wednesdayai 0.4.12-dev.1170 → 0.4.12-dev.1172

package/dist/{agent-turn-enqueue-B4vGPilf.js → agent-turn-enqueue-Cr4GtseV.js}

@@ -217,7 +217,7 @@ function mergeDelayedAgentTurn(sessionKey, matches, merge) {
 	return true;
 }
 async function defaultExecute(claim) {
-	const { runMainAgentTurn } = await import("./reply-B563UrI4.js").then((n) => n.w);
+	const { runMainAgentTurn } = await import("./reply-Cc7sfugv.js").then((n) => n.w);
 	return runMainAgentTurn(claim.message.payload);
 }
 async function armIdleWaiter(sessionKey, backbone, opts) {
@@ -229,7 +229,7 @@ async function armIdleWaiter(sessionKey, backbone, opts) {
 		startedAt: opts?.startedAt ?? Date.now()
 	};
 	waiters.set(sessionKey, handle);
-	const { getQueueSize } = await import("./command-queue-BR7qw8ZT.js").then((n) => n.a);
+	const { getQueueSize } = await import("./command-queue-ChgJD7W2.js").then((n) => n.a);
 	if (handle.cancelled || closing) return;
 	const release = (force = false) => {
 		releaseDelayedAgentTurns(backboneBySession.get(sessionKey) ?? backbone, sessionKey, force ? { force: true } : void 0);
@@ -251,7 +251,7 @@ async function armIdleWaiter(sessionKey, backbone, opts) {
 }
 async function enqueueAgentTurn(backbone, payload, opts) {
 	if (!payload.jobId.trim() || !payload.runId.trim()) throw new Error("agent-turn enqueue requires jobId and runId");
-	const isBusy = opts?.isSessionBusy ? opts.isSessionBusy() : (await import("./command-queue-BR7qw8ZT.js").then((n) => n.a)).getQueueSize(CommandLane.Main) > 0;
+	const isBusy = opts?.isSessionBusy ? opts.isSessionBusy() : (await import("./command-queue-ChgJD7W2.js").then((n) => n.a)).getQueueSize(CommandLane.Main) > 0;
 	const policy = payload.busy ?? "skip";
 	const id = agentTurnIdempotencyKey(payload);
 	if (isBusy && policy === "skip") return `${id}:skipped`;
@@ -315,7 +315,7 @@ async function releaseDelayedAgentTurnsInternal(backbone, sessionKey, opts) {
 					if (held) return;
 					releasingHead.add(sessionKey);
 					const publishedWorkId = await publishAgentTurn(backbone, payload);
-					const { getAgentTurnRuntime } = await import("./agent-turn-runner-BC_zv8y2.js").then((n) => n.t);
+					const { getAgentTurnRuntime } = await import("./agent-turn-runner-CADoQG3T.js").then((n) => n.t);
 					const execute = opts?.execute ?? defaultExecute;
 					const outcome = await getAgentTurnRuntime().runner.claimAndExecute({
 						workId: publishedWorkId,
@@ -325,7 +325,7 @@ async function releaseDelayedAgentTurnsInternal(backbone, sessionKey, opts) {
 						}
 					});
 					if (payload.kind === "announce" && outcome.ok && outcome.delivery?.reason === WORKSPACE_LANE_DENIED_REASON) {
-						const { markSubagentAnnounceDenied } = await import("./reply-B563UrI4.js").then((n) => n.S);
+						const { markSubagentAnnounceDenied } = await import("./reply-Cc7sfugv.js").then((n) => n.S);
 						await markSubagentAnnounceDenied(payload.runId, payload.mergedRunIds);
 					}
 					releaseSucceeded = outcome.ok;

package/dist/{agent-turn-enqueue-Dd-kFa0D.js → agent-turn-enqueue-YQ59yFps.js}

@@ -217,7 +217,7 @@ function mergeDelayedAgentTurn(sessionKey, matches, merge) {
 	return true;
 }
 async function defaultExecute(claim) {
-	const { runMainAgentTurn } = await import("./agent-turn-execute-D7Q-Nl64.js").then((n) => n.t);
+	const { runMainAgentTurn } = await import("./agent-turn-execute-jK4msiI0.js").then((n) => n.t);
 	return runMainAgentTurn(claim.message.payload);
 }
 async function armIdleWaiter(sessionKey, backbone, opts) {
@@ -229,7 +229,7 @@ async function armIdleWaiter(sessionKey, backbone, opts) {
 		startedAt: opts?.startedAt ?? Date.now()
 	};
 	waiters.set(sessionKey, handle);
-	const { getQueueSize } = await import("./command-queue-BfiRqnbr.js").then((n) => n.a);
+	const { getQueueSize } = await import("./command-queue-ClAvIJI0.js").then((n) => n.a);
 	if (handle.cancelled || closing) return;
 	const release = (force = false) => {
 		releaseDelayedAgentTurns(backboneBySession.get(sessionKey) ?? backbone, sessionKey, force ? { force: true } : void 0);
@@ -251,7 +251,7 @@ async function armIdleWaiter(sessionKey, backbone, opts) {
 }
 async function enqueueAgentTurn(backbone, payload, opts) {
 	if (!payload.jobId.trim() || !payload.runId.trim()) throw new Error("agent-turn enqueue requires jobId and runId");
-	const isBusy = opts?.isSessionBusy ? opts.isSessionBusy() : (await import("./command-queue-BfiRqnbr.js").then((n) => n.a)).getQueueSize(CommandLane.Main) > 0;
+	const isBusy = opts?.isSessionBusy ? opts.isSessionBusy() : (await import("./command-queue-ClAvIJI0.js").then((n) => n.a)).getQueueSize(CommandLane.Main) > 0;
 	const policy = payload.busy ?? "skip";
 	const id = agentTurnIdempotencyKey(payload);
 	if (isBusy && policy === "skip") return `${id}:skipped`;
@@ -315,7 +315,7 @@ async function releaseDelayedAgentTurnsInternal(backbone, sessionKey, opts) {
 					if (held) return;
 					releasingHead.add(sessionKey);
 					const publishedWorkId = await publishAgentTurn(backbone, payload);
-					const { getAgentTurnRuntime } = await import("./agent-turn-runner-4YlOzIIh.js").then((n) => n.t);
+					const { getAgentTurnRuntime } = await import("./agent-turn-runner-Fk0rtaP-.js").then((n) => n.t);
 					const execute = opts?.execute ?? defaultExecute;
 					const outcome = await getAgentTurnRuntime().runner.claimAndExecute({
 						workId: publishedWorkId,
@@ -325,7 +325,7 @@ async function releaseDelayedAgentTurnsInternal(backbone, sessionKey, opts) {
 						}
 					});
 					if (payload.kind === "announce" && outcome.ok && outcome.delivery?.reason === WORKSPACE_LANE_DENIED_REASON) {
-						const { markSubagentAnnounceDenied } = await import("./agent-turn-execute-D7Q-Nl64.js").then((n) => n.Yn);
+						const { markSubagentAnnounceDenied } = await import("./agent-turn-execute-jK4msiI0.js").then((n) => n.Yn);
 						await markSubagentAnnounceDenied(payload.runId, payload.mergedRunIds);
 					}
 					releaseSucceeded = outcome.ok;

