@lobu/worker 3.3.0 → 3.4.0

package/dist/openclaw/sandbox-leak.js

@@ -0,0 +1,65 @@
+"use strict";
+/**
+ * Detects and redacts "sandbox leaks" — cases where the agent presents a
+ * local workspace path (or a Claude `sandbox://` URL) as if it were a
+ * user-downloadable artifact, without having actually called
+ * `UploadUserFile`.
+ *
+ * Key design decision: we only flag **structural** delivery claims, not
+ * free-text mentions. An agent that *describes* workspace paths in a probe
+ * or ls-style answer is legitimate; an agent that hands the path to the
+ * user as a clickable link or file URL is not. This eliminates the false
+ * positives that the previous broad substring check produced.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkSandboxLeak = checkSandboxLeak;
+/**
+ * Matches Claude's `sandbox://` file-reference scheme. Any occurrence of
+ * this is unambiguously a delivery claim — the scheme exists for exactly
+ * that purpose.
+ */
+const SANDBOX_URL_RE = /\bsandbox:\/{1,2}[^\s)\]}'"<>]+/gi;
+/**
+ * Matches a markdown link target pointing at a local workspace path, e.g.
+ * `[report](/app/workspaces/foo/bar.pdf)` or `[x](file:///workspace/y)`.
+ * The capture group is the URL/path portion so we can rewrite it.
+ */
+const LOCAL_MD_LINK_RE = /\]\(\s*((?:file:\/\/)?(?:\/app\/workspaces\/|\/workspace\/)[^\s)]+)\s*\)/gi;
+/**
+ * Matches HTML `href`/`src` pointing at a local workspace path. Capture
+ * group 1 is the attribute name (`href` or `src`) so we can preserve it on
+ * redact; capture group 2 is the URL target.
+ */
+const LOCAL_HREF_RE = /\b(href|src)\s*=\s*["']((?:file:\/\/)?(?:\/app\/workspaces\/|\/workspace\/)[^"']+)["']/gi;
+/**
+ * Inspect the agent's final user-facing message for unfulfilled file-delivery
+ * claims. If `sawUploadedFileEvent` is true (the agent actually called
+ * UploadUserFile during this turn), no check is performed — the agent did
+ * deliver something, and any remaining path references are assumed
+ * descriptive.
+ */
+function checkSandboxLeak(finalText, sawUploadedFileEvent) {
+    if (sawUploadedFileEvent || !finalText) {
+        return { leaked: false, redactedText: finalText };
+    }
+    const hasSandboxUrl = SANDBOX_URL_RE.test(finalText);
+    const hasMdLink = LOCAL_MD_LINK_RE.test(finalText);
+    const hasHref = LOCAL_HREF_RE.test(finalText);
+    // Reset lastIndex — `test()` on /g regexes advances state.
+    SANDBOX_URL_RE.lastIndex = 0;
+    LOCAL_MD_LINK_RE.lastIndex = 0;
+    LOCAL_HREF_RE.lastIndex = 0;
+    if (!hasSandboxUrl && !hasMdLink && !hasHref) {
+        return { leaked: false, redactedText: finalText };
+    }
+    // Redact: neutralise the link targets so the user doesn't see a broken
+    // "clickable" path, but keep the surrounding prose intact.
+    let redacted = finalText;
+    redacted = redacted.replace(SANDBOX_URL_RE, "[local file, not uploaded]");
+    redacted = redacted.replace(LOCAL_MD_LINK_RE, "](about:blank)");
+    redacted = redacted.replace(LOCAL_HREF_RE, (_match, attr) => `${attr}="about:blank"`);
+    const note = "\n\n_Note: I referenced a local file but did not actually upload it. " +
+        "Ask me to retry and I will use `UploadUserFile` to deliver it._";
+    return { leaked: true, redactedText: `${redacted}${note}` };
+}
+//# sourceMappingURL=sandbox-leak.js.map

package/dist/openclaw/sandbox-leak.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-leak.js","sourceRoot":"","sources":["../../src/openclaw/sandbox-leak.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAwCH,4CAoCC;AA1ED;;;;GAIG;AACH,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D;;;;GAIG;AACH,MAAM,gBAAgB,GACpB,4EAA4E,CAAC;AAE/E;;;;GAIG;AACH,MAAM,aAAa,GACjB,0FAA0F,CAAC;AAU7F;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,SAAiB,EACjB,oBAA6B;IAE7B,IAAI,oBAAoB,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE9C,2DAA2D;IAC3D,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7B,gBAAgB,CAAC,SAAS,GAAG,CAAC,CAAC;IAC/B,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC;IAE5B,IAAI,CAAC,aAAa,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IAED,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,QAAQ,GAAG,SAAS,CAAC;IACzB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;IAC1E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAChE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,aAAa,EACb,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,gBAAgB,CAClD,CAAC;IAEF,MAAM,IAAI,GACR,uEAAuE;QACvE,iEAAiE,CAAC;IAEpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE,CAAC;AAC9D,CAAC"}

package/dist/openclaw/session-context.d.ts

@@ -1,12 +1,4 @@
-import { type ConfigProviderMeta, type McpToolDef } from "@lobu/core";
-interface McpStatus {
-    id: string;
-    name: string;
-    requiresAuth: boolean;
-    requiresInput: boolean;
-    authenticated: boolean;
-    configured: boolean;
-}
+import { type ConfigProviderMeta, type McpStatus, type McpToolDef } from "@lobu/core";
 export interface ProviderConfig {
     credentialEnvVarName?: string;
     defaultProvider?: string;
@@ -41,7 +33,18 @@ export declare function invalidateSessionContextCache(): void;
  * Caches the result until invalidated by a config_changed SSE event.
