@gguf/claw 2026.2.9 → 2026.2.13

package/dist/plugin-sdk/infra/binaries.d.ts

@@ -0,0 +1,3 @@
+import { runExec } from "../process/exec.js";
+import { type RuntimeEnv } from "../runtime.js";
+export declare function ensureBinary(name: string, exec?: typeof runExec, runtime?: RuntimeEnv): Promise<void>;

package/dist/plugin-sdk/infra/brew.d.ts

@@ -0,0 +1,8 @@
+export declare function resolveBrewPathDirs(opts?: {
+    homeDir?: string;
+    env?: NodeJS.ProcessEnv;
+}): string[];
+export declare function resolveBrewExecutable(opts?: {
+    homeDir?: string;
+    env?: NodeJS.ProcessEnv;
+}): string | undefined;

package/dist/plugin-sdk/infra/heartbeat-active-hours.d.ts

@@ -0,0 +1,5 @@
+import type { OpenClawConfig } from "../config/config.js";
+import type { AgentDefaultsConfig } from "../config/types.agent-defaults.js";
+type HeartbeatConfig = AgentDefaultsConfig["heartbeat"];
+export declare function isWithinActiveHours(cfg: OpenClawConfig, heartbeat?: HeartbeatConfig, nowMs?: number): boolean;
+export {};

package/dist/plugin-sdk/infra/heartbeat-runner.d.ts

@@ -20,6 +20,7 @@ export type HeartbeatSummary = {
     model?: string;
     ackMaxChars: number;
 };
+export declare function isCronSystemEvent(evt: string): boolean;
 export type HeartbeatRunner = {
     stop: () => void;
     updateConfig: (cfg: OpenClawConfig) => void;

package/dist/plugin-sdk/infra/heartbeat-wake.d.ts

@@ -11,10 +11,17 @@ export type HeartbeatRunResult = {
 export type HeartbeatWakeHandler = (opts: {
     reason?: string;
 }) => Promise<HeartbeatRunResult>;
-export declare function setHeartbeatWakeHandler(next: HeartbeatWakeHandler | null): void;
+/**
+ * Register (or clear) the heartbeat wake handler.
+ * Returns a disposer function that clears this specific registration.
+ * Stale disposers (from previous registrations) are no-ops, preventing
+ * a race where an old runner's cleanup clears a newer runner's handler.
+ */
+export declare function setHeartbeatWakeHandler(next: HeartbeatWakeHandler | null): () => void;
 export declare function requestHeartbeatNow(opts?: {
     reason?: string;
     coalesceMs?: number;
 }): void;
 export declare function hasHeartbeatWakeHandler(): boolean;
 export declare function hasPendingHeartbeatWake(): boolean;
+export declare function resetHeartbeatWakeStateForTests(): void;

package/dist/plugin-sdk/infra/net/fetch-guard.d.ts

@@ -10,6 +10,7 @@ export type GuardedFetchOptions = {
     policy?: SsrFPolicy;
     lookupFn?: LookupFn;
     pinDns?: boolean;
+    auditContext?: string;
 };
 export type GuardedFetchResult = {
     response: Response;

package/dist/plugin-sdk/infra/net/ssrf.d.ts

@@ -8,6 +8,7 @@ export type LookupFn = typeof dnsLookup;
 export type SsrFPolicy = {
     allowPrivateNetwork?: boolean;
     allowedHostnames?: string[];
+    hostnameAllowlist?: string[];
 };
 export declare function isPrivateIpAddress(address: string): boolean;
 export declare function isBlockedHostname(hostname: string): boolean;

package/dist/plugin-sdk/infra/outbound/message.d.ts

@@ -17,6 +17,8 @@ type MessageSendParams = {
     mediaUrls?: string[];
     gifPlayback?: boolean;
     accountId?: string;
+    replyToId?: string;
+    threadId?: string | number;
     dryRun?: boolean;
     bestEffort?: boolean;
     deps?: OutboundSendDeps;

package/dist/plugin-sdk/infra/outbound/outbound-send-service.d.ts

@@ -37,6 +37,8 @@ export declare function executeSendAction(params: {
     mediaUrls?: string[];
     gifPlayback?: boolean;
     bestEffort?: boolean;
+    replyToId?: string;
+    threadId?: string | number;
 }): Promise<{
     handledBy: "plugin" | "core";
     payload: unknown;

