@bitseek/claw 1.3.7 → 1.3.8-beta.1

package/dist/{register.setup-2S-SXPOC.js → register.setup-CUxHFPRL.js}

@@ -41,9 +41,9 @@ import "./runtime-guard-IbCMXYfp.js";
 import { t as hasExplicitOptions } from "./command-options-CfGhT1Of.js";
 import "./note-CvWjGRTD.js";
 import "./clack-prompter-CVmIKCoz.js";
-import "./onboarding-DjOCmNCk.js";
+import "./onboarding-CIsQzEx6.js";
 import { n as logConfigUpdated, t as formatConfigPath } from "./logging-DUqFcGxI.js";
-import { t as onboardCommand } from "./onboard-C0Bo_5Vw.js";
+import { t as onboardCommand } from "./onboard-DQJ6ZB5N.js";
 import JSON5 from "json5";
 import fs from "node:fs/promises";
 

package/dist/{register.setup-DJjPOLJK.js → register.setup-N8V5bjG1.js}

@@ -41,9 +41,9 @@ import { t as hasExplicitOptions } from "./command-options-DGYxc3D_.js";
 import "./note-qHayYqee.js";
 import "./clack-prompter-fBizq68H.js";
 import "./runtime-guard-DzZMAUj_.js";
-import "./onboarding-DufCP2B8.js";
+import "./onboarding-exdNo-8e.js";
 import { n as logConfigUpdated, t as formatConfigPath } from "./logging-CmPhQ5QB.js";
-import { t as onboardCommand } from "./onboard-CI1TyO0l.js";
+import { t as onboardCommand } from "./onboard-CIrRD9vz.js";
 import JSON5 from "json5";
 import fs from "node:fs/promises";
 

package/dist/{register.status-health-sessions-Czq26k6E.js → register.status-health-sessions-BKFS62CW.js}

@@ -31,7 +31,7 @@ import "./accounts-C0g5--0e.js";
 import "./bindings-C2tByF8e.js";
 import "./send-BaweV9LV.js";
 import "./send-aCOVuBQ6.js";
-import "./subagent-registry-D4xGq2uc.js";
+import "./subagent-registry-B4xJjOu2.js";
 import { n as resolveSessionFilePath, r as resolveSessionFilePathOptions } from "./paths-CFzDnbY4.js";
 import "./chat-envelope-AUuZAcrC.js";
 import "./client-D3Y8sx9i.js";
@@ -130,8 +130,8 @@ import "./service-D_q10odK.js";
 import "./diagnostics-D16lnwhz.js";
 import "./table-9IueuXKv.js";
 import "./audit-Dp7M6JvG.js";
-import { n as statusCommand } from "./status-D_I-fLJF.js";
-import { r as healthCommand } from "./health-Gkd0akfz.js";
+import { n as statusCommand } from "./status-DCtLhxlh.js";
+import { r as healthCommand } from "./health-Cjj_F37M.js";
 import "./status.update-BX7tZJju.js";
 import "./channel-account-context-DSofwLgp.js";
 import "./node-command-policy-bP6LYXJe.js";

package/dist/{register.status-health-sessions-wp3A615j.js → register.status-health-sessions-Bj4rUQRe.js}

@@ -2,7 +2,7 @@ import "./paths-BYr-iJJ9.js";
 import { f as isRich, n as info, p as theme, s as setVerbose } from "./globals-uLeGcRW1.js";
 import "./utils-CP51tiAi.js";
 import "./thinking-44rmAw5o.js";
-import { S as classifySessionKey, k as resolveSessionModelRef, qt as lookupContextTokens } from "./reply-OEcNPoWd.js";
+import { S as classifySessionKey, k as resolveSessionModelRef, qt as lookupContextTokens } from "./reply-CAA6gLtt.js";
 import { d as resolveDefaultAgentId, r as listAgentIds } from "./agent-scope-CiBV1K6b.js";
 import { d as defaultRuntime } from "./subsystem-BT74-yyS.js";
 import { T as parseAgentSessionKey, c as normalizeAgentId } from "./session-key-C9z4VQtw.js";
@@ -131,8 +131,8 @@ import "./service-Y993dKjs.js";
 import "./diagnostics-Cl-0KyBB.js";
 import "./table-C0joisBj.js";
 import "./audit-Dgxdk59F.js";
-import { t as statusCommand } from "./status-CmNVuywF.js";
-import { r as healthCommand } from "./health-DaN3xECS.js";
+import { t as statusCommand } from "./status-CB2Fs5iL.js";
+import { r as healthCommand } from "./health-CpbNiL9A.js";
 import "./status.update-CMEQvQ5o.js";
 import "./channel-account-context-kALkWZk9.js";
 import "./node-command-policy-MaQhBrGC.js";

