@guadskill/openclaw-proxy 2026.3.7 → 2026.3.9

package/dist/{audit-qqRogHSL.js → audit-DtKtvGnO.js}

@@ -1,37 +1,37 @@
 import { X as resolveConfigPath, it as resolveOAuthDir, ot as resolveStateDir } from "./entry.js";
-import { $t as normalizeTrustedSafeBinDirs, A as formatPermissionDetail, Bn as MAX_INCLUDE_DEPTH, M as inspectPathPermissions, N as safeStat, ft as isDangerousNetworkMode, j as formatPermissionRemediation, pt as normalizeNetworkMode, z as createConfigIO, zn as INCLUDE_KEY } from "./auth-profiles-Bh2dHooQ.js";
+import { $t as normalizeTrustedSafeBinDirs, A as formatPermissionDetail, Bn as MAX_INCLUDE_DEPTH, M as inspectPathPermissions, N as safeStat, ft as isDangerousNetworkMode, j as formatPermissionRemediation, pt as normalizeNetworkMode, z as createConfigIO, zn as INCLUDE_KEY } from "./auth-profiles-QXvcpjIT.js";
 import { t as formatCliCommand } from "./command-format-DdHwx_z_.js";
-import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue, d as resolveDefaultAgentId } from "./agent-scope-CT92dyCK.js";
+import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue, d as resolveDefaultAgentId } from "./agent-scope-Dd2_TNoB.js";
 import { c as normalizeAgentId } from "./session-key-9-yI-GU_.js";
 import { a as hasConfiguredSecretInput } from "./types.secrets-CZ26uLlg.js";
 import { n as isPathInside, t as extensionUsesSkippedScannerPath } from "./scan-paths-CGHjYWQw.js";
-import { d as normalizePluginsConfig } from "./manifest-registry-DjjgwuVC.js";
+import { d as normalizePluginsConfig } from "./manifest-registry-C_atL4ID.js";
 import { n as MANIFEST_KEY } from "./legacy-names-Cvucw6AA.js";
-import { l as normalizeStringEntries } from "./dock-tPqNmtNL.js";
-import { n as listChannelPlugins } from "./plugins-BB30X9Wg.js";
-import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-QUwr5BiV.js";
-import { a as resolveGatewayAuth } from "./auth-DfEti-nH.js";
+import { l as normalizeStringEntries } from "./dock-wtxEAACu.js";
+import { n as listChannelPlugins } from "./plugins-Bv9ZfJVO.js";
+import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-Ey0spRTA.js";
+import { a as resolveGatewayAuth } from "./auth-DkciOmKe.js";
 import { n as resolveGatewayCredentialsFromConfig, t as isGatewaySecretRefUnavailableError } from "./credentials-BN-3xksd.js";
-import { a as resolveProfile, c as resolveBrowserControlAuth, i as resolveBrowserConfig } from "./server-context-BOMErxlB.js";
-import { i as loadWorkspaceSkillEntries } from "./skills-Bme_5_Wh.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-Cm7TKqpY.js";
-import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-DP7Bcuo2.js";
-import { t as buildGatewayConnectionDetails } from "./call-Bl8osGeS.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-gcbFdvn2.js";
-import { _ as hasResolvedCredentialValue, g as hasConfiguredUnavailableCredentialStatus, h as inspectReadOnlyChannelAccount, l as resolveDmAllowState, n as isToolAllowedByPolicies, o as pickSandboxToolPolicy } from "./pi-tools.policy-dFXahmgF.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-Ch8qs0UH.js";
+import { a as resolveProfile, c as resolveBrowserControlAuth, i as resolveBrowserConfig } from "./server-context-DDDYJ1E5.js";
+import { i as loadWorkspaceSkillEntries } from "./skills-C3DzmT-s.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-B8a4-DkO.js";
+import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-C-YxTe08.js";
+import { t as buildGatewayConnectionDetails } from "./call-B56A9tyz.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-BsYNiJyH.js";
+import { _ as hasResolvedCredentialValue, g as hasConfiguredUnavailableCredentialStatus, h as inspectReadOnlyChannelAccount, l as resolveDmAllowState, n as isToolAllowedByPolicies, o as pickSandboxToolPolicy } from "./pi-tools.policy-CSPrerKx.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs--0e3kMf7.js";
 import { n as isDangerousNameMatchingEnabled } from "./dangerous-name-matching-PRkNIyQj.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-DYhQ651h.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BAv58r5B.js";
-import { t as scanDirectoryWithSummary } from "./skill-scanner-B_VveqAF.js";
-import { t as probeGateway } from "./probe-B01qwW3t.js";
-import { r as resolveNodeCommandAllowlist, t as DEFAULT_DANGEROUS_NODE_COMMANDS } from "./node-command-policy-Bqp9nIUg.js";
+import { t as scanDirectoryWithSummary } from "./skill-scanner-CTA9_1Ad.js";
+import { t as probeGateway } from "./probe-BSiLGREe.js";
+import { r as resolveNodeCommandAllowlist, t as DEFAULT_DANGEROUS_NODE_COMMANDS } from "./node-command-policy-DdF7xJQa.js";
 import { c as normalizeTelegramAllowFromEntry, s as isNumericTelegramUserId, t as isDiscordMutableAllowEntry } from "./mutable-allowlist-detectors-DmRJAY4H.js";
 import { t as inferParamBFromIdOrName } from "./model-param-b-BcBQ11Vu.js";
 import path from "node:path";
 import JSON5 from "json5";
-import * as fs$1 from "node:fs/promises";
-import fs from "node:fs/promises";
+import * as fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { isIP } from "node:net";
 
