@lobu/worker 2.8.0

package/dist/openclaw/session-context.js

@@ -0,0 +1,151 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.invalidateSessionContextCache = invalidateSessionContextCache;
+exports.getOpenClawSessionContext = getOpenClawSessionContext;
+const core_1 = require("@lobu/core");
+const url_utils_1 = require("../core/url-utils");
+const logger = (0, core_1.createLogger)("openclaw-session-context");
+const CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes
+const DEFAULT_SESSION_CONTEXT = {
+    gatewayInstructions: "",
+    providerConfig: {},
+    skillsConfig: [],
+    mcpTools: {},
+    mcpContext: {},
+};
+// Module-level cache for session context
+let cachedResult = null;
+/**
+ * Invalidate the session context cache.
+ * Called by the SSE client when a config_changed event is received.
+ */
+function invalidateSessionContextCache() {
+    cachedResult = null;
+    logger.info("Session context cache invalidated");
+}
+function buildMcpInstructions(mcpStatus, mcpToolIds) {
+    if (!mcpStatus || mcpStatus.length === 0) {
+        return "";
+    }
+    // MCPs with no tools at all that need setup (explicit auth/input requirements)
+    const undiscoveredMcps = mcpStatus.filter((mcp) => !mcpToolIds.has(mcp.id) &&
+        ((mcp.requiresAuth && !mcp.authenticated) ||
+            (mcp.requiresInput && !mcp.configured)));
+    // MCPs with tools visible but still needing auth to use them
+    const unauthenticatedMcps = mcpStatus.filter((mcp) => mcpToolIds.has(mcp.id) && mcp.requiresAuth && !mcp.authenticated);
+    // MCPs with no tools and no explicit auth requirement — may need plugin-level
+    // authentication (e.g. owletto device auth flow via owletto_login tool)
+    const pluginAuthMcps = mcpStatus.filter((mcp) => !mcpToolIds.has(mcp.id) && !mcp.requiresAuth && !mcp.requiresInput);
+    if (undiscoveredMcps.length === 0 &&
+        unauthenticatedMcps.length === 0 &&
+        pluginAuthMcps.length === 0) {
+        return "";
+    }
+    const lines = ["## MCP Tools Requiring Setup"];
+    for (const mcp of undiscoveredMcps) {
+        const reasons = [];
+        if (mcp.requiresAuth && !mcp.authenticated) {
+            reasons.push("OAuth authentication");
+        }
+        if (mcp.requiresInput && !mcp.configured) {
+            reasons.push("configuration");
+        }
+        lines.push(`- ⚠️ **${mcp.name}** (id: ${mcp.id}): Requires ${reasons.join(" and ")}. Start the relevant login flow if a login tool exists; otherwise tell the user an admin must connect it.`);
+    }
+    for (const mcp of unauthenticatedMcps) {
+        lines.push(`- ⚠️ **${mcp.name}** (id: ${mcp.id}): Tools are visible but require authentication to use. Start the relevant login flow if available; otherwise tell the user an admin must connect it.`);
+    }
+    for (const mcp of pluginAuthMcps) {
+        lines.push(`- **IMPORTANT** — **${mcp.name}** (id: ${mcp.id}): Memory tools (save_knowledge, search_knowledge) are NOT available because authentication is required. You MUST call the \`${mcp.id}_login\` tool NOW to start the login flow. After the user completes login in their browser, call \`${mcp.id}_login_check\` to finish authentication. Do NOT tell the user that memory is unavailable — instead, initiate login immediately.`);
+    }
+    return lines.join("\n");
+}
+function buildMcpServerInstructions(mcpInstructions) {
+    const entries = Object.entries(mcpInstructions).filter(([, v]) => v);
+    if (entries.length === 0)
+        return "";
+    const lines = ["## MCP Server Instructions", ""];
+    for (const [mcpId, instructions] of entries) {
+        lines.push(`### ${mcpId}`, "", instructions, "");
+    }
+    return lines.join("\n");
+}
+/**
+ * Fetch session context from gateway for OpenClaw worker.
+ * Returns gateway instructions and dynamic provider configuration.
+ * Caches the result until invalidated by a config_changed SSE event.
+ * Skips MCP server config (OpenClaw doesn't use Claude SDK's MCP format).
+ */
+async function getOpenClawSessionContext() {
+    if (cachedResult && Date.now() - cachedResult.cachedAt < CACHE_TTL_MS) {
+        logger.debug("Returning cached session context");
+        return cachedResult;
+    }
+    const dispatcherUrl = process.env.DISPATCHER_URL;
+    const workerToken = process.env.WORKER_TOKEN;
+    if (!dispatcherUrl || !workerToken) {
+        logger.warn("Missing dispatcher URL or worker token for session context");
+        return { ...DEFAULT_SESSION_CONTEXT };
+    }
+    try {
+        const url = new URL("/worker/session-context", (0, url_utils_1.ensureBaseUrl)(dispatcherUrl));
+        const response = await fetch(url, {
+            headers: {
+                Authorization: `Bearer ${workerToken}`,
+            },
+        });
+        if (!response.ok) {
+            logger.warn("Gateway returned non-success status for session context", {
+                status: response.status,
+            });
+            return { ...DEFAULT_SESSION_CONTEXT };
+        }
+        const data = (await response.json());
+        logger.info(`Received session context: ${data.platformInstructions.length} chars platform instructions, ${data.mcpStatus.length} MCP status entries, provider: ${data.providerConfig?.defaultProvider || "none"}, cliBackends: ${data.providerConfig?.cliBackends?.map((b) => b.name).join(", ") || "none"}`);
+        const toolMcpIds = new Set(Object.keys(data.mcpTools || {}));
+        const mcpSetupInstructions = buildMcpInstructions(data.mcpStatus, toolMcpIds);
+        // Include MCP server instructions for all servers (with or without tools).
+        // These provide workspace context (available connectors, entity schemas, etc.)
+        // that helps the agent use the tools effectively.
+        const mcpServerInstructions = buildMcpServerInstructions(data.mcpInstructions || {});
+        const gatewayInstructions = [
+            data.agentInstructions,
+            data.platformInstructions,
+            data.networkInstructions,
+            data.skillsInstructions,
+            mcpSetupInstructions,
+            mcpServerInstructions,
+        ]
+            .filter(Boolean)
+            .join("\n\n");
+        const mcpTools = data.mcpTools || {};
+        logger.info(`Built gateway instructions: agent (${(data.agentInstructions || "").length} chars) + platform (${data.platformInstructions.length} chars) + network (${data.networkInstructions.length} chars) + skills (${(data.skillsInstructions || "").length} chars) + MCP setup (${mcpSetupInstructions.length} chars) + MCP server instructions (${mcpServerInstructions.length} chars), mcpTools: ${Object.keys(mcpTools).length} servers`);
+        const mcpContext = data.mcpContext || {};
+        const result = {
+            gatewayInstructions,
+            providerConfig: data.providerConfig || {},
+            skillsConfig: data.skillsConfig || [],
+            mcpTools,
+            mcpContext,
+        };
+        // Don't cache if any authenticated MCP returned no tools — likely a
+        // transient upstream failure that should be retried on the next message.
+        const hasEmptyAuthenticatedMcp = data.mcpStatus.some((mcp) => mcp.authenticated && !toolMcpIds.has(mcp.id));
+        if (!hasEmptyAuthenticatedMcp) {
+            cachedResult = { ...result, cachedAt: Date.now() };
+        }
+        else {
+            logger.warn("Skipping session context cache — authenticated MCP(s) returned no tools", {
+                emptyMcps: data.mcpStatus
+                    .filter((mcp) => mcp.authenticated && !toolMcpIds.has(mcp.id))
+                    .map((mcp) => mcp.id),
+            });
+        }
+        return result;
+    }
+    catch (error) {
+        logger.error("Failed to fetch session context from gateway", { error });
+        return { ...DEFAULT_SESSION_CONTEXT };
+    }
+}
+//# sourceMappingURL=session-context.js.map

