@bitseek/claw 1.3.3 → 1.3.4

package/dist/{exec-safe-bin-runtime-policy-Dvdq9iDc.js → exec-safe-bin-runtime-policy-DJT0CbIu.js}

@@ -1,5 +1,5 @@
-import { Ut as listWritableExplicitTrustedSafeBinDirs, Vt as getTrustedSafeBinDirs, Wt as normalizeTrustedSafeBinDirs, _n as normalizeSafeBinProfileFixtures, vn as resolveSafeBinProfiles } from "./auth-profiles-1D0rBps3.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-CuJvX5ng.js";
+import { Ut as listWritableExplicitTrustedSafeBinDirs, Vt as getTrustedSafeBinDirs, Wt as normalizeTrustedSafeBinDirs, _n as normalizeSafeBinProfileFixtures, vn as resolveSafeBinProfiles } from "./auth-profiles-Ncv1fyN5.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-BjI4jCdB.js";
 
 //#region src/infra/exec-safe-bin-runtime-policy.ts
 const INTERPRETER_LIKE_SAFE_BINS = new Set([

package/dist/{fetch-CIaHb2Cp.js → fetch-Ch8LsU9k.js}

@@ -1,8 +1,8 @@
 import { k as resolvePreferredOpenClawTmpDir } from "./globals-B68W7uN8.js";
 import { g as resolveStateDir } from "./paths-BnKiOk2S.js";
-import { u as resolveAgentWorkspaceDir } from "./agent-scope-CY2-lUIY.js";
-import { c as detectMime, l as extensionForMime } from "./image-ops-lN_xsQHN.js";
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-t4V7UlQC.js";
+import { u as resolveAgentWorkspaceDir } from "./agent-scope-CJelRKYY.js";
+import { c as detectMime, l as extensionForMime } from "./image-ops-Di37o6bN.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-B3dFBAUH.js";
 import path from "node:path";
 
 //#region src/media/local-roots.ts

package/dist/{fetch-guard-t4V7UlQC.js → fetch-guard-B3dFBAUH.js}

@@ -1,5 +1,5 @@
 import { i as logWarn } from "./logger-BJMfryJd.js";
-import { i as createPinnedDispatcher, n as SsrFBlockedError, r as closeDispatcher, s as resolvePinnedHostnameWithPolicy, t as hasProxyEnvConfigured } from "./proxy-env-zRmsnQyF.js";
+import { i as createPinnedDispatcher, n as SsrFBlockedError, r as closeDispatcher, s as resolvePinnedHostnameWithPolicy, t as hasProxyEnvConfigured } from "./proxy-env-B3cJLAXi.js";
 import { t as bindAbortRelay } from "./fetch-timeout-COrrU_w2.js";
 import { EnvHttpProxyAgent } from "undici";
 

