@gguf/claw 2026.2.1 → 2026.2.3

package/dist/memory/embeddings.js

@@ -3,6 +3,14 @@ import { resolveUserPath } from "../utils.js";
 import { createGeminiEmbeddingProvider } from "./embeddings-gemini.js";
 import { createOpenAiEmbeddingProvider } from "./embeddings-openai.js";
 import { importNodeLlamaCpp } from "./node-llama.js";
+function sanitizeAndNormalizeEmbedding(vec) {
+    const sanitized = vec.map((value) => (Number.isFinite(value) ? value : 0));
+    const magnitude = Math.sqrt(sanitized.reduce((sum, value) => sum + value * value, 0));
+    if (magnitude < 1e-10) {
+        return sanitized;
+    }
+    return sanitized.map((value) => value / magnitude);
+}
 const DEFAULT_LOCAL_MODEL = "hf:ggml-org/embeddinggemma-300M-GGUF/embeddinggemma-300M-Q8_0.gguf";
 function canAutoSelectLocal(options) {
     const modelPath = options.local?.modelPath?.trim();
@@ -51,13 +59,13 @@ async function createLocalEmbeddingProvider(options) {
         embedQuery: async (text) => {
             const ctx = await ensureContext();
             const embedding = await ctx.getEmbeddingFor(text);
-            return Array.from(embedding.vector);
+            return sanitizeAndNormalizeEmbedding(Array.from(embedding.vector));
         },
         embedBatch: async (texts) => {
             const ctx = await ensureContext();
             const embeddings = await Promise.all(texts.map(async (text) => {
                 const embedding = await ctx.getEmbeddingFor(text);
-                return Array.from(embedding.vector);
+                return sanitizeAndNormalizeEmbedding(Array.from(embedding.vector));
             }));
             return embeddings;
         },

package/dist/memory/manager-cache-key.js

@@ -1,5 +1,5 @@
-import { hashText } from "./internal.js";
 import { fingerprintHeaderNames } from "./headers-fingerprint.js";
+import { hashText } from "./internal.js";
 export function computeMemoryManagerCacheKey(params) {
     const settings = params.settings;
     const fingerprint = hashText(JSON.stringify({

package/dist/memory/manager.js

@@ -1,25 +1,25 @@
+import chokidar from "chokidar";
 import { randomUUID } from "node:crypto";
 import fsSync from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
-import chokidar from "chokidar";
 import { resolveAgentDir, resolveAgentWorkspaceDir } from "../agents/agent-scope.js";
 import { resolveMemorySearchConfig } from "../agents/memory-search.js";
 import { resolveSessionTranscriptsDirForAgent } from "../config/sessions/paths.js";
 import { createSubsystemLogger } from "../logging/subsystem.js";
 import { onSessionTranscriptUpdate } from "../sessions/transcript-events.js";
 import { resolveUserPath } from "../utils.js";
-import { createEmbeddingProvider, } from "./embeddings.js";
+import { runGeminiEmbeddingBatches } from "./batch-gemini.js";
+import { OPENAI_BATCH_ENDPOINT, runOpenAiEmbeddingBatches, } from "./batch-openai.js";
 import { DEFAULT_GEMINI_EMBEDDING_MODEL } from "./embeddings-gemini.js";
 import { DEFAULT_OPENAI_EMBEDDING_MODEL } from "./embeddings-openai.js";
-import { OPENAI_BATCH_ENDPOINT, runOpenAiEmbeddingBatches, } from "./batch-openai.js";
-import { runGeminiEmbeddingBatches } from "./batch-gemini.js";
-import { buildFileEntry, chunkMarkdown, ensureDir, hashText, isMemoryPath, listMemoryFiles, normalizeExtraMemoryPaths, parseEmbedding, } from "./internal.js";
+import { createEmbeddingProvider, } from "./embeddings.js";
 import { bm25RankToScore, buildFtsQuery, mergeHybridResults } from "./hybrid.js";
+import { buildFileEntry, chunkMarkdown, ensureDir, hashText, isMemoryPath, listMemoryFiles, normalizeExtraMemoryPaths, parseEmbedding, } from "./internal.js";
 import { searchKeyword, searchVector } from "./manager-search.js";
 import { ensureMemoryIndexSchema } from "./memory-schema.js";
-import { requireNodeSqlite } from "./sqlite.js";
 import { loadSqliteVecExtension } from "./sqlite-vec.js";
+import { requireNodeSqlite } from "./sqlite.js";
 const META_KEY = "memory_index_meta_v1";
 const SNIPPET_MAX_CHARS = 700;
 const VECTOR_TABLE = "chunks_vec";

