@openclaw/diffs 2026.8.1-beta.2 → 2026.8.1

package/dist/index.js

@@ -1,27 +1,27 @@
 import { definePluginEntry, resolvePreferredOpenClawTmpDir } from "./api.js";
 import { resolveRequestClientIp } from "./runtime-api.js";
+import { a as getServedViewerAsset, r as VIEWER_RUNTIME_PATH } from "./viewer-assets-D3qrnaxI.js";
 import { buildPluginConfigSchema } from "openclaw/plugin-sdk/plugin-entry";
 import { mapPluginConfigIssues } from "openclaw/plugin-sdk/extension-shared";
 import { z } from "zod";
 import { resolveGatewayPublicOrigin } from "openclaw/plugin-sdk/config-contracts";
-import { resolveGatewayPort } from "openclaw/plugin-sdk/core";
-import fs, { constants } from "node:fs";
+import { resolveGatewayPort } from "openclaw/plugin-sdk/gateway-config-runtime";
+import fs from "node:fs";
 import path from "node:path";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/ssrf-runtime";
-import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asNonArrayRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { createAuthRateLimiter } from "openclaw/plugin-sdk/webhook-ingress";
 import crypto from "node:crypto";
 import fs$1 from "node:fs/promises";
-import { fileURLToPath } from "node:url";
 import { gunzip, gzip } from "node:zlib";
 import { MAX_DATE_TIMESTAMP_MS, timestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
-import { safeEqualSecret, writeExternalFileWithinRoot } from "openclaw/plugin-sdk/security-runtime";
+import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { optionalFiniteNumberSchema, stringEnum } from "openclaw/plugin-sdk/channel-actions";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { readFiniteNumberParam } from "openclaw/plugin-sdk/param-readers";
 import { Type } from "typebox";
-import os from "node:os";
-import { chromium } from "playwright-core";
 import { parsePatchFiles, resolveLanguage } from "@pierre/diffs";
 import { preloadDiffHTML } from "@pierre/diffs/ssr";
 import { escapeHtml } from "openclaw/plugin-sdk/text-utility-runtime";
@@ -302,120 +302,6 @@ function resolveDiffImageRenderOptions(params) {
 	};
 }
 //#endregion
-//#region extensions/diffs/src/viewer-assets.ts
-const VIEWER_ASSET_PREFIX = "/plugins/diffs/assets/";
-const VIEWER_LOADER_PATH = `${VIEWER_ASSET_PREFIX}viewer.js`;
-const VIEWER_RUNTIME_PATH = `${VIEWER_ASSET_PREFIX}viewer-runtime.js`;
-const LANGUAGE_PACK_VIEWER_ASSET_PREFIX = "/plugins/diffs-language-pack/assets/";
-const LANGUAGE_PACK_VIEWER_LOADER_PATH = `${LANGUAGE_PACK_VIEWER_ASSET_PREFIX}viewer.js`;
-const LANGUAGE_PACK_VIEWER_RUNTIME_PATH = `${LANGUAGE_PACK_VIEWER_ASSET_PREFIX}viewer-runtime.js`;
-const VIEWER_RUNTIME_RELATIVE_IMPORT_PATH = "./viewer-runtime.js";
-const VIEWER_RUNTIME_CANDIDATE_RELATIVE_PATHS = ["./assets/viewer-runtime.js", "../assets/viewer-runtime.js"];
-const LANGUAGE_PACK_RUNTIME_CANDIDATE_RELATIVE_PATHS = ["../../diffs-language-pack/assets/viewer-runtime.js", "../diffs-language-pack/assets/viewer-runtime.js"];
-let runtimeAssetCache = null;
-let languagePackRuntimeAssetCache = null;
-function isMissingFileError(error) {
-	return error instanceof Error && "code" in error && error.code === "ENOENT";
-}
-async function resolveViewerRuntimeFileUrl(params = {}) {
-	const baseUrl = params.baseUrl ?? import.meta.url;
-	const stat = params.stat ?? ((path) => fs$1.stat(path));
-	let missingFileError = null;
-	for (const relativePath of VIEWER_RUNTIME_CANDIDATE_RELATIVE_PATHS) {
-		const candidateUrl = new URL(relativePath, baseUrl);