package/dist/{agent-turn-execute-D7Q-Nl64.js → agent-turn-execute-jK4msiI0.js}

@@ -5,7 +5,7 @@ import { t as isPlainObject } from "./plain-object-CLm2c5Nu.js";
 import { m as defaultRuntime, p as createNonExitingRuntime, t as createSubsystemLogger } from "./subsystem-CnWdoPKw.js";
 import { t as parseBooleanValue$1 } from "./boolean-C71HJEcH.js";
 import { r as isTruthyEnvValue } from "./entry.js";
-import { c as enqueueAgentTurn, d as mergeDelayedAgentTurn, f as peekDelayedAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, m as WORKSPACE_LANE_DENIED_REASON, o as clearDelayedReleaseHold, p as setDelayedReleaseHold } from "./agent-turn-enqueue-Dd-kFa0D.js";
+import { c as enqueueAgentTurn, d as mergeDelayedAgentTurn, f as peekDelayedAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, m as WORKSPACE_LANE_DENIED_REASON, o as clearDelayedReleaseHold, p as setDelayedReleaseHold } from "./agent-turn-enqueue-YQ59yFps.js";
 import { $a as resolveSlackNativeStreaming, $t as addRegisteredPluginApi, Ai as GATEWAY_CLIENT_IDS, An as requireSessionStorageRuntime, Ar as createTelegramActionGate, As as isProfileInCooldown, At as safeStatSync, Bc as normalizeResolvedSecretInputString, Bi as readTaskWorkStates, Bn as recordSessionMetaFromInbound, Bt as normalizeAnyChannelId, C as resolveIMessageRemoteAttachmentRoots, Cc as resolveAuthStorePathForDisplay, Ci as isMarkdownCapableMessageChannel, Cn as createInternalHookEvent, Co as normalizeProviderId, Cr as getChannelDock, Ct as resolveMemorySlotDecision, Dc as resolveProcessScopedMap, Di as resolveGatewayMessageChannel, Dn as createConversationReadQuery, Dr as normalizeHyphenSlug, Ec as withFileLock, Ei as normalizeMessageChannel, En as StorageReadAccessError, Er as normalizeAtHashSlug, Fo as resolveThinkingDefault, Fr as resolveTelegramToken, Fs as resolveApiKeyForProfile, Ft as CHAT_CHANNEL_ORDER, Ga as applyMergePatch, Gc as DEFAULT_MODEL, Gn as updateSessionStoreEntry, Gr as listEnabledSignalAccounts, Gt as getActivePluginRegistry, Hr as resolveSlackReplyToMode, Ii as normalizeAccountId$3, In as loadSessionStore, Ir as buildChannelAccountBindings, Jc as getShellPathFromLoginShell, Ji as discardBufferedPluginTaskPasses, Jn as mergeSessionEntry, Jr as resolveSignalAccount, Kc as DEFAULT_PROVIDER, Kt as getActivePluginRegistryKey, Li as acquireSessionWriteLock, Mi as GATEWAY_CLIENT_NAMES, Mo as resolveReasoningDefault, Mr as listTelegramAccountIds, Ms as markAuthProfileUsed, Nc as normalizeSecretInput, Oc as resolveAuthProfileDisplayLabel, Oi as resolveMessageChannel, On as getConversationReadQuery, Oo as resolveConfiguredModelRef, Or as normalizeStringEntries, Os as resolveAuthProfileOrder, Ot as discoverOpenClawPlugins, Pn as getConfiguredSessionStorageRuntime, Po as resolveSubagentSpawnModelSelection, Pr as resolveTelegramAccount, Ps as resolveProfilesUnavailableReason, Qa as resolveDiscordPreviewStreamMode, Qc as resolveOwnerDisplaySetting, Qi as replaceBufferedPluginTaskPasses, Qo as retryAsync, Qr as resolveWhatsAppAccount, S as resolveIMessageAttachmentRoots, Si as isInternalMessageChannel, T as parseNonNegativeByteSize, Ti as listDeliverableMessageChannels, Tn as triggerInternalHook, To as parseModelRef, Tr as normalizeSignalMessagingTarget, Uc as splitTrailingAuthProfile, Un as updateLastRoute, Ur as resolveSlackAppToken, Vr as resolveSlackAccount, Vt as normalizeChannelId$2, Wc as DEFAULT_CONTEXT_TOKENS, Wn as updateSessionStore, Wr as resolveSlackBotToken, Wt as getActiveGatewayPluginRegistry, Xi as listBufferedPluginTaskPasses, Xn as setSessionRuntimeModel, Xr as normalizeWhatsAppTarget, Yc as resolveShellEnvFallbackTimeoutMs, Yn as resolveFreshSessionTotalTokens, Yr as isWhatsAppGroupJid, Yt as requireActivePluginRegistry, Za as mapStreamingModeToSlackLegacyDraftStreamMode, Zt as setActivePluginRegistry, _ as normalizeTelegramCommandName, _i as normalizeSessionDeliveryFields, _s as resolveEnvApiKey, _t as applyTestPluginDefaults, aa as resetConfigOverrides, at as isSupportedLocalAvatarExtension, b as isInboundPathAllowed, bo as modelKey, br as listChannelPlugins, bt as normalizePluginsConfig, ca as getConfigValueAtPath, ci as resolveChannelGroupPolicy, cn as normalizePluginHttpPath, cs as buildAssistantMessage, da as unsetConfigValueAtPath, dc as markAuthProfileGood, dn as clearPluginCommands, dr as resolveSessionTranscriptPath, ds as buildUsageWithNoCost, en as clearRegisteredPluginApis, eo as resolveSlackStreamingMode, et as AVATAR_MAX_BYTES, fi as resolveAccountEntry, fn as executePluginCommand, fs as getApiKeyForModel, ft as loadPluginManifestRegistry, g as TELEGRAM_COMMAND_NAME_PATTERN, gc as ensureAuthProfileStore, gi as normalizeDeliveryContext, gn as registerPluginCommand, go as findNormalizedProviderValue, gt as BUNDLED_ENABLED_BY_DEFAULT, hi as mergeDeliveryContext, hn as matchPluginCommand, ho as buildModelAliasIndex, hr as deriveSessionMetaPatch, hs as resolveApiKeyForProvider, ia as getConfigOverrides, ii as listEnabledDiscordAccounts, it as isPathWithinRoot, j as resolveExecPolicyPreset, ji as GATEWAY_CLIENT_MODES, jo as resolveModelRefFromString, jr as listEnabledTelegramAccounts, js as markAuthProfileFailure, kn as SessionStorageUnavailableError, ko as resolveDefaultModelForAgent, kr as normalizeStringEntriesLower, ks as getSoonestCooldownExpiry, kt as isPathInside, l as readConfigFileSnapshot, la as parseConfigPath, lc as dedupeProfileIds, li as resolveChannelGroupRequireMention, ln as buildPluginHealthReport, lo as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, lr as resolveSessionFilePath, ls as buildAssistantMessageWithZeroUsage, lt as validateJsonSchemaValue, m as validateConfigObjectWithPlugins, mi as deliveryContextKey, mn as listPluginCommands, mo as buildConfiguredAllowlistKeys, mr as resolveStorePath, ms as requireApiKey, ni as createDiscordActionGate, nn as createPluginRegistry, nt as isAvatarHttpUrl, oa as setConfigOverride, oi as resolveDiscordAccount, os as OLLAMA_NATIVE_BASE_URL, p as writeConfigFile, pi as deliveryContextFromSession, pn as getPluginCommandSpecs, po as buildAllowedModelSet, ps as getCustomProviderApiKey, qn as DEFAULT_RESET_TRIGGERS, s as loadConfig, sa as unsetConfigOverride, si as normalizeDiscordToken, ss as createOllamaStreamFn, ta as RecoveryAdmissionError, tc as runTasksWithConcurrency, ti as resolveIMessageAccount, tr as parseDurationMs, tt as isAvatarDataUrl, ua as setConfigValueAtPath, uc as listProfilesForProvider, uo as resolveAgentMaxConcurrent, ur as resolveSessionFilePathOptions, us as buildStreamErrorAssistantMessage, v as resolveTelegramCustomCommands, vi as INTERNAL_MESSAGE_CHANNEL, vr as resolveGroupSessionKey, vs as resolveModelAuthMode, vt as isBundledChannelEnabledByChannelConfig, w as normalizeScpRemoteHost, wc as resolveOpenClawAgentDir, wr as listChannelDocks, xi as isGatewayMessageChannel, xo as normalizeModelRef$2, xr as normalizeChannelId$1, xt as resolveEffectiveEnableState, ya as buildEnforcedShellCommand, yi as isDeliverableMessageChannel, yo as isCliProvider, yr as getChannelPlugin, zi as resolveSessionLockMaxHoldFromTimeout, zn as readSessionUpdatedAt } from "./config-Bsg1Wa_-.js";
 import { t as VERSION } from "./version-D_9__Xw6.js";
 import { A as HEARTBEAT_SESSION_KEY_SEGMENT, D as normalizeAccountId$4, E as DEFAULT_ACCOUNT_ID, I as isCronSessionKey, L as isSubagentSessionKey, M as deriveSessionChatType, N as getSubagentDepth, O as normalizeOptionalAccountId, P as isAcpSessionKey, R as parseAgentSessionKey, _ as resolveCanonicalIdentity, a as buildAgentMainSessionKey, b as resolveThreadSessionKeys, d as isKnownAgentMainSessionKey, f as isValidAgentId, g as resolveAgentIdFromSessionKey, j as WAKE_GATE_SESSION_KEY_SEGMENT, k as BACKGROUND_SESSION_KEY_SEGMENT, m as normalizeMainKey, p as normalizeAgentId, r as DEVICE_SENDER_PREFIX, s as classifySessionKeyShape, t as DEFAULT_AGENT_ID, v as resolveConfiguredCanonicalIdentity, w as toAgentStoreSessionKey, x as sanitizeAgentId, z as resolveThreadParentSessionKey } from "./session-key-_W_jy_wE.js";
@@ -23,14 +23,14 @@ import { t as redactIdentifier } from "./redact-identifier-C-ydvJ0n.js";
 import { t as KeyedAsyncQueue } from "./keyed-async-queue-DVSyQ1hC.js";
 import { t as CommandLane } from "./lanes-B8kgyKQ9.js";
 import { n as isDiagnosticsEnabled, t as emitDiagnosticEvent } from "./diagnostic-events-CTBWzSB8.js";
-import { i as getAgentTurnRuntime, o as tryGetAgentTurnRuntime } from "./agent-turn-runner-4YlOzIIh.js";
+import { i as getAgentTurnRuntime, o as tryGetAgentTurnRuntime } from "./agent-turn-runner-Fk0rtaP-.js";
