@gguf/claw 2026.2.4 → 2026.2.5

package/dist/rolldown-runtime-Cbj13DAv.js

@@ -0,0 +1,20 @@
+import { createRequire } from "node:module";
+
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) {
+		__defProp(target, name, {
+			get: all[name],
+			enumerable: true
+		});
+	}
+	if (!no_symbols) {
+		__defProp(target, Symbol.toStringTag, { value: "Module" });
+	}
+	return target;
+};
+
+//#endregion
+export { __exportAll as t };

package/dist/{routes-yI5QIzeL.js → routes-BSfXf8a5.js}

@@ -1,9 +1,9 @@
 import { a as parseBooleanValue } from "./entry.js";
-import { d as resolveConfigDir } from "./utils-PmTbZoD1.js";
-import { n as runExec } from "./exec-BIMFe4XS.js";
-import { r as loadConfig, s as writeConfigFile } from "./config-DCT1RAo6.js";
-import { c as allocateColor, d as isValidProfileName, f as deriveDefaultBrowserCdpPortRange, i as parseHttpUrl, l as getUsedColors, n as movePathToTrash, o as resolveProfile, r as getPwAiModule$1, s as allocateCdpPort, u as getUsedPorts } from "./server-context-CM_E6wD5.js";
-import { D as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, E as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, c as resolveOpenClawUserDataDir, h as captureScreenshot, u as resolveBrowserExecutableForPlatform, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, y as snapshotAria } from "./errors-DdT2Dtkb.js";
+import { d as resolveConfigDir } from "./utils-DX85MiPR.js";
+import { n as runExec } from "./exec-B8JKbXKW.js";
+import { c as writeConfigFile, i as loadConfig } from "./config-CKLedg5Y.js";
+import { c as allocateColor, d as isValidProfileName, f as deriveDefaultBrowserCdpPortRange, i as parseHttpUrl, l as getUsedColors, n as movePathToTrash, o as resolveProfile, r as getPwAiModule$1, s as allocateCdpPort, u as getUsedPorts } from "./server-context-yKyxyxOJ.js";
+import { D as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, E as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, c as resolveOpenClawUserDataDir, h as captureScreenshot, u as resolveBrowserExecutableForPlatform, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, y as snapshotAria } from "./errors-CZ9opC6L.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs";

package/dist/{routes-Ds-tIZFJ.js → routes-DchZU3EK.js}

@@ -1,9 +1,9 @@
-import { f as resolveConfigDir } from "./utils-Dg0Xbl6w.js";
-import { n as runExec } from "./exec-CTo4hK94.js";
-import { t as parseBooleanValue } from "./boolean-CE7i9tBR.js";
-import { r as loadConfig, s as writeConfigFile } from "./config-qgIz1lbh.js";
-import { A as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, D as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, O as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, a as resolveOpenClawUserDataDir, h as captureScreenshot, k as DEFAULT_AI_SNAPSHOT_MAX_CHARS, m as resolveBrowserExecutableForPlatform, y as snapshotAria } from "./chrome-D2LUApAY.js";
-import { a as resolveProfile, c as getUsedColors, d as deriveDefaultBrowserCdpPortRange, f as getPwAiModule$1, l as getUsedPorts, n as movePathToTrash, o as allocateCdpPort, r as parseHttpUrl, s as allocateColor, u as isValidProfileName } from "./server-context-D2cv-pIA.js";
+import { f as resolveConfigDir } from "./utils-CKSrBNwq.js";
+import { n as runExec } from "./exec-HEWTMJ7j.js";
+import { t as parseBooleanValue } from "./boolean-BgXe2hyu.js";
+import { c as writeConfigFile, i as loadConfig } from "./config-CAuZ-EkU.js";
+import { A as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, D as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, O as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, a as resolveOpenClawUserDataDir, h as captureScreenshot, k as DEFAULT_AI_SNAPSHOT_MAX_CHARS, m as resolveBrowserExecutableForPlatform, y as snapshotAria } from "./chrome-BNSd7Bie.js";
+import { a as resolveProfile, c as getUsedColors, d as deriveDefaultBrowserCdpPortRange, f as getPwAiModule$1, l as getUsedPorts, n as movePathToTrash, o as allocateCdpPort, r as parseHttpUrl, s as allocateColor, u as isValidProfileName } from "./server-context-vChIAqjH.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs";

package/dist/{rpc-HF82_iLh.js → rpc-DqI3QH59.js}

@@ -1,6 +1,6 @@
-import { n as callGateway } from "./call-CfqL-4Nc.js";
-import { m as GATEWAY_CLIENT_NAMES, p as GATEWAY_CLIENT_MODES } from "./message-channel-CAFcg7mw.js";
-import { n as withProgress } from "./progress-Dn3kWpaL.js";
+import { n as callGateway } from "./call-90HgQQ8o.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-BlgPSDAh.js";
+import { n as withProgress } from "./progress-Da1ehW-x.js";
 
 //#region src/cli/nodes-cli/format.ts
 function formatAge(msAgo) {

package/dist/{rpc-HdKLb6jx.js → rpc-Vo2ACfn-.js}

@@ -1,6 +1,6 @@
-import { m as GATEWAY_CLIENT_NAMES, p as GATEWAY_CLIENT_MODES } from "./message-channel-CQGWXVL4.js";
-import { n as callGateway } from "./call-CPBhMXxo.js";
-import { n as withProgress } from "./progress-uNDQDtGB.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-Bpfe5l5f.js";
+import { n as callGateway } from "./call-BTbA5OB4.js";
+import { n as withProgress } from "./progress-xpLtQsNY.js";
 
