@gguf/claw 2026.1.30 → 2026.2.2

package/dist/acp/client.d.ts

@@ -1,5 +1,5 @@
-import { type ChildProcess } from "node:child_process";
 import { ClientSideConnection } from "@agentclientprotocol/sdk";
+import { type ChildProcess } from "node:child_process";
 export type AcpClientOptions = {
     cwd?: string;
     serverCommand?: string;

package/dist/acp/client.js

@@ -1,7 +1,7 @@
+import { ClientSideConnection, PROTOCOL_VERSION, ndJsonStream, } from "@agentclientprotocol/sdk";
 import { spawn } from "node:child_process";
 import * as readline from "node:readline";
 import { Readable, Writable } from "node:stream";
-import { ClientSideConnection, PROTOCOL_VERSION, ndJsonStream, } from "@agentclientprotocol/sdk";
 import { ensureOpenClawCliOnPath } from "../infra/path-env.js";
 function toArgs(value) {
     if (!value) {

package/dist/acp/server.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
+import { AgentSideConnection, ndJsonStream } from "@agentclientprotocol/sdk";
 import { Readable, Writable } from "node:stream";
 import { fileURLToPath } from "node:url";
-import { AgentSideConnection, ndJsonStream } from "@agentclientprotocol/sdk";
 import { loadConfig } from "../config/config.js";
 import { resolveGatewayAuth } from "../gateway/auth.js";
 import { buildGatewayConnectionDetails } from "../gateway/call.js";

package/dist/acp/translator.d.ts

@@ -1,8 +1,8 @@
 import type { Agent, AgentSideConnection, AuthenticateRequest, AuthenticateResponse, CancelNotification, InitializeRequest, InitializeResponse, ListSessionsRequest, ListSessionsResponse, LoadSessionRequest, LoadSessionResponse, NewSessionRequest, NewSessionResponse, PromptRequest, PromptResponse, SetSessionModeRequest, SetSessionModeResponse } from "@agentclientprotocol/sdk";
 import type { GatewayClient } from "../gateway/client.js";
 import type { EventFrame } from "../gateway/protocol/index.js";
-import { type AcpServerOptions } from "./types.js";
 import { type AcpSessionStore } from "./session.js";
+import { type AcpServerOptions } from "./types.js";
 type AcpGatewayAgentOptions = AcpServerOptions & {
     sessionStore?: AcpSessionStore;
 };

package/dist/acp/translator.js

@@ -1,11 +1,11 @@
-import { randomUUID } from "node:crypto";
 import { PROTOCOL_VERSION } from "@agentclientprotocol/sdk";
+import { randomUUID } from "node:crypto";
 import { getAvailableCommands } from "./commands.js";
-import { readBool, readNumber, readString } from "./meta.js";
 import { extractAttachmentsFromPrompt, extractTextFromPrompt, formatToolTitle, inferToolKind, } from "./event-mapper.js";
+import { readBool, readNumber, readString } from "./meta.js";
 import { parseSessionMeta, resetSessionIfNeeded, resolveSessionKey } from "./session-mapper.js";
-import { ACP_AGENT_INFO } from "./types.js";
 import { defaultAcpSessionStore } from "./session.js";
+import { ACP_AGENT_INFO } from "./types.js";
 export class AcpGatewayAgent {
     connection;
     gateway;

package/dist/agents/agent-scope.d.ts

@@ -6,6 +6,7 @@ type ResolvedAgentConfig = {
     workspace?: string;
     agentDir?: string;
     model?: AgentEntry["model"];
+    skills?: AgentEntry["skills"];
     memorySearch?: AgentEntry["memorySearch"];
     humanDelay?: AgentEntry["humanDelay"];
     heartbeat?: AgentEntry["heartbeat"];
@@ -29,6 +30,7 @@ export declare function resolveSessionAgentId(params: {
     config?: OpenClawConfig;
 }): string;
 export declare function resolveAgentConfig(cfg: OpenClawConfig, agentId: string): ResolvedAgentConfig | undefined;
+export declare function resolveAgentSkillsFilter(cfg: OpenClawConfig, agentId: string): string[] | undefined;
 export declare function resolveAgentModelPrimary(cfg: OpenClawConfig, agentId: string): string | undefined;
 export declare function resolveAgentModelFallbacksOverride(cfg: OpenClawConfig, agentId: string): string[] | undefined;
 export declare function resolveAgentWorkspaceDir(cfg: OpenClawConfig, agentId: string): string;