 import { a as resolveSessionRunStore, n as deriveSessionRunId, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-DhUg8tN-.js";
-import { A as isRateLimitAssistantError, B as resolveBootstrapTotalMaxChars, C as isBillingAssistantError, D as isFailoverAssistantError, E as isContextOverflowError, F as sanitizeUserFacingText, I as isAuthPermanentErrorMessage, L as isTimeoutErrorMessage, M as isTransientHttpError, N as parseImageDimensionError, O as isFailoverErrorMessage, P as parseImageSizeError, R as buildBootstrapContextFiles, S as isAuthAssistantError, T as isCompactionFailureError, V as sanitizeGoogleTurnOrdering, _ as classifyFailoverReason, a as isMessagingToolDuplicateNormalized, b as formatRawAssistantErrorForUi, c as sanitizeImageBlocks, d as canonicalizeBase64, f as estimateBase64DecodedBytes, g as BILLING_ERROR_USER_MESSAGE, h as isGoogleModelApi, j as isRawApiErrorPayload, k as isLikelyContextOverflowError, l as sanitizeToolResultImages, m as downgradeOpenAIReasoningBlocks, n as validateGeminiTurns, o as normalizeTextForComparison, p as downgradeOpenAIFunctionCallReasoningPairs, r as pickFallbackThinkingLevel, s as sanitizeSessionMessagesImages, t as validateAnthropicTurns, u as resolveImageSanitizationLimits, v as formatAssistantErrorText, w as isCloudCodeAssistFormatError, x as getApiErrorPayloadFingerprint, y as formatBillingErrorMessage, z as resolveBootstrapMaxChars } from "./pi-embedded-helpers-QAU26Sis.js";
-import { C as resolveToolProfilePolicy, S as normalizeToolName, T as matchesAnyGlobPattern, _ as collectExplicitAllowlist, a as ensureSandboxWorkspaceForSession, b as stripPluginOnlyAllowlist, c as resolveSandboxRuntimeStatus, d as getBridgeAuthForPort, f as resolveSandboxConfigForAgent, g as buildPluginToolGroups, h as applyOwnerOnlyToolPolicy, o as resolveSandboxContext, v as expandPolicyWithPluginGroups, w as compileGlobPatterns, x as expandToolGroups, y as mergeAlsoAllowPolicy } from "./sandbox-CKcVo3mx.js";
+import { A as isRateLimitAssistantError, B as resolveBootstrapTotalMaxChars, C as isBillingAssistantError, D as isFailoverAssistantError, E as isContextOverflowError, F as sanitizeUserFacingText, I as isAuthPermanentErrorMessage, L as isTimeoutErrorMessage, M as isTransientHttpError, N as parseImageDimensionError, O as isFailoverErrorMessage, P as parseImageSizeError, R as buildBootstrapContextFiles, S as isAuthAssistantError, T as isCompactionFailureError, V as sanitizeGoogleTurnOrdering, _ as classifyFailoverReason, a as isMessagingToolDuplicateNormalized, b as formatRawAssistantErrorForUi, c as sanitizeImageBlocks, d as canonicalizeBase64, f as estimateBase64DecodedBytes, g as BILLING_ERROR_USER_MESSAGE, h as isGoogleModelApi, j as isRawApiErrorPayload, k as isLikelyContextOverflowError, l as sanitizeToolResultImages, m as downgradeOpenAIReasoningBlocks, n as validateGeminiTurns, o as normalizeTextForComparison, p as downgradeOpenAIFunctionCallReasoningPairs, r as pickFallbackThinkingLevel, s as sanitizeSessionMessagesImages, t as validateAnthropicTurns, u as resolveImageSanitizationLimits, v as formatAssistantErrorText, w as isCloudCodeAssistFormatError, x as getApiErrorPayloadFingerprint, y as formatBillingErrorMessage, z as resolveBootstrapMaxChars } from "./pi-embedded-helpers-CVcv9xLb.js";
+import { C as resolveToolProfilePolicy, S as normalizeToolName, T as matchesAnyGlobPattern, _ as collectExplicitAllowlist, a as ensureSandboxWorkspaceForSession, b as stripPluginOnlyAllowlist, c as resolveSandboxRuntimeStatus, d as getBridgeAuthForPort, f as resolveSandboxConfigForAgent, g as buildPluginToolGroups, h as applyOwnerOnlyToolPolicy, o as resolveSandboxContext, v as expandPolicyWithPluginGroups, w as compileGlobPatterns, x as expandToolGroups, y as mergeAlsoAllowPolicy } from "./sandbox-Dwq8Q6z6.js";
 import { c as resolveExistingPathsWithinRoot, g as DEFAULT_AI_SNAPSHOT_MAX_CHARS, s as DEFAULT_UPLOAD_DIR } from "./extension-relay-auth-CnGjydTv.js";
 import { i as isLoopbackHost, u as resolveClientIp } from "./ws-FGQR59XS.js";
 import { r as trimToUndefined, t as resolveGatewayCredentialsFromConfig } from "./credentials-DB-33pt2.js";
-import { a as resolveBrowserControlAuth } from "./server-context-CVLSAAYI.js";
+import { a as resolveBrowserControlAuth } from "./server-context-PFZhDAEv.js";
 import { a as resolveSkillsPromptForRun, d as assertSandboxPath, f as resolveSandboxInputPath, g as applySkillEnvOverridesFromSnapshot, h as applySkillEnvOverrides, i as loadWorkspaceSkillEntries, m as resolveSandboxedMediaSource, o as skillsSnapshotSourceDiffers, r as buildWorkspaceSkillSnapshot, u as assertMediaNotDataUrl } from "./skills-acry8n8f.js";
 import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-5b1JZAG8.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex, n as redactSensitiveText } from "./redact-CaT1a38n.js";
@@ -52,11 +52,11 @@ import { n as onSessionTranscriptUpdate } from "./transcript-events-CtWhopMu.js"
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels, u as resolveResponseUsageMode } from "./thinking-DvkryGzk.js";
 import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-Dz_xoVwb.js";
 import { a as stripSilentToken, i as isSilentReplyText, n as SILENT_REPLY_TOKEN, r as isSilentReplyPrefixText, t as HEARTBEAT_TOKEN } from "./tokens-DItMbhUP.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext, t as withTimeout$4 } from "./with-timeout-cXioWA2h.js";
-import { C as logToolExecutionStarted, D as recordSystemPromptHashComparison, E as logWebhookReceived, F as resetCommandPollCount, M as stopDiagnosticHeartbeat, N as boundDiagnosticContent, O as refreshRunProgress, P as recordCommandPoll, S as logToolExecutionCompleted, T as logWebhookProcessed, c as logMessageQueued, f as logRunCompleted, j as startDiagnosticHeartbeat, m as logSessionStateChange, p as logRunStarted, s as logMessageProcessed, u as logModelCallError, w as logWebhookError, x as logToolExecutionBlocked } from "./diagnostic-DDQ8FCEY.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext, t as withTimeout$4 } from "./with-timeout-7WH015qP.js";
+import { C as logToolExecutionStarted, D as recordSystemPromptHashComparison, E as logWebhookReceived, F as resetCommandPollCount, M as stopDiagnosticHeartbeat, N as boundDiagnosticContent, O as refreshRunProgress, P as recordCommandPoll, S as logToolExecutionCompleted, T as logWebhookProcessed, c as logMessageQueued, f as logRunCompleted, j as startDiagnosticHeartbeat, m as logSessionStateChange, p as logRunStarted, s as logMessageProcessed, u as logModelCallError, w as logWebhookError, x as logToolExecutionBlocked } from "./diagnostic-B-NRwhWN.js";
 import { d as redactChannelCorrelation, o as getDiagnosticSessionState } from "./diagnostic-session-state-PGfvrouR.js";
-import { c as getCommandLaneSnapshots, f as isQueuedCommandCancellation, i as clearCommandLane, l as getQueueSize, o as enqueueCommandInLane, t as CommandLaneAbortedError } from "./command-queue-BfiRqnbr.js";
-import { $ as resolveTelegramMediaPlaceholder, A as releaseAccountOwner, B as buildTelegramGroupFrom, C as fingerprintTelegramToken, D as recordUpdate, E as recordState, F as resolveCronStorePath, G as describeReplyTarget, H as buildTelegramParentPeer, J as hasBotMention, K as expandTextLinks, L as buildGroupLabel, M as splitTelegramCaption, N as withTelegramApiErrorLogging, O as recordWebhook, P as loadCronStore, Q as resolveTelegramGroupAllowFromContext, R as buildSenderLabel, T as recordApiRequest, U as buildTelegramThreadParams, V as buildTelegramGroupPeerId, W as buildTypingThreadParams, X as resolveTelegramDirectPeerId, Y as normalizeForwardedContext, Z as resolveTelegramForumThreadId, _ as isTelegramEditMayHaveLandedError, a as reactMessageTelegram, at as normalizeDmAllowFromWithStore$1, b as renderTelegramHtmlText, c as sendStickerTelegram, ct as toLocationContext, d as wasSentByBot, dt as resolveTelegramTargetChatType, et as resolveTelegramReplyId, f as extractTelegramErrorText, g as isTelegramClientRejection, h as isSafeToRetrySendError, i as editMessageTelegram, it as normalizeAllowFrom$2, j as resolveTelegramFetch, k as registerAccount, lt as isVoiceCompatibleAudio, m as isRecoverableTelegramNetworkError, n as createForumTopicTelegram, nt as resolveTelegramThreadSpec, o as sendMessageTelegram, ot as resolveSenderAllowMatch$1, p as isDefiniteTelegramRequestNonDeliveryError, q as extractTelegramLocation, r as deleteMessageTelegram, rt as isSenderAllowed$1, s as sendPollTelegram, st as formatLocationText, t as buildInlineKeyboard, tt as resolveTelegramStreamMode, u as resolveTelegramVoiceSend, ut as parseTelegramTarget, v as markdownToTelegramChunks, w as getTelegramFleetSupervisor, x as wrapFileReferencesInHtml, y as markdownToTelegramHtml, z as buildSenderName } from "./send-D3NtKgzA.js";
