@gguf/claw 2026.2.9 → 2026.2.13

package/dist/{service-audit-CVy00Ze_.js → service-audit-B8KIOe8A.js}

@@ -1,7 +1,7 @@
-import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel, n as GATEWAY_SERVICE_KIND, r as GATEWAY_SERVICE_MARKER } from "./constants-DuoCkWRh.js";
-import { c as getMinimalServicePathPartsFromEnv, l as isSystemNodePath, m as resolveSystemNodePath, u as isVersionManagedNodePath } from "./daemon-runtime-CMqH8BUE.js";
-import { o as resolveGatewayLogPaths, s as resolveLaunchAgentPlistPath } from "./service-DDPRbf8a.js";
-import { o as resolveSystemdUserUnitPath } from "./systemd-BEWwfwn0.js";
+import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel, n as GATEWAY_SERVICE_KIND, r as GATEWAY_SERVICE_MARKER } from "./constants-BvQ6S8j5.js";
+import { c as getMinimalServicePathPartsFromEnv, l as isSystemNodePath, m as resolveSystemNodePath, u as isVersionManagedNodePath } from "./daemon-runtime-ZWXvLDxx.js";
+import { o as resolveGatewayLogPaths, s as resolveLaunchAgentPlistPath } from "./service-DZN7KRok.js";
+import { o as resolveSystemdUserUnitPath } from "./systemd-s3S2HVog.js";
 import { execFile } from "node:child_process";
 import path from "node:path";
 import { promisify } from "node:util";

package/dist/{session-cost-usage-CcCEQNuc.js → session-cost-usage-B-tyjp76.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { a as resolveSessionTranscriptsDirForAgent, n as resolveSessionFilePath } from "./paths-IivnSNkP.js";
-import { i as resolveModelCostConfig, t as estimateUsageCost } from "./usage-format-6Uar63S0.js";
+import { n as resolveSessionFilePath, s as resolveSessionTranscriptsDirForAgent } from "./paths-BZK4Ct0I.js";
+import { i as resolveModelCostConfig, t as estimateUsageCost } from "./usage-format-Bhl_WCWP.js";
 import path from "node:path";
 import fs from "node:fs";
 import readline from "node:readline";
@@ -46,17 +46,17 @@ function derivePromptTokens(usage) {
 	return sum > 0 ? sum : void 0;
 }
 function deriveSessionTotalTokens(params) {
+	const promptOverride = params.promptTokens;
+	const hasPromptOverride = typeof promptOverride === "number" && Number.isFinite(promptOverride) && promptOverride > 0;
 	const usage = params.usage;
-	if (!usage) return;
-	const input = usage.input ?? 0;
-	let total = derivePromptTokens({
-		input: usage.input,
-		cacheRead: usage.cacheRead,
-		cacheWrite: usage.cacheWrite
-	}) ?? usage.total ?? input;
+	if (!usage && !hasPromptOverride) return;
+	const input = usage?.input ?? 0;
+	let total = (hasPromptOverride ? promptOverride : derivePromptTokens({
+		input: usage?.input,
+		cacheRead: usage?.cacheRead,
+		cacheWrite: usage?.cacheWrite
+	})) ?? usage?.total ?? input;
 	if (!(total > 0)) return;
-	const contextTokens = params.contextTokens;
-	if (typeof contextTokens === "number" && Number.isFinite(contextTokens) && contextTokens > 0) total = Math.min(total, contextTokens);
 	return total;
 }
 
@@ -380,7 +380,7 @@ async function discoverAllSessions(params) {
 	return discovered.toSorted((a, b) => b.mtime - a.mtime);
 }
 async function loadSessionCostSummary(params) {
-	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry) : void 0);
+	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : void 0);
 	if (!sessionFile || !fs.existsSync(sessionFile)) return null;
 	const totals = emptyTotals();
 	let firstActivity;
@@ -564,7 +564,7 @@ async function loadSessionCostSummary(params) {
 	};
 }
 async function loadSessionUsageTimeSeries(params) {
-	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry) : void 0);
+	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : void 0);
 	if (!sessionFile || !fs.existsSync(sessionFile)) return null;
 	const points = [];
 	let cumulativeTokens = 0;
@@ -614,7 +614,7 @@ async function loadSessionUsageTimeSeries(params) {
 	};
 }
 async function loadSessionLogs(params) {
-	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry) : void 0);
+	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : void 0);
 	if (!sessionFile || !fs.existsSync(sessionFile)) return null;
 	const logs = [];
 	const limit = params.limit ?? 50;