-		try {
-			await stat(fileURLToPath(candidateUrl));
-			return candidateUrl;
-		} catch (error) {
-			if (isMissingFileError(error)) {
-				missingFileError = error;
-				continue;
-			}
-			throw error;
-		}
-	}
-	if (missingFileError) throw missingFileError;
-	throw new Error("viewer runtime asset candidates were not checked");
-}
-async function getServedViewerAsset(pathname) {
-	if (pathname !== VIEWER_LOADER_PATH && pathname !== VIEWER_RUNTIME_PATH) return null;
-	const assets = await loadViewerAssets();
-	if (pathname === VIEWER_LOADER_PATH) return {
-		body: assets.loaderBody,
-		contentType: "text/javascript; charset=utf-8"
-	};
-	if (pathname === VIEWER_RUNTIME_PATH) return {
-		body: assets.runtimeBody,
-		contentType: "text/javascript; charset=utf-8"
-	};
-	return null;
-}
-async function getServedLanguagePackViewerAsset(pathname) {
-	if (pathname !== LANGUAGE_PACK_VIEWER_LOADER_PATH && pathname !== LANGUAGE_PACK_VIEWER_RUNTIME_PATH) return null;
-	let assets;
-	try {
-		assets = await loadRuntimeAssets({
-			runtimeUrl: await resolveRuntimeFileUrl(LANGUAGE_PACK_RUNTIME_CANDIDATE_RELATIVE_PATHS),
-			cache: languagePackRuntimeAssetCache,
-			updateCache: (cache) => {
-				languagePackRuntimeAssetCache = cache;
-			}
-		});
-	} catch (error) {
-		if (isMissingFileError(error)) return null;
-		throw error;
-	}
-	if (pathname === LANGUAGE_PACK_VIEWER_LOADER_PATH) return {
-		body: assets.loaderBody,
-		contentType: "text/javascript; charset=utf-8"
-	};
-	return {
-		body: assets.runtimeBody,
-		contentType: "text/javascript; charset=utf-8"
-	};
-}
-async function loadViewerAssets() {
-	return loadRuntimeAssets({
-		runtimeUrl: await resolveViewerRuntimeFileUrl(),
-		cache: runtimeAssetCache,
-		updateCache: (cache) => {
-			runtimeAssetCache = cache;
-		}
-	});
-}
-async function loadRuntimeAssets(params) {
-	const runtimePath = fileURLToPath(params.runtimeUrl);
-	const runtimeStat = await fs$1.stat(runtimePath);
-	if (params.cache && params.cache.mtimeMs === runtimeStat.mtimeMs) return params.cache;
-	const runtimeBody = await fs$1.readFile(runtimePath);
-	const hash = crypto.createHash("sha1").update(runtimeBody).digest("hex").slice(0, 12);
-	const cache = {
-		mtimeMs: runtimeStat.mtimeMs,
-		runtimeBody,
-		loaderBody: `import "${VIEWER_RUNTIME_RELATIVE_IMPORT_PATH}?v=${hash}";\n`
-	};
-	params.updateCache(cache);
-	return cache;
-}
-async function resolveRuntimeFileUrl(relativePaths) {
-	let missingFileError = null;
-	for (const relativePath of relativePaths) {
-		const candidateUrl = new URL(relativePath, import.meta.url);
-		try {
-			await fs$1.stat(fileURLToPath(candidateUrl));
-			return candidateUrl;
-		} catch (error) {
-			if (isMissingFileError(error)) {
-				missingFileError = error;
-				continue;
-			}
-			throw error;
-		}
-	}
-	if (missingFileError) throw missingFileError;
-	throw new Error("viewer runtime asset candidates were not checked");
-}
-//#endregion
 //#region extensions/diffs/src/http.ts
 const VIEW_PREFIX = "/plugins/diffs/view/";
 const VIEWER_MAX_FAILURES_PER_WINDOW = 40;
@@ -435,7 +321,14 @@ const VIEWER_CONTENT_SECURITY_POLICY = [
 ].join("; ");
 const IMMUTABLE_ASSET_CACHE_CONTROL = "public, max-age=31536000, immutable";
 function createDiffsHttpHandler(params) {
-	const viewerFailureLimiter = new ViewerFailureLimiter();
+	const viewerFailureLimiter = createAuthRateLimiter({
+		maxAttempts: VIEWER_MAX_FAILURES_PER_WINDOW,
+		windowMs: VIEWER_FAILURE_WINDOW_MS,
+		lockoutMs: VIEWER_LOCKOUT_MS,