+import { c as getCommandLaneSnapshots, f as isQueuedCommandCancellation, i as clearCommandLane, l as getQueueSize, o as enqueueCommandInLane, t as CommandLaneAbortedError } from "./command-queue-ClAvIJI0.js";
+import { $ as resolveTelegramMediaPlaceholder, A as releaseAccountOwner, B as buildTelegramGroupFrom, C as fingerprintTelegramToken, D as recordUpdate, E as recordState, F as resolveCronStorePath, G as describeReplyTarget, H as buildTelegramParentPeer, J as hasBotMention, K as expandTextLinks, L as buildGroupLabel, M as splitTelegramCaption, N as withTelegramApiErrorLogging, O as recordWebhook, P as loadCronStore, Q as resolveTelegramGroupAllowFromContext, R as buildSenderLabel, T as recordApiRequest, U as buildTelegramThreadParams, V as buildTelegramGroupPeerId, W as buildTypingThreadParams, X as resolveTelegramDirectPeerId, Y as normalizeForwardedContext, Z as resolveTelegramForumThreadId, _ as isTelegramEditMayHaveLandedError, a as reactMessageTelegram, at as normalizeDmAllowFromWithStore$1, b as renderTelegramHtmlText, c as sendStickerTelegram, ct as toLocationContext, d as wasSentByBot, dt as resolveTelegramTargetChatType, et as resolveTelegramReplyId, f as extractTelegramErrorText, g as isTelegramClientRejection, h as isSafeToRetrySendError, i as editMessageTelegram, it as normalizeAllowFrom$2, j as resolveTelegramFetch, k as registerAccount, lt as isVoiceCompatibleAudio, m as isRecoverableTelegramNetworkError, n as createForumTopicTelegram, nt as resolveTelegramThreadSpec, o as sendMessageTelegram, ot as resolveSenderAllowMatch$1, p as isDefiniteTelegramRequestNonDeliveryError, q as extractTelegramLocation, r as deleteMessageTelegram, rt as isSenderAllowed$1, s as sendPollTelegram, st as formatLocationText, t as buildInlineKeyboard, tt as resolveTelegramStreamMode, u as resolveTelegramVoiceSend, ut as parseTelegramTarget, v as markdownToTelegramChunks, w as getTelegramFleetSupervisor, x as wrapFileReferencesInHtml, y as markdownToTelegramHtml, z as buildSenderName } from "./send-DmwzEFcz.js";
 import { i as buildModelAliasLines, n as resolveModel } from "./model-BcGLlA1I.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-DOybnK2i.js";
 import { n as docsSiteUrl, t as DOCS_SITE_URL } from "./docs-site-B8KujBhr.js";
@@ -66,11 +66,11 @@ import { n as resolveExecSafeBinRuntimePolicy, r as resolveMergedSafeBinProfileF
 import { n as resolveLearningWorkspaceDir, t as resolveSessionConsumerAgentIds } from "./session-consumer-agents-Drm5cWP2.js";
 import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-DI6VlMnh.js";
 import { t as extractTextFromChatContent } from "./chat-content-BuwZNf43.js";
-import { a as formatReasoningMessage, d as stripThinkingTagsFromText, f as stripReasoningTagsFromText, l as stripDowngradedToolCallText, m as isInsideCode, n as extractAssistantThinking, o as inferToolMetaFromArgs, p as findCodeRegions, s as isAssistantMessage, t as extractAssistantText$1, u as stripMinimaxToolCallXml } from "./pi-embedded-utils-C1UQ0GEo.js";
+import { a as formatReasoningMessage, d as stripThinkingTagsFromText, f as stripReasoningTagsFromText, l as stripDowngradedToolCallText, m as isInsideCode, n as extractAssistantThinking, o as inferToolMetaFromArgs, p as findCodeRegions, s as isAssistantMessage, t as extractAssistantText$1, u as stripMinimaxToolCallXml } from "./pi-embedded-utils-Ca6LN431.js";
 import { n as formatToolSummary, r as resolveToolDisplay } from "./tool-display-CLvQUNoS.js";
-import { a as coerceImageModelConfig, i as coerceImageAssistantText, o as decodeDataUrl, r as minimaxUnderstandImage, s as resolveProviderVisionModelFromConfig } from "./provider-image-Coer0abU.js";
+import { a as coerceImageModelConfig, i as coerceImageAssistantText, o as decodeDataUrl, r as minimaxUnderstandImage, s as resolveProviderVisionModelFromConfig } from "./provider-image-DgeZtX_c.js";
 import { a as getDefaultMediaLocalRoots, i as getAgentScopedMediaLocalRoots, n as fetchRemoteMedia, r as readResponseWithLimit, t as MediaFetchError } from "./fetch-BhNcI7Hd.js";
-import { C as stripCarriedTranscriptFromBody, D as registerUnhandledRejectionHandler, a as resolveAutoImageModel, d as resolveConcurrency, g as CLI_OUTPUT_MAX_BUFFER, h as resolveMediaUnderstandingScope, i as normalizeMediaAttachments, k as resolveAttachmentKind, l as applyTemplate, m as normalizeMediaUnderstandingChatType, n as buildProviderRegistry, o as resolveMediaAttachmentLocalRoots, p as resolveTimeoutMs$1, r as createMediaAttachmentCache, s as runCapability, t as runAudioTranscription, w as buildRandomTempFilePath } from "./audio-transcription-runner-8LdCJhZK.js";
+import { C as stripCarriedTranscriptFromBody, D as registerUnhandledRejectionHandler, a as resolveAutoImageModel, d as resolveConcurrency, g as CLI_OUTPUT_MAX_BUFFER, h as resolveMediaUnderstandingScope, i as normalizeMediaAttachments, k as resolveAttachmentKind, l as applyTemplate, m as normalizeMediaUnderstandingChatType, n as buildProviderRegistry, o as resolveMediaAttachmentLocalRoots, p as resolveTimeoutMs$1, r as createMediaAttachmentCache, s as runCapability, t as runAudioTranscription, w as buildRandomTempFilePath } from "./audio-transcription-runner-DwuXxx7G.js";
 import { n as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-L2NTusph.js";
 import { n as withStrictGuardedFetchMode, r as withTrustedEnvProxyGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-O-94prLa.js";
 import { r as makeProxyFetch } from "./proxy-fetch-_GzuheXD.js";
@@ -83,12 +83,12 @@ import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled, n a
 import { a as listChatCommands, c as listNativeCommandSpecsForConfig, d as parseCommandArgs, f as resolveCommandArgChoices, h as shouldHandleTextCommands, i as isCommandEnabled, l as maybeResolveTextAlias, m as serializeCommandArgs, o as listChatCommandsForConfig, p as resolveCommandArgMenu, r as findCommandByNativeName, s as listNativeCommandSpecs, t as buildCommandTextFromArgs, u as normalizeCommandBody } from "./commands-registry-CrcQqKhL.js";
 import { i as AGENT_LANE_SUBAGENT, r as AGENT_LANE_NESTED, t as startUserSessionRun } from "./user-run-recording-B3uBIVQM.js";
 import { t as withTimeout$5 } from "./with-timeout-DSF2eoCh.js";
-import { _ as AcpRuntimeError, c as validateRuntimeCwdInput, d as validateRuntimePermissionProfileInput, f as isSessionIdentityPending, g as ACP_TURN_INTERRUPTED_MESSAGE, h as requireAcpRuntimeBackend, i as resolveSessionStorePathForAcp, l as validateRuntimeModeInput, m as getAcpRuntimeBackend, o as parseRuntimeTimeoutSecondsInput, p as resolveSessionIdentityFromMeta, r as readAcpSessionEntry, s as validateRuntimeConfigOptionInput, t as getAcpSessionManager, u as validateRuntimeModelInput, v as toAcpRuntimeError } from "./manager-D76oQCR1.js";
+import { _ as AcpRuntimeError, c as validateRuntimeCwdInput, d as validateRuntimePermissionProfileInput, f as isSessionIdentityPending, g as ACP_TURN_INTERRUPTED_MESSAGE, h as requireAcpRuntimeBackend, i as resolveSessionStorePathForAcp, l as validateRuntimeModeInput, m as getAcpRuntimeBackend, o as parseRuntimeTimeoutSecondsInput, p as resolveSessionIdentityFromMeta, r as readAcpSessionEntry, s as validateRuntimeConfigOptionInput, t as getAcpSessionManager, u as validateRuntimeModelInput, v as toAcpRuntimeError } from "./manager-CXmhnRMD.js";
 import { Dn as SESSION_LABEL_MAX_LENGTH, n as gatewayErrorReason, t as GatewayClient } from "./client-BfxQTCrr.js";
 import { b as resolveLeastPrivilegeOperatorScopesForMethod, i as callGatewayLeastPrivilege, n as callGateway, s as randomIdempotencyKey, t as buildGatewayConnectionDetails } from "./call-B5wkFUlo.js";
-import { C as endModelCall, D as onAgentEvent, O as registerAgentRunContext, S as createInlineCodeState, T as emitAgentEvent, _ as handleMessageEnd, b as emitEmbeddedAgentEvent, g as waitForEmbeddedPiRunEnd, h as setActiveEmbeddedRun, i as endInFlightEmbeddedAttempt, n as beginInFlightEmbeddedAttempt, p as queueEmbeddedPiMessage, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, u as isEmbeddedPiRunStreaming, v as handleMessageStart, w as clearAgentRunContext, x as buildCodeSpanIndex, y as handleMessageUpdate } from "./runs-C-C_T-5V.js";