package/dist/openclaw/session-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-context.js","sourceRoot":"","sources":["../../src/openclaw/session-context.ts"],"names":[],"mappings":";;AAgFA,sEAGC;AAuFD,8DA0GC;AApRD,qCAIoB;AACpB,iDAAkD;AAElD,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,0BAA0B,CAAC,CAAC;AAiDxD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAEhD,MAAM,uBAAuB,GAAG;IAC9B,mBAAmB,EAAE,EAAE;IACvB,cAAc,EAAE,EAAoB;IACpC,YAAY,EAAE,EAAoB;IAClC,QAAQ,EAAE,EAAkC;IAC5C,UAAU,EAAE,EAA4B;CAChC,CAAC;AAEX,yCAAyC;AACzC,IAAI,YAAY,GAOL,IAAI,CAAC;AAEhB;;;GAGG;AACH,SAAgB,6BAA6B;IAC3C,YAAY,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAAsB,EACtB,UAAuB;IAEvB,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,+EAA+E;IAC/E,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;YACvC,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAC5C,CAAC;IAEF,6DAA6D;IAC7D,MAAM,mBAAmB,GAAG,SAAS,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,aAAa,CAC1E,CAAC;IAEF,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CACrC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,aAAa,CAC5E,CAAC;IAEF,IACE,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAC7B,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAChC,cAAc,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAa,CAAC,8BAA8B,CAAC,CAAC;IAEzD,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,IAAI,CACR,UAAU,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,eAAe,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,2GAA2G,CACnL,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,UAAU,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,uJAAuJ,CAC3L,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,uBAAuB,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,gIAAgI,GAAG,CAAC,EAAE,sGAAsG,GAAG,CAAC,EAAE,iIAAiI,CACpa,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,0BAA0B,CACjC,eAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAa,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,OAAO,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,yBAAyB;IAO7C,IAAI,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,GAAG,YAAY,EAAE,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAE7C,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,yBAAyB,EACzB,IAAA,yBAAa,EAAC,aAAa,CAAC,CAC7B,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE;gBACrE,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;QAE/D,MAAM,CAAC,IAAI,CACT,6BAA6B,IAAI,CAAC,oBAAoB,CAAC,MAAM,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,kCAAkC,IAAI,CAAC,cAAc,EAAE,eAAe,IAAI,MAAM,kBAAkB,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CACjS,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,IAAI,CAAC,SAAS,EACd,UAAU,CACX,CAAC;QACF,2EAA2E;QAC3E,+EAA+E;QAC/E,kDAAkD;QAClD,MAAM,qBAAqB,GAAG,0BAA0B,CACtD,IAAI,CAAC,eAAe,IAAI,EAAE,CAC3B,CAAC;QAEF,MAAM,mBAAmB,GAAG;YAC1B,IAAI,CAAC,iBAAiB;YACtB,IAAI,CAAC,oBAAoB;YACzB,IAAI,CAAC,mBAAmB;YACxB,IAAI,CAAC,kBAAkB;YACvB,oBAAoB;YACpB,qBAAqB;SACtB;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAErC,MAAM,CAAC,IAAI,CACT,sCAAsC,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,uBAAuB,IAAI,CAAC,oBAAoB,CAAC,MAAM,sBAAsB,IAAI,CAAC,mBAAmB,CAAC,MAAM,qBAAqB,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM,wBAAwB,oBAAoB,CAAC,MAAM,sCAAsC,qBAAqB,CAAC,MAAM,sBAAsB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,UAAU,CACpa,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QAEzC,MAAM,MAAM,GAAG;YACb,mBAAmB;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;YACzC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;YACrC,QAAQ;YACR,UAAU;SACX,CAAC;QAEF,oEAAoE;QACpE,yEAAyE;QACzE,MAAM,wBAAwB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAClD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CACtD,CAAC;QACF,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC9B,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,yEAAyE,EACzE;gBACE,SAAS,EAAE,IAAI,CAAC,SAAS;qBACtB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;qBAC7D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;aACxB,CACF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/openclaw/tool-policy.d.ts