  * Skips MCP server config (OpenClaw doesn't use Claude SDK's MCP format).
  */
-export declare function getOpenClawSessionContext(): Promise<{
+export declare function getOpenClawSessionContext(opts?: {
+    mcpExposure?: "tools" | "cli";
+}): Promise<{
+    /**
+     * Identity/soul/user instructions for this agent. Returned separately from
+     * `gatewayInstructions` so the worker can prepend identity BEFORE the
+     * pi-coding-agent base prompt (which would otherwise anchor the model with
+     * "You are an expert coding assistant" before the agent's real persona is
+     * declared).
+     */
+    agentInstructions: string;
+    /** Platform / network / skills / MCP setup instructions (no identity). */
     gatewayInstructions: string;
     providerConfig: ProviderConfig;
     skillsConfig: SkillContent[];

package/dist/openclaw/session-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../src/openclaw/session-context.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EAEvB,KAAK,UAAU,EAChB,MAAM,YAAY,CAAC;AAKpB,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,KAAK,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACrD,wFAAwF;IACxF,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjD;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAqCD;;;GAGG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAGpD;AAiED;;;;;GAKG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC;IACzD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,YAAY,EAAE,CAAC;IAC7B,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC,CAoGD"}
+{"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../src/openclaw/session-context.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EAEvB,KAAK,SAAS,EACd,KAAK,UAAU,EAChB,MAAM,YAAY,CAAC;AAKpB,MAAM,WAAW,cAAc;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,KAAK,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACrD,wFAAwF;IACxF,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjD;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAwCD;;;GAGG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAGpD;AAqGD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;CAAO,GAC3C,OAAO,CAAC;IACT;;;;;;OAMG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0EAA0E;IAC1E,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,YAAY,EAAE,CAAC;IAC7B,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC,CAkHD"}

package/dist/openclaw/session-context.js

@@ -7,6 +7,7 @@ const url_utils_1 = require("../core/url-utils");
 const logger = (0, core_1.createLogger)("openclaw-session-context");
 const CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes
 const DEFAULT_SESSION_CONTEXT = {
+    agentInstructions: "",
     gatewayInstructions: "",
     providerConfig: {},
     skillsConfig: [],
@@ -24,7 +25,7 @@ function invalidateSessionContextCache() {
     cachedResult = null;
     logger.info("Session context cache invalidated");
 }
-function buildMcpInstructions(mcpStatus, mcpToolIds) {
+function buildMcpInstructions(mcpStatus, mcpToolIds, mcpExposure = "tools") {
     if (!mcpStatus || mcpStatus.length === 0) {
         return "";
     }
@@ -38,7 +39,13 @@ function buildMcpInstructions(mcpStatus, mcpToolIds) {
     }
     const lines = ["## MCP Tools Requiring Setup"];
     for (const mcp of needsAuthentication) {
-        lines.push(`- ⚠️ **${mcp.name}** (id: ${mcp.id}): Authentication is required. Call \`${mcp.id}_login\` to start login. After the user completes login, call \`${mcp.id}_login_check\`. Newly available MCP tools will refresh on the next message.`);
+        const loginCmd = mcpExposure === "cli"
+            ? `run \`${mcp.id} auth login\` in Bash`
+            : `call \`${mcp.id}_login\``;
+        const checkCmd = mcpExposure === "cli"
+            ? `run \`${mcp.id} auth check\``
+            : `call \`${mcp.id}_login_check\``;
+        lines.push(`- ⚠️ **${mcp.name}** (id: ${mcp.id}): Authentication is required. To start login, ${loginCmd}. After the user completes login, ${checkCmd}. Newly available MCP tools will refresh on the next message.`);
     }
     for (const mcp of needsConfiguration) {
         lines.push(`- ⚠️ **${mcp.name}** (id: ${mcp.id}): Additional MCP input is required before this server can be used. Tell the user an admin must configure the MCP inputs in settings.`);
@@ -51,6 +58,33 @@ function buildMcpInstructions(mcpStatus, mcpToolIds) {
     }
     return lines.join("\n");
 }
+/**
+ * CLI-mode header introducing the `<server> <tool>` idiom. Appended to gateway
+ * instructions when `mcpExposure === "cli"` so the model understands how to
+ * invoke MCP tools through bash instead of as first-class function calls.
+ */
+function buildMcpCliInstructions(mcpStatus) {
+    if (!mcpStatus || mcpStatus.length === 0)
+        return "";
+    const servers = mcpStatus.map((m) => `- \`${m.id}\` — ${m.name}`).join("\n");
+    return `## Available MCP CLIs
+
+MCP servers are exposed as Bash commands. One command per server. Invoke tools by piping JSON on stdin:
+
+\`\`\`bash
+<server> <tool> <<'EOF'
+{ ...json args... }
+EOF
+\`\`\`
+
+Discovery:
+- \`<server> --help\` — list a server's tools
+- \`<server> <tool> --schema\` — print the JSON Schema for a tool
+- \`<server> auth login|check|logout\` — manage OAuth where required
+
+Servers:
+${servers}`;
+}
 function buildMcpServerInstructions(mcpInstructions) {
     const entries = Object.entries(mcpInstructions).filter(([, v]) => v);
     if (entries.length === 0)
@@ -67,8 +101,11 @@ function buildMcpServerInstructions(mcpInstructions) {
  * Caches the result until invalidated by a config_changed SSE event.