+import { C as endModelCall, D as onAgentEvent, O as registerAgentRunContext, S as createInlineCodeState, T as emitAgentEvent, _ as handleMessageEnd, b as emitEmbeddedAgentEvent, g as waitForEmbeddedPiRunEnd, h as setActiveEmbeddedRun, i as endInFlightEmbeddedAttempt, n as beginInFlightEmbeddedAttempt, p as queueEmbeddedPiMessage, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, u as isEmbeddedPiRunStreaming, v as handleMessageStart, w as clearAgentRunContext, x as buildCodeSpanIndex, y as handleMessageUpdate } from "./runs-DPsJ39YK.js";
 import { a as toInternalMessageReceivedContext, c as toPluginMessageReceivedEvent, d as resolveOutboundSessionId, i as toInternalMessagePreprocessedContext, l as fireAndForgetHook, n as createMessageSentEmitter, o as toInternalMessageTranscribedContext, r as deriveInboundMessageHookContext, s as toPluginMessageContext, t as applyMessageSendingHook, u as buildOutboundSessionContext } from "./outbound-message-hooks-DhfAqa4a.js";
-import { _ as createReplyToModeFilterForChannel, a as normalizeOutboundPayloadsForJson, b as normalizeChannelTargetInput, c as throwIfAborted, d as applyReplyThreading, f as filterMessagingToolDuplicates, g as shouldSuppressReasoningPayload, h as shouldSuppressMessagingToolReplies, i as normalizeOutboundPayloads, l as loadChannelOutboundAdapter, m as isRenderablePayload, o as normalizeReplyPayloadsForDelivery, p as filterMessagingToolMediaDuplicates, r as formatOutboundPayloadLog, s as stampReplyActivity, t as deliverOutboundPayloads, u as applyReplyTagsToPayload, v as resolveReplyToMode, x as normalizeTargetForProvider, y as buildTargetResolverSignature } from "./deliver-Cm3rGLTE.js";
+import { _ as createReplyToModeFilterForChannel, a as normalizeOutboundPayloadsForJson, b as normalizeChannelTargetInput, c as throwIfAborted, d as applyReplyThreading, f as filterMessagingToolDuplicates, g as shouldSuppressReasoningPayload, h as shouldSuppressMessagingToolReplies, i as normalizeOutboundPayloads, l as loadChannelOutboundAdapter, m as isRenderablePayload, o as normalizeReplyPayloadsForDelivery, p as filterMessagingToolMediaDuplicates, r as formatOutboundPayloadLog, s as stampReplyActivity, t as deliverOutboundPayloads, u as applyReplyTagsToPayload, v as resolveReplyToMode, x as normalizeTargetForProvider, y as buildTargetResolverSignature } from "./deliver-6UjY-ciD.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-BnjqZBKt.js";
 import { C as sleepWithAbort, S as computeBackoff, T as transcriptEntriesToMessages, _ as extractToolCallNames, b as lookupContextTokens, d as capArrayByJsonBytes, g as countToolResults, h as jsonUtf8Bytes, o as loadCombinedSessionStoreForGateway, v as stripEnvelope, w as readFullTranscriptEntriesFromBackend, x as resolveContextTokensForModel, y as stripMessageIdHints } from "./session-utils-B7KbNmsO.js";
 import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-D1BfR_pn.js";
@@ -110,7 +110,7 @@ import { p as resolveGatewaySystemdServiceName, u as resolveGatewayLaunchAgentLa
 import { n as stripLeadingInboundMetadata, t as stripInboundMetadata } from "./strip-inbound-meta-BCfk6tLp.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-DL-XRpny.js";
 import { a as normalizeHttpWebhookUrl, o as inferLegacyName, r as isPipelineHeartbeatInFlight } from "./heartbeat-tick-B4euSpD2.js";
-import { a as resolvePinnedMainDmOwnerFromAllowlist, c as filterToolsByPolicy, d as resolveGroupToolPolicy, f as resolveSubagentToolPolicy, i as resolveDmGroupAccessWithLists, l as isToolAllowedByPolicies, n as readStoreAllowFromForDmPolicy, o as resolveCommandAuthorizedFromAuthorizers, s as resolveControlCommandGate, t as DM_GROUP_ACCESS_REASON, u as resolveEffectiveToolPolicy } from "./dm-policy-shared-tI72ZmkT.js";
+import { a as resolvePinnedMainDmOwnerFromAllowlist, c as filterToolsByPolicy, d as resolveGroupToolPolicy, f as resolveSubagentToolPolicy, i as resolveDmGroupAccessWithLists, l as isToolAllowedByPolicies, n as readStoreAllowFromForDmPolicy, o as resolveCommandAuthorizedFromAuthorizers, s as resolveControlCommandGate, t as DM_GROUP_ACCESS_REASON, u as resolveEffectiveToolPolicy } from "./dm-policy-shared-BQAcCl63.js";
 import { n as splitMediaFromOutput, t as parseReplyDirectives } from "./reply-directives-hnhSbSAJ.js";
 import { n as resolveMessageChannelSelection, t as listConfiguredMessageChannels } from "./channel-selection-DB1tO6Z1.js";
 import { i as applyPluginAutoEnable, r as resolveTelegramPollingTimeout } from "./polling-timeout-DX7Q0PdW.js";
@@ -126,8 +126,8 @@ import { s as resolveCommandSecretRefsViaGateway, t as getAgentRuntimeCommandSec
 import { r as detectBinary } from "./onboard-helpers-C-KY2Or-.js";
 import { t as resolvePairingIdLabel } from "./pairing-labels-BnfUSBep.js";
 import { t as recordInboundSessionMetaSafe } from "./session-meta-CYI_kGSN.js";
-import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-DmcxC5I8.js";
-import { r as resolveMemorySearchConfig } from "./manager-YAxHKdtb.js";
+import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-BBE_VMpU.js";
+import { r as resolveMemorySearchConfig } from "./manager-CvIqFTIQ.js";
 import { i as resolveContextWindowInfo, n as CONTEXT_WINDOW_WARN_BELOW_TOKENS, r as evaluateContextWindowGuard, t as CONTEXT_WINDOW_HARD_MIN_TOKENS } from "./context-window-guard-D5dDnO2h.js";
 import { createRequire } from "node:module";
 import { execFileSync, spawn, spawnSync } from "node:child_process";
@@ -6657,7 +6657,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-Cm3rGLTE.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-6UjY-ciD.js").then((n) => n.n);
 		const outboundSession = buildOutboundSessionContext({
 			cfg,
 			agentId: resolvedAgentId,
@@ -11834,7 +11834,7 @@ async function sendTranscriptEcho(params) {
 	}
 	const text = formatEchoTranscript(transcript, params.format ?? DEFAULT_ECHO_TRANSCRIPT_FORMAT);
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-Cm3rGLTE.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-6UjY-ciD.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg,
 			channel: normalizedChannel,
@@ -46651,7 +46651,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-Cm3rGLTE.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-6UjY-ciD.js").then((n) => n.n);
 		const outboundSession = buildOutboundSessionContext({
 			cfg: params.cfg,
 			sessionKey: params.sessionKey
@@ -52410,7 +52410,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./provider-image-Coer0abU.js").then((n) => n.n);
+		const { describeImageWithModel } = await import("./provider-image-DgeZtX_c.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -54000,7 +54000,7 @@ async function resolveDiscordPreflightAudioMentionContext(params) {
 	let transcript;
 	let carry;
 	if (needsPreflightTranscription) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-aAulyqxd.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-BOn0aLrK.js");
 		const uploadable = audioAttachments.filter((att) => typeof att.url === "string" && att.url.length > 0);
 		if (uploadable.length > 0) {
 			const preflight = await transcribeFirstAudio({
@@ -58697,7 +58697,7 @@ function createDefaultDeps() {
 			};
 		},
 		sendMessageTelegram: async (...args) => {
-			const { sendMessageTelegram } = await import("./send-D3NtKgzA.js").then((n) => n.l);
+			const { sendMessageTelegram } = await import("./send-DmwzEFcz.js").then((n) => n.l);
 			return await sendMessageTelegram(...args);
 		},
 		sendMessageDiscord: async (...args) => {
@@ -74612,7 +74612,7 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, replyMedia =
 	let audioPreflightCarry;
 	const audioConfigEnabled = cfg.tools?.media?.audio && cfg.tools.media.audio.enabled !== false;
 	if (hasAudio && !hasUserText && !disableAudioPreflight && (isGroup && requireMention && mentionRegexes.length > 0 || audioConfigEnabled === true)) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-aAulyqxd.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-BOn0aLrK.js");
 		const preflight = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: allMedia.length > 0 ? allMedia.map((m) => m.path) : void 0,
@@ -80670,7 +80670,7 @@ async function runBeforeToolCallHook(args) {
 	const params = args.params;
 	if (args.ctx?.sessionKey) {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-PGfvrouR.js").then((n) => n.n);
-		const { logToolLoopAction } = await import("./diagnostic-DDQ8FCEY.js").then((n) => n.r);
+		const { logToolLoopAction } = await import("./diagnostic-B-NRwhWN.js").then((n) => n.r);
 		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-CPTemD15.js");
 		const sessionState = getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,

