@a1hvdy/cc-openclaw 0.11.0 → 0.13.0

package/dist/src/lifecycle/phase-validate-upstream.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Phase 3 — validate-upstream
+ *
+ * Runs PatchManifest.validate() against the imported upstream namespace.
+ * Re-throws validation failures as DriftError (already typed by PatchManifest).
+ *
+ * Boot refuses and surfaces a drift report if ANY probe fails.
+ * install() is NEVER called from this phase — that is phase 4.
+ */
+import type { PatchManifest } from './patch-manifest.js';
+export declare function validateUpstream(manifest: PatchManifest, _upstreamNs: unknown): Promise<void>;

package/dist/src/lifecycle/phase-validate-upstream.js

@@ -0,0 +1,16 @@
+/**
+ * Phase 3 — validate-upstream
+ *
+ * Runs PatchManifest.validate() against the imported upstream namespace.
+ * Re-throws validation failures as DriftError (already typed by PatchManifest).
+ *
+ * Boot refuses and surfaces a drift report if ANY probe fails.
+ * install() is NEVER called from this phase — that is phase 4.
+ */
+export async function validateUpstream(manifest, _upstreamNs) {
+    // upstreamNs is unused at this layer — each PatchSpec resolves its own
+    // target via PatchSpec.resolve(). The parameter is kept in the signature
+    // for boot.ts wiring symmetry.
+    await manifest.validate();
+}
+//# sourceMappingURL=phase-validate-upstream.js.map

package/dist/src/lifecycle/phase-validate-upstream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-validate-upstream.js","sourceRoot":"","sources":["../../../src/lifecycle/phase-validate-upstream.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAuB,EACvB,WAAoB;IAEpB,uEAAuE;IACvE,yEAAyE;IACzE,+BAA+B;IAC/B,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;AAC5B,CAAC"}

package/dist/src/lifecycle/phase-wire-handlers.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Phase 5 — wire-handlers
+ *
+ * Registers EventBus subscribers BEFORE the server starts accepting traffic
+ * (phase 6). This ordering closes the v0.6.0 subscription-vs-traffic race
+ * where SessionCaptureSubscriber missed early session events.
+ *
+ * Phase E wires the real subscribers (SessionCaptureSubscriber, MetricsSubscriber).
+ * This scaffold calls ObservabilityService.init(bus) which registers stubs.
+ */
+import type { EventBus } from '../observability/event-bus.js';
+export declare function wireHandlers(bus: EventBus): void;

package/dist/src/lifecycle/phase-wire-handlers.js

@@ -0,0 +1,16 @@
+/**
+ * Phase 5 — wire-handlers
+ *
+ * Registers EventBus subscribers BEFORE the server starts accepting traffic
+ * (phase 6). This ordering closes the v0.6.0 subscription-vs-traffic race
+ * where SessionCaptureSubscriber missed early session events.
+ *
+ * Phase E wires the real subscribers (SessionCaptureSubscriber, MetricsSubscriber).
+ * This scaffold calls ObservabilityService.init(bus) which registers stubs.
+ */
+import { ObservabilityService } from '../observability/observability-service.js';
+export function wireHandlers(bus) {
+    const svc = new ObservabilityService();
+    svc.init(bus);
+}
+//# sourceMappingURL=phase-wire-handlers.js.map

package/dist/src/lifecycle/phase-wire-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-wire-handlers.js","sourceRoot":"","sources":["../../../src/lifecycle/phase-wire-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,MAAM,UAAU,YAAY,CAAC,GAAa;IACxC,MAAM,GAAG,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACvC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC"}

