@a1hvdy/cc-openclaw 0.30.0 → 0.31.0

package/dist/src/lifecycle/patch-manifest.d.ts

@@ -1,82 +0,0 @@
-/**
- * PatchManifest — declarative registry for prototype-patch specs.
- *
- * Each PatchSpec declares:
- *   - expectedShape: synchronous probe (signature / property existence)
- *   - expectedBehavior: async runtime probe (tiny smoke test)
- *   - install / uninstall: the actual mutation
- *
- * Boot phase 3 calls validate() — runs ALL probes.
- * If ANY fail, throws DriftError listing every failing spec.
- * Boot is refused; nothing is installed. No silent no-ops.
- *
- * Boot phase 4 calls install() — installs ALL specs atomically
- * (i.e. only after validate() has passed).
- */
-export interface PatchSpec<T = unknown> {
-    /** Stable identifier used in drift reports and mutation tests. */
-    id: string;
-    /** e.g. "claude-code/dist/session/SessionManager" — informational */
-    targetModule: string;
-    /** e.g. "SessionManager.prototype.startSession" — informational */
-    targetSymbol: string;
-    /**
-     * Resolve the live target. Called once per probe + install operation.
-     * Each spec resolves its own target — different specs target different
-     * upstream symbols, so a single global target is the wrong abstraction.
-     *
-     * **Async-compatible** (since Phase E#3 architectural finding 2026-05-13):
-     * may return `T` directly OR a `Promise<T>`. ESM upstream packages with
-     * top-level await (e.g. `openclaw`) cannot be loaded via sync `require()`;
-     * they require `await import()`. PatchManifest awaits the return value
-     * uniformly. Per PRP §3.2 G1.
-     */
-    resolve: () => T | Promise<T>;
-    /**
-     * Synchronous shape probe. Returns true when the symbol exists with the
-     * expected signature (property count, method name, etc.).
-     * Must NOT mutate the target.
-     */
-    expectedShape: (target: T) => boolean;
-    /**
-     * Async behavior probe. Returns true when a minimal smoke invocation
-     * demonstrates the expected behavior contract.
-     * Must NOT mutate the target; must be fast (<100ms).
-     */
-    expectedBehavior: (target: T) => Promise<boolean>;
-    /**
-     * Apply the patch. Called only after validate() passes for all specs.
-     */
-    install: (target: T) => void;
-    /**
-     * Revert the patch. Called on emergency rollback or unload.
-     */
-    uninstall: (target: T) => void;
-}
-export declare class PatchManifest {
-    private readonly specs;
-    private installed;
-    /**
-     * Register a PatchSpec. Order of registration determines install order.
-     * Idempotent on same id — re-registering the same id is a no-op.
-     */
-    register<T = unknown>(spec: PatchSpec<T>): void;
-    /**
-     * Boot phase 3: run ALL expectedShape + expectedBehavior probes.
-     * If any fail, throws DriftError listing ALL failures.
-     * Never installs on probe failure.
-     */
-    validate(): Promise<void>;
-    /**
-     * Boot phase 4: install ALL specs.
-     * Must only be called after validate() passes (enforced by Boot orchestrator).
-     */
-    install(): Promise<void>;
-    /**
-     * Emergency rollback — uninstalls in reverse registration order.
-     */
-    uninstall(): Promise<void>;
-    get isInstalled(): boolean;
-    get size(): number;
-    ids(): string[];
-}

package/dist/src/lifecycle/phase-import-upstream.d.ts

@@ -1,12 +0,0 @@
-/**
- * Phase 2 — import-upstream
- *
- * Dynamically imports the "openclaw" package and returns its namespace as
- * `unknown`. Zero `any`. The caller (boot.ts / phase 3) is responsible for
- * narrowing the shape via PatchManifest.validate().
- *
- * Using a variable-held specifier prevents tsc from attempting static
- * resolution of the peer-dependency at build time (same pattern as doctor.ts
- * check_bridge_wiring).
- */
-export declare function importUpstream(): Promise<unknown>;

