@qqbrowser/openclaw-qbot 0.0.128 → 0.0.129

package/dist/mutable-allowlist-detectors-C4rNVag8.js

@@ -1 +1 @@
-function e(e){return(typeof e==`string`?e:typeof e==`number`?String(e):``).trim().replace(/^(telegram|tg):/i,``).trim()}function t(e){return/^-?\d+$/.test(e)}function n(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^<@!?/,``).replace(/>$/,``);if(/^\d+$/.test(n))return!1;for(let e of[`discord:`,`user:`,`pk:`])if(t.startsWith(e))return t.slice(e.length).trim().length===0;return!0}function r(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.match(/^<@([A-Z0-9]+)>$/i);if(n&&/^[A-Z0-9]{8,}$/i.test(n[1]??``))return!1;let r=t.replace(/^(slack|user):/i,``).trim();return!(/^[UWBCGDT][A-Z0-9]{2,}$/.test(r)||/^[A-Z0-9]{8,}$/i.test(r))}function i(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(googlechat|google-chat|gchat):/i,``).trim();return n?n.replace(/^users\//i,``).includes(`@`):!1}function a(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(msteams|user):/i,``).trim();return/\s/.test(n)||n.includes(`@`)}function o(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(mattermost|user):/i,``).replace(/^@/,``).trim().toLowerCase();return!/^[a-z0-9]{26}$/.test(n)}function s(e){let t=e.trim().toLowerCase();if(!t||t===`*`)return!1;let n=t.replace(/^irc:/,``).replace(/^user:/,``).trim();return!n.includes(`!`)&&!n.includes(`@`)}export{o as a,e as c,a as i,i as n,r as o,s as r,t as s,n as t};
+function e(e){return(typeof e==`string`?e:typeof e==`number`?String(e):``).trim().replace(/^(telegram|tg):/i,``).trim()}function t(e){return/^-?\d+$/.test(e)}function n(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^<@!?/,``).replace(/>$/,``);if(/^\d+$/.test(n))return!1;for(let e of[`discord:`,`user:`,`pk:`])if(t.startsWith(e))return t.slice(e.length).trim().length===0;return!0}function r(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.match(/^<@([A-Z0-9]+)>$/i);if(n&&/^[A-Z0-9]{8,}$/i.test(n[1]??``))return!1;let r=t.replace(/^(slack|user):/i,``).trim();return!(/^[UWBCGDT][A-Z0-9]{2,}$/.test(r)||/^[A-Z0-9]{8,}$/i.test(r))}function i(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(googlechat|google-chat|gchat):/i,``).trim();return n?n.replace(/^users\//i,``).includes(`@`):!1}function a(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(msteams|user):/i,``).trim();return/\s/.test(n)||n.includes(`@`)}function o(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(mattermost|user):/i,``).replace(/^@/,``).trim().toLowerCase();return!/^[a-z0-9]{26}$/.test(n)}function s(e){let t=e.trim().toLowerCase();if(!t||t===`*`)return!1;let n=t.replace(/^irc:/,``).replace(/^user:/,``).trim();return!n.includes(`!`)&&!n.includes(`@`)}export{o as a,e as c,a as i,i as n,r as o,s as r,t as s,n as t};

package/dist/mutable-allowlist-detectors-CL0qe54J.js

@@ -1 +1 @@
-function e(e){return(typeof e==`string`?e:typeof e==`number`?String(e):``).trim().replace(/^(telegram|tg):/i,``).trim()}function t(e){return/^-?\d+$/.test(e)}function n(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^<@!?/,``).replace(/>$/,``);if(/^\d+$/.test(n))return!1;for(let e of[`discord:`,`user:`,`pk:`])if(t.startsWith(e))return t.slice(e.length).trim().length===0;return!0}function r(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.match(/^<@([A-Z0-9]+)>$/i);if(n&&/^[A-Z0-9]{8,}$/i.test(n[1]??``))return!1;let r=t.replace(/^(slack|user):/i,``).trim();return!(/^[UWBCGDT][A-Z0-9]{2,}$/.test(r)||/^[A-Z0-9]{8,}$/i.test(r))}function i(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(googlechat|google-chat|gchat):/i,``).trim();return n?n.replace(/^users\//i,``).includes(`@`):!1}function a(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(msteams|user):/i,``).trim();return/\s/.test(n)||n.includes(`@`)}function o(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(mattermost|user):/i,``).replace(/^@/,``).trim().toLowerCase();return!/^[a-z0-9]{26}$/.test(n)}function s(e){let t=e.trim().toLowerCase();if(!t||t===`*`)return!1;let n=t.replace(/^irc:/,``).replace(/^user:/,``).trim();return!n.includes(`!`)&&!n.includes(`@`)}export{o as a,e as c,a as i,i as n,r as o,s as r,t as s,n as t};
+function e(e){return(typeof e==`string`?e:typeof e==`number`?String(e):``).trim().replace(/^(telegram|tg):/i,``).trim()}function t(e){return/^-?\d+$/.test(e)}function n(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^<@!?/,``).replace(/>$/,``);if(/^\d+$/.test(n))return!1;for(let e of[`discord:`,`user:`,`pk:`])if(t.startsWith(e))return t.slice(e.length).trim().length===0;return!0}function r(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.match(/^<@([A-Z0-9]+)>$/i);if(n&&/^[A-Z0-9]{8,}$/i.test(n[1]??``))return!1;let r=t.replace(/^(slack|user):/i,``).trim();return!(/^[UWBCGDT][A-Z0-9]{2,}$/.test(r)||/^[A-Z0-9]{8,}$/i.test(r))}function i(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(googlechat|google-chat|gchat):/i,``).trim();return n?n.replace(/^users\//i,``).includes(`@`):!1}function a(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(msteams|user):/i,``).trim();return/\s/.test(n)||n.includes(`@`)}function o(e){let t=e.trim();if(!t||t===`*`)return!1;let n=t.replace(/^(mattermost|user):/i,``).replace(/^@/,``).trim().toLowerCase();return!/^[a-z0-9]{26}$/.test(n)}function s(e){let t=e.trim().toLowerCase();if(!t||t===`*`)return!1;let n=t.replace(/^irc:/,``).replace(/^user:/,``).trim();return!n.includes(`!`)&&!n.includes(`@`)}export{o as a,e as c,a as i,i as n,r as o,s as r,t as s,n as t};