 //#region src/gateway/probe-auth.ts
@@ -1287,7 +1287,7 @@ async function collectIncludePathsRecursive(params) {
 			if (visited.has(resolved)) continue;
 			visited.add(resolved);
 			result.push(resolved);
-			const rawText = await fs$1.readFile(resolved, "utf-8").catch(() => null);
+			const rawText = await fs.readFile(resolved, "utf-8").catch(() => null);
 			if (!rawText) continue;
 			const nestedParsed = (() => {
 				try {
@@ -1322,7 +1322,7 @@ function expandTilde(p, env) {
 }
 async function readPluginManifestExtensions(pluginPath) {
 	const manifestPath = path.join(pluginPath, "package.json");
-	const raw = await fs.readFile(manifestPath, "utf-8").catch(() => "");
+	const raw = await fsPromises.readFile(manifestPath, "utf-8").catch(() => "");
 	if (!raw.trim()) return [];
 	const extensions = JSON.parse(raw)?.[MANIFEST_KEY]?.extensions;
 	if (!Array.isArray(extensions)) return [];
@@ -1344,7 +1344,7 @@ async function listInstalledPluginDirs(params) {
 	};
 	return {
 		extensionsDir,
-		pluginDirs: (await fs.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
+		pluginDirs: (await fsPromises.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
 			params.onReadError?.(err);
 			return [];
 		})).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter(Boolean)
@@ -1407,7 +1407,7 @@ function isPinnedRegistrySpec(spec) {
 }
 async function readInstalledPackageVersion(dir) {
 	try {
-		const raw = await fs.readFile(path.join(dir, "package.json"), "utf-8");
+		const raw = await fsPromises.readFile(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.version === "string" ? parsed.version : void 0;
 	} catch {
@@ -1443,10 +1443,10 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 	const visitedDirs = /* @__PURE__ */ new Set();
 	while (queue.length > 0 && skillFiles.length < MAX_WORKSPACE_SKILL_SCAN_FILES_PER_WORKSPACE) {
 		const dir = queue.shift();
-		const dirRealPath = await fs.realpath(dir).catch(() => path.resolve(dir));
+		const dirRealPath = await fsPromises.realpath(dir).catch(() => path.resolve(dir));
 		if (visitedDirs.has(dirRealPath)) continue;
 		visitedDirs.add(dirRealPath);
-		const entries = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
+		const entries = await fsPromises.readdir(dir, { withFileTypes: true }).catch(() => []);
 		for (const entry of entries) {
 			if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
 			const fullPath = path.join(dir, entry.name);
@@ -1455,7 +1455,7 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 				continue;
 			}
 			if (entry.isSymbolicLink()) {
-				const stat = await fs.stat(fullPath).catch(() => null);
+				const stat = await fsPromises.stat(fullPath).catch(() => null);
 				if (!stat) continue;
 				if (stat.isDirectory()) {
 					queue.push(fullPath);
@@ -1745,13 +1745,13 @@ async function collectWorkspaceSkillSymlinkEscapeFindings(params) {
 	const seenSkillPaths = /* @__PURE__ */ new Set();
 	for (const workspaceDir of workspaceDirs) {
 		const workspacePath = path.resolve(workspaceDir);
-		const workspaceRealPath = await fs.realpath(workspacePath).catch(() => workspacePath);
+		const workspaceRealPath = await fsPromises.realpath(workspacePath).catch(() => workspacePath);
 		const skillFilePaths = await listWorkspaceSkillMarkdownFiles(workspacePath);
 		for (const skillFilePath of skillFilePaths) {
 			const canonicalSkillPath = path.resolve(skillFilePath);
 			if (seenSkillPaths.has(canonicalSkillPath)) continue;
 			seenSkillPaths.add(canonicalSkillPath);
-			const skillRealPath = await fs.realpath(canonicalSkillPath).catch(() => null);
+			const skillRealPath = await fsPromises.realpath(canonicalSkillPath).catch(() => null);
 			if (!skillRealPath) continue;
 			if (isPathInside(workspaceRealPath, skillRealPath)) continue;
 			escapedSkillFiles.push({

package/dist/{auth-DfEti-nH.js → auth-DkciOmKe.js}

@@ -1,7 +1,7 @@
 import { d as resolveSecretInputRef } from "./types.secrets-CZ26uLlg.js";
 import { c as readTailscaleWhoisIdentity } from "./tailscale-BRTAbJuN.js";
 import { t as safeEqualSecret } from "./secret-equal-C6Ey0YcX.js";
-import { n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, u as resolveClientIp } from "./ws-DUfuK8DQ.js";
+import { n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, u as resolveClientIp } from "./ws-DrZBk8aE.js";
 import { r as resolveGatewayCredentialsFromValues } from "./credentials-BN-3xksd.js";
 