+		exemptLoopback: false,
+		pruneIntervalMs: 0,
+		maxEntries: VIEWER_LIMITER_MAX_KEYS
+	});
 	return async (req, res) => {
 		const parsed = parseRequestUrl(req.url);
 		if (!parsed) return false;
@@ -461,10 +354,8 @@ function createDiffsHttpHandler(params) {
 		if (!access.localRequest) {
 			const throttled = viewerFailureLimiter.check(access.remoteKey);
 			if (!throttled.allowed) {
-				res.statusCode = 429;
-				setSharedHeaders(res, "text/plain; charset=utf-8");
 				res.setHeader("Retry-After", String(Math.max(1, Math.ceil(throttled.retryAfterMs / 1e3))));
-				res.end("Too Many Requests");
+				respondText(res, 429, "Too Many Requests");
 				return true;
 			}
 		}
@@ -520,6 +411,7 @@ async function serveAsset(req, res, pathname, logger) {
 		}
 		res.statusCode = 200;
 		setSharedHeaders(res, asset.contentType, pathname === VIEWER_RUNTIME_PATH ? IMMUTABLE_ASSET_CACHE_CONTROL : void 0);
+		res.setHeader("content-length", String(Buffer.byteLength(asset.body)));
 		if (req.method === "HEAD") res.end();
 		else res.end(asset.body);
 		return true;
@@ -532,6 +424,7 @@ async function serveAsset(req, res, pathname, logger) {
 function respondText(res, statusCode, body) {
 	res.statusCode = statusCode;
 	setSharedHeaders(res, "text/plain; charset=utf-8");
+	res.setHeader("content-length", String(Buffer.byteLength(body)));
 	res.end(body);
 }
 function setSharedHeaders(res, contentType, cacheControl = "no-store, max-age=0") {
@@ -567,62 +460,6 @@ function recordRemoteFailure(limiter, access) {
 function resetRemoteFailures(limiter, access) {
 	if (!access.localRequest) limiter.reset(access.remoteKey);
 }
-var ViewerFailureLimiter = class {
-	constructor() {
-		this.failures = /* @__PURE__ */ new Map();
-	}
-	check(key) {
-		this.prune();
-		const state = this.failures.get(key);
-		if (!state) return {
-			allowed: true,
-			retryAfterMs: 0
-		};
-		const now = Date.now();
-		if (state.lockUntilMs > now) return {
-			allowed: false,
-			retryAfterMs: state.lockUntilMs - now
-		};
-		if (now - state.windowStartMs >= VIEWER_FAILURE_WINDOW_MS) {
-			this.failures.delete(key);
-			return {
-				allowed: true,
-				retryAfterMs: 0
-			};
-		}
-		return {
-			allowed: true,
-			retryAfterMs: 0
-		};
-	}
-	recordFailure(key) {
-		this.prune();
-		const now = Date.now();
-		const current = this.failures.get(key);
-		const next = !current || now - current.windowStartMs >= VIEWER_FAILURE_WINDOW_MS ? {
-			windowStartMs: now,
-			failures: 1,
-			lockUntilMs: 0
-		} : {
-			...current,
-			failures: current.failures + 1
-		};
-		if (next.failures >= VIEWER_MAX_FAILURES_PER_WINDOW) next.lockUntilMs = now + VIEWER_LOCKOUT_MS;
-		this.failures.set(key, next);
-	}
-	reset(key) {
-		this.failures.delete(key);
-	}
-	prune() {
-		if (this.failures.size < VIEWER_LIMITER_MAX_KEYS) return;
-		const now = Date.now();
-		for (const [key, state] of this.failures) {
-			if (state.lockUntilMs <= now && now - state.windowStartMs >= VIEWER_FAILURE_WINDOW_MS) this.failures.delete(key);
-			if (this.failures.size < VIEWER_LIMITER_MAX_KEYS) return;
-		}
-		if (this.failures.size >= VIEWER_LIMITER_MAX_KEYS) this.failures.clear();
-	}
-};
 //#endregion
 //#region extensions/diffs/src/prompt-guidance.ts
 const DIFFS_AGENT_GUIDANCE = [
@@ -895,402 +732,6 @@ function isFileNotFound(error) {
 	return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
 //#endregion
-//#region extensions/diffs/src/browser.ts
-const DEFAULT_BROWSER_IDLE_MS = 3e4;