 //#region src/cli/nodes-cli/format.ts
 function formatAge(msAgo) {

package/dist/{run-main-B3krVvc1.js → run-main-DrVUUPHV.js}

@@ -1,84 +1,84 @@
 import { c as enableConsoleCapture, i as normalizeEnv, n as isTruthyEnvValue, p as defaultRuntime } from "./entry.js";
-import "./auth-profiles-CfFGCDJa.js";
-import "./agent-scope-jm0ZdXwM.js";
-import { d as resolveConfigDir } from "./utils-PmTbZoD1.js";
-import "./exec-BIMFe4XS.js";
-import "./github-copilot-token-rP-6QdKv.js";
-import "./pi-model-discovery-CsRo-xMp.js";
-import { M as VERSION } from "./config-DCT1RAo6.js";
-import "./manifest-registry-tuAcHxrV.js";
-import "./server-context-CM_E6wD5.js";
-import { r as formatUncaughtError } from "./errors-DdT2Dtkb.js";
-import "./control-service-Ds9ompnU.js";
-import { t as ensureOpenClawCliOnPath } from "./path-env-CUhrC5DA.js";
-import "./tailscale-BUcKO8Rr.js";
-import "./auth-viF_w60n.js";
-import "./client-cU7Xg1MO.js";
-import "./call-CfqL-4Nc.js";
-import "./message-channel-CAFcg7mw.js";
-import "./links-jGisPfXW.js";
-import "./plugin-auto-enable-CIVp3SAp.js";
-import "./plugins-TrKFfrLt.js";
-import "./logging-fywhKCmE.js";
-import "./accounts-B5QZU96b.js";
-import { At as installUnhandledRejectionHandler } from "./loader-BYWxo-_j.js";
-import "./progress-Dn3kWpaL.js";
-import "./prompt-style-D5D7b3cX.js";
-import "./note-CBiVaqG7.js";
-import "./clack-prompter-BJuVh97L.js";
-import "./onboard-channels-CF7lTDNu.js";
-import "./archive-mFgwsll-.js";
-import "./installs-C5cjVarj.js";
-import "./manager-rDmdE7O9.js";
-import "./paths-RvF0P6tQ.js";
-import "./sqlite-B_L84oiu.js";
-import "./routes-yI5QIzeL.js";
-import "./pi-embedded-helpers-DJgCXZEz.js";
-import "./deliver-eE21zdeQ.js";
-import "./sandbox-Cnq9TXEn.js";
-import "./channel-summary-BkqO8zZ9.js";
-import "./wsl-DASmek7h.js";
-import "./skills-DtwGIkTI.js";
-import "./image-CXg7Z0WD.js";
-import "./redact-CDPAzwi8.js";
-import "./tool-display-BMYWrp0L.js";
-import "./restart-sentinel-DywisDen.js";
-import "./channel-selection-BAwiO0li.js";
-import "./commands-DMKDOFmC.js";
-import "./pairing-store-DMex6WWe.js";
-import "./login-qr-sEcxw1_U.js";
-import "./pairing-labels-C6I3dD-m.js";
-import "./channels-status-issues-DRXQXvhY.js";
-import { n as ensurePluginRegistryLoaded } from "./command-options-51bBgSJL.js";
-import { i as getCommandPath, s as getPrimaryCommand, u as hasHelpOrVersion } from "./register.subclis-CWWz9WdX.js";
-import "./gateway-rpc-CMAcradB.js";
-import "./deps-wXkiMwLZ.js";
-import "./daemon-runtime-ELWW7q0C.js";
-import { t as assertSupportedRuntime } from "./runtime-guard-DvBpNsbR.js";
-import "./service-BoDHq_LN.js";
-import "./systemd-DAgZTW06.js";
-import "./service-audit-Bf33pqEM.js";
-import "./table-f0EgX-YI.js";
-import "./widearea-dns-D4yoSNNw.js";
-import "./audit-D-OqdjQu.js";
-import "./onboard-skills-DdFGj9pt.js";
-import "./health-format-Ct8J0fwc.js";
-import "./update-runner-8XFxQglY.js";
-import "./github-copilot-auth-BHLcQ1sN.js";
-import "./logging-BnUUuH3y.js";
-import "./hooks-status-I3Y60zVN.js";
-import "./status-BIWeu5mN.js";
-import "./skills-status-CWkBweWW.js";
-import "./tui-DBmFYQTk.js";
-import "./agent-BBI-UGkN.js";
-import "./node-service-BW_LhY5w.js";
-import "./status.update-ChwCPLBt.js";
-import "./auth-health-DcKoxhDo.js";
-import { a as findRoutedCommand, n as emitCliBanner, t as ensureConfigReady } from "./config-guard-CJuPkD5Y.js";
-import "./help-format-af1XWYxC.js";
-import "./configure-D0OAmW2s.js";
-import "./systemd-linger-CTe0ZDxD.js";
-import "./doctor-OmfNRlMS.js";
+import "./auth-profiles-CYBuGiBb.js";
+import { d as resolveConfigDir } from "./utils-DX85MiPR.js";
+import "./exec-B8JKbXKW.js";
+import "./agent-scope-C9VjJXEK.js";
+import "./github-copilot-token-SLWintYd.js";
+import "./pi-model-discovery-DzEIEgHL.js";
+import { j as VERSION } from "./config-CKLedg5Y.js";
+import "./manifest-registry-C69Z-I4v.js";
+import "./server-context-yKyxyxOJ.js";
+import { r as formatUncaughtError } from "./errors-CZ9opC6L.js";