package/dist/agents/agent-scope.js

@@ -71,6 +71,7 @@ export function resolveAgentConfig(cfg, agentId) {
         model: typeof entry.model === "string" || (entry.model && typeof entry.model === "object")
             ? entry.model
             : undefined,
+        skills: Array.isArray(entry.skills) ? entry.skills : undefined,
         memorySearch: entry.memorySearch,
         humanDelay: entry.humanDelay,
         heartbeat: entry.heartbeat,
@@ -81,6 +82,14 @@ export function resolveAgentConfig(cfg, agentId) {
         tools: entry.tools,
     };
 }
+export function resolveAgentSkillsFilter(cfg, agentId) {
+    const raw = resolveAgentConfig(cfg, agentId)?.skills;
+    if (!raw) {
+        return undefined;
+    }
+    const normalized = raw.map((entry) => String(entry).trim()).filter(Boolean);
+    return normalized.length > 0 ? normalized : [];
+}
 export function resolveAgentModelPrimary(cfg, agentId) {
     const raw = resolveAgentConfig(cfg, agentId)?.model;
     if (!raw) {

package/dist/agents/anthropic-payload-log.js

@@ -2,9 +2,9 @@ import crypto from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { resolveStateDir } from "../config/paths.js";
-import { parseBooleanValue } from "../utils/boolean.js";
-import { resolveUserPath } from "../utils.js";
 import { createSubsystemLogger } from "../logging/subsystem.js";
+import { resolveUserPath } from "../utils.js";
+import { parseBooleanValue } from "../utils/boolean.js";
 const writers = new Map();
 const log = createSubsystemLogger("agent/anthropic-payload");
 function resolvePayloadLogConfig(env) {

package/dist/agents/apply-patch.js

@@ -1,7 +1,7 @@
+import { Type } from "@sinclair/typebox";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
-import { Type } from "@sinclair/typebox";
 import { applyUpdateHunk } from "./apply-patch-update.js";
 import { assertSandboxPath } from "./sandbox-paths.js";
 const BEGIN_PATCH_MARKER = "*** Begin Patch";

package/dist/agents/auth-profiles/oauth.js

@@ -1,12 +1,15 @@
-import { getOAuthApiKey } from "@mariozechner/pi-ai";
+import { getOAuthApiKey, getOAuthProviders, } from "@mariozechner/pi-ai";
 import lockfile from "proper-lockfile";
-import { refreshChutesTokens } from "../chutes-oauth.js";
 import { refreshQwenPortalCredentials } from "../../providers/qwen-portal-oauth.js";
+import { refreshChutesTokens } from "../chutes-oauth.js";
 import { AUTH_STORE_LOCK_OPTIONS, log } from "./constants.js";
 import { formatAuthDoctorHint } from "./doctor.js";
 import { ensureAuthStoreFile, resolveAuthStorePath } from "./paths.js";
 import { suggestOAuthProfileIdForLegacyDefault } from "./repair.js";
 import { ensureAuthProfileStore, saveAuthProfileStore } from "./store.js";
+const OAUTH_PROVIDER_IDS = new Set(getOAuthProviders().map((provider) => provider.id));
+const isOAuthProvider = (provider) => OAUTH_PROVIDER_IDS.has(provider);
+const resolveOAuthProvider = (provider) => isOAuthProvider(provider) ? provider : null;
 function buildOAuthApiKey(provider, credentials) {
     const needsProjectId = provider === "google-gemini-cli" || provider === "google-antigravity";
     return needsProjectId
@@ -50,7 +53,13 @@ async function refreshOAuthTokenWithLock(params) {
                     const newCredentials = await refreshQwenPortalCredentials(cred);
                     return { apiKey: newCredentials.access, newCredentials };
                 })()
-                : await getOAuthApiKey(cred.provider, oauthCreds);
+                : await (async () => {
+                    const oauthProvider = resolveOAuthProvider(cred.provider);
+                    if (!oauthProvider) {
+                        return null;
+                    }
+                    return await getOAuthApiKey(oauthProvider, oauthCreds);
+                })();
         if (!result) {
             return null;
         }

package/dist/agents/auth-profiles/session-override.js

@@ -1,6 +1,6 @@
 import { updateSessionStore } from "../../config/sessions.js";
-import { normalizeProviderId } from "../model-selection.js";
 import { ensureAuthProfileStore, isProfileInCooldown, resolveAuthProfileOrder, } from "../auth-profiles.js";
+import { normalizeProviderId } from "../model-selection.js";
 function isProfileForProvider(params) {
     const entry = params.store.profiles[params.profileId];
     if (!entry?.provider) {