-const SHARED_BROWSER_KEY = "__default__";
-const IMAGE_SIZE_LIMIT_ERROR = "Diff frame did not render within image size limits.";
-const PDF_REFERENCE_PAGE_HEIGHT_PX = 1056;
-const MAX_PDF_PAGES = 50;
-const LOCAL_VIEWER_BASE_HREF = "http://127.0.0.1/plugins/diffs/view/local/local";
-let sharedBrowserState = null;
-let executablePathCache = null;
-var PlaywrightDiffScreenshotter = class {
-	constructor(params) {
-		this.config = params.config;
-		this.browserIdleMs = params.browserIdleMs ?? DEFAULT_BROWSER_IDLE_MS;
-	}
-	async screenshotHtml(params) {
-		let lease;
-		try {
-			lease = await acquireSharedBrowser({
-				config: this.config,
-				idleMs: this.browserIdleMs
-			});
-		} catch (error) {
-			throw buildBrowserUnavailableError(error);
-		}
-		let page;
-		let currentScale = params.image.scale;
-		const maxRetries = 2;
-		try {
-			for (let attempt = 0; attempt <= maxRetries; attempt += 1) {
-				try {
-					page = await lease.browser.newPage({
-						viewport: {
-							width: Math.max(Math.ceil(params.image.maxWidth + 240), 1200),
-							height: 900
-						},
-						deviceScaleFactor: currentScale,
-						colorScheme: params.theme
-					});
-				} catch (error) {
-					throw buildBrowserUnavailableError(error);
-				}
-				await page.route("**/*", async (route) => {
-					const requestUrl = route.request().url();
-					if (requestUrl === "about:blank" || requestUrl.startsWith("data:")) {
-						await route.continue();
-						return;
-					}
-					let parsed;
-					try {
-						parsed = new URL(requestUrl);
-					} catch {
-						await route.abort();
-						return;
-					}
-					if (parsed.protocol !== "http:" || parsed.hostname !== "127.0.0.1") {
-						await route.abort();
-						return;
-					}
-					const isBaseViewerAsset = parsed.pathname.startsWith(VIEWER_ASSET_PREFIX);
-					const isLanguagePackViewerAsset = parsed.pathname.startsWith(LANGUAGE_PACK_VIEWER_ASSET_PREFIX);
-					if (!isBaseViewerAsset && !isLanguagePackViewerAsset) {
-						await route.abort();
-						return;
-					}
-					const pathname = parsed.pathname;
-					const asset = isLanguagePackViewerAsset ? await getServedLanguagePackViewerAsset(pathname) : await getServedViewerAsset(pathname);
-					if (!asset) {
-						await route.abort();
-						return;
-					}
-					await route.fulfill({
-						status: 200,
-						contentType: asset.contentType,
-						body: asset.body
-					});
-				});
-				await page.setContent(injectBaseHref(params.html), { waitUntil: "load" });
-				await page.waitForFunction(() => {
-					if (document.documentElement.dataset.openclawDiffsReady === "true") return true;
-					return [...document.querySelectorAll("[data-openclaw-diff-host]")].every((element) => {
-						return element instanceof HTMLElement && element.shadowRoot?.querySelector("[data-diffs]");
-					});
-				}, { timeout: 1e4 });
-				await page.evaluate(async () => {
-					await document.fonts.ready;
-				});
-				await page.evaluate(() => {
-					const frame = document.querySelector(".oc-frame");
-					if (frame instanceof HTMLElement) frame.dataset.renderMode = "image";
-				});
-				const frame = page.locator(".oc-frame");
-				await frame.waitFor();
-				const initialBox = await frame.boundingBox();
-				if (!initialBox) throw new Error("Diff frame did not render.");
-				const isPdf = params.image.format === "pdf";
-				const padding = isPdf ? 0 : 20;
-				const clipWidth = Math.ceil(initialBox.width + padding * 2);