package/dist/src/observability/event-bus.d.ts

@@ -0,0 +1,75 @@
+/**
+ * EventBus — typed event emitter replacing all globalThis.__openclaw_* Maps.
+ *
+ * Contract (PRP §3.2 G4):
+ *   - on<K>(event, listener) returns an unsubscribe function (no EventEmitter leak)
+ *   - emit<K>(event, payload) is synchronous; delivery <1ms target
+ *   - Subscribers wired in boot phase 5 BEFORE traffic (phase 6 start-server)
+ *
+ * EventMap keys use dot-notation: "session.started", "boot.ready", etc.
+ * Adding a new event requires only a type entry here — no subclass needed.
+ */
+import type { Config } from '../config/schema.js';
+/**
+ * EventBus payload-shape contract version. Bump on any breaking change to a
+ * payload (rename, narrow type, remove key). Subscribers may ignore events
+ * tagged with a version they don't understand.
+ *
+ * v0.13.0 introduces this constant. Adding new events to EventMap is NOT a
+ * breaking change and does not require a bump; modifying an existing event's
+ * payload shape IS breaking and requires a bump + migration plan.
+ */
+export declare const EVENT_BUS_PROTOCOL_VERSION: "1";
+type SessionName = string & {
+    readonly __brand: 'SessionName';
+};
+export type EventMap = {
+    /** Emitted when a Claude CLI session subprocess starts. `pid` is `null`
+     * when the underlying ISession adapter doesn't expose a process id yet. */
+    'session.started': {
+        name: SessionName;
+        pid: number | null;
+    };
+    /** Emitted when a session subprocess exits cleanly. */
+    'session.completed': {
+        name: SessionName;
+        tokens: number;
+    };
+    /** Emitted on every tool_use event within a session turn. */
+    'session.tool-use': {
+        name: SessionName;
+        tool: string;
+        input: unknown;
+    };
+    /** Emitted after PatchManifest.install() succeeds for a single spec. */
+    'patch.installed': {
+        id: string;
+    };
+    /** Emitted when a PatchSpec probe fails during validate-upstream. */
+    'patch.drift': {
+        id: string;
+        expected: string;
+        actual: string;
+    };
+    /** Emitted at the end of a successful 7-phase boot. */
+    'boot.ready': {
+        config: Config;
+    };
+};
+type Listener<K extends keyof EventMap> = (payload: EventMap[K]) => void;
+export declare class EventBus {
+    private readonly listeners;
+    /**
+     * Subscribe to an event. Returns an unsubscribe function.
+     * Calling the returned function is idempotent.
+     */
+    on<K extends keyof EventMap>(event: K, listener: Listener<K>): () => void;
+    /**
+     * Emit an event synchronously. All listeners receive the payload in
+     * registration order. Errors in listeners propagate to the caller.
+     */
+    emit<K extends keyof EventMap>(event: K, payload: EventMap[K]): void;
+    /** Number of active listeners across all event keys. */
+    get listenerCount(): number;
+}
+export {};

package/dist/src/observability/event-bus.js

@@ -0,0 +1,63 @@
+/**
+ * EventBus — typed event emitter replacing all globalThis.__openclaw_* Maps.
+ *
+ * Contract (PRP §3.2 G4):
+ *   - on<K>(event, listener) returns an unsubscribe function (no EventEmitter leak)
+ *   - emit<K>(event, payload) is synchronous; delivery <1ms target
+ *   - Subscribers wired in boot phase 5 BEFORE traffic (phase 6 start-server)
+ *
+ * EventMap keys use dot-notation: "session.started", "boot.ready", etc.
+ * Adding a new event requires only a type entry here — no subclass needed.
+ */
+// ── Protocol version ──────────────────────────────────────────────────────────
+/**
+ * EventBus payload-shape contract version. Bump on any breaking change to a
+ * payload (rename, narrow type, remove key). Subscribers may ignore events
+ * tagged with a version they don't understand.
+ *
+ * v0.13.0 introduces this constant. Adding new events to EventMap is NOT a
+ * breaking change and does not require a bump; modifying an existing event's
+ * payload shape IS breaking and requires a bump + migration plan.
+ */
+export const EVENT_BUS_PROTOCOL_VERSION = '1';
+// ── EventBus class ────────────────────────────────────────────────────────────
+export class EventBus {
+    listeners = new Map();
+    /**
+     * Subscribe to an event. Returns an unsubscribe function.
+     * Calling the returned function is idempotent.
+     */
+    on(event, listener) {
+        let set = this.listeners.get(event);
+        if (!set) {
+            set = new Set();
+            this.listeners.set(event, set);
+        }
+        // Cast: the Set stores Listener<keyof EventMap>; narrowed by K on emit.
+        set.add(listener);
+        return () => {
+            set.delete(listener);
+        };
+    }
+    /**
+     * Emit an event synchronously. All listeners receive the payload in
+     * registration order. Errors in listeners propagate to the caller.
+     */
+    emit(event, payload) {
+        const set = this.listeners.get(event);
+        if (!set)
+            return;
+        for (const listener of set) {
+            listener(payload);
+        }
+    }
+    /** Number of active listeners across all event keys. */
+    get listenerCount() {
+        let total = 0;
+        for (const set of this.listeners.values()) {
+            total += set.size;
+        }
+        return total;
+    }
+}
+//# sourceMappingURL=event-bus.js.map