package/dist/agents/bash-tools.exec.d.ts

@@ -1,6 +1,6 @@
 import type { AgentTool } from "@mariozechner/pi-agent-core";
-import { type ExecAsk, type ExecHost, type ExecSecurity } from "../infra/exec-approvals.js";
 import type { BashSandboxConfig } from "./bash-tools.shared.js";
+import { type ExecAsk, type ExecHost, type ExecSecurity } from "../infra/exec-approvals.js";
 export type ExecToolDefaults = {
     host?: ExecHost;
     security?: ExecSecurity;

package/dist/agents/bash-tools.exec.js

@@ -1,6 +1,6 @@
+import { Type } from "@sinclair/typebox";
 import crypto from "node:crypto";
 import path from "node:path";
-import { Type } from "@sinclair/typebox";
 import { addAllowlistEntry, evaluateShellAllowlist, maxAsk, minSecurity, requiresExecApproval, resolveSafeBins, recordAllowlistUse, resolveExecApprovals, resolveExecApprovalsFromFile, } from "../infra/exec-approvals.js";
 import { requestHeartbeatNow } from "../infra/heartbeat-wake.js";
 import { buildNodeShellCommand } from "../infra/node-shell.js";
@@ -8,13 +8,53 @@ import { getShellPathFromLoginShell, resolveShellEnvFallbackTimeoutMs, } from ".
 import { enqueueSystemEvent } from "../infra/system-events.js";
 import { logInfo, logWarn } from "../logger.js";
 import { formatSpawnError, spawnWithFallback } from "../process/spawn-utils.js";
+import { parseAgentSessionKey, resolveAgentIdFromSessionKey } from "../routing/session-key.js";
 import { addSession, appendOutput, createSessionSlug, markBackgrounded, markExited, tail, } from "./bash-process-registry.js";
 import { buildDockerExecArgs, buildSandboxEnv, chunkString, clampNumber, coerceEnv, killSession, readEnvInt, resolveSandboxWorkdir, resolveWorkdir, truncateMiddle, } from "./bash-tools.shared.js";
+import { buildCursorPositionResponse, stripDsrRequests } from "./pty-dsr.js";
+import { getShellConfig, sanitizeBinaryOutput } from "./shell-utils.js";
 import { callGatewayTool } from "./tools/gateway.js";
 import { listNodes, resolveNodeIdFromList } from "./tools/nodes-utils.js";
-import { getShellConfig, sanitizeBinaryOutput } from "./shell-utils.js";
-import { buildCursorPositionResponse, stripDsrRequests } from "./pty-dsr.js";
-import { parseAgentSessionKey, resolveAgentIdFromSessionKey } from "../routing/session-key.js";
+// Security: Blocklist of environment variables that could alter execution flow
+// or inject code when running on non-sandboxed hosts (Gateway/Node).
+const DANGEROUS_HOST_ENV_VARS = new Set([
+    "LD_PRELOAD",
+    "LD_LIBRARY_PATH",
+    "LD_AUDIT",
+    "DYLD_INSERT_LIBRARIES",
+    "DYLD_LIBRARY_PATH",
+    "NODE_OPTIONS",
+    "NODE_PATH",
+    "PYTHONPATH",
+    "PYTHONHOME",
+    "RUBYLIB",
+    "PERL5LIB",
+    "BASH_ENV",
+    "ENV",
+    "GCONV_PATH",
+    "IFS",
+    "SSLKEYLOGFILE",
+]);
+const DANGEROUS_HOST_ENV_PREFIXES = ["DYLD_", "LD_"];
+// Centralized sanitization helper.
+// Throws an error if dangerous variables or PATH modifications are detected on the host.
+function validateHostEnv(env) {
+    for (const key of Object.keys(env)) {
+        const upperKey = key.toUpperCase();
+        // 1. Block known dangerous variables (Fail Closed)
+        if (DANGEROUS_HOST_ENV_PREFIXES.some((prefix) => upperKey.startsWith(prefix))) {
+            throw new Error(`Security Violation: Environment variable '${key}' is forbidden during host execution.`);
+        }
+        if (DANGEROUS_HOST_ENV_VARS.has(upperKey)) {
+            throw new Error(`Security Violation: Environment variable '${key}' is forbidden during host execution.`);
+        }
+        // 2. Strictly block PATH modification on host
+        // Allowing custom PATH on the gateway/node can lead to binary hijacking.
+        if (upperKey === "PATH") {
+            throw new Error("Security Violation: Custom 'PATH' variable is forbidden during host execution.");
+        }
+    }
+}
 const DEFAULT_MAX_OUTPUT = clampNumber(readEnvInt("PI_BASH_MAX_OUTPUT_CHARS"), 200_000, 1_000, 200_000);
 const DEFAULT_PENDING_MAX_OUTPUT = clampNumber(readEnvInt("OPENCLAW_BASH_PENDING_MAX_OUTPUT_CHARS"), 200_000, 1_000, 200_000);
 const DEFAULT_PATH = process.env.PATH ?? "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
@@ -668,6 +708,11 @@ export function createExecTool(defaults) {
                 workdir = resolveWorkdir(rawWorkdir, warnings);
             }
             const baseEnv = coerceEnv(process.env);
+            // Logic: Sandbox gets raw env. Host (gateway/node) must pass validation.
+            // We validate BEFORE merging to prevent any dangerous vars from entering the stream.
+            if (host !== "sandbox" && params.env) {
+                validateHostEnv(params.env);
+            }
             const mergedEnv = params.env ? { ...baseEnv, ...params.env } : baseEnv;
             const env = sandbox
                 ? buildSandboxEnv({
@@ -1067,8 +1112,7 @@ export function createExecTool(defaults) {
                         content: [
                             {
                                 type: "text",
-                                text: `${warningText}` +
-                                    `Approval required (id ${approvalSlug}). ` +
+                                text: `${warningText}Approval required (id ${approvalSlug}). ` +
                                     "Approve to run; updates will arrive after completion.",
                             },
                         ],
@@ -1136,9 +1180,7 @@ export function createExecTool(defaults) {
                     content: [
                         {
                             type: "text",
-                            text: `${getWarningText()}` +
-                                `Command still running (session ${run.session.id}, pid ${run.session.pid ?? "n/a"}). ` +
-                                "Use process (list/poll/log/write/kill/clear/remove) for follow-up.",
+                            text: `${getWarningText()}Command still running (session ${run.session.id}, pid ${run.session.pid ?? "n/a"}). Use process (list/poll/log/write/kill/clear/remove) for follow-up.`,
                         },
                     ],
                     details: {

