wednesdayai 0.5.1-dev.41 → 0.5.1-dev.42

package/dist/{chat-content-tQ21BnhN.js → chat-content-BgW4rG28.js}

@@ -1,27 +1,27 @@
-import { Ha as resolveSecretInputRef, Sr as acquireSessionWriteLock, Za as parseBooleanValue, a as createConfigIO, ba as formatCliCommand, c as loadConfig, k as getBlockedNetworkModeReason, m as writeConfigFile, pa as resolveSecretRefValues, st as CHANNEL_IDS, va as secretRefKey } from "./config-D5tWLhng.js";
+import { Ha as resolveSecretInputRef, Sr as acquireSessionWriteLock, Za as parseBooleanValue, a as createConfigIO, ba as formatCliCommand, c as loadConfig, k as getBlockedNetworkModeReason, m as writeConfigFile, pa as resolveSecretRefValues, st as CHANNEL_IDS, va as secretRefKey } from "./config-CPcuaNsB.js";
 import { r as STATE_DIR, u as resolveGatewayPort } from "./paths-C7aURmuZ.js";
-import { E as truncateUtf16Safe, Z as openBoundaryFile, b as resolveUserPath, nt as resolvePathViaExistingAncestorSync, o as defaultRuntime, t as createSubsystemLogger } from "./subsystem-B9soUuXQ.js";
-import { D as runExec, Y as normalizeAgentId, Z as resolveAgentIdFromSessionKey, _ as DEFAULT_IDENTITY_FILENAME, b as DEFAULT_USER_FILENAME, d as resolveSessionAgentId, g as DEFAULT_HEARTBEAT_FILENAME, h as DEFAULT_BOOTSTRAP_FILENAME, m as DEFAULT_AGENT_WORKSPACE_DIR, p as DEFAULT_AGENTS_FILENAME, r as resolveAgentConfig, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-DUbhjnHb.js";
-import { It as canonicalizeMainSessionAlias, Lt as resolveAgentMainSessionKey, g as sanitizeToolCallIdsForCloudCodeAssist } from "./sessions-BgTvNzNv.js";
-import { A as DEFAULT_DOWNLOAD_DIR, B as DEFAULT_AI_SNAPSHOT_MAX_CHARS, C as ensureChromeExtensionRelayServer, D as PROFILE_POST_RESTART_WS_TIMEOUT_MS, E as PROFILE_ATTACH_RETRY_TIMEOUT_MS, F as resolveWritablePathWithinRoot, G as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, H as DEFAULT_BROWSER_EVALUATE_ENABLED, L as normalizeBrowserFormField, M as DEFAULT_UPLOAD_DIR, N as resolveExistingPathsWithinRoot, O as resolveCdpReachabilityTimeouts, R as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, T as CDP_JSON_NEW_TIMEOUT_MS, U as DEFAULT_OPENCLAW_BROWSER_COLOR, V as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, W as DEFAULT_OPENCLAW_BROWSER_ENABLED, _ as withBrowserNavigationPolicy, a as resolveOpenClawUserDataDir, b as fetchOk, c as resolveBrowserExecutableForPlatform, f as normalizeCdpWsUrl, g as assertBrowserNavigationResultAllowed, h as assertBrowserNavigationAllowed, i as launchOpenClawChrome, j as DEFAULT_TRACE_DIR, l as captureScreenshot, m as InvalidBrowserNavigationUrlError, n as isChromeCdpReady, o as stopOpenClawChrome, p as snapshotAria, r as isChromeReachable, u as createTargetViaCdp, v as appendCdpPath, w as stopChromeExtensionRelayServer, y as fetchJson, z as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-DxiDoVpi.js";
-import { r as isLoopbackHost } from "./ws-CSU92Z2r.js";
-import { n as resolveGatewayCredentialsFromValues } from "./credentials-DdZjLLBj.js";
-import { d as resolveSandboxPath, h as sanitizeEnvVars, o as syncSkillsToWorkspace, u as resolveSandboxInputPath } from "./skills-Ci9t7Gax.js";
-import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-CGcezGX3.js";
-import { r as formatErrorMessage, t as extractErrorCode } from "./errors-D8k7j4A4.js";
-import { n as SsrFBlockedError } from "./proxy-env-DKs0W5v1.js";
-import { i as getImageMetadata, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS } from "./image-ops-C54shfkj.js";
-import { i as saveMediaBuffer, n as ensureMediaDir } from "./store-B6wZFu_5.js";
+import { E as truncateUtf16Safe, Z as openBoundaryFile, b as resolveUserPath, nt as resolvePathViaExistingAncestorSync, o as defaultRuntime, t as createSubsystemLogger } from "./subsystem-BTMrlJ-R.js";
+import { D as runExec, Y as normalizeAgentId, Z as resolveAgentIdFromSessionKey, _ as DEFAULT_IDENTITY_FILENAME, b as DEFAULT_USER_FILENAME, d as resolveSessionAgentId, g as DEFAULT_HEARTBEAT_FILENAME, h as DEFAULT_BOOTSTRAP_FILENAME, m as DEFAULT_AGENT_WORKSPACE_DIR, p as DEFAULT_AGENTS_FILENAME, r as resolveAgentConfig, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-BJFJ0deZ.js";
+import { It as canonicalizeMainSessionAlias, Lt as resolveAgentMainSessionKey, g as sanitizeToolCallIdsForCloudCodeAssist } from "./sessions-IqyeyMXp.js";
+import { A as DEFAULT_DOWNLOAD_DIR, B as DEFAULT_AI_SNAPSHOT_MAX_CHARS, C as ensureChromeExtensionRelayServer, D as PROFILE_POST_RESTART_WS_TIMEOUT_MS, E as PROFILE_ATTACH_RETRY_TIMEOUT_MS, F as resolveWritablePathWithinRoot, G as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, H as DEFAULT_BROWSER_EVALUATE_ENABLED, L as normalizeBrowserFormField, M as DEFAULT_UPLOAD_DIR, N as resolveExistingPathsWithinRoot, O as resolveCdpReachabilityTimeouts, R as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, T as CDP_JSON_NEW_TIMEOUT_MS, U as DEFAULT_OPENCLAW_BROWSER_COLOR, V as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, W as DEFAULT_OPENCLAW_BROWSER_ENABLED, _ as withBrowserNavigationPolicy, a as resolveOpenClawUserDataDir, b as fetchOk, c as resolveBrowserExecutableForPlatform, f as normalizeCdpWsUrl, g as assertBrowserNavigationResultAllowed, h as assertBrowserNavigationAllowed, i as launchOpenClawChrome, j as DEFAULT_TRACE_DIR, l as captureScreenshot, m as InvalidBrowserNavigationUrlError, n as isChromeCdpReady, o as stopOpenClawChrome, p as snapshotAria, r as isChromeReachable, u as createTargetViaCdp, v as appendCdpPath, w as stopChromeExtensionRelayServer, y as fetchJson, z as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-DNTX4D1k.js";
+import { r as isLoopbackHost } from "./ws-D51UDdBH.js";
+import { n as resolveGatewayCredentialsFromValues } from "./credentials-2Kd9Ahu7.js";
+import { d as resolveSandboxPath, h as sanitizeEnvVars, o as syncSkillsToWorkspace, u as resolveSandboxInputPath } from "./skills-jb4bSwT6.js";
+import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-B9AcbQl6.js";
+import { r as formatErrorMessage, t as extractErrorCode } from "./errors-DnOtx_vg.js";
+import { n as SsrFBlockedError } from "./proxy-env-Bw8nAERJ.js";
+import { i as getImageMetadata, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS } from "./image-ops-BTgGxcIG.js";
+import { i as saveMediaBuffer, n as ensureMediaDir } from "./store-CsI6l-8d.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-D91c_y3Q.js";
 import { t as generateSecureToken } from "./secure-random-CYWiC9Ek.js";
 import { n as resolveWindowsSpawnProgram, t as materializeWindowsSpawnProgram } from "./windows-spawn-BD9EiDok.js";
-import { r as writeJsonAtomic } from "./json-files-C3L53Qrl.js";
+import { r as writeJsonAtomic } from "./json-files-DNv3G6Vg.js";
 import { o as normalizeThinkLevel } from "./thinking-BOHpxvdU.js";
 import crypto, { createHash, timingSafeEqual } from "node:crypto";
 import fs, { existsSync } from "node:fs";
 import os from "node:os";
 import path, { posix } from "node:path";
-import fsp from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { spawn } from "node:child_process";
 import express from "express";
 
