@qqbrowser/openclaw-qbot 0.0.139 → 0.0.142

package/node_modules/@snazzah/davey-linux-x64-gnu/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@snazzah/davey-linux-x64-gnu",
+  "version": "0.1.11",
+  "cpu": [
+    "x64"
+  ],
+  "main": "davey.linux-x64-gnu.node",
+  "files": [
+    "davey.linux-x64-gnu.node"
+  ],
+  "description": "DAVE protocol implementation",
+  "keywords": [
+    "discord",
+    "e2ee",
+    "mls",
+    "napi-rs",
+    "NAPI",
+    "N-API",
+    "Rust",
+    "node-addon",
+    "node-addon-api"
+  ],
+  "author": {
+    "name": "Snazzah",
+    "email": "me@snazzah.com",
+    "url": "https://snazzah.com/"
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">= 10"
+  },
+  "repository": "https://github.com/Snazzah/davey",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public"
+  },
+  "os": [
+    "linux"
+  ],
+  "libc": [
+    "glibc"
+  ]
+}

package/node_modules/@snazzah/davey-linux-x64-musl/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@snazzah/davey-linux-x64-musl",
+  "version": "0.1.11",
+  "cpu": [
+    "x64"
+  ],
+  "main": "davey.linux-x64-musl.node",
+  "files": [
+    "davey.linux-x64-musl.node"
+  ],
+  "description": "DAVE protocol implementation",
+  "keywords": [
+    "discord",
+    "e2ee",
+    "mls",
+    "napi-rs",
+    "NAPI",
+    "N-API",
+    "Rust",
+    "node-addon",
+    "node-addon-api"
+  ],
+  "author": {
+    "name": "Snazzah",
+    "email": "me@snazzah.com",
+    "url": "https://snazzah.com/"
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">= 10"
+  },
+  "repository": "https://github.com/Snazzah/davey",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public"
+  },
+  "os": [
+    "linux"
+  ],
+  "libc": [
+    "musl"
+  ]
+}

package/node_modules/dotenv/lib/main.js

@@ -306,7 +306,7 @@ function configDotenv (options) {
       }
     }
 
-    _log(`injecting env (${keysCount}) from ${shortPaths.join(',')} ${dim(`// tip: ${_getRandomTip()}`)}`)
+    _log(`injected env (${keysCount}) from ${shortPaths.join(',')} ${dim(`// tip: ${_getRandomTip()}`)}`)
   }
 
   if (lastError) {

package/node_modules/dotenv/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dotenv",
-  "version": "17.4.0",
+  "version": "17.4.1",
   "description": "Loads environment variables from .env file",
   "main": "lib/main.js",
   "types": "lib/main.d.ts",

package/node_modules/dotenv/skills/dotenv/SKILL.md

@@ -5,12 +5,11 @@ description: Load environment variables from a .env file into process.env for No
 
 # dotenv
 
-
 Dotenv is a zero-dependency module that loads environment variables from a `.env` file into [`process.env`](https://nodejs.org/docs/latest/api/process.html#process_process_env). Storing configuration in the environment separate from code is based on [The Twelve-Factor App](https://12factor.net/config) methodology.
 
 [Watch the tutorial](https://www.youtube.com/watch?v=YtkZR0NFd1g)
 
-
+ 
 
 ## Usage
 
@@ -31,14 +30,34 @@ SECRET_KEY="YOURSECRETKEYGOESHERE"
 And as early as possible in your application, import and configure dotenv:
 
 ```javascript
+// index.js
 require('dotenv').config() // or import 'dotenv/config' if you're using ES6
 ...
 console.log(process.env) // remove this after you've confirmed it is working
 ```
+```sh
+$ node index.js
+◇ injected env (14) from .env
+```
+
+That's it. `process.env` now has the keys and values you defined in your `.env` file.
+
+ 
 
-That's it. `process.env` now has the keys and values you defined in your `.env` file:
+## Agent Usage
 
+Install this repo as an agent skill package:
+
+```sh
+npx skills add motdotla/dotenv
+```
+```sh
+# ask Claude or Codex to do things like:
+set up dotenv
+upgrade dotenv to dotenvx
+```
 
+ 
 
 ## Advanced
 
@@ -138,7 +157,7 @@ console.log(typeof config, config) // object { BASIC : 'basic' }
 
 > Note: Consider using [`dotenvx`](https://github.com/dotenvx/dotenvx) instead of preloading. I am now doing (and recommending) so.
 >
-> It serves the same purpose (you do not need to require and load dotenv), adds better debugging, and works with ANY language, framework, or platform. – [motdotla](https://mot.la)
+> It serves the same purpose (you do not need to require and load dotenv), adds better debugging, and works with ANY language, framework, or platform. – [motdotla](https://not.la)
 
 You can use the `--require` (`-r`) [command line option](https://nodejs.org/api/cli.html#-r---require-module) to preload dotenv. By doing this, you do not need to require and load dotenv in your application code.
 