+import "./control-service-D2E9NKqQ.js";
+import { t as ensureOpenClawCliOnPath } from "./path-env-h3xp5PqO.js";
+import "./tailscale-9MusRvOi.js";
+import "./auth-DksjO6WG.js";
+import "./client-CxbkcEZ7.js";
+import "./call-90HgQQ8o.js";
+import "./message-channel-BlgPSDAh.js";
+import "./links-D0uzJbi6.js";
+import "./plugin-auto-enable-DyW8lHTT.js";
+import "./plugins-BUPpq5aS.js";
+import "./logging-CfEk_PnX.js";
+import "./accounts-Dto4p9zB.js";
+import { At as installUnhandledRejectionHandler } from "./loader-_Pj-TZS2.js";
+import "./progress-Da1ehW-x.js";
+import "./prompt-style-Dc0C5HC9.js";
+import "./note-Ci08TSbV.js";
+import "./clack-prompter-DuBVnTKy.js";
+import "./onboard-channels-D-ZQTy5V.js";
+import "./archive-D0z3LZDK.js";
+import "./skill-scanner-Bp1D9gra.js";
+import "./installs-DsJkyWfL.js";
+import "./manager-BXiIQku7.js";
+import "./paths-CTg8F3AE.js";
+import "./sqlite-DqUEZnjO.js";
+import "./routes-BSfXf8a5.js";
+import "./pi-embedded-helpers-DF8SAHU-.js";
+import "./deliver-Cau4HL7W.js";
+import "./sandbox-DuqLKN5J.js";
+import "./channel-summary-D9nzC5WB.js";
+import "./wsl-ATjkMwMA.js";
+import "./skills-CmU0Q92f.js";
+import "./image-nRwqkmtf.js";
+import "./redact-B8YiFlwn.js";
+import "./tool-display-DmgKs6-V.js";
+import "./channel-selection-PZuuCvrp.js";
+import "./session-cost-usage-BTXosU1k.js";
+import "./commands-DAC7XMAT.js";
+import "./pairing-store-DTfv_FGA.js";
+import "./login-qr-Cmsf7BGt.js";
+import "./pairing-labels-BbydDT7w.js";
+import "./channels-status-issues-CJ8PJgDc.js";
+import { n as ensurePluginRegistryLoaded } from "./command-options-DUUINcz0.js";
+import { a as getCommandPath, c as getPrimaryCommand, d as hasHelpOrVersion } from "./register.subclis-BpIR6Iqi.js";
+import "./completion-cli-BbhA_JbG.js";
+import "./gateway-rpc-CWnTaSEY.js";
+import "./deps-ytXmI88x.js";
+import { h as assertSupportedRuntime } from "./daemon-runtime-BCn_QIHK.js";
+import "./service-_JwSmGSn.js";
+import "./systemd-8sIc6isV.js";
+import "./service-audit-DDX1kO3k.js";
+import "./table-CJSx0YID.js";
+import "./widearea-dns-CsSylzXH.js";
+import "./audit-BWbjQmyv.js";
+import "./onboard-skills-YobctE-R.js";
+import "./health-format-ND2rUbQO.js";
+import "./update-runner-2i8_mIG5.js";
+import "./github-copilot-auth-B_lK1g__.js";
+import "./logging-Cc7m6PTv.js";
+import "./hooks-status-CKmUPU-M.js";
+import "./status-BRXuHUsK.js";
+import "./skills-status-DtXrj3fy.js";
+import "./tui-DPorsF4z.js";
+import "./agent-DztWhVCH.js";
+import "./node-service-Lc1LlnFH.js";
+import "./auth-health-C4bElkgf.js";
+import { a as findRoutedCommand, n as emitCliBanner, t as ensureConfigReady } from "./config-guard-a5ynrKd-.js";
+import "./help-format-CfZ94KRN.js";
+import "./configure-ChnTy7Jz.js";
+import "./systemd-linger-SsSOsJST.js";
+import "./doctor-JnMryC_M.js";
 import path from "node:path";
 import process$1 from "node:process";
 import fs from "node:fs";
@@ -140,7 +140,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-BA9_uWfO.js");
+	const { buildProgram } = await import("./program-oR55MCAT.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -150,12 +150,12 @@ async function runCli(argv = process$1.argv) {
 	const parseArgv = rewriteUpdateFlagArgv(normalizedArgv);
 	const primary = getPrimaryCommand(parseArgv);
 	if (primary) {
-		const { registerSubCliByName } = await import("./register.subclis-BuT7ZpPf.js");
+		const { registerSubCliByName } = await import("./register.subclis-BpIR6Iqi.js").then((n) => n.i);
 		await registerSubCliByName(program, primary);
 	}
 	if (!(!primary && hasHelpOrVersion(parseArgv))) {
-		const { registerPluginCliCommands } = await import("./cli-wFmvNjpg.js");
-		const { loadConfig } = await import("./config-jKcyRiMo.js");
+		const { registerPluginCliCommands } = await import("./cli-DBAccB3n.js");
+		const { loadConfig } = await import("./config-CKLedg5Y.js").then((n) => n.t);
 		registerPluginCliCommands(program, loadConfig());
 	}
 	await program.parseAsync(parseArgv);