package/dist/src/observability/event-bus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-bus.js","sourceRoot":"","sources":["../../../src/observability/event-bus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAY,CAAC;AA6BvD,iFAAiF;AAEjF,MAAM,OAAO,QAAQ;IACF,SAAS,GAAG,IAAI,GAAG,EAAiD,CAAC;IAEtF;;;OAGG;IACH,EAAE,CAA2B,KAAQ,EAAE,QAAqB;QAC1D,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,wEAAwE;QACvE,GAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,OAAO,GAAG,EAAE;YACT,GAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,IAAI,CAA2B,KAAQ,EAAE,OAAoB;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;YAC1B,QAAwB,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,aAAa;QACf,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/src/observability/get-event-bus.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `getEventBus()` — process-wide singleton accessor for the EventBus.
+ *
+ * Phase E#5 (v0.12.0): the EventBus moves from scaffold to hot path. This
+ * module is the bootstrap seam: every hot-path callsite that emits a typed
+ * event imports this accessor instead of constructing its own EventBus.
+ *
+ * The singleton replaces the long-deprecated `globalThis.__openclaw_*` Map
+ * pattern. Listeners must be registered before traffic starts (boot phase 5
+ * per PRP §3.4); subscribers added later still work but may miss events
+ * fired during a race window.
+ *
+ * Test isolation: vitest unit tests can call `__resetEventBusForTests()` to
+ * drop all listeners between cases. Production code never calls it.
+ */
+import { EventBus } from './event-bus.js';
+/**
+ * Returns the singleton EventBus. Lazy-initializes on first call.
+ */
+export declare function getEventBus(): EventBus;
+/**
+ * Test-only helper. Drops the singleton so each test starts with zero
+ * listeners. Never call from production code.
+ */
+export declare function __resetEventBusForTests(): void;

package/dist/src/observability/get-event-bus.js

@@ -0,0 +1,34 @@
+/**
+ * `getEventBus()` — process-wide singleton accessor for the EventBus.
+ *
+ * Phase E#5 (v0.12.0): the EventBus moves from scaffold to hot path. This
+ * module is the bootstrap seam: every hot-path callsite that emits a typed
+ * event imports this accessor instead of constructing its own EventBus.
+ *
+ * The singleton replaces the long-deprecated `globalThis.__openclaw_*` Map
+ * pattern. Listeners must be registered before traffic starts (boot phase 5
+ * per PRP §3.4); subscribers added later still work but may miss events
+ * fired during a race window.
+ *
+ * Test isolation: vitest unit tests can call `__resetEventBusForTests()` to
+ * drop all listeners between cases. Production code never calls it.
+ */
+import { EventBus } from './event-bus.js';
+let _instance = null;
+/**
+ * Returns the singleton EventBus. Lazy-initializes on first call.
+ */
+export function getEventBus() {
+    if (!_instance) {
+        _instance = new EventBus();
+    }
+    return _instance;
+}
+/**
+ * Test-only helper. Drops the singleton so each test starts with zero
+ * listeners. Never call from production code.
+ */
+export function __resetEventBusForTests() {
+    _instance = null;
+}
+//# sourceMappingURL=get-event-bus.js.map

package/dist/src/observability/get-event-bus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-event-bus.js","sourceRoot":"","sources":["../../../src/observability/get-event-bus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,IAAI,SAAS,GAAoB,IAAI,CAAC;AAEtC;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC"}