@@ -180,7 +199,7 @@ console.log('DATABASE_URL', process.env.DATABASE_URL)
 ```
 ```sh
 $ dotenvx run --debug -- node index.js
-[dotenvx@0.14.1] injecting env (2) from .env
+⟐ injected env (2) from .env · dotenvx@1.59.1
 DATABASE_URL postgres://username@localhost/my_database
 ```
 
@@ -201,7 +220,7 @@ console.log('DATABASE_URL', process.env.DATABASE_URL)
 ```
 ```sh
 $ dotenvx run --debug -- node index.js
-[dotenvx@0.14.1] injecting env (1) from .env
+⟐ injected env (1) from .env · dotenvx@1.59.1
 DATABASE_URL postgres://yourusername@localhost/my_database
 ```
 
@@ -217,7 +236,7 @@ $ dotenvx set HELLO Production -f .env.production
 $ echo "console.log('Hello ' + process.env.HELLO)" > index.js
 
 $ DOTENV_PRIVATE_KEY_PRODUCTION="<.env.production private key>" dotenvx run -- node index.js
-[dotenvx] injecting env (2) from .env.production
+⟐ injected env (2) from .env.production · dotenvx@1.59.1
 Hello Production
 ```
 
@@ -250,7 +269,7 @@ $ dotenvx run -f=.env.local -f=.env -- node index.js
 Hello local
 ```
 
-[more environment examples](https://dotenvx.com/docs/quickstart/environments)
+[more environment examples](https://dotenvx.com/docs/quickstart/environments?utm_source=github&utm_medium=readme&utm_campaign=motdotla-dotenv&utm_content=docs-environments)
 
 </details>
 <details><summary>Production</summary><br>
@@ -318,45 +337,7 @@ See [examples](https://github.com/dotenv-org/examples) of using dotenv with vari
 
 </details>
 
-
-
-## Agents
-
-<img src="https://dotenvx.com/assets/img/as2/9.jpg" height="400" alt="dotenvx-as2" align="right"/>
-
-> Software is changing, and dotenv must change with it—that is why I built [agentic secret storage (AS2)](https://dotenvx.com/as2). Agents run code without humans at terminals, so plaintext `.env` files are the wrong primitive.
->
-> AS2 is built for autonomous software: encrypted by default, zero console access, and cryptography‑first delivery that keeps operators out of the loop.
->
-> It is backed by [Vestauth](https://github.com/vestauth/vestauth), the trusted, pioneering auth layer for agents—giving each agent a cryptographic identity so requests are signed with private keys and verified with public keys. No shared secrets to leak.
->
-> It's what I'm using now. - [motdotla](https://mot.la)
-
-### Quickstart
-
-Install vestauth and initialize your agent.
-
-```bash
-npm i -g vestauth
-
-vestauth agent init
-```
-
-Your agent `set`s secrets with a simple `curl` endpoint:
-
-```bash
-vestauth agent curl -X POST https://as2.dotenvx.com/set -d '{"KEY":"value"}'
-```
-
-And your agent `get`s secrets with a simple `curl` endpoint:
-
-```bash
-vestauth agent curl "https://as2.dotenvx.com/get?key=KEY"
-```
-
-That's it! This new primitive unlocks secrets access for agents without human-in-the-loop, oauth flows, or API keys. It's the future for agents.
-
-
+&nbsp;
 
 ## FAQ
 
@@ -504,7 +485,7 @@ require('dotenv').config({ override: true })
 </details>
 <details><summary>How can I prevent committing my `.env` file to a Docker build?</summary><br/>
 
-Use the [docker prebuild hook](https://dotenvx.com/docs/features/prebuild).
+Use the [docker prebuild hook](https://dotenvx.com/docs/features/prebuild?utm_source=github&utm_medium=readme&utm_campaign=motdotla-dotenv&utm_content=docs-prebuild).
 
 ```bash
 # Dockerfile
@@ -578,7 +559,7 @@ Alternatively, just use [dotenv-webpack](https://github.com/mrsteele/dotenv-webp
 
 </details>
 
-
+&nbsp;
 
 ## Docs
 
@@ -645,7 +626,6 @@ HELLO=World
 