package/dist/agents/bootstrap-files.d.ts

@@ -1,6 +1,6 @@
 import type { OpenClawConfig } from "../config/config.js";
-import { type WorkspaceBootstrapFile } from "./workspace.js";
 import type { EmbeddedContextFile } from "./pi-embedded-helpers.js";
+import { type WorkspaceBootstrapFile } from "./workspace.js";
 export declare function makeBootstrapWarn(params: {
     sessionLabel: string;
     warn?: (message: string) => void;

package/dist/agents/bootstrap-files.js

@@ -1,6 +1,6 @@
 import { applyBootstrapHookOverrides } from "./bootstrap-hooks.js";
-import { filterBootstrapFilesForSession, loadWorkspaceBootstrapFiles, } from "./workspace.js";
 import { buildBootstrapContextFiles, resolveBootstrapMaxChars } from "./pi-embedded-helpers.js";
+import { filterBootstrapFilesForSession, loadWorkspaceBootstrapFiles, } from "./workspace.js";
 export function makeBootstrapWarn(params) {
     if (!params.warn) {
         return undefined;

package/dist/agents/cache-trace.js

@@ -2,8 +2,8 @@ import crypto from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { resolveStateDir } from "../config/paths.js";
-import { parseBooleanValue } from "../utils/boolean.js";
 import { resolveUserPath } from "../utils.js";
+import { parseBooleanValue } from "../utils/boolean.js";
 const writers = new Map();
 function resolveCacheTraceConfig(params) {
     const env = params.env ?? process.env;

package/dist/agents/cli-credentials.d.ts

@@ -1,5 +1,5 @@
-import { execSync } from "node:child_process";
 import type { OAuthCredentials, OAuthProvider } from "@mariozechner/pi-ai";
+import { execSync } from "node:child_process";
 export declare function resetCliCredentialCachesForTest(): void;
 export type ClaudeCliCredential = {
     type: "oauth";

package/dist/agents/cli-runner/helpers.js

@@ -3,10 +3,10 @@ import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { runExec } from "../../process/exec.js";
-import { buildSystemPromptParams } from "../system-prompt-params.js";
+import { buildTtsSystemPromptHint } from "../../tts/tts.js";
 import { resolveDefaultModelForAgent } from "../model-selection.js";
+import { buildSystemPromptParams } from "../system-prompt-params.js";
 import { buildAgentSystemPrompt } from "../system-prompt.js";
-import { buildTtsSystemPromptHint } from "../../tts/tts.js";
 const CLI_RUN_QUEUE = new Map();
 function escapeRegex(value) {
     return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");