package/dist/{sandbox-BXUfp_qv.js → sandbox-CV8VwPij.js}

@@ -1,18 +1,19 @@
-import { r as STATE_DIR } from "./paths-BDd7_JUB.js";
-import { D as DEFAULT_AGENT_ID, E as DEFAULT_ACCOUNT_ID, F as resolveAgentIdFromSessionKey, M as normalizeAccountId$1, N as normalizeAgentId, P as normalizeMainKey, b as DEFAULT_USER_FILENAME, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, k as buildAgentMainSessionKey, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-CrgUOY3f.js";
-import { c as defaultRuntime, m as CHAT_CHANNEL_ORDER, p as CHANNEL_IDS, v as getChatChannelMeta, w as requireActivePluginRegistry } from "./subsystem-46MXi6Ip.js";
-import { d as normalizeE164, h as resolveUserPath } from "./utils-Dg0Xbl6w.js";
-import { t as formatCliCommand } from "./command-format-BQK1OIvH.js";
-import { r as loadConfig } from "./config-qgIz1lbh.js";
-import { a as normalizeWhatsAppTarget, b as normalizeChatType, c as resolveTelegramAccount, m as resolveSlackReplyToMode, p as resolveSlackAccount, r as normalizeChannelId, v as resolveDiscordAccount } from "./plugins-D1CxUobm.js";
-import { M as DEFAULT_OPENCLAW_BROWSER_COLOR, P as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, j as DEFAULT_BROWSER_EVALUATE_ENABLED } from "./chrome-D2LUApAY.js";
-import { o as syncSkillsToWorkspace } from "./skills-C4b1FA1e.js";
-import { t as registerBrowserRoutes } from "./routes-Ds-tIZFJ.js";
-import { a as resolveProfile, t as createBrowserRouteContext } from "./server-context-D2cv-pIA.js";
-import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-CQGWXVL4.js";
-import { n as resolveWhatsAppAccount } from "./accounts-BlHoTziG.js";
-import { r as resolveSessionTranscriptPath, t as resolveDefaultSessionStorePath } from "./paths-50eo6DV6.js";
-import { t as emitSessionTranscriptUpdate } from "./transcript-events-fUhPZcB5.js";
+import { r as STATE_DIR } from "./paths-scjhy7N2.js";
+import { c as normalizeAgentId, i as buildAgentMainSessionKey, l as normalizeMainKey, n as DEFAULT_AGENT_ID, s as normalizeAccountId$1, t as DEFAULT_ACCOUNT_ID, u as resolveAgentIdFromSessionKey } from "./session-key-Dm2EOhrH.js";
+import { c as defaultRuntime, m as CHAT_CHANNEL_ORDER, p as CHANNEL_IDS, v as getChatChannelMeta, w as requireActivePluginRegistry } from "./subsystem-CAq3uyo7.js";
+import { d as normalizeE164, h as resolveUserPath } from "./utils-CKSrBNwq.js";
+import { b as DEFAULT_USER_FILENAME, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-CMs5Y7l-.js";
+import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
+import { i as loadConfig } from "./config-CAuZ-EkU.js";
+import { a as normalizeWhatsAppTarget, b as normalizeChatType, c as resolveTelegramAccount, m as resolveSlackReplyToMode, p as resolveSlackAccount, r as normalizeChannelId, v as resolveDiscordAccount } from "./plugins-BYIWo0Cp.js";
+import { M as DEFAULT_OPENCLAW_BROWSER_COLOR, P as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, j as DEFAULT_BROWSER_EVALUATE_ENABLED } from "./chrome-BNSd7Bie.js";
+import { o as syncSkillsToWorkspace } from "./skills-D5JDj3TR.js";
+import { t as registerBrowserRoutes } from "./routes-DchZU3EK.js";
+import { a as resolveProfile, t as createBrowserRouteContext } from "./server-context-vChIAqjH.js";
+import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-Bpfe5l5f.js";
+import { n as resolveWhatsAppAccount } from "./accounts-BgZmhIm6.js";
+import { r as resolveSessionTranscriptPath, t as resolveDefaultSessionStorePath } from "./paths-Bb0nwPeu.js";
+import { t as emitSessionTranscriptUpdate } from "./transcript-events-ChU6IQwp.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs";
@@ -143,6 +144,7 @@ const TOOL_GROUPS = {
 		"image"
 	]
 };
+const OWNER_ONLY_TOOL_NAMES = new Set(["whatsapp_login"]);
 const TOOL_PROFILES = {
 	minimal: { allow: ["session_status"] },
 	coding: { allow: [
@@ -165,6 +167,23 @@ function normalizeToolName(name) {
 	const normalized = name.trim().toLowerCase();
 	return TOOL_NAME_ALIASES[normalized] ?? normalized;
 }
+function isOwnerOnlyToolName(name) {
+	return OWNER_ONLY_TOOL_NAMES.has(normalizeToolName(name));
+}
+function applyOwnerOnlyToolPolicy(tools, senderIsOwner) {
+	const withGuard = tools.map((tool) => {
+		if (!isOwnerOnlyToolName(tool.name)) return tool;
+		if (senderIsOwner || !tool.execute) return tool;
+		return {
+			...tool,
+			execute: async () => {
+				throw new Error("Tool restricted to owner senders.");
+			}
+		};
+	});
+	if (senderIsOwner) return withGuard;
+	return withGuard.filter((tool) => !isOwnerOnlyToolName(tool.name));
+}
 function normalizeToolList(list) {
 	if (!list) return [];
 	return list.map(normalizeToolName).filter(Boolean);
@@ -1768,6 +1787,7 @@ const DOCKS = {
 			resolveRequireMention: resolveSlackGroupRequireMention,
 			resolveToolPolicy: resolveSlackGroupToolPolicy
 		},
+		mentions: { stripPatterns: () => ["<@[^>]+>"] },
 		threading: {
 			resolveReplyToMode: ({ cfg, accountId, chatType }) => resolveSlackReplyToMode(resolveSlackAccount({
 				cfg,
@@ -2922,4 +2942,4 @@ async function removeSandboxBrowserContainer(containerName) {
 }
 