@@ -1151,7 +1151,7 @@ function isModuleNotFoundError(err) {
 }
 async function loadPwAiModule(mode) {
 	try {
-		return await import("./pw-ai-CEk9Jaqd.js");
+		return await import("./pw-ai-C6ZFN6As.js");
 	} catch (err) {
 		if (mode === "soft") return null;
 		if (isModuleNotFoundError(err)) return null;
@@ -1309,7 +1309,7 @@ async function withPlaywrightRouteContext(params) {
 //#endregion
 //#region src/browser/routes/output-paths.ts
 async function ensureOutputRootDir(rootDir) {
-	await fsp.mkdir(rootDir, { recursive: true });
+	await fs$1.mkdir(rootDir, { recursive: true });
 }
 async function resolveWritableOutputPathOrRespond(params) {
 	if (params.ensureRootDir) await ensureOutputRootDir(params.rootDir);
@@ -3516,7 +3516,7 @@ function createProfileAvailability({ opts, profile, state, getProfileState, setP
 //#region src/browser/server-context.reset.ts
 async function closePlaywrightBrowserConnection() {
 	try {
-		await (await import("./pw-ai-CEk9Jaqd.js")).closePlaywrightBrowserConnection();
+		await (await import("./pw-ai-C6ZFN6As.js")).closePlaywrightBrowserConnection();
 	} catch {}
 }
 function createProfileResetOps({ profile, getProfileState, stopRunningBrowser, isHttpReachable, resolveOpenClawUserDataDir }) {
@@ -4226,7 +4226,7 @@ async function withRegistryLock(registryPath, fn) {
 }
 async function readRegistryFromFile(registryPath, mode) {
 	try {
-		const raw = await fsp.readFile(registryPath, "utf-8");
+		const raw = await fs$1.readFile(registryPath, "utf-8");
 		const parsed = JSON.parse(raw);
 		if (isRegistryFile(parsed)) return parsed;
 		if (mode === "fallback") return { entries: [] };
@@ -5850,7 +5850,7 @@ function formatSandboxToolPolicyBlockedMessage(params) {
 //#endregion
 //#region src/agents/sandbox/workspace.ts
 async function ensureSandboxWorkspace(workspaceDir, seedFrom, skipBootstrap) {
-	await fsp.mkdir(workspaceDir, { recursive: true });
+	await fs$1.mkdir(workspaceDir, { recursive: true });
 	if (seedFrom) {
 		const seed = resolveUserPath(seedFrom);
 		const files = [
@@ -5866,7 +5866,7 @@ async function ensureSandboxWorkspace(workspaceDir, seedFrom, skipBootstrap) {
 			const src = path.join(seed, name);
 			const dest = path.join(workspaceDir, name);
 			try {
-				await fsp.access(dest);
+				await fs$1.access(dest);
 			} catch {
 				try {
 					const opened = await openBoundaryFile({
@@ -5877,7 +5877,7 @@ async function ensureSandboxWorkspace(workspaceDir, seedFrom, skipBootstrap) {
 					if (!opened.ok) continue;
 					try {
 						const content = fs.readFileSync(opened.fd, "utf-8");
-						await fsp.writeFile(dest, content, {
+						await fs$1.writeFile(dest, content, {
 							encoding: "utf-8",
 							flag: "wx"
 						});
@@ -5916,7 +5916,7 @@ async function ensureSandboxWorkspaceLayout(params) {
 			const message = error instanceof Error ? error.message : JSON.stringify(error);
 			defaultRuntime.error?.(`Sandbox skill sync failed: ${message}`);
 		}
-	} else await fsp.mkdir(workspaceDir, { recursive: true });
+	} else await fs$1.mkdir(workspaceDir, { recursive: true });
 	return {
 		agentWorkspaceDir,
 		scopeKey,
@@ -5926,7 +5926,7 @@ async function ensureSandboxWorkspaceLayout(params) {
 }
 async function resolveSandboxDockerUser(params) {
 	if (params.docker.user?.trim()) return params.docker;
-	const stat = params.stat ?? ((workspaceDir) => fsp.stat(workspaceDir));
+	const stat = params.stat ?? ((workspaceDir) => fs$1.stat(workspaceDir));
 	try {
 		const workspaceStat = await stat(params.workspaceDir);
 		const uid = Number.isInteger(workspaceStat.uid) ? workspaceStat.uid : null;

