@openclaw/lobster 2026.7.2-beta.5 → 2026.8.1-beta.2

package/dist/index.js

@@ -6,6 +6,7 @@ import { Type } from "typebox";
 import { stat } from "node:fs/promises";
 import path from "node:path";
 import { Readable, Writable } from "node:stream";
+import { toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/lobster/src/lobster-runner.ts
 const workflowExts = /* @__PURE__ */ new Set([
 	".lobster",
@@ -40,66 +41,36 @@ function createLimitedSink(maxBytes, label) {
 	} });
 }
 function normalizeEnvelope(envelope) {
-	if (envelope.ok) {
-		if (envelope.status === "needs_input") return {
-			ok: false,
-			error: {
-				type: "unsupported_status",
-				message: "Lobster input requests are not supported by the OpenClaw Lobster tool yet"
-			}
-		};
-		return {
-			ok: true,
-			status: envelope.status ?? "ok",
-			output: Array.isArray(envelope.output) ? envelope.output : [],
-			requiresApproval: envelope.requiresApproval ? {
-				type: "approval_request",
-				prompt: envelope.requiresApproval.prompt,
-				items: envelope.requiresApproval.items,
-				...envelope.requiresApproval.resumeToken ? { resumeToken: envelope.requiresApproval.resumeToken } : {},
-				...envelope.requiresApproval.approvalId ? { approvalId: envelope.requiresApproval.approvalId } : {}
-			} : null
-		};
-	}
+	if (!envelope.ok) throw new Error(envelope.error?.message ?? "lobster runtime failed");
+	if (envelope.status === "needs_input") throw new Error("Lobster input requests are not supported by the OpenClaw Lobster tool yet");
 	return {
-		ok: false,
-		error: {
-			type: envelope.error?.type,
-			message: envelope.error?.message ?? "lobster runtime failed"
-		}
+		ok: true,
+		status: envelope.status ?? "ok",
+		output: Array.isArray(envelope.output) ? envelope.output : [],
+		requiresApproval: envelope.requiresApproval ? {
+			type: "approval_request",
+			prompt: envelope.requiresApproval.prompt,
+			items: envelope.requiresApproval.items,
+			...envelope.requiresApproval.resumeToken ? { resumeToken: envelope.requiresApproval.resumeToken } : {},
+			...envelope.requiresApproval.approvalId ? { approvalId: envelope.requiresApproval.approvalId } : {}
+		} : null
 	};
 }
-function throwOnErrorEnvelope(envelope) {
-	if (envelope.ok) return envelope;
-	throw new Error(envelope.error.message);
-}
-async function resolveWorkflowFile(candidate, cwd) {
-	const resolved = path.isAbsolute(candidate) ? candidate : path.resolve(cwd, candidate);
-	if (!(await stat(resolved)).isFile()) throw new Error("Workflow path is not a file");
-	const ext = path.extname(resolved).toLowerCase();
-	if (!workflowExts.has(ext)) throw new Error("Workflow file must end in .lobster, .yaml, .yml, or .json");
-	return resolved;
-}
 function isMissingPathError(error) {
 	return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
-function hasWorkflowFileExtension(candidate) {
-	return workflowExts.has(path.extname(candidate).toLowerCase());
-}
 async function detectWorkflowFile(candidate, cwd) {
 	const trimmed = candidate.trim();
-	if (!trimmed || trimmed.includes("|") || !hasWorkflowFileExtension(trimmed)) return null;
-	if (!/\s/.test(trimmed)) return await resolveWorkflowFile(trimmed, cwd);
+	if (!trimmed || trimmed.includes("|") || !workflowExts.has(path.extname(trimmed).toLowerCase())) return null;
+	const resolved = path.isAbsolute(trimmed) ? trimmed : path.resolve(cwd, trimmed);
 	try {
-		return await resolveWorkflowFile(trimmed, cwd);
+		if (!(await stat(resolved)).isFile()) throw new Error("Workflow path is not a file");
+		return resolved;
 	} catch (error) {
-		if (isMissingPathError(error)) return null;
+		if (/\s/.test(trimmed) && isMissingPathError(error)) return null;
 		throw error;
 	}
 }
-function parseWorkflowArgs(argsJson) {
-	return JSON.parse(argsJson);
-}
 function createEmbeddedToolContext(params, signal) {
 	const env = { ...process.env };
 	return {
@@ -127,7 +98,7 @@ async function withTimeout(timeoutMs, fn) {