package/dist/agents/cli-runner.js

@@ -1,14 +1,14 @@
 import { resolveHeartbeatPrompt } from "../auto-reply/heartbeat.js";
-import { isTruthyEnvValue } from "../infra/env.js";
 import { shouldLogVerbose } from "../globals.js";
+import { isTruthyEnvValue } from "../infra/env.js";
 import { createSubsystemLogger } from "../logging/subsystem.js";
 import { runCommandWithTimeout } from "../process/exec.js";
 import { resolveUserPath } from "../utils.js";
-import { resolveOpenClawDocsPath } from "./docs-path.js";
 import { resolveSessionAgentIds } from "./agent-scope.js";
 import { makeBootstrapWarn, resolveBootstrapContextForRun } from "./bootstrap-files.js";
 import { resolveCliBackendConfig } from "./cli-backends.js";
 import { appendImagePathsToPrompt, buildCliArgs, buildSystemPrompt, cleanupResumeProcesses, cleanupSuspendedCliProcesses, enqueueCliRun, normalizeCliModel, parseCliJson, parseCliJsonl, resolvePromptInput, resolveSessionIdToSend, resolveSystemPromptUsage, writeCliImages, } from "./cli-runner/helpers.js";
+import { resolveOpenClawDocsPath } from "./docs-path.js";
 import { FailoverError, resolveFailoverStatus } from "./failover-error.js";
 import { classifyFailoverReason, isFailoverErrorMessage } from "./pi-embedded-helpers.js";
 const log = createSubsystemLogger("agent/claude-cli");

package/dist/agents/context-window-guard.js

@@ -8,10 +8,6 @@ function normalizePositiveInt(value) {
     return int > 0 ? int : null;
 }
 export function resolveContextWindowInfo(params) {
-    const fromModel = normalizePositiveInt(params.modelContextWindow);
-    if (fromModel) {
-        return { tokens: fromModel, source: "model" };
-    }
     const fromModelsConfig = (() => {
         const providers = params.cfg?.models?.providers;
         const providerEntry = providers?.[params.provider];
@@ -19,14 +15,17 @@ export function resolveContextWindowInfo(params) {
         const match = models.find((m) => m?.id === params.modelId);
         return normalizePositiveInt(match?.contextWindow);
     })();
-    if (fromModelsConfig) {
-        return { tokens: fromModelsConfig, source: "modelsConfig" };
-    }
-    const fromAgentConfig = normalizePositiveInt(params.cfg?.agents?.defaults?.contextTokens);
-    if (fromAgentConfig) {
-        return { tokens: fromAgentConfig, source: "agentContextTokens" };
+    const fromModel = normalizePositiveInt(params.modelContextWindow);
+    const baseInfo = fromModelsConfig
+        ? { tokens: fromModelsConfig, source: "modelsConfig" }
+        : fromModel
+            ? { tokens: fromModel, source: "model" }
+            : { tokens: Math.floor(params.defaultTokens), source: "default" };
+    const capTokens = normalizePositiveInt(params.cfg?.agents?.defaults?.contextTokens);
+    if (capTokens && capTokens < baseInfo.tokens) {
+        return { tokens: capTokens, source: "agentContextTokens" };
     }
-    return { tokens: Math.floor(params.defaultTokens), source: "default" };
+    return baseInfo;
 }
 export function evaluateContextWindowGuard(params) {
     const warnBelow = Math.max(1, Math.floor(params.warnBelowTokens ?? CONTEXT_WINDOW_WARN_BELOW_TOKENS));

package/dist/agents/model-auth.js

@@ -1,7 +1,7 @@
-import path from "node:path";
 import { getEnvApiKey } from "@mariozechner/pi-ai";
-import { getShellEnvAppliedKeys } from "../infra/shell-env.js";
+import path from "node:path";
 import { formatCliCommand } from "../cli/command-format.js";
+import { getShellEnvAppliedKeys } from "../infra/shell-env.js";
 import { ensureAuthProfileStore, listProfilesForProvider, resolveApiKeyForProfile, resolveAuthProfileOrder, resolveAuthStorePathForDisplay, } from "./auth-profiles.js";
 import { normalizeProviderId } from "./model-selection.js";
 export { ensureAuthProfileStore, resolveAuthProfileOrder } from "./auth-profiles.js";