package/dist/node-cli-2-E4-83G.js

@@ -1,2 +1,2 @@
 import{d as e,g as t}from"./paths-B4IRk3wi.js";import{A as n,O as r,p as i}from"./subsystem-C5XF2Fy5.js";import"./utils-UGOV_184.js";import{Gc as a,Mi as o,Ml as s,Qc as c,Si as l,Vc as u,Xc as d,Xi as f,Yi as p,Zc as m,Zi as h,cl as g,il as _,ol as v,pa as y,qs as b,sl as x,ul as S,xi as C}from"./model-selection-I1ctjFOB.js";import{i as ee}from"./agent-scope-DXZc3eNT.js";import{s as w}from"./openclaw-root-D_0Q6--h.js";import"./github-copilot-token-DGYAlOmV.js";import{t as T}from"./command-format-BbDT1tlm.js";import"./boolean-Ch3DfXPy.js";import"./env-D7wNuBx1.js";import{S as te,x as ne}from"./env-overrides-DXJbFrwI.js";import"./registry-hFAtCSWG.js";import"./skills-DHbOKEGc.js";import"./frontmatter-BkZkwkVO.js";import"./plugins-CYLrFT4h.js";import{i as E}from"./logger-Bl8URnrW.js";import"./exec-DHqLtFYt.js";import{r as re}from"./windows-spawn-AB7ItGAE.js";import"./redact-3_CiXMY6.js";import"./path-alias-guards-mvyLCPlN.js";import"./errors-Bunti32V.js";import"./paths-yLEk_25I.js";import"./chat-envelope-HVpKusFc.js";import{dn as ie,g as ae}from"./call-BA3O_Qpl.js";import{n as oe,t as D}from"./with-timeout-WveKxvFV.js";import{n as se,r as ce,t as le}from"./exec-approvals-allowlist-BKFaHvA5.js";import{r as ue,t as de}from"./exec-safe-bin-runtime-policy-D2WexijZ.js";import{t as fe}from"./connection-auth-DZ-3Svr_.js";import{t as pe}from"./links-CySwdMcF.js";import{t as me}from"./help-format-BRbF_INg.js";import{_ as he,c as ge,f as O,h as _e,m as ve,n as ye,o as be,p as xe,r as Se,v as Ce}from"./exec-approvals-BpBNEy6i.js";import{n as we,o as Te,t as Ee}from"./system-run-command-DCzdgYyb.js";import{_ as De,g as Oe,l as ke,v as Ae}from"./arg-split-DE5RqDHq.js";import{t as je}from"./path-env-BPd1Yd-i.js";import"./runtime-guard-DFYBaYZS.js";import"./issue-format-kj7FXHhi.js";import{l as Me,n as Ne,p as Pe,t as Fe}from"./daemon-install-plan.shared-BSDdwWjB.js";import{r as Ie,t as Le}from"./daemon-runtime-DHiDbRuC.js";import"./systemd-D7odsu4K.js";import"./service-BtB9epJk.js";import{a as Re,f as ze,g as Be,h as Ve,i as He,m as k,r as Ue,t as We}from"./lifecycle-core-dhkH_Nux.js";import{c as Ge,l as Ke,u as qe}from"./systemd-hints-x1lJAOxS.js";import{t as Je}from"./parse-port-Bv1Y9Wk5.js";import{i as Ye,n as Xe,t as Ze}from"./node-commands-8GBOiktk.js";import{t as A}from"./node-service-BRfrNp8l.js";import j from"node:fs";import M from"node:path";import N from"node:fs/promises";import{spawn as Qe,spawnSync as $e}from"node:child_process";import P from"node:crypto";function et(){return M.join(t(),`node.json`)}function F(e){let t={version:1,nodeId:``,token:e?.token,displayName:e?.displayName,gateway:e?.gateway};return e?.version===1&&typeof e.nodeId==`string`&&(t.nodeId=e.nodeId.trim()),t.nodeId||=P.randomUUID(),t}async function I(){let e=et();try{let t=await N.readFile(e,`utf8`);return F(JSON.parse(t))}catch{return null}}async function tt(e){await o(et(),e,{mode:384})}async function nt(){let e=F(await I());return await tt(e),e}async function rt(e){let{socketPath:t,token:n,request:r}=e;if(!t||!n)return null;let i=e.timeoutMs??2e4,a=JSON.stringify(r),o=P.randomBytes(16).toString(`hex`),s=Date.now(),c=P.createHmac(`sha256`,n).update(`${o}:${s}:${a}`).digest(`hex`);return await Ce({socketPath:t,payload:JSON.stringify({type:`exec`,id:P.randomUUID(),nonce:o,ts:s,hmac:c,requestJson:a}),timeoutMs:i,accept:e=>{let t=e;if(t?.type===`exec-res`)return t.ok===!0&&t.payload?{ok:!0,payload:t.payload}:t.ok===!1&&t.error?{ok:!1,error:t.error}:null}})}const it=10*1024*1024;function at(e){return Array.isArray(e)?e.map(e=>e.trim()).filter(Boolean):[]}function ot(){let e=b().nodeHost?.browserProxy,t=at(e?.allowProfiles);return{enabled:e?.enabled!==!1,allowProfiles:t}}let L=null;async function st(){return L||(L=(async()=>{let e=b();if(!y(e.browser,e).enabled||!await h())throw Error(`browser control disabled`)})(),L)}function R(e){let{allowProfiles:t,profile:n}=e;return t.length?n?t.includes(n.trim()):!1:!0}function ct(e){let t=new Set,n=typeof e==`object`&&e?e:null;if(!n)return[];typeof n.path==`string`&&n.path.trim()&&t.add(n.path.trim()),typeof n.imagePath==`string`&&n.imagePath.trim()&&t.add(n.imagePath.trim());let r=n.download;if(r&&typeof r==`object`){let e=r.path;typeof e==`string`&&e.trim()&&t.add(e.trim())}return[...t]}async function lt(e){let t=await N.stat(e).catch(()=>null);if(!t||!t.isFile())return null;if(t.size>it)throw Error(`browser proxy file exceeds ${Math.round(it/(1024*1024))}MB`);let n=await N.readFile(e),r=await re({buffer:n,filePath:e});return{path:e,base64:n.toString(`base64`),mimeType:r}}function ut(e){if(!e)throw Error(`INVALID_REQUEST: paramsJSON required`);return JSON.parse(e)}function dt(e){return typeof e==`number`&&Number.isFinite(e)?Math.max(1,Math.floor(e)):2e4}function ft(e){return String(e).includes(`browser proxy request timed out`)}function pt(e){return e===`/act`||e===`/navigate`||e===`/pdf`||e===`/screenshot`||e===`/snapshot`}async function mt(e){let t=e.profile?{profile:e.profile}:{};try{let n=await D(n=>e.dispatcher.dispatch({method:`GET`,path:`/`,query:t,signal:n}),750,`browser proxy status`);if(n.status>=400||!n.body||typeof n.body!=`object`)return null;let r=n.body;return{running:r.running,cdpHttp:r.cdpHttp,cdpReady:r.cdpReady,cdpUrl:r.cdpUrl}}catch{return null}}function ht(e){let t=[`browser proxy timed out for ${e.method} ${e.path} after ${e.timeoutMs}ms`,e.wsBacked?`ws-backed browser action`:`browser action`];if(e.profile&&t.push(`profile=${e.profile}`),e.status){let n=[`running=${String(e.status.running)}`,`cdpHttp=${String(e.status.cdpHttp)}`,`cdpReady=${String(e.status.cdpReady)}`];typeof e.status.cdpUrl==`string`&&e.status.cdpUrl.trim()&&n.push(`cdpUrl=${e.status.cdpUrl}`),t.push(`status(${n.join(`, `)})`)}return t.join(`; `)}async function gt(e){let t=ut(e),n=typeof t.path==`string`?t.path.trim():``;if(!n)throw Error(`INVALID_REQUEST: path required`);let r=ot();if(!r.enabled)throw Error(`UNAVAILABLE: node browser proxy disabled`);await st();let i=b(),a=y(i.browser,i),o=typeof t.profile==`string`?t.profile.trim():``,s=r.allowProfiles;if(s.length>0){if(n!==`/profiles`){if(!R({allowProfiles:s,profile:o||a.defaultProfile}))throw Error(`INVALID_REQUEST: browser profile not allowed`)}else if(o&&!R({allowProfiles:s,profile:o}))throw Error(`INVALID_REQUEST: browser profile not allowed`)}let c=typeof t.method==`string`?t.method.toUpperCase():`GET`,l=n.startsWith(`/`)?n:`/${n}`,u=t.body,d=dt(t.timeoutMs),m={};o&&(m.profile=o);let h=t.query??{};for(let[e,t]of Object.entries(h))t!=null&&(m[e]=typeof t==`string`?t:String(t));let g=p(f()),_;try{_=await D(e=>g.dispatch({method:c===`DELETE`?`DELETE`:c===`POST`?`POST`:`GET`,path:l,query:m,body:u,signal:e}),d,`browser proxy request`)}catch(e){if(!ft(e))throw e;let t=o||a.defaultProfile,n=await mt({dispatcher:g,profile:l===`/profiles`?void 0:t});throw Error(ht({method:c,path:l,profile:l===`/profiles`?void 0:t||void 0,timeoutMs:d,wsBacked:pt(l),status:n}),{cause:e})}if(_.status>=400){let e=_.body&&typeof _.body==`object`&&`error`in _.body?String(_.body.error):`HTTP ${_.status}`;throw Error(e)}let v=_.body;if(s.length>0&&l===`/profiles`){let e=typeof v==`object`&&v?v:{};e.profiles=(Array.isArray(e.profiles)?e.profiles:[]).filter(e=>{if(!e||typeof e!=`object`)return!1;let t=e.name;return typeof t==`string`&&s.includes(t)})}let x,S=ct(v);if(S.length>0){let e=await Promise.all(S.map(async e=>{try{let t=await lt(e);if(!t)throw Error(`file not found`);return t}catch(t){throw Error(`browser proxy file read failed for ${e}: ${String(t)}`,{cause:t})}}));e.length>0&&(x=e)}let C=x?{result:v,files:x}:{result:v};return JSON.stringify(C)}function _t(e){return e===`allow-once`||e===`allow-always`?e:null}function vt(e){return e?.windowsShellWrapperBlocked?`SYSTEM_RUN_DENIED: allowlist miss (Windows shell wrappers like cmd.exe /c require approval; approve once/always or run with --ask on-miss|always)`:e?.shellWrapperBlocked?`SYSTEM_RUN_DENIED: allowlist miss (shell wrappers like sh/bash/zsh -c require approval; approve once/always or run with --ask on-miss|always)`:`SYSTEM_RUN_DENIED: allowlist miss`}function yt(e){let t=e.security===`allowlist`&&e.shellWrapperInvocation,n=t&&e.isWindows&&e.cmdInvocation,r=t?!1:e.analysisOk,i=t?!1:e.allowlistSatisfied,a=e.approvalDecision!==null||e.approved===!0;if(e.security===`deny`)return{allowed:!1,eventReason:`security=deny`,errorMessage:`SYSTEM_RUN_DISABLED: security=deny`,analysisOk:r,allowlistSatisfied:i,shellWrapperBlocked:t,windowsShellWrapperBlocked:n,requiresAsk:!1,approvalDecision:e.approvalDecision,approvedByAsk:a};let o=ve({ask:e.ask,security:e.security,analysisOk:r,allowlistSatisfied:i});return o&&!a?{allowed:!1,eventReason:`approval-required`,errorMessage:`SYSTEM_RUN_DENIED: approval required`,analysisOk:r,allowlistSatisfied:i,shellWrapperBlocked:t,windowsShellWrapperBlocked:n,requiresAsk:o,approvalDecision:e.approvalDecision,approvedByAsk:a}:e.security===`allowlist`&&(!r||!i)&&!a?{allowed:!1,eventReason:`allowlist-miss`,errorMessage:vt({shellWrapperBlocked:t,windowsShellWrapperBlocked:n}),analysisOk:r,allowlistSatisfied:i,shellWrapperBlocked:t,windowsShellWrapperBlocked:n,requiresAsk:o,approvalDecision:e.approvalDecision,approvedByAsk:a}:{allowed:!0,analysisOk:r,allowlistSatisfied:i,shellWrapperBlocked:t,windowsShellWrapperBlocked:n,requiresAsk:o,approvalDecision:e.approvalDecision,approvedByAsk:a}}function bt(e){if(e.shellCommand){let t=se({command:e.shellCommand,allowlist:e.approvals.allowlist,safeBins:e.safeBins,safeBinProfiles:e.safeBinProfiles,cwd:e.cwd,env:e.env,trustedSafeBinDirs:e.trustedSafeBinDirs,skillBins:e.skillBins,autoAllowSkills:e.autoAllowSkills,platform:process.platform});return{analysisOk:t.analysisOk,allowlistMatches:t.allowlistMatches,allowlistSatisfied:e.security===`allowlist`&&t.analysisOk?t.allowlistSatisfied:!1,segments:t.segments}}let t=u({argv:e.argv,cwd:e.cwd,env:e.env}),n=le({analysis:t,allowlist:e.approvals.allowlist,safeBins:e.safeBins,safeBinProfiles:e.safeBinProfiles,cwd:e.cwd,trustedSafeBinDirs:e.trustedSafeBinDirs,skillBins:e.skillBins,autoAllowSkills:e.autoAllowSkills});return{analysisOk:t.ok,allowlistMatches:n.allowlistMatches,allowlistSatisfied:e.security===`allowlist`&&t.ok?n.allowlistSatisfied:!1,segments:t.segments}}function xt(e){if(e.security!==`allowlist`||e.policy.approvedByAsk||e.shellCommand||!e.policy.analysisOk||!e.policy.allowlistSatisfied||e.segments.length!==1)return;let t=a(e.segments[0]);return t&&t.length>0?t:null}function St(e){let t=e.plannedAllowlistArgv??e.argv;return e.security===`allowlist`&&e.isWindows&&!e.policy.approvedByAsk&&e.shellCommand&&e.policy.analysisOk&&e.policy.allowlistSatisfied&&e.segments.length===1&&e.segments[0]?.argv.length>0&&(t=e.segments[0].argv),t}function Ct(e){if(!e.truncated)return;let t=`... (truncated)`;e.stderr.trim().length>0?e.stderr=`${e.stderr}\n${t}`:e.stdout=`${e.stdout}\n${t}`}const wt=[/^(?:node|nodejs)$/,/^perl$/,/^php$/,/^python(?:\d+(?:\.\d+)*)?$/,/^ruby$/],Tt=new Set([`esno`,`jiti`,`ts-node`,`ts-node-esm`,`tsx`,`vite-node`]),Et=new Set([`add`,`audit`,`completions`,`create`,`exec`,`help`,`init`,`install`,`link`,`outdated`,`patch`,`pm`,`publish`,`remove`,`repl`,`run`,`test`,`unlink`,`update`,`upgrade`,`x`]),z=new Set(`--backend.--bunfig.--conditions.--config.--console-depth.--cwd.--define.--elide-lines.--env-file.--extension-order.--filter.--hot.--inspect.--inspect-brk.--inspect-wait.--install.--jsx-factory.--jsx-fragment.--jsx-import-source.--loader.--origin.--port.--preload.--smol.--tsconfig-override.-c.-e.-p.-r`.split(`.`)),Dt=new Set([`--cached-only`,`--cert`,`--config`,`--env-file`,`--ext`,`--harmony-import-attributes`,`--import-map`,`--inspect`,`--inspect-brk`,`--inspect-wait`,`--location`,`--log-level`,`--lock`,`--node-modules-dir`,`--no-check`,`--preload`,`--reload`,`--seed`,`--strace-ops`,`--unstable-bare-node-builtins`,`--v8-flags`,`--watch`,`--watch-exclude`,`-L`]);function B(e){return typeof e==`string`&&e.trim()||null}function Ot(e){let t=M.resolve(e),n=[],r=t;for(;;){n.unshift(r);let e=M.dirname(r);if(e===r)return n;r=e}}function kt(e){try{return j.accessSync(e,j.constants.W_OK),!0}catch{return!1}}function At(e){for(let t of Ot(e))try{if(!j.lstatSync(t).isSymbolicLink())continue;if(kt(M.dirname(t)))return!0}catch{return!0}return!1}function jt(e){return e.shellCommand===null?(e.wrapperChain?.length??0)===0:!1}function V(e){return P.createHash(`sha256`).update(j.readFileSync(e)).digest(`hex`)}function Mt(e){return e.startsWith(`.`)||e.startsWith(`/`)||e.startsWith(`\\`)||e.includes(`/`)||e.includes(`\\`)||M.extname(e).length>0}function H(e,t){if(!e)return!1;try{return j.statSync(M.resolve(t??process.cwd(),e)).isFile()}catch{return!1}}function U(e){let t=e,n=0;for(;;){let e=v(t);if(e.kind===`unwrapped`){n+=t.length-e.argv.length,t=e.argv;continue}let r=x(t);if(r.kind===`unwrapped`){n+=t.length-r.argv.length,t=r.argv;continue}return{argv:t,baseIndex:n}}}function Nt(e){if(S(e,g,{allowCombinedC:!0}).valueTokenIndex!==null)return null;let t=!1;for(let n=1;n<e.length;n+=1){let r=e[n]?.trim()??``;if(r){if(r===`-`)return null;if(!t&&r===`--`){t=!0;continue}if(!t&&r===`-s`)return null;if(!(!t&&r.startsWith(`-`)))return n}}return null}function W(e){let t=!1;for(let n=e.startIndex;n<e.argv.length;n+=1){let r=e.argv[n]?.trim()??``;if(r){if(t)return H(r,e.cwd)?n:null;if(r===`--`){t=!0;continue}if(r===`-`)return null;if(r.startsWith(`-`)){!r.includes(`=`)&&e.optionsWithValue?.has(r)&&(n+=1);continue}return H(r,e.cwd)?n:null}}return null}function Pt(e){let t=!1;for(let n=e.startIndex;n<e.argv.length;n+=1){let r=e.argv[n]?.trim()??``;if(r){if(t)return n;if(r===`--`){t=!0;continue}if(r===`-`)return null;if(r.startsWith(`-`)){!r.includes(`=`)&&e.optionsWithValue?.has(r)&&(n+=1);continue}return n}}return null}function Ft(e){let t=!1,n=[];for(let r=e.startIndex;r<e.argv.length;r+=1){let i=e.argv[r]?.trim()??``;if(i){if(t){H(i,e.cwd)&&n.push(r);continue}if(i===`--`){t=!0;continue}if(i===`-`)return[];i.startsWith(`-`)||H(i,e.cwd)&&n.push(r)}}return n}function It(e){let t=Ft({argv:e.argv,startIndex:1,cwd:e.cwd});return t.length===1?t[0]:null}function Lt(e){let t=Pt({argv:e.argv,startIndex:1,optionsWithValue:z});if(t===null)return null;let n=e.argv[t]?.trim()??``;return n===`run`?W({argv:e.argv,startIndex:t+1,cwd:e.cwd,optionsWithValue:z}):Et.has(n)||!Mt(n)?null:t}function Rt(e){return(e.argv[1]?.trim()??``)===`run`?W({argv:e.argv,startIndex:2,cwd:e.cwd,optionsWithValue:Dt}):null}function G(e){return Tt.has(e)||de(e)}function zt(e,t){let n=U(e),r=_(n.argv[0]??``);if(!r)return null;if(c.has(r)){let e=Nt(n.argv);return e===null?null:n.baseIndex+e}if(wt.some(e=>e.test(r))){let e=n.argv[1]?.trim()??``;if(e&&e!==`-`&&!e.startsWith(`-`))return n.baseIndex+1}if(r===`bun`){let e=Lt({argv:n.argv,cwd:t});if(e!==null)return n.baseIndex+e}if(r===`deno`){let e=Rt({argv:n.argv,cwd:t});if(e!==null)return n.baseIndex+e}if(!G(r))return null;let i=It({argv:n.argv,cwd:t});return i===null?null:n.baseIndex+i}function Bt(e){if(e.shellCommand!==null)return!1;let t=_(U(e.argv).argv[0]??``);return!t||c.has(t)?!1:G(t)}function K(e){let t=zt(e.argv,e.cwd);if(t===null)return Bt({argv:e.argv,shellCommand:e.shellCommand})?{ok:!1,message:`SYSTEM_RUN_DENIED: approval cannot safely bind this interpreter/runtime command`}:{ok:!0,snapshot:null};let n=e.argv[t]?.trim();if(!n)return{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires a stable script operand`};let r=M.resolve(e.cwd??process.cwd(),n),i,a;try{i=j.realpathSync(r),a=j.statSync(i)}catch{return{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires an existing script operand`}}return a.isFile()?{ok:!0,snapshot:{argvIndex:t,path:i,sha256:V(i)}}:{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires a file script operand`}}function Vt(e){let t=M.resolve(e),n,r,i,a;try{n=j.lstatSync(t),r=j.statSync(t),i=j.realpathSync(t),a=j.statSync(i)}catch{return{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires an existing canonical cwd`}}return r.isDirectory()?At(t)?{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires canonical cwd (no symlink path components)`}:n.isSymbolicLink()?{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires canonical cwd (no symlink cwd)`}:!w(r,n)||!w(r,a)||!w(n,a)?{ok:!1,message:`SYSTEM_RUN_DENIED: approval cwd identity mismatch`}:{ok:!0,snapshot:{cwd:i,stat:r}}:{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires cwd to be a directory`}}function Ht(e){let t=Vt(e.snapshot.cwd);return t.ok?w(e.snapshot.stat,t.snapshot.stat):!1}function Ut(e){let t=e.argv[e.snapshot.argvIndex]?.trim();if(!t)return!1;let n=M.resolve(e.cwd??process.cwd(),t),r;try{r=j.realpathSync(n)}catch{return!1}if(r!==e.snapshot.path)return!1;try{return V(r)===e.snapshot.sha256}catch{return!1}}function Wt(e){if(!e.approvedByAsk)return{ok:!0,argv:e.argv,argvChanged:!1,cwd:e.cwd,approvedCwdSnapshot:void 0};let t=e.cwd,n;if(t){let e=Vt(t);if(!e.ok)return e;t=e.snapshot.cwd,n=e.snapshot}if(e.argv.length===0)return{ok:!0,argv:e.argv,argvChanged:!1,cwd:t,approvedCwdSnapshot:n};let r=d(e.argv,t);if(!jt({shellCommand:e.shellCommand,wrapperChain:r?.wrapperChain}))return{ok:!0,argv:e.argv,argvChanged:!1,cwd:t,approvedCwdSnapshot:n};let i=r?.resolvedRealPath??r?.resolvedPath;if(!i)return{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires a stable executable path`};if(i===e.argv[0])return{ok:!0,argv:e.argv,argvChanged:!1,cwd:t,approvedCwdSnapshot:n};let a=[...e.argv];return a[0]=i,{ok:!0,argv:a,argvChanged:!0,cwd:t,approvedCwdSnapshot:n}}function Gt(e){let t=we({command:e.command,rawCommand:e.rawCommand});if(!t.ok)return{ok:!1,message:t.message};if(t.argv.length===0)return{ok:!1,message:`command required`};let n=Wt({approvedByAsk:!0,argv:t.argv,shellCommand:t.shellPayload,cwd:B(e.cwd)??void 0});if(!n.ok)return{ok:!1,message:n.message};let r=Ee(n.argv),i=t.previewText?.trim()&&t.previewText.trim()!==r?t.previewText.trim():null,a=K({argv:n.argv,cwd:n.cwd,shellCommand:t.shellPayload});return a.ok?{ok:!0,plan:{argv:n.argv,cwd:n.cwd??null,commandText:r,commandPreview:i,agentId:B(e.agentId),sessionKey:B(e.sessionKey),mutableFileOperand:a.snapshot??void 0}}:{ok:!1,message:a.message}}const Kt=new Set,qt=`SYSTEM_RUN_DENIED: approval cwd changed before execution`;function Jt(e){Kt.has(e)||(Kt.add(e),E(e))}function Yt(e){switch(e){case`security=deny`:case`approval-required`:case`allowlist-miss`:case`execution-plan-miss`:case`companion-unavailable`:case`permission:screenRecording`:return e;default:return`approval-required`}}async function q(e,t,n){await e.sendNodeEvent(e.client,`exec.denied`,e.buildExecEventPayload({sessionKey:t.sessionKey,runId:t.runId,host:`node`,command:t.commandText,reason:n.reason,suppressNotifyOnExit:t.suppressNotifyOnExit})),await e.sendInvokeResult({ok:!1,error:{code:`UNAVAILABLE`,message:n.message}})}async function Xt(e){let t=we({command:e.params.command,rawCommand:e.params.rawCommand});if(!t.ok)return await e.sendInvokeResult({ok:!1,error:{code:`INVALID_REQUEST`,message:t.message}}),null;if(t.argv.length===0)return await e.sendInvokeResult({ok:!1,error:{code:`INVALID_REQUEST`,message:`command required`}}),null;let n=t.shellPayload,r=t.commandText,i=e.params.systemRunPlan===void 0?null:Te(e.params.systemRunPlan);if(e.params.systemRunPlan!==void 0&&!i)return await e.sendInvokeResult({ok:!1,error:{code:`INVALID_REQUEST`,message:`systemRunPlan invalid`}}),null;let a=e.params.agentId?.trim()||void 0,o=e.params.sessionKey?.trim()||`node`,s=e.params.runId?.trim()||P.randomUUID(),c=e.params.suppressNotifyOnExit===!0,l=te({overrides:e.params.env??void 0,shellWrapper:n!==null});return{argv:t.argv,shellPayload:n,commandText:r,commandPreview:t.previewText,approvalPlan:i,agentId:a,sessionKey:o,runId:s,execution:{sessionKey:o,runId:s,commandText:r,suppressNotifyOnExit:c},approvalDecision:_t(e.params.approvalDecision),envOverrides:l,env:e.sanitizeEnv(l),cwd:e.params.cwd?.trim()||void 0,timeoutMs:e.params.timeoutMs??void 0,needsScreenRecording:e.params.needsScreenRecording===!0,approved:e.params.approved===!0,suppressNotifyOnExit:c}}async function Zt(e,t){let n=b(),r=t.agentId?ee(n,t.agentId)?.tools?.exec:void 0,i=e.resolveExecSecurity(r?.security??n.tools?.exec?.security),a=e.resolveExecAsk(r?.ask??n.tools?.exec?.ask),o=_e(t.agentId,{security:i,ask:a}),s=o.agent.security,c=o.agent.ask,l=o.agent.autoAllowSkills,{safeBins:u,safeBinProfiles:d,trustedSafeBinDirs:f}=ue({global:n.tools?.exec,local:r,onWarning:Jt}),p=l?await e.skillBins.current():[],{analysisOk:m,allowlistMatches:h,allowlistSatisfied:g,segments:_}=bt({shellCommand:t.shellPayload,argv:t.argv,approvals:o,security:s,safeBins:u,safeBinProfiles:d,trustedSafeBinDirs:f,cwd:t.cwd,env:t.env,skillBins:p,autoAllowSkills:l}),v=process.platform===`win32`,y=t.shellPayload?e.isCmdExeInvocation(_[0]?.argv??[]):e.isCmdExeInvocation(t.argv),x=yt({security:s,ask:c,analysisOk:m,allowlistSatisfied:g,approvalDecision:t.approvalDecision,approved:t.approved,isWindows:v,cmdInvocation:y,shellWrapperInvocation:t.shellPayload!==null});if(m=x.analysisOk,g=x.allowlistSatisfied,!x.allowed)return await q(e,t.execution,{reason:x.eventReason,message:x.errorMessage}),null;if(s===`allowlist`&&t.shellPayload&&!x.approvedByAsk)return await q(e,t.execution,{reason:`approval-required`,message:`SYSTEM_RUN_DENIED: approval required`}),null;let S=Wt({approvedByAsk:x.approvedByAsk,argv:t.argv,shellCommand:t.shellPayload,cwd:t.cwd});if(!S.ok)return await q(e,t.execution,{reason:`approval-required`,message:S.message}),null;let C=x.approvedByAsk?S.approvedCwdSnapshot:void 0;if(x.approvedByAsk&&S.cwd&&!C)return await q(e,t.execution,{reason:`approval-required`,message:qt}),null;let w=xt({security:s,shellCommand:t.shellPayload,policy:x,segments:_});return w===null?(await q(e,t.execution,{reason:`execution-plan-miss`,message:`SYSTEM_RUN_DENIED: execution plan mismatch`}),null):{...t,argv:S.argv,cwd:S.cwd,approvals:o,security:s,policy:x,allowlistMatches:h,analysisOk:m,allowlistSatisfied:g,segments:_,plannedAllowlistArgv:w??void 0,isWindows:v,approvedCwdSnapshot:C}}async function Qt(e,t){if(t.approvedCwdSnapshot&&!Ht({snapshot:t.approvedCwdSnapshot})){E(`security: system.run approval cwd drift blocked (runId=${t.runId})`),await q(e,t.execution,{reason:`approval-required`,message:qt});return}let n=t.approvalPlan?K({argv:t.argv,cwd:t.cwd,shellCommand:t.shellPayload}):null;if(n&&!n.ok){E(`security: system.run approval script binding blocked (runId=${t.runId})`),await q(e,t.execution,{reason:`approval-required`,message:n.message});return}if(n?.snapshot&&!t.approvalPlan?.mutableFileOperand){E(`security: system.run approval script binding missing (runId=${t.runId})`),await q(e,t.execution,{reason:`approval-required`,message:`SYSTEM_RUN_DENIED: approval missing script operand binding`});return}if(t.approvalPlan?.mutableFileOperand&&!Ut({snapshot:t.approvalPlan.mutableFileOperand,argv:t.argv,cwd:t.cwd})){E(`security: system.run approval script drift blocked (runId=${t.runId})`),await q(e,t.execution,{reason:`approval-required`,message:`SYSTEM_RUN_DENIED: approval script operand changed before execution`});return}if(e.preferMacAppExecHost){let n={command:t.plannedAllowlistArgv??t.argv,rawCommand:t.commandText||null,cwd:t.cwd??null,env:t.envOverrides??null,timeoutMs:t.timeoutMs??null,needsScreenRecording:t.needsScreenRecording,agentId:t.agentId??null,sessionKey:t.sessionKey??null,approvalDecision:t.approvalDecision},r=await e.runViaMacAppExecHost({approvals:t.approvals,request:n});if(!r){if(e.execHostEnforced||!e.execHostFallbackAllowed){await q(e,t.execution,{reason:`companion-unavailable`,message:`COMPANION_APP_UNAVAILABLE: macOS app exec host unreachable`});return}}else if(r.ok){let n=r.payload;await e.sendExecFinishedEvent({sessionKey:t.sessionKey,runId:t.runId,commandText:t.commandText,result:n,suppressNotifyOnExit:t.suppressNotifyOnExit}),await e.sendInvokeResult({ok:!0,payloadJSON:JSON.stringify(n)});return}else{await q(e,t.execution,{reason:Yt(r.error.reason),message:r.error.message});return}}if(t.policy.approvalDecision===`allow-always`&&t.security===`allowlist`&&t.policy.analysisOk){let e=ce({segments:t.segments,cwd:t.cwd,env:t.env,platform:process.platform});for(let n of e)n&&ye(t.approvals.file,t.agentId,n)}if(t.allowlistMatches.length>0){let e=new Set;for(let n of t.allowlistMatches)!n?.pattern||e.has(n.pattern)||(e.add(n.pattern),xe(t.approvals.file,t.agentId,n,t.commandText,t.segments[0]?.resolution?.resolvedPath))}if(t.needsScreenRecording){await q(e,t.execution,{reason:`permission:screenRecording`,message:`PERMISSION_MISSING: screenRecording`});return}let r=St({plannedAllowlistArgv:t.plannedAllowlistArgv,argv:t.argv,security:t.security,isWindows:t.isWindows,policy:t.policy,shellCommand:t.shellPayload,segments:t.segments}),i=await e.runCommand(r,t.cwd,t.env,t.timeoutMs);Ct(i),await e.sendExecFinishedEvent({sessionKey:t.sessionKey,runId:t.runId,commandText:t.commandText,result:i,suppressNotifyOnExit:t.suppressNotifyOnExit}),await e.sendInvokeResult({ok:!0,payloadJSON:JSON.stringify({exitCode:i.exitCode,timedOut:i.timedOut,success:i.success,stdout:i.stdout,stderr:i.stderr,error:i.error??null})})}async function $t(e){let t=await Xt(e);if(!t)return;let n=await Zt(e,t);n&&await Qt(e,n)}const en=2e5,tn={65001:`utf-8`,54936:`gb18030`,936:`gbk`,950:`big5`,932:`shift_jis`,949:`euc-kr`,1252:`windows-1252`};let J;const nn=process.env.OPENCLAW_NODE_EXEC_HOST?.trim().toLowerCase()===`app`,rn=process.env.OPENCLAW_NODE_EXEC_FALLBACK?.trim().toLowerCase()!==`0`,an=process.platform===`darwin`&&nn;function on(e){return e===`deny`||e===`allowlist`||e===`full`?e:`allowlist`}function sn(e){let t=e[0]?.trim();if(!t)return!1;let n=M.win32.basename(t).toLowerCase();return n===`cmd.exe`||n===`cmd`}function cn(e){return e===`off`||e===`on-miss`||e===`always`?e:`on-miss`}function ln(e){return ne({overrides:e,blockPathOverrides:!0})}function un(e,t){return e.length<=t?{text:e,truncated:!1}:{text:`... (truncated) ${e.slice(e.length-t)}`,truncated:!0}}function dn(e){if(!e)return null;let t=e.match(/\b(\d{3,5})\b/);if(!t?.[1])return null;let n=Number.parseInt(t[1],10);return!Number.isFinite(n)||n<=0?null:n}function fn(){if(process.platform!==`win32`)return null;if(J!==void 0)return J;try{let e=$e(`cmd.exe`,[`/d`,`/s`,`/c`,`chcp`],{windowsHide:!0,encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`]}),t=dn(`${e.stdout??``}\n${e.stderr??``}`);J=t===null?null:tn[t]??null}catch{J=null}return J}function pn(e){let t=e.buffer.toString(`utf8`);if((e.platform??process.platform)!==`win32`)return t;let n=e.windowsEncoding??fn();if(!n||n.toLowerCase()===`utf-8`)return t;try{return new TextDecoder(n).decode(e.buffer)}catch{return t}}function mn(e){let t=e.socket?.path?.trim();return{...e,socket:t?{path:t}:void 0}}function hn(e,t){if(!t.exists)return;if(!t.hash)throw Error(`INVALID_REQUEST: exec approvals base hash unavailable; reload and retry`);let n=typeof e.baseHash==`string`?e.baseHash.trim():``;if(!n)throw Error(`INVALID_REQUEST: exec approvals base hash required; reload and retry`);if(n!==t.hash)throw Error(`INVALID_REQUEST: exec approvals changed; reload and retry`)}async function gn(e,t,n,r){return await new Promise(i=>{let a=[],o=[],s=0,c=!1,l=!1,u=!1,d=fn(),f=Qe(e[0],e.slice(1),{cwd:t,env:n,stdio:[`ignore`,`pipe`,`pipe`],windowsHide:!0}),p=(e,t)=>{if(s>=en){c=!0;return}let n=en-s,r=e.length>n?e.subarray(0,n):e;s+=r.length,t===`stdout`?a.push(r):o.push(r),e.length>n&&(c=!0)};f.stdout?.on(`data`,e=>p(e,`stdout`)),f.stderr?.on(`data`,e=>p(e,`stderr`));let m;r&&r>0&&(m=setTimeout(()=>{l=!0;try{f.kill(`SIGKILL`)}catch{}},r));let h=(e,t)=>{if(u)return;u=!0,m&&clearTimeout(m);let n=pn({buffer:Buffer.concat(a),windowsEncoding:d}),r=pn({buffer:Buffer.concat(o),windowsEncoding:d});i({exitCode:e,timedOut:l,success:e===0&&!l&&!t,stdout:n,stderr:r,error:t??null,truncated:c})};f.on(`error`,e=>{h(void 0,e.message)}),f.on(`exit`,e=>{h(e===null?void 0:e,null)})})}function _n(e){return(e?.PATH??e?.Path??process.env.PATH??process.env.Path??`/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`).split(M.delimiter).filter(Boolean)}function vn(e,t){if(e.includes(`/`)||e.includes(`\\`))return null;let n=process.platform===`win32`?(process.env.PATHEXT??process.env.PathExt??`.EXE;.CMD;.BAT;.COM`).split(`;`).map(e=>e.toLowerCase()):[``];for(let r of _n(t))for(let t of n){let n=M.join(r,e+t);if(j.existsSync(n))return n}return null}async function yn(e,t){let n=e.bins.map(e=>e.trim()).filter(Boolean),r={};for(let e of n){let n=vn(e,t);n&&(r[e]=n)}return{bins:r}}function bn(e){if(!e.output)return e;let t=e.output.trim();if(!t)return e;let{text:n}=un(t,2e4);return{...e,output:n}}async function xn(e){let t=[e.result.stdout,e.result.stderr,e.result.error].filter(Boolean).join(`
-`);await Dn(e.client,`exec.finished`,bn({sessionKey:e.sessionKey,runId:e.runId,host:`node`,command:e.commandText,exitCode:e.result.exitCode??void 0,timedOut:e.result.timedOut,success:e.result.success,output:t,suppressNotifyOnExit:e.suppressNotifyOnExit}))}async function Sn(e){let{approvals:t,request:n}=e;return await rt({socketPath:t.socketPath,token:t.token,request:n})}async function Y(e,t,n){await $(e,t,{ok:!0,payloadJSON:JSON.stringify(n)})}async function Cn(e,t,n){await $(e,t,{ok:!0,payloadJSON:n})}async function X(e,t,n,r){await $(e,t,{ok:!1,error:{code:n,message:r}})}async function Z(e,t,n){await X(e,t,`INVALID_REQUEST`,String(n))}async function wn(e,t,n){let r=String(e.command??``);if(r===`system.execApprovals.get`){try{Se();let n=O();await Y(t,e,{path:n.path,exists:n.exists,hash:n.hash,file:mn(n.file)})}catch(n){let r=String(n);await X(t,e,r.toLowerCase().includes(`timed out`)?`TIMEOUT`:`INVALID_REQUEST`,r)}return}if(r===`system.execApprovals.set`){try{let n=Q(e.paramsJSON);if(!n.file||typeof n.file!=`object`)throw Error(`INVALID_REQUEST: exec approvals file required`);Se();let r=O();hn(n,r),he(be({normalized:ge(n.file),current:r.file}));let i=O();await Y(t,e,{path:i.path,exists:i.exists,hash:i.hash,file:mn(i.file)})}catch(n){await Z(t,e,n)}return}if(r===`system.which`){try{let n=Q(e.paramsJSON);if(!Array.isArray(n.bins))throw Error(`INVALID_REQUEST: bins required`);await Y(t,e,await yn(n,ln(void 0)))}catch(n){await Z(t,e,n)}return}if(r===`browser.proxy`){try{await Cn(t,e,await gt(e.paramsJSON))}catch(n){await Z(t,e,n)}return}if(r===`system.run.prepare`){try{let n=Gt(Q(e.paramsJSON));if(!n.ok){await X(t,e,`INVALID_REQUEST`,n.message);return}await Y(t,e,{plan:n.plan})}catch(n){await Z(t,e,n)}return}if(r!==`system.run`){await X(t,e,`UNAVAILABLE`,`command not supported`);return}let i;try{i=Q(e.paramsJSON)}catch(n){await Z(t,e,n);return}if(!Array.isArray(i.command)||i.command.length===0){await X(t,e,`INVALID_REQUEST`,`command required`);return}await $t({client:t,params:i,skillBins:n,execHostEnforced:nn,execHostFallbackAllowed:rn,resolveExecSecurity:on,resolveExecAsk:cn,isCmdExeInvocation:sn,sanitizeEnv:ln,runCommand:gn,runViaMacAppExecHost:Sn,sendNodeEvent:Dn,buildExecEventPayload:bn,sendInvokeResult:async n=>{await $(t,e,n)},sendExecFinishedEvent:async({sessionKey:e,runId:n,commandText:r,result:i})=>{await xn({client:t,sessionKey:e,runId:n,commandText:r,result:i})},preferMacAppExecHost:an})}function Q(e){if(!e)throw Error(`INVALID_REQUEST: paramsJSON required`);return JSON.parse(e)}function Tn(e){if(!e||typeof e!=`object`)return null;let t=e,n=typeof t.id==`string`?t.id.trim():``,r=typeof t.nodeId==`string`?t.nodeId.trim():``,i=typeof t.command==`string`?t.command.trim():``;return!n||!r||!i?null:{id:n,nodeId:r,command:i,paramsJSON:typeof t.paramsJSON==`string`?t.paramsJSON:t.params===void 0?null:JSON.stringify(t.params),timeoutMs:typeof t.timeoutMs==`number`?t.timeoutMs:null,idempotencyKey:typeof t.idempotencyKey==`string`?t.idempotencyKey:null}}async function $(e,t,n){try{await e.request(`node.invoke.result`,En(t,n))}catch{}}function En(e,t){let n={id:e.id,nodeId:e.nodeId,ok:t.ok};return t.payload!==void 0&&(n.payload=t.payload),typeof t.payloadJSON==`string`&&(n.payloadJSON=t.payloadJSON),t.error&&(n.error=t.error),n}async function Dn(e,t,n){try{await e.request(`node.event`,{event:t,payloadJSON:n?JSON.stringify(n):null})}catch{}}const On=`/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`;function kn(e,t){return e.includes(`/`)||e.includes(`\\`)?null:m(e,t)??null}function An(e,t){let n=[],r=new Set;for(let i of e){let e=i.trim();if(!e)continue;let a=kn(e,t);if(!a)continue;let o=`${e}\u0000${a}`;r.has(o)||(r.add(o),n.push({name:e,resolvedPath:a}))}return n.toSorted((e,t)=>e.name.localeCompare(t.name)||e.resolvedPath.localeCompare(t.resolvedPath))}var jn=class{constructor(e,t){this.bins=[],this.lastRefresh=0,this.ttlMs=9e4,this.fetch=e,this.pathEnv=t}async current(e=!1){return(e||Date.now()-this.lastRefresh>this.ttlMs)&&await this.refresh(),this.bins}async refresh(){try{this.bins=An(await this.fetch(),this.pathEnv),this.lastRefresh=Date.now()}catch{this.lastRefresh||(this.bins=[])}}};function Mn(){je({pathEnv:process.env.PATH??``});let e=process.env.PATH??``;return e.trim()?e:(process.env.PATH=On,On)}async function Nn(e){return await fe({config:(e.config.gateway?.mode===`remote`?`remote`:`local`)==`local`?Pn(e.config):e.config,env:e.env,includeLegacyEnv:!1,localTokenPrecedence:`env-first`,localPasswordPrecedence:`env-first`,remoteTokenPrecedence:`env-first`,remotePasswordPrecedence:`env-first`})}function Pn(e){if(!e.gateway?.remote?.token&&!e.gateway?.remote?.password)return e;let t=structuredClone(e);return t.gateway?.remote&&(t.gateway.remote.token=void 0,t.gateway.remote.password=void 0),t}async function Fn(e){let t=await nt(),n=e.nodeId?.trim()||t.nodeId;n!==t.nodeId&&(t.nodeId=n);let r=e.displayName?.trim()||t.displayName||await oe();t.displayName=r;let i={host:e.gatewayHost,port:e.gatewayPort,tls:e.gatewayTls??b().gateway?.tls?.enabled??!1,tlsFingerprint:e.gatewayTlsFingerprint};t.gateway=i,await tt(t);let a=b(),o=y(a.browser,a),c=a.nodeHost?.browserProxy?.enabled!==!1&&o.enabled,{token:u,password:d}=await Nn({config:a,env:process.env}),f=i.host??`127.0.0.1`,p=i.port??18789,m=`${i.tls?`wss`:`ws`}://${f}:${p}`,h=Mn();console.log(`node host PATH: ${h}`);let g=new ae({url:m,token:u||void 0,password:d||void 0,instanceId:n,clientName:l.NODE_HOST,clientDisplayName:r,clientVersion:s,platform:process.platform,mode:C.NODE,role:`node`,scopes:[],caps:[`system`,...c?[`browser`]:[]],commands:[...Ye,...Xe,...c?[Ze]:[]],pathEnv:h,permissions:void 0,deviceIdentity:ie(),tlsFingerprint:i.tlsFingerprint,onEvent:e=>{if(e.event!==`node.invoke.request`)return;let t=Tn(e.payload);t&&wn(t,g,_)},onConnectError:e=>{console.error(`node host gateway connect failed: ${e.message}`)},onClose:(e,t)=>{console.error(`node host gateway closed (${e}): ${t}`)}}),_=new jn(async()=>{let e=await g.request(`skills.bins`,{});return Array.isArray(e?.bins)?e.bins.map(e=>String(e)):[]},h);g.start(),await new Promise(()=>{})}async function In(e){let{devMode:t,nodePath:n}=await Ne({env:e.env,runtime:e.runtime,devMode:e.devMode,nodePath:e.nodePath}),{programArguments:r,workingDirectory:i}=await Pe({host:e.host,port:e.port,tls:e.tls,tlsFingerprint:e.tlsFingerprint,nodeId:e.nodeId,displayName:e.displayName,dev:t,runtime:e.runtime,nodePath:n});await Fe({env:e.env,runtime:e.runtime,programArguments:r,warn:e.warn,title:`Node daemon runtime`});let a=Me({env:e.env});return{programArguments:r,workingDirectory:i,environment:a,description:ke({version:a.OPENCLAW_SERVICE_VERSION})}}const Ln=Le;function Rn(e){return Ie(e)}function zn(){return Ke({installCommand:T(`openclaw node install`),startCommand:T(`openclaw node start`),launchAgentPlistPath:`~/Library/LaunchAgents/${Oe()}.plist`,systemdServiceName:De(),windowsTaskName:Ae()})}function Bn(e=process.env){return Ge({env:e,systemdServiceName:De(),windowsTaskName:Ae()})}function Vn(e,t){let n=e.host?.trim()||t?.gateway?.host||`127.0.0.1`,r=Je(e.port);return e.port!==void 0&&r===null?{host:n,port:null}:{host:n,port:r??t?.gateway?.port??18789}}async function Hn(t){let n=!!t.json,{stdout:r,warnings:a,emit:o,fail:s}=Ve({action:`install`,json:n});if(e(process.env)){s(`Nix mode detected; service install is disabled.`);return}let c=await I(),{host:l,port:u}=Vn(t,c);if(!Number.isFinite(u??NaN)||(u??0)<=0){s(`Invalid port`);return}let d=t.runtime?String(t.runtime):Ln;if(!Rn(d)){s(`Invalid --runtime (use "node" or "bun")`);return}let f=A(),p=!1;try{p=await f.isLoaded({env:process.env})}catch(e){s(`Node service check failed: ${String(e)}`);return}if(p&&!t.force){o({ok:!0,result:`already-installed`,message:`Node service already ${f.loadedText}.`,service:k(f,p),warnings:a.length?a:void 0}),n||(i.log(`Node service already ${f.loadedText}.`),i.log(`Reinstall with: ${T(`openclaw node install --force`)}`));return}let m=t.tlsFingerprint?.trim()||c?.gateway?.tlsFingerprint,h=!!t.tls||!!m||!!c?.gateway?.tls,{programArguments:g,workingDirectory:_,environment:v,description:y}=await In({env:process.env,host:l,port:u??18789,tls:h,tlsFingerprint:m||void 0,nodeId:t.nodeId,displayName:t.displayName,runtime:d,warn:e=>{n?a.push(e):i.log(e)}});await Be({serviceNoun:`Node`,service:f,warnings:a,emit:o,fail:s,install:async()=>{await f.install({env:process.env,stdout:r,programArguments:g,workingDirectory:_,environment:v,description:y})}})}async function Un(e={}){return await He({serviceNoun:`Node`,service:A(),opts:e,stopBeforeUninstall:!1,assertNotLoadedAfterUninstall:!1})}async function Wn(e={}){await We({serviceNoun:`Node`,service:A(),renderStartHints:zn,opts:e})}async function Gn(e={}){return await Ue({serviceNoun:`Node`,service:A(),opts:e})}async function Kn(e={}){let t=!!e.json,n=A(),[a,o,s]=await Promise.all([n.isLoaded({env:process.env}).catch(()=>!1),n.readCommand(process.env).catch(()=>null),n.readRuntime(process.env).catch(e=>({status:`unknown`,detail:String(e)}))]),c={service:{...k(n,a),command:o,runtime:s}};if(t){i.log(JSON.stringify(c,null,2));return}let{rich:l,label:u,accent:d,infoText:f,okText:p,warnText:m,errorText:h}=Re(),g=a?p(n.loadedText):m(n.notLoadedText);i.log(`${u(`Service:`)} ${d(n.label)} (${g})`),o?.programArguments?.length&&i.log(`${u(`Command:`)} ${f(o.programArguments.join(` `))}`),o?.sourcePath&&i.log(`${u(`Service file:`)} ${f(o.sourcePath)}`),o?.workingDirectory&&i.log(`${u(`Working dir:`)} ${f(o.workingDirectory)}`);let _=qe(s);if(_){let e=ze(s?.status);i.log(`${u(`Runtime:`)} ${r(l,e,_)}`)}if(!a){i.log(``);for(let e of zn())i.log(`${m(`Start with:`)} ${f(e)}`);return}let v={...process.env,...o?.environment??void 0},y={...v,OPENCLAW_LOG_PREFIX:v.OPENCLAW_LOG_PREFIX??`node`};if(s?.missingUnit){i.error(h(`Service unit not found.`));for(let e of Bn(y))i.error(h(e));return}if(s?.status===`stopped`){i.error(h(`Service is loaded but not running.`));for(let e of Bn(y))i.error(h(e))}}function qn(e,t){return Je(e)??t}function Jn(e){let t=e.command(`node`).description(`Run and manage the headless node host service`).addHelpText(`after`,()=>`\n${n.heading(`Examples:`)}\n${me([[`openclaw node run --host 127.0.0.1 --port 18789`,`Run the node host in the foreground.`],[`openclaw node status`,`Check node host service status.`],[`openclaw node install`,`Install the node host service.`],[`openclaw node restart`,`Restart the installed node host service.`]])}\n\n${n.muted(`Docs:`)} ${pe(`/cli/node`,`docs.openclaw.ai/cli/node`)}\n`);t.command(`run`).description(`Run the headless node host (foreground)`).option(`--host <host>`,`Gateway host`).option(`--port <port>`,`Gateway port`).option(`--tls`,`Use TLS for the gateway connection`,!1).option(`--tls-fingerprint <sha256>`,`Expected TLS certificate fingerprint (sha256)`).option(`--node-id <id>`,`Override node id (clears pairing token)`).option(`--display-name <name>`,`Override node display name`).action(async e=>{let t=await I();await Fn({gatewayHost:e.host?.trim()||t?.gateway?.host||`127.0.0.1`,gatewayPort:qn(e.port,t?.gateway?.port??18789),gatewayTls:!!e.tls||!!e.tlsFingerprint,gatewayTlsFingerprint:e.tlsFingerprint,nodeId:e.nodeId,displayName:e.displayName})}),t.command(`status`).description(`Show node host status`).option(`--json`,`Output JSON`,!1).action(async e=>{await Kn(e)}),t.command(`install`).description(`Install the node host service (launchd/systemd/schtasks)`).option(`--host <host>`,`Gateway host`).option(`--port <port>`,`Gateway port`).option(`--tls`,`Use TLS for the gateway connection`,!1).option(`--tls-fingerprint <sha256>`,`Expected TLS certificate fingerprint (sha256)`).option(`--node-id <id>`,`Override node id (clears pairing token)`).option(`--display-name <name>`,`Override node display name`).option(`--runtime <runtime>`,`Service runtime (node|bun). Default: node`).option(`--force`,`Reinstall/overwrite if already installed`,!1).option(`--json`,`Output JSON`,!1).action(async e=>{await Hn(e)}),t.command(`uninstall`).description(`Uninstall the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Un(e)}),t.command(`stop`).description(`Stop the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Gn(e)}),t.command(`restart`).description(`Restart the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Wn(e)})}export{Jn as registerNodeCli};
+`);await Dn(e.client,`exec.finished`,bn({sessionKey:e.sessionKey,runId:e.runId,host:`node`,command:e.commandText,exitCode:e.result.exitCode??void 0,timedOut:e.result.timedOut,success:e.result.success,output:t,suppressNotifyOnExit:e.suppressNotifyOnExit}))}async function Sn(e){let{approvals:t,request:n}=e;return await rt({socketPath:t.socketPath,token:t.token,request:n})}async function Y(e,t,n){await $(e,t,{ok:!0,payloadJSON:JSON.stringify(n)})}async function Cn(e,t,n){await $(e,t,{ok:!0,payloadJSON:n})}async function X(e,t,n,r){await $(e,t,{ok:!1,error:{code:n,message:r}})}async function Z(e,t,n){await X(e,t,`INVALID_REQUEST`,String(n))}async function wn(e,t,n){let r=String(e.command??``);if(r===`system.execApprovals.get`){try{Se();let n=O();await Y(t,e,{path:n.path,exists:n.exists,hash:n.hash,file:mn(n.file)})}catch(n){let r=String(n);await X(t,e,r.toLowerCase().includes(`timed out`)?`TIMEOUT`:`INVALID_REQUEST`,r)}return}if(r===`system.execApprovals.set`){try{let n=Q(e.paramsJSON);if(!n.file||typeof n.file!=`object`)throw Error(`INVALID_REQUEST: exec approvals file required`);Se();let r=O();hn(n,r),he(be({normalized:ge(n.file),current:r.file}));let i=O();await Y(t,e,{path:i.path,exists:i.exists,hash:i.hash,file:mn(i.file)})}catch(n){await Z(t,e,n)}return}if(r===`system.which`){try{let n=Q(e.paramsJSON);if(!Array.isArray(n.bins))throw Error(`INVALID_REQUEST: bins required`);await Y(t,e,await yn(n,ln(void 0)))}catch(n){await Z(t,e,n)}return}if(r===`browser.proxy`){try{await Cn(t,e,await gt(e.paramsJSON))}catch(n){await Z(t,e,n)}return}if(r===`system.run.prepare`){try{let n=Gt(Q(e.paramsJSON));if(!n.ok){await X(t,e,`INVALID_REQUEST`,n.message);return}await Y(t,e,{plan:n.plan})}catch(n){await Z(t,e,n)}return}if(r!==`system.run`){await X(t,e,`UNAVAILABLE`,`command not supported`);return}let i;try{i=Q(e.paramsJSON)}catch(n){await Z(t,e,n);return}if(!Array.isArray(i.command)||i.command.length===0){await X(t,e,`INVALID_REQUEST`,`command required`);return}await $t({client:t,params:i,skillBins:n,execHostEnforced:nn,execHostFallbackAllowed:rn,resolveExecSecurity:on,resolveExecAsk:cn,isCmdExeInvocation:sn,sanitizeEnv:ln,runCommand:gn,runViaMacAppExecHost:Sn,sendNodeEvent:Dn,buildExecEventPayload:bn,sendInvokeResult:async n=>{await $(t,e,n)},sendExecFinishedEvent:async({sessionKey:e,runId:n,commandText:r,result:i})=>{await xn({client:t,sessionKey:e,runId:n,commandText:r,result:i})},preferMacAppExecHost:an})}function Q(e){if(!e)throw Error(`INVALID_REQUEST: paramsJSON required`);return JSON.parse(e)}function Tn(e){if(!e||typeof e!=`object`)return null;let t=e,n=typeof t.id==`string`?t.id.trim():``,r=typeof t.nodeId==`string`?t.nodeId.trim():``,i=typeof t.command==`string`?t.command.trim():``;return!n||!r||!i?null:{id:n,nodeId:r,command:i,paramsJSON:typeof t.paramsJSON==`string`?t.paramsJSON:t.params===void 0?null:JSON.stringify(t.params),timeoutMs:typeof t.timeoutMs==`number`?t.timeoutMs:null,idempotencyKey:typeof t.idempotencyKey==`string`?t.idempotencyKey:null}}async function $(e,t,n){try{await e.request(`node.invoke.result`,En(t,n))}catch{}}function En(e,t){let n={id:e.id,nodeId:e.nodeId,ok:t.ok};return t.payload!==void 0&&(n.payload=t.payload),typeof t.payloadJSON==`string`&&(n.payloadJSON=t.payloadJSON),t.error&&(n.error=t.error),n}async function Dn(e,t,n){try{await e.request(`node.event`,{event:t,payloadJSON:n?JSON.stringify(n):null})}catch{}}const On=`/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`;function kn(e,t){return e.includes(`/`)||e.includes(`\\`)?null:m(e,t)??null}function An(e,t){let n=[],r=new Set;for(let i of e){let e=i.trim();if(!e)continue;let a=kn(e,t);if(!a)continue;let o=`${e}\u0000${a}`;r.has(o)||(r.add(o),n.push({name:e,resolvedPath:a}))}return n.toSorted((e,t)=>e.name.localeCompare(t.name)||e.resolvedPath.localeCompare(t.resolvedPath))}var jn=class{constructor(e,t){this.bins=[],this.lastRefresh=0,this.ttlMs=9e4,this.fetch=e,this.pathEnv=t}async current(e=!1){return(e||Date.now()-this.lastRefresh>this.ttlMs)&&await this.refresh(),this.bins}async refresh(){try{this.bins=An(await this.fetch(),this.pathEnv),this.lastRefresh=Date.now()}catch{this.lastRefresh||(this.bins=[])}}};function Mn(){je({pathEnv:process.env.PATH??``});let e=process.env.PATH??``;return e.trim()?e:(process.env.PATH=On,On)}async function Nn(e){return await fe({config:(e.config.gateway?.mode===`remote`?`remote`:`local`)==`local`?Pn(e.config):e.config,env:e.env,includeLegacyEnv:!1,localTokenPrecedence:`env-first`,localPasswordPrecedence:`env-first`,remoteTokenPrecedence:`env-first`,remotePasswordPrecedence:`env-first`})}function Pn(e){if(!e.gateway?.remote?.token&&!e.gateway?.remote?.password)return e;let t=structuredClone(e);return t.gateway?.remote&&(t.gateway.remote.token=void 0,t.gateway.remote.password=void 0),t}async function Fn(e){let t=await nt(),n=e.nodeId?.trim()||t.nodeId;n!==t.nodeId&&(t.nodeId=n);let r=e.displayName?.trim()||t.displayName||await oe();t.displayName=r;let i={host:e.gatewayHost,port:e.gatewayPort,tls:e.gatewayTls??b().gateway?.tls?.enabled??!1,tlsFingerprint:e.gatewayTlsFingerprint};t.gateway=i,await tt(t);let a=b(),o=y(a.browser,a),c=a.nodeHost?.browserProxy?.enabled!==!1&&o.enabled,{token:u,password:d}=await Nn({config:a,env:process.env}),f=i.host??`127.0.0.1`,p=i.port??18789,m=`${i.tls?`wss`:`ws`}://${f}:${p}`,h=Mn();console.log(`node host PATH: ${h}`);let g=new ae({url:m,token:u||void 0,password:d||void 0,instanceId:n,clientName:l.NODE_HOST,clientDisplayName:r,clientVersion:s,platform:process.platform,mode:C.NODE,role:`node`,scopes:[],caps:[`system`,...c?[`browser`]:[]],commands:[...Ye,...Xe,...c?[Ze]:[]],pathEnv:h,permissions:void 0,deviceIdentity:ie(),tlsFingerprint:i.tlsFingerprint,onEvent:e=>{if(e.event!==`node.invoke.request`)return;let t=Tn(e.payload);t&&wn(t,g,_)},onConnectError:e=>{console.error(`node host gateway connect failed: ${e.message}`)},onClose:(e,t)=>{console.error(`node host gateway closed (${e}): ${t}`)}}),_=new jn(async()=>{let e=await g.request(`skills.bins`,{});return Array.isArray(e?.bins)?e.bins.map(e=>String(e)):[]},h);g.start(),await new Promise(()=>{})}async function In(e){let{devMode:t,nodePath:n}=await Ne({env:e.env,runtime:e.runtime,devMode:e.devMode,nodePath:e.nodePath}),{programArguments:r,workingDirectory:i}=await Pe({host:e.host,port:e.port,tls:e.tls,tlsFingerprint:e.tlsFingerprint,nodeId:e.nodeId,displayName:e.displayName,dev:t,runtime:e.runtime,nodePath:n});await Fe({env:e.env,runtime:e.runtime,programArguments:r,warn:e.warn,title:`Node daemon runtime`});let a=Me({env:e.env});return{programArguments:r,workingDirectory:i,environment:a,description:ke({version:a.OPENCLAW_SERVICE_VERSION})}}const Ln=Le;function Rn(e){return Ie(e)}function zn(){return Ke({installCommand:T(`openclaw node install`),startCommand:T(`openclaw node start`),launchAgentPlistPath:`~/Library/LaunchAgents/${Oe()}.plist`,systemdServiceName:De(),windowsTaskName:Ae()})}function Bn(e=process.env){return Ge({env:e,systemdServiceName:De(),windowsTaskName:Ae()})}function Vn(e,t){let n=e.host?.trim()||t?.gateway?.host||`127.0.0.1`,r=Je(e.port);return e.port!==void 0&&r===null?{host:n,port:null}:{host:n,port:r??t?.gateway?.port??18789}}async function Hn(t){let n=!!t.json,{stdout:r,warnings:a,emit:o,fail:s}=Ve({action:`install`,json:n});if(e(process.env)){s(`Nix mode detected; service install is disabled.`);return}let c=await I(),{host:l,port:u}=Vn(t,c);if(!Number.isFinite(u??NaN)||(u??0)<=0){s(`Invalid port`);return}let d=t.runtime?String(t.runtime):Ln;if(!Rn(d)){s(`Invalid --runtime (use "node" or "bun")`);return}let f=A(),p=!1;try{p=await f.isLoaded({env:process.env})}catch(e){s(`Node service check failed: ${String(e)}`);return}if(p&&!t.force){o({ok:!0,result:`already-installed`,message:`Node service already ${f.loadedText}.`,service:k(f,p),warnings:a.length?a:void 0}),n||(i.log(`Node service already ${f.loadedText}.`),i.log(`Reinstall with: ${T(`openclaw node install --force`)}`));return}let m=t.tlsFingerprint?.trim()||c?.gateway?.tlsFingerprint,h=!!t.tls||!!m||!!c?.gateway?.tls,{programArguments:g,workingDirectory:_,environment:v,description:y}=await In({env:process.env,host:l,port:u??18789,tls:h,tlsFingerprint:m||void 0,nodeId:t.nodeId,displayName:t.displayName,runtime:d,warn:e=>{n?a.push(e):i.log(e)}});await Be({serviceNoun:`Node`,service:f,warnings:a,emit:o,fail:s,install:async()=>{await f.install({env:process.env,stdout:r,programArguments:g,workingDirectory:_,environment:v,description:y})}})}async function Un(e={}){return await He({serviceNoun:`Node`,service:A(),opts:e,stopBeforeUninstall:!1,assertNotLoadedAfterUninstall:!1})}async function Wn(e={}){await We({serviceNoun:`Node`,service:A(),renderStartHints:zn,opts:e})}async function Gn(e={}){return await Ue({serviceNoun:`Node`,service:A(),opts:e})}async function Kn(e={}){let t=!!e.json,n=A(),[a,o,s]=await Promise.all([n.isLoaded({env:process.env}).catch(()=>!1),n.readCommand(process.env).catch(()=>null),n.readRuntime(process.env).catch(e=>({status:`unknown`,detail:String(e)}))]),c={service:{...k(n,a),command:o,runtime:s}};if(t){i.log(JSON.stringify(c,null,2));return}let{rich:l,label:u,accent:d,infoText:f,okText:p,warnText:m,errorText:h}=Re(),g=a?p(n.loadedText):m(n.notLoadedText);i.log(`${u(`Service:`)} ${d(n.label)} (${g})`),o?.programArguments?.length&&i.log(`${u(`Command:`)} ${f(o.programArguments.join(` `))}`),o?.sourcePath&&i.log(`${u(`Service file:`)} ${f(o.sourcePath)}`),o?.workingDirectory&&i.log(`${u(`Working dir:`)} ${f(o.workingDirectory)}`);let _=qe(s);if(_){let e=ze(s?.status);i.log(`${u(`Runtime:`)} ${r(l,e,_)}`)}if(!a){i.log(``);for(let e of zn())i.log(`${m(`Start with:`)} ${f(e)}`);return}let v={...process.env,...o?.environment??void 0},y={...v,OPENCLAW_LOG_PREFIX:v.OPENCLAW_LOG_PREFIX??`node`};if(s?.missingUnit){i.error(h(`Service unit not found.`));for(let e of Bn(y))i.error(h(e));return}if(s?.status===`stopped`){i.error(h(`Service is loaded but not running.`));for(let e of Bn(y))i.error(h(e))}}function qn(e,t){return Je(e)??t}function Jn(e){let t=e.command(`node`).description(`Run and manage the headless node host service`).addHelpText(`after`,()=>`\n${n.heading(`Examples:`)}\n${me([[`openclaw node run --host 127.0.0.1 --port 18789`,`Run the node host in the foreground.`],[`openclaw node status`,`Check node host service status.`],[`openclaw node install`,`Install the node host service.`],[`openclaw node restart`,`Restart the installed node host service.`]])}\n\n${n.muted(`Docs:`)} ${pe(`/cli/node`,`docs.openclaw.ai/cli/node`)}\n`);t.command(`run`).description(`Run the headless node host (foreground)`).option(`--host <host>`,`Gateway host`).option(`--port <port>`,`Gateway port`).option(`--tls`,`Use TLS for the gateway connection`,!1).option(`--tls-fingerprint <sha256>`,`Expected TLS certificate fingerprint (sha256)`).option(`--node-id <id>`,`Override node id (clears pairing token)`).option(`--display-name <name>`,`Override node display name`).action(async e=>{let t=await I();await Fn({gatewayHost:e.host?.trim()||t?.gateway?.host||`127.0.0.1`,gatewayPort:qn(e.port,t?.gateway?.port??18789),gatewayTls:!!e.tls||!!e.tlsFingerprint,gatewayTlsFingerprint:e.tlsFingerprint,nodeId:e.nodeId,displayName:e.displayName})}),t.command(`status`).description(`Show node host status`).option(`--json`,`Output JSON`,!1).action(async e=>{await Kn(e)}),t.command(`install`).description(`Install the node host service (launchd/systemd/schtasks)`).option(`--host <host>`,`Gateway host`).option(`--port <port>`,`Gateway port`).option(`--tls`,`Use TLS for the gateway connection`,!1).option(`--tls-fingerprint <sha256>`,`Expected TLS certificate fingerprint (sha256)`).option(`--node-id <id>`,`Override node id (clears pairing token)`).option(`--display-name <name>`,`Override node display name`).option(`--runtime <runtime>`,`Service runtime (node|bun). Default: node`).option(`--force`,`Reinstall/overwrite if already installed`,!1).option(`--json`,`Output JSON`,!1).action(async e=>{await Hn(e)}),t.command(`uninstall`).description(`Uninstall the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Un(e)}),t.command(`stop`).description(`Stop the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Gn(e)}),t.command(`restart`).description(`Restart the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Wn(e)})}export{Jn as registerNodeCli};