 			resolve(value);
 		}, (error) => {
 			clearTimeout(timer);
-			reject(toLintErrorObject(error, "Non-Error rejection"));
+			reject(toErrorObject(error, "Non-Error rejection"));
 		});
 	});
 }
@@ -154,41 +125,34 @@ function createEmbeddedLobsterRunner(options) {
 					const parsedArgsJson = params.argsJson?.trim() ?? "";
 					let args;
 					if (parsedArgsJson) try {
-						args = parseWorkflowArgs(parsedArgsJson);
+						args = JSON.parse(parsedArgsJson);
 					} catch {
 						throw new Error("run --args-json must be valid JSON");
 					}
-					return throwOnErrorEnvelope(normalizeEnvelope(await runtime.runToolRequest({
+					return normalizeEnvelope(await runtime.runToolRequest({
 						filePath,
 						args,
 						ctx
-					})));
+					}));
 				}
-				return throwOnErrorEnvelope(normalizeEnvelope(await runtime.runToolRequest({
+				return normalizeEnvelope(await runtime.runToolRequest({
 					pipeline,
 					ctx
-				})));
+				}));
 			}
 			const token = params.token?.trim() ?? "";
 			const approvalId = params.approvalId?.trim() ?? "";
 			if (!token && !approvalId) throw new Error("token or approvalId required");
 			if (typeof params.approve !== "boolean") throw new Error("approve required");
-			return throwOnErrorEnvelope(normalizeEnvelope(await runtime.resumeToolRequest({
+			return normalizeEnvelope(await runtime.resumeToolRequest({
 				...token ? { token } : {},
 				...approvalId ? { approvalId } : {},
 				approved: params.approve,
 				ctx
-			})));
+			}));
 		});
 	} };
 }
-function toLintErrorObject(value, fallbackMessage) {
-	if (value instanceof Error) return value;
-	if (typeof value === "string") return new Error(value);
-	const error = new Error(fallbackMessage, { cause: value });
-	if (typeof value === "object" && value !== null || typeof value === "function") Object.assign(error, value);
-	return error;
-}
 //#endregion
 //#region extensions/lobster/src/lobster-taskflow.ts
 function toJsonLike(value, seen = /* @__PURE__ */ new WeakSet()) {
@@ -218,51 +182,30 @@ function toJsonLike(value, seen = /* @__PURE__ */ new WeakSet()) {
 	return null;
 }
 function buildApprovalWaitState(envelope) {
-	if (!envelope.requiresApproval) return {
-		kind: "lobster_approval",
-		prompt: "",
-		items: []
-	};
+	const approval = envelope.requiresApproval;
 	return {
 		kind: "lobster_approval",
-		prompt: envelope.requiresApproval.prompt,
-		items: envelope.requiresApproval.items.map((item) => toJsonLike(item)),
-		...envelope.requiresApproval.resumeToken ? { resumeToken: envelope.requiresApproval.resumeToken } : {},
-		...envelope.requiresApproval.approvalId ? { approvalId: envelope.requiresApproval.approvalId } : {}
+		prompt: approval ? approval.prompt : "",
+		items: approval ? approval.items.map((item) => toJsonLike(item)) : [],
+		...approval?.resumeToken ? { resumeToken: approval.resumeToken } : {},
+		...approval?.approvalId ? { approvalId: approval.approvalId } : {}
 	};
 }
 function applyEnvelopeToFlow(params) {
 	const { taskFlow, flow, envelope, waitingStep } = params;
-	if (!envelope.ok) return taskFlow.fail({
+	const flowMutation = {
 		flowId: flow.flowId,
 		expectedRevision: flow.revision
-	});
+	};
+	if (!envelope.ok) return taskFlow.fail(flowMutation);
 	if (envelope.status === "needs_approval") return taskFlow.setWaiting({
-		flowId: flow.flowId,
-		expectedRevision: flow.revision,
+		...flowMutation,
 		currentStep: waitingStep,
 		waitJson: buildApprovalWaitState(envelope)
 	});
-	return taskFlow.finish({
-		flowId: flow.flowId,
-		expectedRevision: flow.revision
-	});
-}
-function buildEnvelopeError(envelope) {
-	return new Error(envelope.error.message);
+	return taskFlow.finish(flowMutation);
 }
-async function runManagedLobsterFlow(params) {
-	const createFlowParams = {
-		controllerId: params.controllerId,
-		goal: params.goal,
-		currentStep: params.currentStep ?? "run_lobster",