package/dist/{fs-safe-keI0663i.js → fs-safe-Bbp_1S9D.js}

@@ -1,11 +1,11 @@
 import { _ as expandHomePrefix } from "./paths-BnKiOk2S.js";
-import { A as isNotFoundPathError, M as isSymlinkOpenError, T as sameFileIdentity, j as isPathInside, k as hasNodeErrorCode } from "./workspace-DzeL98px.js";
+import { A as isNotFoundPathError, M as isSymlinkOpenError, T as sameFileIdentity, j as isPathInside, k as hasNodeErrorCode } from "./workspace-BHfqkuYN.js";
 import { i as logWarn } from "./logger-BJMfryJd.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-GklztZEg.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-CwNBr-6E.js";
 import path from "node:path";
 import os from "node:os";
 import { constants } from "node:fs";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { randomUUID } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 
@@ -25,19 +25,19 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function expandRelativePathWithHome(relativePath) {
 	let home = process.env.HOME || process.env.USERPROFILE || os.homedir();
 	try {
-		home = await fsPromises.realpath(home);
+		home = await fs$1.realpath(home);
 	} catch {}
 	return expandHomePrefix(relativePath, { home });
 }
 async function openVerifiedLocalFile(filePath, options) {
 	try {
-		if ((await fsPromises.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
+		if ((await fs$1.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
 	} catch (err) {
 		if (err instanceof SafeOpenError) throw err;
 	}
 	let handle;
 	try {
-		handle = await fsPromises.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
@@ -45,13 +45,13 @@ async function openVerifiedLocalFile(filePath, options) {
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fsPromises.realpath(filePath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -69,7 +69,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function resolvePathWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -170,7 +170,7 @@ function buildAtomicWriteTempPath(targetPath) {
 	return path.join(dir, `.${base}.${process.pid}.${randomUUID()}.tmp`);
 }
 async function writeTempFileForAtomicReplace(params) {
-	const tempHandle = await fsPromises.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
+	const tempHandle = await fs$1.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
 	try {
 		if (typeof params.data === "string") await tempHandle.writeFile(params.data, params.encoding ?? "utf8");
 		else await tempHandle.writeFile(params.data);
@@ -180,7 +180,7 @@ async function writeTempFileForAtomicReplace(params) {
 	}
 }
 async function verifyAtomicWriteResult(params) {
-	const rootWithSep = ensureTrailingSep(await fsPromises.realpath(params.rootDir));
+	const rootWithSep = ensureTrailingSep(await fs$1.realpath(params.rootDir));
 	const opened = await openVerifiedLocalFile(params.targetPath, { rejectHardlinks: true });
 	try {
 		if (!sameFileIdentity(opened.stat, params.expectedStat)) throw new SafeOpenError("path-mismatch", "path changed during write");
@@ -191,13 +191,13 @@ async function verifyAtomicWriteResult(params) {
 }
 async function resolveOpenedFileRealPathForHandle(handle, ioPath) {
 	try {
-		return await fsPromises.realpath(ioPath);
+		return await fs$1.realpath(ioPath);
 	} catch (err) {
 		if (!isNotFoundPathError(err)) throw err;
 	}
 	const fdCandidates = process.platform === "linux" ? [`/proc/self/fd/${handle.fd}`, `/dev/fd/${handle.fd}`] : process.platform === "win32" ? [] : [`/dev/fd/${handle.fd}`];
 	for (const fdPath of fdCandidates) try {
-		return await fsPromises.realpath(fdPath);
+		return await fs$1.realpath(fdPath);
 	} catch {}
 	throw new SafeOpenError("path-mismatch", "unable to resolve opened file path");
 }
@@ -212,10 +212,10 @@ async function openWritableFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fsPromises.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fsPromises.realpath(resolved);
+		const resolvedRealPath = await fs$1.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -227,10 +227,10 @@ async function openWritableFileWithinRoot(params) {
 	let createdForWrite = false;
 	try {
 		try {
-			handle = await fsPromises.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
+			handle = await fs$1.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
 		} catch (err) {
 			if (!isNotFoundPathError(err)) throw err;
-			handle = await fsPromises.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
+			handle = await fs$1.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
 			createdForWrite = true;
 		}
 	} catch (err) {
@@ -244,7 +244,7 @@ async function openWritableFileWithinRoot(params) {
 		if (!stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		try {
-			const lstat = await fsPromises.lstat(ioPath);
+			const lstat = await fs$1.lstat(ioPath);
 			if (lstat.isSymbolicLink() || !lstat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 			if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
 		} catch (err) {
@@ -252,7 +252,7 @@ async function openWritableFileWithinRoot(params) {
 		}
 		const realPath = await resolveOpenedFileRealPathForHandle(handle, ioPath);
 		openedRealPath = realPath;
-		const realStat = await fsPromises.stat(realPath);
+		const realStat = await fs$1.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
@@ -267,7 +267,7 @@ async function openWritableFileWithinRoot(params) {
 		const cleanupCreatedPath = createdForWrite && err instanceof SafeOpenError;
 		const cleanupPath = openedRealPath ?? ioPath;
 		await handle.close().catch(() => {});
-		if (cleanupCreatedPath) await fsPromises.rm(cleanupPath, { force: true }).catch(() => {});
+		if (cleanupCreatedPath) await fs$1.rm(cleanupPath, { force: true }).catch(() => {});
 		throw err;
 	}
 }
@@ -290,7 +290,7 @@ async function writeFileWithinRoot(params) {
 			encoding: params.encoding,
 			mode: targetMode || 384
 		});
-		await fsPromises.rename(tempPath, destinationPath);
+		await fs$1.rename(tempPath, destinationPath);
 		tempPath = null;
 		try {
 			await verifyAtomicWriteResult({
@@ -303,7 +303,7 @@ async function writeFileWithinRoot(params) {
 			throw err;
 		}
 	} finally {
-		if (tempPath) await fsPromises.rm(tempPath, { force: true }).catch(() => {});
+		if (tempPath) await fs$1.rm(tempPath, { force: true }).catch(() => {});
 	}
 }
 async function copyFileWithinRoot(params) {
@@ -331,7 +331,7 @@ async function copyFileWithinRoot(params) {
 		});
 		await pipeline(sourceStream, targetStream);
 	} catch (err) {
-		if (target?.createdForWrite) await fsPromises.rm(target.openedRealPath, { force: true }).catch(() => {});
+		if (target?.createdForWrite) await fs$1.rm(target.openedRealPath, { force: true }).catch(() => {});
 		throw err;
 	} finally {
 		if (!sourceClosedByStream) await source.handle.close().catch(() => {});