@@ -0,0 +1,23 @@
+import type { ToolsConfig } from "@lobu/core";
+export type BashCommandPolicy = {
+    allowAll: boolean;
+    allowPrefixes: string[];
+    denyPrefixes: string[];
+};
+export type ToolPolicy = {
+    toolsConfig?: ToolsConfig;
+    allowedPatterns: string[];
+    deniedPatterns: string[];
+    strictMode: boolean;
+    bashPolicy: BashCommandPolicy;
+};
+export declare function isDirectPackageInstallCommand(command: string): boolean;
+export declare function normalizeToolList(value?: string | string[]): string[];
+export declare function buildToolPolicy(params: {
+    toolsConfig?: ToolsConfig;
+    allowedTools?: string | string[];
+    disallowedTools?: string | string[];
+}): ToolPolicy;
+export declare function isToolAllowedByPolicy(toolName: string, policy: ToolPolicy): boolean;
+export declare function enforceBashCommandPolicy(command: string, policy: BashCommandPolicy): void;
+//# sourceMappingURL=tool-policy.d.ts.map

package/dist/openclaw/tool-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.d.ts","sourceRoot":"","sources":["../../src/openclaw/tool-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AA2BF,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAStE;AAUD,wBAAgB,iBAAiB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,CAUrE;AA4BD,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACrC,GAAG,UAAU,CAyCb;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,GACjB,OAAO,CA8BT;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA4BN"}