  * Skips MCP server config (OpenClaw doesn't use Claude SDK's MCP format).
  */
-async function getOpenClawSessionContext() {
-    if (cachedResult && Date.now() - cachedResult.cachedAt < CACHE_TTL_MS) {
+async function getOpenClawSessionContext(opts = {}) {
+    const mcpExposure = opts.mcpExposure ?? "tools";
+    if (cachedResult &&
+        cachedResult.mcpExposure === mcpExposure &&
+        Date.now() - cachedResult.cachedAt < CACHE_TTL_MS) {
         logger.debug("Returning cached session context");
         return cachedResult;
     }
@@ -94,25 +131,30 @@ async function getOpenClawSessionContext() {
         const data = (await response.json());
         logger.info(`Received session context: ${data.platformInstructions.length} chars platform instructions, ${data.mcpStatus.length} MCP status entries, provider: ${data.providerConfig?.defaultProvider || "none"}, cliBackends: ${data.providerConfig?.cliBackends?.map((b) => b.name).join(", ") || "none"}`);
         const toolMcpIds = new Set(Object.keys(data.mcpTools || {}));
-        const mcpSetupInstructions = buildMcpInstructions(data.mcpStatus, toolMcpIds);
+        const mcpSetupInstructions = buildMcpInstructions(data.mcpStatus, toolMcpIds, mcpExposure);
         // Include MCP server instructions for all servers (with or without tools).
         // These provide workspace context (available connectors, entity schemas, etc.)
         // that helps the agent use the tools effectively.
         const mcpServerInstructions = buildMcpServerInstructions(data.mcpInstructions || {});
+        const mcpCliInstructions = mcpExposure === "cli" ? buildMcpCliInstructions(data.mcpStatus) : "";
+        // Identity/soul/user instructions are returned separately so the worker
+        // can prepend them BEFORE the pi-coding-agent base prompt.
+        const agentInstructions = data.agentInstructions || "";
         const gatewayInstructions = [
-            data.agentInstructions,
             data.platformInstructions,
             data.networkInstructions,
             data.skillsInstructions,
+            mcpCliInstructions,
             mcpSetupInstructions,
             mcpServerInstructions,
         ]
             .filter(Boolean)
             .join("\n\n");
         const mcpTools = data.mcpTools || {};
-        logger.info(`Built gateway instructions: agent (${(data.agentInstructions || "").length} chars) + platform (${data.platformInstructions.length} chars) + network (${data.networkInstructions.length} chars) + skills (${(data.skillsInstructions || "").length} chars) + MCP setup (${mcpSetupInstructions.length} chars) + MCP server instructions (${mcpServerInstructions.length} chars), mcpTools: ${Object.keys(mcpTools).length} servers`);
+        logger.info(`Built gateway instructions: agent (${agentInstructions.length} chars, prepended) + platform (${data.platformInstructions.length} chars) + network (${data.networkInstructions.length} chars) + skills (${(data.skillsInstructions || "").length} chars) + MCP setup (${mcpSetupInstructions.length} chars) + MCP server instructions (${mcpServerInstructions.length} chars), mcpTools: ${Object.keys(mcpTools).length} servers`);
         const mcpContext = data.mcpContext || {};
         const result = {
+            agentInstructions,
             gatewayInstructions,
             providerConfig: data.providerConfig || {},
             skillsConfig: data.skillsConfig || [],
@@ -124,7 +166,7 @@ async function getOpenClawSessionContext() {
         // transient upstream failure that should be retried on the next message.
         const hasEmptyAuthenticatedMcp = data.mcpStatus.some((mcp) => mcp.authenticated && !toolMcpIds.has(mcp.id));
         if (!hasEmptyAuthenticatedMcp) {
-            cachedResult = { ...result, cachedAt: Date.now() };
+            cachedResult = { ...result, mcpExposure, cachedAt: Date.now() };
         }
         else {
             logger.warn("Skipping session context cache — authenticated MCP(s) returned no tools", {

package/dist/openclaw/session-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-context.js","sourceRoot":"","sources":["../../src/openclaw/session-context.ts"],"names":[],"mappings":";;AAkFA,sEAGC;AAuED,8DA2GC;AAvQD,qCAIoB;AACpB,iDAAkD;AAElD,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,0BAA0B,CAAC,CAAC;AAiDxD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAEhD,MAAM,uBAAuB,GAAG;IAC9B,mBAAmB,EAAE,EAAE;IACvB,cAAc,EAAE,EAAoB;IACpC,YAAY,EAAE,EAAoB;IAClC,SAAS,EAAE,EAAiB;IAC5B,QAAQ,EAAE,EAAkC;IAC5C,UAAU,EAAE,EAA4B;CAChC,CAAC;AAEX,yCAAyC;AACzC,IAAI,YAAY,GAQL,IAAI,CAAC;AAEhB;;;GAGG;AACH,SAAgB,6BAA6B;IAC3C,YAAY,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAAsB,EACtB,UAAuB;IAEvB,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,mBAAmB,GAAG,SAAS,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,aAAa,CAChD,CAAC;IACF,MAAM,kBAAkB,GAAG,SAAS,CAAC,MAAM,CACzC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,UAAU,CAC9C,CAAC;IACF,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5E,IACE,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAChC,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAC/B,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAC7B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAa,CAAC,8BAA8B,CAAC,CAAC;IAEzD,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,UAAU,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,yCAAyC,GAAG,CAAC,EAAE,mEAAmE,GAAG,CAAC,EAAE,6EAA6E,CACzO,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CACR,UAAU,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