package/dist/agents/model-fallback.js

@@ -1,7 +1,7 @@
+import { ensureAuthProfileStore, isProfileInCooldown, resolveAuthProfileOrder, } from "./auth-profiles.js";
 import { DEFAULT_MODEL, DEFAULT_PROVIDER } from "./defaults.js";
 import { coerceToFailoverError, describeFailoverError, isFailoverError, isTimeoutError, } from "./failover-error.js";
 import { buildModelAliasIndex, modelKey, parseModelRef, resolveConfiguredModelRef, resolveModelRefFromString, } from "./model-selection.js";
-import { ensureAuthProfileStore, isProfileInCooldown, resolveAuthProfileOrder, } from "./auth-profiles.js";
 function isAbortError(err) {
     if (!err || typeof err !== "object") {
         return false;

package/dist/agents/model-selection.js

@@ -1,6 +1,6 @@
-import { normalizeGoogleModelId } from "./models-config.providers.js";
 import { resolveAgentModelPrimary } from "./agent-scope.js";
 import { DEFAULT_MODEL, DEFAULT_PROVIDER } from "./defaults.js";
+import { normalizeGoogleModelId } from "./models-config.providers.js";
 function normalizeAliasKey(value) {
     return value.trim().toLowerCase();
 }

package/dist/agents/models-config.providers.js

@@ -1,7 +1,7 @@
 import { DEFAULT_COPILOT_API_BASE_URL, resolveCopilotApiToken, } from "../providers/github-copilot-token.js";
 import { ensureAuthProfileStore, listProfilesForProvider } from "./auth-profiles.js";
-import { resolveAwsSdkEnvVarName, resolveEnvApiKey } from "./model-auth.js";
 import { discoverBedrockModels } from "./bedrock-discovery.js";
+import { resolveAwsSdkEnvVarName, resolveEnvApiKey } from "./model-auth.js";
 import { buildSyntheticModelDefinition, SYNTHETIC_BASE_URL, SYNTHETIC_MODEL_CATALOG, } from "./synthetic-models.js";
 import { discoverVeniceModels, VENICE_BASE_URL } from "./venice-models.js";
 const MINIMAX_API_BASE_URL = "https://api.minimax.chat/v1";

package/dist/agents/openclaw-tools.js

@@ -13,8 +13,8 @@ import { createSessionsHistoryTool } from "./tools/sessions-history-tool.js";
 import { createSessionsListTool } from "./tools/sessions-list-tool.js";
 import { createSessionsSendTool } from "./tools/sessions-send-tool.js";
 import { createSessionsSpawnTool } from "./tools/sessions-spawn-tool.js";
-import { createWebFetchTool, createWebSearchTool } from "./tools/web-tools.js";
 import { createTtsTool } from "./tools/tts-tool.js";
+import { createWebFetchTool, createWebSearchTool } from "./tools/web-tools.js";
 export function createOpenClawTools(options) {
     const imageTool = options?.agentDir?.trim()
         ? createImageTool({
@@ -54,6 +54,7 @@ export function createOpenClawTools(options) {
             currentThreadTs: options?.currentThreadTs,
             replyToMode: options?.replyToMode,
             hasRepliedRef: options?.hasRepliedRef,
+            sandboxRoot: options?.sandboxRoot,
         }),
         createTtsTool({
             agentChannel: options?.agentChannel,

package/dist/agents/pi-embedded-block-chunker.d.ts

@@ -2,6 +2,8 @@ export type BlockReplyChunking = {
     minChars: number;
     maxChars: number;
     breakPreference?: "paragraph" | "newline" | "sentence";
+    /** When true, flush eagerly on \n\n paragraph boundaries regardless of minChars. */
+    flushOnParagraph?: boolean;
 };
 export declare class EmbeddedBlockChunker {
     #private;