package/dist/openclaw/tool-policy.js

@@ -0,0 +1,151 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isDirectPackageInstallCommand = isDirectPackageInstallCommand;
+exports.normalizeToolList = normalizeToolList;
+exports.buildToolPolicy = buildToolPolicy;
+exports.isToolAllowedByPolicy = isToolAllowedByPolicy;
+exports.enforceBashCommandPolicy = enforceBashCommandPolicy;
+const DEFAULT_PACKAGE_MANAGER_DENY_PREFIXES = [
+    "apt ",
+    "apt-get ",
+    "yum ",
+    "dnf ",
+    "apk ",
+    "pacman ",
+    "zypper ",
+    "brew ",
+    "nix-shell ",
+    "nix-env ",
+    "nix profile ",
+    "sudo apt ",
+    "sudo apt-get ",
+    "sudo yum ",
+    "sudo dnf ",
+    "sudo apk ",
+    "sudo pacman ",
+    "sudo zypper ",
+    "sudo brew ",
+    "sudo nix-shell ",
+    "sudo nix-env ",
+    "sudo nix profile ",
+];
+function isDirectPackageInstallCommand(command) {
+    const trimmed = command.trim().toLowerCase();
+    if (!trimmed) {
+        return false;
+    }
+    return DEFAULT_PACKAGE_MANAGER_DENY_PREFIXES.some((prefix) => trimmed.startsWith(prefix.toLowerCase()));
+}
+function normalizePattern(pattern) {
+    return pattern.trim();
+}
+function normalizeToolName(name) {
+    return name.trim().toLowerCase();
+}
+function normalizeToolList(value) {
+    if (!value) {
+        return [];
+    }
+    const rawList = Array.isArray(value) ? value : value.split(/[,\n]/);
+    return rawList
+        .map((entry) => typeof entry === "string" ? entry.trim() : String(entry).trim())
+        .filter((entry) => entry.length > 0);
+}
+function parseBashFilter(pattern) {
+    const match = pattern.match(/^Bash\(([^:]+):\*\)$/i);
+    if (!match) {
+        return null;
+    }
+    const prefix = match[1]?.trim();
+    return prefix ? prefix : null;
+}
+function matchesToolPattern(toolName, pattern) {
+    const normalizedTool = normalizeToolName(toolName);
+    const normalizedPattern = normalizePattern(pattern);
+    const normalizedPatternLower = normalizedPattern.toLowerCase();
+    if (normalizedPattern === "*") {
+        return true;
+    }
+    if (normalizedPatternLower.endsWith("*")) {
+        const prefix = normalizedPatternLower.slice(0, -1);
+        return normalizedTool.startsWith(prefix);
+    }
+    return normalizedTool === normalizedPatternLower;
+}
+function buildToolPolicy(params) {
+    const allowedPatterns = normalizeToolList(params.allowedTools);
+    const deniedPatterns = normalizeToolList(params.disallowedTools);
+    const toolsConfig = params.toolsConfig;
+    const strictMode = toolsConfig?.strictMode === true;
+    const mergedAllowed = [
+        ...(toolsConfig?.allowedTools ?? []),
+        ...allowedPatterns,
+    ].map(normalizePattern);
+    const mergedDenied = [
+        ...(toolsConfig?.deniedTools ?? []),
+        ...deniedPatterns,
+    ].map(normalizePattern);
+    const bashAllowPrefixes = mergedAllowed
+        .map((pattern) => parseBashFilter(pattern))
+        .filter((prefix) => Boolean(prefix));
+    const bashDenyPrefixes = mergedDenied
+        .map((pattern) => parseBashFilter(pattern))
+        .filter((prefix) => Boolean(prefix));
+    const bashAllowAll = mergedAllowed.some((pattern) => matchesToolPattern("bash", pattern));
+    return {
+        toolsConfig,
+        allowedPatterns: mergedAllowed,
+        deniedPatterns: mergedDenied,
+        strictMode,
+        bashPolicy: {
+            allowAll: bashAllowAll,
+            allowPrefixes: bashAllowPrefixes,
+            denyPrefixes: [
+                ...DEFAULT_PACKAGE_MANAGER_DENY_PREFIXES,
+                ...bashDenyPrefixes,
+            ],
+        },
+    };
+}
+function isToolAllowedByPolicy(toolName, policy) {
+    const normalizedName = normalizeToolName(toolName);
+    const { allowedPatterns, deniedPatterns, strictMode } = policy;
+    const explicitDenied = deniedPatterns.some((pattern) => !parseBashFilter(pattern) && matchesToolPattern(normalizedName, pattern));
+    if (explicitDenied) {
+        return false;
+    }
+    if (normalizedName === "bash") {
+        if (strictMode) {
+            const explicitlyAllowed = allowedPatterns.some((pattern) => matchesToolPattern(normalizedName, pattern));
+            const hasCommandAllowlist = policy.bashPolicy.allowPrefixes.length > 0;
+            return explicitlyAllowed || hasCommandAllowlist;
+        }
+        return true;
+    }
+    if (!strictMode) {
+        return true;
+    }
+    return allowedPatterns.some((pattern) => matchesToolPattern(normalizedName, pattern));
+}
+function enforceBashCommandPolicy(command, policy) {
+    const trimmed = command.trim();
+    if (!trimmed) {
+        return;
+    }
+    const normalizedCommand = trimmed.toLowerCase();
+    const denyMatchPrefix = policy.denyPrefixes.find((prefix) => normalizedCommand.startsWith(prefix.toLowerCase()));
+    if (denyMatchPrefix) {
+        throw new Error("Bash command denied by policy");
+    }
+    if (policy.allowAll) {
+        return;
+    }
+    if (policy.allowPrefixes.length === 0) {
+        return;
+    }
+    const allowMatch = policy.allowPrefixes.some((prefix) => normalizedCommand.startsWith(prefix.toLowerCase()));
+    if (!allowMatch) {
+        throw new Error("Bash command not allowed by policy");
+    }
+}
+//# sourceMappingURL=tool-policy.js.map