package/dist/{session-cost-usage-PvyVZz-g.js → session-cost-usage-BYUb7fov.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { a as resolveSessionTranscriptsDirForAgent, n as resolveSessionFilePath } from "./paths-Bkhd_qY8.js";
-import { i as resolveModelCostConfig, t as estimateUsageCost } from "./usage-format-hd37en6b.js";
+import { n as resolveSessionFilePath, s as resolveSessionTranscriptsDirForAgent } from "./paths-DdKf4lHp.js";
+import { i as resolveModelCostConfig, t as estimateUsageCost } from "./usage-format-CpORtVCG.js";
 import fs from "node:fs";
 import path from "node:path";
 import readline from "node:readline";
@@ -46,17 +46,17 @@ function derivePromptTokens(usage) {
 	return sum > 0 ? sum : void 0;
 }
 function deriveSessionTotalTokens(params) {
+	const promptOverride = params.promptTokens;
+	const hasPromptOverride = typeof promptOverride === "number" && Number.isFinite(promptOverride) && promptOverride > 0;
 	const usage = params.usage;
-	if (!usage) return;
-	const input = usage.input ?? 0;
-	let total = derivePromptTokens({
-		input: usage.input,
-		cacheRead: usage.cacheRead,
-		cacheWrite: usage.cacheWrite
-	}) ?? usage.total ?? input;
+	if (!usage && !hasPromptOverride) return;
+	const input = usage?.input ?? 0;
+	let total = (hasPromptOverride ? promptOverride : derivePromptTokens({
+		input: usage?.input,
+		cacheRead: usage?.cacheRead,
+		cacheWrite: usage?.cacheWrite
+	})) ?? usage?.total ?? input;
 	if (!(total > 0)) return;
-	const contextTokens = params.contextTokens;
-	if (typeof contextTokens === "number" && Number.isFinite(contextTokens) && contextTokens > 0) total = Math.min(total, contextTokens);
 	return total;
 }
 
@@ -380,7 +380,7 @@ async function discoverAllSessions(params) {
 	return discovered.toSorted((a, b) => b.mtime - a.mtime);
 }
 async function loadSessionCostSummary(params) {
-	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry) : void 0);
+	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : void 0);
 	if (!sessionFile || !fs.existsSync(sessionFile)) return null;
 	const totals = emptyTotals();
 	let firstActivity;
@@ -564,7 +564,7 @@ async function loadSessionCostSummary(params) {
 	};
 }
 async function loadSessionUsageTimeSeries(params) {
-	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry) : void 0);
+	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : void 0);
 	if (!sessionFile || !fs.existsSync(sessionFile)) return null;
 	const points = [];
 	let cumulativeTokens = 0;
@@ -614,7 +614,7 @@ async function loadSessionUsageTimeSeries(params) {
 	};
 }
 async function loadSessionLogs(params) {
-	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry) : void 0);
+	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : void 0);
 	if (!sessionFile || !fs.existsSync(sessionFile)) return null;
 	const logs = [];
 	const limit = params.limit ?? 50;

package/dist/{shared-BnpC3wMU.js → shared-BCdNboU1.js}

@@ -1,7 +1,7 @@
-import { c as defaultRuntime } from "./subsystem-DPnkvS73.js";
+import { c as defaultRuntime } from "./subsystem-DHfJG4gk.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
-import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-CNTiY-ZN.js";
-import { t as resolveGatewayService } from "./service-DOlJdIqe.js";
+import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-BvQ6S8j5.js";
+import { t as resolveGatewayService } from "./service-BnqdBTAK.js";
 
 //#region src/cli/gateway-cli/shared.ts
 function parsePort(raw) {

package/dist/{shared-CagUDdmp.js → shared-CsAwU6-q.js}

@@ -1,7 +1,7 @@
 import { p as defaultRuntime } from "./entry.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
-import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-DuoCkWRh.js";
-import { t as resolveGatewayService } from "./service-DDPRbf8a.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
+import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-BvQ6S8j5.js";
+import { t as resolveGatewayService } from "./service-DZN7KRok.js";
 