package/dist/src/observability/observability-service.d.ts

@@ -0,0 +1,19 @@
+/**
+ * ObservabilityService — composes EventBus + all subscribers.
+ *
+ * init(bus) is called in boot phase 5 (wire-handlers) before the server
+ * starts accepting traffic. This ordering closes the subscription-vs-traffic
+ * race that existed prior to v0.6.0.
+ *
+ * Phase E wires real subscriber logic; stubs here keep build green.
+ */
+import type { EventBus } from './event-bus.js';
+export declare class ObservabilityService {
+    private readonly sessionCapture;
+    private readonly metrics;
+    /**
+     * Register all subscribers against the provided bus.
+     * Must be called before traffic is accepted (boot phase 5).
+     */
+    init(bus: EventBus): void;
+}

package/dist/src/observability/observability-service.js

@@ -0,0 +1,24 @@
+/**
+ * ObservabilityService — composes EventBus + all subscribers.
+ *
+ * init(bus) is called in boot phase 5 (wire-handlers) before the server
+ * starts accepting traffic. This ordering closes the subscription-vs-traffic
+ * race that existed prior to v0.6.0.
+ *
+ * Phase E wires real subscriber logic; stubs here keep build green.
+ */
+import { SessionCaptureSubscriber } from './subscribers/session-capture.js';
+import { MetricsSubscriber } from './subscribers/metrics.js';
+export class ObservabilityService {
+    sessionCapture = new SessionCaptureSubscriber();
+    metrics = new MetricsSubscriber();
+    /**
+     * Register all subscribers against the provided bus.
+     * Must be called before traffic is accepted (boot phase 5).
+     */
+    init(bus) {
+        this.sessionCapture.register(bus);
+        this.metrics.register(bus);
+    }
+}
+//# sourceMappingURL=observability-service.js.map

package/dist/src/observability/observability-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability-service.js","sourceRoot":"","sources":["../../../src/observability/observability-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,OAAO,oBAAoB;IACd,cAAc,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAChD,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAEnD;;;OAGG;IACH,IAAI,CAAC,GAAa;QAChB,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/src/observability/subscribers/metrics.d.ts

@@ -0,0 +1,11 @@
+/**
+ * MetricsSubscriber — collects per-session token and timing metrics.
+ *
+ * Replaces globalThis.__openclaw_perfMap (AS2).
+ * Phase E wires real aggregation and exposes metrics via /enhancer/metrics.
+ * Stub body here.
+ */
+import type { EventBus } from '../event-bus.js';
+export declare class MetricsSubscriber {
+    register(bus: EventBus): void;
+}

package/dist/src/observability/subscribers/metrics.js

@@ -0,0 +1,21 @@
+/**
+ * MetricsSubscriber — collects per-session token and timing metrics.
+ *
+ * Replaces globalThis.__openclaw_perfMap (AS2).
+ * Phase E wires real aggregation and exposes metrics via /enhancer/metrics.
+ * Stub body here.
+ */
+export class MetricsSubscriber {
+    register(bus) {
+        bus.on('session.completed', (_payload) => {
+            // Phase E: accumulate token counts, compute latency, update perfMap.
+        });
+        bus.on('patch.installed', (_payload) => {
+            // Phase E: record patch install time for cold-start budget tracking.
+        });
+        bus.on('patch.drift', (_payload) => {
+            // Phase E: emit warning to Telegram live-card or log file.
+        });
+    }
+}
+//# sourceMappingURL=metrics.js.map

package/dist/src/observability/subscribers/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../../src/observability/subscribers/metrics.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,OAAO,iBAAiB;IAC5B,QAAQ,CAAC,GAAa;QACpB,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,QAAQ,EAAE,EAAE;YACvC,qEAAqE;QACvE,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE;YACrC,qEAAqE;QACvE,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE;YACjC,2DAA2D;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/observability/subscribers/session-capture.d.ts