package/dist/openclaw/tool-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.js","sourceRoot":"","sources":["../../src/openclaw/tool-policy.ts"],"names":[],"mappings":";;AAyCA,sEASC;AAUD,8CAUC;AA4BD,0CA6CC;AAED,sDAiCC;AAED,4DA+BC;AAnMD,MAAM,qCAAqC,GAAG;IAC5C,MAAM;IACN,UAAU;IACV,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,SAAS;IACT,OAAO;IACP,YAAY;IACZ,UAAU;IACV,cAAc;IACd,WAAW;IACX,eAAe;IACf,WAAW;IACX,WAAW;IACX,WAAW;IACX,cAAc;IACd,cAAc;IACd,YAAY;IACZ,iBAAiB;IACjB,eAAe;IACf,mBAAmB;CACpB,CAAC;AAEF,SAAgB,6BAA6B,CAAC,OAAe;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,qCAAqC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3D,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAyB;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpE,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAChE;SACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAChC,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAChC,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,OAAe;IAC3D,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;IAE/D,IAAI,iBAAiB,KAAK,GAAG,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,sBAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,cAAc,KAAK,sBAAsB,CAAC;AACnD,CAAC;AAED,SAAgB,eAAe,CAAC,MAI/B;IACC,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,MAAM,UAAU,GAAG,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;IAEpD,MAAM,aAAa,GAAG;QACpB,GAAG,CAAC,WAAW,EAAE,YAAY,IAAI,EAAE,CAAC;QACpC,GAAG,eAAe;KACnB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxB,MAAM,YAAY,GAAG;QACnB,GAAG,CAAC,WAAW,EAAE,WAAW,IAAI,EAAE,CAAC;QACnC,GAAG,cAAc;KAClB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAExB,MAAM,iBAAiB,GAAG,aAAa;SACpC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;SAC1C,MAAM,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAEzD,MAAM,gBAAgB,GAAG,YAAY;SAClC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;SAC1C,MAAM,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAEzD,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CACpC,CAAC;IAEF,OAAO;QACL,WAAW;QACX,eAAe,EAAE,aAAa;QAC9B,cAAc,EAAE,YAAY;QAC5B,UAAU;QACV,UAAU,EAAE;YACV,QAAQ,EAAE,YAAY;YACtB,aAAa,EAAE,iBAAiB;YAChC,YAAY,EAAE;gBACZ,GAAG,qCAAqC;gBACxC,GAAG,gBAAgB;aACpB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,QAAgB,EAChB,MAAkB;IAElB,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAE/D,MAAM,cAAc,GAAG,cAAc,CAAC,IAAI,CACxC,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,cAAc,EAAE,OAAO,CAAC,CAC3E,CAAC;IACF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACzD,kBAAkB,CAAC,cAAc,EAAE,OAAO,CAAC,CAC5C,CAAC;YACF,MAAM,mBAAmB,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;YACvE,OAAO,iBAAiB,IAAI,mBAAmB,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACtC,kBAAkB,CAAC,cAAc,EAAE,OAAO,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAAe,EACf,MAAyB;IAEzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1D,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CACnD,CAAC;IACF,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACtD,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CACnD,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/dist/openclaw/tools.d.ts