package/dist/{chrome-DxiDoVpi.js → chrome-DNTX4D1k.js}

@@ -1,14 +1,14 @@
-import { c as loadConfig } from "./config-D5tWLhng.js";
-import { at as isPathInside, it as isNotFoundPathError, mt as resolvePreferredOpenClawTmpDir, t as createSubsystemLogger, u as CONFIG_DIR } from "./subsystem-B9soUuXQ.js";
-import { n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString } from "./ws-CSU92Z2r.js";
-import { a as isErrno } from "./errors-D8k7j4A4.js";
-import { i as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-BH37Yhl8.js";
-import { c as resolvePinnedHostnameWithPolicy, s as isPrivateNetworkAllowedByPolicy, t as hasProxyEnvConfigured } from "./proxy-env-DKs0W5v1.js";
+import { c as loadConfig } from "./config-CPcuaNsB.js";
+import { at as isPathInside, it as isNotFoundPathError, mt as resolvePreferredOpenClawTmpDir, t as createSubsystemLogger, u as CONFIG_DIR } from "./subsystem-BTMrlJ-R.js";
+import { n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString } from "./ws-D51UDdBH.js";
+import { a as isErrno } from "./errors-DnOtx_vg.js";
+import { i as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-C3qJHn62.js";
+import { c as resolvePinnedHostnameWithPolicy, s as isPrivateNetworkAllowedByPolicy, t as hasProxyEnvConfigured } from "./proxy-env-Bw8nAERJ.js";
 import { createHmac } from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fsp from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { execFileSync, spawn } from "node:child_process";
 import net from "node:net";
 import http, { createServer } from "node:http";
@@ -66,28 +66,28 @@ function invalidPath(scopeLabel) {
 }
 async function resolveRealPathIfExists(targetPath) {
 	try {
-		return await fsp.realpath(targetPath);
+		return await fs$1.realpath(targetPath);
 	} catch {
 		return;
 	}
 }
 async function resolveTrustedRootRealPath(rootDir) {
 	try {
-		const rootLstat = await fsp.lstat(rootDir);
+		const rootLstat = await fs$1.lstat(rootDir);
 		if (!rootLstat.isDirectory() || rootLstat.isSymbolicLink()) return;
-		return await fsp.realpath(rootDir);
+		return await fs$1.realpath(rootDir);
 	} catch {
 		return;
 	}
 }
 async function validateCanonicalPathWithinRoot(params) {
 	try {
-		const candidateLstat = await fsp.lstat(params.candidatePath);
+		const candidateLstat = await fs$1.lstat(params.candidatePath);
 		if (candidateLstat.isSymbolicLink()) return "invalid";
 		if (params.expect === "directory" && !candidateLstat.isDirectory()) return "invalid";
 		if (params.expect === "file" && !candidateLstat.isFile()) return "invalid";
 		if (params.expect === "file" && candidateLstat.nlink > 1) return "invalid";
-		const candidateRealPath = await fsp.realpath(params.candidatePath);
+		const candidateRealPath = await fs$1.realpath(params.candidatePath);
 		return isPathInside(params.rootRealPath, candidateRealPath) ? "ok" : "invalid";
 	} catch (err) {
 		return isNotFoundPathError(err) ? "not-found" : "invalid";
@@ -165,7 +165,7 @@ async function resolveCheckedPathsWithinRoot(params) {
 		};
 		if (!rootRealPath || !raw || !path.isAbsolute(raw)) return lexicalPathResult;
 		try {
-			const resolvedExistingPath = await fsp.realpath(raw);
+			const resolvedExistingPath = await fs$1.realpath(raw);
 			const relativePath = path.relative(rootRealPath, resolvedExistingPath);
 			if (!isInRoot(relativePath)) return lexicalPathResult;
 			return {

package/dist/{chrome-C9TkYQeh.js → chrome-DQ2kyZpc.js}

@@ -1,9 +1,9 @@
-import { H as isPathInside, V as isNotFoundPathError, Z as CONFIG_DIR, mt as resolvePreferredOpenClawTmpDir, t as createSubsystemLogger } from "./subsystem-cFv2jJm-.js";
-import { U as loadConfig } from "./model-selection-JA-6f5ss.js";
-import { n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString } from "./ws-CmKUpGwq.js";
-import { a as isErrno } from "./errors-BWpk4nzX.js";
-import { i as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-BjrptUz1.js";
-import { c as resolvePinnedHostnameWithPolicy, s as isPrivateNetworkAllowedByPolicy, t as hasProxyEnvConfigured } from "./proxy-env-DtzLr6mZ.js";
+import { H as isPathInside, V as isNotFoundPathError, Z as CONFIG_DIR, mt as resolvePreferredOpenClawTmpDir, t as createSubsystemLogger } from "./subsystem-DynBFcQj.js";
+import { U as loadConfig } from "./model-selection-DFW5CGMj.js";
+import { n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString } from "./ws-CQigqc-W.js";
+import { a as isErrno } from "./errors-B_bbUZmd.js";
+import { i as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CFEZK0gv.js";
+import { c as resolvePinnedHostnameWithPolicy, s as isPrivateNetworkAllowedByPolicy, t as hasProxyEnvConfigured } from "./proxy-env-RzbogHFe.js";
 import path from "node:path";
 import syncFs from "node:fs";
 import os from "node:os";
@@ -13,7 +13,7 @@ import { createHmac } from "node:crypto";
 import net from "node:net";
 import http, { createServer } from "node:http";
 import https from "node:https";
-import WebSocket, { WebSocketServer } from "ws";
+import WebSocket$1, { WebSocketServer } from "ws";
 