 ```sh
 $ node index.js
-[dotenv@17.0.0] injecting env (1) from .env
 Hello World
 ```
 
@@ -763,13 +743,13 @@ Default: `false`
 
 Override any environment variables that have already been set.
 
-
+&nbsp;
 
 ## CHANGELOG
 
 See [CHANGELOG.md](CHANGELOG.md)
 
-
+&nbsp;
 
 ## Who's using dotenv?
 

package/node_modules/dotenv/skills/dotenvx/SKILL.md

@@ -1,343 +1,127 @@
 ---
 name: dotenvx
-description: Encrypt .env files, use multiple environments, expand variables, and run any command with environment variables injected using dotenvx. Use when the task involves secret encryption, .env.production or .env.staging setups, variable expansion like ${DATABASE_URL}, running CLI commands with env vars, CI/CD secret management, or migrating beyond basic dotenv. Triggers on requests involving dotenvx, encrypted .env files, multiple environment configs, agentic secret storage, or AS2.
+description: Use dotenvx to run commands with environment variables, manage multiple .env files, expand variables, and encrypt env files for safe commits and CI/CD.
 ---
 
 # dotenvx
 
-*a secure dotenv* — from the creator of [`dotenv`](https://github.com/motdotla/dotenv).
+`dotenvx` is a secure dotenv workflow for any language.
 
-* run anywhere (cross-platform)
-* multi-environment
-* encrypted envs
-
-[Read the whitepaper](https://dotenvx.com/dotenvx.pdf?v=README)
+Use this skill when you need to:
+- run commands with env vars from `.env` files
+- load multiple environment files (`.env`, `.env.production`, etc.)
+- encrypt `.env` files and keep keys out of git
+- use env files safely in CI/CD
 
 ## Quickstart
 
-Install and use it in code just like `dotenv`.
+Install:
 
 ```sh
 npm install @dotenvx/dotenvx --save
+# or globally:
+# curl -sfS https://dotenvx.sh | sh
+# brew install dotenvx/brew/dotenvx
 ```
-```js
-// index.js
-require('@dotenvx/dotenvx').config()
-// or import '@dotenvx/dotenvx/config' // for esm
-
-console.log(`Hello ${process.env.HELLO}`)
-```
-
-or install globally — *unlocks dotenv for any language, framework, or platform!*
-
-```sh
-# curl
-curl -sfS https://dotenvx.sh | sh
-
-# brew
-brew install dotenvx/brew/dotenvx
-
-# docker
-docker run -it --rm -v $(pwd):/app dotenv/dotenvx help
-
-# windows
-winget install dotenvx
-```
-
-## Run Anywhere
 
-```sh
-$ echo "HELLO=World" > .env
-$ echo "console.log('Hello ' + process.env.HELLO)" > index.js
+Node usage:
 
-$ node index.js
-Hello undefined # without dotenvx
-
-$ dotenvx run -- node index.js
-Hello World # with dotenvx
+```js
+require('@dotenvx/dotenvx').config()
+// or: import '@dotenvx/dotenvx/config'
 ```
 
-Works with TypeScript, Deno, Bun, Python, PHP, Ruby, Go, Rust, Java, .NET, Bash, and more. See [extended quickstart guide](https://dotenvx.com/docs/quickstart).
-
-Framework shortcuts:
+CLI usage (any language):
 
 ```sh
-$ dotenvx run -- next dev
-$ dotenvx run -- npm start
-$ dotenvx run -- bin/rails s
-$ dotenvx run -- php artisan serve
+dotenvx run -- node index.js
 ```
 
-## Multiple Environments
+## Core Commands
 
-Create a `.env.production` file and use `-f` to load it:
+Run with default `.env`:
 
 ```sh
-$ echo "HELLO=production" > .env.production
-$ echo "console.log('Hello ' + process.env.HELLO)" > index.js
-
-$ dotenvx run -f .env.production -- node index.js
-[dotenvx@1.X.X] injecting env (1) from .env.production
-Hello production
+dotenvx run -- <command>
 ```
 
-Load multiple files (first value wins):
+Load a specific file:
 
 ```sh
-$ echo "HELLO=local" > .env.local
-$ echo "HELLO=World" > .env
-
-$ dotenvx run -f .env.local -f .env -- node index.js
-[dotenvx@1.X.X] injecting env (1) from .env.local,.env
-Hello local
+dotenvx run -f .env.production -- <command>
 ```
 