 //#endregion
-export { resolveSandboxToolPolicyForAgent as $, resolveSessionResetPolicy as A, snapshotSessionOrigin as B, normalizeDeliveryContext as C, resolveSessionKey as D, deriveSessionKey as E, resolveAgentMainSessionKey as F, resolveChannelGroupToolsPolicy as G, listChannelDocks as H, resolveExplicitAgentSessionKey as I, resolveIMessageAccount as J, listEnabledSignalAccounts as K, resolveMainSessionKey as L, resolveThreadFlag as M, DEFAULT_RESET_TRIGGERS as N, evaluateSessionFreshness as O, canonicalizeMainSessionAlias as P, resolveSandboxScope as Q, resolveMainSessionKeyFromConfig as R, mergeDeliveryContext as S, normalizeAccountId as T, resolveChannelGroupPolicy as U, getChannelDock as V, resolveChannelGroupRequireMention as W, resolveGroupSessionKey as X, buildGroupDisplayName as Y, resolveSandboxConfigForAgent as Z, updateSessionStoreEntry as _, ensureSandboxWorkspaceForSession as a, resolveToolProfilePolicy as at, deliveryContextFromSession as b, resolveSandboxRuntimeStatus as c, DEFAULT_SANDBOX_COMMON_IMAGE as ct, loadSessionStore as d, buildPluginToolGroups as et, readSessionUpdatedAt as f, updateSessionStore as g, updateLastRoute as h, removeSandboxContainer as i, normalizeToolName as it, resolveSessionResetType as j, resolveChannelResetConfig as k, appendAssistantMessageToSessionTranscript as l, DEFAULT_SANDBOX_IMAGE as lt, saveSessionStore as m, listSandboxContainers as n, expandPolicyWithPluginGroups as nt, resolveSandboxContext as o, stripPluginOnlyAllowlist as ot, recordSessionMetaFromInbound as p, resolveSignalAccount as q, removeSandboxBrowserContainer as r, expandToolGroups as rt, formatSandboxToolPolicyBlockedMessage as s, DEFAULT_SANDBOX_BROWSER_IMAGE as st, listSandboxBrowsers as t, collectExplicitAllowlist as tt, resolveMirroredTranscriptText as u, resolveConversationLabel as ut, isCacheEnabled as v, normalizeSessionDeliveryFields as w, deliveryContextKey as x, resolveCacheTtlMs as y, deriveSessionMetaPatch as z };
+export { resolveSandboxToolPolicyForAgent as $, resolveSessionResetPolicy as A, snapshotSessionOrigin as B, normalizeDeliveryContext as C, resolveSessionKey as D, deriveSessionKey as E, resolveAgentMainSessionKey as F, resolveChannelGroupToolsPolicy as G, listChannelDocks as H, resolveExplicitAgentSessionKey as I, resolveIMessageAccount as J, listEnabledSignalAccounts as K, resolveMainSessionKey as L, resolveThreadFlag as M, DEFAULT_RESET_TRIGGERS as N, evaluateSessionFreshness as O, canonicalizeMainSessionAlias as P, resolveSandboxScope as Q, resolveMainSessionKeyFromConfig as R, mergeDeliveryContext as S, normalizeAccountId as T, resolveChannelGroupPolicy as U, getChannelDock as V, resolveChannelGroupRequireMention as W, resolveGroupSessionKey as X, buildGroupDisplayName as Y, resolveSandboxConfigForAgent as Z, updateSessionStoreEntry as _, ensureSandboxWorkspaceForSession as a, normalizeToolName as at, deliveryContextFromSession as b, resolveSandboxRuntimeStatus as c, DEFAULT_SANDBOX_BROWSER_IMAGE as ct, loadSessionStore as d, resolveConversationLabel as dt, applyOwnerOnlyToolPolicy as et, readSessionUpdatedAt as f, updateSessionStore as g, updateLastRoute as h, removeSandboxContainer as i, expandToolGroups as it, resolveSessionResetType as j, resolveChannelResetConfig as k, appendAssistantMessageToSessionTranscript as l, DEFAULT_SANDBOX_COMMON_IMAGE as lt, saveSessionStore as m, listSandboxContainers as n, collectExplicitAllowlist as nt, resolveSandboxContext as o, resolveToolProfilePolicy as ot, recordSessionMetaFromInbound as p, resolveSignalAccount as q, removeSandboxBrowserContainer as r, expandPolicyWithPluginGroups as rt, formatSandboxToolPolicyBlockedMessage as s, stripPluginOnlyAllowlist as st, listSandboxBrowsers as t, buildPluginToolGroups as tt, resolveMirroredTranscriptText as u, DEFAULT_SANDBOX_IMAGE as ut, isCacheEnabled as v, normalizeSessionDeliveryFields as w, deliveryContextKey as x, resolveCacheTtlMs as y, deriveSessionMetaPatch as z };