package/dist/{gateway-cli-BKlWGZ1k.js → gateway-cli-3rP04OO5.js}

@@ -2,7 +2,7 @@ import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as
 import { a as logVerbose, d as colorize, f as isRich, g as getResolvedLoggerSettings, h as getLogger, m as getChildLogger, p as theme, s as setVerbose } from "./globals-uLeGcRW1.js";
 import { D as isPlainObject, E as truncateUtf16Safe, S as shortenHomePath, c as ensureDir, r as clamp, y as resolveUserPath } from "./utils-CP51tiAi.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-44rmAw5o.js";
-import { $ as normalizeOptionalText, $n as registerAgentRunContext, An as resolveSessionDeliveryTarget, Ar as enqueueSystemEvent, B as consumeRestartSentinel, Bn as countActiveDescendantRuns, Br as getAcpSessionManager, Bt as runWithModelFallback, C as listAgentsForGateway, Cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Ct as handleSlackHttpRequest, D as pruneLegacyStoreKeys, Dr as stripHeartbeatToken, Dt as computeBackoff, E as loadSessionEntry, En as resolveOutboundSessionRoute, F as markGatewaySigusr1RestartHandled, Ft as createOutboundSendDeps, Gn as resolveAnnounceTargetFromKey, Gr as DEFAULT_INPUT_IMAGE_MIMES, H as formatRestartSentinelMessage, Hn as listDescendantRunsForRequester, Hr as normalizeSendPolicy, Ht as setCliSessionId, I as scheduleGatewaySigusr1Restart, It as applyVerboseOverride, J as normalizeCronJobCreate, Jn as buildOutboundSessionContext, Jr as extractFileContentFromSource, K as writeRestartSentinel, Kn as readLatestAssistantReply, Kr as DEFAULT_INPUT_MAX_REDIRECTS, Kt as applyModelOverrideToSessionEntry, L as setGatewaySigusr1RestartPolicy, Lt as parseVerboseOverride, M as deferGatewayRestartUntilIdle, N as emitGatewayRestart, Nn as resetDirectoryCache, Nt as resolveAgentDeliveryPlan, O as resolveGatewaySessionStoreTarget, Ot as sleepWithAbort, P as isGatewaySigusr1RestartExternallyAllowed, Pr as requestHeartbeatNow, Pt as resolveAgentOutboundTarget, Q as normalizeOptionalSessionKey, Qn as onAgentEvent, Qr as resolveAgentTimeoutMs, R as setPreRestartDeferralCheck, Rn as isAbortRequestText, Rt as createDefaultDeps, Sn as getTotalPendingReplies, Sr as CommandLane, T as loadCombinedSessionStoreForGateway, Tn as ensureOutboundSessionEntry, Tt as requestBodyErrorToText, Ur as resolveSendPolicy, Ut as runCliAgent, V as formatDoctorNonInteractiveHint, Vn as initSubagentRegistry, Vr as resolveAgentSessionDirs, Vt as getCliSessionId, W as summarizeRestartSentinel, Wn as runSubagentAnnounceFlow, Wr as DEFAULT_INPUT_IMAGE_MAX_BYTES, X as inferLegacyName, Xn as emitAgentEvent, Xr as normalizeMimeList, Xt as resolveAgentAvatar, Y as normalizeCronJobPatch, Yn as clearAgentRunContext, Yr as extractImageContentFromSource, Yt as resolveSessionAuthProfileOverride, Z as normalizeOptionalAgentId, Zn as getAgentRunContext, Zr as resolveInputFileLimits, _ as applyToolPolicyPipeline, _r as getTotalQueueSize, ar as resolveTtsApiKey, at as stripLegacyDeliveryFields, b as createOpenClawTools, bn as dispatchInboundMessage, br as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as resolveTtsPrefsPath, ct as getPluginToolMeta, dr as setTtsProvider, dt as loadOpenClawPlugins, en as buildSafeExternalPrompt, er as resolveUserTimezone, et as normalizePayloadToSystemText, fr as textToSpeech, ft as createPluginRuntime, g as waitForEmbeddedPiRunEnd, gt as