package/dist/{register.subclis-CIlBs5A-.js → register.subclis-lEqV1Knw.js}

@@ -65,7 +65,7 @@ const entries = [
 		description: "Run, inspect, and query the WebSocket Gateway",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./gateway-cli-C3ftrrlK.js")).registerGatewayCli(program);
+			(await import("./gateway-cli-BUFxEad5.js")).registerGatewayCli(program);
 		}
 	},
 	{
@@ -97,7 +97,7 @@ const entries = [
 		description: "Discover, scan, and configure models",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./models-cli-Ceb37L0t.js")).registerModelsCli(program);
+			(await import("./models-cli-aJswKT_o.js")).registerModelsCli(program);
 		}
 	},
 	{
@@ -177,7 +177,7 @@ const entries = [
 		description: "Manage internal agent hooks",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./hooks-cli-gRM8FMyG.js")).registerHooksCli(program);
+			(await import("./hooks-cli-C0lC4Kj0.js")).registerHooksCli(program);
 		}
 	},
 	{
@@ -209,7 +209,7 @@ const entries = [
 		description: "Secure DM pairing (approve inbound requests)",
 		hasSubcommands: true,
 		register: async (program) => {
-			const { registerPluginCliCommands } = await import("./cli-D5yg1LCm.js");
+			const { registerPluginCliCommands } = await import("./cli-CrgfzbyT.js");
 			registerPluginCliCommands(program, await loadConfig());
 			(await import("./pairing-cli-BwaiwEE0.js")).registerPairingCli(program);
 		}
@@ -219,8 +219,8 @@ const entries = [
 		description: "Manage OpenClaw plugins and extensions",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./plugins-cli-DwKgp7q7.js")).registerPluginsCli(program);
-			const { registerPluginCliCommands } = await import("./cli-D5yg1LCm.js");
+			(await import("./plugins-cli-CpSINdz-.js")).registerPluginsCli(program);
+			const { registerPluginCliCommands } = await import("./cli-CrgfzbyT.js");
 			registerPluginCliCommands(program, await loadConfig());
 		}
 	},
@@ -229,7 +229,7 @@ const entries = [
 		description: "Manage connected chat channels (Telegram, Discord, etc.)",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./channels-cli-CZQbGl-H.js")).registerChannelsCli(program);
+			(await import("./channels-cli-D_gj850i.js")).registerChannelsCli(program);
 		}
 	},
 	{
@@ -269,7 +269,7 @@ const entries = [
 		description: "Update OpenClaw and inspect update channel status",
 		hasSubcommands: true,
 		register: async (program) => {
-			(await import("./update-cli-wmp8VSbx.js")).registerUpdateCli(program);
+			(await import("./update-cli-BuVnlit7.js")).registerUpdateCli(program);
 		}
 	},
 	{
@@ -277,7 +277,7 @@ const entries = [
 		description: "Generate shell completion script",
 		hasSubcommands: false,
 		register: async (program) => {
-			(await import("./completion-cli-D_Hxee-R.js").then((n) => n.n)).registerCompletionCli(program);
+			(await import("./completion-cli-Clj1_156.js").then((n) => n.n)).registerCompletionCli(program);
 		}
 	}
 ];