package/dist/plugin-sdk/infra/session-cost-usage.d.ts

@@ -119,6 +119,7 @@ export declare function loadSessionCostSummary(params: {
     sessionEntry?: SessionEntry;
     sessionFile?: string;
     config?: OpenClawConfig;
+    agentId?: string;
     startMs?: number;
     endMs?: number;
 }): Promise<SessionCostSummary | null>;
@@ -142,6 +143,7 @@ export declare function loadSessionUsageTimeSeries(params: {
     sessionEntry?: SessionEntry;
     sessionFile?: string;
     config?: OpenClawConfig;
+    agentId?: string;
     maxPoints?: number;
 }): Promise<SessionUsageTimeSeries | null>;
 export type SessionLogEntry = {
@@ -156,5 +158,6 @@ export declare function loadSessionLogs(params: {
     sessionEntry?: SessionEntry;
     sessionFile?: string;
     config?: OpenClawConfig;
+    agentId?: string;
     limit?: number;
 }): Promise<SessionLogEntry[] | null>;

package/dist/plugin-sdk/infra/tailscale.d.ts

@@ -0,0 +1,34 @@
+import { promptYesNo } from "../cli/prompt.js";
+import { runExec } from "../process/exec.js";
+import { type RuntimeEnv } from "../runtime.js";
+/**
+ * Locate Tailscale binary using multiple strategies:
+ * 1. PATH lookup (via which command)
+ * 2. Known macOS app path
+ * 3. find /Applications for Tailscale.app
+ * 4. locate database (if available)
+ *
+ * @returns Path to Tailscale binary or null if not found
+ */
+export declare function findTailscaleBinary(): Promise<string | null>;
+export declare function getTailnetHostname(exec?: typeof runExec, detectedBinary?: string): Promise<string>;
+export declare function getTailscaleBinary(): Promise<string>;
+export declare function readTailscaleStatusJson(exec?: typeof runExec, opts?: {
+    timeoutMs?: number;
+}): Promise<Record<string, unknown>>;
+export declare function ensureGoInstalled(exec?: typeof runExec, prompt?: typeof promptYesNo, runtime?: RuntimeEnv): Promise<void>;
+export declare function ensureTailscaledInstalled(exec?: typeof runExec, prompt?: typeof promptYesNo, runtime?: RuntimeEnv): Promise<void>;
+export type TailscaleWhoisIdentity = {
+    login: string;
+    name?: string;
+};
+export declare function ensureFunnel(port: number, exec?: typeof runExec, runtime?: RuntimeEnv, prompt?: typeof promptYesNo): Promise<void>;
+export declare function enableTailscaleServe(port: number, exec?: typeof runExec): Promise<void>;
+export declare function disableTailscaleServe(exec?: typeof runExec): Promise<void>;
+export declare function enableTailscaleFunnel(port: number, exec?: typeof runExec): Promise<void>;
+export declare function disableTailscaleFunnel(exec?: typeof runExec): Promise<void>;
+export declare function readTailscaleWhoisIdentity(ip: string, exec?: typeof runExec, opts?: {
+    timeoutMs?: number;
+    cacheTtlMs?: number;
+    errorTtlMs?: number;
+}): Promise<TailscaleWhoisIdentity | null>;

package/dist/plugin-sdk/infra/tmp-openclaw-dir.d.ts

@@ -0,0 +1,10 @@
+export declare const POSIX_OPENCLAW_TMP_DIR = "/tmp/openclaw";
+type ResolvePreferredOpenClawTmpDirOptions = {
+    accessSync?: (path: string, mode?: number) => void;
+    statSync?: (path: string) => {
+        isDirectory(): boolean;
+    };
+    tmpdir?: () => string;
+};
+export declare function resolvePreferredOpenClawTmpDir(options?: ResolvePreferredOpenClawTmpDirOptions): string;
+export {};