@@ -0,0 +1,15 @@
+/**
+ * SessionCaptureSubscriber — replaces the 5s ultrareview poller (LP2).
+ *
+ * Wired in boot phase 5 (wire-handlers) BEFORE traffic starts.
+ * Phase E implements the real capture logic (writing to SessionRegistry WAL,
+ * updating live-card state, etc.). Stub body here.
+ */
+import type { EventBus } from '../event-bus.js';
+export declare class SessionCaptureSubscriber {
+    /**
+     * Register listeners on the bus. Returns nothing; unsubscribe handles
+     * are held internally (Phase E: stored for clean shutdown).
+     */
+    register(bus: EventBus): void;
+}

package/dist/src/observability/subscribers/session-capture.js

@@ -0,0 +1,25 @@
+/**
+ * SessionCaptureSubscriber — replaces the 5s ultrareview poller (LP2).
+ *
+ * Wired in boot phase 5 (wire-handlers) BEFORE traffic starts.
+ * Phase E implements the real capture logic (writing to SessionRegistry WAL,
+ * updating live-card state, etc.). Stub body here.
+ */
+export class SessionCaptureSubscriber {
+    /**
+     * Register listeners on the bus. Returns nothing; unsubscribe handles
+     * are held internally (Phase E: stored for clean shutdown).
+     */
+    register(bus) {
+        bus.on('session.started', (_payload) => {
+            // Phase E: persist session start to SessionRegistry WAL.
+        });
+        bus.on('session.completed', (_payload) => {
+            // Phase E: finalize WAL entry, trigger snapshot if N-minute threshold met.
+        });
+        bus.on('session.tool-use', (_payload) => {
+            // Phase E: update live-card tool tracker, emit metrics.
+        });
+    }
+}
+//# sourceMappingURL=session-capture.js.map

package/dist/src/observability/subscribers/session-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-capture.js","sourceRoot":"","sources":["../../../../src/observability/subscribers/session-capture.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,OAAO,wBAAwB;IACnC;;;OAGG;IACH,QAAQ,CAAC,GAAa;QACpB,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE;YACrC,yDAAyD;QAC3D,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,QAAQ,EAAE,EAAE;YACvC,2EAA2E;QAC7E,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE;YACtC,wDAAwD;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/openai-compat/bridges/allowlist.d.ts

@@ -1,10 +1,19 @@
 /**
- * v0.11.0 — OpenClaw native tool allowlist.
+ * OpenClaw native tool allowList — typed-config-driven (Phase E #1, Q1 resolution).
  *
- * Hard-coded for v0.11.0 soak. `image.send` and `file.upload` are reserved
- * but NOT active until v0.12.0. Flip will happen in allowlist.ts only — no
- * other file needs to change.
+ * Reads from `ConfigService.config.nativeToolsAllowList` when available;
+ * falls back to the v0.11.x hardcoded default when `ConfigService` is unset
+ * (tests, scripts run without a boot path). The hardcoded fallback is
+ * intentionally identical to what shipped at v0.11.0 so existing tests that
+ * import `OPENCLAW_TOOL_ALLOWLIST` keep passing without rewrite.
+ *
+ * Env override: `CC_OPENCLAW_NATIVE_TOOLS_ALLOWLIST="message.voice,message.image,..."`.
+ * Q1 expanded default ships at v1.0.0-rc1 alongside the `CC_OPENCLAW_NATIVE_TOOLS=1` flip.
+ */
+/**
+ * v0.11.x default — kept exported for legacy callers and for the
+ * `ConfigService`-unset fallback path. New code should call `isAllowedTool`.
  */
 export declare const OPENCLAW_TOOL_ALLOWLIST: ReadonlySet<string>;
-/** Return true when `toolName` is in the v0.11.0 allowlist. */
+/** Return true when `toolName` is in the active allowList. */
 export declare function isAllowedTool(toolName: string): boolean;