-Use `--overload` to make subsequent files win instead:
+Load multiple files (first wins):
 
 ```sh
-$ dotenvx run -f .env.local -f .env --overload -- node index.js
-Hello World
+dotenvx run -f .env.local -f .env -- <command>
 ```
 
-### Convention-based loading
+Make later files win:
 
 ```sh
-# Next.js convention
-$ dotenvx run --convention=nextjs -- node index.js
-
-# dotenv-flow convention
-$ dotenvx run --convention=flow -- node index.js
+dotenvx run -f .env.local -f .env --overload -- <command>
 ```
 
-## Encryption
+## Encryption Workflow
 
-Add encryption to your `.env` files with a single command:
+Encrypt:
 
 ```sh
-$ dotenvx encrypt
-✔ encrypted (.env)
+dotenvx encrypt
+# or
+dotenvx encrypt -f .env.production
 ```
 
-A `DOTENV_PUBLIC_KEY` (encryption key) and a `DOTENV_PRIVATE_KEY` (decryption key) are generated using the same public-key cryptography as Bitcoin (secp256k1).
-
-Encrypt a specific environment file:
-
-```sh
-$ dotenvx encrypt -f .env.production
-```
-
-Decrypt at runtime by setting the private key (found in `.env.keys`):
+Run encrypted envs by supplying private key(s):
 
 ```sh
-$ DOTENV_PRIVATE_KEY="<key from .env.keys>" dotenvx run -- node index.js
-[dotenvx@1.X.X] injecting env (2) from .env
-Hello World
+DOTENV_PRIVATE_KEY_PRODUCTION="<key>" dotenvx run -f .env.production -- <command>
 ```
 
-Per-environment private keys follow the pattern `DOTENV_PRIVATE_KEY_<ENVIRONMENT>`:
+Git rule:
 
-```sh
-$ DOTENV_PRIVATE_KEY_PRODUCTION="<key>" dotenvx run -- node index.js
-# loads .env.production
-
-$ DOTENV_PRIVATE_KEY_CI="<key>" dotenvx run -- node index.js
-# loads .env.ci
-```
-
-Combine multiple encrypted files:
-
-```sh
-$ DOTENV_PRIVATE_KEY="<key>" DOTENV_PRIVATE_KEY_PRODUCTION="<key>" dotenvx run -- node index.js
-[dotenvx@1.X.X] injecting env (3) from .env, .env.production
-```
-
-**Commit the encrypted `.env` file. Never commit `.env.keys`.**
-
-```sh
-# .gitignore
+```gitignore
 .env.keys
 ```
 
-## CI/CD
-
-```yaml
-# GitHub Actions
-- name: Run app
-  env:
-    DOTENV_PRIVATE_KEY_PRODUCTION: ${{ secrets.DOTENV_PRIVATE_KEY_PRODUCTION }}
-  run: dotenvx run -f .env.production -- node index.js
-```
-
-Install in CI:
+Commit encrypted `.env*` files if needed, but never commit `.env.keys`.
 
-```sh
-curl -fsS https://dotenvx.sh/install.sh | sh
-```
-
-## Advanced
-
-### Variable Expansion
+## Variable Expansion
 
-Reference and expand variables already on your machine:
+Example:
 