package/dist/src/lifecycle/phase-install-patches.d.ts

@@ -1,12 +0,0 @@
-/**
- * Phase 4 — install-patches
- *
- * Calls manifest.install() atomically — only reached after phase 3
- * (validate-upstream) passes. All probes have already confirmed the
- * expected shape; install proceeds without further checks.
- *
- * On any install error, attempts manifest.uninstall() as best-effort rollback
- * before re-throwing so boot fails loud.
- */
-import type { PatchManifest } from './patch-manifest.js';
-export declare function installPatches(manifest: PatchManifest, _upstreamNs: unknown): Promise<void>;

package/dist/src/lifecycle/phase-schedule-jobs.d.ts

@@ -1,12 +0,0 @@
-/**
- * Phase 7 — schedule-jobs
- *
- * Sets up recurring background tasks (stub):
- *   - SessionRegistry.snapshot() on a configurable interval (default 5 min)
- *   - Stalled-session watchdog timer
- *   - Runaway-loop watchdog
- *
- * Phase E wires real timers here.
- */
-import type { SessionRegistry } from '../persistence/session-registry.js';
-export declare function scheduleJobs(_registry: SessionRegistry): void;

package/dist/src/lifecycle/phase-start-server.d.ts

@@ -1,11 +0,0 @@
-/**
- * Phase 6 — start-server
- *
- * Starts the openai-compat HTTP server (stub).
- * Phase E wires the real server instantiation here.
- */
-export interface StartServerOptions {
-    /** Port the openai-compat HTTP server listens on. Default: 18796. */
-    port?: number;
-}
-export declare function startServer(_opts?: StartServerOptions): Promise<void>;

package/dist/src/lifecycle/phase-validate-config.d.ts

@@ -1,9 +0,0 @@
-/**
- * Phase 1 — validate-config
- *
- * Calls ConfigSchema.parse(loadConfigSources()).
- * Throws ConfigInvalid (wrapping zod issues) on failure.
- * Boot refuses with a phase-keyed message.
- */
-import { type Config } from '../config/schema.js';
-export declare function validateConfig(): Config;

package/dist/src/lifecycle/phase-validate-upstream.d.ts

@@ -1,11 +0,0 @@
-/**
- * Phase 3 — validate-upstream
- *
- * Runs PatchManifest.validate() against the imported upstream namespace.
- * Re-throws validation failures as DriftError (already typed by PatchManifest).
- *
- * Boot refuses and surfaces a drift report if ANY probe fails.
- * install() is NEVER called from this phase — that is phase 4.
- */
-import type { PatchManifest } from './patch-manifest.js';
-export declare function validateUpstream(manifest: PatchManifest, _upstreamNs: unknown): Promise<void>;

package/dist/src/lifecycle/phase-wire-handlers.d.ts

@@ -1,12 +0,0 @@
-/**
- * Phase 5 — wire-handlers
- *
- * Registers EventBus subscribers BEFORE the server starts accepting traffic
- * (phase 6). This ordering closes the v0.6.0 subscription-vs-traffic race
- * where SessionCaptureSubscriber missed early session events.
- *
- * Phase E wires the real subscribers (SessionCaptureSubscriber, MetricsSubscriber).
- * This scaffold calls ObservabilityService.init(bus) which registers stubs.
- */
-import type { EventBus } from '../observability/event-bus.js';
-export declare function wireHandlers(bus: EventBus): void;