package/dist/plugin-sdk/logging/console.d.ts

@@ -1,3 +1,4 @@
+import type { OpenClawConfig } from "../config/types.js";
 import { type LogLevel } from "./levels.js";
 export type ConsoleStyle = "pretty" | "compact" | "json";
 type ConsoleSettings = {
@@ -5,12 +6,15 @@ type ConsoleSettings = {
     style: ConsoleStyle;
 };
 export type ConsoleLoggerSettings = ConsoleSettings;
+type ConsoleConfigLoader = () => OpenClawConfig["logging"] | undefined;
+export declare function setConsoleConfigLoaderForTests(loader?: ConsoleConfigLoader): void;
 export declare function getConsoleSettings(): ConsoleLoggerSettings;
 export declare function getResolvedConsoleSettings(): ConsoleLoggerSettings;
 export declare function routeLogsToStderr(): void;
 export declare function setConsoleSubsystemFilter(filters?: string[] | null): void;
 export declare function setConsoleTimestampPrefix(enabled: boolean): void;
 export declare function shouldLogSubsystemToConsole(subsystem: string): boolean;
+export declare function formatConsoleTimestamp(style: ConsoleStyle): string;
 /**
  * Route console.* calls through file logging while still emitting to stdout/stderr.
  * This keeps user-facing output unchanged but guarantees every console call is captured in log files.

package/dist/plugin-sdk/logging/logger.d.ts

@@ -1,7 +1,7 @@
 import { Logger as TsLogger } from "tslog";
 import type { ConsoleStyle } from "./console.js";
 import { type LogLevel } from "./levels.js";
-export declare const DEFAULT_LOG_DIR = "/tmp/openclaw";
+export declare const DEFAULT_LOG_DIR: string;
 export declare const DEFAULT_LOG_FILE: string;
 export type LoggerSettings = {
     level?: LogLevel;

package/dist/plugin-sdk/logging/state.d.ts

@@ -8,6 +8,7 @@ export declare const loggingState: {
     consoleTimestampPrefix: boolean;
     consoleSubsystemFilter: string[] | null;
     resolvingConsoleSettings: boolean;
+    streamErrorHandlersInstalled: boolean;
     rawConsole: {
         log: typeof console.log;
         info: typeof console.info;

package/dist/plugin-sdk/logging.d.ts

@@ -2,9 +2,9 @@ import type { ConsoleLoggerSettings, ConsoleStyle } from "./logging/console.js";
 import type { LogLevel } from "./logging/levels.js";
 import type { LoggerResolvedSettings, LoggerSettings, PinoLikeLogger } from "./logging/logger.js";
 import type { SubsystemLogger } from "./logging/subsystem.js";
-import { enableConsoleCapture, getConsoleSettings, getResolvedConsoleSettings, routeLogsToStderr, setConsoleSubsystemFilter, setConsoleTimestampPrefix, shouldLogSubsystemToConsole } from "./logging/console.js";
+import { enableConsoleCapture, getConsoleSettings, getResolvedConsoleSettings, routeLogsToStderr, setConsoleSubsystemFilter, setConsoleConfigLoaderForTests, setConsoleTimestampPrefix, shouldLogSubsystemToConsole } from "./logging/console.js";
 import { ALLOWED_LOG_LEVELS, levelToMinLevel, normalizeLogLevel } from "./logging/levels.js";
 import { DEFAULT_LOG_DIR, DEFAULT_LOG_FILE, getChildLogger, getLogger, getResolvedLoggerSettings, isFileLogLevelEnabled, resetLogger, setLoggerOverride, toPinoLikeLogger } from "./logging/logger.js";
 import { createSubsystemLogger, createSubsystemRuntime, runtimeForLogger, stripRedundantSubsystemPrefixForConsole } from "./logging/subsystem.js";
-export { enableConsoleCapture, getConsoleSettings, getResolvedConsoleSettings, routeLogsToStderr, setConsoleSubsystemFilter, setConsoleTimestampPrefix, shouldLogSubsystemToConsole, ALLOWED_LOG_LEVELS, levelToMinLevel, normalizeLogLevel, DEFAULT_LOG_DIR, DEFAULT_LOG_FILE, getChildLogger, getLogger, getResolvedLoggerSettings, isFileLogLevelEnabled, resetLogger, setLoggerOverride, toPinoLikeLogger, createSubsystemLogger, createSubsystemRuntime, runtimeForLogger, stripRedundantSubsystemPrefixForConsole, };
+export { enableConsoleCapture, getConsoleSettings, getResolvedConsoleSettings, routeLogsToStderr, setConsoleSubsystemFilter, setConsoleConfigLoaderForTests, setConsoleTimestampPrefix, shouldLogSubsystemToConsole, ALLOWED_LOG_LEVELS, levelToMinLevel, normalizeLogLevel, DEFAULT_LOG_DIR, DEFAULT_LOG_FILE, getChildLogger, getLogger, getResolvedLoggerSettings, isFileLogLevelEnabled, resetLogger, setLoggerOverride, toPinoLikeLogger, createSubsystemLogger, createSubsystemRuntime, runtimeForLogger, stripRedundantSubsystemPrefixForConsole, };
 export type { ConsoleLoggerSettings, ConsoleStyle, LogLevel, LoggerResolvedSettings, LoggerSettings, PinoLikeLogger, SubsystemLogger, };