,uIAAuI,CAC3K,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CACR,UAAU,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,sIAAsI,CAC1K,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,0BAA0B,CACjC,eAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAa,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,OAAO,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,yBAAyB;IAQ7C,IAAI,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,GAAG,YAAY,EAAE,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAE7C,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,GAAG,IAAA,yBAAa,EAAC,aAAa,CAAC,yBAAyB,CACzD,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE;gBACrE,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;QAE/D,MAAM,CAAC,IAAI,CACT,6BAA6B,IAAI,CAAC,oBAAoB,CAAC,MAAM,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,kCAAkC,IAAI,CAAC,cAAc,EAAE,eAAe,IAAI,MAAM,kBAAkB,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CACjS,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,IAAI,CAAC,SAAS,EACd,UAAU,CACX,CAAC;QACF,2EAA2E;QAC3E,+EAA+E;QAC/E,kDAAkD;QAClD,MAAM,qBAAqB,GAAG,0BAA0B,CACtD,IAAI,CAAC,eAAe,IAAI,EAAE,CAC3B,CAAC;QAEF,MAAM,mBAAmB,GAAG;YAC1B,IAAI,CAAC,iBAAiB;YACtB,IAAI,CAAC,oBAAoB;YACzB,IAAI,CAAC,mBAAmB;YACxB,IAAI,CAAC,kBAAkB;YACvB,oBAAoB;YACpB,qBAAqB;SACtB;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAErC,MAAM,CAAC,IAAI,CACT,sCAAsC,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,uBAAuB,IAAI,CAAC,oBAAoB,CAAC,MAAM,sBAAsB,IAAI,CAAC,mBAAmB,CAAC,MAAM,qBAAqB,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM,wBAAwB,oBAAoB,CAAC,MAAM,sCAAsC,qBAAqB,CAAC,MAAM,sBAAsB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,UAAU,CACpa,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QAEzC,MAAM,MAAM,GAAG;YACb,mBAAmB;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;YACzC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAC/B,QAAQ;YACR,UAAU;SACX,CAAC;QAEF,oEAAoE;QACpE,yEAAyE;QACzE,MAAM,wBAAwB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAClD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CACtD,CAAC;QACF,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC9B,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,yEAAyE,EACzE;gBACE,SAAS,EAAE,IAAI,CAAC,SAAS;qBACtB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;qBAC7D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;aACxB,CACF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACxC,CAAC;AACH,CAAC"}
+{"version":3,"file":"session-context.js","sourceRoot":"","sources":["../../src/openclaw/session-context.ts"],"names":[],"mappings":";;AA6EA,sEAGC;AA2GD,8DAoIC;AA/TD,qCAKoB;AACpB,iDAAkD;AAElD,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,0BAA0B,CAAC,CAAC;AAwCxD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAEhD,MAAM,uBAAuB,GAAG;IAC9B,iBAAiB,EAAE,EAAE;IACrB,mBAAmB,EAAE,EAAE;IACvB,cAAc,EAAE,EAAoB;IACpC,YAAY,EAAE,EAAoB;IAClC,SAAS,EAAE,EAAiB;IAC5B,QAAQ,EAAE,EAAkC;IAC5C,UAAU,EAAE,EAA4B;CAChC,CAAC;AAEX,yCAAyC;AACzC,IAAI,YAAY,GAUL,IAAI,CAAC;AAEhB;;;GAGG;AACH,SAAgB,6BAA6B;IAC3C,YAAY,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAAsB,EACtB,UAAuB,EACvB,cAA+B,OAAO;IAEtC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,mBAAmB,GAAG,SAAS,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,aAAa,CAChD,CAAC;IACF,MAAM,kBAAkB,GAAG,SAAS,CAAC,MAAM,CACzC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,UAAU,CAC9C,CAAC;IACF,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5E,IACE,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAChC,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAC/B,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAC7B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAa,CAAC,8BAA8B,CAAC,CAAC;IAEzD,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,QAAQ,GACZ,WAAW,KAAK,KAAK;YACnB,CAAC,CAAC,SAAS,GAAG,CAAC,EAAE,uBAAuB;YACxC,CAAC,CAAC,UAAU,GAAG,CAAC,EAAE,UAAU,CAAC;QACjC,MAAM,QAAQ,GACZ,WAAW,KAAK,KAAK;YACnB,CAAC,CAAC,SAAS,GAAG,CAAC,EAAE,eAAe;YAChC,CAAC,CAAC,UAAU,GAAG,CAAC,EAAE,gBAAgB,CAAC;QACvC,KAAK,CAAC,IAAI,CACR,UAAU,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,kDAAkD,QAAQ,qCAAqC,QAAQ,+DAA+D,CAC1M,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CACR,UAAU,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,uIAAuI,CAC3K,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CACR,UAAU,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,sIAAsI,CAC1K,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,SAAsB;IACrD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO;;;;;;;;;;;;;;;;EAgBP,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,0BAA0B,CACjC,eAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAa,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,OAAO,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,yBAAyB,CAC7C,OAA0C,EAAE;IAkB5C,MAAM,WAAW,GAAoB,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC;IAEjE,IACE,YAAY;QACZ,YAAY,CAAC,WAAW,KAAK,WAAW;QACxC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,GAAG,YAAY,EACjD,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAE7C,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,GAAG,IAAA,yBAAa,EAAC,aAAa,CAAC,yBAAyB,CACzD,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE;gBACrE,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;QAE/D,MAAM,CAAC,IAAI,CACT,6BAA6B,IAAI,CAAC,oBAAoB,CAAC,MAAM,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,kCAAkC,IAAI,CAAC,cAAc,EAAE,eAAe,IAAI,MAAM,kBAAkB,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CACjS,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,IAAI,CAAC,SAAS,EACd,UAAU,EACV,WAAW,CACZ,CAAC;QACF,2EAA2E;QAC3E,+EAA+E;QAC/E,kDAAkD;QAClD,MAAM,qBAAqB,GAAG,0BAA0B,CACtD,IAAI,CAAC,eAAe,IAAI,EAAE,CAC3B,CAAC;QACF,MAAM,kBAAkB,GACtB,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvE,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAEvD,MAAM,mBAAmB,GAAG;YAC1B,IAAI,CAAC,oBAAoB;YACzB,IAAI,CAAC,mBAAmB;YACxB,IAAI,CAAC,kBAAkB;YACvB,kBAAkB;YAClB,oBAAoB;YACpB,qBAAqB;SACtB;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAErC,MAAM,CAAC,IAAI,CACT,sCAAsC,iBAAiB,CAAC,MAAM,kCAAkC,IAAI,CAAC,oBAAoB,CAAC,MAAM,sBAAsB,IAAI,CAAC,mBAAmB,CAAC,MAAM,qBAAqB,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM,wBAAwB,oBAAoB,CAAC,MAAM,sCAAsC,qBAAqB,CAAC,MAAM,sBAAsB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,UAAU,CACla,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QAEzC,MAAM,MAAM,GAAG;YACb,iBAAiB;YACjB,mBAAmB;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;YACzC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAC/B,QAAQ;YACR,UAAU;SACX,CAAC;QAEF,oEAAoE;QACpE,yEAAyE;QACzE,MAAM,wBAAwB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAClD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CACtD,CAAC;QACF,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC9B,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,yEAAyE,EACzE;gBACE,SAAS,EAAE,IAAI,CAAC,SAAS;qBACtB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;qBAC7D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;aACxB,CACF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/openclaw/worker.d.ts

@@ -7,6 +7,7 @@ interface ResolvedMemoryFlushConfig {
     systemPrompt: string;
     prompt: string;
 }
+export declare function replaceBasePromptIdentity(basePrompt: string, identity: string): string;
 export declare function estimatePromptTokenCost(promptText: string, imageCount: number): number;
 export declare function resolveMemoryFlushConfig(rawOptions: Record<string, unknown>): ResolvedMemoryFlushConfig;
 export declare class OpenClawWorker implements WorkerExecutor {

package/dist/openclaw/worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/openclaw/worker.ts"],"names":[],"mappings":";AAMA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAWpB,OAAO,KAAK,EAGV,YAAY,EACZ,cAAc,EACf,MAAM,eAAe,CAAC;AAkDvB,UAAU,yBAAyB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAoID,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CAIR;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,yBAAyB,CA2B3B;AAED,qBAAa,cAAe,YAAW,cAAc;IACnD,OAAO,CAAC,gBAAgB,CAAmB;IACpC,eAAe,EAAE,eAAe,CAAC;IACxC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,iBAAiB,CAA4B;gBAEzC,MAAM,EAAE,YAAY;IAmChC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAyRxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAS9B,kBAAkB,IAAI,eAAe,GAAG,IAAI;IAI5C,OAAO,CAAC,mBAAmB;YAIb,gCAAgC;YAqFhC,YAAY;YAk4BZ,kBAAkB;YAwBlB,kBAAkB;IAgEhC,OAAO,KAAK,aAAa,GAMxB;IAED,OAAO,CAAC,MAAM,CAAC,OAAO;IAItB,OAAO,CAAC,qBAAqB;IAiE7B,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAoB;YAE7C,oBAAoB;YAgDpB,yBAAyB;YAkBzB,oCAAoC;CAiCnD"}
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/openclaw/worker.ts"],"names":[],"mappings":";AAMA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAWpB,OAAO,KAAK,EAGV,YAAY,EACZ,cAAc,EACf,MAAM,eAAe,CAAC;AAmDvB,UAAU,yBAAyB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAiCD,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,MAAM,CAOR;AAsHD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CAIR;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,yBAAyB,CA2B3B;AAED,qBAAa,cAAe,YAAW,cAAc;IACnD,OAAO,CAAC,gBAAgB,CAAmB;IACpC,eAAe,EAAE,eAAe,CAAC;IACxC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,iBAAiB,CAA4B;gBAEzC,MAAM,EAAE,YAAY;IAmChC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAmRxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAS9B,kBAAkB,IAAI,eAAe,GAAG,IAAI;IAI5C,OAAO,CAAC,mBAAmB;YAIb,gCAAgC;YAqFhC,YAAY;YAq9BZ,kBAAkB;YAwBlB,kBAAkB;IAmEhC,OAAO,KAAK,aAAa,GAOxB;IAED,OAAO,CAAC,MAAM,CAAC,OAAO;IAItB,OAAO,CAAC,qBAAqB;IAiE7B,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAoB;YAE7C,oBAAoB;YAgDpB,yBAAyB;YAkBzB,oCAAoC;CAiCnD"}

package/dist/openclaw/worker.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OpenClawWorker = void 0;
+exports.replaceBasePromptIdentity = replaceBasePromptIdentity;
 exports.estimatePromptTokenCost = estimatePromptTokenCost;
 exports.resolveMemoryFlushConfig = resolveMemoryFlushConfig;
 const fs = __importStar(require("node:fs/promises"));
@@ -57,6 +58,7 @@ const tool_implementations_1 = require("../shared/tool-implementations");
 const custom_tools_1 = require("./custom-tools");
 const instructions_1 = require("./instructions");
 const model_resolver_1 = require("./model-resolver");
+const sandbox_leak_1 = require("./sandbox-leak");
 const plugin_loader_1 = require("./plugin-loader");
 const processor_1 = require("./processor");
 const session_context_1 = require("./session-context");
@@ -71,6 +73,29 @@ const DEFAULT_MEMORY_FLUSH_CONFIG = {
     systemPrompt: "Session nearing compaction. Store durable memories now.",
     prompt: "Write any lasting notes to memory using available memory tools. Reply with NO_REPLY if nothing to store.",
 };
+/**
+ * Pi-coding-agent's buildSystemPrompt() (in `@mariozechner/pi-coding-agent`)
+ * always opens the system prompt with this exact sentence. Lobu agents can
+ * override their identity via IDENTITY.md, but unless we strip out this
+ * opener the model sees two competing role declarations and tends to favour
+ * "expert coding assistant" because it appears first.