package/dist/{sandbox-Cnq9TXEn.js → sandbox-DuqLKN5J.js}

@@ -1,17 +1,18 @@
 import { L as STATE_DIR, Q as CHAT_CHANNEL_ORDER, Z as CHANNEL_IDS, ct as requireActivePluginRegistry, nt as getChatChannelMeta, p as defaultRuntime } from "./entry.js";
-import { t as formatCliCommand } from "./command-format-3xiXujG0.js";
-import { D as DEFAULT_AGENT_ID, E as DEFAULT_ACCOUNT_ID, F as resolveAgentIdFromSessionKey, M as normalizeAccountId$1, N as normalizeAgentId, P as normalizeMainKey, b as DEFAULT_USER_FILENAME, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, k as buildAgentMainSessionKey, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-jm0ZdXwM.js";
-import { m as resolveUserPath, u as normalizeE164 } from "./utils-PmTbZoD1.js";
-import { r as loadConfig } from "./config-DCT1RAo6.js";
-import { o as resolveProfile, t as createBrowserRouteContext } from "./server-context-CM_E6wD5.js";
-import { O as DEFAULT_BROWSER_EVALUATE_ENABLED, j as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, k as DEFAULT_OPENCLAW_BROWSER_COLOR } from "./errors-DdT2Dtkb.js";
-import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-CAFcg7mw.js";
-import { _ as normalizeChatType, a as normalizeWhatsAppTarget, c as resolveTelegramAccount, m as resolveSlackReplyToMode, p as resolveSlackAccount, r as normalizeChannelId, y as resolveDiscordAccount } from "./plugins-TrKFfrLt.js";
-import { n as resolveWhatsAppAccount } from "./accounts-B5QZU96b.js";
-import { r as resolveSessionTranscriptPath, t as resolveDefaultSessionStorePath } from "./paths-RvF0P6tQ.js";
-import { t as emitSessionTranscriptUpdate } from "./transcript-events-Cj85Mq0h.js";
-import { t as registerBrowserRoutes } from "./routes-yI5QIzeL.js";
-import { o as syncSkillsToWorkspace } from "./skills-DtwGIkTI.js";
+import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
+import { c as normalizeAgentId, i as buildAgentMainSessionKey, l as normalizeMainKey, n as DEFAULT_AGENT_ID, s as normalizeAccountId$1, t as DEFAULT_ACCOUNT_ID, u as resolveAgentIdFromSessionKey } from "./session-key-CZkcvAtx.js";
+import { m as resolveUserPath, u as normalizeE164 } from "./utils-DX85MiPR.js";
+import { b as DEFAULT_USER_FILENAME, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-C9VjJXEK.js";
+import { i as loadConfig } from "./config-CKLedg5Y.js";
+import { o as resolveProfile, t as createBrowserRouteContext } from "./server-context-yKyxyxOJ.js";
+import { O as DEFAULT_BROWSER_EVALUATE_ENABLED, j as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, k as DEFAULT_OPENCLAW_BROWSER_COLOR } from "./errors-CZ9opC6L.js";
+import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-BlgPSDAh.js";
+import { _ as normalizeChatType, a as normalizeWhatsAppTarget, c as resolveTelegramAccount, m as resolveSlackReplyToMode, p as resolveSlackAccount, r as normalizeChannelId, y as resolveDiscordAccount } from "./plugins-BUPpq5aS.js";
+import { n as resolveWhatsAppAccount } from "./accounts-Dto4p9zB.js";
+import { r as resolveSessionTranscriptPath, t as resolveDefaultSessionStorePath } from "./paths-CTg8F3AE.js";
+import { t as emitSessionTranscriptUpdate } from "./transcript-events-CZ8CG4ht.js";
+import { t as registerBrowserRoutes } from "./routes-BSfXf8a5.js";
+import { o as syncSkillsToWorkspace } from "./skills-CmU0Q92f.js";
 import { spawn } from "node:child_process";
 import path from "node:path";
 import os from "node:os";
@@ -645,6 +646,7 @@ const DOCKS = {
 			resolveRequireMention: resolveSlackGroupRequireMention,
 			resolveToolPolicy: resolveSlackGroupToolPolicy
 		},
+		mentions: { stripPatterns: () => ["<@[^>]+>"] },
 		threading: {
 			resolveReplyToMode: ({ cfg, accountId, chatType }) => resolveSlackReplyToMode(resolveSlackAccount({
 				cfg,
@@ -862,6 +864,7 @@ const TOOL_GROUPS = {
 		"image"
 	]
 };
+const OWNER_ONLY_TOOL_NAMES = new Set(["whatsapp_login"]);
 const TOOL_PROFILES = {
 	minimal: { allow: ["session_status"] },
 	coding: { allow: [
@@ -884,6 +887,23 @@ function normalizeToolName(name) {
 	const normalized = name.trim().toLowerCase();
 	return TOOL_NAME_ALIASES[normalized] ?? normalized;
 }
+function isOwnerOnlyToolName(name) {
+	return OWNER_ONLY_TOOL_NAMES.has(normalizeToolName(name));
+}
+function applyOwnerOnlyToolPolicy(tools, senderIsOwner) {
+	const withGuard = tools.map((tool) => {
+		if (!isOwnerOnlyToolName(tool.name)) return tool;
+		if (senderIsOwner || !tool.execute) return tool;
+		return {
+			...tool,
+			execute: async () => {
+				throw new Error("Tool restricted to owner senders.");
+			}
+		};
+	});
+	if (senderIsOwner) return withGuard;
+	return withGuard.filter((tool) => !isOwnerOnlyToolName(tool.name));
+}
 function normalizeToolList(list) {
 	if (!list) return [];
 	return list.map(normalizeToolName).filter(Boolean);
@@ -2921,4 +2941,4 @@ async function removeSandboxBrowserContainer(containerName) {
 }
 