package/dist/agents/pi-embedded-block-chunker.js

@@ -26,6 +26,12 @@ export class EmbeddedBlockChunker {
         const { force, emit } = params;
         const minChars = Math.max(1, Math.floor(this.#chunking.minChars));
         const maxChars = Math.max(minChars, Math.floor(this.#chunking.maxChars));
+        // When flushOnParagraph is set (chunkMode="newline"), eagerly split on \n\n
+        // boundaries regardless of minChars so each paragraph is sent immediately.
+        if (this.#chunking.flushOnParagraph && !force) {
+            this.#drainParagraphs(emit, maxChars);
+            return;
+        }
         if (this.#buffer.length < minChars && !force) {
             return;
         }
@@ -47,34 +53,9 @@ export class EmbeddedBlockChunker {
                 }
                 return;
             }
-            const breakIdx = breakResult.index;
-            let rawChunk = this.#buffer.slice(0, breakIdx);
-            if (rawChunk.trim().length === 0) {
-                this.#buffer = stripLeadingNewlines(this.#buffer.slice(breakIdx)).trimStart();
+            if (!this.#emitBreakResult(breakResult, emit)) {
                 continue;
             }
-            let nextBuffer = this.#buffer.slice(breakIdx);
-            const fenceSplit = breakResult.fenceSplit;
-            if (fenceSplit) {
-                const closeFence = rawChunk.endsWith("\n")
-                    ? `${fenceSplit.closeFenceLine}\n`
-                    : `\n${fenceSplit.closeFenceLine}\n`;
-                rawChunk = `${rawChunk}${closeFence}`;
-                const reopenFence = fenceSplit.reopenFenceLine.endsWith("\n")
-                    ? fenceSplit.reopenFenceLine
-                    : `${fenceSplit.reopenFenceLine}\n`;
-                nextBuffer = `${reopenFence}${nextBuffer}`;
-            }
-            emit(rawChunk);
-            if (fenceSplit) {
-                this.#buffer = nextBuffer;
-            }
-            else {
-                const nextStart = breakIdx < this.#buffer.length && /\s/.test(this.#buffer[breakIdx])
-                    ? breakIdx + 1
-                    : breakIdx;
-                this.#buffer = stripLeadingNewlines(this.#buffer.slice(nextStart));
-            }
             if (this.#buffer.length < minChars && !force) {
                 return;
             }
@@ -83,6 +64,65 @@ export class EmbeddedBlockChunker {
             }
         }
     }
+    /** Eagerly emit complete paragraphs (text before \n\n) regardless of minChars. */
+    #drainParagraphs(emit, maxChars) {
+        while (this.#buffer.length > 0) {
+            const fenceSpans = parseFenceSpans(this.#buffer);
+            const paragraphBreak = findNextParagraphBreak(this.#buffer, fenceSpans);
+            if (!paragraphBreak || paragraphBreak.index > maxChars) {
+                // No paragraph boundary yet (or the next boundary is too far). If the
+                // buffer exceeds maxChars, fall back to normal break logic to avoid
+                // oversized chunks or unbounded accumulation.
+                if (this.#buffer.length >= maxChars) {
+                    const breakResult = this.#pickBreakIndex(this.#buffer, 1);
+                    if (breakResult.index > 0) {
+                        this.#emitBreakResult(breakResult, emit);
+                        continue;
+                    }
+                }
+                return;
+            }
+            const chunk = this.#buffer.slice(0, paragraphBreak.index);
+            if (chunk.trim().length > 0) {
+                emit(chunk);
+            }
+            this.#buffer = stripLeadingNewlines(this.#buffer.slice(paragraphBreak.index + paragraphBreak.length));
+        }
+    }
+    #emitBreakResult(breakResult, emit) {
+        const breakIdx = breakResult.index;
+        if (breakIdx <= 0) {
+            return false;
+        }
+        let rawChunk = this.#buffer.slice(0, breakIdx);
+        if (rawChunk.trim().length === 0) {
+            this.#buffer = stripLeadingNewlines(this.#buffer.slice(breakIdx)).trimStart();
+            return false;
+        }
+        let nextBuffer = this.#buffer.slice(breakIdx);
+        const fenceSplit = breakResult.fenceSplit;
+        if (fenceSplit) {
+            const closeFence = rawChunk.endsWith("\n")
+                ? `${fenceSplit.closeFenceLine}\n`
+                : `\n${fenceSplit.closeFenceLine}\n`;
+            rawChunk = `${rawChunk}${closeFence}`;
+            const reopenFence = fenceSplit.reopenFenceLine.endsWith("\n")
+                ? fenceSplit.reopenFenceLine
+                : `${fenceSplit.reopenFenceLine}\n`;
+            nextBuffer = `${reopenFence}${nextBuffer}`;
+        }
+        emit(rawChunk);
+        if (fenceSplit) {
+            this.#buffer = nextBuffer;
+        }
+        else {
+            const nextStart = breakIdx < this.#buffer.length && /\s/.test(this.#buffer[breakIdx])
+                ? breakIdx + 1
+                : breakIdx;
+            this.#buffer = stripLeadingNewlines(this.#buffer.slice(nextStart));
+        }
+        return true;
+    }
     #pickSoftBreakIndex(buffer, minCharsOverride) {
         const minChars = Math.max(1, Math.floor(minCharsOverride ?? this.#chunking.minChars));
         if (buffer.length < minChars) {
@@ -223,3 +263,22 @@ function stripLeadingNewlines(value) {
     }
     return i > 0 ? value.slice(i) : value;
 }
+function findNextParagraphBreak(buffer, fenceSpans, startIndex = 0) {
+    if (startIndex < 0) {
+        return null;
+    }
+    const re = /\n[\t ]*\n+/g;
+    re.lastIndex = startIndex;
+    let match;
+    while ((match = re.exec(buffer)) !== null) {
+        const index = match.index ?? -1;
+        if (index < 0) {
+            continue;
+        }
+        if (!isSafeFenceBreak(fenceSpans, index)) {
+            continue;
+        }
+        return { index, length: match[0].length };
+    }
+    return null;
+}