+ *
+ * This helper substitutes the opener with the agent's identity and keeps the
+ * rest of the base prompt (tools list, guidelines, docs paths, cwd) intact.
+ *
+ * If the upstream package ever changes the opener wording, this becomes a
+ * no-op and `replaced === original`. In that case we fall back to prepending
+ * the identity with a small framing note so identity still wins ordering.
+ */
+const PI_CODING_AGENT_OPENER_RE = /^You are an expert coding assistant operating inside pi, a coding agent harness\.[^\n]*/;
+function replaceBasePromptIdentity(basePrompt, identity) {
+    if (PI_CODING_AGENT_OPENER_RE.test(basePrompt)) {
+        return basePrompt.replace(PI_CODING_AGENT_OPENER_RE, identity);
+    }
+    // Upstream wording drifted — prepend identity with a framing note rather
+    // than silently letting the upstream opener win.
+    return `${identity}\n\nThe section below describes the runtime tooling available to you. It does not change your role.\n\n${basePrompt}`;
+}
 function isLikelyImageGenerationRequest(prompt) {
     const lower = prompt.toLowerCase();
     const explicitToolInstruction = lower.includes("generateimage tool") || lower.includes("use generateimage");
@@ -364,22 +389,20 @@ class OpenClawWorker {
                 const audioPermissionHint = hintGatewayUrl && hintWorkerToken
                     ? await this.maybeBuildAudioPermissionHintMessage(outputSnapshot, hintGatewayUrl, hintWorkerToken)
                     : null;
-                const leakedSandboxLink = !sawUploadedFileEvent &&
-                    /(sandbox:\/|\/app\/workspaces\/|\/workspace\/)/i.test(outputSnapshot);
-                const fileDeliveryFailureMessage = leakedSandboxLink
-                    ? "I created a local file, but I did not actually upload it for you. Local sandbox/workspace links are not user-accessible, so this file-delivery attempt failed. Please ask me to try again and I must use UploadUserFile."
-                    : null;
                 const finalResult = this.progressProcessor.getFinalResult();
-                if (fileDeliveryFailureMessage) {
-                    logger.warn("Detected sandbox/local file link without UploadUserFile success; replacing final response");
-                    await this.workerTransport.sendStreamDelta(fileDeliveryFailureMessage, true, true);
-                }
-                else if (finalResult) {
+                if (finalResult) {
+                    const leakCheck = (0, sandbox_leak_1.checkSandboxLeak)(finalResult.text, sawUploadedFileEvent);
+                    if (leakCheck.leaked) {
+                        logger.warn("Detected unfulfilled file-delivery claim in final message; redacting link targets");
+                    }
                     const finalText = audioPermissionHint
-                        ? `${finalResult.text}\n\n${audioPermissionHint}`
-                        : finalResult.text;
+                        ? `${leakCheck.redactedText}\n\n${audioPermissionHint}`
+                        : leakCheck.redactedText;
                     logger.info(`📤 Sending final result (${finalText.length} chars) with deduplication flag`);
-                    await this.workerTransport.sendStreamDelta(finalText, false, finalResult.isFinal);
+                    // When a leak was redacted, the already-streamed content contains the
+                    // pre-redaction URLs — a delta-append would leave them on the client.
+                    // Force a full replacement so the client discards the leaky prefix.
+                    await this.workerTransport.sendStreamDelta(finalText, leakCheck.leaked, finalResult.isFinal);
                 }
                 else if (audioPermissionHint) {
                     logger.info("📤 Sending audio permission settings hint to user");
@@ -489,9 +512,23 @@ class OpenClawWorker {
         const verboseLogging = rawOptions.verboseLogging === true;
         const memoryFlushConfig = resolveMemoryFlushConfig(rawOptions);
         this.progressProcessor.setVerboseLogging(verboseLogging);
+        // Resolve how MCP tools should be exposed to the agent. In embedded mode,
+        // operators can swap the many first-class MCP tools for a small set of
+        // per-server just-bash CLIs (keeps the tool list lean).