package/dist/{agent-turn-recovery-adapter-D4ZPS58b.js → agent-turn-recovery-adapter-BbP4FJMr.js}

@@ -1,7 +1,7 @@
 import "./paths-BBP4yd-2.js";
 import "./utils-RlDPCeiE.js";
 import { t as createSubsystemLogger } from "./subsystem-Cwzs7yN0.js";
-import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID, u as isSessionRecoveryTurnPayload } from "./agent-turn-enqueue-B4vGPilf.js";
+import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID, u as isSessionRecoveryTurnPayload } from "./agent-turn-enqueue-Cr4GtseV.js";
 import { createHash } from "node:crypto";
 
 //#region src/acp/control-plane/agent-turn-recovery.ts

package/dist/{agent-turn-recovery-adapter-DtYwuSXR.js → agent-turn-recovery-adapter-DTTkK9hf.js}

@@ -1,7 +1,7 @@
 import "./globals-NHZhvbUb.js";
 import "./paths-BMo6kTge.js";
 import { t as createSubsystemLogger } from "./subsystem-CnWdoPKw.js";
-import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID, u as isSessionRecoveryTurnPayload } from "./agent-turn-enqueue-Dd-kFa0D.js";
+import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID, u as isSessionRecoveryTurnPayload } from "./agent-turn-enqueue-YQ59yFps.js";
 import { createHash } from "node:crypto";
 
 //#region src/acp/control-plane/agent-turn-recovery.ts

package/dist/{agent-turn-runner-BC_zv8y2.js → agent-turn-runner-CADoQG3T.js}

@@ -5,7 +5,7 @@ import { r as onDiagnosticEvent, t as emitDiagnosticEvent } from "./diagnostic-e
 import { o as isVerificationStoreError, t as CLIENT_RESUME_RECORD_KIND } from "./verification-store-BGJ-3dd8.js";
 import { t as redactIdentifier } from "./redact-identifier-DXwOA2lC.js";
 import { a as resolveSessionRunStore, n as deriveSessionRunId, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-DPJTpw9F.js";
-import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID } from "./agent-turn-enqueue-B4vGPilf.js";
+import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID } from "./agent-turn-enqueue-Cr4GtseV.js";
 import { fileURLToPath } from "node:url";
 import { readFileSync } from "node:fs";
 import { dirname, join, parse } from "node:path";

package/dist/{agent-turn-runner-CkeouusF.js → agent-turn-runner-DeA9UKiu.js}

@@ -184,7 +184,7 @@ function mergeDelayedAgentTurn(sessionKey, matches, merge) {
 	return true;
 }
 async function defaultExecute(claim) {
-	const { runMainAgentTurn } = await import("./pi-embedded-BaXvDWbm.js").then((n) => n.i);
+	const { runMainAgentTurn } = await import("./pi-embedded-B-uQIXE7.js").then((n) => n.i);
 	return runMainAgentTurn(claim.message.payload);
 }
 async function armIdleWaiter(sessionKey, backbone, opts) {
@@ -196,7 +196,7 @@ async function armIdleWaiter(sessionKey, backbone, opts) {
 		startedAt: opts?.startedAt ?? Date.now()
 	};
 	waiters.set(sessionKey, handle);
-	const { getQueueSize } = await import("./command-queue-Cu8vKnhL.js").then((n) => n.r);
+	const { getQueueSize } = await import("./command-queue-BblI9aeF.js").then((n) => n.r);
 	if (handle.cancelled || closing) return;
 	const release = (force = false) => {
 		releaseDelayedAgentTurns(backboneBySession.get(sessionKey) ?? backbone, sessionKey, force ? { force: true } : void 0);
@@ -218,7 +218,7 @@ async function armIdleWaiter(sessionKey, backbone, opts) {
 }
 async function enqueueAgentTurn(backbone, payload, opts) {
 	if (!payload.jobId.trim() || !payload.runId.trim()) throw new Error("agent-turn enqueue requires jobId and runId");
-	const isBusy = opts?.isSessionBusy ? opts.isSessionBusy() : (await import("./command-queue-Cu8vKnhL.js").then((n) => n.r)).getQueueSize(CommandLane.Main) > 0;
+	const isBusy = opts?.isSessionBusy ? opts.isSessionBusy() : (await import("./command-queue-BblI9aeF.js").then((n) => n.r)).getQueueSize(CommandLane.Main) > 0;
 	const policy = payload.busy ?? "skip";
 	const id = agentTurnIdempotencyKey(payload);
 	if (isBusy && policy === "skip") return `${id}:skipped`;
@@ -281,7 +281,7 @@ async function releaseDelayedAgentTurnsInternal(backbone, sessionKey, opts) {
 						}
 					});
 					if (payload.kind === "announce" && outcome.ok && outcome.delivery?.reason === WORKSPACE_LANE_DENIED_REASON) {
-						const { markSubagentAnnounceDenied } = await import("./pi-embedded-BaXvDWbm.js").then((n) => n.r);
+						const { markSubagentAnnounceDenied } = await import("./pi-embedded-B-uQIXE7.js").then((n) => n.r);
 						await markSubagentAnnounceDenied(payload.runId, payload.mergedRunIds);
 					}
 					releaseSucceeded = outcome.ok;