package/dist/memory/provider-key.js

@@ -1,5 +1,5 @@
-import { hashText } from "./internal.js";
 import { fingerprintHeaderNames } from "./headers-fingerprint.js";
+import { hashText } from "./internal.js";
 export function computeEmbeddingProviderKey(params) {
     if (params.openAi) {
         const headerNames = fingerprintHeaderNames(params.openAi.headers);

package/dist/node-host/runner.js

@@ -1,23 +1,23 @@
-import crypto from "node:crypto";
 import { spawn } from "node:child_process";
+import crypto from "node:crypto";
 import fs from "node:fs";
 import fsPromises from "node:fs/promises";
 import path from "node:path";
-import { addAllowlistEntry, analyzeArgvCommand, evaluateExecAllowlist, evaluateShellAllowlist, requiresExecApproval, normalizeExecApprovals, recordAllowlistUse, resolveExecApprovals, resolveSafeBins, ensureExecApprovals, readExecApprovalsSnapshot, resolveExecApprovalsSocketPath, saveExecApprovals, } from "../infra/exec-approvals.js";
-import { requestExecHostViaSocket, } from "../infra/exec-host.js";
-import { getMachineDisplayName } from "../infra/machine-name.js";
-import { loadOrCreateDeviceIdentity } from "../infra/device-identity.js";
-import { loadConfig } from "../config/config.js";
+import { resolveAgentConfig } from "../agents/agent-scope.js";
 import { resolveBrowserConfig } from "../browser/config.js";
 import { createBrowserControlContext, startBrowserControlServiceFromConfig, } from "../browser/control-service.js";
 import { createBrowserRouteDispatcher } from "../browser/routes/dispatcher.js";
-import { detectMime } from "../media/mime.js";
-import { resolveAgentConfig } from "../agents/agent-scope.js";
+import { loadConfig } from "../config/config.js";
+import { GatewayClient } from "../gateway/client.js";
+import { loadOrCreateDeviceIdentity } from "../infra/device-identity.js";
+import { addAllowlistEntry, analyzeArgvCommand, evaluateExecAllowlist, evaluateShellAllowlist, requiresExecApproval, normalizeExecApprovals, recordAllowlistUse, resolveExecApprovals, resolveSafeBins, ensureExecApprovals, readExecApprovalsSnapshot, resolveExecApprovalsSocketPath, saveExecApprovals, } from "../infra/exec-approvals.js";
+import { requestExecHostViaSocket, } from "../infra/exec-host.js";
+import { getMachineDisplayName } from "../infra/machine-name.js";
 import { ensureOpenClawCliOnPath } from "../infra/path-env.js";
-import { VERSION } from "../version.js";
+import { detectMime } from "../media/mime.js";
 import { GATEWAY_CLIENT_MODES, GATEWAY_CLIENT_NAMES } from "../utils/message-channel.js";
+import { VERSION } from "../version.js";
 import { ensureNodeHostConfig, saveNodeHostConfig } from "./config.js";
-import { GatewayClient } from "../gateway/client.js";
 function resolveExecSecurity(value) {
     return value === "deny" || value === "allowlist" || value === "full" ? value : "allowlist";
 }

package/dist/plugins/discovery.d.ts

@@ -1,5 +1,5 @@
-import { type OpenClawPackageManifest } from "./manifest.js";
 import type { PluginDiagnostic, PluginOrigin } from "./types.js";
+import { type OpenClawPackageManifest } from "./manifest.js";
 export type PluginCandidate = {
     idHint: string;
     source: string;

package/dist/plugins/hook-runner-global.d.ts

@@ -4,8 +4,8 @@
  * Singleton hook runner that's initialized when plugins are loaded
  * and can be called from anywhere in the codebase.
  */
-import { type HookRunner } from "./hooks.js";
 import type { PluginRegistry } from "./registry.js";
+import { type HookRunner } from "./hooks.js";
 /**
  * Initialize the global hook runner with a plugin registry.
  * Called once when plugins are loaded during gateway startup.

package/dist/plugins/hooks.js

@@ -183,8 +183,10 @@ export function createHookRunner(registry, options = {}) {
         let current = event.message;
         for (const hook of hooks) {
             try {
+                // oxlint-disable-next-line typescript/no-explicit-any
                 const out = hook.handler({ ...event, message: current }, ctx);
                 // Guard against accidental async handlers (this hook is sync-only).
+                // oxlint-disable-next-line typescript/no-explicit-any
                 if (out && typeof out.then === "function") {
                     const msg = `[hooks] tool_result_persist handler from ${hook.pluginId} returned a Promise; ` +
                         `this hook is synchronous and the result was ignored.`;