package/dist/node-cli-DUI7Zctj.js

@@ -1,2 +1,2 @@
 import{A as e,O as t,p as n}from"./subsystem-BLbY429l.js";import{d as r,g as i}from"./paths-BjD3T_xq.js";import"./boolean-D15s2V33.js";import{Fs as a,Gs as o,Lr as s,Ns as c,Os as l,Ps as u,Qr as d,Rr as f,Us as p,Vs as m,Ws as h,br as g,jo as _,lr as v,qs as y,ur as b,ws as x,zr as S}from"./auth-profiles-BhXA8Jy2.js";import{t as C}from"./command-format-CLxIPuLR.js";import{i as ee}from"./agent-scope-DAWJwFfl.js";import"./utils-CGdo13HV.js";import{s as w}from"./openclaw-root-CnsBf6ZU.js";import"./github-copilot-token-C79yeDKS.js";import{S as te,x as ne}from"./env-overrides-DHtB4kK3.js";import{t as re}from"./version-q3SkUw2K.js";import"./registry-BptzrW8D.js";import"./skills-CKTicUKS.js";import"./frontmatter-C7mzDNxd.js";import"./plugins-DNlgeTTc.js";import{i as T}from"./logger-kQAOe3qp.js";import"./exec-B3eleY5O.js";import{r as ie}from"./windows-spawn-7oINn5ao.js";import"./redact-CnRxK70G.js";import"./path-alias-guards-kY_ZbWs-.js";import"./errors-6SQWM9dj.js";import"./paths-BfjJY2VL.js";import"./chat-envelope-Bznn2SoS.js";import{n as ae,t as oe}from"./with-timeout-c1CzdShT.js";import{n as se,r as ce,t as le}from"./exec-approvals-allowlist-DBh9Pm77.js";import{r as ue,t as de}from"./exec-safe-bin-runtime-policy-Ck3GO5AB.js";import{dn as fe,g as pe}from"./call-BQT0zCgv.js";import{_ as me,g as he,l as ge,v as _e}from"./arg-split-BOqSMBuf.js";import{n as E,o as ve,t as ye}from"./system-run-command-FCk9hSMO.js";import{t as be}from"./connection-auth-BcPbGyxw.js";import{t as xe}from"./links-CBnmRP9D.js";import{t as Se}from"./help-format-B4aEI7V9.js";import{_ as Ce,c as we,f as D,h as Te,m as Ee,n as De,o as Oe,p as ke,r as Ae,v as je}from"./exec-approvals-BXO9Cezj.js";import{t as Me}from"./path-env-emdAQejM.js";import"./issue-format-CpTuk_rQ.js";import{l as Ne,n as Pe,p as Fe,t as Ie}from"./daemon-install-plan.shared-Dx3DBXCG.js";import"./runtime-guard-DX2Ie4ri.js";import{r as Le,t as Re}from"./daemon-runtime-VcpeBRJV.js";import"./systemd-DbevZh65.js";import"./service-DZ9EbS15.js";import{a as ze,f as Be,g as Ve,h as He,i as Ue,m as We,r as Ge,t as Ke}from"./lifecycle-core-B72WHNHV.js";import{c as qe,l as Je,u as Ye}from"./systemd-hints-lXpMy-kY.js";import{t as Xe}from"./parse-port-JVwkxcZ8.js";import{i as Ze,n as Qe,t as $e}from"./node-commands-DdkziOTx.js";import{t as O}from"./node-service-C0bl7jcZ.js";import{spawn as et,spawnSync as tt}from"node:child_process";import k from"node:path";import A from"node:fs";import j from"node:fs/promises";import M from"node:crypto";function nt(){return k.join(i(),`node.json`)}function N(e){let t={version:1,nodeId:``,token:e?.token,displayName:e?.displayName,gateway:e?.gateway};return e?.version===1&&typeof e.nodeId==`string`&&(t.nodeId=e.nodeId.trim()),t.nodeId||=M.randomUUID(),t}async function P(){let e=nt();try{let t=await j.readFile(e,`utf8`);return N(JSON.parse(t))}catch{return null}}async function rt(e){await g(nt(),e,{mode:384})}async function it(){let e=N(await P());return await rt(e),e}async function at(e){let{socketPath:t,token:n,request:r}=e;if(!t||!n)return null;let i=e.timeoutMs??2e4,a=JSON.stringify(r),o=M.randomBytes(16).toString(`hex`),s=Date.now(),c=M.createHmac(`sha256`,n).update(`${o}:${s}:${a}`).digest(`hex`);return await je({socketPath:t,payload:JSON.stringify({type:`exec`,id:M.randomUUID(),nonce:o,ts:s,hmac:c,requestJson:a}),timeoutMs:i,accept:e=>{let t=e;if(t?.type===`exec-res`)return t.ok===!0&&t.payload?{ok:!0,payload:t.payload}:t.ok===!1&&t.error?{ok:!1,error:t.error}:null}})}const ot=10*1024*1024;function st(e){return Array.isArray(e)?e.map(e=>e.trim()).filter(Boolean):[]}function ct(){let e=_().nodeHost?.browserProxy,t=st(e?.allowProfiles);return{enabled:e?.enabled!==!1,allowProfiles:t}}let F=null;async function lt(){return F||(F=(async()=>{let e=_();if(!d(e.browser,e).enabled||!await S())throw Error(`browser control disabled`)})(),F)}function I(e){let{allowProfiles:t,profile:n}=e;return t.length?n?t.includes(n.trim()):!1:!0}function ut(e){let t=new Set,n=typeof e==`object`&&e?e:null;if(!n)return[];typeof n.path==`string`&&n.path.trim()&&t.add(n.path.trim()),typeof n.imagePath==`string`&&n.imagePath.trim()&&t.add(n.imagePath.trim());let r=n.download;if(r&&typeof r==`object`){let e=r.path;typeof e==`string`&&e.trim()&&t.add(e.trim())}return[...t]}async function dt(e){let t=await j.stat(e).catch(()=>null);if(!t||!t.isFile())return null;if(t.size>ot)throw Error(`browser proxy file exceeds ${Math.round(ot/(1024*1024))}MB`);let n=await j.readFile(e),r=await ie({buffer:n,filePath:e});return{path:e,base64:n.toString(`base64`),mimeType:r}}function ft(e){if(!e)throw Error(`INVALID_REQUEST: paramsJSON required`);return JSON.parse(e)}function pt(e){return typeof e==`number`&&Number.isFinite(e)?Math.max(1,Math.floor(e)):2e4}function mt(e){return String(e).includes(`browser proxy request timed out`)}function ht(e){return e===`/act`||e===`/navigate`||e===`/pdf`||e===`/screenshot`||e===`/snapshot`}async function gt(e){let t=e.profile?{profile:e.profile}:{};try{let n=await oe(n=>e.dispatcher.dispatch({method:`GET`,path:`/`,query:t,signal:n}),750,`browser proxy status`);if(n.status>=400||!n.body||typeof n.body!=`object`)return null;let r=n.body;return{running:r.running,cdpHttp:r.cdpHttp,cdpReady:r.cdpReady,cdpUrl:r.cdpUrl}}catch{return null}}function _t(e){let t=[`browser proxy timed out for ${e.method} ${e.path} after ${e.timeoutMs}ms`,e.wsBacked?`ws-backed browser action`:`browser action`];if(e.profile&&t.push(`profile=${e.profile}`),e.status){let n=[`running=${String(e.status.running)}`,`cdpHttp=${String(e.status.cdpHttp)}`,`cdpReady=${String(e.status.cdpReady)}`];typeof e.status.cdpUrl==`string`&&e.status.cdpUrl.trim()&&n.push(`cdpUrl=${e.status.cdpUrl}`),t.push(`status(${n.join(`, `)})`)}return t.join(`; `)}async function vt(e){let t=ft(e),n=typeof t.path==`string`?t.path.trim():``;if(!n)throw Error(`INVALID_REQUEST: path required`);let r=ct();if(!r.enabled)throw Error(`UNAVAILABLE: node browser proxy disabled`);await lt();let i=_(),a=d(i.browser,i),o=typeof t.profile==`string`?t.profile.trim():``,c=r.allowProfiles;if(c.length>0){if(n!==`/profiles`){if(!I({allowProfiles:c,profile:o||a.defaultProfile}))throw Error(`INVALID_REQUEST: browser profile not allowed`)}else if(o&&!I({allowProfiles:c,profile:o}))throw Error(`INVALID_REQUEST: browser profile not allowed`)}let l=typeof t.method==`string`?t.method.toUpperCase():`GET`,u=n.startsWith(`/`)?n:`/${n}`,p=t.body,m=pt(t.timeoutMs),h={};o&&(h.profile=o);let g=t.query??{};for(let[e,t]of Object.entries(g))t!=null&&(h[e]=typeof t==`string`?t:String(t));let v=s(f()),y;try{y=await oe(e=>v.dispatch({method:l===`DELETE`?`DELETE`:l===`POST`?`POST`:`GET`,path:u,query:h,body:p,signal:e}),m,`browser proxy request`)}catch(e){if(!mt(e))throw e;let t=o||a.defaultProfile,n=await gt({dispatcher:v,profile:u===`/profiles`?void 0:t});throw Error(_t({method:l,path:u,profile:u===`/profiles`?void 0:t||void 0,timeoutMs:m,wsBacked:ht(u),status:n}),{cause:e})}if(y.status>=400){let e=y.body&&typeof y.body==`object`&&`error`in y.body?String(y.body.error):`HTTP ${y.status}`;throw Error(e)}let b=y.body;if(c.length>0&&u===`/profiles`){let e=typeof b==`object`&&b?b:{};e.profiles=(Array.isArray(e.profiles)?e.profiles:[]).filter(e=>{if(!e||typeof e!=`object`)return!1;let t=e.name;return typeof t==`string`&&c.includes(t)})}let x,S=ut(b);if(S.length>0){let e=await Promise.all(S.map(async e=>{try{let t=await dt(e);if(!t)throw Error(`file not found`);return t}catch(t){throw Error(`browser proxy file read failed for ${e}: ${String(t)}`,{cause:t})}}));e.length>0&&(x=e)}let C=x?{result:b,files:x}:{result:b};return JSON.stringify(C)}function yt(e){return e===`allow-once`||e===`allow-always`?e:null}function bt(e){return e?.windowsShellWrapperBlocked?`SYSTEM_RUN_DENIED: allowlist miss (Windows shell wrappers like cmd.exe /c require approval; approve once/always or run with --ask on-miss|always)`:e?.shellWrapperBlocked?`SYSTEM_RUN_DENIED: allowlist miss (shell wrappers like sh/bash/zsh -c require approval; approve once/always or run with --ask on-miss|always)`:`SYSTEM_RUN_DENIED: allowlist miss`}function xt(e){let t=e.security===`allowlist`&&e.shellWrapperInvocation,n=t&&e.isWindows&&e.cmdInvocation,r=t?!1:e.analysisOk,i=t?!1:e.allowlistSatisfied,a=e.approvalDecision!==null||e.approved===!0;if(e.security===`deny`)return{allowed:!1,eventReason:`security=deny`,errorMessage:`SYSTEM_RUN_DISABLED: security=deny`,analysisOk:r,allowlistSatisfied:i,shellWrapperBlocked:t,windowsShellWrapperBlocked:n,requiresAsk:!1,approvalDecision:e.approvalDecision,approvedByAsk:a};let o=Ee({ask:e.ask,security:e.security,analysisOk:r,allowlistSatisfied:i});return o&&!a?{allowed:!1,eventReason:`approval-required`,errorMessage:`SYSTEM_RUN_DENIED: approval required`,analysisOk:r,allowlistSatisfied:i,shellWrapperBlocked:t,windowsShellWrapperBlocked:n,requiresAsk:o,approvalDecision:e.approvalDecision,approvedByAsk:a}:e.security===`allowlist`&&(!r||!i)&&!a?{allowed:!1,eventReason:`allowlist-miss`,errorMessage:bt({shellWrapperBlocked:t,windowsShellWrapperBlocked:n}),analysisOk:r,allowlistSatisfied:i,shellWrapperBlocked:t,windowsShellWrapperBlocked:n,requiresAsk:o,approvalDecision:e.approvalDecision,approvedByAsk:a}:{allowed:!0,analysisOk:r,allowlistSatisfied:i,shellWrapperBlocked:t,windowsShellWrapperBlocked:n,requiresAsk:o,approvalDecision:e.approvalDecision,approvedByAsk:a}}function St(e){if(e.shellCommand){let t=se({command:e.shellCommand,allowlist:e.approvals.allowlist,safeBins:e.safeBins,safeBinProfiles:e.safeBinProfiles,cwd:e.cwd,env:e.env,trustedSafeBinDirs:e.trustedSafeBinDirs,skillBins:e.skillBins,autoAllowSkills:e.autoAllowSkills,platform:process.platform});return{analysisOk:t.analysisOk,allowlistMatches:t.allowlistMatches,allowlistSatisfied:e.security===`allowlist`&&t.analysisOk?t.allowlistSatisfied:!1,segments:t.segments}}let t=x({argv:e.argv,cwd:e.cwd,env:e.env}),n=le({analysis:t,allowlist:e.approvals.allowlist,safeBins:e.safeBins,safeBinProfiles:e.safeBinProfiles,cwd:e.cwd,trustedSafeBinDirs:e.trustedSafeBinDirs,skillBins:e.skillBins,autoAllowSkills:e.autoAllowSkills});return{analysisOk:t.ok,allowlistMatches:n.allowlistMatches,allowlistSatisfied:e.security===`allowlist`&&t.ok?n.allowlistSatisfied:!1,segments:t.segments}}function Ct(e){if(e.security!==`allowlist`||e.policy.approvedByAsk||e.shellCommand||!e.policy.analysisOk||!e.policy.allowlistSatisfied||e.segments.length!==1)return;let t=l(e.segments[0]);return t&&t.length>0?t:null}function wt(e){let t=e.plannedAllowlistArgv??e.argv;return e.security===`allowlist`&&e.isWindows&&!e.policy.approvedByAsk&&e.shellCommand&&e.policy.analysisOk&&e.policy.allowlistSatisfied&&e.segments.length===1&&e.segments[0]?.argv.length>0&&(t=e.segments[0].argv),t}function Tt(e){if(!e.truncated)return;let t=`... (truncated)`;e.stderr.trim().length>0?e.stderr=`${e.stderr}\n${t}`:e.stdout=`${e.stdout}\n${t}`}const Et=[/^(?:node|nodejs)$/,/^perl$/,/^php$/,/^python(?:\d+(?:\.\d+)*)?$/,/^ruby$/],Dt=new Set([`esno`,`jiti`,`ts-node`,`ts-node-esm`,`tsx`,`vite-node`]),Ot=new Set([`add`,`audit`,`completions`,`create`,`exec`,`help`,`init`,`install`,`link`,`outdated`,`patch`,`pm`,`publish`,`remove`,`repl`,`run`,`test`,`unlink`,`update`,`upgrade`,`x`]),L=new Set(`--backend.--bunfig.--conditions.--config.--console-depth.--cwd.--define.--elide-lines.--env-file.--extension-order.--filter.--hot.--inspect.--inspect-brk.--inspect-wait.--install.--jsx-factory.--jsx-fragment.--jsx-import-source.--loader.--origin.--port.--preload.--smol.--tsconfig-override.-c.-e.-p.-r`.split(`.`)),kt=new Set([`--cached-only`,`--cert`,`--config`,`--env-file`,`--ext`,`--harmony-import-attributes`,`--import-map`,`--inspect`,`--inspect-brk`,`--inspect-wait`,`--location`,`--log-level`,`--lock`,`--node-modules-dir`,`--no-check`,`--preload`,`--reload`,`--seed`,`--strace-ops`,`--unstable-bare-node-builtins`,`--v8-flags`,`--watch`,`--watch-exclude`,`-L`]);function R(e){return typeof e==`string`&&e.trim()||null}function At(e){let t=k.resolve(e),n=[],r=t;for(;;){n.unshift(r);let e=k.dirname(r);if(e===r)return n;r=e}}function jt(e){try{return A.accessSync(e,A.constants.W_OK),!0}catch{return!1}}function Mt(e){for(let t of At(e))try{if(!A.lstatSync(t).isSymbolicLink())continue;if(jt(k.dirname(t)))return!0}catch{return!0}return!1}function Nt(e){return e.shellCommand===null?(e.wrapperChain?.length??0)===0:!1}function z(e){return M.createHash(`sha256`).update(A.readFileSync(e)).digest(`hex`)}function Pt(e){return e.startsWith(`.`)||e.startsWith(`/`)||e.startsWith(`\\`)||e.includes(`/`)||e.includes(`\\`)||k.extname(e).length>0}function B(e,t){if(!e)return!1;try{return A.statSync(k.resolve(t??process.cwd(),e)).isFile()}catch{return!1}}function V(e){let t=e,n=0;for(;;){let e=p(t);if(e.kind===`unwrapped`){n+=t.length-e.argv.length,t=e.argv;continue}let r=h(t);if(r.kind===`unwrapped`){n+=t.length-r.argv.length,t=r.argv;continue}return{argv:t,baseIndex:n}}}function Ft(e){if(y(e,o,{allowCombinedC:!0}).valueTokenIndex!==null)return null;let t=!1;for(let n=1;n<e.length;n+=1){let r=e[n]?.trim()??``;if(r){if(r===`-`)return null;if(!t&&r===`--`){t=!0;continue}if(!t&&r===`-s`)return null;if(!(!t&&r.startsWith(`-`)))return n}}return null}function H(e){let t=!1;for(let n=e.startIndex;n<e.argv.length;n+=1){let r=e.argv[n]?.trim()??``;if(r){if(t)return B(r,e.cwd)?n:null;if(r===`--`){t=!0;continue}if(r===`-`)return null;if(r.startsWith(`-`)){!r.includes(`=`)&&e.optionsWithValue?.has(r)&&(n+=1);continue}return B(r,e.cwd)?n:null}}return null}function It(e){let t=!1;for(let n=e.startIndex;n<e.argv.length;n+=1){let r=e.argv[n]?.trim()??``;if(r){if(t)return n;if(r===`--`){t=!0;continue}if(r===`-`)return null;if(r.startsWith(`-`)){!r.includes(`=`)&&e.optionsWithValue?.has(r)&&(n+=1);continue}return n}}return null}function Lt(e){let t=!1,n=[];for(let r=e.startIndex;r<e.argv.length;r+=1){let i=e.argv[r]?.trim()??``;if(i){if(t){B(i,e.cwd)&&n.push(r);continue}if(i===`--`){t=!0;continue}if(i===`-`)return[];i.startsWith(`-`)||B(i,e.cwd)&&n.push(r)}}return n}function Rt(e){let t=Lt({argv:e.argv,startIndex:1,cwd:e.cwd});return t.length===1?t[0]:null}function zt(e){let t=It({argv:e.argv,startIndex:1,optionsWithValue:L});if(t===null)return null;let n=e.argv[t]?.trim()??``;return n===`run`?H({argv:e.argv,startIndex:t+1,cwd:e.cwd,optionsWithValue:L}):Ot.has(n)||!Pt(n)?null:t}function Bt(e){return(e.argv[1]?.trim()??``)===`run`?H({argv:e.argv,startIndex:2,cwd:e.cwd,optionsWithValue:kt}):null}function U(e){return Dt.has(e)||de(e)}function Vt(e,t){let n=V(e),r=m(n.argv[0]??``);if(!r)return null;if(a.has(r)){let e=Ft(n.argv);return e===null?null:n.baseIndex+e}if(Et.some(e=>e.test(r))){let e=n.argv[1]?.trim()??``;if(e&&e!==`-`&&!e.startsWith(`-`))return n.baseIndex+1}if(r===`bun`){let e=zt({argv:n.argv,cwd:t});if(e!==null)return n.baseIndex+e}if(r===`deno`){let e=Bt({argv:n.argv,cwd:t});if(e!==null)return n.baseIndex+e}if(!U(r))return null;let i=Rt({argv:n.argv,cwd:t});return i===null?null:n.baseIndex+i}function Ht(e){if(e.shellCommand!==null)return!1;let t=m(V(e.argv).argv[0]??``);return!t||a.has(t)?!1:U(t)}function W(e){let t=Vt(e.argv,e.cwd);if(t===null)return Ht({argv:e.argv,shellCommand:e.shellCommand})?{ok:!1,message:`SYSTEM_RUN_DENIED: approval cannot safely bind this interpreter/runtime command`}:{ok:!0,snapshot:null};let n=e.argv[t]?.trim();if(!n)return{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires a stable script operand`};let r=k.resolve(e.cwd??process.cwd(),n),i,a;try{i=A.realpathSync(r),a=A.statSync(i)}catch{return{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires an existing script operand`}}return a.isFile()?{ok:!0,snapshot:{argvIndex:t,path:i,sha256:z(i)}}:{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires a file script operand`}}function G(e){let t=k.resolve(e),n,r,i,a;try{n=A.lstatSync(t),r=A.statSync(t),i=A.realpathSync(t),a=A.statSync(i)}catch{return{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires an existing canonical cwd`}}return r.isDirectory()?Mt(t)?{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires canonical cwd (no symlink path components)`}:n.isSymbolicLink()?{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires canonical cwd (no symlink cwd)`}:!w(r,n)||!w(r,a)||!w(n,a)?{ok:!1,message:`SYSTEM_RUN_DENIED: approval cwd identity mismatch`}:{ok:!0,snapshot:{cwd:i,stat:r}}:{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires cwd to be a directory`}}function Ut(e){let t=G(e.snapshot.cwd);return t.ok?w(e.snapshot.stat,t.snapshot.stat):!1}function Wt(e){let t=e.argv[e.snapshot.argvIndex]?.trim();if(!t)return!1;let n=k.resolve(e.cwd??process.cwd(),t),r;try{r=A.realpathSync(n)}catch{return!1}if(r!==e.snapshot.path)return!1;try{return z(r)===e.snapshot.sha256}catch{return!1}}function Gt(e){if(!e.approvedByAsk)return{ok:!0,argv:e.argv,argvChanged:!1,cwd:e.cwd,approvedCwdSnapshot:void 0};let t=e.cwd,n;if(t){let e=G(t);if(!e.ok)return e;t=e.snapshot.cwd,n=e.snapshot}if(e.argv.length===0)return{ok:!0,argv:e.argv,argvChanged:!1,cwd:t,approvedCwdSnapshot:n};let r=c(e.argv,t);if(!Nt({shellCommand:e.shellCommand,wrapperChain:r?.wrapperChain}))return{ok:!0,argv:e.argv,argvChanged:!1,cwd:t,approvedCwdSnapshot:n};let i=r?.resolvedRealPath??r?.resolvedPath;if(!i)return{ok:!1,message:`SYSTEM_RUN_DENIED: approval requires a stable executable path`};if(i===e.argv[0])return{ok:!0,argv:e.argv,argvChanged:!1,cwd:t,approvedCwdSnapshot:n};let a=[...e.argv];return a[0]=i,{ok:!0,argv:a,argvChanged:!0,cwd:t,approvedCwdSnapshot:n}}function Kt(e){let t=E({command:e.command,rawCommand:e.rawCommand});if(!t.ok)return{ok:!1,message:t.message};if(t.argv.length===0)return{ok:!1,message:`command required`};let n=Gt({approvedByAsk:!0,argv:t.argv,shellCommand:t.shellPayload,cwd:R(e.cwd)??void 0});if(!n.ok)return{ok:!1,message:n.message};let r=ye(n.argv),i=t.previewText?.trim()&&t.previewText.trim()!==r?t.previewText.trim():null,a=W({argv:n.argv,cwd:n.cwd,shellCommand:t.shellPayload});return a.ok?{ok:!0,plan:{argv:n.argv,cwd:n.cwd??null,commandText:r,commandPreview:i,agentId:R(e.agentId),sessionKey:R(e.sessionKey),mutableFileOperand:a.snapshot??void 0}}:{ok:!1,message:a.message}}const K=new Set,qt=`SYSTEM_RUN_DENIED: approval cwd changed before execution`;function Jt(e){K.has(e)||(K.add(e),T(e))}function Yt(e){switch(e){case`security=deny`:case`approval-required`:case`allowlist-miss`:case`execution-plan-miss`:case`companion-unavailable`:case`permission:screenRecording`:return e;default:return`approval-required`}}async function q(e,t,n){await e.sendNodeEvent(e.client,`exec.denied`,e.buildExecEventPayload({sessionKey:t.sessionKey,runId:t.runId,host:`node`,command:t.commandText,reason:n.reason,suppressNotifyOnExit:t.suppressNotifyOnExit})),await e.sendInvokeResult({ok:!1,error:{code:`UNAVAILABLE`,message:n.message}})}async function Xt(e){let t=E({command:e.params.command,rawCommand:e.params.rawCommand});if(!t.ok)return await e.sendInvokeResult({ok:!1,error:{code:`INVALID_REQUEST`,message:t.message}}),null;if(t.argv.length===0)return await e.sendInvokeResult({ok:!1,error:{code:`INVALID_REQUEST`,message:`command required`}}),null;let n=t.shellPayload,r=t.commandText,i=e.params.systemRunPlan===void 0?null:ve(e.params.systemRunPlan);if(e.params.systemRunPlan!==void 0&&!i)return await e.sendInvokeResult({ok:!1,error:{code:`INVALID_REQUEST`,message:`systemRunPlan invalid`}}),null;let a=e.params.agentId?.trim()||void 0,o=e.params.sessionKey?.trim()||`node`,s=e.params.runId?.trim()||M.randomUUID(),c=e.params.suppressNotifyOnExit===!0,l=te({overrides:e.params.env??void 0,shellWrapper:n!==null});return{argv:t.argv,shellPayload:n,commandText:r,commandPreview:t.previewText,approvalPlan:i,agentId:a,sessionKey:o,runId:s,execution:{sessionKey:o,runId:s,commandText:r,suppressNotifyOnExit:c},approvalDecision:yt(e.params.approvalDecision),envOverrides:l,env:e.sanitizeEnv(l),cwd:e.params.cwd?.trim()||void 0,timeoutMs:e.params.timeoutMs??void 0,needsScreenRecording:e.params.needsScreenRecording===!0,approved:e.params.approved===!0,suppressNotifyOnExit:c}}async function Zt(e,t){let n=_(),r=t.agentId?ee(n,t.agentId)?.tools?.exec:void 0,i=e.resolveExecSecurity(r?.security??n.tools?.exec?.security),a=e.resolveExecAsk(r?.ask??n.tools?.exec?.ask),o=Te(t.agentId,{security:i,ask:a}),s=o.agent.security,c=o.agent.ask,l=o.agent.autoAllowSkills,{safeBins:u,safeBinProfiles:d,trustedSafeBinDirs:f}=ue({global:n.tools?.exec,local:r,onWarning:Jt}),p=l?await e.skillBins.current():[],{analysisOk:m,allowlistMatches:h,allowlistSatisfied:g,segments:v}=St({shellCommand:t.shellPayload,argv:t.argv,approvals:o,security:s,safeBins:u,safeBinProfiles:d,trustedSafeBinDirs:f,cwd:t.cwd,env:t.env,skillBins:p,autoAllowSkills:l}),y=process.platform===`win32`,b=t.shellPayload?e.isCmdExeInvocation(v[0]?.argv??[]):e.isCmdExeInvocation(t.argv),x=xt({security:s,ask:c,analysisOk:m,allowlistSatisfied:g,approvalDecision:t.approvalDecision,approved:t.approved,isWindows:y,cmdInvocation:b,shellWrapperInvocation:t.shellPayload!==null});if(m=x.analysisOk,g=x.allowlistSatisfied,!x.allowed)return await q(e,t.execution,{reason:x.eventReason,message:x.errorMessage}),null;if(s===`allowlist`&&t.shellPayload&&!x.approvedByAsk)return await q(e,t.execution,{reason:`approval-required`,message:`SYSTEM_RUN_DENIED: approval required`}),null;let S=Gt({approvedByAsk:x.approvedByAsk,argv:t.argv,shellCommand:t.shellPayload,cwd:t.cwd});if(!S.ok)return await q(e,t.execution,{reason:`approval-required`,message:S.message}),null;let C=x.approvedByAsk?S.approvedCwdSnapshot:void 0;if(x.approvedByAsk&&S.cwd&&!C)return await q(e,t.execution,{reason:`approval-required`,message:qt}),null;let w=Ct({security:s,shellCommand:t.shellPayload,policy:x,segments:v});return w===null?(await q(e,t.execution,{reason:`execution-plan-miss`,message:`SYSTEM_RUN_DENIED: execution plan mismatch`}),null):{...t,argv:S.argv,cwd:S.cwd,approvals:o,security:s,policy:x,allowlistMatches:h,analysisOk:m,allowlistSatisfied:g,segments:v,plannedAllowlistArgv:w??void 0,isWindows:y,approvedCwdSnapshot:C}}async function Qt(e,t){if(t.approvedCwdSnapshot&&!Ut({snapshot:t.approvedCwdSnapshot})){T(`security: system.run approval cwd drift blocked (runId=${t.runId})`),await q(e,t.execution,{reason:`approval-required`,message:qt});return}let n=t.approvalPlan?W({argv:t.argv,cwd:t.cwd,shellCommand:t.shellPayload}):null;if(n&&!n.ok){T(`security: system.run approval script binding blocked (runId=${t.runId})`),await q(e,t.execution,{reason:`approval-required`,message:n.message});return}if(n?.snapshot&&!t.approvalPlan?.mutableFileOperand){T(`security: system.run approval script binding missing (runId=${t.runId})`),await q(e,t.execution,{reason:`approval-required`,message:`SYSTEM_RUN_DENIED: approval missing script operand binding`});return}if(t.approvalPlan?.mutableFileOperand&&!Wt({snapshot:t.approvalPlan.mutableFileOperand,argv:t.argv,cwd:t.cwd})){T(`security: system.run approval script drift blocked (runId=${t.runId})`),await q(e,t.execution,{reason:`approval-required`,message:`SYSTEM_RUN_DENIED: approval script operand changed before execution`});return}if(e.preferMacAppExecHost){let n={command:t.plannedAllowlistArgv??t.argv,rawCommand:t.commandText||null,cwd:t.cwd??null,env:t.envOverrides??null,timeoutMs:t.timeoutMs??null,needsScreenRecording:t.needsScreenRecording,agentId:t.agentId??null,sessionKey:t.sessionKey??null,approvalDecision:t.approvalDecision},r=await e.runViaMacAppExecHost({approvals:t.approvals,request:n});if(!r){if(e.execHostEnforced||!e.execHostFallbackAllowed){await q(e,t.execution,{reason:`companion-unavailable`,message:`COMPANION_APP_UNAVAILABLE: macOS app exec host unreachable`});return}}else if(r.ok){let n=r.payload;await e.sendExecFinishedEvent({sessionKey:t.sessionKey,runId:t.runId,commandText:t.commandText,result:n,suppressNotifyOnExit:t.suppressNotifyOnExit}),await e.sendInvokeResult({ok:!0,payloadJSON:JSON.stringify(n)});return}else{await q(e,t.execution,{reason:Yt(r.error.reason),message:r.error.message});return}}if(t.policy.approvalDecision===`allow-always`&&t.security===`allowlist`&&t.policy.analysisOk){let e=ce({segments:t.segments,cwd:t.cwd,env:t.env,platform:process.platform});for(let n of e)n&&De(t.approvals.file,t.agentId,n)}if(t.allowlistMatches.length>0){let e=new Set;for(let n of t.allowlistMatches)!n?.pattern||e.has(n.pattern)||(e.add(n.pattern),ke(t.approvals.file,t.agentId,n,t.commandText,t.segments[0]?.resolution?.resolvedPath))}if(t.needsScreenRecording){await q(e,t.execution,{reason:`permission:screenRecording`,message:`PERMISSION_MISSING: screenRecording`});return}let r=wt({plannedAllowlistArgv:t.plannedAllowlistArgv,argv:t.argv,security:t.security,isWindows:t.isWindows,policy:t.policy,shellCommand:t.shellPayload,segments:t.segments}),i=await e.runCommand(r,t.cwd,t.env,t.timeoutMs);Tt(i),await e.sendExecFinishedEvent({sessionKey:t.sessionKey,runId:t.runId,commandText:t.commandText,result:i,suppressNotifyOnExit:t.suppressNotifyOnExit}),await e.sendInvokeResult({ok:!0,payloadJSON:JSON.stringify({exitCode:i.exitCode,timedOut:i.timedOut,success:i.success,stdout:i.stdout,stderr:i.stderr,error:i.error??null})})}async function $t(e){let t=await Xt(e);if(!t)return;let n=await Zt(e,t);n&&await Qt(e,n)}const en=2e5,tn={65001:`utf-8`,54936:`gb18030`,936:`gbk`,950:`big5`,932:`shift_jis`,949:`euc-kr`,1252:`windows-1252`};let J;const nn=process.env.OPENCLAW_NODE_EXEC_HOST?.trim().toLowerCase()===`app`,rn=process.env.OPENCLAW_NODE_EXEC_FALLBACK?.trim().toLowerCase()!==`0`,an=process.platform===`darwin`&&nn;function on(e){return e===`deny`||e===`allowlist`||e===`full`?e:`allowlist`}function sn(e){let t=e[0]?.trim();if(!t)return!1;let n=k.win32.basename(t).toLowerCase();return n===`cmd.exe`||n===`cmd`}function cn(e){return e===`off`||e===`on-miss`||e===`always`?e:`on-miss`}function ln(e){return ne({overrides:e,blockPathOverrides:!0})}function un(e,t){return e.length<=t?{text:e,truncated:!1}:{text:`... (truncated) ${e.slice(e.length-t)}`,truncated:!0}}function dn(e){if(!e)return null;let t=e.match(/\b(\d{3,5})\b/);if(!t?.[1])return null;let n=Number.parseInt(t[1],10);return!Number.isFinite(n)||n<=0?null:n}function fn(){if(process.platform!==`win32`)return null;if(J!==void 0)return J;try{let e=tt(`cmd.exe`,[`/d`,`/s`,`/c`,`chcp`],{windowsHide:!0,encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`]}),t=dn(`${e.stdout??``}\n${e.stderr??``}`);J=t===null?null:tn[t]??null}catch{J=null}return J}function pn(e){let t=e.buffer.toString(`utf8`);if((e.platform??process.platform)!==`win32`)return t;let n=e.windowsEncoding??fn();if(!n||n.toLowerCase()===`utf-8`)return t;try{return new TextDecoder(n).decode(e.buffer)}catch{return t}}function mn(e){let t=e.socket?.path?.trim();return{...e,socket:t?{path:t}:void 0}}function hn(e,t){if(!t.exists)return;if(!t.hash)throw Error(`INVALID_REQUEST: exec approvals base hash unavailable; reload and retry`);let n=typeof e.baseHash==`string`?e.baseHash.trim():``;if(!n)throw Error(`INVALID_REQUEST: exec approvals base hash required; reload and retry`);if(n!==t.hash)throw Error(`INVALID_REQUEST: exec approvals changed; reload and retry`)}async function gn(e,t,n,r){return await new Promise(i=>{let a=[],o=[],s=0,c=!1,l=!1,u=!1,d=fn(),f=et(e[0],e.slice(1),{cwd:t,env:n,stdio:[`ignore`,`pipe`,`pipe`],windowsHide:!0}),p=(e,t)=>{if(s>=en){c=!0;return}let n=en-s,r=e.length>n?e.subarray(0,n):e;s+=r.length,t===`stdout`?a.push(r):o.push(r),e.length>n&&(c=!0)};f.stdout?.on(`data`,e=>p(e,`stdout`)),f.stderr?.on(`data`,e=>p(e,`stderr`));let m;r&&r>0&&(m=setTimeout(()=>{l=!0;try{f.kill(`SIGKILL`)}catch{}},r));let h=(e,t)=>{if(u)return;u=!0,m&&clearTimeout(m);let n=pn({buffer:Buffer.concat(a),windowsEncoding:d}),r=pn({buffer:Buffer.concat(o),windowsEncoding:d});i({exitCode:e,timedOut:l,success:e===0&&!l&&!t,stdout:n,stderr:r,error:t??null,truncated:c})};f.on(`error`,e=>{h(void 0,e.message)}),f.on(`exit`,e=>{h(e===null?void 0:e,null)})})}function _n(e){return(e?.PATH??e?.Path??process.env.PATH??process.env.Path??`/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`).split(k.delimiter).filter(Boolean)}function vn(e,t){if(e.includes(`/`)||e.includes(`\\`))return null;let n=process.platform===`win32`?(process.env.PATHEXT??process.env.PathExt??`.EXE;.CMD;.BAT;.COM`).split(`;`).map(e=>e.toLowerCase()):[``];for(let r of _n(t))for(let t of n){let n=k.join(r,e+t);if(A.existsSync(n))return n}return null}async function yn(e,t){let n=e.bins.map(e=>e.trim()).filter(Boolean),r={};for(let e of n){let n=vn(e,t);n&&(r[e]=n)}return{bins:r}}function bn(e){if(!e.output)return e;let t=e.output.trim();if(!t)return e;let{text:n}=un(t,2e4);return{...e,output:n}}async function xn(e){let t=[e.result.stdout,e.result.stderr,e.result.error].filter(Boolean).join(`