package/dist/{agent-turn-runner-BVQECDmh.js → agent-turn-runner-Df5UMEFk.js}

@@ -184,7 +184,7 @@ function mergeDelayedAgentTurn(sessionKey, matches, merge) {
 	return true;
 }
 async function defaultExecute(claim) {
-	const { runMainAgentTurn } = await import("./pi-embedded-I6gWFLp-.js").then((n) => n.o);
+	const { runMainAgentTurn } = await import("./pi-embedded-Baq86SJH.js").then((n) => n.o);
 	return runMainAgentTurn(claim.message.payload);
 }
 async function armIdleWaiter(sessionKey, backbone, opts) {
@@ -281,7 +281,7 @@ async function releaseDelayedAgentTurnsInternal(backbone, sessionKey, opts) {
 						}
 					});
 					if (payload.kind === "announce" && outcome.ok && outcome.delivery?.reason === WORKSPACE_LANE_DENIED_REASON) {
-						const { markSubagentAnnounceDenied } = await import("./pi-embedded-I6gWFLp-.js").then((n) => n.a);
+						const { markSubagentAnnounceDenied } = await import("./pi-embedded-Baq86SJH.js").then((n) => n.a);
 						await markSubagentAnnounceDenied(payload.runId, payload.mergedRunIds);
 					}
 					releaseSucceeded = outcome.ok;

package/dist/{agent-turn-runner-4YlOzIIh.js → agent-turn-runner-Fk0rtaP-.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { t as createSubsystemLogger } from "./subsystem-CnWdoPKw.js";
-import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID } from "./agent-turn-enqueue-Dd-kFa0D.js";
+import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID } from "./agent-turn-enqueue-YQ59yFps.js";
 import { R as parseAgentSessionKey } from "./session-key-_W_jy_wE.js";
 import { t as redactIdentifier } from "./redact-identifier-C-ydvJ0n.js";
 import { r as onDiagnosticEvent, t as emitDiagnosticEvent } from "./diagnostic-events-CTBWzSB8.js";

package/dist/{agents-BFFq0oD5.js → agents-Co2JjKeW.js}

@@ -5,7 +5,7 @@ import { Sc as resolveAuthStorePath, br as listChannelPlugins, gc as ensureAuthP
 import { E as DEFAULT_ACCOUNT_ID, p as normalizeAgentId, t as DEFAULT_AGENT_ID } from "./session-key-_W_jy_wE.js";
 import { a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-wENqDRyt.js";
 import { t as formatCliCommand } from "./command-format-CUvskdil.js";
-import { Y as parseIdentityMarkdown, q as identityHasValues } from "./agent-turn-execute-D7Q-Nl64.js";
+import { Y as parseIdentityMarkdown, q as identityHasValues } from "./agent-turn-execute-jK4msiI0.js";
 import { n as docsSiteUrl } from "./docs-site-B8KujBhr.js";
 import { a as ensureWorkspaceAndSessions, l as moveToTrash } from "./onboard-helpers-C-KY2Or-.js";
 import { n as callSessionStorageGateway, r as resolveSessionStorageRoute } from "./session-storage-owner-Ddy3sZ9v.js";
@@ -13,12 +13,12 @@ import { t as WizardCancelledError } from "./prompts-CLQTcaM6.js";
 import { t as createClackPrompter } from "./clack-prompter-4RzGBW2S.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-D4eykfBm.js";
 import { a as parseBindingSpecs, i as describeBinding, n as applyAgentBindings, o as removeAgentBindings, r as buildChannelBindings, t as requireValidConfigSnapshot } from "./config-validation-BEw4kpy6.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, n as buildAgentSummaries, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DtBf255U.js";
-import { r as setupChannels } from "./onboard-channels-DM2tHUB5.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, n as buildAgentSummaries, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DzcS5E75.js";
+import { r as setupChannels } from "./onboard-channels-C_THMczv.js";
 import { t as tombstoneAgentSessions } from "./delete-agent-sessions-DWiP7YTB.js";
 import { n as logConfigUpdated } from "./logging-GGtp16Fh.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-CLK63ohs.js";
-import { i as applyAuthChoice, r as warnIfModelConfigLooksOff } from "./auth-choice-DpKm1EL8.js";
+import { i as applyAuthChoice, r as warnIfModelConfigLooksOff } from "./auth-choice-B3KCTmD6.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/{agents.config-yvasKYdy.js → agents.config-CWh12iWC.js}

@@ -1,4 +1,4 @@
-import { cn as identityHasValues, ln as loadAgentIdentityFromWorkspace } from "./reply-B563UrI4.js";
+import { cn as identityHasValues, ln as loadAgentIdentityFromWorkspace } from "./reply-Cc7sfugv.js";
 import { a as resolveAgentDir, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-74wMBayE.js";
 import { p as normalizeAgentId } from "./session-key-DNuNiUnE.js";
 

package/dist/{agents.config-DtBf255U.js → agents.config-DzcS5E75.js}

@@ -1,6 +1,6 @@
 import { p as normalizeAgentId } from "./session-key-_W_jy_wE.js";
 import { a as resolveAgentDir, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-wENqDRyt.js";
-import { J as loadAgentIdentityFromWorkspace, q as identityHasValues } from "./agent-turn-execute-D7Q-Nl64.js";
+import { J as loadAgentIdentityFromWorkspace, q as identityHasValues } from "./agent-turn-execute-jK4msiI0.js";
 
 //#region src/commands/agents.config.ts
 function findAgentEntryIndex(list, agentId) {

package/dist/{audio-preflight-aAulyqxd.js → audio-preflight-BOn0aLrK.js}

@@ -12,15 +12,15 @@ import "./pid-alive-C13jc975.js";
 import "./retry-policy-BIRWkDiU.js";
 import "./static-app-CmNfpiH4.js";
 import "./diagnostic-events-CTBWzSB8.js";
-import "./pi-embedded-helpers-QAU26Sis.js";
-import "./sandbox-CKcVo3mx.js";
+import "./pi-embedded-helpers-CVcv9xLb.js";
+import "./sandbox-Dwq8Q6z6.js";
 import "./tool-catalog-BWgva5h1.js";
 import "./extension-relay-auth-CnGjydTv.js";
 import "./tailscale-DFHS2SJQ.js";
 import "./tailnet-CKKdh7--.js";
 import "./ws-FGQR59XS.js";
 import "./auth-C7hnQwxM.js";
-import "./server-context-CVLSAAYI.js";
+import "./server-context-PFZhDAEv.js";
 import "./frontmatter-CTLhKUgt.js";
 import "./skills-acry8n8f.js";
 import "./path-alias-guards-5b1JZAG8.js";
@@ -42,11 +42,11 @@ import "./thinking-DvkryGzk.js";
 import "./pi-model-discovery-DOybnK2i.js";
 import "./models-config-uZgLcR-J.js";
 import "./model-catalog-DI6VlMnh.js";
-import "./pi-embedded-utils-C1UQ0GEo.js";
+import "./pi-embedded-utils-Ca6LN431.js";
 import "./tool-display-CLvQUNoS.js";
-import "./provider-image-Coer0abU.js";
+import "./provider-image-DgeZtX_c.js";
 import "./fetch-BhNcI7Hd.js";
-import { O as isAudioAttachment, S as listAudioAttachments, b as audioOrdinalOf, i as normalizeMediaAttachments, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription, x as findCarriedTranscript } from "./audio-transcription-runner-8LdCJhZK.js";
+import { O as isAudioAttachment, S as listAudioAttachments, b as audioOrdinalOf, i as normalizeMediaAttachments, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription, x as findCarriedTranscript } from "./audio-transcription-runner-DwuXxx7G.js";
 import "./fetch-guard-O-94prLa.js";
 import "./proxy-fetch-_GzuheXD.js";
 import "./api-key-rotation-BHeoKyLG.js";