 //#endregion
-export { DEFAULT_SANDBOX_BROWSER_IMAGE as $, resolveSessionResetType as A, resolveConversationLabel as B, normalizeDeliveryContext as C, evaluateSessionFreshness as D, resolveSessionKey as E, resolveExplicitAgentSessionKey as F, resolveSandboxToolPolicyForAgent as G, resolveGroupSessionKey as H, resolveMainSessionKey as I, expandPolicyWithPluginGroups as J, buildPluginToolGroups as K, resolveMainSessionKeyFromConfig as L, DEFAULT_RESET_TRIGGERS as M, canonicalizeMainSessionAlias as N, resolveChannelResetConfig as O, resolveAgentMainSessionKey as P, stripPluginOnlyAllowlist as Q, deriveSessionMetaPatch as R, mergeDeliveryContext as S, normalizeAccountId as T, resolveSandboxConfigForAgent as U, buildGroupDisplayName as V, resolveSandboxScope as W, normalizeToolName as X, expandToolGroups as Y, resolveToolProfilePolicy as Z, updateSessionStoreEntry as _, ensureSandboxWorkspaceForSession as a, resolveChannelGroupRequireMention as at, deliveryContextFromSession as b, resolveSandboxRuntimeStatus as c, resolveSignalAccount as ct, loadSessionStore as d, DEFAULT_SANDBOX_COMMON_IMAGE as et, readSessionUpdatedAt as f, updateSessionStore as g, updateLastRoute as h, removeSandboxContainer as i, resolveChannelGroupPolicy as it, resolveThreadFlag as j, resolveSessionResetPolicy as k, appendAssistantMessageToSessionTranscript as l, resolveIMessageAccount as lt, saveSessionStore as m, listSandboxContainers as n, getChannelDock as nt, resolveSandboxContext as o, resolveChannelGroupToolsPolicy as ot, recordSessionMetaFromInbound as p, collectExplicitAllowlist as q, removeSandboxBrowserContainer as r, listChannelDocks as rt, formatSandboxToolPolicyBlockedMessage as s, listEnabledSignalAccounts as st, listSandboxBrowsers as t, DEFAULT_SANDBOX_IMAGE as tt, resolveMirroredTranscriptText as u, isCacheEnabled as v, normalizeSessionDeliveryFields as w, deliveryContextKey as x, resolveCacheTtlMs as y, snapshotSessionOrigin as z };
+export { stripPluginOnlyAllowlist as $, resolveSessionResetType as A, resolveConversationLabel as B, normalizeDeliveryContext as C, evaluateSessionFreshness as D, resolveSessionKey as E, resolveExplicitAgentSessionKey as F, resolveSandboxToolPolicyForAgent as G, resolveGroupSessionKey as H, resolveMainSessionKey as I, collectExplicitAllowlist as J, applyOwnerOnlyToolPolicy as K, resolveMainSessionKeyFromConfig as L, DEFAULT_RESET_TRIGGERS as M, canonicalizeMainSessionAlias as N, resolveChannelResetConfig as O, resolveAgentMainSessionKey as P, resolveToolProfilePolicy as Q, deriveSessionMetaPatch as R, mergeDeliveryContext as S, normalizeAccountId as T, resolveSandboxConfigForAgent as U, buildGroupDisplayName as V, resolveSandboxScope as W, expandToolGroups as X, expandPolicyWithPluginGroups as Y, normalizeToolName as Z, updateSessionStoreEntry as _, ensureSandboxWorkspaceForSession as a, resolveChannelGroupPolicy as at, deliveryContextFromSession as b, resolveSandboxRuntimeStatus as c, listEnabledSignalAccounts as ct, loadSessionStore as d, DEFAULT_SANDBOX_BROWSER_IMAGE as et, readSessionUpdatedAt as f, updateSessionStore as g, updateLastRoute as h, removeSandboxContainer as i, listChannelDocks as it, resolveThreadFlag as j, resolveSessionResetPolicy as k, appendAssistantMessageToSessionTranscript as l, resolveSignalAccount as lt, saveSessionStore as m, listSandboxContainers as n, DEFAULT_SANDBOX_IMAGE as nt, resolveSandboxContext as o, resolveChannelGroupRequireMention as ot, recordSessionMetaFromInbound as p, buildPluginToolGroups as q, removeSandboxBrowserContainer as r, getChannelDock as rt, formatSandboxToolPolicyBlockedMessage as s, resolveChannelGroupToolsPolicy as st, listSandboxBrowsers as t, DEFAULT_SANDBOX_COMMON_IMAGE as tt, resolveMirroredTranscriptText as u, resolveIMessageAccount as ut, isCacheEnabled as v, normalizeSessionDeliveryFields as w, deliveryContextKey as x, resolveCacheTtlMs as y, snapshotSessionOrigin as z };

package/dist/{sandbox-cli-C7j1V6tb.js → sandbox-cli-C0_Hrk7i.js}

@@ -1,27 +1,28 @@
-import "./paths-BDd7_JUB.js";
-import { F as resolveAgentIdFromSessionKey, H as parseAgentSessionKey, N as normalizeAgentId, P as normalizeMainKey, k as buildAgentMainSessionKey, n as resolveAgentConfig } from "./agent-scope-CrgUOY3f.js";
-import { I as colorize, L as isRich, R as theme, b as normalizeAnyChannelId, c as defaultRuntime } from "./subsystem-46MXi6Ip.js";
-import "./utils-Dg0Xbl6w.js";
-import "./exec-CTo4hK94.js";
-import "./model-selection-Cp1maz7B.js";
-import "./github-copilot-token-VZsS4013.js";
-import { t as formatCliCommand } from "./command-format-BQK1OIvH.js";
-import "./boolean-CE7i9tBR.js";
-import "./env-DOcCob95.js";
-import { r as loadConfig } from "./config-qgIz1lbh.js";
-import "./manifest-registry-BFpLJJDB.js";
-import "./plugins-D1CxUobm.js";
-import { $ as resolveSandboxToolPolicyForAgent, F as resolveAgentMainSessionKey, L as resolveMainSessionKey, Z as resolveSandboxConfigForAgent, d as loadSessionStore, i as removeSandboxContainer, n as listSandboxContainers, r as removeSandboxBrowserContainer, t as listSandboxBrowsers } from "./sandbox-BXUfp_qv.js";
-import "./chrome-D2LUApAY.js";
-import "./skills-C4b1FA1e.js";
-import "./routes-Ds-tIZFJ.js";
-import "./server-context-D2cv-pIA.js";
-import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-CQGWXVL4.js";
-import "./logging-BdnOSVPD.js";
-import "./accounts-BlHoTziG.js";
-import { o as resolveStorePath } from "./paths-50eo6DV6.js";
-import { t as formatDocsLink } from "./links-C9fyAH-V.js";
-import { t as formatHelpExamples } from "./help-format-CGcnDM3D.js";
+import "./paths-scjhy7N2.js";
+import { _ as parseAgentSessionKey, c as normalizeAgentId, i as buildAgentMainSessionKey, l as normalizeMainKey, u as resolveAgentIdFromSessionKey } from "./session-key-Dm2EOhrH.js";
+import { I as colorize, L as isRich, R as theme, b as normalizeAnyChannelId, c as defaultRuntime } from "./subsystem-CAq3uyo7.js";
+import "./utils-CKSrBNwq.js";
+import "./exec-HEWTMJ7j.js";
+import { n as resolveAgentConfig } from "./agent-scope-CMs5Y7l-.js";
+import "./model-selection-DMUrNhQP.js";
+import "./github-copilot-token-pGSmVaW-.js";
+import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
+import "./boolean-BgXe2hyu.js";
+import "./env-0_mKbEWW.js";
+import { i as loadConfig } from "./config-CAuZ-EkU.js";
+import "./manifest-registry-DHaa1SJb.js";
+import "./plugins-BYIWo0Cp.js";
+import { $ as resolveSandboxToolPolicyForAgent, F as resolveAgentMainSessionKey, L as resolveMainSessionKey, Z as resolveSandboxConfigForAgent, d as loadSessionStore, i as removeSandboxContainer, n as listSandboxContainers, r as removeSandboxBrowserContainer, t as listSandboxBrowsers } from "./sandbox-CV8VwPij.js";
+import "./chrome-BNSd7Bie.js";
+import "./skills-D5JDj3TR.js";
+import "./routes-DchZU3EK.js";
+import "./server-context-vChIAqjH.js";
+import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-Bpfe5l5f.js";
+import "./logging-BWRYHvLp.js";
+import "./accounts-BgZmhIm6.js";
+import { o as resolveStorePath } from "./paths-Bb0nwPeu.js";
+import { t as formatDocsLink } from "./links-B5pRdmo1.js";
+import { t as formatHelpExamples } from "./help-format-Bozi4K9H.js";
 import { confirm } from "@clack/prompts";
 