-				const clipHeight = Math.ceil(Math.max(initialBox.height + padding * 2, 320));
-				await page.setViewportSize({
-					width: Math.max(clipWidth + padding, 900),
-					height: Math.max(clipHeight + padding, 700)
-				});
-				const box = await frame.boundingBox();
-				if (!box) throw new Error("Diff frame was lost after resizing.");
-				if (isPdf) {
-					await page.emulateMedia({ media: "screen" });
-					await page.evaluate(() => {
-						const html = document.documentElement;
-						const body = document.body;
-						const frameLocal = document.querySelector(".oc-frame");
-						html.style.background = "transparent";
-						body.style.margin = "0";
-						body.style.padding = "0";
-						body.style.background = "transparent";
-						body.style.setProperty("-webkit-print-color-adjust", "exact");
-						if (frameLocal instanceof HTMLElement) frameLocal.style.margin = "0";
-					});
-					const pdfBox = await frame.boundingBox();
-					if (!pdfBox) throw new Error("Diff frame was lost before PDF render.");
-					const pdfWidth = Math.max(Math.ceil(pdfBox.width), 1);
-					const pdfHeight = Math.max(Math.ceil(pdfBox.height), 1);
-					const estimatedPixels = pdfWidth * pdfHeight;
-					const estimatedPages = Math.ceil(pdfHeight / PDF_REFERENCE_PAGE_HEIGHT_PX);
-					if (estimatedPixels > params.image.maxPixels || estimatedPages > MAX_PDF_PAGES) throw new Error(IMAGE_SIZE_LIMIT_ERROR);
-					const pageForPdf = page;
-					await writeExternalArtifactFile({
-						outputPath: params.outputPath,
-						write: async (tempPath) => {
-							await pageForPdf.pdf({
-								path: tempPath,
-								width: `${pdfWidth}px`,
-								height: `${pdfHeight}px`,
-								printBackground: true,
-								margin: {
-									top: "0",
-									right: "0",
-									bottom: "0",
-									left: "0"
-								}
-							});
-						}
-					});
-					return params.outputPath;
-				}
-				const dpr = await page.evaluate(() => window.devicePixelRatio || 1);
-				const rawX = Math.max(box.x - padding, 0);
-				const rawY = Math.max(box.y - padding, 0);
-				const rawRight = rawX + clipWidth;
-				const rawBottom = rawY + clipHeight;
-				const x = Math.floor(rawX * dpr) / dpr;
-				const y = Math.floor(rawY * dpr) / dpr;
-				const right = Math.ceil(rawRight * dpr) / dpr;
-				const bottom = Math.ceil(rawBottom * dpr) / dpr;
-				const cssWidth = Math.max(right - x, 1);
-				const cssHeight = Math.max(bottom - y, 1);
-				if (cssWidth * cssHeight * dpr * dpr > params.image.maxPixels) {
-					if (currentScale > 1) {
-						const maxScaleForPixels = Math.sqrt(params.image.maxPixels / (cssWidth * cssHeight));
-						const reducedScale = Math.max(1, Math.round(Math.min(currentScale, maxScaleForPixels) * 100) / 100);
-						if (reducedScale < currentScale - .01 && attempt < maxRetries) {
-							await page.close().catch(() => {});
-							page = void 0;
-							currentScale = reducedScale;
-							continue;
-						}
-					}
-					throw new Error(IMAGE_SIZE_LIMIT_ERROR);
-				}
-				const pageForScreenshot = page;
-				await writeExternalArtifactFile({
-					outputPath: params.outputPath,
-					write: async (tempPath) => {
-						await pageForScreenshot.screenshot({
-							path: tempPath,
-							type: "png",
-							scale: "device",
-							clip: {
-								x,
-								y,
-								width: cssWidth,
-								height: cssHeight
-							}
-						});
-					}
-				});
-				return params.outputPath;
-			}
-			throw new Error(IMAGE_SIZE_LIMIT_ERROR);
-		} finally {
-			await page?.close().catch(() => {});