package/dist/plugins/http-registry.js

@@ -1,5 +1,5 @@
-import { requireActivePluginRegistry } from "./runtime.js";
 import { normalizePluginHttpPath } from "./http-path.js";
+import { requireActivePluginRegistry } from "./runtime.js";
 export function registerPluginHttpRoute(params) {
     const registry = params.registry ?? requireActivePluginRegistry();
     const routes = registry.httpRoutes ?? [];

package/dist/plugins/install.js

@@ -2,9 +2,9 @@ import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { MANIFEST_KEY } from "../compat/legacy-names.js";
+import { extractArchive, fileExists, readJsonFile, resolveArchiveKind, resolvePackedRootDir, } from "../infra/archive.js";
 import { runCommandWithTimeout } from "../process/exec.js";
 import { CONFIG_DIR, resolveUserPath } from "../utils.js";
-import { extractArchive, fileExists, readJsonFile, resolveArchiveKind, resolvePackedRootDir, } from "../infra/archive.js";
 const defaultLogger = {};
 function unscopedPackageName(name) {
     const trimmed = name.trim();
@@ -18,11 +18,23 @@ function safeDirName(input) {
     if (!trimmed) {
         return trimmed;
     }
-    return trimmed.replaceAll("/", "__");
+    return trimmed.replaceAll("/", "__").replaceAll("\\", "__");
 }
 function safeFileName(input) {
     return safeDirName(input);
 }
+function validatePluginId(pluginId) {
+    if (!pluginId) {
+        return "invalid plugin name: missing";
+    }
+    if (pluginId === "." || pluginId === "..") {
+        return "invalid plugin name: reserved path segment";
+    }
+    if (pluginId.includes("/") || pluginId.includes("\\")) {
+        return "invalid plugin name: path separators not allowed";
+    }
+    return null;
+}
 async function ensureOpenClawExtensions(manifest) {
     const extensions = manifest[MANIFEST_KEY]?.extensions;
     if (!Array.isArray(extensions)) {
@@ -38,7 +50,28 @@ export function resolvePluginInstallDir(pluginId, extensionsDir) {
     const extensionsBase = extensionsDir
         ? resolveUserPath(extensionsDir)
         : path.join(CONFIG_DIR, "extensions");
-    return path.join(extensionsBase, safeDirName(pluginId));
+    const pluginIdError = validatePluginId(pluginId);
+    if (pluginIdError) {
+        throw new Error(pluginIdError);
+    }
+    const targetDirResult = resolveSafeInstallDir(extensionsBase, pluginId);
+    if (!targetDirResult.ok) {
+        throw new Error(targetDirResult.error);
+    }
+    return targetDirResult.path;
+}
+function resolveSafeInstallDir(extensionsDir, pluginId) {
+    const targetDir = path.join(extensionsDir, safeDirName(pluginId));
+    const resolvedBase = path.resolve(extensionsDir);
+    const resolvedTarget = path.resolve(targetDir);
+    const relative = path.relative(resolvedBase, resolvedTarget);
+    if (!relative ||
+        relative === ".." ||
+        relative.startsWith(`..${path.sep}`) ||
+        path.isAbsolute(relative)) {
+        return { ok: false, error: "invalid plugin name: path traversal detected" };
+    }
+    return { ok: true, path: targetDir };
 }
 async function installPluginFromPackageDir(params) {
     const logger = params.logger ?? defaultLogger;
@@ -65,6 +98,10 @@ async function installPluginFromPackageDir(params) {
     }
     const pkgName = typeof manifest.name === "string" ? manifest.name : "";
     const pluginId = pkgName ? unscopedPackageName(pkgName) : "plugin";
+    const pluginIdError = validatePluginId(pluginId);
+    if (pluginIdError) {
+        return { ok: false, error: pluginIdError };
+    }
     if (params.expectedPluginId && params.expectedPluginId !== pluginId) {
         return {
             ok: false,
@@ -75,7 +112,11 @@ async function installPluginFromPackageDir(params) {
         ? resolveUserPath(params.extensionsDir)
         : path.join(CONFIG_DIR, "extensions");
     await fs.mkdir(extensionsDir, { recursive: true });
-    const targetDir = path.join(extensionsDir, safeDirName(pluginId));
+    const targetDirResult = resolveSafeInstallDir(extensionsDir, pluginId);
+    if (!targetDirResult.ok) {
+        return { ok: false, error: targetDirResult.error };
+    }
+    const targetDir = targetDirResult.path;
     if (mode === "install" && (await fileExists(targetDir))) {
         return {
             ok: false,
@@ -221,6 +262,10 @@ export async function installPluginFromFile(params) {
     await fs.mkdir(extensionsDir, { recursive: true });
     const base = path.basename(filePath, path.extname(filePath));
     const pluginId = base || "plugin";
+    const pluginIdError = validatePluginId(pluginId);
+    if (pluginIdError) {
+        return { ok: false, error: pluginIdError };
+    }
     const targetFile = path.join(extensionsDir, `${safeFileName(pluginId)}${path.extname(filePath)}`);
     if (mode === "install" && (await fileExists(targetFile))) {
         return { ok: false, error: `plugin already exists: ${targetFile} (delete it first)` };