 //#region src/cli/gateway-cli/shared.ts
 function parsePort(raw) {

package/dist/{shared-BDk_zC9p.js → shared-Csn6DLBA.js}

@@ -1,8 +1,8 @@
-import { M as getResolvedLoggerSettings, p as defaultRuntime } from "./entry.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
-import { s as pickPrimaryLanIPv4 } from "./ws-C0k_dhCP.js";
-import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-DuoCkWRh.js";
-import { o as resolveGatewayLogPaths } from "./service-DDPRbf8a.js";
+import { N as getResolvedLoggerSettings, p as defaultRuntime } from "./entry.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
+import { c as pickPrimaryLanIPv4 } from "./ws-MC-rTJLe.js";
+import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-BvQ6S8j5.js";
+import { o as resolveGatewayLogPaths } from "./service-DZN7KRok.js";
 import { Writable } from "node:stream";
 
 //#region src/cli/daemon-cli/response.ts

package/dist/{shared-C92wo-6f.js → shared-DEanAgja.js}

@@ -1,8 +1,8 @@
-import { V as getResolvedLoggerSettings, c as defaultRuntime } from "./subsystem-DPnkvS73.js";
+import { V as getResolvedLoggerSettings, c as defaultRuntime } from "./subsystem-DHfJG4gk.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
-import { s as pickPrimaryLanIPv4 } from "./ws-DtDKpbLR.js";
-import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-CNTiY-ZN.js";
-import { o as resolveGatewayLogPaths } from "./service-DOlJdIqe.js";
+import { c as pickPrimaryLanIPv4 } from "./ws-BcJt4pcg.js";
+import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-BvQ6S8j5.js";
+import { o as resolveGatewayLogPaths } from "./service-BnqdBTAK.js";
 import { Writable } from "node:stream";
 
 //#region src/cli/daemon-cli/response.ts

package/dist/{skill-scanner-C_fQzVDu.js → skill-scanner-BrGkh5K7.js}

@@ -1,4 +1,4 @@
-import { i as hasErrnoCode } from "./errors-x4NYs-1P.js";
+import { i as hasErrnoCode } from "./errors-Cojm0Kl7.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/{skill-scanner-DrVEHfC6.js → skill-scanner-CucvxYhu.js}

@@ -1,4 +1,4 @@
-import { i as hasErrnoCode } from "./errors-B0eT3jVv.js";
+import { i as hasErrnoCode } from "./errors-Bv81hF2P.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/{skills-Ccsv3IQq.js → skills-CE7by2IF.js}