+        const configuredMcpExposure = rawOptions.toolsConfig?.mcpExposure;
+        const envMcpExposure = process.env.LOBU_MCP_EXPOSURE;
+        const requestedMcpExposure = configuredMcpExposure === "cli" || envMcpExposure === "cli"
+            ? "cli"
+            : "tools";
+        const isEmbedded = process.env.DEPLOYMENT_MODE === "embedded";
+        if (requestedMcpExposure === "cli" && !isEmbedded) {
+            logger.warn("mcpExposure='cli' requested but DEPLOYMENT_MODE is not 'embedded' — falling back to 'tools'.");
+        }
+        const mcpExposure = requestedMcpExposure === "cli" && isEmbedded ? "cli" : "tools";
         // Fetch session context BEFORE model resolution so AGENT_DEFAULT_PROVIDER
-        // is available when resolveModelRef() needs a fallback provider.
-        const context = await (0, session_context_1.getOpenClawSessionContext)();
+        // is available when resolveModelRef() needs a fallback provider. Pass
+        // `mcpExposure` so MCP setup instructions use the right call syntax.
+        const context = await (0, session_context_1.getOpenClawSessionContext)({ mcpExposure });
         // Sync enabled skills to workspace filesystem so the agent can `cat` them.
         // Remove stale skill directories to avoid serving removed/disabled skills.
         const skillsWorkspaceDir = this.getWorkingDirectory();
@@ -662,10 +699,49 @@ class OpenClawWorker {
             allowedTools: rawOptions.allowedTools,
             disallowedTools: rawOptions.disallowedTools,
         });
+        // Build a mutable snapshot of MCP runtime state. The embedded CLI handlers
+        // read through `mcpRuntimeRef.current` so that `auth check` / `logout` can
+        // swap in refreshed tools/state without rebuilding Bash. `refresh()` re-
+        // fetches session context — `checkMcpLogin`/`logoutMcp` already invalidate
+        // the gateway cache, so the next fetch reaches the gateway.
+        const mcpRuntimeRef = {
+            current: {
+                mcpTools: context.mcpTools,
+                mcpStatus: context.mcpStatus,
+                mcpContext: context.mcpContext,
+            },
+            ...(mcpExposure === "cli" && {
+                refresh: async () => {
+                    try {
+                        const fresh = await (0, session_context_1.getOpenClawSessionContext)({ mcpExposure });
+                        return {
+                            mcpTools: fresh.mcpTools,
+                            mcpStatus: fresh.mcpStatus,
+                            mcpContext: fresh.mcpContext,
+                        };
+                    }
+                    catch (err) {
+                        logger.warn(`Failed to refresh MCP session context after auth: ${err instanceof Error ? err.message : String(err)}`);
+                        return null;
+                    }
+                },
+            }),
+        };
+        const gwParams = {
+            gatewayUrl: process.env.DISPATCHER_URL ?? "",
+            workerToken: process.env.WORKER_TOKEN ?? "",
+            channelId: this.config.channelId,
+            conversationId: this.config.conversationId,
+            platform: this.config.platform,
+        };
         let embeddedBashOps;
-        if (process.env.DEPLOYMENT_MODE === "embedded") {
+        if (isEmbedded) {
             const { createEmbeddedBashOps } = await Promise.resolve().then(() => __importStar(require("../embedded/just-bash-bootstrap")));
-            embeddedBashOps = await createEmbeddedBashOps();
+            embeddedBashOps = await createEmbeddedBashOps({
+                mcpRuntimeRef,
+                gw: gwParams,
+                mcpExposure,
+            });
         }
         let tools = (0, tools_1.createOpenClawTools)(workspaceDir, {
             bashOperations: embeddedBashOps,
@@ -702,7 +778,9 @@ class OpenClawWorker {
             logger.info(`Set runtime API key for ${provider}`);
         }
         else {
-            const fallbackEnvVar = (0, provider_auth_hints_1.getApiKeyEnvVarForProvider)(provider);
+            // Look up the env var by the canonical gateway slug (e.g. "z-ai" → Z_AI_API_KEY),
+            // not the model-registry alias (e.g. "zai" → ZAI_API_KEY which nobody sets).
+            const fallbackEnvVar = (0, provider_auth_hints_1.getApiKeyEnvVarForProvider)(rawProvider);
             const fallbackValue = credentialStore.get(fallbackEnvVar) || process.env[fallbackEnvVar];
             if (fallbackValue) {
                 authStorage.setRuntimeApiKey(provider, fallbackValue);
@@ -758,13 +836,6 @@ Replace "YOUR_PROMPT_HERE" with the user's request. These agents can read/write
 
 You have access to GetChannelHistory to view previous messages in this thread.
 Use it when the user references past discussions or you need context.`);
-        const gwParams = {
-            gatewayUrl,
-            workerToken,
-            channelId: this.config.channelId,
-            conversationId: this.config.conversationId,
-            platform: this.config.platform,
-        };
         const customTools = (0, custom_tools_1.createOpenClawCustomTools)({
             ...gwParams,
             onCustomEvent: async (name, data) => {
@@ -775,11 +846,19 @@ Use it when the user references past discussions or you need context.`);
                 });
             },
         });
-        // Register MCP tools as first-class callable tools (alongside virtual memory wrappers)
-        const mcpToolDefs = (0, custom_tools_1.createMcpToolDefinitions)(context.mcpTools, gwParams, context.mcpContext);
-        if (mcpToolDefs.length > 0) {
-            customTools.push(...mcpToolDefs);
-            logger.info(`Registered ${mcpToolDefs.length} MCP tool(s): ${mcpToolDefs.map((t) => t.name).join(", ")}`);
+        // Register first-class MCP tools + auth tools. Skipped entirely in CLI
+        // mode — MCP tools are instead reachable via the per-server just-bash CLI
+        // wired in above, and `<server> auth login|check|logout` supersedes the
+        // `<id>_login` / `<id>_login_check` / `<id>_logout` trio.