 //#region src/gateway/auth-rate-limit.ts

package/dist/{auth-choice-BjQ5BF_A.js → auth-choice-CDiDpyjK.js}

@@ -1,16 +1,16 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { Ai as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF, Ar as resolveDefaultModelForAgent, Ii as KILOCODE_DEFAULT_MODEL_REF, Oi as discoverHuggingfaceModels, Xr as VENICE_DEFAULT_MODEL_REF, Zn as listProfilesForProvider, _ as parseOAuthCallbackInput, ai as SYNTHETIC_DEFAULT_MODEL_REF, er as upsertAuthProfile, g as generateChutesPkce, h as exchangeChutesCodeForTokens, hi as getCustomProviderApiKey, ki as isHuggingfacePolicyLocked, m as CHUTES_AUTHORIZE_ENDPOINT, r as resolveAuthProfileOrder, rr as ensureAuthProfileStore, ur as resolveOpenClawAgentDir, yi as resolveEnvApiKey } from "./auth-profiles-Bh2dHooQ.js";
-import { A as resolveDefaultAgentWorkspaceDir, P as toAgentModelListLike, a as resolveAgentDir, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-CT92dyCK.js";
-import { i as isLoopbackHost } from "./ws-DUfuK8DQ.js";
-import { n as loadModelCatalog } from "./model-catalog-CyL_QlZd.js";
-import { f as openUrl } from "./onboard-helpers-BqSYoJSO.js";
-import { t as enablePluginInConfig } from "./enable-DfvB7o85.js";
-import { a as normalizeSecretInputModeInput, c as resolveSecretInputModeForEnvSelection, d as normalizeApiKeyInput, f as validateApiKeyInput, i as ensureApiKeyFromOptionEnvOrPrompt, l as applyDefaultModelChoice, n as createAuthChoiceDefaultModelApplierForMutableState, o as normalizeTokenProviderInput, s as promptSecretRefForOnboarding, t as createAuthChoiceAgentModelNoter, u as ensureModelAllowlistEntry } from "./auth-choice.apply-helpers-BJLWC6EX.js";
-import { n as applyOpenAICodexModelDefault, t as OPENAI_CODEX_DEFAULT_MODEL } from "./openai-codex-model-default-Dh0Anrx7.js";
-import { $ as ZAI_DEFAULT_MODEL_REF, A as applyTogetherConfig, B as applyLitellmConfig, C as applyMoonshotProviderConfigCn, Ct as writeOAuthCredentials, D as applyQianfanProviderConfig, Dt as QIANFAN_DEFAULT_MODEL_REF, E as applyQianfanConfig, Et as MOONSHOT_DEFAULT_MODEL_REF, F as applyXaiProviderConfig, G as applyVercelAiGatewayProviderConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, J as LITELLM_DEFAULT_MODEL_REF, K as applyAgentDefaultModelPrimary, L as applyXiaomiProviderConfig, M as applyVeniceConfig, N as applyVeniceProviderConfig, O as applySyntheticConfig, Ot as XAI_DEFAULT_MODEL_REF, P as applyXaiConfig, Q as XIAOMI_DEFAULT_MODEL_REF, R as applyZaiConfig, S as applyMoonshotProviderConfig, St as setZaiApiKey, T as applyOpenrouterProviderConfig, Tt as MISTRAL_DEFAULT_MODEL_REF, U as applyCloudflareAiGatewayProviderConfig, V as applyLitellmProviderConfig, W as applyVercelAiGatewayConfig, X as TOGETHER_DEFAULT_MODEL_REF, Y as OPENROUTER_DEFAULT_MODEL_REF, Z as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, _ as applyKimiCodeProviderConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, c as applyMinimaxApiProviderConfigCn, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, h as applyKilocodeProviderConfig, ht as setSyntheticApiKey, i as applyOpencodeZenProviderConfig, it as setHuggingfaceApiKey, j as applyTogetherProviderConfig, k as applySyntheticProviderConfig, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, p as applyHuggingfaceProviderConfig, pt as setOpenrouterApiKey, q as HUGGINGFACE_DEFAULT_MODEL_REF, r as applyOpencodeZenConfig, rt as setGeminiApiKey, s as applyMinimaxApiProviderConfig, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, u as applyMinimaxProviderConfig, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, wt as KIMI_CODING_MODEL_REF, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, y as applyMistralProviderConfig, yt as setVolcengineApiKey, z as applyZaiProviderConfig } from "./auth-token-qGutIUyw.js";
-import { a as loginOpenAICodexOAuth, c as resolvePluginProviders, i as resolveProviderMatch, l as githubCopilotLoginCommand, n as mergeConfigPatch, o as createVpsAwareOAuthHandlers, r as pickAuthMethod, s as isRemoteEnvironment, t as applyDefaultModel } from "./provider-auth-helpers-Bu3NP92x.js";
-import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-JIrv3HNj.js";
-import { r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-DqYwIby0.js";
+import { Ai as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF, Ar as resolveDefaultModelForAgent, Ii as KILOCODE_DEFAULT_MODEL_REF, Oi as discoverHuggingfaceModels, Xr as VENICE_DEFAULT_MODEL_REF, Zn as listProfilesForProvider, _ as parseOAuthCallbackInput, ai as SYNTHETIC_DEFAULT_MODEL_REF, er as upsertAuthProfile, g as generateChutesPkce, h as exchangeChutesCodeForTokens, hi as getCustomProviderApiKey, ki as isHuggingfacePolicyLocked, m as CHUTES_AUTHORIZE_ENDPOINT, r as resolveAuthProfileOrder, rr as ensureAuthProfileStore, ur as resolveOpenClawAgentDir, yi as resolveEnvApiKey } from "./auth-profiles-QXvcpjIT.js";
+import { A as resolveDefaultAgentWorkspaceDir, P as toAgentModelListLike, a as resolveAgentDir, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-Dd2_TNoB.js";
+import { i as isLoopbackHost } from "./ws-DrZBk8aE.js";
+import { n as loadModelCatalog } from "./model-catalog-Crm5h6fz.js";
+import { f as openUrl } from "./onboard-helpers-BJ2MHcp9.js";
+import { t as enablePluginInConfig } from "./enable-Dk8s7RC7.js";
+import { a as normalizeSecretInputModeInput, c as resolveSecretInputModeForEnvSelection, d as normalizeApiKeyInput, f as validateApiKeyInput, i as ensureApiKeyFromOptionEnvOrPrompt, l as applyDefaultModelChoice, n as createAuthChoiceDefaultModelApplierForMutableState, o as normalizeTokenProviderInput, s as promptSecretRefForOnboarding, t as createAuthChoiceAgentModelNoter, u as ensureModelAllowlistEntry } from "./auth-choice.apply-helpers-DFO2u4vW.js";
+import { n as applyOpenAICodexModelDefault, t as OPENAI_CODEX_DEFAULT_MODEL } from "./openai-codex-model-default-BnNc6l4d.js";
+import { $ as ZAI_DEFAULT_MODEL_REF, A as applyTogetherConfig, B as applyLitellmConfig, C as applyMoonshotProviderConfigCn, Ct as writeOAuthCredentials, D as applyQianfanProviderConfig, Dt as QIANFAN_DEFAULT_MODEL_REF, E as applyQianfanConfig, Et as MOONSHOT_DEFAULT_MODEL_REF, F as applyXaiProviderConfig, G as applyVercelAiGatewayProviderConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, J as LITELLM_DEFAULT_MODEL_REF, K as applyAgentDefaultModelPrimary, L as applyXiaomiProviderConfig, M as applyVeniceConfig, N as applyVeniceProviderConfig, O as applySyntheticConfig, Ot as XAI_DEFAULT_MODEL_REF, P as applyXaiConfig, Q as XIAOMI_DEFAULT_MODEL_REF, R as applyZaiConfig, S as applyMoonshotProviderConfig, St as setZaiApiKey, T as applyOpenrouterProviderConfig, Tt as MISTRAL_DEFAULT_MODEL_REF, U as applyCloudflareAiGatewayProviderConfig, V as applyLitellmProviderConfig, W as applyVercelAiGatewayConfig, X as TOGETHER_DEFAULT_MODEL_REF, Y as OPENROUTER_DEFAULT_MODEL_REF, Z as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, _ as applyKimiCodeProviderConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, c as applyMinimaxApiProviderConfigCn, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, h as applyKilocodeProviderConfig, ht as setSyntheticApiKey, i as applyOpencodeZenProviderConfig, it as setHuggingfaceApiKey, j as applyTogetherProviderConfig, k as applySyntheticProviderConfig, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, p as applyHuggingfaceProviderConfig, pt as setOpenrouterApiKey, q as HUGGINGFACE_DEFAULT_MODEL_REF, r as applyOpencodeZenConfig, rt as setGeminiApiKey, s as applyMinimaxApiProviderConfig, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, u as applyMinimaxProviderConfig, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, wt as KIMI_CODING_MODEL_REF, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, y as applyMistralProviderConfig, yt as setVolcengineApiKey, z as applyZaiProviderConfig } from "./auth-token-4Y8dUkki.js";
+import { a as loginOpenAICodexOAuth, c as resolvePluginProviders, i as resolveProviderMatch, l as githubCopilotLoginCommand, n as mergeConfigPatch, o as createVpsAwareOAuthHandlers, r as pickAuthMethod, s as isRemoteEnvironment, t as applyDefaultModel } from "./provider-auth-helpers-Bo68RFgl.js";
+import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-PyAlsRPb.js";
+import { r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-RWaJDIbf.js";
 import { randomBytes } from "node:crypto";
 import { createServer } from "node:http";
 