package/dist/src/lifecycle/safe-restart.d.ts

@@ -1,99 +0,0 @@
-/**
- * safe-restart — in-process gateway restart that preserves the current
- * Telegram session.
- *
- * Pre-Execution Decision (PRP_v2 §Pre-Execution Decisions, locked):
- *   Path: --safe-current-session flag (in-process).
- *   Rationale: avoids tmux zombie risk (Risk Register row 3); cleaner state
- *   model; tmux-detach remains available as a secondary path (v0.17 deferred).
- *
- * Usage (programmatic):
- *   const restart = new SafeRestart({ sessionId: 'my-session' });
- *   const result = await restart.run();
- *
- * Usage (CLI flag):
- *   cc-openclaw --safe-current-session [--session-id <id>]
- *   Parsed in src/cli/index.ts and forwarded here.
- *
- * Self-survival contract:
- *   When OpenClaw triggers a gateway restart while a Telegram session is
- *   active, the session must NOT fire a sub-agent "self-survival" turn. This
- *   module registers a SIGTERM handler that:
- *     1. Flushes in-flight state (EventBus drain-wait up to FLUSH_TIMEOUT_MS).
- *     2. Marks the named session as restart-pending in the session registry.
- *     3. Emits a 'safe-restart.initiated' telemetry event.
- *     4. Returns "in-process" — the gateway respawner picks this signal up and
- *        skips the self-survival sub-agent path.
- *
- * SecondaryPath — tmux-detach:
- *   See scripts/gateway-detach.sh. NOT the default per locked decision above.
- *   SafeRestart.run() returns { mode: 'not-implemented' } when forced into
- *   tmux-detach mode so callers handle it cleanly without crashing.
- */
-import { EventBus } from '../observability/event-bus.js';
-export type RestartMode = 'in-process' | 'tmux-detach';
-export interface SafeRestartOptions {
-    /** Session ID that must survive the restart. */
-    sessionId: string;
-    /**
-     * Restart mode. Defaults to 'in-process' per locked PRP_v2 decision.
-     * 'tmux-detach' is a stub that returns { mode: 'not-implemented' }.
-     */
-    mode?: RestartMode;
-    /** EventBus to emit telemetry events. If omitted, a private bus is used. */
-    bus?: EventBus;
-    /**
-     * Maximum milliseconds to wait for in-flight state flush before proceeding.
-     * Default: 2000.
-     */
-    flushTimeoutMs?: number;
-}
-export interface SafeRestartResult {
-    /** 'in-process' when restart succeeded in-process. */
-    mode: 'in-process' | 'not-implemented';
-    sessionId: string;
-    /** ISO timestamp of when restart was initiated. */
-    initiatedAt: string;
-}
-export declare class SafeRestart {
-    private readonly sessionId;
-    private readonly mode;
-    private readonly bus;
-    private readonly flushTimeoutMs;
-    constructor(opts: SafeRestartOptions);
-    /**
-     * Execute the safe-restart sequence.
-     *
-     * In-process path:
-     *   1. Wait up to flushTimeoutMs for in-flight state to drain.
-     *   2. Emit 'safe-restart.initiated' telemetry.
-     *   3. Return { mode: 'in-process', ... }.
-     *
-     * Tmux-detach path:
-     *   Returns { mode: 'not-implemented', ... } — deferred to v0.17.
-     *   See scripts/gateway-detach.sh for the secondary path stub.
-     */
-    run(): Promise<SafeRestartResult>;
-    /**
-     * Wait for in-flight state to drain. If flush takes longer than
-     * flushTimeoutMs, we proceed anyway — restart is more important than
-     * waiting indefinitely.
-     */
-    private flushInFlight;
-    /**
-     * Give the EventBus a single microtask tick to deliver any pending
-     * synchronous events before we mark the session as restart-pending.
-     */
-    private drainEventBus;
-    private emitTelemetry;
-}
-/**
- * Returns true when the --safe-current-session flag is present in argv OR
- * when OPENCLAW_SAFE_CURRENT_SESSION=1 is set in the environment.
- * Used by src/cli/index.ts to decide whether to run the safe-restart path.
- */
-export declare function isSafeCurrentSessionRequested(argv?: string[]): boolean;
-/**
- * Parse --session-id <value> from argv. Returns undefined when not present.
- */
-export declare function parseSessionIdFromArgv(argv?: string[]): string | undefined;

package/dist/src/logger.d.ts

@@ -1,14 +0,0 @@
-/**
- * Structured logging interface with level control.
- *
- * Default implementation logs to console, filtered by OPENCLAW_LOG_LEVEL env var.
- * Valid levels: debug, info, warn, error. Default: info.
- */
-export interface Logger {
-    debug(msg: string, ...args: unknown[]): void;
-    info(msg: string, ...args: unknown[]): void;
-    warn(msg: string, ...args: unknown[]): void;
-    error(msg: string, ...args: unknown[]): void;
-}
-/** Create a console-backed logger with optional prefix and env-var level control. */
-export declare function createConsoleLogger(prefix?: string): Logger;