-`);await Dn(e.client,`exec.finished`,bn({sessionKey:e.sessionKey,runId:e.runId,host:`node`,command:e.commandText,exitCode:e.result.exitCode??void 0,timedOut:e.result.timedOut,success:e.result.success,output:t,suppressNotifyOnExit:e.suppressNotifyOnExit}))}async function Sn(e){let{approvals:t,request:n}=e;return await at({socketPath:t.socketPath,token:t.token,request:n})}async function Y(e,t,n){await $(e,t,{ok:!0,payloadJSON:JSON.stringify(n)})}async function Cn(e,t,n){await $(e,t,{ok:!0,payloadJSON:n})}async function X(e,t,n,r){await $(e,t,{ok:!1,error:{code:n,message:r}})}async function Z(e,t,n){await X(e,t,`INVALID_REQUEST`,String(n))}async function wn(e,t,n){let r=String(e.command??``);if(r===`system.execApprovals.get`){try{Ae();let n=D();await Y(t,e,{path:n.path,exists:n.exists,hash:n.hash,file:mn(n.file)})}catch(n){let r=String(n);await X(t,e,r.toLowerCase().includes(`timed out`)?`TIMEOUT`:`INVALID_REQUEST`,r)}return}if(r===`system.execApprovals.set`){try{let n=Q(e.paramsJSON);if(!n.file||typeof n.file!=`object`)throw Error(`INVALID_REQUEST: exec approvals file required`);Ae();let r=D();hn(n,r),Ce(Oe({normalized:we(n.file),current:r.file}));let i=D();await Y(t,e,{path:i.path,exists:i.exists,hash:i.hash,file:mn(i.file)})}catch(n){await Z(t,e,n)}return}if(r===`system.which`){try{let n=Q(e.paramsJSON);if(!Array.isArray(n.bins))throw Error(`INVALID_REQUEST: bins required`);await Y(t,e,await yn(n,ln(void 0)))}catch(n){await Z(t,e,n)}return}if(r===`browser.proxy`){try{await Cn(t,e,await vt(e.paramsJSON))}catch(n){await Z(t,e,n)}return}if(r===`system.run.prepare`){try{let n=Kt(Q(e.paramsJSON));if(!n.ok){await X(t,e,`INVALID_REQUEST`,n.message);return}await Y(t,e,{plan:n.plan})}catch(n){await Z(t,e,n)}return}if(r!==`system.run`){await X(t,e,`UNAVAILABLE`,`command not supported`);return}let i;try{i=Q(e.paramsJSON)}catch(n){await Z(t,e,n);return}if(!Array.isArray(i.command)||i.command.length===0){await X(t,e,`INVALID_REQUEST`,`command required`);return}await $t({client:t,params:i,skillBins:n,execHostEnforced:nn,execHostFallbackAllowed:rn,resolveExecSecurity:on,resolveExecAsk:cn,isCmdExeInvocation:sn,sanitizeEnv:ln,runCommand:gn,runViaMacAppExecHost:Sn,sendNodeEvent:Dn,buildExecEventPayload:bn,sendInvokeResult:async n=>{await $(t,e,n)},sendExecFinishedEvent:async({sessionKey:e,runId:n,commandText:r,result:i})=>{await xn({client:t,sessionKey:e,runId:n,commandText:r,result:i})},preferMacAppExecHost:an})}function Q(e){if(!e)throw Error(`INVALID_REQUEST: paramsJSON required`);return JSON.parse(e)}function Tn(e){if(!e||typeof e!=`object`)return null;let t=e,n=typeof t.id==`string`?t.id.trim():``,r=typeof t.nodeId==`string`?t.nodeId.trim():``,i=typeof t.command==`string`?t.command.trim():``;return!n||!r||!i?null:{id:n,nodeId:r,command:i,paramsJSON:typeof t.paramsJSON==`string`?t.paramsJSON:t.params===void 0?null:JSON.stringify(t.params),timeoutMs:typeof t.timeoutMs==`number`?t.timeoutMs:null,idempotencyKey:typeof t.idempotencyKey==`string`?t.idempotencyKey:null}}async function $(e,t,n){try{await e.request(`node.invoke.result`,En(t,n))}catch{}}function En(e,t){let n={id:e.id,nodeId:e.nodeId,ok:t.ok};return t.payload!==void 0&&(n.payload=t.payload),typeof t.payloadJSON==`string`&&(n.payloadJSON=t.payloadJSON),t.error&&(n.error=t.error),n}async function Dn(e,t,n){try{await e.request(`node.event`,{event:t,payloadJSON:n?JSON.stringify(n):null})}catch{}}const On=`/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`;function kn(e,t){return e.includes(`/`)||e.includes(`\\`)?null:u(e,t)??null}function An(e,t){let n=[],r=new Set;for(let i of e){let e=i.trim();if(!e)continue;let a=kn(e,t);if(!a)continue;let o=`${e}\u0000${a}`;r.has(o)||(r.add(o),n.push({name:e,resolvedPath:a}))}return n.toSorted((e,t)=>e.name.localeCompare(t.name)||e.resolvedPath.localeCompare(t.resolvedPath))}var jn=class{constructor(e,t){this.bins=[],this.lastRefresh=0,this.ttlMs=9e4,this.fetch=e,this.pathEnv=t}async current(e=!1){return(e||Date.now()-this.lastRefresh>this.ttlMs)&&await this.refresh(),this.bins}async refresh(){try{this.bins=An(await this.fetch(),this.pathEnv),this.lastRefresh=Date.now()}catch{this.lastRefresh||(this.bins=[])}}};function Mn(){Me({pathEnv:process.env.PATH??``});let e=process.env.PATH??``;return e.trim()?e:(process.env.PATH=On,On)}async function Nn(e){return await be({config:(e.config.gateway?.mode===`remote`?`remote`:`local`)==`local`?Pn(e.config):e.config,env:e.env,includeLegacyEnv:!1,localTokenPrecedence:`env-first`,localPasswordPrecedence:`env-first`,remoteTokenPrecedence:`env-first`,remotePasswordPrecedence:`env-first`})}function Pn(e){if(!e.gateway?.remote?.token&&!e.gateway?.remote?.password)return e;let t=structuredClone(e);return t.gateway?.remote&&(t.gateway.remote.token=void 0,t.gateway.remote.password=void 0),t}async function Fn(e){let t=await it(),n=e.nodeId?.trim()||t.nodeId;n!==t.nodeId&&(t.nodeId=n);let r=e.displayName?.trim()||t.displayName||await ae();t.displayName=r;let i={host:e.gatewayHost,port:e.gatewayPort,tls:e.gatewayTls??_().gateway?.tls?.enabled??!1,tlsFingerprint:e.gatewayTlsFingerprint};t.gateway=i,await rt(t);let a=_(),o=d(a.browser,a),s=a.nodeHost?.browserProxy?.enabled!==!1&&o.enabled,{token:c,password:l}=await Nn({config:a,env:process.env}),u=i.host??`127.0.0.1`,f=i.port??18789,p=`${i.tls?`wss`:`ws`}://${u}:${f}`,m=Mn();console.log(`node host PATH: ${m}`);let h=new pe({url:p,token:c||void 0,password:l||void 0,instanceId:n,clientName:b.NODE_HOST,clientDisplayName:r,clientVersion:re,platform:process.platform,mode:v.NODE,role:`node`,scopes:[],caps:[`system`,...s?[`browser`]:[]],commands:[...Ze,...Qe,...s?[$e]:[]],pathEnv:m,permissions:void 0,deviceIdentity:fe(),tlsFingerprint:i.tlsFingerprint,onEvent:e=>{if(e.event!==`node.invoke.request`)return;let t=Tn(e.payload);t&&wn(t,h,g)},onConnectError:e=>{console.error(`node host gateway connect failed: ${e.message}`)},onClose:(e,t)=>{console.error(`node host gateway closed (${e}): ${t}`)}}),g=new jn(async()=>{let e=await h.request(`skills.bins`,{});return Array.isArray(e?.bins)?e.bins.map(e=>String(e)):[]},m);h.start(),await new Promise(()=>{})}async function In(e){let{devMode:t,nodePath:n}=await Pe({env:e.env,runtime:e.runtime,devMode:e.devMode,nodePath:e.nodePath}),{programArguments:r,workingDirectory:i}=await Fe({host:e.host,port:e.port,tls:e.tls,tlsFingerprint:e.tlsFingerprint,nodeId:e.nodeId,displayName:e.displayName,dev:t,runtime:e.runtime,nodePath:n});await Ie({env:e.env,runtime:e.runtime,programArguments:r,warn:e.warn,title:`Node daemon runtime`});let a=Ne({env:e.env});return{programArguments:r,workingDirectory:i,environment:a,description:ge({version:a.OPENCLAW_SERVICE_VERSION})}}const Ln=Re;function Rn(e){return Le(e)}function zn(){return Je({installCommand:C(`openclaw node install`),startCommand:C(`openclaw node start`),launchAgentPlistPath:`~/Library/LaunchAgents/${he()}.plist`,systemdServiceName:me(),windowsTaskName:_e()})}function Bn(e=process.env){return qe({env:e,systemdServiceName:me(),windowsTaskName:_e()})}function Vn(e,t){let n=e.host?.trim()||t?.gateway?.host||`127.0.0.1`,r=Xe(e.port);return e.port!==void 0&&r===null?{host:n,port:null}:{host:n,port:r??t?.gateway?.port??18789}}async function Hn(e){let t=!!e.json,{stdout:i,warnings:a,emit:o,fail:s}=He({action:`install`,json:t});if(r(process.env)){s(`Nix mode detected; service install is disabled.`);return}let c=await P(),{host:l,port:u}=Vn(e,c);if(!Number.isFinite(u??NaN)||(u??0)<=0){s(`Invalid port`);return}let d=e.runtime?String(e.runtime):Ln;if(!Rn(d)){s(`Invalid --runtime (use "node" or "bun")`);return}let f=O(),p=!1;try{p=await f.isLoaded({env:process.env})}catch(e){s(`Node service check failed: ${String(e)}`);return}if(p&&!e.force){o({ok:!0,result:`already-installed`,message:`Node service already ${f.loadedText}.`,service:We(f,p),warnings:a.length?a:void 0}),t||(n.log(`Node service already ${f.loadedText}.`),n.log(`Reinstall with: ${C(`openclaw node install --force`)}`));return}let m=e.tlsFingerprint?.trim()||c?.gateway?.tlsFingerprint,h=!!e.tls||!!m||!!c?.gateway?.tls,{programArguments:g,workingDirectory:_,environment:v,description:y}=await In({env:process.env,host:l,port:u??18789,tls:h,tlsFingerprint:m||void 0,nodeId:e.nodeId,displayName:e.displayName,runtime:d,warn:e=>{t?a.push(e):n.log(e)}});await Ve({serviceNoun:`Node`,service:f,warnings:a,emit:o,fail:s,install:async()=>{await f.install({env:process.env,stdout:i,programArguments:g,workingDirectory:_,environment:v,description:y})}})}async function Un(e={}){return await Ue({serviceNoun:`Node`,service:O(),opts:e,stopBeforeUninstall:!1,assertNotLoadedAfterUninstall:!1})}async function Wn(e={}){await Ke({serviceNoun:`Node`,service:O(),renderStartHints:zn,opts:e})}async function Gn(e={}){return await Ge({serviceNoun:`Node`,service:O(),opts:e})}async function Kn(e={}){let r=!!e.json,i=O(),[a,o,s]=await Promise.all([i.isLoaded({env:process.env}).catch(()=>!1),i.readCommand(process.env).catch(()=>null),i.readRuntime(process.env).catch(e=>({status:`unknown`,detail:String(e)}))]),c={service:{...We(i,a),command:o,runtime:s}};if(r){n.log(JSON.stringify(c,null,2));return}let{rich:l,label:u,accent:d,infoText:f,okText:p,warnText:m,errorText:h}=ze(),g=a?p(i.loadedText):m(i.notLoadedText);n.log(`${u(`Service:`)} ${d(i.label)} (${g})`),o?.programArguments?.length&&n.log(`${u(`Command:`)} ${f(o.programArguments.join(` `))}`),o?.sourcePath&&n.log(`${u(`Service file:`)} ${f(o.sourcePath)}`),o?.workingDirectory&&n.log(`${u(`Working dir:`)} ${f(o.workingDirectory)}`);let _=Ye(s);if(_){let e=Be(s?.status);n.log(`${u(`Runtime:`)} ${t(l,e,_)}`)}if(!a){n.log(``);for(let e of zn())n.log(`${m(`Start with:`)} ${f(e)}`);return}let v={...process.env,...o?.environment??void 0},y={...v,OPENCLAW_LOG_PREFIX:v.OPENCLAW_LOG_PREFIX??`node`};if(s?.missingUnit){n.error(h(`Service unit not found.`));for(let e of Bn(y))n.error(h(e));return}if(s?.status===`stopped`){n.error(h(`Service is loaded but not running.`));for(let e of Bn(y))n.error(h(e))}}function qn(e,t){return Xe(e)??t}function Jn(t){let n=t.command(`node`).description(`Run and manage the headless node host service`).addHelpText(`after`,()=>`\n${e.heading(`Examples:`)}\n${Se([[`openclaw node run --host 127.0.0.1 --port 18789`,`Run the node host in the foreground.`],[`openclaw node status`,`Check node host service status.`],[`openclaw node install`,`Install the node host service.`],[`openclaw node restart`,`Restart the installed node host service.`]])}\n\n${e.muted(`Docs:`)} ${xe(`/cli/node`,`docs.openclaw.ai/cli/node`)}\n`);n.command(`run`).description(`Run the headless node host (foreground)`).option(`--host <host>`,`Gateway host`).option(`--port <port>`,`Gateway port`).option(`--tls`,`Use TLS for the gateway connection`,!1).option(`--tls-fingerprint <sha256>`,`Expected TLS certificate fingerprint (sha256)`).option(`--node-id <id>`,`Override node id (clears pairing token)`).option(`--display-name <name>`,`Override node display name`).action(async e=>{let t=await P();await Fn({gatewayHost:e.host?.trim()||t?.gateway?.host||`127.0.0.1`,gatewayPort:qn(e.port,t?.gateway?.port??18789),gatewayTls:!!e.tls||!!e.tlsFingerprint,gatewayTlsFingerprint:e.tlsFingerprint,nodeId:e.nodeId,displayName:e.displayName})}),n.command(`status`).description(`Show node host status`).option(`--json`,`Output JSON`,!1).action(async e=>{await Kn(e)}),n.command(`install`).description(`Install the node host service (launchd/systemd/schtasks)`).option(`--host <host>`,`Gateway host`).option(`--port <port>`,`Gateway port`).option(`--tls`,`Use TLS for the gateway connection`,!1).option(`--tls-fingerprint <sha256>`,`Expected TLS certificate fingerprint (sha256)`).option(`--node-id <id>`,`Override node id (clears pairing token)`).option(`--display-name <name>`,`Override node display name`).option(`--runtime <runtime>`,`Service runtime (node|bun). Default: node`).option(`--force`,`Reinstall/overwrite if already installed`,!1).option(`--json`,`Output JSON`,!1).action(async e=>{await Hn(e)}),n.command(`uninstall`).description(`Uninstall the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Un(e)}),n.command(`stop`).description(`Stop the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Gn(e)}),n.command(`restart`).description(`Restart the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Wn(e)})}export{Jn as registerNodeCli};
+`);await Dn(e.client,`exec.finished`,bn({sessionKey:e.sessionKey,runId:e.runId,host:`node`,command:e.commandText,exitCode:e.result.exitCode??void 0,timedOut:e.result.timedOut,success:e.result.success,output:t,suppressNotifyOnExit:e.suppressNotifyOnExit}))}async function Sn(e){let{approvals:t,request:n}=e;return await at({socketPath:t.socketPath,token:t.token,request:n})}async function Y(e,t,n){await $(e,t,{ok:!0,payloadJSON:JSON.stringify(n)})}async function Cn(e,t,n){await $(e,t,{ok:!0,payloadJSON:n})}async function X(e,t,n,r){await $(e,t,{ok:!1,error:{code:n,message:r}})}async function Z(e,t,n){await X(e,t,`INVALID_REQUEST`,String(n))}async function wn(e,t,n){let r=String(e.command??``);if(r===`system.execApprovals.get`){try{Ae();let n=D();await Y(t,e,{path:n.path,exists:n.exists,hash:n.hash,file:mn(n.file)})}catch(n){let r=String(n);await X(t,e,r.toLowerCase().includes(`timed out`)?`TIMEOUT`:`INVALID_REQUEST`,r)}return}if(r===`system.execApprovals.set`){try{let n=Q(e.paramsJSON);if(!n.file||typeof n.file!=`object`)throw Error(`INVALID_REQUEST: exec approvals file required`);Ae();let r=D();hn(n,r),Ce(Oe({normalized:we(n.file),current:r.file}));let i=D();await Y(t,e,{path:i.path,exists:i.exists,hash:i.hash,file:mn(i.file)})}catch(n){await Z(t,e,n)}return}if(r===`system.which`){try{let n=Q(e.paramsJSON);if(!Array.isArray(n.bins))throw Error(`INVALID_REQUEST: bins required`);await Y(t,e,await yn(n,ln(void 0)))}catch(n){await Z(t,e,n)}return}if(r===`browser.proxy`){try{await Cn(t,e,await vt(e.paramsJSON))}catch(n){await Z(t,e,n)}return}if(r===`system.run.prepare`){try{let n=Kt(Q(e.paramsJSON));if(!n.ok){await X(t,e,`INVALID_REQUEST`,n.message);return}await Y(t,e,{plan:n.plan})}catch(n){await Z(t,e,n)}return}if(r!==`system.run`){await X(t,e,`UNAVAILABLE`,`command not supported`);return}let i;try{i=Q(e.paramsJSON)}catch(n){await Z(t,e,n);return}if(!Array.isArray(i.command)||i.command.length===0){await X(t,e,`INVALID_REQUEST`,`command required`);return}await $t({client:t,params:i,skillBins:n,execHostEnforced:nn,execHostFallbackAllowed:rn,resolveExecSecurity:on,resolveExecAsk:cn,isCmdExeInvocation:sn,sanitizeEnv:ln,runCommand:gn,runViaMacAppExecHost:Sn,sendNodeEvent:Dn,buildExecEventPayload:bn,sendInvokeResult:async n=>{await $(t,e,n)},sendExecFinishedEvent:async({sessionKey:e,runId:n,commandText:r,result:i})=>{await xn({client:t,sessionKey:e,runId:n,commandText:r,result:i})},preferMacAppExecHost:an})}function Q(e){if(!e)throw Error(`INVALID_REQUEST: paramsJSON required`);return JSON.parse(e)}function Tn(e){if(!e||typeof e!=`object`)return null;let t=e,n=typeof t.id==`string`?t.id.trim():``,r=typeof t.nodeId==`string`?t.nodeId.trim():``,i=typeof t.command==`string`?t.command.trim():``;return!n||!r||!i?null:{id:n,nodeId:r,command:i,paramsJSON:typeof t.paramsJSON==`string`?t.paramsJSON:t.params===void 0?null:JSON.stringify(t.params),timeoutMs:typeof t.timeoutMs==`number`?t.timeoutMs:null,idempotencyKey:typeof t.idempotencyKey==`string`?t.idempotencyKey:null}}async function $(e,t,n){try{await e.request(`node.invoke.result`,En(t,n))}catch{}}function En(e,t){let n={id:e.id,nodeId:e.nodeId,ok:t.ok};return t.payload!==void 0&&(n.payload=t.payload),typeof t.payloadJSON==`string`&&(n.payloadJSON=t.payloadJSON),t.error&&(n.error=t.error),n}async function Dn(e,t,n){try{await e.request(`node.event`,{event:t,payloadJSON:n?JSON.stringify(n):null})}catch{}}const On=`/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`;function kn(e,t){return e.includes(`/`)||e.includes(`\\`)?null:u(e,t)??null}function An(e,t){let n=[],r=new Set;for(let i of e){let e=i.trim();if(!e)continue;let a=kn(e,t);if(!a)continue;let o=`${e}\u0000${a}`;r.has(o)||(r.add(o),n.push({name:e,resolvedPath:a}))}return n.toSorted((e,t)=>e.name.localeCompare(t.name)||e.resolvedPath.localeCompare(t.resolvedPath))}var jn=class{constructor(e,t){this.bins=[],this.lastRefresh=0,this.ttlMs=9e4,this.fetch=e,this.pathEnv=t}async current(e=!1){return(e||Date.now()-this.lastRefresh>this.ttlMs)&&await this.refresh(),this.bins}async refresh(){try{this.bins=An(await this.fetch(),this.pathEnv),this.lastRefresh=Date.now()}catch{this.lastRefresh||(this.bins=[])}}};function Mn(){Me({pathEnv:process.env.PATH??``});let e=process.env.PATH??``;return e.trim()?e:(process.env.PATH=On,On)}async function Nn(e){return await be({config:(e.config.gateway?.mode===`remote`?`remote`:`local`)==`local`?Pn(e.config):e.config,env:e.env,includeLegacyEnv:!1,localTokenPrecedence:`env-first`,localPasswordPrecedence:`env-first`,remoteTokenPrecedence:`env-first`,remotePasswordPrecedence:`env-first`})}function Pn(e){if(!e.gateway?.remote?.token&&!e.gateway?.remote?.password)return e;let t=structuredClone(e);return t.gateway?.remote&&(t.gateway.remote.token=void 0,t.gateway.remote.password=void 0),t}async function Fn(e){let t=await it(),n=e.nodeId?.trim()||t.nodeId;n!==t.nodeId&&(t.nodeId=n);let r=e.displayName?.trim()||t.displayName||await ae();t.displayName=r;let i={host:e.gatewayHost,port:e.gatewayPort,tls:e.gatewayTls??_().gateway?.tls?.enabled??!1,tlsFingerprint:e.gatewayTlsFingerprint};t.gateway=i,await rt(t);let a=_(),o=d(a.browser,a),s=a.nodeHost?.browserProxy?.enabled!==!1&&o.enabled,{token:c,password:l}=await Nn({config:a,env:process.env}),u=i.host??`127.0.0.1`,f=i.port??18789,p=`${i.tls?`wss`:`ws`}://${u}:${f}`,m=Mn();console.log(`node host PATH: ${m}`);let h=new pe({url:p,token:c||void 0,password:l||void 0,instanceId:n,clientName:b.NODE_HOST,clientDisplayName:r,clientVersion:re,platform:process.platform,mode:v.NODE,role:`node`,scopes:[],caps:[`system`,...s?[`browser`]:[]],commands:[...Ze,...Qe,...s?[$e]:[]],pathEnv:m,permissions:void 0,deviceIdentity:fe(),tlsFingerprint:i.tlsFingerprint,onEvent:e=>{if(e.event!==`node.invoke.request`)return;let t=Tn(e.payload);t&&wn(t,h,g)},onConnectError:e=>{console.error(`node host gateway connect failed: ${e.message}`)},onClose:(e,t)=>{console.error(`node host gateway closed (${e}): ${t}`)}}),g=new jn(async()=>{let e=await h.request(`skills.bins`,{});return Array.isArray(e?.bins)?e.bins.map(e=>String(e)):[]},m);h.start(),await new Promise(()=>{})}async function In(e){let{devMode:t,nodePath:n}=await Pe({env:e.env,runtime:e.runtime,devMode:e.devMode,nodePath:e.nodePath}),{programArguments:r,workingDirectory:i}=await Fe({host:e.host,port:e.port,tls:e.tls,tlsFingerprint:e.tlsFingerprint,nodeId:e.nodeId,displayName:e.displayName,dev:t,runtime:e.runtime,nodePath:n});await Ie({env:e.env,runtime:e.runtime,programArguments:r,warn:e.warn,title:`Node daemon runtime`});let a=Ne({env:e.env});return{programArguments:r,workingDirectory:i,environment:a,description:ge({version:a.OPENCLAW_SERVICE_VERSION})}}const Ln=Re;function Rn(e){return Le(e)}function zn(){return Je({installCommand:C(`openclaw node install`),startCommand:C(`openclaw node start`),launchAgentPlistPath:`~/Library/LaunchAgents/${he()}.plist`,systemdServiceName:me(),windowsTaskName:_e()})}function Bn(e=process.env){return qe({env:e,systemdServiceName:me(),windowsTaskName:_e()})}function Vn(e,t){let n=e.host?.trim()||t?.gateway?.host||`127.0.0.1`,r=Xe(e.port);return e.port!==void 0&&r===null?{host:n,port:null}:{host:n,port:r??t?.gateway?.port??18789}}async function Hn(e){let t=!!e.json,{stdout:i,warnings:a,emit:o,fail:s}=He({action:`install`,json:t});if(r(process.env)){s(`Nix mode detected; service install is disabled.`);return}let c=await P(),{host:l,port:u}=Vn(e,c);if(!Number.isFinite(u??NaN)||(u??0)<=0){s(`Invalid port`);return}let d=e.runtime?String(e.runtime):Ln;if(!Rn(d)){s(`Invalid --runtime (use "node" or "bun")`);return}let f=O(),p=!1;try{p=await f.isLoaded({env:process.env})}catch(e){s(`Node service check failed: ${String(e)}`);return}if(p&&!e.force){o({ok:!0,result:`already-installed`,message:`Node service already ${f.loadedText}.`,service:We(f,p),warnings:a.length?a:void 0}),t||(n.log(`Node service already ${f.loadedText}.`),n.log(`Reinstall with: ${C(`openclaw node install --force`)}`));return}let m=e.tlsFingerprint?.trim()||c?.gateway?.tlsFingerprint,h=!!e.tls||!!m||!!c?.gateway?.tls,{programArguments:g,workingDirectory:_,environment:v,description:y}=await In({env:process.env,host:l,port:u??18789,tls:h,tlsFingerprint:m||void 0,nodeId:e.nodeId,displayName:e.displayName,runtime:d,warn:e=>{t?a.push(e):n.log(e)}});await Ve({serviceNoun:`Node`,service:f,warnings:a,emit:o,fail:s,install:async()=>{await f.install({env:process.env,stdout:i,programArguments:g,workingDirectory:_,environment:v,description:y})}})}async function Un(e={}){return await Ue({serviceNoun:`Node`,service:O(),opts:e,stopBeforeUninstall:!1,assertNotLoadedAfterUninstall:!1})}async function Wn(e={}){await Ke({serviceNoun:`Node`,service:O(),renderStartHints:zn,opts:e})}async function Gn(e={}){return await Ge({serviceNoun:`Node`,service:O(),opts:e})}async function Kn(e={}){let r=!!e.json,i=O(),[a,o,s]=await Promise.all([i.isLoaded({env:process.env}).catch(()=>!1),i.readCommand(process.env).catch(()=>null),i.readRuntime(process.env).catch(e=>({status:`unknown`,detail:String(e)}))]),c={service:{...We(i,a),command:o,runtime:s}};if(r){n.log(JSON.stringify(c,null,2));return}let{rich:l,label:u,accent:d,infoText:f,okText:p,warnText:m,errorText:h}=ze(),g=a?p(i.loadedText):m(i.notLoadedText);n.log(`${u(`Service:`)} ${d(i.label)} (${g})`),o?.programArguments?.length&&n.log(`${u(`Command:`)} ${f(o.programArguments.join(` `))}`),o?.sourcePath&&n.log(`${u(`Service file:`)} ${f(o.sourcePath)}`),o?.workingDirectory&&n.log(`${u(`Working dir:`)} ${f(o.workingDirectory)}`);let _=Ye(s);if(_){let e=Be(s?.status);n.log(`${u(`Runtime:`)} ${t(l,e,_)}`)}if(!a){n.log(``);for(let e of zn())n.log(`${m(`Start with:`)} ${f(e)}`);return}let v={...process.env,...o?.environment??void 0},y={...v,OPENCLAW_LOG_PREFIX:v.OPENCLAW_LOG_PREFIX??`node`};if(s?.missingUnit){n.error(h(`Service unit not found.`));for(let e of Bn(y))n.error(h(e));return}if(s?.status===`stopped`){n.error(h(`Service is loaded but not running.`));for(let e of Bn(y))n.error(h(e))}}function qn(e,t){return Xe(e)??t}function Jn(t){let n=t.command(`node`).description(`Run and manage the headless node host service`).addHelpText(`after`,()=>`\n${e.heading(`Examples:`)}\n${Se([[`openclaw node run --host 127.0.0.1 --port 18789`,`Run the node host in the foreground.`],[`openclaw node status`,`Check node host service status.`],[`openclaw node install`,`Install the node host service.`],[`openclaw node restart`,`Restart the installed node host service.`]])}\n\n${e.muted(`Docs:`)} ${xe(`/cli/node`,`docs.openclaw.ai/cli/node`)}\n`);n.command(`run`).description(`Run the headless node host (foreground)`).option(`--host <host>`,`Gateway host`).option(`--port <port>`,`Gateway port`).option(`--tls`,`Use TLS for the gateway connection`,!1).option(`--tls-fingerprint <sha256>`,`Expected TLS certificate fingerprint (sha256)`).option(`--node-id <id>`,`Override node id (clears pairing token)`).option(`--display-name <name>`,`Override node display name`).action(async e=>{let t=await P();await Fn({gatewayHost:e.host?.trim()||t?.gateway?.host||`127.0.0.1`,gatewayPort:qn(e.port,t?.gateway?.port??18789),gatewayTls:!!e.tls||!!e.tlsFingerprint,gatewayTlsFingerprint:e.tlsFingerprint,nodeId:e.nodeId,displayName:e.displayName})}),n.command(`status`).description(`Show node host status`).option(`--json`,`Output JSON`,!1).action(async e=>{await Kn(e)}),n.command(`install`).description(`Install the node host service (launchd/systemd/schtasks)`).option(`--host <host>`,`Gateway host`).option(`--port <port>`,`Gateway port`).option(`--tls`,`Use TLS for the gateway connection`,!1).option(`--tls-fingerprint <sha256>`,`Expected TLS certificate fingerprint (sha256)`).option(`--node-id <id>`,`Override node id (clears pairing token)`).option(`--display-name <name>`,`Override node display name`).option(`--runtime <runtime>`,`Service runtime (node|bun). Default: node`).option(`--force`,`Reinstall/overwrite if already installed`,!1).option(`--json`,`Output JSON`,!1).action(async e=>{await Hn(e)}),n.command(`uninstall`).description(`Uninstall the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Un(e)}),n.command(`stop`).description(`Stop the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Gn(e)}),n.command(`restart`).description(`Restart the node host service (launchd/systemd/schtasks)`).option(`--json`,`Output JSON`,!1).action(async e=>{await Wn(e)})}export{Jn as registerNodeCli};