@@ -1,10 +1,12 @@
 import { a as parseBooleanValue, o as createSubsystemLogger } from "./entry.js";
-import { t as CONFIG_DIR, y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { n as resolveOpenClawPackageRootSync } from "./openclaw-root-9ILYSmJ9.js";
-import { a as MANIFEST_KEY, c as normalizePluginsConfig, i as LEGACY_MANIFEST_KEYS, l as resolveEnableState, t as loadPluginManifestRegistry, u as resolveMemorySlotDecision } from "./manifest-registry-D5SiA3xq.js";
+import { t as CONFIG_DIR, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { n as resolveOpenClawPackageRootSync } from "./openclaw-root-BKsZvO6K.js";
+import { a as MANIFEST_KEY, d as resolveMemorySlotDecision, i as LEGACY_MANIFEST_KEYS, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-CVsqjgX0.js";
 import path from "node:path";
+import os from "node:os";
 import fs from "node:fs";
 import JSON5 from "json5";
+import fs$1 from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 import { formatSkillsForPrompt, loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 import YAML from "yaml";
@@ -258,8 +260,16 @@ function isBundledSkillAllowed(entry, allowlist) {
 }
 function hasBinary(bin) {
 	const parts = (process.env.PATH ?? "").split(path.delimiter).filter(Boolean);
-	for (const part of parts) {
-		const candidate = path.join(part, bin);
+	const winPathExt = process.env.PATHEXT;
+	const winExtensions = winPathExt !== void 0 ? winPathExt.split(";").filter(Boolean) : [
+		".EXE",
+		".CMD",
+		".BAT",
+		".COM"
+	];
+	const extensions = process.platform === "win32" ? ["", ...winExtensions] : [""];
+	for (const part of parts) for (const ext of extensions) {
+		const candidate = path.join(part, bin + ext);
 		try {
 			fs.accessSync(candidate, fs.constants.X_OK);
 			return true;
@@ -360,6 +370,83 @@ function applySkillEnvOverridesFromSnapshot(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/sandbox-paths.ts
+const UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
+function normalizeUnicodeSpaces(str) {
+	return str.replace(UNICODE_SPACES, " ");
+}
+function expandPath(filePath) {
+	const normalized = normalizeUnicodeSpaces(filePath);
+	if (normalized === "~") return os.homedir();
+	if (normalized.startsWith("~/")) return os.homedir() + normalized.slice(1);
+	return normalized;
+}
+function resolveToCwd(filePath, cwd) {
+	const expanded = expandPath(filePath);
+	if (path.isAbsolute(expanded)) return expanded;
+	return path.resolve(cwd, expanded);
+}
+function resolveSandboxPath(params) {
+	const resolved = resolveToCwd(params.filePath, params.cwd);
+	const rootResolved = path.resolve(params.root);
+	const relative = path.relative(rootResolved, resolved);
+	if (!relative || relative === "") return {
+		resolved,
+		relative: ""
+	};
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`Path escapes sandbox root (${shortPath(rootResolved)}): ${params.filePath}`);
+	return {
+		resolved,
+		relative
+	};
+}
+async function assertSandboxPath(params) {
+	const resolved = resolveSandboxPath(params);
+	await assertNoSymlink(resolved.relative, path.resolve(params.root));
+	return resolved;
+}
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
+async function assertNoSymlink(relative, root) {
+	if (!relative) return;
+	const parts = relative.split(path.sep).filter(Boolean);
+	let current = root;
+	for (const part of parts) {
+		current = path.join(current, part);
+		try {
+			if ((await fs$1.lstat(current)).isSymbolicLink()) throw new Error(`Symlink not allowed in sandbox path: ${current}`);
+		} catch (err) {
+			if (err.code === "ENOENT") return;
+			throw err;
+		}
+	}
+}
+function shortPath(value) {
+	if (value.startsWith(os.homedir())) return `~${value.slice(os.homedir().length)}`;
+	return value;
+}
+
 //#endregion