@@ -0,0 +1,6 @@
+import type { AgentTool } from "@mariozechner/pi-agent-core";
+import { type BashOperations } from "@mariozechner/pi-coding-agent";
+export declare function createOpenClawTools(cwd: string, options?: {
+    bashOperations?: BashOperations;
+}): AgentTool<any>[];
+//# sourceMappingURL=tools.d.ts.map

package/dist/openclaw/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/openclaw/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,KAAK,cAAc,EAQpB,MAAM,+BAA+B,CAAC;AA8HvC,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,cAAc,CAAA;CAAE,GAC5C,SAAS,CAAC,GAAG,CAAC,EAAE,CAiClB"}

package/dist/openclaw/tools.js

@@ -0,0 +1,158 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOpenClawTools = createOpenClawTools;
+const pi_coding_agent_1 = require("@mariozechner/pi-coding-agent");
+const typebox_1 = require("@sinclair/typebox");
+const tool_policy_1 = require("./tool-policy");
+const CLAUDE_PARAM_GROUPS = {
+    read: [{ keys: ["path", "file_path"], label: "path (path or file_path)" }],
+    write: [{ keys: ["path", "file_path"], label: "path (path or file_path)" }],
+    edit: [
+        { keys: ["path", "file_path"], label: "path (path or file_path)" },
+        {
+            keys: ["oldText", "old_string"],
+            label: "oldText (oldText or old_string)",
+        },
+        {
+            keys: ["newText", "new_string"],
+            label: "newText (newText or new_string)",
+        },
+    ],
+};
+function normalizeToolParams(params) {
+    if (!params || typeof params !== "object") {
+        return undefined;
+    }
+    const record = params;
+    const normalized = { ...record };
+    if ("file_path" in normalized && !("path" in normalized)) {
+        normalized.path = normalized.file_path;
+        delete normalized.file_path;
+    }
+    if ("old_string" in normalized && !("oldText" in normalized)) {
+        normalized.oldText = normalized.old_string;
+        delete normalized.old_string;
+    }
+    if ("new_string" in normalized && !("newText" in normalized)) {
+        normalized.newText = normalized.new_string;
+        delete normalized.new_string;
+    }
+    return normalized;
+}
+function assertRequiredParams(params, groups) {
+    for (const group of groups) {
+        const hasValue = group.keys.some((key) => {
+            const value = params[key];
+            if (value === undefined || value === null) {
+                return false;
+            }
+            if (!group.allowEmpty &&
+                typeof value === "string" &&
+                value.trim() === "") {
+                return false;
+            }
+            return true;
+        });
+        if (!hasValue) {
+            const label = group.label ?? group.keys.join(" or ");
+            throw new Error(`Missing required parameter: ${label}`);
+        }
+    }
+}
+function wrapToolWithNormalization(params) {
+    const { tool, required, schema } = params;
+    return {
+        ...tool,
+        parameters: schema,
+        execute: async (toolCallId, rawParams, signal, onUpdate) => {
+            const normalized = normalizeToolParams(rawParams) ?? {};
+            assertRequiredParams(normalized, required);
+            return tool.execute(toolCallId, normalized, signal, onUpdate);
+        },
+    };
+}
+function buildReadSchema() {
+    return typebox_1.Type.Object({
+        path: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Path to the file" })),
+        file_path: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Path to the file" })),
+        offset: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Start reading at this byte offset" })),
+        limit: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Maximum bytes to read" })),
+    });
+}
+function buildWriteSchema() {
+    return typebox_1.Type.Object({
+        path: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Path to the file" })),
+        file_path: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Path to the file" })),
+        content: typebox_1.Type.String({ description: "Content to write" }),
+    });
+}
+function buildEditSchema() {
+    return typebox_1.Type.Object({
+        path: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Path to the file" })),
+        file_path: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Path to the file" })),
+        oldText: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Text to replace" })),
+        old_string: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Text to replace" })),
+        newText: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Replacement text" })),
+        new_string: typebox_1.Type.Optional(typebox_1.Type.String({ description: "Replacement text" })),
+    });
+}
+function createOpenClawTools(cwd, options) {
+    const read = wrapToolWithNormalization({
+        tool: (0, pi_coding_agent_1.createReadTool)(cwd),
+        required: CLAUDE_PARAM_GROUPS.read,
+        schema: buildReadSchema(),
+    });
+    const write = wrapToolWithNormalization({
+        tool: (0, pi_coding_agent_1.createWriteTool)(cwd),
+        required: CLAUDE_PARAM_GROUPS.write,
+        schema: buildWriteSchema(),
+    });
+    const edit = wrapToolWithNormalization({
+        tool: (0, pi_coding_agent_1.createEditTool)(cwd),
+        required: CLAUDE_PARAM_GROUPS.edit,
+        schema: buildEditSchema(),
+    });
+    const bashToolOpts = options?.bashOperations
+        ? { operations: options.bashOperations }
+        : undefined;
+    const bash = wrapBashWithProxyHint((0, pi_coding_agent_1.createBashTool)(cwd, bashToolOpts));
+    return [
+        read,
+        write,
+        edit,
+        bash,
+        (0, pi_coding_agent_1.createGrepTool)(cwd),
+        (0, pi_coding_agent_1.createFindTool)(cwd),
+        (0, pi_coding_agent_1.createLsTool)(cwd),
+    ];
+}
+/**
+ * Wrap bash tool to detect proxy CONNECT 403 errors and append a hint.
+ * curl doesn't display the proxy response body for CONNECT failures,
+ * so the model never sees "Domain not allowed" — only exit code 56.
+ */
+function wrapBashWithProxyHint(tool) {
+    const PROXY_403_PATTERN = /Received HTTP code 403 from proxy after CONNECT/i;
+    return {
+        ...tool,
+        execute: async (toolCallId, params, signal, onUpdate) => {
+            const command = params && typeof params === "object" && "command" in params
+                ? String(params.command ?? "")
+                : "";
+            if ((0, tool_policy_1.isDirectPackageInstallCommand)(command)) {
+                throw new Error("DIRECT PACKAGE INSTALL BLOCKED. Install system packages with nixPackages in lobu.toml or agent settings instead of using package managers inside the worker.");
+            }
+            try {
+                return await tool.execute(toolCallId, params, signal, onUpdate);
+            }
+            catch (err) {
+                const msg = err?.message ?? String(err);
+                if (PROXY_403_PATTERN.test(msg)) {
+                    throw new Error(`DOMAIN BLOCKED BY PROXY. The domain is blocked at the network level. Network access is configured via lobu.toml or the gateway configuration APIs — do NOT retry the request.\n\n${msg}`);
+                }
+                throw err;
+            }
+        },
+    };
+}
+//# sourceMappingURL=tools.js.map