package/dist/node-command-policy-Bbmnc16l.js

@@ -1 +1 @@
-import{sn as e}from"./call-BQT0zCgv.js";import{i as t,r as n,t as r}from"./node-commands-DdkziOTx.js";const i=[`canvas.present`,`canvas.hide`,`canvas.navigate`,`canvas.eval`,`canvas.snapshot`,`canvas.a2ui.push`,`canvas.a2ui.pushJSONL`,`canvas.a2ui.reset`],a=[`camera.list`],o=[`camera.snap`,`camera.clip`],s=[`screen.record`],c=[`location.get`],l=[...[`notifications.list`],`notifications.actions`],u=[`device.info`,`device.status`],d=[...u,`device.permissions`,`device.health`],f=[`contacts.search`],p=[`contacts.add`],m=[`calendar.events`],h=[`calendar.add`],g=[`reminders.list`],_=[`reminders.add`],v=[`photos.latest`],y=[`motion.activity`,`motion.pedometer`],b=[`sms.send`],x=[n],S=[...t,n,r],C=[...i,...a,...c,n],w=[...o,...s,...p,...h,..._,...b],T={ios:[...i,...a,...c,...u,...f,...m,...g,...v,...y,...x],android:[...i,...a,...c,...l,n,...d,...f,...m,...g,...v,...y],macos:[...i,...a,...c,...u,...f,...m,...g,...v,...y,...S],linux:[...S],windows:[...S],unknown:[...C]},E=[{id:`ios`,prefixes:[`ios`]},{id:`android`,prefixes:[`android`]},{id:`macos`,prefixes:[`mac`,`darwin`]},{id:`windows`,prefixes:[`win`]},{id:`linux`,prefixes:[`linux`]}],D=[{id:`ios`,tokens:[`iphone`,`ipad`,`ios`]},{id:`android`,tokens:[`android`]},{id:`macos`,tokens:[`mac`]},{id:`windows`,tokens:[`windows`]},{id:`linux`,tokens:[`linux`]}];function O(e){for(let t of E)if(t.prefixes.some(t=>e.startsWith(t)))return t.id}function k(e){for(let t of D)if(t.tokens.some(t=>e.includes(t)))return t.id}function A(t,n){return O(e(t))||(k(e(n))??`unknown`)}function j(e,t){let n=T[A(t?.platform,t?.deviceFamily)]??T.unknown,r=e.gateway?.nodes?.allowCommands??[],i=new Set(e.gateway?.nodes?.denyCommands??[]),a=new Set([...n,...r].map(e=>e.trim()).filter(Boolean));for(let e of i){let t=e.trim();t&&a.delete(t)}return a}function M(e){let t=e.command.trim();if(!t)return{ok:!1,reason:`command required`};if(!e.allowlist.has(t))return{ok:!1,reason:`command not allowlisted`};if(Array.isArray(e.declaredCommands)&&e.declaredCommands.length>0){if(!e.declaredCommands.includes(t))return{ok:!1,reason:`command not declared by node`}}else return{ok:!1,reason:`node did not declare commands`};return{ok:!0}}export{M as n,j as r,w as t};
+import{sn as e}from"./call-BQT0zCgv.js";import{i as t,r as n,t as r}from"./node-commands-DdkziOTx.js";const i=[`canvas.present`,`canvas.hide`,`canvas.navigate`,`canvas.eval`,`canvas.snapshot`,`canvas.a2ui.push`,`canvas.a2ui.pushJSONL`,`canvas.a2ui.reset`],a=[`camera.list`],o=[`camera.snap`,`camera.clip`],s=[`screen.record`],c=[`location.get`],l=[...[`notifications.list`],`notifications.actions`],u=[`device.info`,`device.status`],d=[...u,`device.permissions`,`device.health`],f=[`contacts.search`],p=[`contacts.add`],m=[`calendar.events`],h=[`calendar.add`],g=[`reminders.list`],_=[`reminders.add`],v=[`photos.latest`],y=[`motion.activity`,`motion.pedometer`],b=[`sms.send`],x=[n],S=[...t,n,r],C=[...i,...a,...c,n],w=[...o,...s,...p,...h,..._,...b],T={ios:[...i,...a,...c,...u,...f,...m,...g,...v,...y,...x],android:[...i,...a,...c,...l,n,...d,...f,...m,...g,...v,...y],macos:[...i,...a,...c,...u,...f,...m,...g,...v,...y,...S],linux:[...S],windows:[...S],unknown:[...C]},E=[{id:`ios`,prefixes:[`ios`]},{id:`android`,prefixes:[`android`]},{id:`macos`,prefixes:[`mac`,`darwin`]},{id:`windows`,prefixes:[`win`]},{id:`linux`,prefixes:[`linux`]}],D=[{id:`ios`,tokens:[`iphone`,`ipad`,`ios`]},{id:`android`,tokens:[`android`]},{id:`macos`,tokens:[`mac`]},{id:`windows`,tokens:[`windows`]},{id:`linux`,tokens:[`linux`]}];function O(e){for(let t of E)if(t.prefixes.some(t=>e.startsWith(t)))return t.id}function k(e){for(let t of D)if(t.tokens.some(t=>e.includes(t)))return t.id}function A(t,n){return O(e(t))||(k(e(n))??`unknown`)}function j(e,t){let n=T[A(t?.platform,t?.deviceFamily)]??T.unknown,r=e.gateway?.nodes?.allowCommands??[],i=new Set(e.gateway?.nodes?.denyCommands??[]),a=new Set([...n,...r].map(e=>e.trim()).filter(Boolean));for(let e of i){let t=e.trim();t&&a.delete(t)}return a}function M(e){let t=e.command.trim();if(!t)return{ok:!1,reason:`command required`};if(!e.allowlist.has(t))return{ok:!1,reason:`command not allowlisted`};if(Array.isArray(e.declaredCommands)&&e.declaredCommands.length>0){if(!e.declaredCommands.includes(t))return{ok:!1,reason:`command not declared by node`}}else return{ok:!1,reason:`node did not declare commands`};return{ok:!0}}export{M as n,j as r,w as t};

package/dist/node-command-policy-DgkwfoCs.js

@@ -1 +1 @@
-import{sn as e}from"./call-BA3O_Qpl.js";import{i as t,r as n,t as r}from"./node-commands-8GBOiktk.js";const i=[`canvas.present`,`canvas.hide`,`canvas.navigate`,`canvas.eval`,`canvas.snapshot`,`canvas.a2ui.push`,`canvas.a2ui.pushJSONL`,`canvas.a2ui.reset`],a=[`camera.list`],o=[`camera.snap`,`camera.clip`],s=[`screen.record`],c=[`location.get`],l=[...[`notifications.list`],`notifications.actions`],u=[`device.info`,`device.status`],d=[...u,`device.permissions`,`device.health`],f=[`contacts.search`],p=[`contacts.add`],m=[`calendar.events`],h=[`calendar.add`],g=[`reminders.list`],_=[`reminders.add`],v=[`photos.latest`],y=[`motion.activity`,`motion.pedometer`],b=[`sms.send`],x=[n],S=[...t,n,r],C=[...i,...a,...c,n],w=[...o,...s,...p,...h,..._,...b],T={ios:[...i,...a,...c,...u,...f,...m,...g,...v,...y,...x],android:[...i,...a,...c,...l,n,...d,...f,...m,...g,...v,...y],macos:[...i,...a,...c,...u,...f,...m,...g,...v,...y,...S],linux:[...S],windows:[...S],unknown:[...C]},E=[{id:`ios`,prefixes:[`ios`]},{id:`android`,prefixes:[`android`]},{id:`macos`,prefixes:[`mac`,`darwin`]},{id:`windows`,prefixes:[`win`]},{id:`linux`,prefixes:[`linux`]}],D=[{id:`ios`,tokens:[`iphone`,`ipad`,`ios`]},{id:`android`,tokens:[`android`]},{id:`macos`,tokens:[`mac`]},{id:`windows`,tokens:[`windows`]},{id:`linux`,tokens:[`linux`]}];function O(e){for(let t of E)if(t.prefixes.some(t=>e.startsWith(t)))return t.id}function k(e){for(let t of D)if(t.tokens.some(t=>e.includes(t)))return t.id}function A(t,n){return O(e(t))||(k(e(n))??`unknown`)}function j(e,t){let n=T[A(t?.platform,t?.deviceFamily)]??T.unknown,r=e.gateway?.nodes?.allowCommands??[],i=new Set(e.gateway?.nodes?.denyCommands??[]),a=new Set([...n,...r].map(e=>e.trim()).filter(Boolean));for(let e of i){let t=e.trim();t&&a.delete(t)}return a}function M(e){let t=e.command.trim();if(!t)return{ok:!1,reason:`command required`};if(!e.allowlist.has(t))return{ok:!1,reason:`command not allowlisted`};if(Array.isArray(e.declaredCommands)&&e.declaredCommands.length>0){if(!e.declaredCommands.includes(t))return{ok:!1,reason:`command not declared by node`}}else return{ok:!1,reason:`node did not declare commands`};return{ok:!0}}export{M as n,j as r,w as t};
+import{sn as e}from"./call-BA3O_Qpl.js";import{i as t,r as n,t as r}from"./node-commands-8GBOiktk.js";const i=[`canvas.present`,`canvas.hide`,`canvas.navigate`,`canvas.eval`,`canvas.snapshot`,`canvas.a2ui.push`,`canvas.a2ui.pushJSONL`,`canvas.a2ui.reset`],a=[`camera.list`],o=[`camera.snap`,`camera.clip`],s=[`screen.record`],c=[`location.get`],l=[...[`notifications.list`],`notifications.actions`],u=[`device.info`,`device.status`],d=[...u,`device.permissions`,`device.health`],f=[`contacts.search`],p=[`contacts.add`],m=[`calendar.events`],h=[`calendar.add`],g=[`reminders.list`],_=[`reminders.add`],v=[`photos.latest`],y=[`motion.activity`,`motion.pedometer`],b=[`sms.send`],x=[n],S=[...t,n,r],C=[...i,...a,...c,n],w=[...o,...s,...p,...h,..._,...b],T={ios:[...i,...a,...c,...u,...f,...m,...g,...v,...y,...x],android:[...i,...a,...c,...l,n,...d,...f,...m,...g,...v,...y],macos:[...i,...a,...c,...u,...f,...m,...g,...v,...y,...S],linux:[...S],windows:[...S],unknown:[...C]},E=[{id:`ios`,prefixes:[`ios`]},{id:`android`,prefixes:[`android`]},{id:`macos`,prefixes:[`mac`,`darwin`]},{id:`windows`,prefixes:[`win`]},{id:`linux`,prefixes:[`linux`]}],D=[{id:`ios`,tokens:[`iphone`,`ipad`,`ios`]},{id:`android`,tokens:[`android`]},{id:`macos`,tokens:[`mac`]},{id:`windows`,tokens:[`windows`]},{id:`linux`,tokens:[`linux`]}];function O(e){for(let t of E)if(t.prefixes.some(t=>e.startsWith(t)))return t.id}function k(e){for(let t of D)if(t.tokens.some(t=>e.includes(t)))return t.id}function A(t,n){return O(e(t))||(k(e(n))??`unknown`)}function j(e,t){let n=T[A(t?.platform,t?.deviceFamily)]??T.unknown,r=e.gateway?.nodes?.allowCommands??[],i=new Set(e.gateway?.nodes?.denyCommands??[]),a=new Set([...n,...r].map(e=>e.trim()).filter(Boolean));for(let e of i){let t=e.trim();t&&a.delete(t)}return a}function M(e){let t=e.command.trim();if(!t)return{ok:!1,reason:`command required`};if(!e.allowlist.has(t))return{ok:!1,reason:`command not allowlisted`};if(Array.isArray(e.declaredCommands)&&e.declaredCommands.length>0){if(!e.declaredCommands.includes(t))return{ok:!1,reason:`command not declared by node`}}else return{ok:!1,reason:`node did not declare commands`};return{ok:!0}}export{M as n,j as r,w as t};

package/dist/node-commands-8GBOiktk.js

@@ -1 +1 @@
-const e=[`system.run.prepare`,`system.run`,`system.which`],t=`system.notify`,n=`browser.proxy`,r=[`system.execApprovals.get`,`system.execApprovals.set`];export{e as i,r as n,t as r,n as t};
+const e=[`system.run.prepare`,`system.run`,`system.which`],t=`system.notify`,n=`browser.proxy`,r=[`system.execApprovals.get`,`system.execApprovals.set`];export{e as i,r as n,t as r,n as t};

package/dist/node-commands-DdkziOTx.js

@@ -1 +1 @@
-const e=[`system.run.prepare`,`system.run`,`system.which`],t=`system.notify`,n=`browser.proxy`,r=[`system.execApprovals.get`,`system.execApprovals.set`];export{e as i,r as n,t as r,n as t};
+const e=[`system.run.prepare`,`system.run`,`system.which`],t=`system.notify`,n=`browser.proxy`,r=[`system.execApprovals.get`,`system.execApprovals.set`];export{e as i,r as n,t as r,n as t};

package/dist/node-resolve-B3BJbmQX.js

@@ -1 +1 @@
-function e(e){return typeof e==`object`&&e?e:{}}function t(t){let n=e(t);return{pending:Array.isArray(n.pending)?n.pending:[],paired:Array.isArray(n.paired)?n.paired:[]}}function n(t){let n=e(t);return Array.isArray(n.nodes)?n.nodes:[]}function r(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,`-`).replace(/^-+/,``).replace(/-+$/,``)}function i(e){return e.map(e=>e.displayName||e.remoteIp||e.nodeId).filter(Boolean).join(`, `)}function a(e,t){let n=t.trim();if(!n)return[];let i=r(n);return e.filter(e=>{if(e.nodeId===n||typeof e.remoteIp==`string`&&e.remoteIp===n)return!0;let t=typeof e.displayName==`string`?e.displayName:``;return!!(t&&r(t)===i||n.length>=6&&e.nodeId.startsWith(n))})}function o(e,t){let n=t.trim();if(!n)throw Error(`node required`);let r=a(e,n);if(r.length===1)return r[0]?.nodeId??``;if(r.length===0){let t=i(e);throw Error(`unknown node: ${n}${t?` (known: ${t})`:``}`)}let o=r.filter(e=>e.connected===!0),s=o.length>0?o:r;if(s.length===1)return s[0]?.nodeId??``;throw Error(`ambiguous node: ${n} (matches: ${s.map(e=>e.displayName||e.remoteIp||e.nodeId).join(`, `)})`)}function s(e,t,n={}){let r=String(t??``).trim();if(!r){if(n.allowDefault===!0&&n.pickDefaultNode){let t=n.pickDefaultNode(e);if(t)return t.nodeId}throw Error(`node required`)}return o(e,r)}function c(e,t,n={}){let r=s(e,t,n);return e.find(e=>e.nodeId===r)??{nodeId:r}}export{t as i,s as n,n as r,c as t};
+function e(e){return typeof e==`object`&&e?e:{}}function t(t){let n=e(t);return{pending:Array.isArray(n.pending)?n.pending:[],paired:Array.isArray(n.paired)?n.paired:[]}}function n(t){let n=e(t);return Array.isArray(n.nodes)?n.nodes:[]}function r(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,`-`).replace(/^-+/,``).replace(/-+$/,``)}function i(e){return e.map(e=>e.displayName||e.remoteIp||e.nodeId).filter(Boolean).join(`, `)}function a(e,t){let n=t.trim();if(!n)return[];let i=r(n);return e.filter(e=>{if(e.nodeId===n||typeof e.remoteIp==`string`&&e.remoteIp===n)return!0;let t=typeof e.displayName==`string`?e.displayName:``;return!!(t&&r(t)===i||n.length>=6&&e.nodeId.startsWith(n))})}function o(e,t){let n=t.trim();if(!n)throw Error(`node required`);let r=a(e,n);if(r.length===1)return r[0]?.nodeId??``;if(r.length===0){let t=i(e);throw Error(`unknown node: ${n}${t?` (known: ${t})`:``}`)}let o=r.filter(e=>e.connected===!0),s=o.length>0?o:r;if(s.length===1)return s[0]?.nodeId??``;throw Error(`ambiguous node: ${n} (matches: ${s.map(e=>e.displayName||e.remoteIp||e.nodeId).join(`, `)})`)}function s(e,t,n={}){let r=String(t??``).trim();if(!r){if(n.allowDefault===!0&&n.pickDefaultNode){let t=n.pickDefaultNode(e);if(t)return t.nodeId}throw Error(`node required`)}return o(e,r)}function c(e,t,n={}){let r=s(e,t,n);return e.find(e=>e.nodeId===r)??{nodeId:r}}export{t as i,s as n,n as r,c as t};

package/dist/node-resolve-DLZf3-1V.js

@@ -1 +1 @@
-function e(e){return typeof e==`object`&&e?e:{}}function t(t){let n=e(t);return{pending:Array.isArray(n.pending)?n.pending:[],paired:Array.isArray(n.paired)?n.paired:[]}}function n(t){let n=e(t);return Array.isArray(n.nodes)?n.nodes:[]}function r(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,`-`).replace(/^-+/,``).replace(/-+$/,``)}function i(e){return e.map(e=>e.displayName||e.remoteIp||e.nodeId).filter(Boolean).join(`, `)}function a(e,t){let n=t.trim();if(!n)return[];let i=r(n);return e.filter(e=>{if(e.nodeId===n||typeof e.remoteIp==`string`&&e.remoteIp===n)return!0;let t=typeof e.displayName==`string`?e.displayName:``;return!!(t&&r(t)===i||n.length>=6&&e.nodeId.startsWith(n))})}function o(e,t){let n=t.trim();if(!n)throw Error(`node required`);let r=a(e,n);if(r.length===1)return r[0]?.nodeId??``;if(r.length===0){let t=i(e);throw Error(`unknown node: ${n}${t?` (known: ${t})`:``}`)}let o=r.filter(e=>e.connected===!0),s=o.length>0?o:r;if(s.length===1)return s[0]?.nodeId??``;throw Error(`ambiguous node: ${n} (matches: ${s.map(e=>e.displayName||e.remoteIp||e.nodeId).join(`, `)})`)}function s(e,t,n={}){let r=String(t??``).trim();if(!r){if(n.allowDefault===!0&&n.pickDefaultNode){let t=n.pickDefaultNode(e);if(t)return t.nodeId}throw Error(`node required`)}return o(e,r)}function c(e,t,n={}){let r=s(e,t,n);return e.find(e=>e.nodeId===r)??{nodeId:r}}export{t as i,s as n,n as r,c as t};
+function e(e){return typeof e==`object`&&e?e:{}}function t(t){let n=e(t);return{pending:Array.isArray(n.pending)?n.pending:[],paired:Array.isArray(n.paired)?n.paired:[]}}function n(t){let n=e(t);return Array.isArray(n.nodes)?n.nodes:[]}function r(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,`-`).replace(/^-+/,``).replace(/-+$/,``)}function i(e){return e.map(e=>e.displayName||e.remoteIp||e.nodeId).filter(Boolean).join(`, `)}function a(e,t){let n=t.trim();if(!n)return[];let i=r(n);return e.filter(e=>{if(e.nodeId===n||typeof e.remoteIp==`string`&&e.remoteIp===n)return!0;let t=typeof e.displayName==`string`?e.displayName:``;return!!(t&&r(t)===i||n.length>=6&&e.nodeId.startsWith(n))})}function o(e,t){let n=t.trim();if(!n)throw Error(`node required`);let r=a(e,n);if(r.length===1)return r[0]?.nodeId??``;if(r.length===0){let t=i(e);throw Error(`unknown node: ${n}${t?` (known: ${t})`:``}`)}let o=r.filter(e=>e.connected===!0),s=o.length>0?o:r;if(s.length===1)return s[0]?.nodeId??``;throw Error(`ambiguous node: ${n} (matches: ${s.map(e=>e.displayName||e.remoteIp||e.nodeId).join(`, `)})`)}function s(e,t,n={}){let r=String(t??``).trim();if(!r){if(n.allowDefault===!0&&n.pickDefaultNode){let t=n.pickDefaultNode(e);if(t)return t.nodeId}throw Error(`node required`)}return o(e,r)}function c(e,t,n={}){let r=s(e,t,n);return e.find(e=>e.nodeId===r)??{nodeId:r}}export{t as i,s as n,n as r,c as t};