 //#region src/commands/sandbox-explain.ts

package/dist/{sandbox-cli-CnS9JJlO.js → sandbox-cli-Ces6i3n2.js}

@@ -1,24 +1,25 @@
 import { D as colorize, O as isRich, it as normalizeAnyChannelId, k as theme, p as defaultRuntime } from "./entry.js";
-import "./auth-profiles-CfFGCDJa.js";
-import { t as formatCliCommand } from "./command-format-3xiXujG0.js";
-import { F as resolveAgentIdFromSessionKey, H as parseAgentSessionKey, N as normalizeAgentId, P as normalizeMainKey, k as buildAgentMainSessionKey, n as resolveAgentConfig } from "./agent-scope-jm0ZdXwM.js";
-import "./utils-PmTbZoD1.js";
-import "./exec-BIMFe4XS.js";
-import "./github-copilot-token-rP-6QdKv.js";
-import { r as loadConfig } from "./config-DCT1RAo6.js";
-import "./manifest-registry-tuAcHxrV.js";
-import "./server-context-CM_E6wD5.js";
-import "./errors-DdT2Dtkb.js";
-import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-CAFcg7mw.js";
-import { t as formatDocsLink } from "./links-jGisPfXW.js";
-import "./plugins-TrKFfrLt.js";
-import "./logging-fywhKCmE.js";
-import "./accounts-B5QZU96b.js";
-import { o as resolveStorePath } from "./paths-RvF0P6tQ.js";
-import "./routes-yI5QIzeL.js";
-import { G as resolveSandboxToolPolicyForAgent, I as resolveMainSessionKey, P as resolveAgentMainSessionKey, U as resolveSandboxConfigForAgent, d as loadSessionStore, i as removeSandboxContainer, n as listSandboxContainers, r as removeSandboxBrowserContainer, t as listSandboxBrowsers } from "./sandbox-Cnq9TXEn.js";
-import "./skills-DtwGIkTI.js";
-import { t as formatHelpExamples } from "./help-format-af1XWYxC.js";
+import "./auth-profiles-CYBuGiBb.js";
+import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
+import { _ as parseAgentSessionKey, c as normalizeAgentId, i as buildAgentMainSessionKey, l as normalizeMainKey, u as resolveAgentIdFromSessionKey } from "./session-key-CZkcvAtx.js";
+import "./utils-DX85MiPR.js";
+import "./exec-B8JKbXKW.js";
+import { n as resolveAgentConfig } from "./agent-scope-C9VjJXEK.js";
+import "./github-copilot-token-SLWintYd.js";
+import { i as loadConfig } from "./config-CKLedg5Y.js";
+import "./manifest-registry-C69Z-I4v.js";
+import "./server-context-yKyxyxOJ.js";
+import "./errors-CZ9opC6L.js";
+import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-BlgPSDAh.js";
+import { t as formatDocsLink } from "./links-D0uzJbi6.js";
+import "./plugins-BUPpq5aS.js";
+import "./logging-CfEk_PnX.js";
+import "./accounts-Dto4p9zB.js";
+import { o as resolveStorePath } from "./paths-CTg8F3AE.js";
+import "./routes-BSfXf8a5.js";
+import { G as resolveSandboxToolPolicyForAgent, I as resolveMainSessionKey, P as resolveAgentMainSessionKey, U as resolveSandboxConfigForAgent, d as loadSessionStore, i as removeSandboxContainer, n as listSandboxContainers, r as removeSandboxBrowserContainer, t as listSandboxBrowsers } from "./sandbox-DuqLKN5J.js";
+import "./skills-CmU0Q92f.js";
+import { t as formatHelpExamples } from "./help-format-CfZ94KRN.js";
 import { confirm } from "@clack/prompts";
 
 //#region src/commands/sandbox-explain.ts