package/dist/plugins/loader.d.ts

@@ -1,7 +1,7 @@
 import type { OpenClawConfig } from "../config/config.js";
 import type { GatewayRequestHandler } from "../gateway/server-methods/types.js";
-import { type PluginRegistry } from "./registry.js";
 import type { PluginLogger } from "./types.js";
+import { type PluginRegistry } from "./registry.js";
 export type PluginLoadResult = PluginRegistry;
 export type PluginLoadOptions = {
     config?: OpenClawConfig;

package/dist/plugins/loader.js

@@ -1,17 +1,17 @@
+import { createJiti } from "jiti";
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
-import { createJiti } from "jiti";
 import { createSubsystemLogger } from "../logging/subsystem.js";
 import { resolveUserPath } from "../utils.js";
-import { discoverOpenClawPlugins } from "./discovery.js";
-import { loadPluginManifestRegistry } from "./manifest-registry.js";
+import { clearPluginCommands } from "./commands.js";
 import { normalizePluginsConfig, resolveEnableState, resolveMemorySlotDecision, } from "./config-state.js";
+import { discoverOpenClawPlugins } from "./discovery.js";
 import { initializeGlobalHookRunner } from "./hook-runner-global.js";
-import { clearPluginCommands } from "./commands.js";
+import { loadPluginManifestRegistry } from "./manifest-registry.js";
 import { createPluginRegistry } from "./registry.js";
-import { createPluginRuntime } from "./runtime/index.js";
 import { setActivePluginRegistry } from "./runtime.js";
+import { createPluginRuntime } from "./runtime/index.js";
 import { validateJsonSchemaValue } from "./schema-validator.js";
 const registryCache = new Map();
 const defaultLogger = () => createSubsystemLogger("plugins");

package/dist/plugins/manifest-registry.d.ts

@@ -1,6 +1,6 @@
 import type { OpenClawConfig } from "../config/config.js";
-import { type PluginCandidate } from "./discovery.js";
 import type { PluginConfigUiHint, PluginDiagnostic, PluginKind, PluginOrigin } from "./types.js";
+import { type PluginCandidate } from "./discovery.js";
 export type PluginManifestRecord = {
     id: string;
     name?: string;

package/dist/plugins/manifest.d.ts

@@ -1,5 +1,5 @@
-import { MANIFEST_KEY } from "../compat/legacy-names.js";
 import type { PluginConfigUiHint, PluginKind } from "./types.js";
+import { MANIFEST_KEY } from "../compat/legacy-names.js";
 export declare const PLUGIN_MANIFEST_FILENAME = "openclaw.plugin.json";
 export declare const PLUGIN_MANIFEST_FILENAMES: readonly ["openclaw.plugin.json"];
 export type PluginManifest = {

package/dist/plugins/providers.d.ts

@@ -1,5 +1,5 @@
-import { type PluginLoadOptions } from "./loader.js";
 import type { ProviderPlugin } from "./types.js";
+import { type PluginLoadOptions } from "./loader.js";
 export declare function resolvePluginProviders(params: {
     config?: PluginLoadOptions["config"];
     workspaceDir?: string;

package/dist/plugins/registry.d.ts

@@ -2,10 +2,10 @@ import type { AnyAgentTool } from "../agents/tools/common.js";
 import type { ChannelDock } from "../channels/dock.js";
 import type { ChannelPlugin } from "../channels/plugins/types.js";
 import type { GatewayRequestHandler, GatewayRequestHandlers } from "../gateway/server-methods/types.js";
-import { registerInternalHook } from "../hooks/internal-hooks.js";
-import type { OpenClawPluginApi, OpenClawPluginChannelRegistration, OpenClawPluginCliRegistrar, OpenClawPluginCommandDefinition, OpenClawPluginHttpHandler, OpenClawPluginHttpRouteHandler, OpenClawPluginHookOptions, ProviderPlugin, OpenClawPluginService, OpenClawPluginToolFactory, PluginConfigUiHint, PluginDiagnostic, PluginLogger, PluginOrigin, PluginKind, PluginHookName, PluginHookHandlerMap, PluginHookRegistration as TypedPluginHookRegistration } from "./types.js";
-import type { PluginRuntime } from "./runtime/types.js";
 import type { HookEntry } from "../hooks/types.js";
+import type { PluginRuntime } from "./runtime/types.js";
+import type { OpenClawPluginApi, OpenClawPluginChannelRegistration, OpenClawPluginCliRegistrar, OpenClawPluginCommandDefinition, OpenClawPluginHttpHandler, OpenClawPluginHttpRouteHandler, OpenClawPluginHookOptions, ProviderPlugin, OpenClawPluginService, OpenClawPluginToolFactory, PluginConfigUiHint, PluginDiagnostic, PluginLogger, PluginOrigin, PluginKind, PluginHookName, PluginHookHandlerMap, PluginHookRegistration as TypedPluginHookRegistration } from "./types.js";
+import { registerInternalHook } from "../hooks/internal-hooks.js";
 export type PluginToolRegistration = {
     pluginId: string;
     factory: OpenClawPluginToolFactory;