-			await lease.release();
-		}
-	}
-};
-function buildBrowserUnavailableError(error) {
-	const reason = formatErrorMessage(error);
-	return new Error(`Diff PNG/PDF rendering requires a Chromium-compatible browser. Set browser.executablePath or install Chrome/Chromium. ${reason}`, { cause: error });
-}
-async function writeExternalArtifactFile(params) {
-	const rootDir = path.dirname(params.outputPath);
-	await fs$1.mkdir(rootDir, { recursive: true });
-	await writeExternalFileWithinRoot({
-		rootDir,
-		path: path.basename(params.outputPath),
-		write: params.write
-	});
-}
-function injectBaseHref(html) {
-	if (html.includes("<base ")) return html;
-	return html.replace("<head>", `<head><base href="${LOCAL_VIEWER_BASE_HREF}" />`);
-}
-async function resolveBrowserExecutablePath(config) {
-	const cacheKey = JSON.stringify({
-		configPath: config.browser?.executablePath?.trim() || "",
-		env: [
-			process.env.OPENCLAW_BROWSER_EXECUTABLE_PATH ?? "",
-			process.env.BROWSER_EXECUTABLE_PATH ?? "",
-			process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH ?? ""
-		],
-		path: process.env.PATH ?? ""
-	});
-	if (executablePathCache?.key === cacheKey) return await executablePathCache.valuePromise;
-	const valuePromise = resolveBrowserExecutablePathUncached(config).catch((error) => {
-		if (executablePathCache?.valuePromise === valuePromise) executablePathCache = null;
-		throw error;
-	});
-	executablePathCache = {
-		key: cacheKey,
-		valuePromise
-	};
-	return await valuePromise;
-}
-async function resolveBrowserExecutablePathUncached(config) {
-	const configPath = config.browser?.executablePath?.trim();
-	if (configPath) {
-		await assertExecutable(configPath, "browser.executablePath");
-		return configPath;
-	}
-	const envCandidates = [
-		process.env.OPENCLAW_BROWSER_EXECUTABLE_PATH,
-		process.env.BROWSER_EXECUTABLE_PATH,
-		process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH
-	].map((value) => value?.trim()).filter((value) => Boolean(value));
-	for (const candidate of envCandidates) if (await isExecutable(candidate)) return candidate;
-	for (const candidate of await collectExecutableCandidates()) if (await isExecutable(candidate)) return candidate;
-}
-async function acquireSharedBrowser(params) {
-	const executablePath = await resolveBrowserExecutablePath(params.config);
-	const desiredKey = executablePath || SHARED_BROWSER_KEY;
-	if (sharedBrowserState && sharedBrowserState.key !== desiredKey) await closeSharedBrowser();
-	if (!sharedBrowserState) {
-		const browserPromise = chromium.launch({
-			headless: true,
-			...executablePath ? { executablePath } : {},
-			args: ["--disable-dev-shm-usage"]
-		}).then((browser) => {
-			if (sharedBrowserState?.browserPromise === browserPromise) {
-				sharedBrowserState.browser = browser;
-				browser.on("disconnected", () => {
-					if (sharedBrowserState?.browser === browser) {
-						clearIdleTimer(sharedBrowserState);
-						sharedBrowserState = null;
-					}
-				});
-			}
-			return browser;
-		}).catch((error) => {
-			if (sharedBrowserState?.browserPromise === browserPromise) sharedBrowserState = null;
-			throw error;
-		});
-		sharedBrowserState = {
-			browserPromise,
-			idleTimer: null,
-			key: desiredKey,
-			users: 0
-		};
-	}
-	clearIdleTimer(sharedBrowserState);
-	const state = sharedBrowserState;
-	const browser = await state.browserPromise;
-	state.users += 1;
-	let released = false;
-	return {
-		browser,
-		release: async () => {