 //#region src/browser/constants.ts
 const DEFAULT_OPENCLAW_BROWSER_ENABLED = true;
@@ -501,7 +501,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 		let extensionWs = null;
 		const cdpClients = /* @__PURE__ */ new Set();
 		const connectedTargets = /* @__PURE__ */ new Map();
-		const extensionConnected = () => extensionWs?.readyState === WebSocket.OPEN;
+		const extensionConnected = () => extensionWs?.readyState === WebSocket$1.OPEN;
 		const hasConnectedTargets = () => connectedTargets.size > 0;
 		let extensionDisconnectCleanupTimer = null;
 		const extensionReconnectWaiters = /* @__PURE__ */ new Set();
@@ -553,7 +553,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 		let nextExtensionId = 1;
 		const sendToExtension = async (payload) => {
 			const ws = extensionWs;
-			if (!ws || ws.readyState !== WebSocket.OPEN) throw new Error("Chrome extension not connected");
+			if (!ws || ws.readyState !== WebSocket$1.OPEN) throw new Error("Chrome extension not connected");
 			ws.send(JSON.stringify(payload));
 			return await new Promise((resolve, reject) => {
 				const timer = setTimeout(() => {
@@ -570,12 +570,12 @@ async function ensureChromeExtensionRelayServer(opts) {
 		const broadcastToCdpClients = (evt) => {
 			const msg = JSON.stringify(evt);
 			for (const ws of cdpClients) {
-				if (ws.readyState !== WebSocket.OPEN) continue;
+				if (ws.readyState !== WebSocket$1.OPEN) continue;
 				ws.send(msg);
 			}
 		};
 		const sendResponseToCdp = (ws, res) => {
-			if (ws.readyState !== WebSocket.OPEN) return;
+			if (ws.readyState !== WebSocket$1.OPEN) return;
 			ws.send(JSON.stringify(res));
 		};
 		const dropConnectedTargetSession = (sessionId) => {
@@ -829,7 +829,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 					rejectUpgrade(socket, 401, "Unauthorized");
 					return;
 				}
-				if (extensionWs && extensionWs.readyState !== WebSocket.OPEN) {
+				if (extensionWs && extensionWs.readyState !== WebSocket$1.OPEN) {
 					try {
 						extensionWs.terminate();
 					} catch {}
@@ -862,7 +862,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 			clearExtensionDisconnectCleanupTimer();
 			flushExtensionReconnectWaiters(true);
 			const ping = setInterval(() => {
-				if (ws.readyState !== WebSocket.OPEN) return;
+				if (ws.readyState !== WebSocket$1.OPEN) return;
 				ws.send(JSON.stringify({ method: "ping" }));
 			}, 5e3);
 			ws.on("message", (data) => {
@@ -1218,7 +1218,7 @@ function openCdpWebSocket(wsUrl, opts) {
 	const headers = getHeadersWithAuth(wsUrl, opts?.headers ?? {});
 	const handshakeTimeoutMs = typeof opts?.handshakeTimeoutMs === "number" && Number.isFinite(opts.handshakeTimeoutMs) ? Math.max(1, Math.floor(opts.handshakeTimeoutMs)) : CDP_WS_HANDSHAKE_TIMEOUT_MS;
 	const agent = getDirectAgentForCdp(wsUrl);
-	return new WebSocket(wsUrl, {
+	return new WebSocket$1(wsUrl, {
 		handshakeTimeout: handshakeTimeoutMs,
 		...Object.keys(headers).length ? { headers } : {},
 		...agent ? { agent } : {}

package/dist/{chrome-BRVJGvQa.js → chrome-W4kkryVf.js}

@@ -1,9 +1,9 @@
 import { H as isPathInside, V as isNotFoundPathError, Z as CONFIG_DIR, mt as resolvePreferredOpenClawTmpDir, t as createSubsystemLogger } from "./subsystem-DynBFcQj.js";
-import { U as loadConfig } from "./model-selection-DkRYDpst.js";
-import { n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString } from "./ws-CWxX8WDm.js";
-import { a as isErrno } from "./errors-B_bbUZmd.js";
-import { i as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-CFEZK0gv.js";
-import { c as resolvePinnedHostnameWithPolicy, s as isPrivateNetworkAllowedByPolicy, t as hasProxyEnvConfigured } from "./proxy-env-C0UK-5dm.js";
+import { U as loadConfig } from "./model-selection-_StPBPAp.js";
+import { n as isLoopbackAddress, r as isLoopbackHost, t as rawDataToString } from "./ws-DLbfGWAn.js";
+import { a as isErrno } from "./errors-BzL6hu4G.js";
+import { i as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-DOdeIkaS.js";
+import { c as resolvePinnedHostnameWithPolicy, s as isPrivateNetworkAllowedByPolicy, t as hasProxyEnvConfigured } from "./proxy-env-dFmQfhFb.js";
 import path from "node:path";
 import syncFs from "node:fs";
 import os from "node:os";

package/dist/{chunk-DCCRrNDr.js → chunk-BAxcOCcV.js}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { i as chunkTextByBreakResolver, r as avoidTrailingHighSurrogateBreak, t as createSubsystemLogger } from "./subsystem-cFv2jJm-.js";
+import { i as chunkTextByBreakResolver, r as avoidTrailingHighSurrogateBreak, t as createSubsystemLogger } from "./subsystem-DynBFcQj.js";
 import { n as resolveProcessScopedMap } from "./plain-object-Doc_YkH1.js";
-import { G as normalizeAccountId } from "./workspace-D5PKyvm-.js";
-import { Or as resolveAccountEntry, Pr as INTERNAL_MESSAGE_CHANNEL } from "./model-selection-JA-6f5ss.js";
+import { G as normalizeAccountId } from "./workspace-xnzx7wEV.js";
+import { Or as resolveAccountEntry, Pr as INTERNAL_MESSAGE_CHANNEL } from "./model-selection-_StPBPAp.js";
 import { n as isSafeFenceBreak, r as parseFenceSpans, t as findFenceSpanAt } from "./fences-B64kVeCJ.js";
 
 //#region src/auto-reply/chunk.ts

package/dist/{chunk-CGvXEMAJ.js → chunk-BBj2TedD.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { nt as normalizeAccountId } from "./agent-scope-Js3kUihf.js";
 import { i as chunkTextByBreakResolver, r as avoidTrailingHighSurrogateBreak, t as createSubsystemLogger } from "./subsystem-DynBFcQj.js";
 import { n as resolveProcessScopedMap } from "./plain-object-Doc_YkH1.js";
-import { Mr as resolveAccountEntry, Rr as INTERNAL_MESSAGE_CHANNEL } from "./model-selection-DkRYDpst.js";
+import { Mr as resolveAccountEntry, Rr as INTERNAL_MESSAGE_CHANNEL } from "./model-selection-DFW5CGMj.js";
 import { n as isSafeFenceBreak, r as parseFenceSpans, t as findFenceSpanAt } from "./fences-C9CqDW38.js";
 