package/dist/plugins/registry.js

@@ -1,7 +1,7 @@
+import path from "node:path";
 import { registerInternalHook } from "../hooks/internal-hooks.js";
 import { resolveUserPath } from "../utils.js";
 import { registerPluginCommand } from "./commands.js";
-import path from "node:path";
 import { normalizePluginHttpPath } from "./http-path.js";
 export function createPluginRegistry(registryParams) {
     const registry = {

package/dist/plugins/runtime/index.js

@@ -1,30 +1,31 @@
 import { createRequire } from "node:module";
+import { resolveEffectiveMessagesConfig, resolveHumanDelayConfig } from "../../agents/identity.js";
+import { createMemoryGetTool, createMemorySearchTool } from "../../agents/tools/memory-tool.js";
+import { handleSlackAction } from "../../agents/tools/slack-actions.js";
+import { handleWhatsAppAction } from "../../agents/tools/whatsapp-actions.js";
 import { chunkByNewline, chunkMarkdownText, chunkMarkdownTextWithMode, chunkText, chunkTextWithMode, resolveChunkMode, resolveTextChunkLimit, } from "../../auto-reply/chunk.js";
 import { hasControlCommand, isControlCommandMessage, shouldComputeCommandAuthorized, } from "../../auto-reply/command-detection.js";
 import { shouldHandleTextCommands } from "../../auto-reply/commands-registry.js";
-import { createInboundDebouncer, resolveInboundDebounceMs, } from "../../auto-reply/inbound-debounce.js";
 import { formatAgentEnvelope, formatInboundEnvelope, resolveEnvelopeFormatOptions, } from "../../auto-reply/envelope.js";
+import { createInboundDebouncer, resolveInboundDebounceMs, } from "../../auto-reply/inbound-debounce.js";
 import { dispatchReplyFromConfig } from "../../auto-reply/reply/dispatch-from-config.js";
+import { finalizeInboundContext } from "../../auto-reply/reply/inbound-context.js";
 import { buildMentionRegexes, matchesMentionPatterns, matchesMentionWithExplicit, } from "../../auto-reply/reply/mentions.js";
 import { dispatchReplyWithBufferedBlockDispatcher } from "../../auto-reply/reply/provider-dispatcher.js";
 import { createReplyDispatcherWithTyping } from "../../auto-reply/reply/reply-dispatcher.js";
-import { finalizeInboundContext } from "../../auto-reply/reply/inbound-context.js";
-import { resolveEffectiveMessagesConfig, resolveHumanDelayConfig } from "../../agents/identity.js";
-import { createMemoryGetTool, createMemorySearchTool } from "../../agents/tools/memory-tool.js";
-import { handleSlackAction } from "../../agents/tools/slack-actions.js";
-import { handleWhatsAppAction } from "../../agents/tools/whatsapp-actions.js";
 import { removeAckReactionAfterReply, shouldAckReaction } from "../../channels/ack-reactions.js";
 import { resolveCommandAuthorizedFromAuthorizers } from "../../channels/command-gating.js";
-import { recordInboundSession } from "../../channels/session.js";
 import { discordMessageActions } from "../../channels/plugins/actions/discord.js";
 import { signalMessageActions } from "../../channels/plugins/actions/signal.js";
 import { telegramMessageActions } from "../../channels/plugins/actions/telegram.js";
 import { createWhatsAppLoginTool } from "../../channels/plugins/agent-tools/whatsapp-login.js";
+import { recordInboundSession } from "../../channels/session.js";
 import { monitorWebChannel } from "../../channels/web/index.js";
+import { registerMemoryCli } from "../../cli/memory-cli.js";
+import { loadConfig, writeConfigFile } from "../../config/config.js";
 import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention, } from "../../config/group-policy.js";
 import { resolveMarkdownTableMode } from "../../config/markdown-tables.js";
 import { resolveStateDir } from "../../config/paths.js";
-import { loadConfig, writeConfigFile } from "../../config/config.js";
 import { readSessionUpdatedAt, recordSessionMetaFromInbound, resolveStorePath, updateLastRoute, } from "../../config/sessions.js";
 import { auditDiscordChannelPermissions } from "../../discord/audit.js";
 import { listDiscordDirectoryGroupsLive, listDiscordDirectoryPeersLive, } from "../../discord/directory-live.js";
@@ -33,15 +34,20 @@ import { probeDiscord } from "../../discord/probe.js";
 import { resolveDiscordChannelAllowlist } from "../../discord/resolve-channels.js";