-			if (released) return;
-			released = true;
-			state.users = Math.max(0, state.users - 1);
-			if (state.users === 0) scheduleIdleBrowserClose(state, params.idleMs);
-		}
-	};
-}
-function scheduleIdleBrowserClose(state, idleMs) {
-	clearIdleTimer(state);
-	state.idleTimer = setTimeout(() => {
-		if (sharedBrowserState === state && state.users === 0) closeSharedBrowser();
-	}, idleMs);
-	state.idleTimer.unref();
-}
-function clearIdleTimer(state) {
-	if (!state.idleTimer) return;
-	clearTimeout(state.idleTimer);
-	state.idleTimer = null;
-}
-async function closeSharedBrowser() {
-	const state = sharedBrowserState;
-	if (!state) return;
-	sharedBrowserState = null;
-	clearIdleTimer(state);
-	await (state.browser ?? await state.browserPromise.catch(() => null))?.close().catch(() => {});
-}
-async function collectExecutableCandidates() {
-	const candidates = /* @__PURE__ */ new Set();
-	for (const command of pathCommandsForPlatform()) {
-		const resolved = await findExecutableInPath(command);
-		if (resolved) candidates.add(resolved);
-	}
-	for (const candidate of commonExecutablePathsForPlatform()) candidates.add(candidate);
-	return [...candidates];
-}
-function pathCommandsForPlatform() {
-	if (process.platform === "win32") return [
-		"chrome.exe",
-		"msedge.exe",
-		"brave.exe"
-	];
-	if (process.platform === "darwin") return [
-		"google-chrome",
-		"chromium",
-		"msedge",
-		"brave-browser",
-		"brave"
-	];
-	return [
-		"chromium",
-		"chromium-browser",
-		"google-chrome",
-		"google-chrome-stable",
-		"msedge",
-		"brave-browser",
-		"brave"
-	];
-}
-function commonExecutablePathsForPlatform() {
-	if (process.platform === "darwin") return [
-		"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
-		"/Applications/Chromium.app/Contents/MacOS/Chromium",
-		"/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge",
-		"/Applications/Brave Browser.app/Contents/MacOS/Brave Browser"
-	];
-	if (process.platform === "win32") {
-		const joinWindowsPath = path.win32.join;
-		const localAppData = normalizeOptionalString(process.env.LOCALAPPDATA) ?? joinWindowsPath(os.homedir(), "AppData", "Local");
-		const programFiles = normalizeOptionalString(process.env.ProgramFiles) ?? "C:\\Program Files";
-		const programFilesX86 = normalizeOptionalString(process.env["ProgramFiles(x86)"]) ?? "C:\\Program Files (x86)";
-		return [
-			joinWindowsPath(localAppData, "Google", "Chrome", "Application", "chrome.exe"),
-			joinWindowsPath(programFiles, "Google", "Chrome", "Application", "chrome.exe"),
-			joinWindowsPath(programFilesX86, "Google", "Chrome", "Application", "chrome.exe"),
-			joinWindowsPath(programFiles, "Microsoft", "Edge", "Application", "msedge.exe"),
-			joinWindowsPath(programFilesX86, "Microsoft", "Edge", "Application", "msedge.exe"),
-			joinWindowsPath(programFiles, "BraveSoftware", "Brave-Browser", "Application", "brave.exe"),
-			joinWindowsPath(programFilesX86, "BraveSoftware", "Brave-Browser", "Application", "brave.exe")
-		];
-	}
-	return [
-		"/usr/bin/chromium",
-		"/usr/bin/chromium-browser",
-		"/usr/bin/google-chrome",
-		"/usr/bin/google-chrome-stable",
-		"/usr/bin/msedge",
-		"/usr/bin/brave-browser",
-		"/snap/bin/chromium"
-	];
-}
-async function findExecutableInPath(command) {
-	const pathValue = process.env.PATH;
-	if (!pathValue) return;
-	for (const directory of pathValue.split(path.delimiter)) {
-		if (!directory) continue;
-		const candidate = path.join(directory, command);
-		if (await isExecutable(candidate)) return candidate;