package/dist/src/mcp/bridge.d.ts

@@ -1,21 +0,0 @@
-export interface PluginApi {
-    on(event: string, handler: (...args: unknown[]) => unknown): void;
-    logger?: Console;
-}
-export declare class McpBridge {
-    private child;
-    start(): void;
-    stop(): Promise<void>;
-    isRunning(): boolean;
-}
-/**
- * Passive registration: validate the sidecar binary is present at the
- * expected bundled path. No event hooks. No process spawning.
- *
- * Returns the resolved sidecar path so callers (or tests) can probe it.
- */
-export declare function register(api: PluginApi): {
-    sidecarPath: string;
-    sidecarExists: boolean;
-};
-export declare function _resetRegisteredForTests(): void;

package/dist/src/mcp/index.d.ts

@@ -1,2 +0,0 @@
-export { McpBridge, register, _resetRegisteredForTests } from './bridge.js';
-export type { PluginApi } from './bridge.js';

package/dist/src/models.d.ts

@@ -1,68 +0,0 @@
-/**
- * Centralized Model Registry — single source of truth for all model metadata.
- *
- * Every model definition lives here. All other files derive from this registry.
- * To add a model: add one entry to MODELS[]. Everything else auto-generates.
- */
-import type { EngineType } from './types.js';
-export type ProviderName = 'anthropic' | 'openai' | 'google' | 'cursor' | 'custom';
-export interface ModelPricing {
-    input: number;
-    output: number;
-    cached?: number;
-}
-interface ModelDef {
-    /** Canonical model ID, e.g. 'claude-opus-4-6' */
-    id: string;
-    /** Which CLI engine to use */
-    engine: EngineType;
-    /** Upstream provider for API routing */
-    provider: ProviderName;
-    /** Token pricing */
-    pricing: ModelPricing;
-    /** Short aliases that resolve to this model */
-    aliases?: string[];
-    /** Whether to expose in /v1/models (default: true) */
-    listed?: boolean;
-    /** Context window size in tokens */
-    contextWindow?: number;
-}
-/** Resolve alias → canonical id. Returns the input unchanged if not an alias. */
-export declare function resolveAlias(alias: string): string;
-/** Resolve model string to engine + canonical model. Pattern fallback for unknown models. */
-export declare function resolveEngineAndModel(model: string): {
-    engine: EngineType;
-    model: string;
-};
-/** Resolve model string to provider + API model name. Used by proxy handler. */
-export declare function resolveProvider(model: string): {
-    provider: ProviderName;
-    apiModel: string;
-};
-/** Get context window size for a model. Returns 200k default for unknown models. */
-export declare function getContextWindow(model: string): number;
-/** Get pricing for a model. Falls back to sonnet pricing for unknown models. */
-export declare function getModelPricing(model?: string, defaultModel?: string): ModelPricing;
-export declare function overrideModelPricing(overrides: Record<string, Partial<ModelPricing>>): void;
-/** Reset all pricing overrides (for testing). */
-export declare function _resetPricingOverrides(): void;
-/** Get /v1/models list — auto-generated from registry. */
-export declare function getModelList(): {
-    object: string;
-    data: Array<{
-        id: string;
-        object: string;
-        owned_by: string;
-    }>;
-};
-/** Get all model aliases as a Record (backward compat). */
-export declare function getAliases(): Record<string, string>;
-/** Check if a model string is a Gemini model. */
-export declare function isGeminiModel(model: string): boolean;
-/** Check if a model string is a Claude model. */
-export declare function isClaudeModel(model: string): boolean;
-/** Rough token estimate: ~4 chars per token. */
-export declare function estimateTokens(text: string): number;
-/** Resolve a model string to its full definition. Throws for unknown models. */
-export declare function lookupModelStrict(idOrAlias: string): ModelDef;
-export {};