 //#region src/auto-reply/chunk.ts

package/dist/{chunk-50mU2Avf.js → chunk-BEuk6eCG.js}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { lr as INTERNAL_MESSAGE_CHANNEL, rr as resolveAccountEntry } from "./config-D5tWLhng.js";
-import { i as chunkTextByBreakResolver, r as avoidTrailingHighSurrogateBreak, t as createSubsystemLogger } from "./subsystem-B9soUuXQ.js";
+import { lr as INTERNAL_MESSAGE_CHANNEL, rr as resolveAccountEntry } from "./config-CPcuaNsB.js";
+import { i as chunkTextByBreakResolver, r as avoidTrailingHighSurrogateBreak, t as createSubsystemLogger } from "./subsystem-BTMrlJ-R.js";
 import { n as resolveProcessScopedMap } from "./plain-object-Doc_YkH1.js";
-import { at as normalizeAccountId } from "./agent-scope-DUbhjnHb.js";
+import { at as normalizeAccountId } from "./agent-scope-BJFJ0deZ.js";
 import { n as isSafeFenceBreak, r as parseFenceSpans, t as findFenceSpanAt } from "./fences-CBLPPBpH.js";
 
 //#region src/auto-reply/chunk.ts

package/dist/{command-queue-De2GI8TP.js → command-queue-CRm1AADE.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { a as logLaneTaskCompleted, i as logLaneEnqueue, r as logLaneDequeue, t as diag } from "./diagnostic-BqFtliY1.js";
+import { a as logLaneTaskCompleted, i as logLaneEnqueue, r as logLaneDequeue, t as diag } from "./diagnostic-BSnQ1U_E.js";
 import { t as CommandLane } from "./lanes-DBBnME5O.js";
 
 //#region src/process/command-queue.ts

package/dist/{command-queue-yDJ733aN.js → command-queue-D_saM8MV.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { t as CommandLane } from "./lanes-DWpYhh13.js";
-import { a as logLaneTaskCompleted, i as logLaneEnqueue, r as logLaneDequeue, t as diag } from "./diagnostic-Nq6B3DZr.js";
+import { a as logLaneTaskCompleted, i as logLaneEnqueue, r as logLaneDequeue, t as diag } from "./diagnostic--vAGyKdB.js";
 
 //#region src/process/command-queue.ts
 var command_queue_exports = /* @__PURE__ */ __exportAll({

package/dist/{commands-registry-CzTzqbi9.js → commands-registry-C-BDBl_b.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { An as normalizeChannelId, En as listChannelDocks, Fi as resolveConfiguredModelRef, Ga as DEFAULT_MODEL, Ka as DEFAULT_PROVIDER, gt as getActivePluginRegistry } from "./config-D5tWLhng.js";
-import { m as escapeRegExp } from "./subsystem-B9soUuXQ.js";
+import { An as normalizeChannelId, En as listChannelDocks, Fi as resolveConfiguredModelRef, Ga as DEFAULT_MODEL, Ka as DEFAULT_PROVIDER, gt as getActivePluginRegistry } from "./config-CPcuaNsB.js";
+import { m as escapeRegExp } from "./subsystem-BTMrlJ-R.js";
 import { n as resolveProcessScopedMap, t as isPlainObject } from "./plain-object-Doc_YkH1.js";
 import { r as listThinkingLevels } from "./thinking-BOHpxvdU.js";
 

package/dist/{commands-registry-C3LKhQLY.js → commands-registry-CtR9mXss.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { tt as escapeRegExp } from "./subsystem-cFv2jJm-.js";
+import { tt as escapeRegExp } from "./subsystem-DynBFcQj.js";
 import { n as resolveProcessScopedMap, t as isPlainObject } from "./plain-object-Doc_YkH1.js";
-import { Da as DEFAULT_PROVIDER, Ea as DEFAULT_MODEL, Ut as getActivePluginRegistry, Zn as listChannelDocks, tr as normalizeChannelId, u as resolveConfiguredModelRef } from "./model-selection-JA-6f5ss.js";
+import { Da as DEFAULT_PROVIDER, Ea as DEFAULT_MODEL, Ut as getActivePluginRegistry, Zn as listChannelDocks, tr as normalizeChannelId, u as resolveConfiguredModelRef } from "./model-selection-_StPBPAp.js";
 import { r as listThinkingLevels } from "./thinking-CcoiS9V4.js";
 
 //#region src/config/commands.ts

package/dist/{commands-registry-BO2o7Un9.js → commands-registry-b4F_78R4.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { tt as escapeRegExp } from "./subsystem-DynBFcQj.js";
 import { n as resolveProcessScopedMap, t as isPlainObject } from "./plain-object-Doc_YkH1.js";
-import { Ma as DEFAULT_PROVIDER, Wt as getActivePluginRegistry, ar as normalizeChannelId, ja as DEFAULT_MODEL, tr as listChannelDocks, u as resolveConfiguredModelRef } from "./model-selection-DkRYDpst.js";
+import { Ma as DEFAULT_PROVIDER, Wt as getActivePluginRegistry, ar as normalizeChannelId, ja as DEFAULT_MODEL, tr as listChannelDocks, u as resolveConfiguredModelRef } from "./model-selection-DFW5CGMj.js";
 import { r as listThinkingLevels } from "./thinking-D6R5MauW.js";
 