package/dist/{auth-choice-C4XhKa87.js → auth-choice-mCitki7b.js}

@@ -1,23 +1,23 @@
-import { Ni as normalizeOptionalSecretInput, Pi as normalizeSecretInput, Tr as normalizeProviderId, d as resolveApiKeyForProfile, er as upsertAuthProfile, lt as resolveDefaultSecretProviderAlias, mt as parseDurationMs, r as resolveAuthProfileOrder, rr as ensureAuthProfileStore, yi as resolveEnvApiKey } from "./auth-profiles-Bh2dHooQ.js";
-import "./agent-scope-CT92dyCK.js";
+import { Ni as normalizeOptionalSecretInput, Pi as normalizeSecretInput, Tr as normalizeProviderId, d as resolveApiKeyForProfile, er as upsertAuthProfile, lt as resolveDefaultSecretProviderAlias, mt as parseDurationMs, r as resolveAuthProfileOrder, rr as ensureAuthProfileStore, yi as resolveEnvApiKey } from "./auth-profiles-QXvcpjIT.js";
+import "./agent-scope-Dd2_TNoB.js";
 import "./utils-DanSccFf.js";
-import "./openclaw-root-Dh_Sm1l8.js";
+import "./openclaw-root-Gv7Ob-5V.js";
 import "./logger-BcqRk323.js";
 import "./exec-OWC_Lkz4.js";
 import "./github-copilot-token-DHTToceK.js";
 import "./host-env-security-CIiLt2Mi.js";
 import "./version-BKzmSBiX.js";
 import "./registry-CZbmSOj8.js";
-import "./manifest-registry-DjjgwuVC.js";
-import "./models-config-Do_bkbr3.js";
-import "./model-catalog-CyL_QlZd.js";
-import { a as normalizeSecretInputModeInput } from "./auth-choice.apply-helpers-BJLWC6EX.js";
-import "./issue-format-8vbMtP-9.js";
-import "./openai-codex-model-default-Dh0Anrx7.js";
-import { A as applyTogetherConfig, B as applyLitellmConfig, E as applyQianfanConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, M as applyVeniceConfig, O as applySyntheticConfig, P as applyXaiConfig, R as applyZaiConfig, St as setZaiApiKey, W as applyVercelAiGatewayConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, f as applyHuggingfaceConfig, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, ht as setSyntheticApiKey, it as setHuggingfaceApiKey, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, pt as setOpenrouterApiKey, r as applyOpencodeZenConfig, rt as setGeminiApiKey, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, yt as setVolcengineApiKey } from "./auth-token-qGutIUyw.js";
-import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-JIrv3HNj.js";
-import { r as applyPrimaryModel } from "./model-picker-DqYwIby0.js";
-import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-BYAJVMrS.js";
+import "./manifest-registry-C_atL4ID.js";
+import "./models-config-ioRkhhh4.js";
+import "./model-catalog-Crm5h6fz.js";
+import { a as normalizeSecretInputModeInput } from "./auth-choice.apply-helpers-DFO2u4vW.js";
+import "./issue-format-BhYUpe8G.js";
+import "./openai-codex-model-default-BnNc6l4d.js";
+import { A as applyTogetherConfig, B as applyLitellmConfig, E as applyQianfanConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, M as applyVeniceConfig, O as applySyntheticConfig, P as applyXaiConfig, R as applyZaiConfig, St as setZaiApiKey, W as applyVercelAiGatewayConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, f as applyHuggingfaceConfig, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, ht as setSyntheticApiKey, it as setHuggingfaceApiKey, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, pt as setOpenrouterApiKey, r as applyOpencodeZenConfig, rt as setGeminiApiKey, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, yt as setVolcengineApiKey } from "./auth-token-4Y8dUkki.js";
+import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-PyAlsRPb.js";
+import { r as applyPrimaryModel } from "./model-picker-RWaJDIbf.js";
+import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-CLwjPxwD.js";
 
 //#region src/commands/onboard-non-interactive/api-keys.ts
 function parseEnvVarNameFromSourceLabel(source) {

package/dist/{auth-choice.apply-helpers-BJLWC6EX.js → auth-choice.apply-helpers-DFO2u4vW.js}