package/dist/agents/pi-embedded-helpers/errors.d.ts

@@ -23,6 +23,7 @@ export declare function isRateLimitAssistantError(msg: AssistantMessage | undefi
 export declare function isRateLimitErrorMessage(raw: string): boolean;
 export declare function isTimeoutErrorMessage(raw: string): boolean;
 export declare function isBillingErrorMessage(raw: string): boolean;
+export declare function isMissingToolCallInputError(raw: string): boolean;
 export declare function isBillingAssistantError(msg: AssistantMessage | undefined): boolean;
 export declare function isAuthErrorMessage(raw: string): boolean;
 export declare function isOverloadedErrorMessage(raw: string): boolean;

package/dist/agents/pi-embedded-helpers/errors.js

@@ -284,6 +284,11 @@ export function formatAssistantErrorText(msg, opts) {
         return ("Message ordering conflict - please try again. " +
             "If this persists, use /new to start a fresh session.");
     }
+    if (isMissingToolCallInputError(raw)) {
+        return ("Session history looks corrupted (tool call input missing). " +
+            "Use /new to start a fresh session. " +
+            "If this keeps happening, reset the session or delete the corrupted session transcript.");
+    }
     const invalidRequest = raw.match(/"type":"invalid_request_error".*?"message":"([^"]+)"/);
     if (invalidRequest?.[1]) {
         return `LLM request rejected: ${invalidRequest[1]}`;
@@ -380,6 +385,8 @@ const ERROR_PATTERNS = {
         "invalid request format",
     ],
 };
+const TOOL_CALL_INPUT_MISSING_RE = /tool_(?:use|call)\.(?:input|arguments).*?(?:field required|required)/i;
+const TOOL_CALL_INPUT_PATH_RE = /messages\.\d+\.content\.\d+\.tool_(?:use|call)\.(?:input|arguments)/i;
 const IMAGE_DIMENSION_ERROR_RE = /image dimensions exceed max allowed size for many-image requests:\s*(\d+)\s*pixels/i;
 const IMAGE_DIMENSION_PATH_RE = /messages\.(\d+)\.content\.(\d+)\.image/i;
 const IMAGE_SIZE_ERROR_RE = /image exceeds\s*(\d+(?:\.\d+)?)\s*mb/i;
@@ -410,6 +417,12 @@ export function isBillingErrorMessage(raw) {
             value.includes("payment") ||
             value.includes("plan")));
 }
+export function isMissingToolCallInputError(raw) {
+    if (!raw) {
+        return false;
+    }
+    return TOOL_CALL_INPUT_MISSING_RE.test(raw) || TOOL_CALL_INPUT_PATH_RE.test(raw);
+}
 export function isBillingAssistantError(msg) {
     if (!msg || msg.stopReason !== "error") {
         return false;

package/dist/agents/pi-embedded-runner/compact.d.ts

@@ -1,9 +1,9 @@
 import type { ReasoningLevel, ThinkLevel } from "../../auto-reply/thinking.js";
 import type { OpenClawConfig } from "../../config/config.js";
-import { type enqueueCommand } from "../../process/command-queue.js";
 import type { ExecElevatedDefaults } from "../bash-tools.js";
-import { type SkillSnapshot } from "../skills.js";
 import type { EmbeddedPiCompactResult } from "./types.js";
+import { type enqueueCommand } from "../../process/command-queue.js";
+import { type SkillSnapshot } from "../skills.js";
 export type CompactEmbeddedPiSessionParams = {
     sessionId: string;
     sessionKey?: string;