package/dist/plugin-sdk/markdown/ir.d.ts

@@ -1,5 +1,5 @@
 import type { MarkdownTableMode } from "../config/types.base.js";
-export type MarkdownStyle = "bold" | "italic" | "strikethrough" | "code" | "code_block" | "spoiler";
+export type MarkdownStyle = "bold" | "italic" | "strikethrough" | "code" | "code_block" | "spoiler" | "blockquote";
 export type MarkdownStyleSpan = {
     start: number;
     end: number;

package/dist/plugin-sdk/markdown/whatsapp.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Convert standard Markdown bold/italic/strikethrough to WhatsApp formatting.
+ *
+ * Order of operations matters:
+ * 1. Protect fenced code blocks (```...```) — already WhatsApp-compatible
+ * 2. Protect inline code (`...`) — leave as-is
+ * 3. Convert **bold** → *bold* and __bold__ → *bold*
+ * 4. Convert ~~strike~~ → ~strike~
+ * 5. Restore protected spans
+ *
+ * Italic *text* and _text_ are left alone since WhatsApp uses _text_ for italic
+ * and single * is already WhatsApp bold — no conversion needed for single markers.
+ */
+export declare function markdownToWhatsApp(text: string): string;

package/dist/plugin-sdk/media/input-files.d.ts

@@ -1,3 +1,4 @@
+import type { SsrFPolicy } from "../infra/net/ssrf.js";
 export type InputImageContent = {
     type: "image";
     data: string;
@@ -15,6 +16,7 @@ export type InputPdfLimits = {
 };
 export type InputFileLimits = {
     allowUrl: boolean;
+    urlAllowlist?: string[];
     allowedMimes: Set<string>;
     maxBytes: number;
     maxChars: number;
@@ -24,6 +26,7 @@ export type InputFileLimits = {
 };
 export type InputImageLimits = {
     allowUrl: boolean;
+    urlAllowlist?: string[];
     allowedMimes: Set<string>;
     maxBytes: number;
     maxRedirects: number;
@@ -68,6 +71,8 @@ export declare function fetchWithGuard(params: {
     maxBytes: number;
     timeoutMs: number;
     maxRedirects: number;
+    policy?: SsrFPolicy;
+    auditContext?: string;
 }): Promise<InputFetchResult>;
 export declare function extractImageContentFromSource(source: InputImageSource, limits: InputImageLimits): Promise<InputImageContent>;
 export declare function extractFileContentFromSource(params: {

package/dist/plugin-sdk/media/store.d.ts

@@ -1,4 +1,13 @@
+import { request as httpRequest } from "node:http";
+import { resolvePinnedHostname } from "../infra/net/ssrf.js";
 export declare const MEDIA_MAX_BYTES: number;
+type RequestImpl = typeof httpRequest;
+type ResolvePinnedHostnameImpl = typeof resolvePinnedHostname;
+export declare function setMediaStoreNetworkDepsForTest(deps?: {
+    httpRequest?: RequestImpl;
+    httpsRequest?: RequestImpl;
+    resolvePinnedHostname?: ResolvePinnedHostnameImpl;
+}): void;
 /**
  * Extract original filename from path if it matches the embedded format.
  * Pattern: {original}---{uuid}.{ext} → returns "{original}.{ext}"
@@ -16,3 +25,4 @@ export type SavedMedia = {
 };
 export declare function saveMediaSource(source: string, headers?: Record<string, string>, subdir?: string): Promise<SavedMedia>;
 export declare function saveMediaBuffer(buffer: Buffer, contentType?: string, subdir?: string, maxBytes?: number, originalFilename?: string): Promise<SavedMedia>;
+export {};

package/dist/plugin-sdk/media-understanding/audio-preflight.d.ts

@@ -0,0 +1,16 @@
+import type { MsgContext } from "../auto-reply/templating.js";
+import type { OpenClawConfig } from "../config/config.js";
+import type { MediaUnderstandingProvider } from "./types.js";
+import { type ActiveMediaModel } from "./runner.js";
+/**
+ * Transcribes the first audio attachment BEFORE mention checking.
+ * This allows voice notes to be processed in group chats with requireMention: true.
+ * Returns the transcript or undefined if transcription fails or no audio is found.
+ */
+export declare function transcribeFirstAudio(params: {
+    ctx: MsgContext;
+    cfg: OpenClawConfig;
+    agentDir?: string;
+    providers?: Record<string, MediaUnderstandingProvider>;
+    activeModel?: ActiveMediaModel;
+}): Promise<string | undefined>;