@@ -1,4 +1,4 @@
-import { Bi as DEFAULT_PROVIDER, Or as resolveAllowlistModelKey, k as encodeJsonPointerToken, lt as resolveDefaultSecretProviderAlias, st as isValidFileSecretRefId, y as resolveSecretRefString, yi as resolveEnvApiKey } from "./auth-profiles-Bh2dHooQ.js";
+import { Bi as DEFAULT_PROVIDER, Or as resolveAllowlistModelKey, k as encodeJsonPointerToken, lt as resolveDefaultSecretProviderAlias, st as isValidFileSecretRefId, y as resolveSecretRefString, yi as resolveEnvApiKey } from "./auth-profiles-QXvcpjIT.js";
 import { s as isValidEnvSecretRefId } from "./types.secrets-CZ26uLlg.js";
 import { t as PROVIDER_ENV_VARS } from "./provider-env-vars-66Tm-Bs1.js";
 

package/dist/{auth-profiles-Bh2dHooQ.js → auth-profiles-QXvcpjIT.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { $ as resolveGatewayLockDir, G as CONFIG_PATH, J as isNixMode, K as DEFAULT_GATEWAY_PORT, Q as resolveDefaultConfigCandidates, X as resolveConfigPath, Y as resolveCanonicalConfigPath, Z as resolveConfigPathCandidate, at as resolveOAuthPath, et as resolveGatewayPort, ft as expandHomePrefix, it as resolveOAuthDir, m as stripAnsi, mt as resolveRequiredHomeDir, nt as resolveLegacyStateDirs, ot as resolveStateDir, q as STATE_DIR, r as isTruthyEnvValue, rt as resolveNewStateDir, s as createSubsystemLogger, tt as resolveIsNixMode } from "./entry.js";
 import { t as formatCliCommand } from "./command-format-DdHwx_z_.js";
-import { N as resolveAgentModelPrimaryValue, P as toAgentModelListLike, d as resolveDefaultAgentId, i as resolveAgentConfig, o as resolveAgentEffectiveModelPrimary, u as resolveAgentWorkspaceDir } from "./agent-scope-CT92dyCK.js";
+import { N as resolveAgentModelPrimaryValue, P as toAgentModelListLike, d as resolveDefaultAgentId, i as resolveAgentConfig, o as resolveAgentEffectiveModelPrimary, u as resolveAgentWorkspaceDir } from "./agent-scope-Dd2_TNoB.js";
 import { c as normalizeAgentId, t as DEFAULT_AGENT_ID, y as isBlockedObjectKey } from "./session-key-9-yI-GU_.js";
 import { E as isPlainObject$2, S as sleep, h as resolveConfigDir, u as isRecord$2, v as resolveUserPath } from "./utils-DanSccFf.js";
-import { a as openBoundaryFileSync, r as canUseBoundaryFileOpen } from "./openclaw-root-Dh_Sm1l8.js";
+import { a as openBoundaryFileSync, r as canUseBoundaryFileOpen } from "./openclaw-root-Gv7Ob-5V.js";
 import { n as runExec } from "./exec-OWC_Lkz4.js";
 import { a as hasConfiguredSecretInput, c as normalizeResolvedSecretInputString, d as resolveSecretInputRef, i as coerceSecretRef, l as normalizeSecretInputString, n as ENV_SECRET_REF_ID_RE, o as isSecretRef, r as assertSecretInputResolved, s as isValidEnvSecretRefId, t as DEFAULT_SECRET_PROVIDER_ALIAS, u as parseEnvTemplateSecretRef } from "./types.secrets-CZ26uLlg.js";
 import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken, t as DEFAULT_COPILOT_API_BASE_URL } from "./github-copilot-token-DHTToceK.js";
@@ -12,8 +12,8 @@ import { i as sanitizeHostExecEnv, n as isDangerousHostEnvVarName, r as normaliz
 import { t as VERSION } from "./version-BKzmSBiX.js";
 import { n as isPathInside } from "./scan-paths-CGHjYWQw.js";
 import { l as normalizeChatChannelId, t as CHANNEL_IDS } from "./registry-CZbmSOj8.js";
-import { d as normalizePluginsConfig, f as resolveEffectiveEnableState, n as loadPluginManifestRegistry, p as resolveMemorySlotDecision } from "./manifest-registry-DjjgwuVC.js";
-import { d as TOOLS_BY_SENDER_KEY_TYPES, f as parseToolsBySenderTypedKey } from "./dock-tPqNmtNL.js";
+import { d as normalizePluginsConfig, f as resolveEffectiveEnableState, n as loadPluginManifestRegistry, p as resolveMemorySlotDecision } from "./manifest-registry-C_atL4ID.js";
+import { d as TOOLS_BY_SENDER_KEY_TYPES, f as parseToolsBySenderTypedKey } from "./dock-wtxEAACu.js";
 import { t as runTasksWithConcurrency } from "./run-with-concurrency-BA7Bd9Uj.js";
 import { createRequire } from "node:module";
 import { execFileSync, spawn } from "node:child_process";
@@ -22,7 +22,7 @@ import path from "node:path";
 import fs from "node:fs";
 import JSON5 from "json5";
 import { isDeepStrictEqual } from "node:util";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { BedrockClient, ListFoundationModelsCommand } from "@aws-sdk/client-bedrock";
 import { createAssistantMessageEventStream, getEnvApiKey, getOAuthApiKey, getOAuthProviders } from "@mariozechner/pi-ai";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -3824,7 +3824,7 @@ function computeDelayMs(retries, attempt) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fsPromises.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number" || typeof parsed.createdAt !== "string") return null;
 		return {
@@ -3838,9 +3838,9 @@ async function readLockPayload(lockPath) {
 async function resolveNormalizedFilePath(filePath) {
 	const resolved = path.resolve(filePath);
 	const dir = path.dirname(resolved);
-	await fs$1.mkdir(dir, { recursive: true });
+	await fsPromises.mkdir(dir, { recursive: true });
 	try {
-		const realDir = await fs$1.realpath(dir);
+		const realDir = await fsPromises.realpath(dir);
 		return path.join(realDir, path.basename(resolved));
 	} catch {
 		return resolved;
@@ -3854,7 +3854,7 @@ async function isStaleLock(lockPath, staleMs) {
 		if (!Number.isFinite(createdAt) || Date.now() - createdAt > staleMs) return true;
 	}
 	try {
-		const stat = await fs$1.stat(lockPath);
+		const stat = await fsPromises.stat(lockPath);
 		return Date.now() - stat.mtimeMs > staleMs;
 	} catch {
 		return true;
@@ -3867,7 +3867,7 @@ async function releaseHeldLock(normalizedFile) {
 	if (current.count > 0) return;
 	HELD_LOCKS.delete(normalizedFile);
 	await current.handle.close().catch(() => void 0);
-	await fs$1.rm(current.lockPath, { force: true }).catch(() => void 0);
+	await fsPromises.rm(current.lockPath, { force: true }).catch(() => void 0);
 }
 async function acquireFileLock(filePath, options) {
 	const normalizedFile = await resolveNormalizedFilePath(filePath);
@@ -3882,7 +3882,7 @@ async function acquireFileLock(filePath, options) {
 	}
 	const attempts = Math.max(1, options.retries.retries + 1);
 	for (let attempt = 0; attempt < attempts; attempt += 1) try {
-		const handle = await fs$1.open(lockPath, "wx");
+		const handle = await fsPromises.open(lockPath, "wx");
 		await handle.writeFile(JSON.stringify({
 			pid: process.pid,
 			createdAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -3899,7 +3899,7 @@ async function acquireFileLock(filePath, options) {
 	} catch (err) {
 		if (err.code !== "EEXIST") throw err;
 		if (await isStaleLock(lockPath, options.stale)) {
-			await fs$1.rm(lockPath, { force: true }).catch(() => void 0);
+			await fsPromises.rm(lockPath, { force: true }).catch(() => void 0);
 			continue;
 		}
 		if (attempt >= attempts - 1) break;
@@ -15179,7 +15179,7 @@ function createIcaclsResetCommand(targetPath, opts) {
 //#region src/security/audit-fs.ts
 async function safeStat(targetPath) {
 	try {
-		const lst = await fs$1.lstat(targetPath);
+		const lst = await fsPromises.lstat(targetPath);
 		return {
 			ok: true,
 			isSymlink: lst.isSymbolicLink(),
@@ -15218,7 +15218,7 @@ async function inspectPathPermissions(targetPath, opts) {
 	let effectiveMode = st.mode;
 	let effectiveIsDir = st.isDir;
 	if (st.isSymlink) try {
-		const target = await fs$1.stat(targetPath);
+		const target = await fsPromises.stat(targetPath);
 		effectiveMode = typeof target.mode === "number" ? target.mode : st.mode;
 		effectiveIsDir = target.isDirectory();
 	} catch {}
@@ -15490,7 +15490,7 @@ async function assertSecurePath(params) {
 	if (stat.isSymlink) {
 		if (!params.allowSymlinkPath) throw new Error(`${params.label} must not be a symlink: ${effectivePath}`);
 		try {
-			effectivePath = await fs$1.realpath(effectivePath);
+			effectivePath = await fsPromises.realpath(effectivePath);
 		} catch {
 			throw new Error(`${params.label} symlink target is not readable: ${params.targetPath}`);
 		}
@@ -15536,7 +15536,7 @@ async function readFileProviderPayload(params) {
 			}, timeoutMs);
 		});
 		try {
-			const payload = await Promise.race([fs$1.readFile(secureFilePath, { signal: abortController.signal }), timeoutPromise]);
+			const payload = await Promise.race([fsPromises.readFile(secureFilePath, { signal: abortController.signal }), timeoutPromise]);
 			if (payload.byteLength > maxBytes) throw new Error(`File provider "${params.providerName}" exceeded maxBytes (${maxBytes}).`);
 			const text = payload.toString("utf8");
 			if (params.providerConfig.mode === "singleValue") return text.replace(/\r?\n$/, "");