package/dist/openclaw/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/openclaw/tools.ts"],"names":[],"mappings":";;AAwIA,kDAoCC;AA3KD,mEASuC;AACvC,+CAAyC;AACzC,+CAA8D;AAQ9D,MAAM,mBAAmB,GAGrB;IACF,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC1E,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC3E,IAAI,EAAE;QACJ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE;QAClE;YACE,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;YAC/B,KAAK,EAAE,iCAAiC;SACzC;QACD;YACE,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;YAC/B,KAAK,EAAE,iCAAiC;SACzC;KACF;CACF,CAAC;AAEF,SAAS,mBAAmB,CAC1B,MAAe;IAEf,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,MAAM,UAAU,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAEjC,IAAI,WAAW,IAAI,UAAU,IAAI,CAAC,CAAC,MAAM,IAAI,UAAU,CAAC,EAAE,CAAC;QACzD,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC;QACvC,OAAO,UAAU,CAAC,SAAS,CAAC;IAC9B,CAAC;IACD,IAAI,YAAY,IAAI,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC;QAC7D,UAAU,CAAC,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC;QAC3C,OAAO,UAAU,CAAC,UAAU,CAAC;IAC/B,CAAC;IACD,IAAI,YAAY,IAAI,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC;QAC7D,UAAU,CAAC,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC;QAC3C,OAAO,UAAU,CAAC,UAAU,CAAC;IAC/B,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA+B,EAC/B,MAA4B;IAE5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IACE,CAAC,KAAK,CAAC,UAAU;gBACjB,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EACnB,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,MAIlC;IACC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1C,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE,MAAa;QACzB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACzD,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACxD,oBAAoB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,UAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,cAAI,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,cAAI,CAAC,QAAQ,CACnB,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC,CAClE;QACD,KAAK,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC,CAAC;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,cAAI,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,cAAI,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACvE,UAAU,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxE,UAAU,EAAE,cAAI,CAAC,QAAQ,CAAC,cAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,mBAAmB,CACjC,GAAW,EACX,OAA6C;IAE7C,MAAM,IAAI,GAAG,yBAAyB,CAAC;QACrC,IAAI,EAAE,IAAA,gCAAc,EAAC,GAAG,CAAC;QACzB,QAAQ,EAAE,mBAAmB,CAAC,IAAI;QAClC,MAAM,EAAE,eAAe,EAAE;KAC1B,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,yBAAyB,CAAC;QACtC,IAAI,EAAE,IAAA,iCAAe,EAAC,GAAG,CAAC;QAC1B,QAAQ,EAAE,mBAAmB,CAAC,KAAK;QACnC,MAAM,EAAE,gBAAgB,EAAE;KAC3B,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,yBAAyB,CAAC;QACrC,IAAI,EAAE,IAAA,gCAAc,EAAC,GAAG,CAAC;QACzB,QAAQ,EAAE,mBAAmB,CAAC,IAAI;QAClC,MAAM,EAAE,eAAe,EAAE;KAC1B,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,OAAO,EAAE,cAAc;QAC1C,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,cAAc,EAAE;QACxC,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAA,gCAAc,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAEtE,OAAO;QACL,IAAI;QACJ,KAAK;QACL,IAAI;QACJ,IAAI;QACJ,IAAA,gCAAc,EAAC,GAAG,CAAC;QACnB,IAAA,gCAAc,EAAC,GAAG,CAAC;QACnB,IAAA,8BAAY,EAAC,GAAG,CAAC;KAClB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAAoB;IACjD,MAAM,iBAAiB,GAAG,kDAAkD,CAAC;IAE7E,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACtD,MAAM,OAAO,GACX,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM;gBACzD,CAAC,CAAC,MAAM,CAAE,MAAgC,CAAC,OAAO,IAAI,EAAE,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,IAAA,2CAA6B,EAAC,OAAO,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,8JAA8J,CAC/J,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,KAAK,CACb,oLAAoL,GAAG,EAAE,CAC1L,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/openclaw/worker.d.ts