package/dist/src/openai-compat/bridges/allowlist.js

@@ -1,17 +1,28 @@
 /**
- * v0.11.0 — OpenClaw native tool allowlist.
+ * OpenClaw native tool allowList — typed-config-driven (Phase E #1, Q1 resolution).
  *
- * Hard-coded for v0.11.0 soak. `image.send` and `file.upload` are reserved
- * but NOT active until v0.12.0. Flip will happen in allowlist.ts only — no
- * other file needs to change.
+ * Reads from `ConfigService.config.nativeToolsAllowList` when available;
+ * falls back to the v0.11.x hardcoded default when `ConfigService` is unset
+ * (tests, scripts run without a boot path). The hardcoded fallback is
+ * intentionally identical to what shipped at v0.11.0 so existing tests that
+ * import `OPENCLAW_TOOL_ALLOWLIST` keep passing without rewrite.
+ *
+ * Env override: `CC_OPENCLAW_NATIVE_TOOLS_ALLOWLIST="message.voice,message.image,..."`.
+ * Q1 expanded default ships at v1.0.0-rc1 alongside the `CC_OPENCLAW_NATIVE_TOOLS=1` flip.
+ */
+import { getConfigService } from '../../lib/config-service.js';
+/**
+ * v0.11.x default — kept exported for legacy callers and for the
+ * `ConfigService`-unset fallback path. New code should call `isAllowedTool`.
  */
 export const OPENCLAW_TOOL_ALLOWLIST = new Set([
     'message.voice',
-    // 'image.send',   // reserved — v0.12.0
-    // 'file.upload',  // reserved — v0.12.0
 ]);
-/** Return true when `toolName` is in the v0.11.0 allowlist. */
+/** Return true when `toolName` is in the active allowList. */
 export function isAllowedTool(toolName) {
+    const cfg = getConfigService();
+    if (cfg)
+        return cfg.config.nativeToolsAllowList.includes(toolName);
     return OPENCLAW_TOOL_ALLOWLIST.has(toolName);
 }
 //# sourceMappingURL=allowlist.js.map

package/dist/src/openai-compat/bridges/allowlist.js.map

@@ -1 +1 @@
-{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../../../src/openai-compat/bridges/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAClE,eAAe;IACf,wCAAwC;IACxC,wCAAwC;CACzC,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../../../src/openai-compat/bridges/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAClE,eAAe;CAChB,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnE,OAAO,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC"}

package/dist/src/openai-compat/bridges/openclaw-api-shim.d.ts

@@ -0,0 +1,54 @@
+/**
+ * OpenClawApiShim — typed subset of the OpenClaw plugin API surface.
+ *
+ * Q2 resolution: the upstream OpenClaw plugin API has no semver contract.
+ * Rather than depend on it directly, all native-tool calls go through this
+ * shim which exposes only the methods cc-openclaw needs.
+ *
+ * `validateShape(api)` runs at boot phase 3 (`validate-upstream`) and is
+ * registered as a `PatchSpec.expectedShape` probe. Failure → `DriftError`
+ * and boot refuses (per PatchManifest atomic-install contract).
+ *
+ * Phase D: types + probe shipped; `dispatch` stubbed and throws
+ * `NotImplemented` until Phase E wires the live OpenClaw `api.tool.dispatch`.
+ */
+/**
+ * Inbound dispatch types for the v1.0.0 ToolBridge strategy. These are
+ * complementary to the existing `IToolBridge` at `src/types/tool-bridge.ts`
+ * (which handles outbound tools-to-CLI wiring). Phase E consolidates the
+ * two interfaces if a clean merge is possible.
+ */
+export interface ToolUseCall {
+    readonly id: string;
+    readonly name: string;
+    readonly input: unknown;
+}
+export interface ToolUseResult {
+    readonly toolUseId: string;
+    readonly content: string;
+    readonly isError?: boolean;
+}
+/** Minimum surface area the shim requires from `openclaw.PluginApi`. */
+export interface OpenClawApiSurface {
+    readonly tool: {
+        readonly dispatch: (name: string, input: unknown) => Promise<unknown>;
+        readonly list: () => ReadonlyArray<{
+            readonly name: string;
+        }>;
+    };
+}
+export declare class OpenClawApiShim {
+    private readonly api;
+    constructor(api: OpenClawApiSurface);
+    /**
+     * Phase 3 probe — returns true when `api.tool.dispatch` and `api.tool.list`
+     * exist as callable methods. Used as a `PatchSpec.expectedShape` probe.
+     */
+    static validateShape(api: unknown): boolean;
+    /**
+     * Dispatch a Claude `tool_use` event to OpenClaw's plugin API. Phase D stub.
+     */
+    dispatch(_call: ToolUseCall): Promise<ToolUseResult>;
+    /** Phase D helper — exposes the underlying surface for tests. */
+    getApi(): OpenClawApiSurface;
+}