package/dist/{auth-token-qGutIUyw.js → auth-token-4Y8dUkki.js}

@@ -1,5 +1,5 @@
 import { ot as resolveStateDir, s as createSubsystemLogger } from "./entry.js";
-import { Ai as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF, Br as buildKilocodeProvider, Di as buildHuggingfaceModelDefinition, Ei as HUGGINGFACE_MODEL_CATALOG, Fi as KILOCODE_BASE_URL, Hr as buildQianfanProvider, Ii as KILOCODE_DEFAULT_MODEL_REF, Lr as QIANFAN_BASE_URL, Mi as resolveCloudflareAiGatewayBaseUrl, Pi as normalizeSecretInput, Qr as buildVeniceModelDefinition, Rr as QIANFAN_DEFAULT_MODEL_ID, Ti as HUGGINGFACE_BASE_URL, Tr as normalizeProviderId, Ur as buildXiaomiProvider, Vr as buildKimiCodingProvider, Xr as VENICE_DEFAULT_MODEL_REF, Yr as VENICE_BASE_URL, Zr as VENICE_MODEL_CATALOG, ai as SYNTHETIC_DEFAULT_MODEL_REF, er as upsertAuthProfile, ii as SYNTHETIC_BASE_URL, ji as buildCloudflareAiGatewayModelDefinition, ni as TOGETHER_MODEL_CATALOG, oi as SYNTHETIC_MODEL_CATALOG, ri as buildTogetherModelDefinition, si as buildSyntheticModelDefinition, ti as TOGETHER_BASE_URL, ur as resolveOpenClawAgentDir, zr as XIAOMI_DEFAULT_MODEL_ID } from "./auth-profiles-Bh2dHooQ.js";
+import { Ai as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF, Br as buildKilocodeProvider, Di as buildHuggingfaceModelDefinition, Ei as HUGGINGFACE_MODEL_CATALOG, Fi as KILOCODE_BASE_URL, Hr as buildQianfanProvider, Ii as KILOCODE_DEFAULT_MODEL_REF, Lr as QIANFAN_BASE_URL, Mi as resolveCloudflareAiGatewayBaseUrl, Pi as normalizeSecretInput, Qr as buildVeniceModelDefinition, Rr as QIANFAN_DEFAULT_MODEL_ID, Ti as HUGGINGFACE_BASE_URL, Tr as normalizeProviderId, Ur as buildXiaomiProvider, Vr as buildKimiCodingProvider, Xr as VENICE_DEFAULT_MODEL_REF, Yr as VENICE_BASE_URL, Zr as VENICE_MODEL_CATALOG, ai as SYNTHETIC_DEFAULT_MODEL_REF, er as upsertAuthProfile, ii as SYNTHETIC_BASE_URL, ji as buildCloudflareAiGatewayModelDefinition, ni as TOGETHER_MODEL_CATALOG, oi as SYNTHETIC_MODEL_CATALOG, ri as buildTogetherModelDefinition, si as buildSyntheticModelDefinition, ti as TOGETHER_BASE_URL, ur as resolveOpenClawAgentDir, zr as XIAOMI_DEFAULT_MODEL_ID } from "./auth-profiles-QXvcpjIT.js";
 import { i as coerceSecretRef, t as DEFAULT_SECRET_PROVIDER_ALIAS } from "./types.secrets-CZ26uLlg.js";
 import { t as PROVIDER_ENV_VARS } from "./provider-env-vars-66Tm-Bs1.js";
 import path from "node:path";

package/dist/{banner-D3w3334V.js → banner-BIxf18aP.js}

@@ -1,6 +1,6 @@
 import { N as isRich, P as theme, h as visibleWidth, wt as hasRootVersionAlias } from "./entry.js";
-import { B as loadConfig } from "./auth-profiles-Bh2dHooQ.js";
-import { xn as resolveCommitHash } from "./compact-SZ3BDWQp.js";
+import { B as loadConfig } from "./auth-profiles-QXvcpjIT.js";
+import { xn as resolveCommitHash } from "./compact-BBdhRYXH.js";
 