 //#region src/config/commands.ts

package/dist/{config-D5tWLhng.js → config-CPcuaNsB.js}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { _ as resolveStateDir, b as resolveRequiredHomeDir, c as resolveDefaultConfigCandidates, g as resolveOAuthPath, h as resolveOAuthDir, n as DEFAULT_GATEWAY_PORT, o as resolveConfigPath, v as expandHomePrefix } from "./paths-C7aURmuZ.js";
-import { G as INCLUDE_KEY, J as isBlockedObjectKey, K as readConfigIncludeFileWithGuards, L as getChildLogger, Q as openBoundaryFileSync, U as normalizeConfigPaths, V as createFileLogWriter, W as ConfigIncludeError, Y as isPathInside$1, _ as normalizeE164, at as isPathInside$2, b as resolveUserPath, ct as applyConfigEnvVars, dt as MissingEnvVarError, ft as containsEnvVarReference, g as isRecord$3, k as logVerbose, m as escapeRegExp, n as stripAnsi, pt as resolveConfigEnvVars, q as resolveConfigIncludes, t as createSubsystemLogger, ut as sanitizeHostExecEnv, w as sleep, y as resolveConfigDir } from "./subsystem-B9soUuXQ.js";
+import { G as INCLUDE_KEY, J as isBlockedObjectKey, K as readConfigIncludeFileWithGuards, L as getChildLogger, Q as openBoundaryFileSync, U as normalizeConfigPaths, V as createFileLogWriter, W as ConfigIncludeError, Y as isPathInside$1, _ as normalizeE164, at as isPathInside$2, b as resolveUserPath, ct as applyConfigEnvVars, dt as MissingEnvVarError, ft as containsEnvVarReference, g as isRecord$3, k as logVerbose, m as escapeRegExp, n as stripAnsi, pt as resolveConfigEnvVars, q as resolveConfigIncludes, t as createSubsystemLogger, ut as sanitizeHostExecEnv, w as sleep, y as resolveConfigDir } from "./subsystem-BTMrlJ-R.js";
 import { n as resolveProcessScopedMap, t as isPlainObject$2 } from "./plain-object-Doc_YkH1.js";
-import { B as RAW_PEER_KEY_PREFIX, D as runExec, F as resolveAgentModelPrimaryValue, I as toAgentModelListLike, K as expandIdentityLinksToMatchKeys, L as DEFAULT_AGENT_ID, Y as normalizeAgentId, _t as stripAgentSessionKeyPrefix, a as resolveAgentEffectiveModelPrimary, at as normalizeAccountId$1, c as resolveDefaultAgentId, ht as parseAgentSessionKey, it as DEFAULT_ACCOUNT_ID, n as listAgentIds, ot as normalizeOptionalAccountId, r as resolveAgentConfig, s as resolveAgentWorkspaceDir } from "./agent-scope-DUbhjnHb.js";
+import { B as RAW_PEER_KEY_PREFIX, D as runExec, F as resolveAgentModelPrimaryValue, I as toAgentModelListLike, K as expandIdentityLinksToMatchKeys, L as DEFAULT_AGENT_ID, Y as normalizeAgentId, _t as stripAgentSessionKeyPrefix, a as resolveAgentEffectiveModelPrimary, at as normalizeAccountId$1, c as resolveDefaultAgentId, ht as parseAgentSessionKey, it as DEFAULT_ACCOUNT_ID, n as listAgentIds, ot as normalizeOptionalAccountId, r as resolveAgentConfig, s as resolveAgentWorkspaceDir } from "./agent-scope-BJFJ0deZ.js";
 import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken, t as DEFAULT_COPILOT_API_BASE_URL } from "./github-copilot-token-Dk0djIhM.js";
 import { n as resolveConversationLabel, r as normalizeChatType } from "./conversation-label-BkRfLUVO.js";
 import { createRequire } from "node:module";
@@ -13,7 +13,7 @@ import path from "node:path";
 import { isDeepStrictEqual } from "node:util";
 import JSON5 from "json5";
 import dotenv from "dotenv";
-import fsp from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { execFileSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { getOAuthApiKey, getOAuthProviders } from "@mariozechner/pi-ai/oauth";
@@ -907,7 +907,7 @@ function isCreatedAtStale(createdAt, staleMs) {
 }
 async function readLockPayload$1(lockPath) {
 	try {
-		const raw = await fsp.readFile(lockPath, "utf8");
+		const raw = await fs$1.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number" || typeof parsed.createdAt !== "string") return null;
 		const payload = {
@@ -924,7 +924,7 @@ async function readLockPayload$1(lockPath) {
 }
 async function chmodIfSupported(filePath, mode) {
 	try {
-		await fsp.chmod(filePath, mode);
+		await fs$1.chmod(filePath, mode);
 	} catch (err) {
 		if (process.platform === "win32") return;
 		throw err;
@@ -933,15 +933,15 @@ async function chmodIfSupported(filePath, mode) {
 async function resolveNormalizedFilePath(filePath, options) {
 	const resolved = path.resolve(filePath);
 	const dir = path.dirname(resolved);
-	if (options.directoryMode === void 0) await fsp.mkdir(dir, { recursive: true });
+	if (options.directoryMode === void 0) await fs$1.mkdir(dir, { recursive: true });
 	else {
-		await fsp.mkdir(dir, {
+		await fs$1.mkdir(dir, {
 			recursive: true,
 			mode: options.directoryMode
 		});
 		await chmodIfSupported(dir, options.directoryMode);
 	}
-	const realDir = await fsp.realpath(dir);
+	const realDir = await fs$1.realpath(dir);
 	return path.join(realDir, path.basename(resolved));
 }
 async function isStaleLock(lockPath, staleMs) {
@@ -956,7 +956,7 @@ async function isStaleLock(lockPath, staleMs) {
 		return false;
 	}
 	try {
-		const stat = await fsp.stat(lockPath);
+		const stat = await fs$1.stat(lockPath);
 		return Date.now() - stat.mtimeMs > staleMs;
 	} catch {
 		return true;
@@ -980,7 +980,7 @@ async function releaseHeldLock$1(normalizedFile) {
 		throw emitLockReleaseWarning("close", current.lockPath, err);
 	}
 	try {
-		await fsp.rm(current.lockPath, { force: true });
+		await fs$1.rm(current.lockPath, { force: true });
 	} catch (err) {
 		current.count = 1;
 		throw emitLockReleaseWarning("remove", current.lockPath, err);
@@ -1003,7 +1003,7 @@ async function acquireFileLock(filePath, options) {
 	let attempt = 0;
 	let staleReclaims = 0;
 	while (attempt < attempts) try {
-		const handle = await fsp.open(lockPath, "wx");
+		const handle = await fs$1.open(lockPath, "wx");
 		try {
 			await handle.writeFile(JSON.stringify({
 				pid: process.pid,