package/dist/plugin-sdk/media-understanding/types.d.ts

@@ -5,6 +5,7 @@ export type MediaAttachment = {
     url?: string;
     mime?: string;
     index: number;
+    alreadyTranscribed?: boolean;
 };
 export type MediaUnderstandingOutput = {
     kind: MediaUnderstandingKind;

package/dist/plugin-sdk/memory/backend-config.d.ts

@@ -1,6 +1,6 @@
 import type { OpenClawConfig } from "../config/config.js";
 import type { SessionSendPolicyConfig } from "../config/types.base.js";
-import type { MemoryBackend, MemoryCitationsMode } from "../config/types.memory.js";
+import type { MemoryBackend, MemoryCitationsMode, MemoryQmdSearchMode } from "../config/types.memory.js";
 export type ResolvedMemoryBackendConfig = {
     backend: MemoryBackend;
     citations: MemoryCitationsMode;
@@ -35,6 +35,7 @@ export type ResolvedQmdSessionConfig = {
 };
 export type ResolvedQmdConfig = {
     command: string;
+    searchMode: MemoryQmdSearchMode;
     collections: ResolvedQmdCollection[];
     sessions: ResolvedQmdSessionConfig;
     update: ResolvedQmdUpdateConfig;

package/dist/plugin-sdk/memory/embedding-chunk-limits.d.ts

@@ -0,0 +1,3 @@
+import type { EmbeddingProvider } from "./embeddings.js";
+import { type MemoryChunk } from "./internal.js";
+export declare function enforceEmbeddingMaxInputTokens(provider: EmbeddingProvider, chunks: MemoryChunk[]): MemoryChunk[];

package/dist/plugin-sdk/memory/embedding-input-limits.d.ts

@@ -0,0 +1,2 @@
+export declare function estimateUtf8Bytes(text: string): number;
+export declare function splitTextToUtf8ByteLimit(text: string, maxUtf8Bytes: number): string[];

package/dist/plugin-sdk/memory/embedding-model-limits.d.ts

@@ -0,0 +1,2 @@
+import type { EmbeddingProvider } from "./embeddings.js";
+export declare function resolveEmbeddingMaxInputTokens(provider: EmbeddingProvider): number;

package/dist/plugin-sdk/memory/embeddings.d.ts

@@ -8,6 +8,7 @@ export type { VoyageEmbeddingClient } from "./embeddings-voyage.js";
 export type EmbeddingProvider = {
     id: string;
     model: string;
+    maxInputTokens?: number;
     embedQuery: (text: string) => Promise<number[]>;
     embedBatch: (texts: string[]) => Promise<number[][]>;
 };

package/dist/plugin-sdk/memory/internal.d.ts

@@ -22,6 +22,17 @@ export declare function chunkMarkdown(content: string, chunking: {
     tokens: number;
     overlap: number;
 }): MemoryChunk[];
+/**
+ * Remap chunk startLine/endLine from content-relative positions to original
+ * source file positions using a lineMap.  Each entry in lineMap gives the
+ * 1-indexed source line for the corresponding 0-indexed content line.
+ *
+ * This is used for session JSONL files where buildSessionEntry() flattens
+ * messages into a plain-text string before chunking.  Without remapping the
+ * stored line numbers would reference positions in the flattened text rather
+ * than the original JSONL file.
+ */
+export declare function remapChunkLines(chunks: MemoryChunk[], lineMap: number[] | undefined): void;
 export declare function parseEmbedding(raw: string): number[];
 export declare function cosineSimilarity(a: number[], b: number[]): number;
 export declare function runWithConcurrency<T>(tasks: Array<() => Promise<T>>, limit: number): Promise<T[]>;

package/dist/plugin-sdk/memory/manager.d.ts

@@ -104,12 +104,6 @@ export declare class MemoryIndexManager implements MemorySearchManager {
     private resetIndex;
     private readMeta;
     private writeMeta;
-    private listSessionFiles;
-    private sessionPathForFile;
-    private normalizeSessionText;
-    private extractSessionText;
-    private buildSessionEntry;
-    private estimateEmbeddingTokens;
     private buildEmbeddingBatches;
     private loadEmbeddingCache;
     private upsertEmbeddingCache;