package/dist/{reply-OEcNPoWd.js → reply-CAA6gLtt.js}

@@ -6,7 +6,7 @@ import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsX
 import { _ as resolveAgentModelPrimaryValue, a as resolveAgentDir, d as resolveDefaultAgentId, f as resolveEffectiveModelFallbacks, g as resolveAgentModelFallbackValues, h as resolveSessionAgentIds, i as resolveAgentConfig, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, p as resolveRunModelFallbacksOverride, r as listAgentIds, t as hasConfiguredModelFallbacks, u as resolveAgentWorkspaceDir, v as toAgentModelListLike } from "./agent-scope-CiBV1K6b.js";
 import { d as defaultRuntime, t as createSubsystemLogger, u as createNonExitingRuntime } from "./subsystem-BT74-yyS.js";
 import { C as isCronSessionKey, E as resolveThreadParentSessionKey, S as isCronRunSessionKey, T as parseAgentSessionKey, _ as normalizeOptionalAccountId, b as getSubagentDepth, c as normalizeAgentId, d as resolveThreadSessionKeys, f as sanitizeAgentId, g as normalizeAccountId$2, h as DEFAULT_ACCOUNT_ID, l as normalizeMainKey, o as classifySessionKeyShape, r as buildAgentMainSessionKey, s as isValidAgentId, t as DEFAULT_AGENT_ID, u as resolveAgentIdFromSessionKey, v as isBlockedObjectKey, w as isSubagentSessionKey, x as isAcpSessionKey, y as deriveSessionChatType } from "./session-key-C9z4VQtw.js";
-import { C as openBoundaryFileSync, N as normalizeWindowsPathForComparison, S as openBoundaryFile, a as DEFAULT_IDENTITY_FILENAME, d as ensureAgentWorkspace, f as filterBootstrapFilesForSession, g as resolveWorkspaceAttachmentsRoot, m as loadWorkspaceBootstrapFiles, n as DEFAULT_AGENT_WORKSPACE_DIR, r as DEFAULT_BOOTSTRAP_FILENAME, y as resolveOpenClawPackageRoot } from "./workspace-CRdln__H.js";
+import { A as isNotFoundPathError, C as openBoundaryFileSync, N as normalizeWindowsPathForComparison, S as openBoundaryFile, a as DEFAULT_IDENTITY_FILENAME, d as ensureAgentWorkspace, f as filterBootstrapFilesForSession, g as resolveWorkspaceAttachmentsRoot, j as isPathInside, k as hasNodeErrorCode, m as loadWorkspaceBootstrapFiles, n as DEFAULT_AGENT_WORKSPACE_DIR, r as DEFAULT_BOOTSTRAP_FILENAME, y as resolveOpenClawPackageRoot } from "./workspace-CRdln__H.js";
 import { i as logWarn, n as logError, r as logInfo, t as logDebug } from "./logger-D04dg4Ex.js";
 import { n as runExec, r as spawnWithFallback, t as runCommandWithTimeout } from "./exec-BdDcFm8M.js";
 import { $ as getCustomProviderApiKey, $r as resolveOwnerDisplaySetting, $t as TELEGRAM_COMMAND_NAME_PATTERN, Bn as isWorkspaceRelativeAvatarPath, Br as resolveSlackStreamingMode, Fn as isAvatarDataUrl, Gn as getConfigOverrides, Gr as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, Hn as resolveAvatarMime, In as isAvatarHttpUrl, J as buildAssistantMessage, Jn as unsetConfigOverride, Jt as resolveConfigSnapshotHash, K as OLLAMA_NATIVE_BASE_URL, Kn as resetConfigOverrides, Kr as resolveAgentMaxConcurrent, Kt as readConfigFileSnapshot, Lr as mapStreamingModeToSlackLegacyDraftStreamMode, Mi as DEFAULT_CONTEXT_TOKENS, Ni as DEFAULT_MODEL, Pi as DEFAULT_PROVIDER, Pn as AVATAR_MAX_BYTES, Q as getApiKeyForModel, Qn as unsetConfigValueAtPath, Rn as isPathWithinRoot, Rr as resolveDiscordPreviewStreamMode, S as resolveThinkingDefault, Ti as normalizeSecretInput, Un as validateJsonSchemaValue, Wt as loadConfig, X as buildStreamErrorAssistantMessage, Xn as parseConfigPath, Xr as resolveShellEnvFallbackTimeoutMs, Xt as writeConfigFile, Y as buildAssistantMessageWithZeroUsage, Yn as getConfigValueAtPath, Yr as getShellPathFromLoginShell, Z as buildUsageWithNoCost, Zn as setConfigValueAtPath, Zt as validateConfigObjectWithPlugins, _i as withFileLock, _n as parseDurationMs, _t as markAuthProfileFailure, an as resolveIMessageAttachmentRoots, bt as resolveProfilesUnavailableReason, c as modelKey, ci as ensureAuthProfileStore, cn as parseNonNegativeByteSize, d as normalizeProviderId, en as normalizeTelegramCommandName, et as requireApiKey, f as parseModelRef, g as resolveDefaultModelForAgent, gi as resolveOpenClawAgentDir, gt as isProfileInCooldown, h as resolveConfiguredModelRef, hi as resolveAuthStorePathForDisplay, ht as getSoonestCooldownExpiry, i as findNormalizedProviderValue, it as resolveModelAuthMode, ji as splitTrailingAuthProfile, jr as applyMergePatch, l as normalizeModelRef$2, mt as resolveAuthProfileOrder, n as buildConfiguredAllowlistKeys, ni as listProfilesForProvider, o as inferUniqueProviderFromConfiguredModels, on as resolveIMessageRemoteAttachmentRoots, or as buildEnforcedShellCommand, q as createOllamaStreamFn, qn as setConfigOverride, r as buildModelAliasIndex, ri as markAuthProfileGood, rn as isInboundPathAllowed, rt as resolveEnvApiKey, s as isCliProvider, sn as normalizeScpRemoteHost, t as buildAllowedModelSet, ti as dedupeProfileIds, tn as resolveTelegramCustomCommands, tt as resolveApiKeyForProvider, v as resolveModelRefFromString, vt as markAuthProfileUsed, x as resolveSubagentSpawnModelSelection, xi as resolveAuthProfileDisplayLabel, xt as resolveApiKeyForProfile, y as resolveReasoningDefault, zn as isSupportedLocalAvatarExtension, zr as resolveSlackNativeStreaming } from "./model-selection-xdfZxwgB.js";