 import { resolveDiscordUserAllowlist } from "../../discord/resolve-users.js";
 import { sendMessageDiscord, sendPollDiscord } from "../../discord/send.js";
-import { getChannelActivity, recordChannelActivity } from "../../infra/channel-activity.js";
-import { enqueueSystemEvent } from "../../infra/system-events.js";
+import { shouldLogVerbose } from "../../globals.js";
 import { monitorIMessageProvider } from "../../imessage/monitor.js";
 import { probeIMessage } from "../../imessage/probe.js";
 import { sendMessageIMessage } from "../../imessage/send.js";
-import { shouldLogVerbose } from "../../globals.js";
-import { convertMarkdownTables } from "../../markdown/tables.js";
+import { getChannelActivity, recordChannelActivity } from "../../infra/channel-activity.js";
+import { enqueueSystemEvent } from "../../infra/system-events.js";
+import { listLineAccountIds, normalizeAccountId as normalizeLineAccountId, resolveDefaultLineAccountId, resolveLineAccount, } from "../../line/accounts.js";
+import { monitorLineProvider } from "../../line/monitor.js";
+import { probeLineBot } from "../../line/probe.js";
+import { createQuickReplyItems, pushMessageLine, pushMessagesLine, pushFlexMessage, pushTemplateMessage, pushLocationMessage, pushTextMessageWithQuickReplies, sendMessageLine, } from "../../line/send.js";
+import { buildTemplateMessageFromPayload } from "../../line/template-messages.js";
 import { getChildLogger } from "../../logging.js";
 import { normalizeLogLevel } from "../../logging/levels.js";
+import { convertMarkdownTables } from "../../markdown/tables.js";
 import { isVoiceCompatibleAudio } from "../../media/audio.js";
 import { mediaKindFromMime } from "../../media/constants.js";
 import { fetchRemoteMedia } from "../../media/fetch.js";
@@ -55,8 +61,8 @@ import { resolveAgentRoute } from "../../routing/resolve-route.js";
 import { monitorSignalProvider } from "../../signal/index.js";
 import { probeSignal } from "../../signal/probe.js";
 import { sendMessageSignal } from "../../signal/send.js";
-import { monitorSlackProvider } from "../../slack/index.js";
 import { listSlackDirectoryGroupsLive, listSlackDirectoryPeersLive, } from "../../slack/directory-live.js";
+import { monitorSlackProvider } from "../../slack/index.js";
 import { probeSlack } from "../../slack/probe.js";
 import { resolveSlackChannelAllowlist } from "../../slack/resolve-channels.js";
 import { resolveSlackUserAllowlist } from "../../slack/resolve-users.js";
@@ -66,20 +72,14 @@ import { monitorTelegramProvider } from "../../telegram/monitor.js";
 import { probeTelegram } from "../../telegram/probe.js";
 import { sendMessageTelegram } from "../../telegram/send.js";
 import { resolveTelegramToken } from "../../telegram/token.js";
-import { loadWebMedia } from "../../web/media.js";
+import { textToSpeechTelephony } from "../../tts/tts.js";
 import { getActiveWebListener } from "../../web/active-listener.js";
 import { getWebAuthAgeMs, logoutWeb, logWebSelfId, readWebSelfId, webAuthExists, } from "../../web/auth-store.js";
-import { loginWeb } from "../../web/login.js";
 import { startWebLoginWithQr, waitForWebLogin } from "../../web/login-qr.js";
+import { loginWeb } from "../../web/login.js";
+import { loadWebMedia } from "../../web/media.js";
 import { sendMessageWhatsApp, sendPollWhatsApp } from "../../web/outbound.js";
-import { registerMemoryCli } from "../../cli/memory-cli.js";
 import { formatNativeDependencyHint } from "./native-deps.js";
-import { textToSpeechTelephony } from "../../tts/tts.js";
-import { listLineAccountIds, normalizeAccountId as normalizeLineAccountId, resolveDefaultLineAccountId, resolveLineAccount, } from "../../line/accounts.js";
-import { probeLineBot } from "../../line/probe.js";
-import { createQuickReplyItems, pushMessageLine, pushMessagesLine, pushFlexMessage, pushTemplateMessage, pushLocationMessage, pushTextMessageWithQuickReplies, sendMessageLine, } from "../../line/send.js";
-import { monitorLineProvider } from "../../line/monitor.js";
-import { buildTemplateMessageFromPayload } from "../../line/template-messages.js";
 let cachedVersion = null;
 function resolveVersion() {
     if (cachedVersion) {

