", ["/user", "/fo", "csv", "/nh"]);
+    const { stdout } = await promisify12(execFile16)("whoami", ["/user", "/fo", "csv", "/nh"]);
     const m = /"(S-1-[0-9-]+)"/.exec(String(stdout));
     return m?.[1];
   } catch {

package/dist-bundle/mesh-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fineguide-tesseract/mesh-core",
-  "version": "0.11.16",
+  "version": "0.11.18",
   "main": "index.js",
   "types": "index.d.ts"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tesseract-agent",
-  "version": "0.11.16",
+  "version": "0.11.18",
   "license": "UNLICENSED",
   "publishConfig": {
     "access": "public",