@@ -17,7 +17,7 @@ import { t as isTruthyEnvValue } from "./env-4r1Vlroz.js";
 import { n as isDangerousHostEnvVarName } from "./host-env-security-BiAcoumI.js";
 import { r as VERSION } from "./env-vars-DM119fhK.js";
 import { E as triggerInternalHook, S as matchPluginCommand, _ as normalizePluginHttpPath, b as getPluginCommandSpecs, c as normalizeChannelId$1, d as getActivePluginRegistryKey, g as createPluginRegistry, m as setActivePluginRegistry, n as CHAT_CHANNEL_ORDER, p as requireActivePluginRegistry, s as normalizeAnyChannelId, u as getActivePluginRegistry, v as clearPluginCommands, w as createInternalHookEvent, x as listPluginCommands, y as executePluginCommand } from "./registry-CUyWRciN.js";
-import { a as safeStatSync, d as normalizePluginsConfig, f as resolveEffectiveEnableState, i as isPathInside, l as applyTestPluginDefaults, n as loadPluginManifestRegistry, p as resolveMemorySlotDecision, r as discoverOpenClawPlugins } from "./manifest-registry-B_U2pKBU.js";
+import { a as safeStatSync, d as normalizePluginsConfig, f as resolveEffectiveEnableState, i as isPathInside$1, l as applyTestPluginDefaults, n as loadPluginManifestRegistry, p as resolveMemorySlotDecision, r as discoverOpenClawPlugins } from "./manifest-registry-B_U2pKBU.js";
 import { a as resolveChannelGroupRequireMention, c as normalizeHyphenSlug, i as resolveChannelGroupPolicy, l as normalizeStringEntries, n as listChannelDocks, r as normalizeSignalMessagingTarget, s as normalizeAtHashSlug, t as getChannelDock, u as normalizeStringEntriesLower } from "./dock-BXksV3sC.js";
 import { t as runTasksWithConcurrency } from "./run-with-concurrency-C3sn1gEK.js";
 import { a as isInternalMessageChannel, c as listDeliverableMessageChannels, d as resolveMessageChannel, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, o as isMarkdownCapableMessageChannel, p as GATEWAY_CLIENT_IDS, t as INTERNAL_MESSAGE_CHANNEL, u as resolveGatewayMessageChannel } from "./message-channel-CKAn7Lf7.js";
@@ -36031,7 +36031,7 @@ function createOutboundSendDepsFromCliSource(deps) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-Bc1AWW4q.js");
+			const { sendMessageWhatsApp } = await import("./web-Cb4sindp.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
@@ -56736,7 +56736,7 @@ function loadWebLoginQr() {
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-Bc1AWW4q.js");
+	webChannelPromise ??= import("./web-Cb4sindp.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
@@ -57334,7 +57334,7 @@ function addPathToMatcher(matcher, rawPath) {
 }
 function matchesPathMatcher(matcher, sourcePath) {
 	if (matcher.exact.has(sourcePath)) return true;
-	return matcher.dirs.some((dirPath) => isPathInside(dirPath, sourcePath));
+	return matcher.dirs.some((dirPath) => isPathInside$1(dirPath, sourcePath));
 }
 function buildProvenanceIndex(params) {
 	const loadPathMatcher = createPathMatcher();
@@ -68336,6 +68336,82 @@ function stripReadTruncationContentDetails(result) {
 		}
 	};
 }
+function extractRequestedReadPath(record) {
+	const trimmed = (typeof record?.path === "string" ? record.path : typeof record?.file_path === "string" ? record.file_path : void 0)?.trim();
+	return trimmed ? trimmed : void 0;
+}
+function normalizeReadPathCandidate(filePath) {
+	const trimmed = filePath.trim();
+	const withoutAt = trimmed.startsWith("@") ? trimmed.slice(1) : trimmed;
+	if (/^file:\/\//i.test(withoutAt)) try {
+		return fileURLToPath(withoutAt);
+	} catch {
+		return withoutAt;
+	}
+	return withoutAt;
+}
+function normalizeRelativeReadPath(filePath) {
+	return filePath.replace(/\\/g, "/").replace(/^(?:\.\/)+/, "").replace(/^\/+/, "").replace(/\/+$/, "");
+}
+function getReadPathRelativeToWorkspace(filePath, workspaceRoot) {
+	const normalized = normalizeReadPathCandidate(filePath);
+	if (!path.isAbsolute(normalized)) return normalizeRelativeReadPath(normalized);
+	if (!workspaceRoot) return;
+	const root = path.resolve(workspaceRoot);
+	const resolved = path.resolve(normalized);
+	if (!isPathInside(root, resolved)) return;
+	return normalizeRelativeReadPath(path.relative(root, resolved));
+}
+function isMemoryReadPath(filePath, workspaceRoot) {
+	const relative = getReadPathRelativeToWorkspace(filePath, workspaceRoot);
+	return relative === "memory" || Boolean(relative?.startsWith("memory/"));