package/dist/plugins/status.d.ts

@@ -1,5 +1,5 @@
-import { loadConfig } from "../config/config.js";
 import type { PluginRegistry } from "./registry.js";
+import { loadConfig } from "../config/config.js";
 export type PluginStatusReport = PluginRegistry & {
     workspaceDir?: string;
 };

package/dist/plugins/types.d.ts

@@ -1,19 +1,19 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-import type { Command } from "commander";
 import type { AgentMessage } from "@mariozechner/pi-agent-core";
+import type { Command } from "commander";
+import type { IncomingMessage, ServerResponse } from "node:http";
 import type { AuthProfileCredential, OAuthCredential } from "../agents/auth-profiles/types.js";
 import type { AnyAgentTool } from "../agents/tools/common.js";
+import type { ReplyPayload } from "../auto-reply/types.js";
 import type { ChannelDock } from "../channels/dock.js";
 import type { ChannelPlugin } from "../channels/plugins/types.js";
+import type { createVpsAwareOAuthHandlers } from "../commands/oauth-flow.js";
 import type { OpenClawConfig } from "../config/config.js";
+import type { ModelProviderConfig } from "../config/types.js";
+import type { GatewayRequestHandler } from "../gateway/server-methods/types.js";
 import type { InternalHookHandler } from "../hooks/internal-hooks.js";
 import type { HookEntry } from "../hooks/types.js";
-import type { ModelProviderConfig } from "../config/types.js";
 import type { RuntimeEnv } from "../runtime.js";
-import type { ReplyPayload } from "../auto-reply/types.js";
 import type { WizardPrompter } from "../wizard/prompts.js";
-import type { createVpsAwareOAuthHandlers } from "../commands/oauth-flow.js";
-import type { GatewayRequestHandler } from "../gateway/server-methods/types.js";
 import type { PluginRuntime } from "./runtime/types.js";
 export type { PluginRuntime } from "./runtime/types.js";
 export type PluginLogger = {

package/dist/plugins/update.js

@@ -121,7 +121,18 @@ export async function updateNpmInstalledPlugins(params) {
             });
             continue;
         }
-        const installPath = record.installPath ?? resolvePluginInstallDir(pluginId);
+        let installPath;
+        try {
+            installPath = record.installPath ?? resolvePluginInstallDir(pluginId);
+        }
+        catch (err) {
+            outcomes.push({
+                pluginId,
+                status: "error",
+                message: `Invalid install path for "${pluginId}": ${String(err)}`,
+            });
+            continue;
+        }
         const currentVersion = await readInstalledPackageVersion(installPath);
         if (params.dryRun) {
             let probe;

package/dist/process/exec.js

@@ -5,6 +5,27 @@ import { danger, shouldLogVerbose } from "../globals.js";
 import { logDebug, logError } from "../logger.js";
 import { resolveCommandStdio } from "./spawn-utils.js";
 const execFileAsync = promisify(execFile);
+/**
+ * Resolves a command for Windows compatibility.
+ * On Windows, non-.exe commands (like npm, pnpm) require their .cmd extension.
+ */
+function resolveCommand(command) {
+    if (process.platform !== "win32") {
+        return command;
+    }
+    const basename = path.basename(command).toLowerCase();
+    // Skip if already has an extension (.cmd, .exe, .bat, etc.)
+    const ext = path.extname(basename);
+    if (ext) {
+        return command;
+    }
+    // Common npm-related commands that need .cmd extension on Windows
+    const cmdCommands = ["npm", "pnpm", "yarn", "npx"];
+    if (cmdCommands.includes(basename)) {
+        return `${command}.cmd`;
+    }
+    return command;
+}
 // Simple promise-wrapped execFile with optional verbosity logging.
 export async function runExec(command, args, opts = 10_000) {
     const options = typeof opts === "number"
@@ -15,7 +36,7 @@ export async function runExec(command, args, opts = 10_000) {
             encoding: "utf8",
         };
     try {
-        const { stdout, stderr } = await execFileAsync(command, args, options);
+        const { stdout, stderr } = await execFileAsync(resolveCommand(command), args, options);
         if (shouldLogVerbose()) {
             if (stdout.trim()) {
                 logDebug(stdout.trim());
@@ -59,7 +80,7 @@ export async function runCommandWithTimeout(argv, optionsOrTimeout) {
         }
     }
     const stdio = resolveCommandStdio({ hasInput, preferInherit: true });
-    const child = spawn(argv[0], argv.slice(1), {
+    const child = spawn(resolveCommand(argv[0]), argv.slice(1), {
         stdio,
         cwd,
         env: resolvedEnv,