-	}
-}
-async function assertExecutable(candidate, label) {
-	if (!await isExecutable(candidate)) throw new Error(`${label} not found or not executable: ${candidate}`);
-}
-async function isExecutable(candidate) {
-	try {
-		await fs$1.access(candidate, constants.X_OK);
-		return true;
-	} catch {
-		return false;
-	}
-}
-//#endregion
 //#region extensions/diffs/src/shiki-curated-languages.ts
 const javascript = () => import("@shikijs/langs/javascript");
 const typescript = () => import("@shikijs/langs/typescript");
@@ -2160,6 +1601,7 @@ const MAX_TITLE_BYTES = 1024;
 const MAX_PATH_BYTES = 2048;
 const MAX_LANG_BYTES = 128;
 const MAX_DIFF_ARTIFACT_TTL_SECONDS = 21600;
+const loadDiffsBrowserRuntime = createLazyRuntimeModule(() => import("./browser.runtime-DTKAejqd.js"));
 const DiffsToolSchema = Type.Object({
 	before: Type.Optional(Type.String({ description: "Original text content." })),
 	after: Type.Optional(Type.String({ description: "Updated text content." })),
@@ -2203,14 +1645,15 @@ const DiffsToolSchema = Type.Object({
 	baseUrl: Type.Optional(Type.String({ description: "Optional gateway base URL override used when building the viewer URL. Overrides configured viewerBaseUrl, for example https://gateway.example.com." }))
 }, { additionalProperties: false });
 function createDiffsTool(params) {
+	const loadScreenshotter = async () => params.screenshotter ?? new (await (loadDiffsBrowserRuntime())).PlaywrightDiffScreenshotter({ config: params.api.config });
 	return {
 		name: "diffs",
 		label: "Diffs",
 		description: "Create a read-only diff viewer from before/after text or a unified patch. Returns a gateway viewer URL for interactive viewing and can also render the same diff to a PNG or PDF.",
 		parameters: DiffsToolSchema,
 		execute: async (_toolCallId, rawParams) => {
-			const toolParams = rawParams;
-			const rawRecord = rawParams;
+			const toolParams = asNonArrayRecord(rawParams);
+			const rawRecord = toolParams;
 			const artifactContext = buildArtifactContext(params.context);
 			const input = normalizeDiffInput(toolParams);
 			if (input.kind === "before_after" && input.before === input.after) return {
@@ -2252,10 +1695,9 @@ function createDiffsTool(params) {
 				if (error instanceof DiffRenderInputError) throw new PluginToolInputError(error.message);
 				throw error;
 			});
-			const screenshotter = params.screenshotter ?? new PlaywrightDiffScreenshotter({ config: params.api.config });
 			if (isArtifactOnlyMode(mode)) {
 				const artifactFile = await renderDiffArtifactFile({
-					screenshotter,
+					screenshotter: await loadScreenshotter(),
 					store: params.store,
 					html: requireRenderedHtml(rendered.imageHtml, "image"),
 					theme,
@@ -2322,7 +1764,7 @@ function createDiffsTool(params) {
 			};
 			try {
 				const artifactFile = await renderDiffArtifactFile({
-					screenshotter,
+					screenshotter: await loadScreenshotter(),
 					store: params.store,
 					html: requireRenderedHtml(rendered.imageHtml, "image"),
 					theme,
@@ -2513,6 +1955,7 @@ const DIFF_ARTIFACT_MAX_ENTRIES = 2048;
 const DIFF_ARTIFACT_MAX_BYTES_PER_ENTRY = 32 * 1024 * 1024;
 const DIFF_ARTIFACT_MAX_BYTES_PER_NAMESPACE = 256 * 1024 * 1024;
 function registerDiffsPlugin(api) {
+	if (api.registrationMode === "cli-metadata") return;
 	const store = new DiffArtifactStore({
 		rootDir: path.join(resolvePreferredOpenClawTmpDir(), "openclaw-diffs"),
 		blobStore: api.runtime.state.openBlobStore({