+}
+function resolveReadPathWithinWorkspace(filePath, workspaceRoot) {
+	if (!workspaceRoot) return;
+	const normalized = normalizeReadPathCandidate(filePath);
+	const resolved = path.isAbsolute(normalized) ? path.resolve(normalized) : path.resolve(workspaceRoot, normalized);
+	return isPathInside(path.resolve(workspaceRoot), resolved) ? resolved : void 0;
+}
+function createMemoryDirectoryReadResult(filePath) {
+	return {
+		content: [{
+			type: "text",
+			text: `${filePath} is a directory, not a file. Read a specific file such as MEMORY.md or memory/YYYY-MM-DD.md instead.`
+		}],
+		details: {}
+	};
+}
+function createMissingMemoryReadResult(filePath) {
+	return {
+		content: [{
+			type: "text",
+			text: `No memory file exists at ${filePath} yet. Continue normally, or create a file such as memory/YYYY-MM-DD.md when you want to save notes.`
+		}],
+		details: {}
+	};
+}
+async function maybeCreateMemoryReadCompatibilityResult(params) {
+	if (!isMemoryReadPath(params.filePath, params.workspaceRoot)) return null;
+	const absolutePath = resolveReadPathWithinWorkspace(params.filePath, params.workspaceRoot);
+	if (!absolutePath) return null;
+	try {
+		if ((await fs$1.stat(absolutePath)).isDirectory()) return createMemoryDirectoryReadResult(params.filePath);
+		return null;
+	} catch (error) {
+		if (isNotFoundPathError(error)) return createMissingMemoryReadResult(params.filePath);
+		throw error;
+	}
+}
+function maybeRecoverMemoryReadError(params) {
+	if (!isMemoryReadPath(params.filePath, params.workspaceRoot)) return null;
+	if (params.error instanceof SafeOpenError) {
+		if (params.error.code === "not-file") return createMemoryDirectoryReadResult(params.filePath);
+		if (params.error.code === "not-found") return createMissingMemoryReadResult(params.filePath);
+	}
+	if (hasNodeErrorCode(params.error, "EISDIR")) return createMemoryDirectoryReadResult(params.filePath);
+	if (isNotFoundPathError(params.error)) return createMissingMemoryReadResult(params.filePath);
+	return null;
+}
 async function executeReadWithAdaptivePaging(params) {
 	const userLimit = params.args.limit;
 	if (typeof userLimit === "number" && Number.isFinite(userLimit) && userLimit > 0) return await params.base.execute(params.toolCallId, params.args, params.signal);
@@ -68611,7 +68687,8 @@ function wrapToolWorkspaceRootGuardWithOptions(tool, root, options) {
 function createSandboxedReadTool(params) {
 	return createOpenClawReadTool(createReadTool(params.root, { operations: createSandboxReadOperations(params) }), {
 		modelContextWindowTokens: params.modelContextWindowTokens,
-		imageSanitization: params.imageSanitization
+		imageSanitization: params.imageSanitization,
+		workspaceRoot: params.root
 	});
 }
 function createSandboxedWriteTool(params) {
@@ -68677,14 +68754,30 @@ function createOpenClawReadTool(base, options) {
 			const normalized = normalizeToolParams(params);
 			const record = normalized ?? (params && typeof params === "object" ? params : void 0);
 			assertRequiredParams(record, CLAUDE_PARAM_GROUPS.read, base.name);
-			const result = await executeReadWithAdaptivePaging({
-				base,
-				toolCallId,
-				args: normalized ?? params ?? {},
-				signal,
-				maxBytes: resolveAdaptiveReadMaxBytes(options)
-			});
-			const filePath = typeof record?.path === "string" ? String(record.path) : "<unknown>";
+			const filePath = extractRequestedReadPath(record) ?? "<unknown>";
+			const memoryCompatibilityResult = filePath !== "<unknown>" ? await maybeCreateMemoryReadCompatibilityResult({
+				filePath,
+				workspaceRoot: options?.workspaceRoot
+			}) : null;
+			if (memoryCompatibilityResult) return memoryCompatibilityResult;
+			let result;
+			try {
+				result = await executeReadWithAdaptivePaging({
+					base,
+					toolCallId,
+					args: normalized ?? params ?? {},
+					signal,
+					maxBytes: resolveAdaptiveReadMaxBytes(options)
+				});
+			} catch (error) {
+				const recovered = filePath !== "<unknown>" ? maybeRecoverMemoryReadError({
+					filePath,
+					workspaceRoot: options?.workspaceRoot,
+					error
+				}) : null;
+				if (recovered) return recovered;
+				throw error;
+			}
 			return sanitizeToolResultImages(await normalizeReadImageResult(stripReadTruncationContentDetails(result), filePath), `read:${filePath}`, options?.imageSanitization);
 		}
 	};
@@ -69450,7 +69543,8 @@ function createOpenClawCodingTools(options) {
 			}
 			const wrapped = createOpenClawReadTool(createReadTool(workspaceRoot), {
 				modelContextWindowTokens: options?.modelContextWindowTokens,
-				imageSanitization
+				imageSanitization,
+				workspaceRoot
 			});
 			return [workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, workspaceRoot) : wrapped];
 		}