+        if (mcpExposure === "cli") {
+            logger.info("mcpExposure='cli' — skipping first-class MCP tool registration (tools reachable via <server> <tool> in Bash).");
+        }
+        else {
+            const mcpToolDefs = (0, custom_tools_1.createMcpToolDefinitions)(context.mcpTools, gwParams, context.mcpContext);
+            if (mcpToolDefs.length > 0) {
+                customTools.push(...mcpToolDefs);
+                logger.info(`Registered ${mcpToolDefs.length} MCP tool(s): ${mcpToolDefs.map((t) => t.name).join(", ")}`);
+            }
         }
         // Load OpenClaw plugins
         const pluginsConfig = rawOptions.pluginsConfig;
@@ -789,10 +868,12 @@ Use it when the user references past discussions or you need context.`);
             customTools.push(...pluginTools);
             logger.info(`Loaded ${pluginTools.length} tool(s) from ${loadedPlugins.length} plugin(s)`);
         }
-        const authToolDefs = (0, custom_tools_1.createMcpAuthToolDefinitions)(context.mcpStatus, gwParams, new Set(customTools.map((tool) => tool.name)));
-        if (authToolDefs.length > 0) {
-            customTools.push(...authToolDefs);
-            logger.info(`Registered ${authToolDefs.length} MCP auth tool(s): ${authToolDefs.map((t) => t.name).join(", ")}`);
+        if (mcpExposure !== "cli") {
+            const authToolDefs = (0, custom_tools_1.createMcpAuthToolDefinitions)(context.mcpStatus, gwParams, new Set(customTools.map((tool) => tool.name)));
+            if (authToolDefs.length > 0) {
+                customTools.push(...authToolDefs);
+                logger.info(`Registered ${authToolDefs.length} MCP auth tool(s): ${authToolDefs.map((t) => t.name).join(", ")}`);
+            }
         }
         // Apply plugin provider registrations to ModelRegistry
         const modelRegistry = new pi_coding_agent_1.ModelRegistry(authStorage);
@@ -874,8 +955,25 @@ Use it when the user references past discussions or you need context.`);
                 modelRegistry,
             });
             session = createdSession.session;
+            // Pi-coding-agent's base prompt opens with "You are an expert coding
+            // assistant operating inside pi, a coding agent harness…" — that anchor
+            // overrides any IDENTITY.md the agent ships with. Replace just that
+            // opener with the agent's real identity (or the lobu default) so the
+            // tools/guidelines/cwd footer below it still applies, but the role on
+            // top is the one we actually want.
             const basePrompt = session.systemPrompt;
-            session.agent.setSystemPrompt(`${basePrompt}\n\n${finalInstructionsUpdated}`);
+            const identity = context.agentInstructions?.trim();
+            const finalSystemPrompt = identity
+                ? [
+                    replaceBasePromptIdentity(basePrompt, identity),
+                    finalInstructionsUpdated,
+                ]
+                    .filter(Boolean)
+                    .join("\n\n---\n\n")
+                : [basePrompt, finalInstructionsUpdated]
+                    .filter(Boolean)
+                    .join("\n\n---\n\n");
+            session.agent.setSystemPrompt(finalSystemPrompt);
             let resolveTurnDone = null;
             let turnNonce = 0;
             let suppressProgressOutput = false;
@@ -1102,7 +1200,7 @@ Use it when the user references past discussions or you need context.`);
                     },
                     ctx: pluginHookContext,
                 });
-                const errorWithHint = await this.maybeBuildAuthHintMessage(sessionError, provider, modelId, gatewayUrl, workerToken);
+                const errorWithHint = await this.maybeBuildAuthHintMessage(sessionError, rawProvider, modelId, gatewayUrl, workerToken);
                 return {
                     success: false,
                     exitCode: 1,
@@ -1200,15 +1298,18 @@ Use it when the user references past discussions or you need context.`);
         logger.info(`Downloading ${files.length} input files...`);
         const workspaceDir = this.workspaceManager.getCurrentWorkingDirectory();
         const inputDir = path.join(workspaceDir, "input");
-        const dispatcherUrl = process.env.DISPATCHER_URL;
-        const workerToken = process.env.WORKER_TOKEN;
         for (const file of files) {
             try {
+                if (!file.downloadUrl) {
+                    logger.warn({ fileName: file.name, fileId: file.id }, "Inbound file has no downloadUrl; gateway must publish it as an artifact before forwarding");
+                    continue;
+                }
                 logger.info(`Downloading file: ${file.name} (${file.id})`);
-                const response = await fetch(`${dispatcherUrl}/internal/files/download?fileId=${file.id}`, {
-                    headers: {
-                        Authorization: `Bearer ${workerToken}`,
-                    },
+                // The gateway pre-publishes every inbound attachment as a signed,
+                // time-limited artifact and embeds the URL in `downloadUrl`. We
+                // fetch through the worker's egress proxy — no platform tokens or
+                // worker JWT cross this boundary anymore.
+                const response = await fetch(file.downloadUrl, {
                     signal: AbortSignal.timeout(60_000),
                 });
                 if (!response.ok) {