package/dist/node-service-BRfrNp8l.js

@@ -1 +1 @@
-import{_ as e,c as t,g as n,o as r,s as i,v as a}from"./arg-split-DE5RqDHq.js";import{n as o}from"./service-BtB9epJk.js";function s(o){return{...o,OPENCLAW_LAUNCHD_LABEL:n(),OPENCLAW_SYSTEMD_UNIT:e(),OPENCLAW_WINDOWS_TASK_NAME:a(),OPENCLAW_TASK_SCRIPT_NAME:t,OPENCLAW_LOG_PREFIX:`node`,OPENCLAW_SERVICE_MARKER:i,OPENCLAW_SERVICE_KIND:r}}function c(o){return{...o,env:s(o.env),environment:{...o.environment,OPENCLAW_LAUNCHD_LABEL:n(),OPENCLAW_SYSTEMD_UNIT:e(),OPENCLAW_WINDOWS_TASK_NAME:a(),OPENCLAW_TASK_SCRIPT_NAME:t,OPENCLAW_LOG_PREFIX:`node`,OPENCLAW_SERVICE_MARKER:i,OPENCLAW_SERVICE_KIND:r}}}function l(){let e=o();return{...e,install:async t=>e.install(c(t)),uninstall:async t=>e.uninstall({...t,env:s(t.env)}),stop:async t=>e.stop({...t,env:s(t.env??{})}),restart:async t=>e.restart({...t,env:s(t.env??{})}),isLoaded:async t=>e.isLoaded({env:s(t.env??{})}),readCommand:t=>e.readCommand(s(t)),readRuntime:t=>e.readRuntime(s(t))}}export{l as t};
+import{_ as e,c as t,g as n,o as r,s as i,v as a}from"./arg-split-DE5RqDHq.js";import{n as o}from"./service-BtB9epJk.js";function s(o){return{...o,OPENCLAW_LAUNCHD_LABEL:n(),OPENCLAW_SYSTEMD_UNIT:e(),OPENCLAW_WINDOWS_TASK_NAME:a(),OPENCLAW_TASK_SCRIPT_NAME:t,OPENCLAW_LOG_PREFIX:`node`,OPENCLAW_SERVICE_MARKER:i,OPENCLAW_SERVICE_KIND:r}}function c(o){return{...o,env:s(o.env),environment:{...o.environment,OPENCLAW_LAUNCHD_LABEL:n(),OPENCLAW_SYSTEMD_UNIT:e(),OPENCLAW_WINDOWS_TASK_NAME:a(),OPENCLAW_TASK_SCRIPT_NAME:t,OPENCLAW_LOG_PREFIX:`node`,OPENCLAW_SERVICE_MARKER:i,OPENCLAW_SERVICE_KIND:r}}}function l(){let e=o();return{...e,install:async t=>e.install(c(t)),uninstall:async t=>e.uninstall({...t,env:s(t.env)}),stop:async t=>e.stop({...t,env:s(t.env??{})}),restart:async t=>e.restart({...t,env:s(t.env??{})}),isLoaded:async t=>e.isLoaded({env:s(t.env??{})}),readCommand:t=>e.readCommand(s(t)),readRuntime:t=>e.readRuntime(s(t))}}export{l as t};

package/dist/node-service-C0bl7jcZ.js

@@ -1 +1 @@
-import{_ as e,c as t,g as n,o as r,s as i,v as a}from"./arg-split-BOqSMBuf.js";import{n as o}from"./service-DZ9EbS15.js";function s(o){return{...o,OPENCLAW_LAUNCHD_LABEL:n(),OPENCLAW_SYSTEMD_UNIT:e(),OPENCLAW_WINDOWS_TASK_NAME:a(),OPENCLAW_TASK_SCRIPT_NAME:t,OPENCLAW_LOG_PREFIX:`node`,OPENCLAW_SERVICE_MARKER:i,OPENCLAW_SERVICE_KIND:r}}function c(o){return{...o,env:s(o.env),environment:{...o.environment,OPENCLAW_LAUNCHD_LABEL:n(),OPENCLAW_SYSTEMD_UNIT:e(),OPENCLAW_WINDOWS_TASK_NAME:a(),OPENCLAW_TASK_SCRIPT_NAME:t,OPENCLAW_LOG_PREFIX:`node`,OPENCLAW_SERVICE_MARKER:i,OPENCLAW_SERVICE_KIND:r}}}function l(){let e=o();return{...e,install:async t=>e.install(c(t)),uninstall:async t=>e.uninstall({...t,env:s(t.env)}),stop:async t=>e.stop({...t,env:s(t.env??{})}),restart:async t=>e.restart({...t,env:s(t.env??{})}),isLoaded:async t=>e.isLoaded({env:s(t.env??{})}),readCommand:t=>e.readCommand(s(t)),readRuntime:t=>e.readRuntime(s(t))}}export{l as t};
+import{_ as e,c as t,g as n,o as r,s as i,v as a}from"./arg-split-BOqSMBuf.js";import{n as o}from"./service-DZ9EbS15.js";function s(o){return{...o,OPENCLAW_LAUNCHD_LABEL:n(),OPENCLAW_SYSTEMD_UNIT:e(),OPENCLAW_WINDOWS_TASK_NAME:a(),OPENCLAW_TASK_SCRIPT_NAME:t,OPENCLAW_LOG_PREFIX:`node`,OPENCLAW_SERVICE_MARKER:i,OPENCLAW_SERVICE_KIND:r}}function c(o){return{...o,env:s(o.env),environment:{...o.environment,OPENCLAW_LAUNCHD_LABEL:n(),OPENCLAW_SYSTEMD_UNIT:e(),OPENCLAW_WINDOWS_TASK_NAME:a(),OPENCLAW_TASK_SCRIPT_NAME:t,OPENCLAW_LOG_PREFIX:`node`,OPENCLAW_SERVICE_MARKER:i,OPENCLAW_SERVICE_KIND:r}}}function l(){let e=o();return{...e,install:async t=>e.install(c(t)),uninstall:async t=>e.uninstall({...t,env:s(t.env)}),stop:async t=>e.stop({...t,env:s(t.env??{})}),restart:async t=>e.restart({...t,env:s(t.env??{})}),isLoaded:async t=>e.isLoaded({env:s(t.env??{})}),readCommand:t=>e.readCommand(s(t)),readRuntime:t=>e.readRuntime(s(t))}}export{l as t};

package/dist/node-shell-dXp4vk-i.js

@@ -1 +1 @@
-import{H as e}from"./subsystem-BLbY429l.js";import{bi as t}from"./auth-profiles-BhXA8Jy2.js";import{r as n}from"./command-format-CLxIPuLR.js";import{t as r}from"./fetch-guard-BaRbr_V6.js";import{c as i,l as a,n as o,o as s,t as c}from"./system-run-command-FCk9hSMO.js";import*as l from"node:path";import u from"node:path";import d from"node:fs";import*as f from"node:fs/promises";import{randomUUID as p}from"node:crypto";function m(e){return typeof e==`object`&&e?e:{}}function h(e){return typeof e==`string`?e:void 0}function g(e){return typeof e==`number`&&Number.isFinite(e)?e:void 0}function _(e){return typeof e==`boolean`?e:void 0}function v(t){let n=t.tmpDir??e();return t.tmpDir||d.mkdirSync(n,{recursive:!0,mode:448}),{tmpDir:n,id:t.id??p(),ext:t.ext.startsWith(`.`)?t.ext:`.${t.ext}`}}const y=250*1024*1024;function b(e){let t=m(e),n=h(t.format),r=h(t.base64),i=h(t.url),a=g(t.width),o=g(t.height);if(!n||!r&&!i||a===void 0||o===void 0)throw Error(`invalid camera.snap payload`);return{format:n,...r?{base64:r}:{},...i?{url:i}:{},width:a,height:o}}function x(e){let t=m(e),n=h(t.format),r=h(t.base64),i=h(t.url),a=g(t.durationMs),o=_(t.hasAudio);if(!n||!r&&!i||a===void 0||o===void 0)throw Error(`invalid camera.clip payload`);return{format:n,...r?{base64:r}:{},...i?{url:i}:{},durationMs:a,hasAudio:o}}function S(e){let{tmpDir:t,id:r,ext:i}=v({tmpDir:e.tmpDir,id:e.id,ext:e.ext}),a=e.facing?`-${e.facing}`:``,o=n();return l.join(t,`${o}-camera-${e.kind}${a}-${r}${i}`)}async function C(e,n,i){let a=new URL(n);if(a.protocol!==`https:`)throw Error(`writeUrlToFile: only https URLs are allowed, got ${a.protocol}`);let o=t(i.expectedHost);if(!o)throw Error(`writeUrlToFile: expectedHost is required`);if(t(a.hostname)!==o)throw Error(`writeUrlToFile: url host ${a.hostname} must match node host ${i.expectedHost}`);let s={allowPrivateNetwork:!0,allowedHostnames:[o],hostnameAllowlist:[o]},c=async()=>{},l=0;try{let a=await r({url:n,auditContext:`writeUrlToFile`,policy:s});c=a.release;let u=new URL(a.finalUrl);if(u.protocol!==`https:`)throw Error(`writeUrlToFile: redirect resolved to non-https URL ${a.finalUrl}`);if(t(u.hostname)!==o)throw Error(`writeUrlToFile: redirect host ${u.hostname} must match node host ${i.expectedHost}`);let d=a.response;if(!d.ok)throw Error(`failed to download ${n}: ${d.status} ${d.statusText}`);let p=d.headers.get(`content-length`),m=p?Number.parseInt(p,10):void 0;if(typeof m==`number`&&Number.isFinite(m)&&m>y)throw Error(`writeUrlToFile: content-length ${m} exceeds max ${y}`);let h=d.body;if(!h)throw Error(`failed to download ${n}: empty response body`);let g=await f.open(e,`w`),_;try{let e=h.getReader();for(;;){let{done:t,value:n}=await e.read();if(t)break;if(!(!n||n.byteLength===0)){if(l+=n.byteLength,l>y)throw Error(`writeUrlToFile: downloaded ${l} bytes, exceeds max ${y}`);await g.write(n)}}}catch(e){_=e}finally{await g.close()}if(_)throw await f.unlink(e).catch(()=>{}),_}finally{await c()}return{path:e,bytes:l}}async function w(e,t){let n=Buffer.from(t,`base64`);return await f.writeFile(e,n),{path:e,bytes:n.length}}function T(e){let t=e?.trim();if(!t)throw Error(`camera URL payload requires node remoteIp`);return t}async function E(e){if(e.payload.url){await C(e.filePath,e.payload.url,{expectedHost:T(e.expectedHost)});return}if(e.payload.base64){await w(e.filePath,e.payload.base64);return}throw Error(e.invalidPayloadMessage??`invalid camera payload`)}async function D(e){let t=S({kind:`clip`,facing:e.facing,ext:e.payload.format,tmpDir:e.tmpDir,id:e.id});return await E({filePath:t,payload:e.payload,expectedHost:e.expectedHost,invalidPayloadMessage:`invalid camera.clip payload`}),t}function O(e){let t=m(e),n=h(t.format),r=h(t.base64);if(!n||!r)throw Error(`invalid canvas.snapshot payload`);return{format:n,base64:r}}function k(e){let{tmpDir:t,id:r,ext:i}=v(e),a=n();return l.join(t,`${a}-canvas-snapshot-${r}${i}`)}function A(e){if(!Array.isArray(e)||e.length===0)return;let t={};for(let n of e){if(typeof n!=`string`)continue;let e=n.indexOf(`=`);if(e<=0)continue;let r=n.slice(0,e).trim();r&&(t[r]=n.slice(e+1))}return Object.keys(t).length>0?t:void 0}function j(e){let t=m(e),n=h(t.format),r=h(t.base64);if(!n||!r)throw Error(`invalid screen.record payload`);return{format:n,base64:r,durationMs:typeof t.durationMs==`number`?t.durationMs:void 0,fps:typeof t.fps==`number`?t.fps:void 0,screenIndex:typeof t.screenIndex==`number`?t.screenIndex:void 0,hasAudio:typeof t.hasAudio==`boolean`?t.hasAudio:void 0}}function M(e){let{tmpDir:t,id:n,ext:r}=v(e);return l.join(t,`openclaw-screen-record-${n}${r}`)}async function N(e,t){return w(e,t)}function P(e){return typeof e==`string`?e:``}function F(e,t){let n=i(e);return!n||n===t?null:n}function I(e){if(!e||typeof e!=`object`||Array.isArray(e))return null;let t=e,n=s(t.plan);if(n)return{plan:n};if(!t.plan||typeof t.plan!=`object`||Array.isArray(t.plan))return null;let r=t.plan,o=a(r.argv),c=i(r.rawCommand)??i(t.commandText)??i(t.cmdText);return o.length===0||!c?null:{plan:{argv:o,cwd:i(r.cwd),commandText:c,commandPreview:i(r.commandPreview),agentId:i(r.agentId),sessionKey:i(r.sessionKey)}}}function L(e){let t=(i(e.host)??``)===`node`?s(e.systemRunPlan):null,n=a(e.commandArgv),r=P(e.command),o=t?t.commandText||c(t.argv):r,l=t?F(t.commandPreview??r,o):null,u=t?{...t,commandPreview:l}:null;return{plan:u,commandArgv:u?.argv??(n.length>0?n:void 0),commandText:o,commandPreview:l,cwd:u?.cwd??i(e.cwd),agentId:u?.agentId??i(e.agentId),sessionKey:u?.sessionKey??i(e.sessionKey)}}function R(e){let t=s(e.plan??null);if(t)return{ok:!0,plan:t,argv:[...t.argv],cwd:t.cwd,agentId:t.agentId,sessionKey:t.sessionKey,commandText:t.commandText};let n=o({command:e.command,rawCommand:e.rawCommand});return n.ok?{ok:!0,plan:null,argv:n.argv,cwd:i(e.cwd),agentId:i(e.agentId),sessionKey:i(e.sessionKey),commandText:n.commandText}:{ok:!1,message:n.message,details:n.details}}function z(e){if(`PATH`in e)return`PATH`;for(let t of Object.keys(e))if(t.toUpperCase()===`PATH`)return t;return`PATH`}function B(e){if(!Array.isArray(e))return[];let t=new Set,n=[];for(let r of e){if(typeof r!=`string`)continue;let e=r.trim();!e||t.has(e)||(t.add(e),n.push(e))}return n}function V(e,t){if(t.length===0)return e;let n=(e??``).split(u.delimiter).map(e=>e.trim()).filter(Boolean),r=new Set(t);return[...t,...n.filter(e=>!r.has(e))].join(u.delimiter)}function H(e,t,n){if(!Array.isArray(t)||t.length===0)return;let r=z(e);if(n?.requireExisting&&!e[r])return;let i=V(e[r],t);i&&(e[r]=i)}function U(e,t){return String(t??``).trim().toLowerCase().startsWith(`win`)?[`cmd.exe`,`/d`,`/s`,`/c`,e]:[`/bin/sh`,`-lc`,e]}export{b as _,B as a,E as b,R as c,N as d,A as f,x as g,S as h,V as i,j as l,O as m,H as n,I as o,k as p,z as r,L as s,U as t,M as u,w as v,D as y};
+import{H as e}from"./subsystem-BLbY429l.js";import{bi as t}from"./auth-profiles-BhXA8Jy2.js";import{r as n}from"./command-format-CLxIPuLR.js";import{t as r}from"./fetch-guard-BaRbr_V6.js";import{c as i,l as a,n as o,o as s,t as c}from"./system-run-command-FCk9hSMO.js";import*as l from"node:path";import u from"node:path";import d from"node:fs";import*as f from"node:fs/promises";import{randomUUID as p}from"node:crypto";function m(e){return typeof e==`object`&&e?e:{}}function h(e){return typeof e==`string`?e:void 0}function g(e){return typeof e==`number`&&Number.isFinite(e)?e:void 0}function _(e){return typeof e==`boolean`?e:void 0}function v(t){let n=t.tmpDir??e();return t.tmpDir||d.mkdirSync(n,{recursive:!0,mode:448}),{tmpDir:n,id:t.id??p(),ext:t.ext.startsWith(`.`)?t.ext:`.${t.ext}`}}const y=250*1024*1024;function b(e){let t=m(e),n=h(t.format),r=h(t.base64),i=h(t.url),a=g(t.width),o=g(t.height);if(!n||!r&&!i||a===void 0||o===void 0)throw Error(`invalid camera.snap payload`);return{format:n,...r?{base64:r}:{},...i?{url:i}:{},width:a,height:o}}function x(e){let t=m(e),n=h(t.format),r=h(t.base64),i=h(t.url),a=g(t.durationMs),o=_(t.hasAudio);if(!n||!r&&!i||a===void 0||o===void 0)throw Error(`invalid camera.clip payload`);return{format:n,...r?{base64:r}:{},...i?{url:i}:{},durationMs:a,hasAudio:o}}function S(e){let{tmpDir:t,id:r,ext:i}=v({tmpDir:e.tmpDir,id:e.id,ext:e.ext}),a=e.facing?`-${e.facing}`:``,o=n();return l.join(t,`${o}-camera-${e.kind}${a}-${r}${i}`)}async function C(e,n,i){let a=new URL(n);if(a.protocol!==`https:`)throw Error(`writeUrlToFile: only https URLs are allowed, got ${a.protocol}`);let o=t(i.expectedHost);if(!o)throw Error(`writeUrlToFile: expectedHost is required`);if(t(a.hostname)!==o)throw Error(`writeUrlToFile: url host ${a.hostname} must match node host ${i.expectedHost}`);let s={allowPrivateNetwork:!0,allowedHostnames:[o],hostnameAllowlist:[o]},c=async()=>{},l=0;try{let a=await r({url:n,auditContext:`writeUrlToFile`,policy:s});c=a.release;let u=new URL(a.finalUrl);if(u.protocol!==`https:`)throw Error(`writeUrlToFile: redirect resolved to non-https URL ${a.finalUrl}`);if(t(u.hostname)!==o)throw Error(`writeUrlToFile: redirect host ${u.hostname} must match node host ${i.expectedHost}`);let d=a.response;if(!d.ok)throw Error(`failed to download ${n}: ${d.status} ${d.statusText}`);let p=d.headers.get(`content-length`),m=p?Number.parseInt(p,10):void 0;if(typeof m==`number`&&Number.isFinite(m)&&m>y)throw Error(`writeUrlToFile: content-length ${m} exceeds max ${y}`);let h=d.body;if(!h)throw Error(`failed to download ${n}: empty response body`);let g=await f.open(e,`w`),_;try{let e=h.getReader();for(;;){let{done:t,value:n}=await e.read();if(t)break;if(!(!n||n.byteLength===0)){if(l+=n.byteLength,l>y)throw Error(`writeUrlToFile: downloaded ${l} bytes, exceeds max ${y}`);await g.write(n)}}}catch(e){_=e}finally{await g.close()}if(_)throw await f.unlink(e).catch(()=>{}),_}finally{await c()}return{path:e,bytes:l}}async function w(e,t){let n=Buffer.from(t,`base64`);return await f.writeFile(e,n),{path:e,bytes:n.length}}function T(e){let t=e?.trim();if(!t)throw Error(`camera URL payload requires node remoteIp`);return t}async function E(e){if(e.payload.url){await C(e.filePath,e.payload.url,{expectedHost:T(e.expectedHost)});return}if(e.payload.base64){await w(e.filePath,e.payload.base64);return}throw Error(e.invalidPayloadMessage??`invalid camera payload`)}async function D(e){let t=S({kind:`clip`,facing:e.facing,ext:e.payload.format,tmpDir:e.tmpDir,id:e.id});return await E({filePath:t,payload:e.payload,expectedHost:e.expectedHost,invalidPayloadMessage:`invalid camera.clip payload`}),t}function O(e){let t=m(e),n=h(t.format),r=h(t.base64);if(!n||!r)throw Error(`invalid canvas.snapshot payload`);return{format:n,base64:r}}function k(e){let{tmpDir:t,id:r,ext:i}=v(e),a=n();return l.join(t,`${a}-canvas-snapshot-${r}${i}`)}function A(e){if(!Array.isArray(e)||e.length===0)return;let t={};for(let n of e){if(typeof n!=`string`)continue;let e=n.indexOf(`=`);if(e<=0)continue;let r=n.slice(0,e).trim();r&&(t[r]=n.slice(e+1))}return Object.keys(t).length>0?t:void 0}function j(e){let t=m(e),n=h(t.format),r=h(t.base64);if(!n||!r)throw Error(`invalid screen.record payload`);return{format:n,base64:r,durationMs:typeof t.durationMs==`number`?t.durationMs:void 0,fps:typeof t.fps==`number`?t.fps:void 0,screenIndex:typeof t.screenIndex==`number`?t.screenIndex:void 0,hasAudio:typeof t.hasAudio==`boolean`?t.hasAudio:void 0}}function M(e){let{tmpDir:t,id:n,ext:r}=v(e);return l.join(t,`openclaw-screen-record-${n}${r}`)}async function N(e,t){return w(e,t)}function P(e){return typeof e==`string`?e:``}function F(e,t){let n=i(e);return!n||n===t?null:n}function I(e){if(!e||typeof e!=`object`||Array.isArray(e))return null;let t=e,n=s(t.plan);if(n)return{plan:n};if(!t.plan||typeof t.plan!=`object`||Array.isArray(t.plan))return null;let r=t.plan,o=a(r.argv),c=i(r.rawCommand)??i(t.commandText)??i(t.cmdText);return o.length===0||!c?null:{plan:{argv:o,cwd:i(r.cwd),commandText:c,commandPreview:i(r.commandPreview),agentId:i(r.agentId),sessionKey:i(r.sessionKey)}}}function L(e){let t=(i(e.host)??``)===`node`?s(e.systemRunPlan):null,n=a(e.commandArgv),r=P(e.command),o=t?t.commandText||c(t.argv):r,l=t?F(t.commandPreview??r,o):null,u=t?{...t,commandPreview:l}:null;return{plan:u,commandArgv:u?.argv??(n.length>0?n:void 0),commandText:o,commandPreview:l,cwd:u?.cwd??i(e.cwd),agentId:u?.agentId??i(e.agentId),sessionKey:u?.sessionKey??i(e.sessionKey)}}function R(e){let t=s(e.plan??null);if(t)return{ok:!0,plan:t,argv:[...t.argv],cwd:t.cwd,agentId:t.agentId,sessionKey:t.sessionKey,commandText:t.commandText};let n=o({command:e.command,rawCommand:e.rawCommand});return n.ok?{ok:!0,plan:null,argv:n.argv,cwd:i(e.cwd),agentId:i(e.agentId),sessionKey:i(e.sessionKey),commandText:n.commandText}:{ok:!1,message:n.message,details:n.details}}function z(e){if(`PATH`in e)return`PATH`;for(let t of Object.keys(e))if(t.toUpperCase()===`PATH`)return t;return`PATH`}function B(e){if(!Array.isArray(e))return[];let t=new Set,n=[];for(let r of e){if(typeof r!=`string`)continue;let e=r.trim();!e||t.has(e)||(t.add(e),n.push(e))}return n}function V(e,t){if(t.length===0)return e;let n=(e??``).split(u.delimiter).map(e=>e.trim()).filter(Boolean),r=new Set(t);return[...t,...n.filter(e=>!r.has(e))].join(u.delimiter)}function H(e,t,n){if(!Array.isArray(t)||t.length===0)return;let r=z(e);if(n?.requireExisting&&!e[r])return;let i=V(e[r],t);i&&(e[r]=i)}function U(e,t){return String(t??``).trim().toLowerCase().startsWith(`win`)?[`cmd.exe`,`/d`,`/s`,`/c`,e]:[`/bin/sh`,`-lc`,e]}export{b as _,B as a,E as b,R as c,N as d,A as f,x as g,S as h,V as i,j as l,O as m,H as n,I as o,k as p,z as r,L as s,U as t,M as u,w as v,D as y};