package/dist/{run-main-bo-QbYn_.js → run-main-BTmP3wme.js}

@@ -31,7 +31,7 @@ import "./accounts-C0g5--0e.js";
 import "./bindings-C2tByF8e.js";
 import "./send-BaweV9LV.js";
 import "./send-aCOVuBQ6.js";
-import "./subagent-registry-D4xGq2uc.js";
+import "./subagent-registry-B4xJjOu2.js";
 import "./paths-CFzDnbY4.js";
 import "./chat-envelope-AUuZAcrC.js";
 import "./client-D3Y8sx9i.js";
@@ -123,9 +123,9 @@ import "./context-window-guard-BqrKjiIm.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-S7Od8UBX.js";
 import "./note-qHayYqee.js";
 import "./issue-format-Bm-71lmf.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-NaHPDM1s.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-CgjiDSJy.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-DzZMAUj_.js";
-import { t as emitCliBanner } from "./banner-CMCfl-_K.js";
+import { t as emitCliBanner } from "./banner-DtaJorEc.js";
 import "./doctor-config-flow-DhnDuMG9.js";
 import { n as ensureConfigReady } from "./config-guard-D3uYbBeN.js";
 import process$1 from "node:process";
@@ -140,7 +140,7 @@ const routeHealth = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { healthCommand } = await import("./health-Gkd0akfz.js").then((n) => n.i);
+		const { healthCommand } = await import("./health-Cjj_F37M.js").then((n) => n.i);
 		await healthCommand({
 			json,
 			timeoutMs,
@@ -160,7 +160,7 @@ const routeStatus = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { statusCommand } = await import("./status-D_I-fLJF.js").then((n) => n.t);
+		const { statusCommand } = await import("./status-DCtLhxlh.js").then((n) => n.t);
 		await statusCommand({
 			json,
 			deep,
@@ -199,7 +199,7 @@ const routeAgentsList = {
 	run: async (argv) => {
 		const json = hasFlag(argv, "--json");
 		const bindings = hasFlag(argv, "--bindings");
-		const { agentsListCommand } = await import("./agents-BqONdWNu.js").then((n) => n.t);
+		const { agentsListCommand } = await import("./agents-4yiCX5vO.js").then((n) => n.t);
 		await agentsListCommand({
 			json,
 			bindings
@@ -265,7 +265,7 @@ const routes = [
 			const pathArg = positionals[0];
 			if (!pathArg) return false;
 			const json = hasFlag(argv, "--json");
-			const { runConfigGet } = await import("./config-cli-BtvOIDkG.js");
+			const { runConfigGet } = await import("./config-cli-DwKVeQtE.js");
 			await runConfigGet({
 				path: pathArg,
 				json
@@ -280,7 +280,7 @@ const routes = [
 			if (!positionals || positionals.length !== 1) return false;
 			const pathArg = positionals[0];
 			if (!pathArg) return false;
-			const { runConfigUnset } = await import("./config-cli-BtvOIDkG.js");
+			const { runConfigUnset } = await import("./config-cli-DwKVeQtE.js");
 			await runConfigUnset({ path: pathArg });
 			return true;
 		}
@@ -294,7 +294,7 @@ const routes = [
 			const local = hasFlag(argv, "--local");
 			const json = hasFlag(argv, "--json");
 			const plain = hasFlag(argv, "--plain");
-			const { modelsListCommand } = await import("./models-CJodAVSF.js").then((n) => n.t);
+			const { modelsListCommand } = await import("./models-De_qVfBK.js").then((n) => n.t);
 			await modelsListCommand({
 				all,
 				local,
@@ -325,7 +325,7 @@ const routes = [
 			const plain = hasFlag(argv, "--plain");
 			const check = hasFlag(argv, "--check");
 			const probe = hasFlag(argv, "--probe");
-			const { modelsStatusCommand } = await import("./models-CJodAVSF.js").then((n) => n.t);
+			const { modelsStatusCommand } = await import("./models-De_qVfBK.js").then((n) => n.t);
 			await modelsStatusCommand({
 				json,
 				plain,
@@ -410,7 +410,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-CQtsVyIe.js");
+	const { buildProgram } = await import("./program-R4eCXcVV.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -423,10 +423,10 @@ async function runCli(argv = process$1.argv) {
 		const { getProgramContext } = await import("./program-context-BqyLhTGk.js").then((n) => n.n);
 		const ctx = getProgramContext(program);
 		if (ctx) {
-			const { registerCoreCliByName } = await import("./command-registry-CtTmCFgA.js").then((n) => n.t);
+			const { registerCoreCliByName } = await import("./command-registry-CjTwwZuF.js").then((n) => n.t);
 			await registerCoreCliByName(program, ctx, primary, parseArgv);
 		}
-		const { registerSubCliByName } = await import("./register.subclis-CIlBs5A-.js").then((n) => n.a);
+		const { registerSubCliByName } = await import("./register.subclis-lEqV1Knw.js").then((n) => n.a);
 		await registerSubCliByName(program, primary);
 	}
 	if (!shouldSkipPluginCommandRegistration({
@@ -434,7 +434,7 @@ async function runCli(argv = process$1.argv) {
 		primary,
 		hasBuiltinPrimary: primary !== null && program.commands.some((command) => command.name() === primary)
 	})) {
-		const { registerPluginCliCommands } = await import("./cli-D5yg1LCm.js");
+		const { registerPluginCliCommands } = await import("./cli-CrgfzbyT.js");
 		const { loadConfig } = await import("./auth-profiles-Ncv1fyN5.js").then((n) => n.O);
 		registerPluginCliCommands(program, loadConfig());
 	}