@@ -0,0 +1,39 @@
+#!/usr/bin/env bun
+import { type WorkerTransport } from "@lobu/core";
+import type { WorkerConfig, WorkerExecutor } from "../core/types";
+interface ResolvedMemoryFlushConfig {
+    enabled: boolean;
+    softThresholdTokens: number;
+    systemPrompt: string;
+    prompt: string;
+}
+export declare function estimatePromptTokenCost(promptText: string, imageCount: number): number;
+export declare function resolveMemoryFlushConfig(rawOptions: Record<string, unknown>): ResolvedMemoryFlushConfig;
+export declare class OpenClawWorker implements WorkerExecutor {
+    private workspaceManager;
+    workerTransport: WorkerTransport;
+    private config;
+    private progressProcessor;
+    constructor(config: WorkerConfig);
+    /**
+     * Main execution workflow
+     */
+    execute(): Promise<void>;
+    cleanup(): Promise<void>;
+    getWorkerTransport(): WorkerTransport | null;
+    private getWorkingDirectory;
+    private maybeRunPreCompactionMemoryFlush;
+    private runAISession;
+    private setupIODirectories;
+    private downloadInputFiles;
+    private get uploadedFiles();
+    private static isImage;
+    private getFileIOInstructions;
+    /** Max image size to embed in prompt (20 MB). Larger files are skipped. */
+    private static readonly MAX_IMAGE_BYTES;
+    private loadImageAttachments;
+    private maybeBuildAuthHintMessage;
+    private maybeBuildAudioPermissionHintMessage;
+}
+export {};
+//# sourceMappingURL=worker.d.ts.map

package/dist/openclaw/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/openclaw/worker.ts"],"names":[],"mappings":";AAMA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAWpB,OAAO,KAAK,EAGV,YAAY,EACZ,cAAc,EACf,MAAM,eAAe,CAAC;AAiDvB,UAAU,yBAAyB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAoID,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CAIR;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,yBAAyB,CA2B3B;AAED,qBAAa,cAAe,YAAW,cAAc;IACnD,OAAO,CAAC,gBAAgB,CAAmB;IACpC,eAAe,EAAE,eAAe,CAAC;IACxC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,iBAAiB,CAA4B;gBAEzC,MAAM,EAAE,YAAY;IAmChC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IA8PxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAS9B,kBAAkB,IAAI,eAAe,GAAG,IAAI;IAI5C,OAAO,CAAC,mBAAmB;YAIb,gCAAgC;YAqFhC,YAAY;YA62BZ,kBAAkB;YAwBlB,kBAAkB;IAgEhC,OAAO,KAAK,aAAa,GAMxB;IAED,OAAO,CAAC,MAAM,CAAC,OAAO;IAItB,OAAO,CAAC,qBAAqB;IA2D7B,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAoB;YAE7C,oBAAoB;YAgDpB,yBAAyB;YAkBzB,oCAAoC;CAiCnD"}