package/dist/plugin-sdk/memory/qmd-manager.d.ts

@@ -89,7 +89,9 @@ export declare class QmdMemoryManager implements MemorySearchManager {
     private clampResultsByInjectedChars;
     private shouldSkipUpdate;
     private isSqliteBusyError;
+    private isUnsupportedQmdOptionError;
     private createQmdBusyError;
     private waitForPendingUpdateBeforeSearch;
     private buildCollectionFilterArgs;
+    private buildSearchArgs;
 }

package/dist/plugin-sdk/memory/qmd-query-parser.d.ts

@@ -0,0 +1,8 @@
+export type QmdQueryResult = {
+    docid?: string;
+    score?: number;
+    file?: string;
+    snippet?: string;
+    body?: string;
+};
+export declare function parseQmdQueryJson(stdout: string, stderr: string): QmdQueryResult[];

package/dist/plugin-sdk/memory/session-files.d.ts

@@ -5,6 +5,8 @@ export type SessionFileEntry = {
     size: number;
     hash: string;
     content: string;
+    /** Maps each content line (0-indexed) to its 1-indexed JSONL source line. */
+    lineMap: number[];
 };
 export declare function listSessionFilesForAgent(agentId: string): Promise<string[]>;
 export declare function sessionPathForFile(absPath: string): string;

package/dist/plugin-sdk/process/command-queue.d.ts

@@ -10,3 +10,19 @@ export declare function enqueueCommand<T>(task: () => Promise<T>, opts?: {
 export declare function getQueueSize(lane?: string): number;
 export declare function getTotalQueueSize(): number;
 export declare function clearCommandLane(lane?: string): number;
+/**
+ * Returns the total number of actively executing tasks across all lanes
+ * (excludes queued-but-not-started entries).
+ */
+export declare function getActiveTaskCount(): number;
+/**
+ * Wait for all currently active tasks across all lanes to finish.
+ * Polls at a short interval; resolves when no tasks are active or
+ * when `timeoutMs` elapses (whichever comes first).
+ *
+ * New tasks enqueued after this call are ignored — only tasks that are
+ * already executing are waited on.
+ */
+export declare function waitForActiveTasks(timeoutMs: number): Promise<{
+    drained: boolean;
+}>;

package/dist/plugin-sdk/providers/github-copilot-token.d.ts

@@ -11,6 +11,9 @@ export declare function resolveCopilotApiToken(params: {
     githubToken: string;
     env?: NodeJS.ProcessEnv;
     fetchImpl?: typeof fetch;
+    cachePath?: string;
+    loadJsonFileImpl?: (path: string) => unknown;
+    saveJsonFileImpl?: (path: string, value: CachedCopilotToken) => void;
 }): Promise<{
     token: string;
     expiresAt: number;

package/dist/plugin-sdk/routing/resolve-route.d.ts

@@ -15,6 +15,8 @@ export type ResolveAgentRouteInput = {
     parentPeer?: RoutePeer | null;
     guildId?: string | null;
     teamId?: string | null;
+    /** Discord member role IDs — used for role-based agent routing. */
+    memberRoleIds?: string[];
 };
 export type ResolvedAgentRoute = {
     agentId: string;
@@ -25,7 +27,7 @@ export type ResolvedAgentRoute = {
     /** Convenience alias for direct-chat collapse. */
     mainSessionKey: string;
     /** Match description for debugging/logging. */
-    matchedBy: "binding.peer" | "binding.peer.parent" | "binding.guild" | "binding.team" | "binding.account" | "binding.channel" | "default";
+    matchedBy: "binding.peer" | "binding.peer.parent" | "binding.guild+roles" | "binding.guild" | "binding.team" | "binding.account" | "binding.channel" | "default";
 };
 export { DEFAULT_ACCOUNT_ID, DEFAULT_AGENT_ID } from "./session-key.js";
 export declare function buildAgentSessionKey(params: {

package/dist/plugin-sdk/security/external-content.d.ts

@@ -11,7 +11,7 @@
  * Check if content contains suspicious patterns that may indicate injection.
  */
 export declare function detectSuspiciousPatterns(content: string): string[];
-export type ExternalContentSource = "email" | "webhook" | "api" | "channel_metadata" | "web_search" | "web_fetch" | "unknown";
+export type ExternalContentSource = "email" | "webhook" | "api" | "browser" | "channel_metadata" | "web_search" | "web_fetch" | "unknown";
 export type WrapExternalContentOptions = {
     /** Source of the external content */
     source: ExternalContentSource;