package/dist/{server-node-events-BE-B31Iv.js → server-node-events-CD_Wo8L4.js}

@@ -31,7 +31,7 @@ import "./accounts-C0g5--0e.js";
 import "./bindings-C2tByF8e.js";
 import "./send-BaweV9LV.js";
 import "./send-aCOVuBQ6.js";
-import { A as agentCommandFromIngress, P as createOutboundSendDeps, Pn as enqueueSystemEvent, Rn as requestHeartbeatNow, bt as resolveOutboundTarget, ln as buildOutboundSessionContext } from "./subagent-registry-D4xGq2uc.js";
+import { A as agentCommandFromIngress, P as createOutboundSendDeps, Pn as enqueueSystemEvent, Rn as requestHeartbeatNow, bt as resolveOutboundTarget, ln as buildOutboundSessionContext } from "./subagent-registry-B4xJjOu2.js";
 import "./paths-CFzDnbY4.js";
 import "./chat-envelope-AUuZAcrC.js";
 import "./client-D3Y8sx9i.js";
@@ -120,7 +120,7 @@ import "./help-format-Bf46Qqc-.js";
 import "./progress-BkZzF3Qm.js";
 import "./constants-D1Q8yQ1_.js";
 import "./context-window-guard-BqrKjiIm.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-DMeB2M_b.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-D_JirvZj.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{server-node-events-h5NyibKC.js → server-node-events-ap09x8RZ.js}

@@ -2,7 +2,7 @@ import "./paths-BYr-iJJ9.js";
 import "./globals-uLeGcRW1.js";
 import "./utils-CP51tiAi.js";
 import "./thinking-44rmAw5o.js";
-import { Ar as enqueueSystemEvent, D as pruneLegacyStoreKeys, E as loadSessionEntry, Ft as createOutboundSendDeps, Jn as buildOutboundSessionContext, O as resolveGatewaySessionStoreTarget, Pr as requestHeartbeatNow, jt as agentCommandFromIngress, kn as resolveOutboundTarget } from "./reply-OEcNPoWd.js";
+import { Ar as enqueueSystemEvent, D as pruneLegacyStoreKeys, E as loadSessionEntry, Ft as createOutboundSendDeps, Jn as buildOutboundSessionContext, O as resolveGatewaySessionStoreTarget, Pr as requestHeartbeatNow, jt as agentCommandFromIngress, kn as resolveOutboundTarget } from "./reply-CAA6gLtt.js";
 import "./agent-scope-CiBV1K6b.js";
 import { d as defaultRuntime } from "./subsystem-BT74-yyS.js";
 import { l as normalizeMainKey } from "./session-key-C9z4VQtw.js";
@@ -119,7 +119,7 @@ import "./server-lifecycle-Dn1WcypX.js";
 import "./stagger-BIZMWR_z.js";
 import "./constants-BJMtcGm_.js";
 import "./context-window-guard-DfLcl4Sl.js";
-import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-DZ0qaSFA.js";
+import { c as parseMessageWithAttachments, l as formatForLog, r as registerApnsToken, s as normalizeRpcAttachmentsToChatAttachments } from "./push-apns-BFPYim-z.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{status-CmNVuywF.js → status-CB2Fs5iL.js}