 //#region src/agents/skills/bundled-dir.ts
 function looksLikeSkillsDir(dir) {
@@ -517,7 +604,7 @@ function loadSkillEntries(workspaceDir, opts) {
 		return [];
 	};
 	const managedSkillsDir = opts?.managedSkillsDir ?? path.join(CONFIG_DIR, "skills");
-	const workspaceSkillsDir = path.join(workspaceDir, "skills");
+	const workspaceSkillsDir = path.resolve(workspaceDir, "skills");
 	const bundledSkillsDir = opts?.bundledSkillsDir ?? resolveBundledSkillsDir();
 	const extraDirs = (opts?.config?.skills?.load?.extraDirs ?? []).map((d) => typeof d === "string" ? d.trim() : "").filter(Boolean);
 	const pluginSkillDirs = resolvePluginSkillDirs({
@@ -539,6 +626,14 @@ function loadSkillEntries(workspaceDir, opts) {
 		dir: managedSkillsDir,
 		source: "openclaw-managed"
 	});
+	const personalAgentsSkills = loadSkills({
+		dir: path.resolve(os.homedir(), ".agents", "skills"),
+		source: "agents-skills-personal"
+	});
+	const projectAgentsSkills = loadSkills({
+		dir: path.resolve(workspaceDir, ".agents", "skills"),
+		source: "agents-skills-project"
+	});
 	const workspaceSkills = loadSkills({
 		dir: workspaceSkillsDir,
 		source: "openclaw-workspace"
@@ -547,6 +642,8 @@ function loadSkillEntries(workspaceDir, opts) {
 	for (const skill of extraSkills) merged.set(skill.name, skill);
 	for (const skill of bundledSkills) merged.set(skill.name, skill);
 	for (const skill of managedSkills) merged.set(skill.name, skill);
+	for (const skill of personalAgentsSkills) merged.set(skill.name, skill);
+	for (const skill of projectAgentsSkills) merged.set(skill.name, skill);
 	for (const skill of workspaceSkills) merged.set(skill.name, skill);
 	return Array.from(merged.values()).map((skill) => {
 		let frontmatter = {};
@@ -593,6 +690,36 @@ function resolveSkillsPromptForRun(params) {
 function loadWorkspaceSkillEntries(workspaceDir, opts) {
 	return loadSkillEntries(workspaceDir, opts);
 }
+function resolveUniqueSyncedSkillDirName(base, used) {
+	if (!used.has(base)) {
+		used.add(base);
+		return base;
+	}
+	for (let index = 2; index < 1e4; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!used.has(candidate)) {
+			used.add(candidate);
+			return candidate;
+		}
+	}
+	let fallbackIndex = 1e4;
+	let fallback = `${base}-${fallbackIndex}`;
+	while (used.has(fallback)) {
+		fallbackIndex += 1;
+		fallback = `${base}-${fallbackIndex}`;
+	}
+	used.add(fallback);
+	return fallback;
+}
+function resolveSyncedSkillDestinationPath(params) {
+	const sourceDirName = path.basename(params.entry.skill.baseDir).trim();
+	if (!sourceDirName || sourceDirName === "." || sourceDirName === "..") return null;
+	return resolveSandboxPath({
+		filePath: resolveUniqueSyncedSkillDirName(sourceDirName, params.usedDirNames),
+		cwd: params.targetSkillsDir,
+		root: params.targetSkillsDir
+	}).resolved;
+}
 async function syncSkillsToWorkspace(params) {
 	const sourceDir = resolveUserPath(params.sourceWorkspaceDir);
 	const targetDir = resolveUserPath(params.targetWorkspaceDir);
@@ -609,8 +736,24 @@ async function syncSkillsToWorkspace(params) {
 			force: true
 		});
 		await fsp.mkdir(targetSkillsDir, { recursive: true });
+		const usedDirNames = /* @__PURE__ */ new Set();
 		for (const entry of entries) {
-			const dest = path.join(targetSkillsDir, entry.skill.name);
+			let dest = null;
+			try {
+				dest = resolveSyncedSkillDestinationPath({
+					targetSkillsDir,
+					entry,
+					usedDirNames
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: ${message}`);
+				continue;
+			}
+			if (!dest) {
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: invalid source directory name`);
+				continue;
+			}
 			try {
 				await fsp.cp(entry.skill.baseDir, dest, {
 					recursive: true,
@@ -690,4 +833,4 @@ function resolveSkillsInstallPreferences(config) {
 }
 