package/dist/plugin-sdk/security/secret-equal.d.ts

@@ -0,0 +1 @@
+export declare function safeEqualSecret(provided: string | undefined | null, expected: string | undefined | null): boolean;

package/dist/plugin-sdk/sessions/input-provenance.d.ts

@@ -0,0 +1,16 @@
+import type { AgentMessage } from "@mariozechner/pi-agent-core";
+export declare const INPUT_PROVENANCE_KIND_VALUES: readonly ["external_user", "inter_session", "internal_system"];
+export type InputProvenanceKind = (typeof INPUT_PROVENANCE_KIND_VALUES)[number];
+export type InputProvenance = {
+    kind: InputProvenanceKind;
+    sourceSessionKey?: string;
+    sourceChannel?: string;
+    sourceTool?: string;
+};
+export declare function normalizeInputProvenance(value: unknown): InputProvenance | undefined;
+export declare function applyInputProvenanceToUserMessage(message: AgentMessage, inputProvenance: InputProvenance | undefined): AgentMessage;
+export declare function isInterSessionInputProvenance(value: unknown): boolean;
+export declare function hasInterSessionUserProvenance(message: {
+    role?: unknown;
+    provenance?: unknown;
+} | undefined): boolean;

package/dist/plugin-sdk/signal/monitor/event-handler.types.d.ts

@@ -16,10 +16,18 @@ export type SignalEnvelope = {
     syncMessage?: unknown;
     reactionMessage?: SignalReactionMessage | null;
 };
+export type SignalMention = {
+    name?: string | null;
+    number?: string | null;
+    uuid?: string | null;
+    start?: number | null;
+    length?: number | null;
+};
 export type SignalDataMessage = {
     timestamp?: number;
     message?: string | null;
     attachments?: Array<SignalAttachment>;
+    mentions?: Array<SignalMention> | null;
     groupInfo?: {
         groupId?: string | null;
         groupName?: string | null;

package/dist/plugin-sdk/signal/monitor/mentions.d.ts

@@ -0,0 +1,2 @@
+import type { SignalMention } from "./event-handler.types.js";
+export declare function renderSignalMentions(message: string, mentions?: SignalMention[] | null): string;

package/dist/plugin-sdk/slack/monitor/commands.d.ts

@@ -1,4 +1,9 @@
 import type { SlackSlashCommandConfig } from "../../config/config.js";
+/**
+ * Strip Slack mentions (<@U123>, <@U123|name>) so command detection works on
+ * normalized text. Use in both prepare and debounce gate for consistency.
+ */
+export declare function stripSlackMentionsForCommandDetection(text: string): string;
 export declare function normalizeSlackSlashCommandName(raw: string): string;
 export declare function resolveSlackSlashCommandConfig(raw?: SlackSlashCommandConfig): Required<SlackSlashCommandConfig>;
 export declare function buildSlackSlashCommandMatcher(name: string): RegExp;

package/dist/plugin-sdk/slack/monitor/media.d.ts

@@ -27,3 +27,24 @@ export declare function resolveSlackThreadStarter(params: {
     threadTs: string;
     client: SlackWebClient;
 }): Promise<SlackThreadStarter | null>;
+export type SlackThreadMessage = {
+    text: string;
+    userId?: string;
+    ts?: string;
+    botId?: string;
+    files?: SlackFile[];
+};
+/**
+ * Fetches the most recent messages in a Slack thread (excluding the current message).
+ * Used to populate thread context when a new thread session starts.
+ *
+ * Uses cursor pagination and keeps only the latest N retained messages so long threads
+ * still produce up-to-date context without unbounded memory growth.
+ */
+export declare function resolveSlackThreadHistory(params: {
+    channelId: string;
+    threadTs: string;
+    client: SlackWebClient;
+    currentMessageTs?: string;
+    limit?: number;
+}): Promise<SlackThreadMessage[]>;

package/dist/plugin-sdk/slack/types.d.ts

@@ -2,6 +2,7 @@ export type SlackFile = {
     id?: string;
     name?: string;
     mimetype?: string;
+    subtype?: string;
     size?: number;
     url_private?: string;
     url_private_download?: string;