@@ -1,6 +1,6 @@
 import { u as resolveGatewayPort } from "./paths-BYr-iJJ9.js";
 import { f as isRich, n as info, p as theme } from "./globals-uLeGcRW1.js";
-import { C as listAgentsForGateway, Jt as resolveContextTokensForModel, Nr as peekSystemEvents, S as classifySessionKey, U as readRestartSentinel, W as summarizeRestartSentinel, _t as formatUsageReportLines, c as buildChannelSummary, d as resolveChannelAccountConfigured, f as resolveChannelAccountEnabled, gt as loadProviderUsageSummary, k as resolveSessionModelRef, l as buildChannelAccountSnapshot, u as formatChannelAllowFrom } from "./reply-OEcNPoWd.js";
+import { C as listAgentsForGateway, Jt as resolveContextTokensForModel, Nr as peekSystemEvents, S as classifySessionKey, U as readRestartSentinel, W as summarizeRestartSentinel, _t as formatUsageReportLines, c as buildChannelSummary, d as resolveChannelAccountConfigured, f as resolveChannelAccountEnabled, gt as loadProviderUsageSummary, k as resolveSessionModelRef, l as buildChannelAccountSnapshot, u as formatChannelAllowFrom } from "./reply-CAA6gLtt.js";
 import { u as resolveAgentWorkspaceDir } from "./agent-scope-CiBV1K6b.js";
 import { T as parseAgentSessionKey } from "./session-key-C9z4VQtw.js";
 import { y as resolveOpenClawPackageRoot } from "./workspace-CRdln__H.js";
@@ -30,7 +30,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-DZoVtX5E.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-Cl-0KyBB.js";
 import { t as renderTable } from "./table-C0joisBj.js";
 import { a as probeGateway, i as resolveGatewayProbeAuth$1, t as runSecurityAudit } from "./audit-Dgxdk59F.js";
-import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-DaN3xECS.js";
+import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-CpbNiL9A.js";
 import { a as shouldShowUpdateStatus, i as resolveUpdateAvailability, n as formatUpdateOneLiner, r as getUpdateCheckResult, t as formatUpdateAvailableHint } from "./status.update-CMEQvQ5o.js";
 import { _ as resolveUpdateChannelDisplay, a as formatGitInstallLabel, h as normalizeUpdateChannel, n as checkUpdateStatus, t as resolveDefaultChannelAccountContext } from "./channel-account-context-kALkWZk9.js";
 import { t as resolveNodeService } from "./node-service-BQmqeLS0.js";

package/dist/{status-D_I-fLJF.js → status-DCtLhxlh.js}

@@ -11,7 +11,7 @@ import { t as VERSION } from "./version-CGDNfh5C.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-C1TG3OK0.js";
 import { X as resolveFreshSessionTotalTokens, o as loadSessionStore, tt as resolveMainSessionKey } from "./sessions-ChAmoyIS.js";
 import { n as listChannelPlugins } from "./plugins-BYHJoTB8.js";
-import { An as formatChannelAllowFrom, Cn as formatUsageReportLines, Ln as peekSystemEvents, Mn as resolveChannelAccountEnabled, Mt as summarizeRestartSentinel, On as buildChannelSummary, Sn as loadProviderUsageSummary, jn as resolveChannelAccountConfigured, jt as readRestartSentinel, kn as buildChannelAccountSnapshot } from "./subagent-registry-D4xGq2uc.js";
+import { An as formatChannelAllowFrom, Cn as formatUsageReportLines, Ln as peekSystemEvents, Mn as resolveChannelAccountEnabled, Mt as summarizeRestartSentinel, On as buildChannelSummary, Sn as loadProviderUsageSummary, jn as resolveChannelAccountConfigured, jt as readRestartSentinel, kn as buildChannelAccountSnapshot } from "./subagent-registry-B4xJjOu2.js";
 import { c as resolveStorePath } from "./paths-CFzDnbY4.js";
 import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-BolSRDlL.js";
 import { o as getTailnetHostname, s as readTailscaleStatusJson } from "./tailscale-BVIS18LB.js";
@@ -32,7 +32,7 @@ import { t as formatRuntimeStatusWithDetails } from "./runtime-status-CnEdVO5M.j
 import { t as readLastGatewayErrorLine } from "./diagnostics-D16lnwhz.js";
 import { t as renderTable } from "./table-9IueuXKv.js";
 import { a as probeGateway, i as resolveGatewayProbeAuth$1, t as runSecurityAudit } from "./audit-Dp7M6JvG.js";
-import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-Gkd0akfz.js";
+import { o as resolveHeartbeatSummaryForAgent, t as formatHealthChannelLines } from "./health-Cjj_F37M.js";
 import { a as shouldShowUpdateStatus, i as resolveUpdateAvailability, n as formatUpdateOneLiner, r as getUpdateCheckResult, t as formatUpdateAvailableHint } from "./status.update-BX7tZJju.js";
 import { _ as resolveUpdateChannelDisplay, a as formatGitInstallLabel, h as normalizeUpdateChannel, n as checkUpdateStatus, t as resolveDefaultChannelAccountContext } from "./channel-account-context-DSofwLgp.js";
 import { t as resolveNodeService } from "./node-service-B10h5Sui.js";