@@ -1012,7 +1012,7 @@ async function acquireFileLock(filePath, options) {
 			}, null, 2), "utf8");
 		} catch (writeErr) {
 			await handle.close().catch(() => void 0);
-			await fsp.rm(lockPath, { force: true }).catch(() => void 0);
+			await fs$1.rm(lockPath, { force: true }).catch(() => void 0);
 			throw writeErr;
 		}
 		HELD_LOCKS$1.set(normalizedFile, {
@@ -1028,7 +1028,7 @@ async function acquireFileLock(filePath, options) {
 	} catch (err) {
 		if (err.code !== "EEXIST") throw err;
 		if (await isStaleLock(lockPath, options.stale)) {
-			await fsp.rm(lockPath, { force: true }).catch(() => void 0);
+			await fs$1.rm(lockPath, { force: true }).catch(() => void 0);
 			if (staleReclaims < attempts) {
 				staleReclaims += 1;
 				continue;
@@ -1871,7 +1871,7 @@ function formatWindowsAclSummary(summary) {
 //#region src/security/audit-fs.ts
 async function safeStat(targetPath) {
 	try {
-		const lst = await fsp.lstat(targetPath);
+		const lst = await fs$1.lstat(targetPath);
 		return {
 			ok: true,
 			isSymlink: lst.isSymbolicLink(),
@@ -1910,7 +1910,7 @@ async function inspectPathPermissions(targetPath, opts) {
 	let effectiveMode = st.mode;
 	let effectiveIsDir = st.isDir;
 	if (st.isSymlink) try {
-		const target = await fsp.stat(targetPath);
+		const target = await fs$1.stat(targetPath);
 		effectiveMode = typeof target.mode === "number" ? target.mode : st.mode;
 		effectiveIsDir = target.isDirectory();
 	} catch {}
@@ -2192,7 +2192,7 @@ async function assertSecurePath(params) {
 	if (stat.isSymlink) {
 		if (!params.allowSymlinkPath) throw new Error(`${params.label} must not be a symlink: ${effectivePath}`);
 		try {
-			effectivePath = await fsp.realpath(effectivePath);
+			effectivePath = await fs$1.realpath(effectivePath);
 		} catch {
 			throw new Error(`${params.label} symlink target is not readable: ${params.targetPath}`);
 		}
@@ -2240,7 +2240,7 @@ async function readFileProviderPayload(params) {
 			}, timeoutMs);
 		});
 		try {
-			const payload = await Promise.race([fsp.readFile(secureFilePath, { signal: abortController.signal }), timeoutPromise]);
+			const payload = await Promise.race([fs$1.readFile(secureFilePath, { signal: abortController.signal }), timeoutPromise]);
 			if (payload.byteLength > maxBytes) throw new Error(`File provider "${params.providerName}" exceeded maxBytes (${maxBytes}).`);
 			const text = payload.toString("utf8");
 			if (params.providerConfig.mode === "singleValue") return text.replace(/\r?\n$/, "");
@@ -11280,7 +11280,7 @@ async function releaseHeldLock(normalizedSessionFile, held, opts = {}) {
 			await held.handle.close();
 		} catch {}
 		try {
-			await fsp.rm(held.lockPath, { force: true });
+			await fs$1.rm(held.lockPath, { force: true });
 		} catch {}
 	})();
 	try {
@@ -11359,7 +11359,7 @@ function registerCleanupHandlers() {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fsp.readFile(lockPath, "utf8");
+		const raw = await fs$1.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		const payload = {};
 		if (isValidLockNumber(parsed.pid) && parsed.pid > 0) payload.pid = parsed.pid;
@@ -11403,7 +11403,7 @@ async function shouldReclaimContendedLockFile(lockPath, details, staleMs, nowMs)
 	if (!details.stale) return false;
 	if (!lockInspectionNeedsMtimeStaleFallback(details)) return true;
 	try {
-		const stat = await fsp.stat(lockPath);
+		const stat = await fs$1.stat(lockPath);
 		return Math.max(0, nowMs - stat.mtimeMs) > staleMs;
 	} catch (error) {
 		return error?.code !== "ENOENT";
@@ -11421,10 +11421,10 @@ async function acquireSessionWriteLockWithProcessIdentity(params, processIdentit
 	const maxHoldMs = resolvePositiveMs(params.maxHoldMs, DEFAULT_MAX_HOLD_MS);
 	const sessionFile = path.resolve(params.sessionFile);
 	const sessionDir = path.dirname(sessionFile);
-	await fsp.mkdir(sessionDir, { recursive: true });
+	await fs$1.mkdir(sessionDir, { recursive: true });
 	let normalizedDir = sessionDir;
 	try {
-		normalizedDir = await fsp.realpath(sessionDir);
+		normalizedDir = await fs$1.realpath(sessionDir);
 	} catch {}
 	const normalizedSessionFile = path.join(normalizedDir, path.basename(sessionFile));
 	const lockPath = `${normalizedSessionFile}.lock`;
@@ -11442,7 +11442,7 @@ async function acquireSessionWriteLockWithProcessIdentity(params, processIdentit
 		attempt += 1;
 		let handle = null;
 		try {
-			handle = await fsp.open(lockPath, "wx");
+			handle = await fs$1.open(lockPath, "wx");
 			const createdAt = (/* @__PURE__ */ new Date()).toISOString();
 			const starttime = processIdentity.getProcessStartTime(process.pid);
 			const lockPayload = {
@@ -11468,7 +11468,7 @@ async function acquireSessionWriteLockWithProcessIdentity(params, processIdentit
 					await handle.close();
 				} catch {}
 				try {
-					await fsp.rm(lockPath, { force: true });
+					await fs$1.rm(lockPath, { force: true });
 				} catch {}
 			}
 			if (err.code !== "EEXIST") throw err;
@@ -11483,7 +11483,7 @@ async function acquireSessionWriteLockWithProcessIdentity(params, processIdentit
 				stale: true,
 				staleReasons: inspected.staleReasons.includes("orphan-self-pid") ? inspected.staleReasons : [...inspected.staleReasons, "orphan-self-pid"]
 			} : inspected, staleMs, nowMs)) {
-				await fsp.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 				continue;
 			}
 			const delay = Math.min(1e3, 50 * attempt);
@@ -16157,7 +16157,7 @@ function createPluginRegistry(registryParams) {
 			configurable: true,
 			value: {
 				...registryParams.runtime.signals,
-				nudge: async (input) => (await import("./nudge-DVGzMWUi.js").then((n) => n.t)).requestAuthorizedNudge({
+				nudge: async (input) => (await import("./nudge-BR_K1LnT.js").then((n) => n.t)).requestAuthorizedNudge({
 					kind: "plugin",
 					pluginId: record.id
 				}, input)