 //#region src/cli/tagline.ts
 const DEFAULT_TAGLINE = "All your chats, one OpenClaw.";

package/dist/{bonjour-discovery-Dk22JKmo.js → bonjour-discovery-DBClG9uw.js}

@@ -1,5 +1,5 @@
 import { t as runCommandWithTimeout } from "./exec-OWC_Lkz4.js";
-import { t as isTailnetIPv4 } from "./tailnet-CcjaRS5e.js";
+import { t as isTailnetIPv4 } from "./tailnet-CoMmrqa1.js";
 import { n as resolveWideAreaDiscoveryDomain } from "./widearea-dns-e4-5Q3_T.js";
 
 //#region src/infra/bonjour-discovery.ts

package/dist/{browser-cli-C1NkBy0u.js → browser-cli-B0KE9qxO.js}

@@ -1,34 +1,34 @@
 import { C as info, P as theme, S as danger, _ as defaultRuntime, o as parseBooleanValue, ot as resolveStateDir } from "./entry.js";
-import { B as loadConfig } from "./auth-profiles-Bh2dHooQ.js";
+import { B as loadConfig } from "./auth-profiles-QXvcpjIT.js";
 import { t as formatCliCommand } from "./command-format-DdHwx_z_.js";
-import "./agent-scope-CT92dyCK.js";
+import "./agent-scope-Dd2_TNoB.js";
 import { x as shortenHomePath } from "./utils-DanSccFf.js";
-import "./openclaw-root-Dh_Sm1l8.js";
+import "./openclaw-root-Gv7Ob-5V.js";
 import "./logger-BcqRk323.js";
 import "./exec-OWC_Lkz4.js";
 import "./github-copilot-token-DHTToceK.js";
 import "./host-env-security-CIiLt2Mi.js";
 import "./version-BKzmSBiX.js";
 import "./registry-CZbmSOj8.js";
-import "./manifest-registry-DjjgwuVC.js";
+import "./manifest-registry-C_atL4ID.js";
 import "./message-channel-6rkF5KkO.js";
-import "./tailnet-CcjaRS5e.js";
-import "./ws-DUfuK8DQ.js";
-import "./path-alias-guards-OAUIyvyc.js";
-import { c as normalizeBrowserFormField, i as resolveExistingPathsWithinRoot, l as normalizeBrowserFormFieldValue, r as DEFAULT_UPLOAD_DIR } from "./paths-C6-x9jb-.js";
+import "./tailnet-CoMmrqa1.js";
+import "./ws-DrZBk8aE.js";
+import "./path-alias-guards-BndjEKU2.js";
+import { c as normalizeBrowserFormField, i as resolveExistingPathsWithinRoot, l as normalizeBrowserFormFieldValue, r as DEFAULT_UPLOAD_DIR } from "./paths-B-3rcnCY.js";
 import "./redact-BCIqtHJW.js";
 import "./errors-DMBofubI.js";
-import "./fs-safe-CgWykA_r.js";
+import "./fs-safe-DZPN9PEp.js";
 import { t as movePathToTrash } from "./trash-BvQCk4Sz.js";
-import "./client-IQ7AZ1A-.js";
-import "./call-Bl8osGeS.js";
+import "./client-DaFloLVI.js";
+import "./call-B56A9tyz.js";
 import "./pairing-token-fl66UgDc.js";
 import { t as formatDocsLink } from "./links-BUkYLQQF.js";
 import { n as runCommandWithRuntime } from "./cli-utils-CI_KkT8q.js";
 import { t as formatHelpExamples } from "./help-format-B08o9IQj.js";
 import "./progress-BNL5DRrQ.js";
 import { n as inheritOptionFromParent } from "./command-options-DEPpN8NK.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-vqmfnd4e.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-CZWffg-J.js";
 import { t as copyToClipboard } from "./clipboard-DX6mGuyJ.js";
 import { fileURLToPath } from "node:url";
 import path from "node:path";

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.3.7",
-  "commit": "7afd2a14a8bf28552dccffeb10a2505930398892",
-  "builtAt": "2026-03-07T17:01:44.525Z"
+  "version": "2026.3.9",
+  "commit": "ee1446ca38bc5e779e79c75d97006d181e30d8ab",
+  "builtAt": "2026-03-08T13:00:47.381Z"
 }

package/dist/{call-Bl8osGeS.js → call-B56A9tyz.js}

@@ -1,23 +1,23 @@
 import { X as resolveConfigPath, et as resolveGatewayPort, ot as resolveStateDir } from "./entry.js";
-import { B as loadConfig } from "./auth-profiles-Bh2dHooQ.js";
+import { B as loadConfig } from "./auth-profiles-QXvcpjIT.js";
 import { b as shortenHomeInString, s as ensureDir, t as CONFIG_DIR, v as resolveUserPath } from "./utils-DanSccFf.js";
 import { a as hasConfiguredSecretInput, d as resolveSecretInputRef } from "./types.secrets-CZ26uLlg.js";
 import { t as VERSION } from "./version-BKzmSBiX.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-6rkF5KkO.js";
-import { a as isSecureWebSocketUrl } from "./ws-DUfuK8DQ.js";
+import { a as isSecureWebSocketUrl } from "./ws-DrZBk8aE.js";
 import { n as resolveGatewayCredentialsFromConfig } from "./credentials-BN-3xksd.js";
-import { Pt as PROTOCOL_VERSION, in as normalizeFingerprint, on as loadOrCreateDeviceIdentity, rn as resolveSecretInputString, t as GatewayClient } from "./client-IQ7AZ1A-.js";
+import { Pt as PROTOCOL_VERSION, in as normalizeFingerprint, on as loadOrCreateDeviceIdentity, rn as resolveSecretInputString, t as GatewayClient } from "./client-DaFloLVI.js";
 import { execFile } from "node:child_process";
 import path from "node:path";
 import { promisify } from "node:util";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { X509Certificate, randomUUID } from "node:crypto";
 