loadProviderUsageSummary, h as getActiveEmbeddedRunCount, hr as getActiveTaskCount, i as resolveCronStyleNow, in as unbindThreadBindingsBySessionKey, ir as isTtsProviderConfigured, it as hasLegacyDeliveryHints, j as consumeGatewaySigusr1RestartAuthorization, jn as resolveOutboundChannelPlugin, jr as isSystemEventContextChanged, jt as agentCommandFromIngress, k as resolveSessionModelRef, kn as resolveOutboundTarget, lr as resolveTtsProviderOrder, lt as resolvePluginTools, m as abortEmbeddedPiRun, mr as OPENAI_TTS_VOICES, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, nn as getHookType, nr as getTtsProvider, nt as migrateLegacyCronPayload, or as resolveTtsAutoMode, ot as applyBrowserProxyPaths, p as runEmbeddedPiAgent, pr as OPENAI_TTS_MODELS, q as normalizeHttpWebhookUrl, qn as clearSessionQueues, qr as DEFAULT_INPUT_TIMEOUT_MS, qt as lookupContextTokens, rn as isExternalHookSession, rr as isTtsEnabled, rt as buildDeliveryFromLegacyPayload, sr as resolveTtsConfig, st as persistBrowserProxyFiles, tn as detectSuspiciousPatterns, tr as clearBootstrapSnapshot, tt as normalizeRequiredName, ur as setTtsEnabled, v as buildDefaultToolPolicyPipelineSteps, vr as markGatewayDraining, w as listSessionsFromStore, wt as readJsonBodyWithLimit, x as canonicalizeSpawnedByForAgent, xn as createReplyDispatcher, xr as waitForActiveTasks, xt as resolveAgentOutboundIdentity, yn as formatZonedTimestamp, yr as resetAllLanes, z as triggerOpenClawRestart, zn as stopSubagentsForRequester, zr as ACP_SESSION_IDENTITY_RENDERER_VERSION, zt as createOutboundSendDeps$1 } from "./reply-DocHuCQP.js";
+import { $ as normalizeOptionalText, $n as registerAgentRunContext, An as resolveSessionDeliveryTarget, Ar as enqueueSystemEvent, B as consumeRestartSentinel, Bn as countActiveDescendantRuns, Br as getAcpSessionManager, Bt as runWithModelFallback, C as listAgentsForGateway, Cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Ct as handleSlackHttpRequest, D as pruneLegacyStoreKeys, Dr as stripHeartbeatToken, Dt as computeBackoff, E as loadSessionEntry, En as resolveOutboundSessionRoute, F as markGatewaySigusr1RestartHandled, Ft as createOutboundSendDeps, Gn as resolveAnnounceTargetFromKey, Gr as DEFAULT_INPUT_IMAGE_MIMES, H as formatRestartSentinelMessage, Hn as listDescendantRunsForRequester, Hr as normalizeSendPolicy, Ht as setCliSessionId, I as scheduleGatewaySigusr1Restart, It as applyVerboseOverride, J as normalizeCronJobCreate, Jn as buildOutboundSessionContext, Jr as extractFileContentFromSource, K as writeRestartSentinel, Kn as readLatestAssistantReply, Kr as DEFAULT_INPUT_MAX_REDIRECTS, Kt as applyModelOverrideToSessionEntry, L as setGatewaySigusr1RestartPolicy, Lt as parseVerboseOverride, M as deferGatewayRestartUntilIdle, N as emitGatewayRestart, Nn as resetDirectoryCache, Nt as resolveAgentDeliveryPlan, O as resolveGatewaySessionStoreTarget, Ot as sleepWithAbort, P as isGatewaySigusr1RestartExternallyAllowed, Pr as requestHeartbeatNow, Pt as resolveAgentOutboundTarget, Q as normalizeOptionalSessionKey, Qn as onAgentEvent, Qr as resolveAgentTimeoutMs, R as setPreRestartDeferralCheck, Rn as isAbortRequestText, Rt as createDefaultDeps, Sn as getTotalPendingReplies, Sr as CommandLane, T as loadCombinedSessionStoreForGateway, Tn as ensureOutboundSessionEntry, Tt as requestBodyErrorToText, Ur as resolveSendPolicy, Ut as