 ```ini
-# .env
-USERNAME="username"
-DATABASE_URL="postgres://${USERNAME}@localhost/my_database"
-```
-
-```sh
-$ dotenvx run -- node index.js
-DATABASE_URL postgres://username@localhost/my_database
+USERNAME="alice"
+DATABASE_URL="postgres://${USERNAME}@localhost/mydb"
 ```
 
-### Default Values
+`dotenvx run` resolves `${...}` expressions at runtime.
 
-```ini
-# .env
-DATABASE_HOST=${DB_HOST:-localhost}
-DATABASE_PORT=${DB_PORT:-5432}
-```
-
-### Alternate Values
-
-```ini
-# .env
-NODE_ENV=production
-DEBUG_MODE=${NODE_ENV:+false}
-```
+## CI/CD Pattern
 
-### Interpolation Syntax Summary
+Set private keys as CI secrets, then run through `dotenvx`:
 
-```ini
-# Default value - use variable if set/non-empty, otherwise use default
-TEST=${DEFINED_VAR:-fallback}     # "hello" (if DEFINED_VAR=hello)
-TEST=${UNDEFINED_VAR:-fallback}   # "fallback"
-
-# Default value (no colon) - use variable if set, otherwise use default
-TEST=${EMPTY_VAR-fallback}        # "" (empty, but set)
-TEST=${UNDEFINED_VAR-fallback}    # "fallback"
-
-# Alternate value - use alternate if variable is set/non-empty, otherwise empty
-TEST=${DEFINED_VAR:+alternate}    # "alternate"
-TEST=${EMPTY_VAR:+alternate}      # "" (empty)
-
-# Alternate value (no colon) - use alternate if variable is set, otherwise empty
-TEST=${EMPTY_VAR+alternate}       # "alternate" (empty but set counts)
-```
-
-### Command Substitution
-
-```ini
-# .env
-DATABASE_URL="postgres://$(whoami)@localhost/my_database"
-```
-
-### `get` — Read a value
-
-```sh
-$ echo "HELLO=World" > .env
-
-$ dotenvx get HELLO
-World
-
-$ dotenvx get HELLO -f .env.production
-production
-
-$ dotenvx get        # all key/value pairs as JSON
-{"HELLO":"World"}
-```
-
-### `set` — Write a value (auto-encrypts if file is encrypted)
-
-```sh
-$ dotenvx set HELLO World
-$ dotenvx set HELLO Production -f .env.production
-```
-
-### Pre-commit hook — Prevent committing plaintext secrets
-
-```sh
-npm i -g @dotenvx/dotenvx
-dotenvx precommit --install
-```
-
-### `--strict` — Fail on errors
-
-```sh
-$ dotenvx run -f .env.missing --strict -- node index.js
-[MISSING_ENV_FILE] missing .env.missing file
-```
-
-### Quiet / Debug / Log levels
-
-```sh
-$ dotenvx run -f .env.production --quiet -- node index.js   # suppress output
-$ dotenvx run -f .env.production --debug -- node index.js   # verbose debug
-$ dotenvx run -f .env.production --log-level=error -- node index.js
-```
-
-## Agentic Secret Storage (AS2)
-
-> Agents run code without humans at terminals, so plaintext `.env` files are the wrong primitive. AS2 is built for autonomous software: encrypted by default, zero console access, and cryptography‑first delivery.
-
-Install vestauth and initialize your agent:
-
-```bash
-npm i -g vestauth
-vestauth agent init
-```
-
-Set secrets:
-
-```bash
-vestauth agent curl -X POST https://as2.dotenvx.com/set -d '{"KEY":"value"}'
-```
-
-Get secrets:
-
-```bash
-vestauth agent curl "https://as2.dotenvx.com/get?key=KEY"
+```yaml
+env:
+  DOTENV_PRIVATE_KEY_PRODUCTION: ${{ secrets.DOTENV_PRIVATE_KEY_PRODUCTION }}
+run: dotenvx run -f .env.production -- node index.js
 ```
 
-See [dotenvx.com/as2](https://dotenvx.com/as2) for the full specification.
-
-## Comparison: dotenv vs dotenvx
-
-| Feature | dotenv | dotenvx |
-|---------|--------|---------|
-| Load `.env` | ✅ | ✅ |
-| Variable expansion | ❌ | ✅ |
-| Command substitution | ❌ | ✅ |
-| Encryption | ❌ | ✅ |
-| Multiple environments | basic | ✅ |
-| Works with any language | ❌ | ✅ |
-| Agentic secret storage | ❌ | ✅ |
-
-For basic `.env` loading in Node.js, see the [dotenv skill](../dotenv/SKILL.md).
+## Agent Usage
 
-## FAQ
-
-**Should I commit my `.env` file?**
-
-No — unless you encrypt it with `dotenvx encrypt`. Then yes, commit the encrypted `.env` and keep `.env.keys` out of source control.
-
-**How do I use dotenvx in Docker?**
+Install this repo as an agent skill package:
 
 ```sh
-FROM node:latest
-RUN curl -fsS https://dotenvx.sh/install.sh | sh
-CMD ["dotenvx", "run", "--", "node", "index.js"]
+npx skills add motdotla/dotenv
 ```
 
-**How do I handle environment variable precedence in containers?**
+Typical requests:
+- "set up dotenvx for production"
+- "encrypt my .env.production and wire CI"
+- "load .env.local and .env safely"
 
-By default, existing environment variables take precedence over `.env` files (historic dotenv principle). Use `--overload` to make `.env` files win instead.
+## References
 
-```sh
-# Env var from cloud provider wins (default)
-$ MODEL_REGISTRY=registry.azure.com/v2 dotenvx run -f .env.prod -- node app.js
-
-# .env.prod wins (with --overload)
-$ MODEL_REGISTRY=registry.azure.com/v2 dotenvx run -f .env.prod --overload -- node app.js
-```
+- https://dotenvx.com/docs/quickstart
+- https://github.com/dotenvx/dotenvx