 //#endregion
-export { resolveSkillKey as _, resolveSkillsPromptForRun as a, resolveBundledSkillsDir as c, hasBinary as d, isBundledSkillAllowed as f, resolveSkillConfig as g, resolveConfigPath as h, loadWorkspaceSkillEntries as i, applySkillEnvOverrides as l, resolveBundledAllowlist as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, isConfigPathTruthy as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, applySkillEnvOverridesFromSnapshot as u, parseFrontmatterBlock as v };
+export { parseFrontmatterBlock as S, isConfigPathTruthy as _, resolveSkillsPromptForRun as a, resolveSkillConfig as b, resolveBundledSkillsDir as c, resolveSandboxPath as d, resolveSandboxedMediaSource as f, isBundledSkillAllowed as g, hasBinary as h, loadWorkspaceSkillEntries as i, assertMediaNotDataUrl as l, applySkillEnvOverridesFromSnapshot as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, applySkillEnvOverrides as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, assertSandboxPath as u, resolveBundledAllowlist as v, resolveSkillKey as x, resolveConfigPath as y };

package/dist/{skills-_eKGrw9z.js → skills-Dz15dAM4.js}

@@ -1,12 +1,14 @@
-import { t as createSubsystemLogger } from "./subsystem-DPnkvS73.js";
-import { b as resolveUserPath, t as CONFIG_DIR } from "./utils-BTaR--Ln.js";
-import { n as resolveOpenClawPackageRootSync } from "./openclaw-root-93W6UrUK.js";
+import { t as createSubsystemLogger } from "./subsystem-DHfJG4gk.js";
+import { b as resolveUserPath, t as CONFIG_DIR } from "./utils-BtIMES3N.js";
+import { n as resolveOpenClawPackageRootSync } from "./openclaw-root-CEnmuBUN.js";
 import { t as parseBooleanValue } from "./boolean-BgXe2hyu.js";
-import { a as MANIFEST_KEY, c as normalizePluginsConfig, i as LEGACY_MANIFEST_KEYS, l as resolveEnableState, t as loadPluginManifestRegistry, u as resolveMemorySlotDecision } from "./manifest-registry-DyMRD3rY.js";
+import { a as MANIFEST_KEY, d as resolveMemorySlotDecision, i as LEGACY_MANIFEST_KEYS, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-jeAPx6AW.js";
 import { fileURLToPath } from "node:url";
 import fs from "node:fs";
+import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
+import fs$1 from "node:fs/promises";
 import { formatSkillsForPrompt, loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 import YAML from "yaml";
 