package/dist/config.js

@@ -1,7 +1,7 @@
-import { Ba as normalizeSecretInputString, E as MODEL_APIS, Fa as assertSecretInputResolved, Gr as setConfigOverride, Ha as resolveSecretInputRef, Hr as applyConfigOverrides, Ia as coerceSecretRef, Kr as unsetConfigOverride, La as hasConfiguredSecretInput, Pa as DEFAULT_SECRET_PROVIDER_ALIAS, Ra as isSecretRef, Ur as getConfigOverrides, Va as parseEnvTemplateSecretRef, Wr as resetConfigOverrides, _ as validateConfigObjectRawWithPlugins, a as createConfigIO, c as loadConfig, d as readConfigFileSnapshotForWrite, f as resolveConfigSnapshotHash, g as validateConfigObjectRaw, h as validateConfigObject, i as clearRuntimeConfigSnapshot, l as parseConfigJson5, m as writeConfigFile, n as advanceRuntimeConfigSnapshot, nr as parseToolsBySenderTypedKey, o as getRuntimeConfigSnapshot, p as setRuntimeConfigSnapshot, r as clearConfigCache, s as getRuntimeConfigSourceSnapshot, t as migrateLegacyConfig, tr as TOOLS_BY_SENDER_KEY_TYPES, u as readConfigFileSnapshot, v as validateConfigObjectWithPlugins, za as normalizeResolvedSecretInputString } from "./config-D5tWLhng.js";
+import { Ba as normalizeSecretInputString, E as MODEL_APIS, Fa as assertSecretInputResolved, Gr as setConfigOverride, Ha as resolveSecretInputRef, Hr as applyConfigOverrides, Ia as coerceSecretRef, Kr as unsetConfigOverride, La as hasConfiguredSecretInput, Pa as DEFAULT_SECRET_PROVIDER_ALIAS, Ra as isSecretRef, Ur as getConfigOverrides, Va as parseEnvTemplateSecretRef, Wr as resetConfigOverrides, _ as validateConfigObjectRawWithPlugins, a as createConfigIO, c as loadConfig, d as readConfigFileSnapshotForWrite, f as resolveConfigSnapshotHash, g as validateConfigObjectRaw, h as validateConfigObject, i as clearRuntimeConfigSnapshot, l as parseConfigJson5, m as writeConfigFile, n as advanceRuntimeConfigSnapshot, nr as parseToolsBySenderTypedKey, o as getRuntimeConfigSnapshot, p as setRuntimeConfigSnapshot, r as clearConfigCache, s as getRuntimeConfigSourceSnapshot, t as migrateLegacyConfig, tr as TOOLS_BY_SENDER_KEY_TYPES, u as readConfigFileSnapshot, v as validateConfigObjectWithPlugins, za as normalizeResolvedSecretInputString } from "./config-CPcuaNsB.js";
 import { _ as resolveStateDir, a as resolveCanonicalConfigPath, c as resolveDefaultConfigCandidates, d as resolveIsNixMode, f as resolveLegacyStateDir, g as resolveOAuthPath, h as resolveOAuthDir, i as isNixMode, l as resolveGatewayLockDir, m as resolveNewStateDir, n as DEFAULT_GATEWAY_PORT, o as resolveConfigPath, p as resolveLegacyStateDirs, r as STATE_DIR, s as resolveConfigPathCandidate, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-C7aURmuZ.js";
-import "./subsystem-B9soUuXQ.js";
-import "./agent-scope-DUbhjnHb.js";
+import "./subsystem-BTMrlJ-R.js";
+import "./agent-scope-BJFJ0deZ.js";
 import "./github-copilot-token-Dk0djIhM.js";
 
 export { CONFIG_PATH, DEFAULT_GATEWAY_PORT, DEFAULT_SECRET_PROVIDER_ALIAS, MODEL_APIS, STATE_DIR, TOOLS_BY_SENDER_KEY_TYPES, advanceRuntimeConfigSnapshot, applyConfigOverrides, assertSecretInputResolved, clearConfigCache, clearRuntimeConfigSnapshot, coerceSecretRef, createConfigIO, getConfigOverrides, getRuntimeConfigSnapshot, getRuntimeConfigSourceSnapshot, hasConfiguredSecretInput, isNixMode, isSecretRef, loadConfig, migrateLegacyConfig, normalizeResolvedSecretInputString, normalizeSecretInputString, parseConfigJson5, parseEnvTemplateSecretRef, parseToolsBySenderTypedKey, readConfigFileSnapshot, readConfigFileSnapshotForWrite, resetConfigOverrides, resolveCanonicalConfigPath, resolveConfigPath, resolveConfigPathCandidate, resolveConfigSnapshotHash, resolveDefaultConfigCandidates, resolveGatewayLockDir, resolveGatewayPort, resolveIsNixMode, resolveLegacyStateDir, resolveLegacyStateDirs, resolveNewStateDir, resolveOAuthDir, resolveOAuthPath, resolveSecretInputRef, resolveStateDir, setConfigOverride, setRuntimeConfigSnapshot, unsetConfigOverride, validateConfigObject, validateConfigObjectRaw, validateConfigObjectRawWithPlugins, validateConfigObjectWithPlugins, writeConfigFile };

package/dist/{credentials-DdZjLLBj.js → credentials-2Kd9Ahu7.js}

@@ -1,4 +1,4 @@
-import { Ha as resolveSecretInputRef } from "./config-D5tWLhng.js";
+import { Ha as resolveSecretInputRef } from "./config-CPcuaNsB.js";
 
 //#region src/gateway/credentials.ts
 function trimToUndefined(value) {

package/dist/{credentials-BAWD9O8L.js → credentials-BhiiI_Nr.js}

@@ -1,4 +1,4 @@
-import { Ca as resolveSecretInputRef } from "./model-selection-JA-6f5ss.js";
+import { Ca as resolveSecretInputRef } from "./model-selection-_StPBPAp.js";
 
 //#region src/gateway/credentials.ts
 function trimToUndefined(value) {

package/dist/{credentials-GPboJeMC.js → credentials-U5jLZxJ-.js}

@@ -1,4 +1,4 @@
-import { Oa as resolveSecretInputRef } from "./model-selection-DkRYDpst.js";
+import { Oa as resolveSecretInputRef } from "./model-selection-DFW5CGMj.js";
 
 //#region src/gateway/credentials.ts
 function trimToUndefined(value) {