 //#region src/infra/tls/gateway.ts
 const execFileAsync = promisify(execFile);
 async function fileExists(filePath) {
 	try {
-		await fs.access(filePath);
+		await fsPromises.access(filePath);
 		return true;
 	} catch {
 		return false;
@@ -44,8 +44,8 @@ async function generateSelfSignedCert(params) {
 		"-subj",
 		"/CN=openclaw-gateway"
 	]);
-	await fs.chmod(params.keyPath, 384).catch(() => {});
-	await fs.chmod(params.certPath, 384).catch(() => {});
+	await fsPromises.chmod(params.keyPath, 384).catch(() => {});
+	await fsPromises.chmod(params.certPath, 384).catch(() => {});
 	params.log?.info?.(`gateway tls: generated self-signed cert at ${shortenHomeInString(params.certPath)}`);
 }
 async function loadGatewayTlsRuntime(cfg, log) {
@@ -83,9 +83,9 @@ async function loadGatewayTlsRuntime(cfg, log) {
 		error: "gateway tls: cert/key missing"
 	};
 	try {
-		const cert = await fs.readFile(certPath, "utf8");
-		const key = await fs.readFile(keyPath, "utf8");
-		const ca = caPath ? await fs.readFile(caPath, "utf8") : void 0;
+		const cert = await fsPromises.readFile(certPath, "utf8");
+		const key = await fsPromises.readFile(keyPath, "utf8");
+		const ca = caPath ? await fsPromises.readFile(caPath, "utf8") : void 0;
 		const fingerprintSha256 = normalizeFingerprint(new X509Certificate(cert).fingerprint256 ?? "");
 		if (!fingerprintSha256) return {
 			enabled: false,

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-3b31edfb7bfb3e74c4d68953305f416bd7c5b637d811bd9ca27c2d7df3f8cab4
+eb8ec15a5b9f4a0f980c2c6f3cefcb9bbc011d85bd2c1f37225baf3adf7926e0

package/dist/{channel-account-context-Bkq8Tao4.js → channel-account-context-CkpkengK.js}

@@ -2,7 +2,7 @@ import { t as runCommandWithTimeout } from "./exec-OWC_Lkz4.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-BhdrdVp5.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BAv58r5B.js";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 
 //#region src/infra/update-channels.ts
 const DEFAULT_PACKAGE_CHANNEL = "stable";
@@ -86,11 +86,11 @@ function resolveUpdateChannelDisplay(params) {
 //#region src/infra/detect-package-manager.ts
 async function detectPackageManager$1(root) {
 	try {
-		const raw = await fs.readFile(path.join(root, "package.json"), "utf-8");
+		const raw = await fsPromises.readFile(path.join(root, "package.json"), "utf-8");
 		const pm = JSON.parse(raw)?.packageManager?.split("@")[0]?.trim();
 		if (pm === "pnpm" || pm === "bun" || pm === "npm") return pm;
 	} catch {}
-	const files = await fs.readdir(root).catch(() => []);
+	const files = await fsPromises.readdir(root).catch(() => []);
 	if (files.includes("pnpm-lock.yaml")) return "pnpm";
 	if (files.includes("bun.lockb")) return "bun";
 	if (files.includes("package-lock.json")) return "npm";
@@ -112,7 +112,7 @@ function formatGitInstallLabel(update) {
 }
 async function exists(p) {
 	try {
-		await fs.access(p);
+		await fsPromises.access(p);
 		return true;
 	} catch {
 		return false;
@@ -239,7 +239,7 @@ async function checkGitUpdateStatus(params) {
 }
 async function statMtimeMs(p) {
 	try {
-		return (await fs.stat(p)).mtimeMs;
+		return (await fsPromises.stat(p)).mtimeMs;
 	} catch {
 		return null;
 	}

package/dist/{channel-activity-DFfVKdMC.js → channel-activity-ClJu0F_1.js}

@@ -1,5 +1,5 @@
 import { s as createSubsystemLogger } from "./entry.js";
-import { $r as resolveRetryConfig, ei as retryAsync } from "./auth-profiles-Bh2dHooQ.js";
+import { $r as resolveRetryConfig, ei as retryAsync } from "./auth-profiles-QXvcpjIT.js";
 import { r as formatErrorMessage } from "./errors-DMBofubI.js";
 import { RateLimitError } from "@buape/carbon";
 

package/dist/{channel-options-Ddq9nbjL.js → channel-options-BGF--IMr.js}

@@ -1,8 +1,8 @@
 import { r as isTruthyEnvValue } from "./entry.js";
 import { n as CHAT_CHANNEL_ORDER } from "./registry-CZbmSOj8.js";
-import { n as listChannelPlugins } from "./plugins-BB30X9Wg.js";
-import { a as listChannelPluginCatalogEntries } from "./plugin-auto-enable-CPLdiF-6.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-BA0j17R1.js";
+import { n as listChannelPlugins } from "./plugins-Bv9ZfJVO.js";
+import { a as listChannelPluginCatalogEntries } from "./plugin-auto-enable-BAHkcVP4.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-bnANTUyV.js";
 import { fileURLToPath } from "node:url";
 import path from "node:path";
 import fs from "node:fs";

package/dist/{channel-selection-TEB-oKFB.js → channel-selection-DHlVN8Pr.js}

@@ -1,4 +1,4 @@
-import { n as listChannelPlugins } from "./plugins-BB30X9Wg.js";
+import { n as listChannelPlugins } from "./plugins-Bv9ZfJVO.js";
 import { c as listDeliverableMessageChannels, l as normalizeMessageChannel, n as isDeliverableMessageChannel } from "./message-channel-6rkF5KkO.js";
 
 //#region src/infra/outbound/channel-selection.ts