package/dist/src/openai-compat/bridges/openclaw-api-shim.js

@@ -0,0 +1,45 @@
+/**
+ * OpenClawApiShim — typed subset of the OpenClaw plugin API surface.
+ *
+ * Q2 resolution: the upstream OpenClaw plugin API has no semver contract.
+ * Rather than depend on it directly, all native-tool calls go through this
+ * shim which exposes only the methods cc-openclaw needs.
+ *
+ * `validateShape(api)` runs at boot phase 3 (`validate-upstream`) and is
+ * registered as a `PatchSpec.expectedShape` probe. Failure → `DriftError`
+ * and boot refuses (per PatchManifest atomic-install contract).
+ *
+ * Phase D: types + probe shipped; `dispatch` stubbed and throws
+ * `NotImplemented` until Phase E wires the live OpenClaw `api.tool.dispatch`.
+ */
+import { NotImplemented } from '../../lib/domain-error.js';
+export class OpenClawApiShim {
+    api;
+    constructor(api) {
+        this.api = api;
+    }
+    /**
+     * Phase 3 probe — returns true when `api.tool.dispatch` and `api.tool.list`
+     * exist as callable methods. Used as a `PatchSpec.expectedShape` probe.
+     */
+    static validateShape(api) {
+        if (typeof api !== 'object' || api === null)
+            return false;
+        const a = api;
+        if (typeof a.tool !== 'object' || a.tool === null)
+            return false;
+        const t = a.tool;
+        return typeof t.dispatch === 'function' && typeof t.list === 'function';
+    }
+    /**
+     * Dispatch a Claude `tool_use` event to OpenClaw's plugin API. Phase D stub.
+     */
+    async dispatch(_call) {
+        throw new NotImplemented('OpenClawApiShim.dispatch (Phase E wires api.tool.dispatch)');
+    }
+    /** Phase D helper — exposes the underlying surface for tests. */
+    getApi() {
+        return this.api;
+    }
+}
+//# sourceMappingURL=openclaw-api-shim.js.map

package/dist/src/openai-compat/bridges/openclaw-api-shim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-api-shim.js","sourceRoot":"","sources":["../../../../src/openai-compat/bridges/openclaw-api-shim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AA4B3D,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,GAAuB;QAAvB,QAAG,GAAH,GAAG,CAAoB;IAAG,CAAC;IAExD;;;OAGG;IACH,MAAM,CAAC,aAAa,CAAC,GAAY;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC1D,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,CAAC,IAA+B,CAAC;QAC5C,OAAO,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAkB;QAC/B,MAAM,IAAI,cAAc,CAAC,4DAA4D,CAAC,CAAC;IACzF,CAAC;IAED,iEAAiE;IACjE,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;CACF"}

package/dist/src/openai-compat/openai-chunk-types.d.ts

@@ -0,0 +1,35 @@
+/**
+ * OpenAI streaming chunk types.
+ *
+ * Extracted from `openai-compat.ts` 2026-05-13 to push that file under the
+ * 500-LOC ceiling. Single source of truth for the SSE chunk shape; also
+ * imported by `response-formatter.ts`, `types/route.ts`, `types/sse.ts`.
+ */
+export interface OpenAIChatCompletionChunk {
+    id: string;
+    object: 'chat.completion.chunk';
+    created: number;
+    model: string;
+    choices: Array<{
+        index: number;
+        delta: {
+            role?: string;
+            content?: string | null;
+            tool_calls?: Array<{
+                index: number;
+                id?: string;
+                type?: 'function';
+                function?: {
+                    name?: string;
+                    arguments?: string;
+                };
+            }>;
+        };
+        finish_reason: string | null;
+    }>;
+    usage?: {
+        prompt_tokens: number;
+        completion_tokens: number;
+        total_tokens: number;
+    };
+}

package/dist/src/openai-compat/openai-chunk-types.js

@@ -0,0 +1,9 @@
+/**
+ * OpenAI streaming chunk types.
+ *
+ * Extracted from `openai-compat.ts` 2026-05-13 to push that file under the
+ * 500-LOC ceiling. Single source of truth for the SSE chunk shape; also
+ * imported by `response-formatter.ts`, `types/route.ts`, `types/sse.ts`.
+ */
+export {};
+//# sourceMappingURL=openai-chunk-types.js.map

package/dist/src/openai-compat/openai-chunk-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-chunk-types.js","sourceRoot":"","sources":["../../../src/openai-compat/openai-chunk-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}