-		...params.stateJson !== void 0 ? { stateJson: params.stateJson } : {}
-	};
-	const flow = params.taskFlow.tryCreateManaged ? params.taskFlow.tryCreateManaged(createFlowParams) : params.taskFlow.createManaged(createFlowParams);
-	if (!flow) return {
-		ok: false,
-		error: /* @__PURE__ */ new Error("TaskFlow persistence failed.")
-	};
+async function executeManagedLobsterFlow(params, flow, failureFlowId = flow.flowId) {
 	try {
 		const envelope = await params.runner.run(params.runnerParams);
 		const mutation = applyEnvelopeToFlow({
@@ -275,7 +218,7 @@ async function runManagedLobsterFlow(params) {
 			ok: false,
 			flow,
 			mutation,
-			error: buildEnvelopeError(envelope)
+			error: new Error(envelope.error.message)
 		};
 		return {
 			ok: true,
@@ -290,7 +233,7 @@ async function runManagedLobsterFlow(params) {
 				ok: false,
 				flow,
 				mutation: params.taskFlow.fail({
-					flowId: flow.flowId,
+					flowId: failureFlowId,
 					expectedRevision: flow.revision
 				}),
 				error: err
@@ -304,6 +247,20 @@ async function runManagedLobsterFlow(params) {
 		}
 	}
 }
+async function runManagedLobsterFlow(params) {
+	const createFlowParams = {
+		controllerId: params.controllerId,
+		goal: params.goal,
+		currentStep: params.currentStep ?? "run_lobster",
+		...params.stateJson !== void 0 ? { stateJson: params.stateJson } : {}
+	};
+	const flow = params.taskFlow.tryCreateManaged ? params.taskFlow.tryCreateManaged(createFlowParams) : params.taskFlow.createManaged(createFlowParams);
+	if (!flow) return {
+		ok: false,
+		error: /* @__PURE__ */ new Error("TaskFlow persistence failed.")
+	};
+	return await executeManagedLobsterFlow(params, flow);
+}
 async function resumeManagedLobsterFlow(params) {
 	const resumed = params.taskFlow.resume({
 		flowId: params.flowId,
@@ -316,47 +273,7 @@ async function resumeManagedLobsterFlow(params) {
 		mutation: resumed,
 		error: /* @__PURE__ */ new Error(`TaskFlow resume failed: ${resumed.code}`)
 	};
-	try {
-		const envelope = await params.runner.run(params.runnerParams);
-		const mutation = applyEnvelopeToFlow({
-			taskFlow: params.taskFlow,
-			flow: resumed.flow,
-			envelope,
-			waitingStep: params.waitingStep ?? "await_lobster_approval"
-		});
-		if (!envelope.ok) return {
-			ok: false,
-			flow: resumed.flow,
-			mutation,
-			error: buildEnvelopeError(envelope)
-		};
-		return {
-			ok: true,
-			envelope,
-			flow: resumed.flow,
-			mutation
-		};
-	} catch (error) {
-		const err = error instanceof Error ? error : new Error(String(error));
-		try {
-			const mutation = params.taskFlow.fail({
-				flowId: params.flowId,
-				expectedRevision: resumed.flow.revision
-			});
-			return {
-				ok: false,
-				flow: resumed.flow,
-				mutation,
-				error: err
-			};
-		} catch {
-			return {
-				ok: false,
-				flow: resumed.flow,
-				error: err
-			};
-		}
-	}
+	return await executeManagedLobsterFlow(params, resumed.flow, params.flowId);
 }
 //#endregion
 //#region extensions/lobster/src/lobster-tool.ts
@@ -434,9 +351,10 @@ function parseResumeFlowParams(params) {
 		...waitingStep ? { waitingStep } : {}
 	};
 }
-function formatManagedFlowResult(result) {
+function resolveManagedFlowToolResult(result) {
+	if (!result.ok) throw result.error;
 	return jsonResult({
-		...result.envelope && typeof result.envelope === "object" && !Array.isArray(result.envelope) ? result.envelope : { envelope: result.envelope },
+		...result.envelope,
 		flow: result.flow,
 		mutation: result.mutation
 	});
@@ -445,10 +363,6 @@ function requireTaskFlowRuntime(taskFlow, action) {
 	if (!taskFlow) throw new Error(`Managed TaskFlow ${action} mode requires a bound taskFlow runtime`);
 	return taskFlow;
 }
-function resolveManagedFlowToolResult(result) {
-	if (!result.ok) throw result.error;
-	return formatManagedFlowResult(result);
-}
 function createLobsterTool(api, options) {
 	const runner = options?.runner ?? createEmbeddedLobsterRunner();
 	return {