package/dist/src/observability/event-bus.d.ts

@@ -1,86 +0,0 @@
-/**
- * EventBus — typed event emitter replacing all globalThis.__openclaw_* Maps.
- *
- * Contract (PRP §3.2 G4):
- *   - on<K>(event, listener) returns an unsubscribe function (no EventEmitter leak)
- *   - emit<K>(event, payload) is synchronous; delivery <1ms target
- *   - Subscribers wired in boot phase 5 BEFORE traffic (phase 6 start-server)
- *
- * EventMap keys use dot-notation: "session.started", "boot.ready", etc.
- * Adding a new event requires only a type entry here — no subclass needed.
- */
-import type { Config } from '../config/schema.js';
-type SessionName = string & {
-    readonly __brand: 'SessionName';
-};
-export type EventMap = {
-    /** Emitted when a Claude CLI session subprocess starts. `pid` is `null`
-     * when the underlying ISession adapter doesn't expose a process id yet. */
-    'session.started': {
-        name: SessionName;
-        pid: number | null;
-    };
-    /** Emitted when a session subprocess exits cleanly. */
-    'session.completed': {
-        name: SessionName;
-        tokens: number;
-    };
-    /**
-     * Emitted when a session subprocess closes outside an explicit stop() —
-     * v0.14.1 root-cause observability for the stale-session class of bugs.
-     * `code` is the OS exit code (null when killed by signal). The reaper in
-     * SessionManager.sendMessage restarts the subprocess on the next turn.
-     */
-    'session.died': {
-        name: SessionName;
-        code: number | null;
-    };
-    /** Emitted on every tool_use event within a session turn. */
-    'session.tool-use': {
-        name: SessionName;
-        tool: string;
-        input: unknown;
-    };
-    /** Emitted after PatchManifest.install() succeeds for a single spec. */
-    'patch.installed': {
-        id: string;
-    };
-    /** Emitted when a PatchSpec probe fails during validate-upstream. */
-    'patch.drift': {
-        id: string;
-        expected: string;
-        actual: string;
-    };
-    /** Emitted at the end of a successful 7-phase boot. */
-    'boot.ready': {
-        config: Config;
-    };
-    /**
-     * Emitted by cache-parity-registry when a namespace mismatch is detected
-     * and automatically self-recovered (task-005, v0.16).
-     * `namespace` is the mismatched key; `clearedBytes` is the size of the
-     * wiped local cache entry.
-     */
-    'cache-parity.namespace-mismatch-recovered': {
-        namespace: string;
-        clearedBytes: number;
-        restartCycle: number;
-    };
-};
-type Listener<K extends keyof EventMap> = (payload: EventMap[K]) => void;
-export declare class EventBus {
-    private readonly listeners;
-    /**
-     * Subscribe to an event. Returns an unsubscribe function.
-     * Calling the returned function is idempotent.
-     */
-    on<K extends keyof EventMap>(event: K, listener: Listener<K>): () => void;
-    /**
-     * Emit an event synchronously. All listeners receive the payload in
-     * registration order. Errors in listeners propagate to the caller.
-     */
-    emit<K extends keyof EventMap>(event: K, payload: EventMap[K]): void;
-    /** Number of active listeners across all event keys. */
-    get listenerCount(): number;
-}
-export {};

package/dist/src/observability/get-event-bus.d.ts

@@ -1,25 +0,0 @@
-/**
- * `getEventBus()` — process-wide singleton accessor for the EventBus.
- *
- * Phase E#5 (v0.12.0): the EventBus moves from scaffold to hot path. This
- * module is the bootstrap seam: every hot-path callsite that emits a typed
- * event imports this accessor instead of constructing its own EventBus.
- *
- * The singleton replaces the long-deprecated `globalThis.__openclaw_*` Map
- * pattern. Listeners must be registered before traffic starts (boot phase 5
- * per PRP §3.4); subscribers added later still work but may miss events
- * fired during a race window.
- *
- * Test isolation: vitest unit tests can call `__resetEventBusForTests()` to
- * drop all listeners between cases. Production code never calls it.
- */
-import { EventBus } from './event-bus.js';
-/**
- * Returns the singleton EventBus. Lazy-initializes on first call.
- */
-export declare function getEventBus(): EventBus;
-/**
- * Test-only helper. Drops the singleton so each test starts with zero
- * listeners. Never call from production code.
- */
-export declare function __resetEventBusForTests(): void;