runCliAgent, V as formatDoctorNonInteractiveHint, Vn as initSubagentRegistry, Vr as resolveAgentSessionDirs, Vt as getCliSessionId, W as summarizeRestartSentinel, Wn as runSubagentAnnounceFlow, Wr as DEFAULT_INPUT_IMAGE_MAX_BYTES, X as inferLegacyName, Xn as emitAgentEvent, Xr as normalizeMimeList, Xt as resolveAgentAvatar, Y as normalizeCronJobPatch, Yn as clearAgentRunContext, Yr as extractImageContentFromSource, Yt as resolveSessionAuthProfileOverride, Z as normalizeOptionalAgentId, Zn as getAgentRunContext, Zr as resolveInputFileLimits, _ as applyToolPolicyPipeline, _r as getTotalQueueSize, ar as resolveTtsApiKey, at as stripLegacyDeliveryFields, b as createOpenClawTools, bn as dispatchInboundMessage, br as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as resolveTtsPrefsPath, ct as getPluginToolMeta, dr as setTtsProvider, dt as loadOpenClawPlugins, en as buildSafeExternalPrompt, er as resolveUserTimezone, et as normalizePayloadToSystemText, fr as textToSpeech, ft as createPluginRuntime, g as waitForEmbeddedPiRunEnd, gt as loadProviderUsageSummary, h as getActiveEmbeddedRunCount, hr as getActiveTaskCount, i as resolveCronStyleNow, in as unbindThreadBindingsBySessionKey, ir as isTtsProviderConfigured, it as hasLegacyDeliveryHints, j as consumeGatewaySigusr1RestartAuthorization, jn as resolveOutboundChannelPlugin, jr as isSystemEventContextChanged, jt as agentCommandFromIngress, k as resolveSessionModelRef, kn as resolveOutboundTarget, lr as resolveTtsProviderOrder, lt as resolvePluginTools, m as abortEmbeddedPiRun, mr as OPENAI_TTS_VOICES, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, nn as getHookType, nr as getTtsProvider, nt as migrateLegacyCronPayload, or as resolveTtsAutoMode, ot as applyBrowserProxyPaths, p as runEmbeddedPiAgent, pr as OPENAI_TTS_MODELS, q as normalizeHttpWebhookUrl, qn as clearSessionQueues, qr as DEFAULT_INPUT_TIMEOUT_MS, qt as lookupContextTokens, rn as isExternalHookSession, rr as isTtsEnabled, rt as buildDeliveryFromLegacyPayload, sr as resolveTtsConfig, st as persistBrowserProxyFiles, tn as detectSuspiciousPatterns, tr as clearBootstrapSnapshot, tt as normalizeRequiredName, ur as setTtsEnabled, v as buildDefaultToolPolicyPipelineSteps, vr as markGatewayDraining, w as listSessionsFromStore, wt as readJsonBodyWithLimit, x as canonicalizeSpawnedByForAgent, xn as createReplyDispatcher, xr as waitForActiveTasks, xt as resolveAgentOutboundIdentity, yn as formatZonedTimestamp, yr as resetAllLanes, z as triggerOpenClawRestart, zn as stopSubagentsForRequester, zr as ACP_SESSION_IDENTITY_RENDERER_VERSION, zt as createOutboundSendDeps$1 } from "./reply-OEcNPoWd.js";
 import { a as resolveAgentDir, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, i as resolveAgentConfig, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir } from "./agent-scope-CiBV1K6b.js";
 import { a as setConsoleSubsystemFilter, d as defaultRuntime, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-BT74-yyS.js";
 import { S as isCronRunSessionKey, T as parseAgentSessionKey, c as normalizeAgentId, g as normalizeAccountId$1, h as DEFAULT_ACCOUNT_ID, l as normalizeMainKey, m as toAgentStoreSessionKey, o as classifySessionKeyShape, p as toAgentRequestSessionKey, r as buildAgentMainSessionKey, t as DEFAULT_AGENT_ID, u as resolveAgentIdFromSessionKey, w as isSubagentSessionKey } from "./session-key-C9z4VQtw.js";