package/node_modules/@clawdbot/lobster/node_modules/fast-uri/.github/dependabot.yml

@@ -0,0 +1,53 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    commit-message:
+      # Prefix all commit messages with "chore: "
+      prefix: "chore"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+    allow:
+      - dependency-name: "*"
+        update-types:
+          - "version-update:semver-major"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "npm"
+    directory: "/"
+    commit-message:
+      # Prefix all commit messages with "chore: "
+      prefix: "chore"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+    versioning-strategy: "increase-if-necessary"
+    allow:
+      - dependency-name: "*"
+        update-types:
+          - "version-update:semver-major"
+    ignore:
+      # TODO: remove ignore until neostandard support ESLint 10
+      - dependency-name: "eslint"
+      - dependency-name: "neostandard"
+      - dependency-name: "@stylistic/*"
+    open-pull-requests-limit: 10
+    groups:
+      # Production dependencies with breaking changes
+      dependencies:
+        dependency-type: "production"
+      # ESLint related dependencies
+      dev-dependencies-eslint:
+        patterns:
+          - "eslint"
+          - "neostandard"
+          - "@stylistic/*"
+      # TypeScript related dependencies
+      dev-dependencies-typescript:
+        patterns:
+          - "@types/*"
+          - "tstyche"
+          - "typescript"

package/node_modules/{fast-uri → @clawdbot/lobster/node_modules/fast-uri}/.github/workflows/ci.yml

@@ -23,17 +23,65 @@ permissions:
   contents: read
 
 jobs:
+  type-tests:
+    name: Type Tests
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: ['20', '22', '24', '26']
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'npm'
+          cache-dependency-path: package.json
+          check-latest: true
+
+      - name: Install dependencies
+        run: npm install --ignore-scripts
+
+      - name: Run type tests
+        run: npm run test:typescript
+
+  unit-tests:
+    name: Unit Tests
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: ['16', '18', '20', '22', '24', '26']
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'npm'
+          cache-dependency-path: package.json
+          check-latest: true
+
+      - name: Install dependencies
+        run: npm install --ignore-scripts
+
+      - name: Run unit tests
+        run: npm test
+
   test-regression-check-node10:
     name: Test compatibility with Node.js 10
     runs-on: ubuntu-latest
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '10'
           cache: 'npm'
@@ -71,11 +119,11 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '24'
           cache: 'npm'
@@ -99,8 +147,8 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: fastify/workflows/.github/workflows/plugins-ci.yml@v6
+    uses: fastify/workflows/.github/workflows/plugins-ci.yml@2073dc8e1f9e172bf42daa3843c9dbd31af1e8cb # v6.0.0
     with:
       license-check: true
       lint: true
-      node-versions: '["16", "18", "20", "22", "24"]'
+      node-versions: '["16", "18", "20", "22", "24", "26"]'

package/node_modules/{fast-uri → @clawdbot/lobster/node_modules/fast-uri}/.github/workflows/lock-threads.yml

@@ -16,4 +16,4 @@ jobs:
     permissions:
       issues: write
       pull-requests: write
-    uses: fastify/workflows/.github/workflows/lock-threads.yml@v6
+    uses: fastify/workflows/.github/workflows/lock-threads.yml@2073dc8e1f9e172bf42daa3843c9dbd31af1e8cb # v6.0.0

package/node_modules/@clawdbot/lobster/node_modules/fast-uri/.github/workflows/ossf-scorecard.yml