package/dist/src/observability/observability-service.d.ts

@@ -1,19 +0,0 @@
-/**
- * ObservabilityService — composes EventBus + all subscribers.
- *
- * init(bus) is called in boot phase 5 (wire-handlers) before the server
- * starts accepting traffic. This ordering closes the subscription-vs-traffic
- * race that existed prior to v0.6.0.
- *
- * Phase E wires real subscriber logic; stubs here keep build green.
- */
-import type { EventBus } from './event-bus.js';
-export declare class ObservabilityService {
-    private readonly sessionCapture;
-    private readonly metrics;
-    /**
-     * Register all subscribers against the provided bus.
-     * Must be called before traffic is accepted (boot phase 5).
-     */
-    init(bus: EventBus): void;
-}

package/dist/src/observability/perf-telemetry.d.ts

@@ -1,65 +0,0 @@
-/**
- * Perf-baseline telemetry (M8 — cache-miss-telemetry).
- *
- * Appends structured perf events to `~/.openclaw/workspace/memory/sysprompt-cost.jsonl`
- * alongside the existing token-cost records. Every record carries an `event`
- * field so consumers can filter:
- *
- *   - "token_cost"  → legacy per-request sysprompt+user char/token estimate
- *                     (emitted by cwd-patch.ts; tagged by this module on read).
- *   - "cache_check" → outcome of the Track-B cache parity decision: hit/miss
- *                     with a structured `cause` (registry_empty | hash_mismatch
- *                     | session_unknown | disabled). Drives idea #8.
- *   - "first_byte"  → first user-visible content delta sent to the SSE client.
- *                     `elapsed_ms` is measured from request receive (turnStartMs
- *                     in streaming-handler.ts). This is the baseline for the
- *                     plan's ≥50% p50 latency drop exit criterion.
- *   - "turn_end"    → final SSE stop chunk written. `elapsed_ms` is total turn
- *                     wall-clock. Pair with first_byte to derive generation-vs-
- *                     latency split per turn.
- *
- * Flag: CC_OPENCLAW_PERF_CACHE_TELEMETRY (default ON; opt-out with 0/false/off).
- * Goes through the same shim pattern as the legacy telemetry getters
- * (ConfigService when present, env fallback for tests).
- *
- * Why same file as token_cost: the plan's verify query targets sysprompt-cost.jsonl
- * directly; splitting would require operators to remember two paths and would
- * break the single `jq` pipeline. The `event` field makes filtering trivial.
- */
-type PerfEventName = 'cache_check' | 'first_byte' | 'turn_end';
-type CacheCheckCause = 'hit' | 'warm_hash' | 'registry_empty' | 'hash_mismatch' | 'session_unknown' | 'disabled';
-interface PerfEventBase {
-    event: PerfEventName;
-    sessionKey?: string;
-}
-interface CacheCheckEvent extends PerfEventBase {
-    event: 'cache_check';
-    outcome: 'hit' | 'miss';
-    cause: CacheCheckCause;
-    sysHash?: string;
-}
-interface FirstByteEvent extends PerfEventBase {
-    event: 'first_byte';
-    elapsed_ms: number;
-    model?: string;
-    tool_stream?: boolean;
-}
-interface TurnEndEvent extends PerfEventBase {
-    event: 'turn_end';
-    elapsed_ms: number;
-    first_byte_ms?: number;
-    finish_reason?: 'stop' | 'tool_calls' | 'length' | string;
-    tool_calls?: number;
-    bytes_out?: number;
-}
-export type PerfEvent = CacheCheckEvent | FirstByteEvent | TurnEndEvent;
-/**
- * Append a perf event to sysprompt-cost.jsonl. No-op when the flag is off
- * or when an I/O error occurs — telemetry must never break a live turn.
- */
-export declare function writePerfEvent(event: PerfEvent): void;
-/** Test hook — replace the file-writing sink with an in-memory collector. */
-export declare function _setPerfWriterForTests(w: (line: string) => void): void;
-/** Test hook — restore the default file-writing sink. */
-export declare function _restorePerfWriterForTests(): void;
-export {};