package/dist/nodes-cli-DU13-dCL.js

@@ -1,4 +1,4 @@
 import{A as e,k as t,p as n}from"./subsystem-BLbY429l.js";import"./paths-BjD3T_xq.js";import"./boolean-D15s2V33.js";import{jo as r}from"./auth-profiles-BhXA8Jy2.js";import{f as i,i as a}from"./agent-scope-DAWJwFfl.js";import{b as o,x as s}from"./utils-CGdo13HV.js";import"./openclaw-root-CnsBf6ZU.js";import"./github-copilot-token-C79yeDKS.js";import"./env-overrides-DHtB4kK3.js";import"./version-q3SkUw2K.js";import{t as c}from"./parse-duration-XTjMKl8s.js";import"./registry-BptzrW8D.js";import"./skills-CKTicUKS.js";import"./frontmatter-C7mzDNxd.js";import"./plugins-DNlgeTTc.js";import"./logger-kQAOe3qp.js";import"./exec-B3eleY5O.js";import"./windows-spawn-7oINn5ao.js";import"./redact-CnRxK70G.js";import"./path-alias-guards-kY_ZbWs-.js";import"./errors-6SQWM9dj.js";import"./paths-BfjJY2VL.js";import"./chat-envelope-Bznn2SoS.js";import"./exec-approvals-allowlist-DBh9Pm77.js";import"./fetch-guard-BaRbr_V6.js";import{a as l}from"./call-BQT0zCgv.js";import{n as u}from"./format-relative-DkMjYy7z.js";import{i as d,r as f}from"./node-resolve-DLZf3-1V.js";import{_ as p,b as m,d as h,f as g,g as _,h as v,l as y,m as b,n as x,o as S,p as ee,t as te,u as C,v as w,y as ne}from"./node-shell-dXp4vk-i.js";import{t as T}from"./parse-timeout-DWSGfCkQ.js";import"./system-run-command-FCk9hSMO.js";import{t as re}from"./links-CBnmRP9D.js";import{n as E}from"./cli-utils-BleB1eys.js";import{t as ie}from"./help-format-B4aEI7V9.js";import"./progress-d1m2sqR1.js";import{a as D,d as O,g as ae,i as k,l as A,s as j,t as oe}from"./exec-approvals-BXO9Cezj.js";import{n as M,t as N}from"./table-CR7TFMew.js";import{a as P,i as F,n as I,o as L,r as R,s as z,t as B}from"./rpc-CcrILVsV.js";import V from"node:fs/promises";function H(){let n=t(),r=e=>t=>n?e(t):t;return{rich:n,heading:r(e.heading),ok:r(e.success),warn:r(e.warn),muted:r(e.muted),error:r(e.error)}}function U(e,t){return E(n,t,t=>{let r=String(t),{error:i,warn:a}=H();n.error(i(`nodes ${e} failed: ${r}`));let o=L(r);o&&n.error(a(o)),n.exit(1)})}const W=e=>{let t=String(e??``).trim().toLowerCase();if(t===`front`||t===`back`)return t;throw Error(`invalid facing: ${e} (expected front|back)`)};function G(e){let t=e.command(`camera`).description(`Capture camera media from a paired node`);R(t.command(`list`).description(`List available cameras on a node`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).action(async e=>{await U(`camera list`,async()=>{let t=await I(`node.invoke`,e,B({nodeId:await P(e,String(e.node??``)),command:`camera.list`,params:{}})),r=typeof t==`object`&&t?t:{},i=typeof r.payload==`object`&&r.payload!==null?r.payload:{},a=Array.isArray(i.devices)?i.devices:[];if(e.json){n.log(JSON.stringify(a,null,2));return}if(a.length===0){let{muted:e}=H();n.log(e(`No cameras reported.`));return}let{heading:o,muted:s}=H(),c=N(),l=a.map(e=>({Name:typeof e.name==`string`?e.name:`Unknown Camera`,Position:typeof e.position==`string`?e.position:s(`unspecified`),ID:typeof e.id==`string`?e.id:``}));n.log(o(`Cameras`)),n.log(M({width:c,columns:[{key:`Name`,header:`Name`,minWidth:14,flex:!0},{key:`Position`,header:`Position`,minWidth:10},{key:`ID`,header:`ID`,minWidth:10,flex:!0}],rows:l}).trimEnd())})}),{timeoutMs:6e4}),R(t.command(`snap`).description(`Capture a photo from a node camera (prints MEDIA:<path>)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--facing <front|back|both>`,`Camera facing`,`both`).option(`--device-id <id>`,`Camera device id (from nodes camera list)`).option(`--max-width <px>`,`Max width in px (optional)`).option(`--quality <0-1>`,`JPEG quality (default 0.9)`).option(`--delay-ms <ms>`,`Delay before capture in ms (macOS default 2000)`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 20000)`,`20000`).action(async e=>{await U(`camera snap`,async()=>{let t=await F(e,String(e.node??``)),r=t.nodeId,i=String(e.facing??`both`).trim().toLowerCase(),a=i===`both`?[`front`,`back`]:i===`front`||i===`back`?[i]:(()=>{throw Error(`invalid facing: ${String(e.facing)} (expected front|back|both)`)})(),o=e.maxWidth?Number.parseInt(String(e.maxWidth),10):void 0,c=e.quality?Number.parseFloat(String(e.quality)):void 0,l=e.delayMs?Number.parseInt(String(e.delayMs),10):void 0,u=e.deviceId?String(e.deviceId).trim():void 0;if(u&&a.length>1)throw Error(`facing=both is not allowed when --device-id is set`);let d=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,f=[];for(let n of a){let i=await I(`node.invoke`,e,B({nodeId:r,command:`camera.snap`,params:{facing:n,maxWidth:Number.isFinite(o)?o:void 0,quality:Number.isFinite(c)?c:void 0,format:`jpg`,delayMs:Number.isFinite(l)?l:void 0,deviceId:u||void 0},timeoutMs:d})),a=p((typeof i==`object`&&i?i:{}).payload),s=v({kind:`snap`,facing:n,ext:a.format===`jpeg`?`jpg`:a.format});await m({filePath:s,payload:a,expectedHost:t.remoteIp,invalidPayloadMessage:`invalid camera.snap payload`}),f.push({facing:n,path:s,width:a.width,height:a.height})}if(e.json){n.log(JSON.stringify({files:f},null,2));return}n.log(f.map(e=>`MEDIA:${s(e.path)}`).join(`
 `))})}),{timeoutMs:6e4}),R(t.command(`clip`).description(`Capture a short video clip from a node camera (prints MEDIA:<path>)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--facing <front|back>`,`Camera facing`,`front`).option(`--device-id <id>`,`Camera device id (from nodes camera list)`).option(`--duration <ms|10s|1m>`,`Duration (default 3000ms; supports ms/s/m, e.g. 10s)`,`3000`).option(`--no-audio`,`Disable audio capture`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 90000)`,`90000`).action(async e=>{await U(`camera clip`,async()=>{let t=await F(e,String(e.node??``)),r=t.nodeId,i=W(String(e.facing??`front`)),a=c(String(e.duration??`3000`)),o=e.audio!==!1,l=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,u=e.deviceId?String(e.deviceId).trim():void 0,d=await I(`node.invoke`,e,B({nodeId:r,command:`camera.clip`,params:{facing:i,durationMs:Number.isFinite(a)?a:void 0,includeAudio:o,format:`mp4`,deviceId:u||void 0},timeoutMs:l})),f=_((typeof d==`object`&&d?d:{}).payload),p=await ne({payload:f,facing:i,expectedHost:t.remoteIp});if(e.json){n.log(JSON.stringify({file:{facing:i,path:p,durationMs:f.durationMs,hasAudio:f.hasAudio}},null,2));return}n.log(`MEDIA:${s(p)}`)})}),{timeoutMs:9e4})}const K=[`beginRendering`,`surfaceUpdate`,`dataModelUpdate`,`deleteSurface`,`createSurface`];function q(e){let t=`main`,n=`root`,r=`text`;return[{surfaceUpdate:{surfaceId:t,components:[{id:n,component:{Column:{children:{explicitList:[r]}}}},{id:r,component:{Text:{text:{literalString:e},usageHint:`body`}}}]}},{beginRendering:{surfaceId:t,root:n}}].map(e=>JSON.stringify(e)).join(`
 `)}function se(e){let t=e.split(/\r?\n/),n=[],r=!1,i=!1,a=0;if(t.forEach((e,t)=>{let o=e.trim();if(!o)return;a+=1;let s;try{s=JSON.parse(o)}catch(e){n.push(`line ${t+1}: ${String(e)}`);return}if(!s||typeof s!=`object`||Array.isArray(s)){n.push(`line ${t+1}: expected JSON object`);return}let c=s,l=K.filter(e=>e in c);if(l.length!==1){n.push(`line ${t+1}: expected exactly one action key (${K.join(`, `)})`);return}l[0]===`createSurface`?i=!0:r=!0}),a===0&&n.push(`no JSONL messages found`),r&&i&&n.push(`mixed A2UI v0.8 and v0.9 messages in one file`),n.length>0)throw Error(`Invalid A2UI JSONL:\n- ${n.join(`
-- `)}`);return{version:i?`v0.9`:`v0.8`,messageCount:a}}async function J(e,t,n){let r=await P(e,String(e.node??``)),i=T(e.invokeTimeout);return await I(`node.invoke`,e,B({nodeId:r,command:t,params:n,timeoutMs:typeof i==`number`?i:void 0}))}function ce(e){let t=e.command(`canvas`).description(`Capture or render canvas content from a paired node`);R(t.command(`snapshot`).description(`Capture a canvas snapshot (prints MEDIA:<path>)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--format <png|jpg|jpeg>`,`Image format`,`jpg`).option(`--max-width <px>`,`Max width in px (optional)`).option(`--quality <0-1>`,`JPEG quality (optional)`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 20000)`,`20000`).action(async e=>{await U(`canvas snapshot`,async()=>{let t=String(e.format??`jpg`).trim().toLowerCase(),r=t===`jpg`||t===`jpeg`?`jpeg`:`png`;if(r!==`png`&&r!==`jpeg`)throw Error(`invalid format: ${String(e.format)} (expected png|jpg|jpeg)`);let i=e.maxWidth?Number.parseInt(String(e.maxWidth),10):void 0,a=e.quality?Number.parseFloat(String(e.quality)):void 0,o=await J(e,`canvas.snapshot`,{format:r,maxWidth:Number.isFinite(i)?i:void 0,quality:Number.isFinite(a)?a:void 0}),c=b((typeof o==`object`&&o?o:{}).payload),l=ee({ext:c.format===`jpeg`?`jpg`:c.format});if(await w(l,c.base64),e.json){n.log(JSON.stringify({file:{path:l,format:c.format}},null,2));return}n.log(`MEDIA:${s(l)}`)})}),{timeoutMs:6e4}),R(t.command(`present`).description(`Show the canvas (optionally with a target URL/path)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--target <urlOrPath>`,`Target URL/path (optional)`).option(`--x <px>`,`Placement x coordinate`).option(`--y <px>`,`Placement y coordinate`).option(`--width <px>`,`Placement width`).option(`--height <px>`,`Placement height`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async e=>{await U(`canvas present`,async()=>{let t={x:e.x?Number.parseFloat(e.x):void 0,y:e.y?Number.parseFloat(e.y):void 0,width:e.width?Number.parseFloat(e.width):void 0,height:e.height?Number.parseFloat(e.height):void 0},r={};if(e.target&&(r.url=String(e.target)),(Number.isFinite(t.x)||Number.isFinite(t.y)||Number.isFinite(t.width)||Number.isFinite(t.height))&&(r.placement=t),await J(e,`canvas.present`,r),!e.json){let{ok:e}=H();n.log(e(`canvas present ok`))}})})),R(t.command(`hide`).description(`Hide the canvas`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async e=>{await U(`canvas hide`,async()=>{if(await J(e,`canvas.hide`,void 0),!e.json){let{ok:e}=H();n.log(e(`canvas hide ok`))}})})),R(t.command(`navigate`).description(`Navigate the canvas to a URL`).argument(`<url>`,`Target URL/path`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async(e,t)=>{await U(`canvas navigate`,async()=>{if(await J(t,`canvas.navigate`,{url:e}),!t.json){let{ok:e}=H();n.log(e(`canvas navigate ok`))}})})),R(t.command(`eval`).description(`Evaluate JavaScript in the canvas`).argument(`[js]`,`JavaScript to evaluate`).option(`--js <code>`,`JavaScript to evaluate`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async(e,t)=>{await U(`canvas eval`,async()=>{let r=t.js??e;if(!r)throw Error(`missing --js or <js>`);let i=await J(t,`canvas.eval`,{javaScript:r});if(t.json){n.log(JSON.stringify(i,null,2));return}let a=typeof i==`object`&&i?i.payload:void 0;if(a?.result)n.log(a.result);else{let{ok:e}=H();n.log(e(`canvas eval ok`))}})}));let r=t.command(`a2ui`).description(`Render A2UI content on the canvas`);R(r.command(`push`).description(`Push A2UI JSONL to the canvas`).option(`--jsonl <path>`,`Path to JSONL payload`).option(`--text <text>`,`Render a quick A2UI text payload`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async e=>{await U(`canvas a2ui push`,async()=>{let t=!!e.jsonl,r=typeof e.text==`string`;if(t===r)throw Error(`provide exactly one of --jsonl or --text`);let i=r?q(String(e.text??``)):await V.readFile(String(e.jsonl),`utf8`),{version:a,messageCount:o}=se(i);if(a===`v0.9`)throw Error(`Detected A2UI v0.9 JSONL (createSurface). OpenClaw currently supports v0.8 only.`);if(await J(e,`canvas.a2ui.pushJSONL`,{jsonl:i}),!e.json){let{ok:e}=H();n.log(e(`canvas a2ui push ok (v0.8, ${o} message${o===1?``:`s`})`))}})})),R(r.command(`reset`).description(`Reset A2UI renderer state`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async e=>{await U(`canvas a2ui reset`,async()=>{if(await J(e,`canvas.a2ui.reset`,void 0),!e.json){let{ok:e}=H();n.log(e(`canvas a2ui reset ok`))}})}))}function le(e,t){let n=e?.tools?.exec;if(!t)return n?{security:n.security,ask:n.ask,node:n.node,pathPrepend:n.pathPrepend,safeBins:n.safeBins}:void 0;let r=a(e,t)?.tools?.exec;return{security:r?.security??n?.security,ask:r?.ask??n?.ask,node:r?.node??n?.node,pathPrepend:r?.pathPrepend??n?.pathPrepend,safeBins:r?.safeBins??n?.safeBins}}async function ue(e,t){try{let n=f(await I(`node.list`,e,{})).find(e=>e.nodeId===t);return typeof n?.platform==`string`?n.platform:null}catch{return null}}function de(e){let t=S(e);if(!t)throw Error(`invalid system.run.prepare response`);return t}function fe(e,t){let n=O(t?.security)??`allowlist`,r=O(e.security);if(e.security&&!r)throw Error(`invalid --security (use deny|allowlist|full)`);let i=A(t?.ask)??k().defaults?.ask??`on-miss`,a=A(e.ask);if(e.ask&&!a)throw Error(`invalid --ask (use off|on-miss|always)`);return{security:j(n,r??n),ask:D(i,a??i)}}async function pe(e){let t=g(e.opts.env),n=T(e.opts.commandTimeout),r=T(e.opts.invokeTimeout),i=Array.isArray(e.command)?e.command:[],a;if(e.raw){a=e.raw;let t=await ue(e.opts,e.nodeId);i=te(a,t??void 0)}let o=t?{...t}:void 0;return o&&x(o,e.execDefaults?.pathPrepend,{requireExisting:!0}),{prepared:de((await I(`node.invoke`,e.opts,{nodeId:e.nodeId,command:`system.run.prepare`,params:{command:i,rawCommand:a,cwd:e.opts.cwd,agentId:e.agentId},idempotencyKey:`prepare-${l()}`}))?.payload),nodeEnv:o,timeoutMs:n,invokeTimeout:r}}async function me(e){let t=await I(`exec.approvals.node.get`,e.opts,{nodeId:e.nodeId}),n=t&&typeof t==`object`?t.file:void 0;if(!n||typeof n!=`object`)throw Error(`exec approvals unavailable`);let r=ae({file:n,agentId:e.agentId,overrides:{security:e.security,ask:e.ask}});return{approvals:r,hostSecurity:j(e.security,r.agent.security),hostAsk:D(e.ask,r.agent.ask),askFallback:r.agent.askFallback}}async function he(e){let t=!1,n=null,r=null;if(!(e.hostAsk===`always`||e.hostAsk===`on-miss`))return{approvedByAsk:t,approvalDecision:n,approvalId:r};r=crypto.randomUUID();let i=oe,a=Math.max(T(e.opts.timeout)??0,i+1e4),o=await I(`exec.approval.request`,e.opts,{id:r,systemRunPlan:e.approvalPlan,cwd:e.approvalPlan.cwd,nodeId:e.nodeId,host:`node`,security:e.hostSecurity,ask:e.hostAsk,agentId:e.approvalPlan.agentId??e.agentId,resolvedPath:void 0,sessionKey:e.approvalPlan.sessionKey??void 0,timeoutMs:i},{transportTimeoutMs:a}),s=o&&typeof o==`object`?o.decision??null:null;if(s===`deny`)throw Error(`exec denied: user denied`);if(!s){if(e.askFallback===`full`)t=!0,n=`allow-once`;else if(e.askFallback!==`allowlist`)throw Error(`exec denied: approval required (approval UI not available)`)}return s===`allow-once`&&(t=!0,n=`allow-once`),s===`allow-always`&&(t=!0,n=`allow-always`),{approvedByAsk:t,approvalDecision:n,approvalId:r}}function ge(e){let t={nodeId:e.nodeId,command:`system.run`,params:{command:e.approvalPlan.argv,rawCommand:e.approvalPlan.commandText,cwd:e.approvalPlan.cwd,env:e.nodeEnv,timeoutMs:e.timeoutMs,needsScreenRecording:e.needsScreenRecording},idempotencyKey:String(e.idempotencyKey??l())};return(e.approvalPlan.agentId??e.fallbackAgentId)&&(t.params.agentId=e.approvalPlan.agentId??e.fallbackAgentId),e.approvalPlan.sessionKey&&(t.params.sessionKey=e.approvalPlan.sessionKey),t.params.approved=e.approvedByAsk,e.approvalDecision&&(t.params.approvalDecision=e.approvalDecision),e.approvedByAsk&&e.approvalId&&(t.params.runId=e.approvalId),e.invokeTimeout!==void 0&&(t.timeoutMs=e.invokeTimeout),t}function _e(e){R(e.command(`invoke`).description(`Invoke a command on a paired node`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).requiredOption(`--command <command>`,`Command (e.g. canvas.eval)`).option(`--params <json>`,`JSON object string for params`,`{}`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 15000)`,`15000`).option(`--idempotency-key <key>`,`Idempotency key (optional)`).action(async e=>{await U(`invoke`,async()=>{let t=await P(e,String(e.node??``)),r=String(e.command??``).trim();if(!t||!r){let{error:e}=H();n.error(e(`--node and --command required`)),n.exit(1);return}let i=JSON.parse(String(e.params??`{}`)),a=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,o={nodeId:t,command:r,params:i,idempotencyKey:String(e.idempotencyKey??l())};typeof a==`number`&&Number.isFinite(a)&&(o.timeoutMs=a);let s=await I(`node.invoke`,e,o);n.log(JSON.stringify(s,null,2))})}),{timeoutMs:3e4}),R(e.command(`run`).description(`Run a shell command on a node (mac only)`).option(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--cwd <path>`,`Working directory`).option(`--env <key=val>`,`Environment override (repeatable)`,(e,t=[])=>[...t,e]).option(`--raw <command>`,`Run a raw shell command string (sh -lc / cmd.exe /c)`).option(`--agent <id>`,`Agent id (default: configured default agent)`).option(`--ask <mode>`,`Exec ask mode (off|on-miss|always)`).option(`--security <mode>`,`Exec security mode (deny|allowlist|full)`).option(`--command-timeout <ms>`,`Command timeout (ms)`).option(`--needs-screen-recording`,`Require screen recording permission`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 30000)`,`30000`).argument(`[command...]`,`Command and args`).action(async(e,t)=>{await U(`run`,async()=>{let a=r(),o=t.agent?.trim()||i(a),s=le(a,o),c=typeof t.raw==`string`?t.raw.trim():``;if(c&&Array.isArray(e)&&e.length>0)throw Error(`use --raw or argv, not both`);if(!c&&(!Array.isArray(e)||e.length===0))throw Error(`command required`);let l=String(t.node??``).trim()||s?.node?.trim()||``;if(!l)throw Error(`node required (set --node or tools.exec.node)`);let u=await P(t,l),d=await pe({opts:t,command:e,raw:c,nodeId:u,agentId:o,execDefaults:s}),f=d.prepared.plan,p=fe(t,s),m=await me({opts:t,nodeId:u,agentId:o,security:p.security,ask:p.ask});if(m.hostSecurity===`deny`)throw Error(`exec denied: host=node security=deny`);let h=await he({opts:t,nodeId:u,agentId:o,approvalPlan:f,hostSecurity:m.hostSecurity,hostAsk:m.hostAsk,askFallback:m.askFallback}),g=await I(`node.invoke`,t,ge({nodeId:u,approvalPlan:f,nodeEnv:d.nodeEnv,timeoutMs:d.timeoutMs,invokeTimeout:d.invokeTimeout,approvedByAsk:h.approvedByAsk,approvalDecision:h.approvalDecision,approvalId:h.approvalId,idempotencyKey:t.idempotencyKey,fallbackAgentId:o,needsScreenRecording:t.needsScreenRecording===!0}));if(t.json){n.log(JSON.stringify(g,null,2));return}let _=typeof g==`object`&&g?g.payload:void 0,v=typeof _?.stdout==`string`?_.stdout:``,y=typeof _?.stderr==`string`?_.stderr:``,b=typeof _?.exitCode==`number`?_.exitCode:null,x=_?.timedOut===!0,S=_?.success===!0;if(v&&process.stdout.write(v),y&&process.stderr.write(y),x){let{error:e}=H();n.error(e(`run timed out`)),n.exit(1);return}if(b!==null&&b!==0){let e=L(`${y}\n${v}`);if(e){let{warn:t}=H();n.error(t(e))}}if(b!==null&&b!==0&&!S){let{error:e}=H();n.error(e(`run exit ${b}`)),n.exit(1);return}})}),{timeoutMs:35e3})}function ve(e){R(e.command(`location`).description(`Fetch location from a paired node`).command(`get`).description(`Fetch the current location from a node`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--max-age <ms>`,`Use cached location newer than this (ms)`).option(`--accuracy <coarse|balanced|precise>`,`Desired accuracy (default: balanced/precise depending on node setting)`).option(`--location-timeout <ms>`,`Location fix timeout (ms)`,`10000`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 20000)`,`20000`).action(async e=>{await U(`location get`,async()=>{let t=await P(e,String(e.node??``)),r=e.maxAge?Number.parseInt(String(e.maxAge),10):void 0,i=typeof e.accuracy==`string`?e.accuracy.trim().toLowerCase():void 0,a=i===`coarse`||i===`balanced`||i===`precise`?i:void 0,o=e.locationTimeout?Number.parseInt(String(e.locationTimeout),10):void 0,s=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,c={nodeId:t,command:`location.get`,params:{maxAgeMs:Number.isFinite(r)?r:void 0,desiredAccuracy:a,timeoutMs:Number.isFinite(o)?o:void 0},idempotencyKey:l()};typeof s==`number`&&Number.isFinite(s)&&(c.timeoutMs=s);let u=await I(`node.invoke`,e,c),d=typeof u==`object`&&u?u:{},f=d.payload&&typeof d.payload==`object`?d.payload:{};if(e.json){n.log(JSON.stringify(f,null,2));return}let p=f.lat,m=f.lon,h=f.accuracyMeters;if(typeof p==`number`&&typeof m==`number`){let e=typeof h==`number`?` ±${h.toFixed(1)}m`:``;n.log(`${p},${m}${e}`);return}n.log(JSON.stringify(f))})}),{timeoutMs:3e4})}function ye(e){R(e.command(`notify`).description(`Send a local notification on a node (mac only)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--title <text>`,`Notification title`).option(`--body <text>`,`Notification body`).option(`--sound <name>`,`Notification sound`).option(`--priority <passive|active|timeSensitive>`,`Notification priority`).option(`--delivery <system|overlay|auto>`,`Delivery mode`,`system`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 15000)`,`15000`).action(async e=>{await U(`notify`,async()=>{let t=await P(e,String(e.node??``)),r=String(e.title??``).trim(),i=String(e.body??``).trim();if(!r&&!i)throw Error(`missing --title or --body`);let a=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,o={nodeId:t,command:`system.notify`,params:{title:r,body:i,sound:e.sound,priority:e.priority,delivery:e.delivery},idempotencyKey:String(e.idempotencyKey??l())};typeof a==`number`&&Number.isFinite(a)&&(o.timeoutMs=a);let s=await I(`node.invoke`,e,o);if(e.json){n.log(JSON.stringify(s,null,2));return}let{ok:c}=H();n.log(c(`notify ok`))})}))}function Y(e){let{pending:t,now:n,tableWidth:r,theme:i}=e,a=t.map(e=>({Request:e.requestId,Node:e.displayName?.trim()?e.displayName.trim():e.nodeId,IP:e.remoteIp??``,Requested:typeof e.ts==`number`?u(Math.max(0,n-e.ts)):i.muted(`unknown`),Repair:e.isRepair?i.warn(`yes`):``}));return{heading:i.heading(`Pending`),table:M({width:r,columns:[{key:`Request`,header:`Request`,minWidth:8},{key:`Node`,header:`Node`,minWidth:14,flex:!0},{key:`IP`,header:`IP`,minWidth:10},{key:`Requested`,header:`Requested`,minWidth:12},{key:`Repair`,header:`Repair`,minWidth:6}],rows:a}).trimEnd()}}function X(e){R(e.command(`pending`).description(`List pending pairing requests`).action(async e=>{await U(`pending`,async()=>{let{pending:t}=d(await I(`node.pair.list`,e,{}));if(e.json){n.log(JSON.stringify(t,null,2));return}if(t.length===0){let{muted:e}=H();n.log(e(`No pending pairing requests.`));return}let{heading:r,warn:i,muted:a}=H(),o=N(),s=Y({pending:t,now:Date.now(),tableWidth:o,theme:{heading:r,warn:i,muted:a}});n.log(s.heading),n.log(s.table)})})),R(e.command(`approve`).description(`Approve a pending pairing request`).argument(`<requestId>`,`Pending request id`).action(async(e,t)=>{await U(`approve`,async()=>{let r=await I(`node.pair.approve`,t,{requestId:e});n.log(JSON.stringify(r,null,2))})})),R(e.command(`reject`).description(`Reject a pending pairing request`).argument(`<requestId>`,`Pending request id`).action(async(e,t)=>{await U(`reject`,async()=>{let r=await I(`node.pair.reject`,t,{requestId:e});n.log(JSON.stringify(r,null,2))})})),R(e.command(`rename`).description(`Rename a paired node (display name override)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).requiredOption(`--name <displayName>`,`New display name`).action(async e=>{await U(`rename`,async()=>{let t=await P(e,String(e.node??``)),r=String(e.name??``).trim();if(!t||!r){n.error(`--node and --name required`),n.exit(1);return}let i=await I(`node.rename`,e,{nodeId:t,displayName:r});if(e.json){n.log(JSON.stringify(i,null,2));return}let{ok:a}=H();n.log(a(`node rename ok: ${t} -> ${r}`))})}))}function be(e){if(typeof e!=`string`)return null;let t=e.trim().toLowerCase();return t===`sandbox`||t===`production`?t:null}function xe(e){R(e.command(`push`).description(`Send an APNs test push to an iOS node`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--title <text>`,`Push title`,`OpenClaw`).option(`--body <text>`,`Push body`).option(`--environment <sandbox|production>`,`Override APNs environment`).action(async e=>{await U(`push`,async()=>{let t=await P(e,String(e.node??``)),r=String(e.title??``).trim()||`OpenClaw`,i=String(e.body??``).trim()||`Push test for node ${t}`,a=be(e.environment);if(e.environment&&!a)throw Error(`invalid --environment (use sandbox|production)`);let o={nodeId:t,title:r,body:i};a&&(o.environment=a);let s=await I(`push.test`,e,o);if(e.json){n.log(JSON.stringify(s,null,2));return}let c=typeof s==`object`&&s?s:{},l=c.ok===!0,u=typeof c.status==`number`?c.status:0,d=typeof c.reason==`string`&&c.reason.trim().length>0?c.reason.trim():void 0,f=typeof c.environment==`string`&&c.environment.trim().length>0?c.environment.trim():`unknown`,{ok:p,error:m}=H(),h=l?p:m;n.log(h(`push.test status=${u} ok=${l} env=${f}`)),d&&n.log(`reason: ${d}`)})}),{timeoutMs:25e3})}function Se(e){R(e.command(`screen`).description(`Capture screen recordings from a paired node`).command(`record`).description(`Capture a short screen recording from a node (prints MEDIA:<path>)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--screen <index>`,`Screen index (0 = primary)`,`0`).option(`--duration <ms|10s>`,`Clip duration (ms or 10s)`,`10000`).option(`--fps <fps>`,`Frames per second`,`10`).option(`--no-audio`,`Disable microphone audio capture`).option(`--out <path>`,`Output path`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 120000)`,`120000`).action(async e=>{await U(`screen record`,async()=>{let t=await P(e,String(e.node??``)),r=c(e.duration??``),i=Number.parseInt(String(e.screen??`0`),10),a=Number.parseFloat(String(e.fps??`10`)),o=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,l=await I(`node.invoke`,e,B({nodeId:t,command:`screen.record`,params:{durationMs:Number.isFinite(r)?r:void 0,screenIndex:Number.isFinite(i)?i:void 0,fps:Number.isFinite(a)?a:void 0,format:`mp4`,includeAudio:e.audio!==!1},timeoutMs:o})),u=y((typeof l==`object`&&l?l:{}).payload),d=await h(e.out??C({ext:u.format||`mp4`}),u.base64);if(e.json){n.log(JSON.stringify({file:{path:d.path,durationMs:u.durationMs,fps:u.fps,screenIndex:u.screenIndex,hasAudio:u.hasAudio}},null,2));return}n.log(`MEDIA:${s(d.path)}`)})}),{timeoutMs:18e4})}function Z(e){let t=e.trim();return t?t.toLowerCase().startsWith(`v`)?t:/^\d/.test(t)?`v${t}`:t:e}function Ce(e){let t=e.coreVersion?.trim()||void 0,n=e.uiVersion?.trim()||void 0;if(t||n)return{core:t,ui:n};let r=e.version?.trim();if(!r)return{core:void 0,ui:void 0};let i=e.platform?.trim().toLowerCase()??``;return i===`darwin`||i===`linux`||i===`win32`||i===`windows`?{core:r,ui:void 0}:{core:void 0,ui:r}}function Q(e){let{core:t,ui:n}=Ce(e),r=[];return t&&r.push(`core ${Z(t)}`),n&&r.push(`ui ${Z(n)}`),r.length>0?r.join(` · `):null}function we(e){if(typeof e!=`string`)return null;let t=e.trim();if(!t)return null;let n=t.split(`:`).filter(Boolean);return o(n.length<=3?t:`${n.slice(0,2).join(`:`)}:…:${n.slice(-1)[0]}`)}function $(e,t){if(e==null)return;let r=typeof e==`string`?e.trim():typeof e==`number`?String(e).trim():null;if(r===null){n.error(`${t}: invalid duration value`),n.exit(1);return}if(r)try{return c(r)}catch(e){let r=e instanceof Error?e.message:String(e);n.error(`${t}: ${r}`),n.exit(1);return}}function Te(e){R(e.command(`status`).description(`List known nodes with connection status and capabilities`).option(`--connected`,`Only show connected nodes`).option(`--last-connected <duration>`,`Only show nodes connected within duration (e.g. 24h)`).action(async e=>{await U(`status`,async()=>{let t=!!e.connected,r=$(e.lastConnected,`Invalid --last-connected`),i=await I(`node.list`,e,{}),a=typeof i==`object`&&i?i:{},{ok:o,warn:s,muted:c}=H(),l=N(),p=Date.now(),m=f(i),h=r===void 0?null:new Map(d(await I(`node.pair.list`,e,{})).paired.map(e=>[e.nodeId,e])),g=m.filter(e=>{if(t&&!e.connected)return!1;if(r!==void 0){let t=h?.get(e.nodeId),n=typeof t?.lastConnectedAtMs==`number`?t.lastConnectedAtMs:typeof e.connectedAtMs==`number`?e.connectedAtMs:void 0;if(typeof n!=`number`||p-n>r)return!1}return!0});if(e.json){let e=typeof a.ts==`number`?a.ts:Date.now();n.log(JSON.stringify({...a,ts:e,nodes:g},null,2));return}let _=g.filter(e=>!!e.paired).length,v=g.filter(e=>!!e.connected).length,y=g.length===m.length?``:` (of ${m.length})`;if(n.log(`Known: ${g.length}${y} · Paired: ${_} · Connected: ${v}`),g.length===0)return;let b=g.map(e=>{let t=e.displayName?.trim()?e.displayName.trim():e.nodeId,n=z(e.permissions),r=Q(e),i=we(e.pathEnv),a=[e.deviceFamily?`device: ${e.deviceFamily}`:null,e.modelIdentifier?`hw: ${e.modelIdentifier}`:null,n?`perms: ${n}`:null,r,i?`path: ${i}`:null].filter(Boolean),l=Array.isArray(e.caps)?e.caps.map(String).filter(Boolean).toSorted().join(`, `):`?`,d=e.paired?o(`paired`):s(`unpaired`),f=e.connected?o(`connected`):c(`disconnected`),m=typeof e.connectedAtMs==`number`?` (${u(Math.max(0,p-e.connectedAtMs))})`:``;return{Node:t,ID:e.nodeId,IP:e.remoteIp??``,Detail:a.join(` · `),Status:`${d} · ${f}${m}`,Caps:l}});n.log(M({width:l,columns:[{key:`Node`,header:`Node`,minWidth:14,flex:!0},{key:`ID`,header:`ID`,minWidth:10},{key:`IP`,header:`IP`,minWidth:10},{key:`Detail`,header:`Detail`,minWidth:18,flex:!0},{key:`Status`,header:`Status`,minWidth:18},{key:`Caps`,header:`Caps`,minWidth:12,flex:!0}],rows:b}).trimEnd())})})),R(e.command(`describe`).description(`Describe a node (capabilities + supported invoke commands)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).action(async e=>{await U(`describe`,async()=>{let t=await P(e,String(e.node??``)),r=await I(`node.describe`,e,{nodeId:t});if(e.json){n.log(JSON.stringify(r,null,2));return}let i=typeof r==`object`&&r?r:{},a=typeof i.displayName==`string`?i.displayName:t,o=!!i.connected,s=!!i.paired,c=Array.isArray(i.caps)?i.caps.map(String).filter(Boolean).toSorted():null,l=Array.isArray(i.commands)?i.commands.map(String).filter(Boolean).toSorted():[],u=z(i.permissions),d=typeof i.deviceFamily==`string`?i.deviceFamily:null,f=typeof i.modelIdentifier==`string`?i.modelIdentifier:null,p=typeof i.remoteIp==`string`?i.remoteIp:null,m=typeof i.pathEnv==`string`?i.pathEnv:null,h=Q(i),{heading:g,ok:_,warn:v,muted:y}=H(),b=`${s?_(`paired`):v(`unpaired`)} · ${o?_(`connected`):y(`disconnected`)}`,x=N(),S=[{Field:`ID`,Value:t},a?{Field:`Name`,Value:a}:null,p?{Field:`IP`,Value:p}:null,d?{Field:`Device`,Value:d}:null,f?{Field:`Model`,Value:f}:null,u?{Field:`Perms`,Value:u}:null,h?{Field:`Version`,Value:h}:null,m?{Field:`PATH`,Value:m}:null,{Field:`Status`,Value:b},{Field:`Caps`,Value:c?c.join(`, `):`?`}].filter(Boolean);if(n.log(g(`Node`)),n.log(M({width:x,columns:[{key:`Field`,header:`Field`,minWidth:8},{key:`Value`,header:`Value`,minWidth:24,flex:!0}],rows:S}).trimEnd()),n.log(``),n.log(g(`Commands`)),l.length===0){n.log(y(`- (none reported)`));return}for(let e of l)n.log(`- ${e}`)})})),R(e.command(`list`).description(`List pending and paired nodes`).option(`--connected`,`Only show connected nodes`).option(`--last-connected <duration>`,`Only show nodes connected within duration (e.g. 24h)`).action(async e=>{await U(`list`,async()=>{let t=!!e.connected,r=$(e.lastConnected,`Invalid --last-connected`),{pending:i,paired:a}=d(await I(`node.pair.list`,e,{})),{heading:o,muted:s,warn:c}=H(),l=N(),p=Date.now(),m=t||r!==void 0,h=m?[]:i,g=m?new Map(f(await I(`node.list`,e,{})).map(e=>[e.nodeId,e])):null,_=a.filter(e=>{if(t&&!g?.get(e.nodeId)?.connected)return!1;if(r!==void 0){let t=g?.get(e.nodeId),n=typeof e.lastConnectedAtMs==`number`?e.lastConnectedAtMs:typeof t?.connectedAtMs==`number`?t.connectedAtMs:void 0;if(typeof n!=`number`||p-n>r)return!1}return!0}),v=m&&_.length!==a.length?` (of ${a.length})`:``;if(n.log(`Pending: ${h.length} · Paired: ${_.length}${v}`),e.json){n.log(JSON.stringify({pending:h,paired:_},null,2));return}if(h.length>0){let e=Y({pending:h,now:p,tableWidth:l,theme:{heading:o,warn:c,muted:s}});n.log(``),n.log(e.heading),n.log(e.table)}if(_.length>0){let e=_.map(e=>{let t=g?.get(e.nodeId),n=typeof e.lastConnectedAtMs==`number`?e.lastConnectedAtMs:typeof t?.connectedAtMs==`number`?t.connectedAtMs:void 0;return{Node:e.displayName?.trim()?e.displayName.trim():e.nodeId,Id:e.nodeId,IP:e.remoteIp??``,LastConnect:typeof n==`number`?u(Math.max(0,p-n)):s(`unknown`)}});n.log(``),n.log(o(`Paired`)),n.log(M({width:l,columns:[{key:`Node`,header:`Node`,minWidth:14,flex:!0},{key:`Id`,header:`ID`,minWidth:10},{key:`IP`,header:`IP`,minWidth:10},{key:`LastConnect`,header:`Last Connect`,minWidth:14}],rows:e}).trimEnd())}})}))}function Ee(t){let n=t.command(`nodes`).description(`Manage gateway-owned nodes (pairing, status, invoke, and media)`).addHelpText(`after`,()=>`\n${e.heading(`Examples:`)}\n${ie([[`openclaw nodes status`,`List known nodes with live status.`],[`openclaw nodes pairing pending`,`Show pending node pairing requests.`],[`openclaw nodes run --node <id> --raw "uname -a"`,`Run a shell command on a node.`],[`openclaw nodes camera snap --node <id>`,`Capture a photo from a node camera.`]])}\n\n${e.muted(`Docs:`)} ${re(`/cli/nodes`,`docs.openclaw.ai/cli/nodes`)}\n`);Te(n),X(n),_e(n),ye(n),xe(n),ce(n),G(n),Se(n),ve(n)}export{Ee as registerNodesCli};