@@ -0,0 +1,45 @@
+name: OSSF Scorecard Analysis
+
+# **What it does**: Runs OSSF Scorecard analysis on the repository and uploads the results.
+# **Why we have it**: Security scanning.
+
+on:
+    branch_protection_rule:
+    push:
+        branches:
+            - main
+        paths-ignore:
+            - "docs/**"
+            - "*.md"
+    schedule:
+        #        ┌───────────── minute (0 - 59)
+        #        │  ┌───────────── hour (0 - 23)
+        #        │  │ ┌───────────── day of the month (1 - 31)
+        #        │  │ │ ┌───────────── month (1 - 12 or JAN-DEC)
+        #        │  │ │ │ ┌───────────── day of the week (0 - 6 or SUN-SAT)
+        #        │  │ │ │ │
+        #        │  │ │ │ │
+        #        │  │ │ │ │
+        #        *  * * * *
+        - cron: "21 17 * * 0"
+    # Allows this workflow to be run manually from the Actions tab
+    workflow_dispatch:
+
+# This allows a subsequently queued workflow run to interrupt previous runs
+concurrency:
+    group: "${{ github.workflow }}-${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+    cancel-in-progress: true
+
+permissions:
+    contents: read
+
+jobs:
+    analysis:
+        name: OSSF Scorecard Analysis
+        permissions:
+            contents: read
+            id-token: write
+            security-events: write
+        uses: fastify/workflows/.github/workflows/reusable-ossf-scorecard.yml@ef591e2186785d5ab36b9fe6a79c7ce2f1d94e57 #v7.0.0
+        with:
+            publish_results: true

package/node_modules/{fast-uri → @clawdbot/lobster/node_modules/fast-uri}/README.md

@@ -3,6 +3,7 @@
 [![NPM version](https://img.shields.io/npm/v/fast-uri.svg?style=flat)](https://www.npmjs.com/package/fast-uri)
 [![CI](https://github.com/fastify/fast-uri/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/fastify/fast-uri/actions/workflows/ci.yml)
 [![neostandard javascript style](https://img.shields.io/badge/code_style-neostandard-brightgreen?style=flat)](https://github.com/neostandard/neostandard)
+[![OSSF Scorecard](https://api.scorecard.dev/projects/github.com/fastify/fast-uri/badge)](https://scorecard.dev/viewer/?uri=github.com/fastify/fast-uri)
 
 Dependency-free RFC 3986 URI toolbox.
 
@@ -27,10 +28,10 @@ Malformed authorities and out-of-range ports are reported through the parsed com
 	If set to `true`, the serializer will not resolve a relative `path` component.
 
 *	`unicodeSupport` (boolean, false)
-	If set to `true`, the parser will unescape non-ASCII characters in the parsed output as per [RFC 3987](http://www.ietf.org/rfc/rfc3987.txt).
+	If set to `true`, the parser will unescape non-ASCII characters in the parsed output as per [RFC 3987](https://www.ietf.org/rfc/rfc3987.txt).
 
 *	`domainHost` (boolean, false)
-	If set to `true`, the library will treat the `host` component as a domain name, and convert IDNs (International Domain Names) as per [RFC 5891](http://www.ietf.org/rfc/rfc5891.txt).
+	If set to `true`, the library will treat the `host` component as a domain name, and convert IDNs (International Domain Names) as per [RFC 5891](https://www.ietf.org/rfc/rfc5891.txt).
 
 ### Parse
 
@@ -90,14 +91,14 @@ true
 
 ## Scheme supports
 
-fast-uri supports inserting custom [scheme](http://en.wikipedia.org/wiki/URI_scheme)-dependent processing rules. Currently, fast-uri has built-in support for the following schemes:
+fast-uri supports inserting custom [scheme](https://en.wikipedia.org/wiki/URI_scheme)-dependent processing rules. Currently, fast-uri has built-in support for the following schemes:
 
-*	http \[[RFC 2616](http://www.ietf.org/rfc/rfc2616.txt)\]
-*	https \[[RFC 2818](http://www.ietf.org/rfc/rfc2818.txt)\]
-*	ws \[[RFC 6455](http://www.ietf.org/rfc/rfc6455.txt)\]
-*	wss \[[RFC 6455](http://www.ietf.org/rfc/rfc6455.txt)\]
-*	urn \[[RFC 2141](http://www.ietf.org/rfc/rfc2141.txt)\]
-*	urn:uuid \[[RFC 4122](http://www.ietf.org/rfc/rfc4122.txt)\]
+*	http \[[RFC 2616](https://www.ietf.org/rfc/rfc2616.txt)\]
+*	https \[[RFC 2818](https://www.ietf.org/rfc/rfc2818.txt)\]
+*	ws \[[RFC 6455](https://www.ietf.org/rfc/rfc6455.txt)\]
+*	wss \[[RFC 6455](https://www.ietf.org/rfc/rfc6455.txt)\]
+*	urn \[[RFC 2141](https://www.ietf.org/rfc/rfc2141.txt)\]
+*	urn:uuid \[[RFC 4122](https://www.ietf.org/rfc/rfc4122.txt)\]
 
 
 ## Benchmarks