package/dist/routing/resolve-route.d.ts

@@ -9,6 +9,8 @@ export type ResolveAgentRouteInput = {
     channel: string;
     accountId?: string | null;
     peer?: RoutePeer | null;
+    /** Parent peer for threads — used for binding inheritance when peer doesn't match directly. */
+    parentPeer?: RoutePeer | null;
     guildId?: string | null;
     teamId?: string | null;
 };
@@ -21,7 +23,7 @@ export type ResolvedAgentRoute = {
     /** Convenience alias for direct-chat collapse. */
     mainSessionKey: string;
     /** Match description for debugging/logging. */
-    matchedBy: "binding.peer" | "binding.guild" | "binding.team" | "binding.account" | "binding.channel" | "default";
+    matchedBy: "binding.peer" | "binding.peer.parent" | "binding.guild" | "binding.team" | "binding.account" | "binding.channel" | "default";
 };
 export { DEFAULT_ACCOUNT_ID, DEFAULT_AGENT_ID } from "./session-key.js";
 export declare function buildAgentSessionKey(params: {

package/dist/routing/resolve-route.js

@@ -135,6 +135,16 @@ export function resolveAgentRoute(input) {
             return choose(peerMatch.agentId, "binding.peer");
         }
     }
+    // Thread parent inheritance: if peer (thread) didn't match, check parent peer binding
+    const parentPeer = input.parentPeer
+        ? { kind: input.parentPeer.kind, id: normalizeId(input.parentPeer.id) }
+        : null;
+    if (parentPeer && parentPeer.id) {
+        const parentPeerMatch = bindings.find((b) => matchesPeer(b.match, parentPeer));
+        if (parentPeerMatch) {
+            return choose(parentPeerMatch.agentId, "binding.peer.parent");
+        }
+    }
     if (guildId) {
         const guildMatch = bindings.find((b) => matchesGuild(b.match, guildId));
         if (guildMatch) {

package/dist/runtime.js

@@ -1,4 +1,5 @@
 import { clearActiveProgressLine } from "./terminal/progress-line.js";
+import { restoreTerminalState } from "./terminal/restore.js";
 export const defaultRuntime = {
     log: (...args) => {
         clearActiveProgressLine();
@@ -9,6 +10,7 @@ export const defaultRuntime = {
         console.error(...args);
     },
     exit: (code) => {
+        restoreTerminalState("runtime exit");
         process.exit(code);
         throw new Error("unreachable"); // satisfies tests when mocked
     },

package/dist/security/audit-extra.js

@@ -1,17 +1,17 @@
+import JSON5 from "json5";
 import fs from "node:fs/promises";
 import path from "node:path";
-import JSON5 from "json5";
-import { createConfigIO } from "../config/config.js";
-import { resolveNativeSkillsEnabled } from "../config/commands.js";
-import { resolveOAuthDir } from "../config/paths.js";
-import { formatCliCommand } from "../cli/command-format.js";
 import { resolveDefaultAgentId } from "../agents/agent-scope.js";
-import { resolveBrowserConfig } from "../browser/config.js";
 import { isToolAllowedByPolicies } from "../agents/pi-tools.policy.js";
-import { resolveToolProfilePolicy } from "../agents/tool-policy.js";
 import { resolveSandboxConfigForAgent, resolveSandboxToolPolicyForAgent, } from "../agents/sandbox.js";
-import { resolveGatewayAuth } from "../gateway/auth.js";
+import { resolveToolProfilePolicy } from "../agents/tool-policy.js";
+import { resolveBrowserConfig } from "../browser/config.js";
+import { formatCliCommand } from "../cli/command-format.js";
+import { resolveNativeSkillsEnabled } from "../config/commands.js";
+import { createConfigIO } from "../config/config.js";
 import { INCLUDE_KEY, MAX_INCLUDE_DEPTH } from "../config/includes.js";
+import { resolveOAuthDir } from "../config/paths.js";
+import { resolveGatewayAuth } from "../gateway/auth.js";
 import { normalizeAgentId } from "../routing/session-key.js";
 import { formatPermissionDetail, formatPermissionRemediation, inspectPathPermissions, safeStat, } from "./audit-fs.js";
 const SMALL_MODEL_PARAM_B_MAX = 300;