package/dist/src/observability/subscribers/metrics.d.ts

@@ -1,11 +0,0 @@
-/**
- * MetricsSubscriber — collects per-session token and timing metrics.
- *
- * Replaces globalThis.__openclaw_perfMap (AS2).
- * Phase E wires real aggregation and exposes metrics via /enhancer/metrics.
- * Stub body here.
- */
-import type { EventBus } from '../event-bus.js';
-export declare class MetricsSubscriber {
-    register(bus: EventBus): void;
-}

package/dist/src/observability/subscribers/session-capture.d.ts

@@ -1,15 +0,0 @@
-/**
- * SessionCaptureSubscriber — replaces the 5s ultrareview poller (LP2).
- *
- * Wired in boot phase 5 (wire-handlers) BEFORE traffic starts.
- * Phase E implements the real capture logic (writing to SessionRegistry WAL,
- * updating live-card state, etc.). Stub body here.
- */
-import type { EventBus } from '../event-bus.js';
-export declare class SessionCaptureSubscriber {
-    /**
-     * Register listeners on the bus. Returns nothing; unsubscribe handles
-     * are held internally (Phase E: stored for clean shutdown).
-     */
-    register(bus: EventBus): void;
-}

package/dist/src/openai-compat/autonomy-rule.d.ts

@@ -1,26 +0,0 @@
-/**
- * AUTONOMY_RULE — "act, don't ask" posture injected into the Savvy chat path.
- *
- * Why: the openai-compat (Telegram) path does not reliably load the owner's
- * CLAUDE.md "Execute, don't discuss" rules (tmpdir CWD), so the model reverts to
- * Claude's base posture of asking on ambiguous forks. Combined with a Telegram
- * AskUserQuestion round-trip that silently drops answers, this made Savvy stall
- * and require many prods to finish one task. This rule restores the terminal-CLI
- * posture: decide and execute, complete the whole task in one turn.
- *
- * Gated by CC_OPENCLAW_AUTONOMY_RULE (default on; set '0' to disable). Prepended
- * at the same injection points as TTS_RULE in openai-compat.ts so it lands in
- * both the REPLACE (--system-prompt) and APPEND (--append-system-prompt) paths.
- *
- * Pure-string constant — no I/O, no module state.
- */
-export declare const AUTONOMY_RULE: string;
-/**
- * Merge AskUserQuestion into a session's disallowedTools when suppression is on.
- * The Telegram answer round-trip silently drops taps, so a question there stalls
- * the turn — suppressing the tool is the hard guarantee behind AUTONOMY_RULE's
- * "decide, do not ask" posture. Returns `prior` unchanged when suppression is
- * off (so callers only set disallowedTools when there's something to set). Pure
- * + dedup so it's unit-testable and idempotent across repeated session creates.
- */
-export declare function withAskUserSuppressed(prior: string[] | undefined, suppress: boolean): string[] | undefined;

package/dist/src/openai-compat/bridges/allowlist.d.ts

@@ -1,19 +0,0 @@
-/**
- * OpenClaw native tool allowList — typed-config-driven (Phase E #1, Q1 resolution).
- *
- * Reads from `ConfigService.config.nativeToolsAllowList` when available;
- * falls back to the v0.11.x hardcoded default when `ConfigService` is unset
- * (tests, scripts run without a boot path). The hardcoded fallback is
- * intentionally identical to what shipped at v0.11.0 so existing tests that
- * import `OPENCLAW_TOOL_ALLOWLIST` keep passing without rewrite.
- *
- * Env override: `CC_OPENCLAW_NATIVE_TOOLS_ALLOWLIST="message.voice,message.image,..."`.
- * Q1 expanded default ships at v1.0.0-rc1 alongside the `CC_OPENCLAW_NATIVE_TOOLS=1` flip.
- */
-/**
- * v0.11.x default — kept exported for legacy callers and for the
- * `ConfigService`-unset fallback path. New code should call `isAllowedTool`.
- */
-export declare const OPENCLAW_TOOL_ALLOWLIST: ReadonlySet<string>;
-/** Return true when `toolName` is in the active allowList. */
-export declare function isAllowedTool(toolName: string): boolean;