package/dist/{audio-preflight-HLgkjsN8.js → audio-preflight-DQDjVE0e.js}

@@ -9,8 +9,8 @@ import "./diagnostic-events-BTSwhIfk.js";
 import "./redact-CTDCATmH.js";
 import "./image-ops-A6f7GNWY.js";
 import "./pi-model-discovery-DJmVi5e7.js";
-import "./chat-content-Bpxdefc9.js";
-import "./chrome-BnfIBHi2.js";
+import "./chat-content-1nr0YSHg.js";
+import "./chrome-BCcfY__1.js";
 import "./skills-BQk6rwiI.js";
 import "./path-alias-guards-Doc1hCCV.js";
 import "./errors-CQk-Cc3c.js";
@@ -19,9 +19,9 @@ import "./proxy-env-By0HtgEW.js";
 import "./store-pFLK6f6N.js";
 import "./thinking-D6R5MauW.js";
 import "./models-config-CzcHLvYc.js";
-import { b as isAudioAttachment, g as listAudioAttachments, h as findCarriedTranscript, i as normalizeMediaAttachments, m as audioOrdinalOf, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription } from "./audio-transcription-runner-7cK_nlfM.js";
-import "./pi-embedded-utils-CSRjbLxm.js";
-import "./provider-image-GryCsb9m.js";
+import { b as isAudioAttachment, g as listAudioAttachments, h as findCarriedTranscript, i as normalizeMediaAttachments, m as audioOrdinalOf, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription } from "./audio-transcription-runner-l6zrG6pO.js";
+import "./pi-embedded-utils-BmflVw2w.js";
+import "./provider-image-DF8IoK4n.js";
 import "./fetch-Befctisj.js";
 import "./fetch-guard-DbSdvdMv.js";
 import "./proxy-fetch-DlgRJUWl.js";

package/dist/{audio-preflight-CdSH9T17.js → audio-preflight-DSLYhkRA.js}

@@ -15,26 +15,26 @@ import "./retry-policy-BIRWkDiU.js";
 import "./static-app-SY2eW4zk.js";
 import "./path-alias-guards-i_OY-fQZ.js";
 import "./fs-safe-DGEzvx_b.js";
-import { _ as isAudioAttachment, d as listAudioAttachments, i as normalizeMediaAttachments, l as audioOrdinalOf, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription, u as findCarriedTranscript } from "./audio-transcription-runner-Dusk4UCi.js";
+import { _ as isAudioAttachment, d as listAudioAttachments, i as normalizeMediaAttachments, l as audioOrdinalOf, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription, u as findCarriedTranscript } from "./audio-transcription-runner-B3K9lgoT.js";
 import "./fetch-guard-Dab20wMo.js";
 import "./ssrf-s2d1Se6b.js";
 import "./proxy-fetch-cvrj6tRR.js";
-import "./pi-embedded-helpers-B9uC0_51.js";
+import "./pi-embedded-helpers-1CbLRbOE.js";
 import "./local-roots-G4PMPueY.js";
 import "./image-ops-C1n6sFa0.js";
 import "./redact-BtDom4n2.js";
 import "./errors-BFGEHCGo.js";
 import "./models-config-BBqkHO85.js";
 import "./model-catalog-B7kagyU7.js";
-import "./pi-embedded-utils-DEtPyBGI.js";
-import "./sandbox-B_72aWvv.js";
+import "./pi-embedded-utils-D-rI2gt3.js";
+import "./sandbox-Dejl30FJ.js";
 import "./tool-catalog-G7vTo5xu.js";
 import "./extension-relay-auth-BddgGm2Q.js";
 import "./tailscale-C87iDP6E.js";
 import "./tailnet-DyxxEpY5.js";
 import "./ws-D6OrsR3F.js";
 import "./auth-D5fb4qs6.js";
-import "./server-context-D4QkjJ4p.js";
+import "./server-context-CObOngjL.js";
 import "./frontmatter-UHjGmVQ0.js";
 import "./skills-D551-3Wd.js";
 import "./store-Y2ec77yA.js";
@@ -48,7 +48,7 @@ import "./reset-BHqdWwk8.js";
 import "./diagnostic-events-QbXid8kq.js";
 import "./task-run-types-Bt-7ZJU6.js";
 import "./tool-display-n_glJWOO.js";
-import "./provider-image-CNhnOh5l.js";
+import "./provider-image-BjwvWTTq.js";
 import "./api-key-rotation-Ck9I4Gtt.js";
 import "./pi-model-discovery-CT2Od9rN.js";
 

package/dist/{audio-transcription-runner-Dusk4UCi.js → audio-transcription-runner-B3K9lgoT.js}

@@ -12,7 +12,7 @@ import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, r as MediaFetchE
 import { c as detectMime, f as isAudioFileName, h as normalizeMimeType, m as kindFromMime, u as getFileExtension } from "./image-ops-C1n6sFa0.js";
 import { a as formatUncaughtError, c as readErrorName, n as extractErrorCode, t as collectErrorGraphCandidates } from "./errors-BFGEHCGo.js";
 import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-B7kagyU7.js";
-import { s as resolveProviderVisionModelFromConfig, t as describeImageWithModel } from "./provider-image-CNhnOh5l.js";
+import { s as resolveProviderVisionModelFromConfig, t as describeImageWithModel } from "./provider-image-BjwvWTTq.js";
 import { n as executeWithApiKeyRotation, t as collectProviderApiKeysForExecution } from "./api-key-rotation-Ck9I4Gtt.js";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";

package/dist/{audio-transcription-runner-8LdCJhZK.js → audio-transcription-runner-DwuXxx7G.js}

@@ -8,7 +8,7 @@ import { a as formatUncaughtError, c as readErrorName, n as extractErrorCode, t
 import { c as detectMime, f as isAudioFileName, h as normalizeMimeType, m as kindFromMime, u as getFileExtension } from "./image-ops-CRj_-3A2.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-C60x4trY.js";
 import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-DI6VlMnh.js";
-import { s as resolveProviderVisionModelFromConfig, t as describeImageWithModel } from "./provider-image-Coer0abU.js";
+import { s as resolveProviderVisionModelFromConfig, t as describeImageWithModel } from "./provider-image-DgeZtX_c.js";
 import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia, t as MediaFetchError } from "./fetch-BhNcI7Hd.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-L2NTusph.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-O-94prLa.js";

package/dist/{audio-transcription-runner-7cK_nlfM.js → audio-transcription-runner-l6zrG6pO.js}

@@ -5,7 +5,7 @@ import { r as normalizeChatType } from "./conversation-label-Ckfze_uK.js";
 import { c as detectMime, f as isAudioFileName, h as normalizeMimeType, m as kindFromMime, u as getFileExtension } from "./image-ops-A6f7GNWY.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-CWMxbvLB.js";
 import { t as ensureOpenClawModelsJson } from "./models-config-CzcHLvYc.js";
-import { s as resolveProviderVisionModelFromConfig, t as describeImageWithModel } from "./provider-image-GryCsb9m.js";
+import { s as resolveProviderVisionModelFromConfig, t as describeImageWithModel } from "./provider-image-DF8IoK4n.js";
 import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia, t as MediaFetchError } from "./fetch-Befctisj.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-Ct3Jl5dU.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-DbSdvdMv.js";

package/dist/{audit-BPXpYWrZ.js → audit-BtPKPkTZ.js}

@@ -5,10 +5,10 @@ import { p as normalizeAgentId } from "./session-key-_W_jy_wE.js";
 import { F as resolveAgentModelPrimaryValue, P as resolveAgentModelFallbackValues, d as resolveDefaultAgentId } from "./agent-scope-wENqDRyt.js";
 import { t as formatCliCommand } from "./command-format-CUvskdil.js";
 import { t as readManifestNamespace } from "./legacy-names-V1JxuBIa.js";
-import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-CKcVo3mx.js";
+import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-Dwq8Q6z6.js";
 import { s as resolveGatewayAuth } from "./auth-C7hnQwxM.js";
 import { t as resolveGatewayCredentialsFromConfig } from "./credentials-DB-33pt2.js";
-import { a as resolveBrowserControlAuth } from "./server-context-CVLSAAYI.js";
+import { a as resolveBrowserControlAuth } from "./server-context-PFZhDAEv.js";
 import { i as loadWorkspaceSkillEntries } from "./skills-acry8n8f.js";
 import { i as formatErrorMessage } from "./errors-CQuNUrqQ.js";
 import { i as resolveProfile, r as resolveBrowserConfig } from "./trash-BjIrvMdn.js";
@@ -18,7 +18,7 @@ import { t as GatewayClient } from "./client-BfxQTCrr.js";
 import { p as READ_SCOPE, t as buildGatewayConnectionDetails } from "./call-B5wkFUlo.js";
 import { i as readChannelAllowFromStore } from "./pairing-store-jk0H8o1s.js";
 import { t as listAgentWorkspaceDirs } from "./workspace-dirs-DbOb1pIA.js";
-import { l as isToolAllowedByPolicies, p as pickSandboxToolPolicy, r as resolveDmAllowState } from "./dm-policy-shared-tI72ZmkT.js";
+import { l as isToolAllowedByPolicies, p as pickSandboxToolPolicy, r as resolveDmAllowState } from "./dm-policy-shared-BQAcCl63.js";
 import { n as isDangerousNameMatchingEnabled } from "./dangerous-name-matching-BlTBBZns.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-B42rpHfZ.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-D4eykfBm.js";