@@ -123,8 +123,8 @@ import { t as formatHelpExamples } from "./help-format-DvJmQzdo.js";
 import { n as withProgress } from "./progress-BNTrvrfJ.js";
 import "./server-lifecycle-Dn1WcypX.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BIZMWR_z.js";
-import "./constants-CLQ_6hKz.js";
-import "./context-window-guard-DeogNTcc.js";
+import "./constants-BJMtcGm_.js";
+import "./context-window-guard-DfLcl4Sl.js";
 import { i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-BZSPpQlU.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-B9XC36yo.js";
 import "./runtime-guard-IbCMXYfp.js";
@@ -134,7 +134,7 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-CMmAfNYM.
 import { n as inheritOptionFromParent } from "./command-options-CfGhT1Of.js";
 import { t as WizardCancelledError } from "./prompts-DLVFjelr.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CgYkTNAR.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-CvgerNZr.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DhIvFsFv.js";
 import { t as isWithinDir } from "./path-safety-26gFQ-zn.js";
 import { t as assertCanonicalPathWithinBase } from "./install-safe-path-otFEw9-l.js";
 import "./skill-scanner-ew2xZjjk.js";
@@ -155,21 +155,21 @@ import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } fr
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-DGopycZj.js";
 import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-Dgxdk59F.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-BMqSODRp.js";
-import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-DGYiEE9b.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as isCronSystemEvent } from "./health-B-UhwtkZ.js";
+import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-CmNVuywF.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as isCronSystemEvent } from "./health-DaN3xECS.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Cj27cPhO.js";
 import { o as isBitseekBuild } from "./status.update-CMEQvQ5o.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-kALkWZk9.js";
 import { i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-C-snrkmg.js";
-import { t as runOnboardingWizard } from "./onboarding-DHOKHrHh.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-CxuflGia.js";
+import { t as runOnboardingWizard } from "./onboarding-CjwEj4uN.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-DZ0qaSFA.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-DwofK3RT.js";
 import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-MaQhBrGC.js";
 import "./node-service-BQmqeLS0.js";
 import "./shared-D0fApno-.js";
-import { d as verifyOpenAiCompatibleModel } from "./onboard-custom.shared-BVWW8dhE.js";
+import { d as verifyOpenAiCompatibleModel } from "./onboard-custom.shared-vjI8sl9Q.js";
 import { n as formatInstallFailureMessage, t as installSkill } from "./skills-install-CdAnZ-t-.js";
-import { t as runGatewayUpdate } from "./update-runner-C_NOsmrM.js";
+import { t as runGatewayUpdate } from "./update-runner-D5vyQGte.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-Bn1j9Zv_.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
@@ -13611,7 +13611,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-CZ-3bwB5.js");
+			const { handleNodeEvent } = await import("./server-node-events-h5NyibKC.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,