package/dist/plugin-sdk/telegram/bot-message-context.d.ts

@@ -1,4 +1,5 @@
 import type { Bot } from "grammy";
+import type { MsgContext } from "../auto-reply/templating.js";
 import type { OpenClawConfig } from "../config/config.js";
 import type { DmPolicy, TelegramGroupConfig, TelegramTopicConfig } from "../config/types.js";
 import type { StickerMetadata, TelegramContext } from "./bot/types.js";
@@ -106,7 +107,7 @@ export declare const buildTelegramMessageContext: ({ primaryCtx, allMedia, store
         MediaUrls: string[] | undefined;
         MediaTypes: string[] | undefined;
         Sticker: StickerMetadata | undefined;
-    } & Omit<import("../auto-reply/templating.ts").MsgContext, "CommandAuthorized"> & {
+    } & Omit<MsgContext, "CommandAuthorized"> & {
         CommandAuthorized: boolean;
     };
     primaryCtx: TelegramContext;

package/dist/plugin-sdk/telegram/fetch.d.ts

@@ -2,3 +2,4 @@ import type { TelegramNetworkConfig } from "../config/types.telegram.js";
 export declare function resolveTelegramFetch(proxyFetch?: typeof fetch, options?: {
     network?: TelegramNetworkConfig;
 }): typeof fetch | undefined;
+export declare function resetTelegramFetchStateForTests(): void;

package/dist/plugin-sdk/telegram/monitor.d.ts

@@ -11,6 +11,7 @@ export type MonitorTelegramOpts = {
     webhookPath?: string;
     webhookPort?: number;
     webhookSecret?: string;
+    webhookHost?: string;
     proxyFetch?: typeof fetch;
     webhookUrl?: string;
 };

package/dist/plugin-sdk/telegram/send.d.ts

@@ -46,6 +46,9 @@ export declare function buildInlineKeyboard(buttons?: TelegramSendOpts["buttons"
 export declare function sendMessageTelegram(to: string, text: string, opts?: TelegramSendOpts): Promise<TelegramSendResult>;
 export declare function reactMessageTelegram(chatIdInput: string | number, messageIdInput: string | number, emoji: string, opts?: TelegramReactionOpts): Promise<{
     ok: true;
+} | {
+    ok: false;
+    warning: string;
 }>;
 type TelegramDeleteOpts = {
     token?: string;

package/dist/plugin-sdk/tts/tts.d.ts

@@ -146,7 +146,7 @@ export declare function isTtsProviderConfigured(config: ResolvedTtsConfig, provi
 declare function isValidVoiceId(voiceId: string): boolean;
 declare function parseTtsDirectives(text: string, policy: ResolvedTtsModelOverrides): TtsDirectiveParseResult;
 export declare const OPENAI_TTS_MODELS: readonly ["gpt-4o-mini-tts", "tts-1", "tts-1-hd"];
-export declare const OPENAI_TTS_VOICES: readonly ["alloy", "ash", "coral", "echo", "fable", "onyx", "nova", "sage", "shimmer"];
+export declare const OPENAI_TTS_VOICES: readonly ["alloy", "ash", "ballad", "cedar", "coral", "echo", "fable", "juniper", "marin", "onyx", "nova", "sage", "shimmer", "verse"];
 type OpenAiTtsVoice = (typeof OPENAI_TTS_VOICES)[number];
 declare function isValidOpenAIModel(model: string): boolean;
 declare function isValidOpenAIVoice(voice: string): voice is OpenAiTtsVoice;
@@ -188,7 +188,7 @@ export declare const _test: {
     isValidOpenAIVoice: typeof isValidOpenAIVoice;
     isValidOpenAIModel: typeof isValidOpenAIModel;
     OPENAI_TTS_MODELS: readonly ["gpt-4o-mini-tts", "tts-1", "tts-1-hd"];
-    OPENAI_TTS_VOICES: readonly ["alloy", "ash", "coral", "echo", "fable", "onyx", "nova", "sage", "shimmer"];
+    OPENAI_TTS_VOICES: readonly ["alloy", "ash", "ballad", "cedar", "coral", "echo", "fable", "juniper", "marin", "onyx", "nova", "sage", "shimmer", "verse"];
     parseTtsDirectives: typeof parseTtsDirectives;
     resolveModelOverridePolicy: typeof resolveModelOverridePolicy;
     summarizeText: typeof summarizeText;