+- `)}`);return{version:i?`v0.9`:`v0.8`,messageCount:a}}async function J(e,t,n){let r=await P(e,String(e.node??``)),i=T(e.invokeTimeout);return await I(`node.invoke`,e,B({nodeId:r,command:t,params:n,timeoutMs:typeof i==`number`?i:void 0}))}function ce(e){let t=e.command(`canvas`).description(`Capture or render canvas content from a paired node`);R(t.command(`snapshot`).description(`Capture a canvas snapshot (prints MEDIA:<path>)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--format <png|jpg|jpeg>`,`Image format`,`jpg`).option(`--max-width <px>`,`Max width in px (optional)`).option(`--quality <0-1>`,`JPEG quality (optional)`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 20000)`,`20000`).action(async e=>{await U(`canvas snapshot`,async()=>{let t=String(e.format??`jpg`).trim().toLowerCase(),r=t===`jpg`||t===`jpeg`?`jpeg`:`png`;if(r!==`png`&&r!==`jpeg`)throw Error(`invalid format: ${String(e.format)} (expected png|jpg|jpeg)`);let i=e.maxWidth?Number.parseInt(String(e.maxWidth),10):void 0,a=e.quality?Number.parseFloat(String(e.quality)):void 0,o=await J(e,`canvas.snapshot`,{format:r,maxWidth:Number.isFinite(i)?i:void 0,quality:Number.isFinite(a)?a:void 0}),c=b((typeof o==`object`&&o?o:{}).payload),l=ee({ext:c.format===`jpeg`?`jpg`:c.format});if(await w(l,c.base64),e.json){n.log(JSON.stringify({file:{path:l,format:c.format}},null,2));return}n.log(`MEDIA:${s(l)}`)})}),{timeoutMs:6e4}),R(t.command(`present`).description(`Show the canvas (optionally with a target URL/path)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--target <urlOrPath>`,`Target URL/path (optional)`).option(`--x <px>`,`Placement x coordinate`).option(`--y <px>`,`Placement y coordinate`).option(`--width <px>`,`Placement width`).option(`--height <px>`,`Placement height`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async e=>{await U(`canvas present`,async()=>{let t={x:e.x?Number.parseFloat(e.x):void 0,y:e.y?Number.parseFloat(e.y):void 0,width:e.width?Number.parseFloat(e.width):void 0,height:e.height?Number.parseFloat(e.height):void 0},r={};if(e.target&&(r.url=String(e.target)),(Number.isFinite(t.x)||Number.isFinite(t.y)||Number.isFinite(t.width)||Number.isFinite(t.height))&&(r.placement=t),await J(e,`canvas.present`,r),!e.json){let{ok:e}=H();n.log(e(`canvas present ok`))}})})),R(t.command(`hide`).description(`Hide the canvas`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async e=>{await U(`canvas hide`,async()=>{if(await J(e,`canvas.hide`,void 0),!e.json){let{ok:e}=H();n.log(e(`canvas hide ok`))}})})),R(t.command(`navigate`).description(`Navigate the canvas to a URL`).argument(`<url>`,`Target URL/path`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async(e,t)=>{await U(`canvas navigate`,async()=>{if(await J(t,`canvas.navigate`,{url:e}),!t.json){let{ok:e}=H();n.log(e(`canvas navigate ok`))}})})),R(t.command(`eval`).description(`Evaluate JavaScript in the canvas`).argument(`[js]`,`JavaScript to evaluate`).option(`--js <code>`,`JavaScript to evaluate`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async(e,t)=>{await U(`canvas eval`,async()=>{let r=t.js??e;if(!r)throw Error(`missing --js or <js>`);let i=await J(t,`canvas.eval`,{javaScript:r});if(t.json){n.log(JSON.stringify(i,null,2));return}let a=typeof i==`object`&&i?i.payload:void 0;if(a?.result)n.log(a.result);else{let{ok:e}=H();n.log(e(`canvas eval ok`))}})}));let r=t.command(`a2ui`).description(`Render A2UI content on the canvas`);R(r.command(`push`).description(`Push A2UI JSONL to the canvas`).option(`--jsonl <path>`,`Path to JSONL payload`).option(`--text <text>`,`Render a quick A2UI text payload`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async e=>{await U(`canvas a2ui push`,async()=>{let t=!!e.jsonl,r=typeof e.text==`string`;if(t===r)throw Error(`provide exactly one of --jsonl or --text`);let i=r?q(String(e.text??``)):await V.readFile(String(e.jsonl),`utf8`),{version:a,messageCount:o}=se(i);if(a===`v0.9`)throw Error(`Detected A2UI v0.9 JSONL (createSurface). OpenClaw currently supports v0.8 only.`);if(await J(e,`canvas.a2ui.pushJSONL`,{jsonl:i}),!e.json){let{ok:e}=H();n.log(e(`canvas a2ui push ok (v0.8, ${o} message${o===1?``:`s`})`))}})})),R(r.command(`reset`).description(`Reset A2UI renderer state`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms`).action(async e=>{await U(`canvas a2ui reset`,async()=>{if(await J(e,`canvas.a2ui.reset`,void 0),!e.json){let{ok:e}=H();n.log(e(`canvas a2ui reset ok`))}})}))}function le(e,t){let n=e?.tools?.exec;if(!t)return n?{security:n.security,ask:n.ask,node:n.node,pathPrepend:n.pathPrepend,safeBins:n.safeBins}:void 0;let r=a(e,t)?.tools?.exec;return{security:r?.security??n?.security,ask:r?.ask??n?.ask,node:r?.node??n?.node,pathPrepend:r?.pathPrepend??n?.pathPrepend,safeBins:r?.safeBins??n?.safeBins}}async function ue(e,t){try{let n=f(await I(`node.list`,e,{})).find(e=>e.nodeId===t);return typeof n?.platform==`string`?n.platform:null}catch{return null}}function de(e){let t=S(e);if(!t)throw Error(`invalid system.run.prepare response`);return t}function fe(e,t){let n=O(t?.security)??`allowlist`,r=O(e.security);if(e.security&&!r)throw Error(`invalid --security (use deny|allowlist|full)`);let i=A(t?.ask)??k().defaults?.ask??`on-miss`,a=A(e.ask);if(e.ask&&!a)throw Error(`invalid --ask (use off|on-miss|always)`);return{security:j(n,r??n),ask:D(i,a??i)}}async function pe(e){let t=g(e.opts.env),n=T(e.opts.commandTimeout),r=T(e.opts.invokeTimeout),i=Array.isArray(e.command)?e.command:[],a;if(e.raw){a=e.raw;let t=await ue(e.opts,e.nodeId);i=te(a,t??void 0)}let o=t?{...t}:void 0;return o&&x(o,e.execDefaults?.pathPrepend,{requireExisting:!0}),{prepared:de((await I(`node.invoke`,e.opts,{nodeId:e.nodeId,command:`system.run.prepare`,params:{command:i,rawCommand:a,cwd:e.opts.cwd,agentId:e.agentId},idempotencyKey:`prepare-${l()}`}))?.payload),nodeEnv:o,timeoutMs:n,invokeTimeout:r}}async function me(e){let t=await I(`exec.approvals.node.get`,e.opts,{nodeId:e.nodeId}),n=t&&typeof t==`object`?t.file:void 0;if(!n||typeof n!=`object`)throw Error(`exec approvals unavailable`);let r=ae({file:n,agentId:e.agentId,overrides:{security:e.security,ask:e.ask}});return{approvals:r,hostSecurity:j(e.security,r.agent.security),hostAsk:D(e.ask,r.agent.ask),askFallback:r.agent.askFallback}}async function he(e){let t=!1,n=null,r=null;if(!(e.hostAsk===`always`||e.hostAsk===`on-miss`))return{approvedByAsk:t,approvalDecision:n,approvalId:r};r=crypto.randomUUID();let i=oe,a=Math.max(T(e.opts.timeout)??0,i+1e4),o=await I(`exec.approval.request`,e.opts,{id:r,systemRunPlan:e.approvalPlan,cwd:e.approvalPlan.cwd,nodeId:e.nodeId,host:`node`,security:e.hostSecurity,ask:e.hostAsk,agentId:e.approvalPlan.agentId??e.agentId,resolvedPath:void 0,sessionKey:e.approvalPlan.sessionKey??void 0,timeoutMs:i},{transportTimeoutMs:a}),s=o&&typeof o==`object`?o.decision??null:null;if(s===`deny`)throw Error(`exec denied: user denied`);if(!s){if(e.askFallback===`full`)t=!0,n=`allow-once`;else if(e.askFallback!==`allowlist`)throw Error(`exec denied: approval required (approval UI not available)`)}return s===`allow-once`&&(t=!0,n=`allow-once`),s===`allow-always`&&(t=!0,n=`allow-always`),{approvedByAsk:t,approvalDecision:n,approvalId:r}}function ge(e){let t={nodeId:e.nodeId,command:`system.run`,params:{command:e.approvalPlan.argv,rawCommand:e.approvalPlan.commandText,cwd:e.approvalPlan.cwd,env:e.nodeEnv,timeoutMs:e.timeoutMs,needsScreenRecording:e.needsScreenRecording},idempotencyKey:String(e.idempotencyKey??l())};return(e.approvalPlan.agentId??e.fallbackAgentId)&&(t.params.agentId=e.approvalPlan.agentId??e.fallbackAgentId),e.approvalPlan.sessionKey&&(t.params.sessionKey=e.approvalPlan.sessionKey),t.params.approved=e.approvedByAsk,e.approvalDecision&&(t.params.approvalDecision=e.approvalDecision),e.approvedByAsk&&e.approvalId&&(t.params.runId=e.approvalId),e.invokeTimeout!==void 0&&(t.timeoutMs=e.invokeTimeout),t}function _e(e){R(e.command(`invoke`).description(`Invoke a command on a paired node`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).requiredOption(`--command <command>`,`Command (e.g. canvas.eval)`).option(`--params <json>`,`JSON object string for params`,`{}`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 15000)`,`15000`).option(`--idempotency-key <key>`,`Idempotency key (optional)`).action(async e=>{await U(`invoke`,async()=>{let t=await P(e,String(e.node??``)),r=String(e.command??``).trim();if(!t||!r){let{error:e}=H();n.error(e(`--node and --command required`)),n.exit(1);return}let i=JSON.parse(String(e.params??`{}`)),a=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,o={nodeId:t,command:r,params:i,idempotencyKey:String(e.idempotencyKey??l())};typeof a==`number`&&Number.isFinite(a)&&(o.timeoutMs=a);let s=await I(`node.invoke`,e,o);n.log(JSON.stringify(s,null,2))})}),{timeoutMs:3e4}),R(e.command(`run`).description(`Run a shell command on a node (mac only)`).option(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--cwd <path>`,`Working directory`).option(`--env <key=val>`,`Environment override (repeatable)`,(e,t=[])=>[...t,e]).option(`--raw <command>`,`Run a raw shell command string (sh -lc / cmd.exe /c)`).option(`--agent <id>`,`Agent id (default: configured default agent)`).option(`--ask <mode>`,`Exec ask mode (off|on-miss|always)`).option(`--security <mode>`,`Exec security mode (deny|allowlist|full)`).option(`--command-timeout <ms>`,`Command timeout (ms)`).option(`--needs-screen-recording`,`Require screen recording permission`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 30000)`,`30000`).argument(`[command...]`,`Command and args`).action(async(e,t)=>{await U(`run`,async()=>{let a=r(),o=t.agent?.trim()||i(a),s=le(a,o),c=typeof t.raw==`string`?t.raw.trim():``;if(c&&Array.isArray(e)&&e.length>0)throw Error(`use --raw or argv, not both`);if(!c&&(!Array.isArray(e)||e.length===0))throw Error(`command required`);let l=String(t.node??``).trim()||s?.node?.trim()||``;if(!l)throw Error(`node required (set --node or tools.exec.node)`);let u=await P(t,l),d=await pe({opts:t,command:e,raw:c,nodeId:u,agentId:o,execDefaults:s}),f=d.prepared.plan,p=fe(t,s),m=await me({opts:t,nodeId:u,agentId:o,security:p.security,ask:p.ask});if(m.hostSecurity===`deny`)throw Error(`exec denied: host=node security=deny`);let h=await he({opts:t,nodeId:u,agentId:o,approvalPlan:f,hostSecurity:m.hostSecurity,hostAsk:m.hostAsk,askFallback:m.askFallback}),g=await I(`node.invoke`,t,ge({nodeId:u,approvalPlan:f,nodeEnv:d.nodeEnv,timeoutMs:d.timeoutMs,invokeTimeout:d.invokeTimeout,approvedByAsk:h.approvedByAsk,approvalDecision:h.approvalDecision,approvalId:h.approvalId,idempotencyKey:t.idempotencyKey,fallbackAgentId:o,needsScreenRecording:t.needsScreenRecording===!0}));if(t.json){n.log(JSON.stringify(g,null,2));return}let _=typeof g==`object`&&g?g.payload:void 0,v=typeof _?.stdout==`string`?_.stdout:``,y=typeof _?.stderr==`string`?_.stderr:``,b=typeof _?.exitCode==`number`?_.exitCode:null,x=_?.timedOut===!0,S=_?.success===!0;if(v&&process.stdout.write(v),y&&process.stderr.write(y),x){let{error:e}=H();n.error(e(`run timed out`)),n.exit(1);return}if(b!==null&&b!==0){let e=L(`${y}\n${v}`);if(e){let{warn:t}=H();n.error(t(e))}}if(b!==null&&b!==0&&!S){let{error:e}=H();n.error(e(`run exit ${b}`)),n.exit(1);return}})}),{timeoutMs:35e3})}function ve(e){R(e.command(`location`).description(`Fetch location from a paired node`).command(`get`).description(`Fetch the current location from a node`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--max-age <ms>`,`Use cached location newer than this (ms)`).option(`--accuracy <coarse|balanced|precise>`,`Desired accuracy (default: balanced/precise depending on node setting)`).option(`--location-timeout <ms>`,`Location fix timeout (ms)`,`10000`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 20000)`,`20000`).action(async e=>{await U(`location get`,async()=>{let t=await P(e,String(e.node??``)),r=e.maxAge?Number.parseInt(String(e.maxAge),10):void 0,i=typeof e.accuracy==`string`?e.accuracy.trim().toLowerCase():void 0,a=i===`coarse`||i===`balanced`||i===`precise`?i:void 0,o=e.locationTimeout?Number.parseInt(String(e.locationTimeout),10):void 0,s=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,c={nodeId:t,command:`location.get`,params:{maxAgeMs:Number.isFinite(r)?r:void 0,desiredAccuracy:a,timeoutMs:Number.isFinite(o)?o:void 0},idempotencyKey:l()};typeof s==`number`&&Number.isFinite(s)&&(c.timeoutMs=s);let u=await I(`node.invoke`,e,c),d=typeof u==`object`&&u?u:{},f=d.payload&&typeof d.payload==`object`?d.payload:{};if(e.json){n.log(JSON.stringify(f,null,2));return}let p=f.lat,m=f.lon,h=f.accuracyMeters;if(typeof p==`number`&&typeof m==`number`){let e=typeof h==`number`?` ±${h.toFixed(1)}m`:``;n.log(`${p},${m}${e}`);return}n.log(JSON.stringify(f))})}),{timeoutMs:3e4})}function ye(e){R(e.command(`notify`).description(`Send a local notification on a node (mac only)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--title <text>`,`Notification title`).option(`--body <text>`,`Notification body`).option(`--sound <name>`,`Notification sound`).option(`--priority <passive|active|timeSensitive>`,`Notification priority`).option(`--delivery <system|overlay|auto>`,`Delivery mode`,`system`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 15000)`,`15000`).action(async e=>{await U(`notify`,async()=>{let t=await P(e,String(e.node??``)),r=String(e.title??``).trim(),i=String(e.body??``).trim();if(!r&&!i)throw Error(`missing --title or --body`);let a=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,o={nodeId:t,command:`system.notify`,params:{title:r,body:i,sound:e.sound,priority:e.priority,delivery:e.delivery},idempotencyKey:String(e.idempotencyKey??l())};typeof a==`number`&&Number.isFinite(a)&&(o.timeoutMs=a);let s=await I(`node.invoke`,e,o);if(e.json){n.log(JSON.stringify(s,null,2));return}let{ok:c}=H();n.log(c(`notify ok`))})}))}function Y(e){let{pending:t,now:n,tableWidth:r,theme:i}=e,a=t.map(e=>({Request:e.requestId,Node:e.displayName?.trim()?e.displayName.trim():e.nodeId,IP:e.remoteIp??``,Requested:typeof e.ts==`number`?u(Math.max(0,n-e.ts)):i.muted(`unknown`),Repair:e.isRepair?i.warn(`yes`):``}));return{heading:i.heading(`Pending`),table:M({width:r,columns:[{key:`Request`,header:`Request`,minWidth:8},{key:`Node`,header:`Node`,minWidth:14,flex:!0},{key:`IP`,header:`IP`,minWidth:10},{key:`Requested`,header:`Requested`,minWidth:12},{key:`Repair`,header:`Repair`,minWidth:6}],rows:a}).trimEnd()}}function X(e){R(e.command(`pending`).description(`List pending pairing requests`).action(async e=>{await U(`pending`,async()=>{let{pending:t}=d(await I(`node.pair.list`,e,{}));if(e.json){n.log(JSON.stringify(t,null,2));return}if(t.length===0){let{muted:e}=H();n.log(e(`No pending pairing requests.`));return}let{heading:r,warn:i,muted:a}=H(),o=N(),s=Y({pending:t,now:Date.now(),tableWidth:o,theme:{heading:r,warn:i,muted:a}});n.log(s.heading),n.log(s.table)})})),R(e.command(`approve`).description(`Approve a pending pairing request`).argument(`<requestId>`,`Pending request id`).action(async(e,t)=>{await U(`approve`,async()=>{let r=await I(`node.pair.approve`,t,{requestId:e});n.log(JSON.stringify(r,null,2))})})),R(e.command(`reject`).description(`Reject a pending pairing request`).argument(`<requestId>`,`Pending request id`).action(async(e,t)=>{await U(`reject`,async()=>{let r=await I(`node.pair.reject`,t,{requestId:e});n.log(JSON.stringify(r,null,2))})})),R(e.command(`rename`).description(`Rename a paired node (display name override)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).requiredOption(`--name <displayName>`,`New display name`).action(async e=>{await U(`rename`,async()=>{let t=await P(e,String(e.node??``)),r=String(e.name??``).trim();if(!t||!r){n.error(`--node and --name required`),n.exit(1);return}let i=await I(`node.rename`,e,{nodeId:t,displayName:r});if(e.json){n.log(JSON.stringify(i,null,2));return}let{ok:a}=H();n.log(a(`node rename ok: ${t} -> ${r}`))})}))}function be(e){if(typeof e!=`string`)return null;let t=e.trim().toLowerCase();return t===`sandbox`||t===`production`?t:null}function xe(e){R(e.command(`push`).description(`Send an APNs test push to an iOS node`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--title <text>`,`Push title`,`OpenClaw`).option(`--body <text>`,`Push body`).option(`--environment <sandbox|production>`,`Override APNs environment`).action(async e=>{await U(`push`,async()=>{let t=await P(e,String(e.node??``)),r=String(e.title??``).trim()||`OpenClaw`,i=String(e.body??``).trim()||`Push test for node ${t}`,a=be(e.environment);if(e.environment&&!a)throw Error(`invalid --environment (use sandbox|production)`);let o={nodeId:t,title:r,body:i};a&&(o.environment=a);let s=await I(`push.test`,e,o);if(e.json){n.log(JSON.stringify(s,null,2));return}let c=typeof s==`object`&&s?s:{},l=c.ok===!0,u=typeof c.status==`number`?c.status:0,d=typeof c.reason==`string`&&c.reason.trim().length>0?c.reason.trim():void 0,f=typeof c.environment==`string`&&c.environment.trim().length>0?c.environment.trim():`unknown`,{ok:p,error:m}=H(),h=l?p:m;n.log(h(`push.test status=${u} ok=${l} env=${f}`)),d&&n.log(`reason: ${d}`)})}),{timeoutMs:25e3})}function Se(e){R(e.command(`screen`).description(`Capture screen recordings from a paired node`).command(`record`).description(`Capture a short screen recording from a node (prints MEDIA:<path>)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).option(`--screen <index>`,`Screen index (0 = primary)`,`0`).option(`--duration <ms|10s>`,`Clip duration (ms or 10s)`,`10000`).option(`--fps <fps>`,`Frames per second`,`10`).option(`--no-audio`,`Disable microphone audio capture`).option(`--out <path>`,`Output path`).option(`--invoke-timeout <ms>`,`Node invoke timeout in ms (default 120000)`,`120000`).action(async e=>{await U(`screen record`,async()=>{let t=await P(e,String(e.node??``)),r=c(e.duration??``),i=Number.parseInt(String(e.screen??`0`),10),a=Number.parseFloat(String(e.fps??`10`)),o=e.invokeTimeout?Number.parseInt(String(e.invokeTimeout),10):void 0,l=await I(`node.invoke`,e,B({nodeId:t,command:`screen.record`,params:{durationMs:Number.isFinite(r)?r:void 0,screenIndex:Number.isFinite(i)?i:void 0,fps:Number.isFinite(a)?a:void 0,format:`mp4`,includeAudio:e.audio!==!1},timeoutMs:o})),u=y((typeof l==`object`&&l?l:{}).payload),d=await h(e.out??C({ext:u.format||`mp4`}),u.base64);if(e.json){n.log(JSON.stringify({file:{path:d.path,durationMs:u.durationMs,fps:u.fps,screenIndex:u.screenIndex,hasAudio:u.hasAudio}},null,2));return}n.log(`MEDIA:${s(d.path)}`)})}),{timeoutMs:18e4})}function Z(e){let t=e.trim();return t?t.toLowerCase().startsWith(`v`)?t:/^\d/.test(t)?`v${t}`:t:e}function Ce(e){let t=e.coreVersion?.trim()||void 0,n=e.uiVersion?.trim()||void 0;if(t||n)return{core:t,ui:n};let r=e.version?.trim();if(!r)return{core:void 0,ui:void 0};let i=e.platform?.trim().toLowerCase()??``;return i===`darwin`||i===`linux`||i===`win32`||i===`windows`?{core:r,ui:void 0}:{core:void 0,ui:r}}function Q(e){let{core:t,ui:n}=Ce(e),r=[];return t&&r.push(`core ${Z(t)}`),n&&r.push(`ui ${Z(n)}`),r.length>0?r.join(` · `):null}function we(e){if(typeof e!=`string`)return null;let t=e.trim();if(!t)return null;let n=t.split(`:`).filter(Boolean);return o(n.length<=3?t:`${n.slice(0,2).join(`:`)}:…:${n.slice(-1)[0]}`)}function $(e,t){if(e==null)return;let r=typeof e==`string`?e.trim():typeof e==`number`?String(e).trim():null;if(r===null){n.error(`${t}: invalid duration value`),n.exit(1);return}if(r)try{return c(r)}catch(e){let r=e instanceof Error?e.message:String(e);n.error(`${t}: ${r}`),n.exit(1);return}}function Te(e){R(e.command(`status`).description(`List known nodes with connection status and capabilities`).option(`--connected`,`Only show connected nodes`).option(`--last-connected <duration>`,`Only show nodes connected within duration (e.g. 24h)`).action(async e=>{await U(`status`,async()=>{let t=!!e.connected,r=$(e.lastConnected,`Invalid --last-connected`),i=await I(`node.list`,e,{}),a=typeof i==`object`&&i?i:{},{ok:o,warn:s,muted:c}=H(),l=N(),p=Date.now(),m=f(i),h=r===void 0?null:new Map(d(await I(`node.pair.list`,e,{})).paired.map(e=>[e.nodeId,e])),g=m.filter(e=>{if(t&&!e.connected)return!1;if(r!==void 0){let t=h?.get(e.nodeId),n=typeof t?.lastConnectedAtMs==`number`?t.lastConnectedAtMs:typeof e.connectedAtMs==`number`?e.connectedAtMs:void 0;if(typeof n!=`number`||p-n>r)return!1}return!0});if(e.json){let e=typeof a.ts==`number`?a.ts:Date.now();n.log(JSON.stringify({...a,ts:e,nodes:g},null,2));return}let _=g.filter(e=>!!e.paired).length,v=g.filter(e=>!!e.connected).length,y=g.length===m.length?``:` (of ${m.length})`;if(n.log(`Known: ${g.length}${y} · Paired: ${_} · Connected: ${v}`),g.length===0)return;let b=g.map(e=>{let t=e.displayName?.trim()?e.displayName.trim():e.nodeId,n=z(e.permissions),r=Q(e),i=we(e.pathEnv),a=[e.deviceFamily?`device: ${e.deviceFamily}`:null,e.modelIdentifier?`hw: ${e.modelIdentifier}`:null,n?`perms: ${n}`:null,r,i?`path: ${i}`:null].filter(Boolean),l=Array.isArray(e.caps)?e.caps.map(String).filter(Boolean).toSorted().join(`, `):`?`,d=e.paired?o(`paired`):s(`unpaired`),f=e.connected?o(`connected`):c(`disconnected`),m=typeof e.connectedAtMs==`number`?` (${u(Math.max(0,p-e.connectedAtMs))})`:``;return{Node:t,ID:e.nodeId,IP:e.remoteIp??``,Detail:a.join(` · `),Status:`${d} · ${f}${m}`,Caps:l}});n.log(M({width:l,columns:[{key:`Node`,header:`Node`,minWidth:14,flex:!0},{key:`ID`,header:`ID`,minWidth:10},{key:`IP`,header:`IP`,minWidth:10},{key:`Detail`,header:`Detail`,minWidth:18,flex:!0},{key:`Status`,header:`Status`,minWidth:18},{key:`Caps`,header:`Caps`,minWidth:12,flex:!0}],rows:b}).trimEnd())})})),R(e.command(`describe`).description(`Describe a node (capabilities + supported invoke commands)`).requiredOption(`--node <idOrNameOrIp>`,`Node id, name, or IP`).action(async e=>{await U(`describe`,async()=>{let t=await P(e,String(e.node??``)),r=await I(`node.describe`,e,{nodeId:t});if(e.json){n.log(JSON.stringify(r,null,2));return}let i=typeof r==`object`&&r?r:{},a=typeof i.displayName==`string`?i.displayName:t,o=!!i.connected,s=!!i.paired,c=Array.isArray(i.caps)?i.caps.map(String).filter(Boolean).toSorted():null,l=Array.isArray(i.commands)?i.commands.map(String).filter(Boolean).toSorted():[],u=z(i.permissions),d=typeof i.deviceFamily==`string`?i.deviceFamily:null,f=typeof i.modelIdentifier==`string`?i.modelIdentifier:null,p=typeof i.remoteIp==`string`?i.remoteIp:null,m=typeof i.pathEnv==`string`?i.pathEnv:null,h=Q(i),{heading:g,ok:_,warn:v,muted:y}=H(),b=`${s?_(`paired`):v(`unpaired`)} · ${o?_(`connected`):y(`disconnected`)}`,x=N(),S=[{Field:`ID`,Value:t},a?{Field:`Name`,Value:a}:null,p?{Field:`IP`,Value:p}:null,d?{Field:`Device`,Value:d}:null,f?{Field:`Model`,Value:f}:null,u?{Field:`Perms`,Value:u}:null,h?{Field:`Version`,Value:h}:null,m?{Field:`PATH`,Value:m}:null,{Field:`Status`,Value:b},{Field:`Caps`,Value:c?c.join(`, `):`?`}].filter(Boolean);if(n.log(g(`Node`)),n.log(M({width:x,columns:[{key:`Field`,header:`Field`,minWidth:8},{key:`Value`,header:`Value`,minWidth:24,flex:!0}],rows:S}).trimEnd()),n.log(``),n.log(g(`Commands`)),l.length===0){n.log(y(`- (none reported)`));return}for(let e of l)n.log(`- ${e}`)})})),R(e.command(`list`).description(`List pending and paired nodes`).option(`--connected`,`Only show connected nodes`).option(`--last-connected <duration>`,`Only show nodes connected within duration (e.g. 24h)`).action(async e=>{await U(`list`,async()=>{let t=!!e.connected,r=$(e.lastConnected,`Invalid --last-connected`),{pending:i,paired:a}=d(await I(`node.pair.list`,e,{})),{heading:o,muted:s,warn:c}=H(),l=N(),p=Date.now(),m=t||r!==void 0,h=m?[]:i,g=m?new Map(f(await I(`node.list`,e,{})).map(e=>[e.nodeId,e])):null,_=a.filter(e=>{if(t&&!g?.get(e.nodeId)?.connected)return!1;if(r!==void 0){let t=g?.get(e.nodeId),n=typeof e.lastConnectedAtMs==`number`?e.lastConnectedAtMs:typeof t?.connectedAtMs==`number`?t.connectedAtMs:void 0;if(typeof n!=`number`||p-n>r)return!1}return!0}),v=m&&_.length!==a.length?` (of ${a.length})`:``;if(n.log(`Pending: ${h.length} · Paired: ${_.length}${v}`),e.json){n.log(JSON.stringify({pending:h,paired:_},null,2));return}if(h.length>0){let e=Y({pending:h,now:p,tableWidth:l,theme:{heading:o,warn:c,muted:s}});n.log(``),n.log(e.heading),n.log(e.table)}if(_.length>0){let e=_.map(e=>{let t=g?.get(e.nodeId),n=typeof e.lastConnectedAtMs==`number`?e.lastConnectedAtMs:typeof t?.connectedAtMs==`number`?t.connectedAtMs:void 0;return{Node:e.displayName?.trim()?e.displayName.trim():e.nodeId,Id:e.nodeId,IP:e.remoteIp??``,LastConnect:typeof n==`number`?u(Math.max(0,p-n)):s(`unknown`)}});n.log(``),n.log(o(`Paired`)),n.log(M({width:l,columns:[{key:`Node`,header:`Node`,minWidth:14,flex:!0},{key:`Id`,header:`ID`,minWidth:10},{key:`IP`,header:`IP`,minWidth:10},{key:`LastConnect`,header:`Last Connect`,minWidth:14}],rows:e}).trimEnd())}})}))}function Ee(t){let n=t.command(`nodes`).description(`Manage gateway-owned nodes (pairing, status, invoke, and media)`).addHelpText(`after`,()=>`\n${e.heading(`Examples:`)}\n${ie([[`openclaw nodes status`,`List known nodes with live status.`],[`openclaw nodes pairing pending`,`Show pending node pairing requests.`],[`openclaw nodes run --node <id> --raw "uname -a"`,`Run a shell command on a node.`],[`openclaw nodes camera snap --node <id>`,`Capture a photo from a node camera.`]])}\n\n${e.muted(`Docs:`)} ${re(`/cli/nodes`,`docs.openclaw.ai/cli/nodes`)}\n`);Te(n),X(n),_e(n),ye(n),xe(n),ce(n),G(n),Se(n),ve(n)}export{Ee as registerNodesCli};