@@ -259,8 +261,16 @@ function isBundledSkillAllowed(entry, allowlist) {
 }
 function hasBinary(bin) {
 	const parts = (process.env.PATH ?? "").split(path.delimiter).filter(Boolean);
-	for (const part of parts) {
-		const candidate = path.join(part, bin);
+	const winPathExt = process.env.PATHEXT;
+	const winExtensions = winPathExt !== void 0 ? winPathExt.split(";").filter(Boolean) : [
+		".EXE",
+		".CMD",
+		".BAT",
+		".COM"
+	];
+	const extensions = process.platform === "win32" ? ["", ...winExtensions] : [""];
+	for (const part of parts) for (const ext of extensions) {
+		const candidate = path.join(part, bin + ext);
 		try {
 			fs.accessSync(candidate, fs.constants.X_OK);
 			return true;
@@ -361,6 +371,83 @@ function applySkillEnvOverridesFromSnapshot(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/sandbox-paths.ts
+const UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
+function normalizeUnicodeSpaces(str) {
+	return str.replace(UNICODE_SPACES, " ");
+}
+function expandPath(filePath) {
+	const normalized = normalizeUnicodeSpaces(filePath);
+	if (normalized === "~") return os.homedir();
+	if (normalized.startsWith("~/")) return os.homedir() + normalized.slice(1);
+	return normalized;
+}
+function resolveToCwd(filePath, cwd) {
+	const expanded = expandPath(filePath);
+	if (path.isAbsolute(expanded)) return expanded;
+	return path.resolve(cwd, expanded);
+}
+function resolveSandboxPath(params) {
+	const resolved = resolveToCwd(params.filePath, params.cwd);
+	const rootResolved = path.resolve(params.root);
+	const relative = path.relative(rootResolved, resolved);
+	if (!relative || relative === "") return {
+		resolved,
+		relative: ""
+	};
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`Path escapes sandbox root (${shortPath(rootResolved)}): ${params.filePath}`);
+	return {
+		resolved,
+		relative
+	};
+}
+async function assertSandboxPath(params) {
+	const resolved = resolveSandboxPath(params);
+	await assertNoSymlink(resolved.relative, path.resolve(params.root));
+	return resolved;
+}
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
+async function assertNoSymlink(relative, root) {
+	if (!relative) return;
+	const parts = relative.split(path.sep).filter(Boolean);
+	let current = root;
+	for (const part of parts) {
+		current = path.join(current, part);
+		try {
+			if ((await fs$1.lstat(current)).isSymbolicLink()) throw new Error(`Symlink not allowed in sandbox path: ${current}`);
+		} catch (err) {
+			if (err.code === "ENOENT") return;
+			throw err;
+		}
+	}
+}
+function shortPath(value) {
+	if (value.startsWith(os.homedir())) return `~${value.slice(os.homedir().length)}`;
+	return value;
+}
+
 //#endregion
 //#region src/agents/skills/bundled-dir.ts
 function looksLikeSkillsDir(dir) {
@@ -518,7 +605,7 @@ function loadSkillEntries(workspaceDir, opts) {
 		return [];
 	};
 	const managedSkillsDir = opts?.managedSkillsDir ?? path.join(CONFIG_DIR, "skills");
-	const workspaceSkillsDir = path.join(workspaceDir, "skills");
+	const workspaceSkillsDir = path.resolve(workspaceDir, "skills");
 	const bundledSkillsDir = opts?.bundledSkillsDir ?? resolveBundledSkillsDir();
 	const extraDirs = (opts?.config?.skills?.load?.extraDirs ?? []).map((d) => typeof d === "string" ? d.trim() : "").filter(Boolean);
 	const pluginSkillDirs = resolvePluginSkillDirs({
@@ -540,6 +627,14 @@ function loadSkillEntries(workspaceDir, opts) {
 		dir: managedSkillsDir,
 		source: "openclaw-managed"
 	});
+	const personalAgentsSkills = loadSkills({
+		dir: path.resolve(os.homedir(), ".agents", "skills"),
+		source: "agents-skills-personal"
+	});
+	const projectAgentsSkills = loadSkills({
+		dir: path.resolve(workspaceDir, ".agents", "skills"),
+		source: "agents-skills-project"
+	});
 	const workspaceSkills = loadSkills({
 		dir: workspaceSkillsDir,
 		source: "openclaw-workspace"
@@ -548,6 +643,8 @@ function loadSkillEntries(workspaceDir, opts) {
 	for (const skill of extraSkills) merged.set(skill.name, skill);
 	for (const skill of bundledSkills) merged.set(skill.name, skill);
 	for (const skill of managedSkills) merged.set(skill.name, skill);
+	for (const skill of personalAgentsSkills) merged.set(skill.name, skill);
+	for (const skill of projectAgentsSkills) merged.set(skill.name, skill);
 	for (const skill of workspaceSkills) merged.set(skill.name, skill);
 	return Array.from(merged.values()).map((skill) => {
 		let frontmatter = {};
@@ -594,6 +691,36 @@ function resolveSkillsPromptForRun(params) {
 function loadWorkspaceSkillEntries(workspaceDir, opts) {
 	return loadSkillEntries(workspaceDir, opts);
 }
+function resolveUniqueSyncedSkillDirName(base, used) {
+	if (!used.has(base)) {
+		used.add(base);
+		return base;
+	}
+	for (let index = 2; index < 1e4; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!used.has(candidate)) {
+			used.add(candidate);
+			return candidate;
+		}
+	}
+	let fallbackIndex = 1e4;
+	let fallback = `${base}-${fallbackIndex}`;
+	while (used.has(fallback)) {
+		fallbackIndex += 1;
+		fallback = `${base}-${fallbackIndex}`;
+	}
+	used.add(fallback);
+	return fallback;
+}
+function resolveSyncedSkillDestinationPath(params) {
+	const sourceDirName = path.basename(params.entry.skill.baseDir).trim();
+	if (!sourceDirName || sourceDirName === "." || sourceDirName === "..") return null;
+	return resolveSandboxPath({
+		filePath: resolveUniqueSyncedSkillDirName(sourceDirName, params.usedDirNames),
+		cwd: params.targetSkillsDir,
+		root: params.targetSkillsDir
+	}).resolved;
+}
 async function syncSkillsToWorkspace(params) {
 	const sourceDir = resolveUserPath(params.sourceWorkspaceDir);
 	const targetDir = resolveUserPath(params.targetWorkspaceDir);
@@ -610,8 +737,24 @@ async function syncSkillsToWorkspace(params) {
 			force: true
 		});
 		await fsp.mkdir(targetSkillsDir, { recursive: true });
+		const usedDirNames = /* @__PURE__ */ new Set();
 		for (const entry of entries) {
-			const dest = path.join(targetSkillsDir, entry.skill.name);
+			let dest = null;
+			try {
+				dest = resolveSyncedSkillDestinationPath({
+					targetSkillsDir,
+					entry,
+					usedDirNames
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: ${message}`);
+				continue;
+			}
+			if (!dest) {
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: invalid source directory name`);
+				continue;
+			}
 			try {
 				await fsp.cp(entry.skill.baseDir, dest, {
 					recursive: true,
@@ -691,4 +834,4 @@ function resolveSkillsInstallPreferences(config) {
 }
 
 //#endregion
-export { resolveSkillKey as _, resolveSkillsPromptForRun as a, resolveBundledSkillsDir as c, hasBinary as d, isBundledSkillAllowed as f, resolveSkillConfig as g, resolveConfigPath as h, loadWorkspaceSkillEntries as i, applySkillEnvOverrides as l, resolveBundledAllowlist as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, isConfigPathTruthy as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, applySkillEnvOverridesFromSnapshot as u, parseFrontmatterBlock as v };
+export { parseFrontmatterBlock as S, isConfigPathTruthy as _, resolveSkillsPromptForRun as a, resolveSkillConfig as b, resolveBundledSkillsDir as c, resolveSandboxPath as d, resolveSandboxedMediaSource as f, isBundledSkillAllowed as g, hasBinary as h, loadWorkspaceSkillEntries as i, assertMediaNotDataUrl as l, applySkillEnvOverridesFromSnapshot as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, applySkillEnvOverrides as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, assertSandboxPath as u, resolveBundledAllowlist as v, resolveSkillKey as x, resolveConfigPath as y };