@qqbrowser/openclaw-qbot 0.0.139 → 0.0.142

package/dist/env-overrides-DHtB4kK3.js

@@ -1 +1,2 @@
 import{t as e}from"./subsystem-BLbY429l.js";import{n as t}from"./entry.js";import{r as n}from"./string-normalization-DJT5zuUF.js";import{c as r}from"./types.secrets-D4tbc3Wq.js";import{a as i,c as a,d as o,f as s,i as c,l,n as u,o as d,p as f,r as ee,s as te,t as ne,u as re}from"./frontmatter-C7mzDNxd.js";var p={blockedKeys:[`NODE_OPTIONS`,`NODE_PATH`,`PYTHONHOME`,`PYTHONPATH`,`PERL5LIB`,`PERL5OPT`,`RUBYLIB`,`RUBYOPT`,`BASH_ENV`,`ENV`,`GIT_EXTERNAL_DIFF`,`SHELL`,`SHELLOPTS`,`PS4`,`GCONV_PATH`,`IFS`,`SSLKEYLOGFILE`],blockedOverrideKeys:[`HOME`,`ZDOTDIR`,`GIT_SSH_COMMAND`,`GIT_SSH`,`GIT_PROXY_COMMAND`,`GIT_ASKPASS`,`SSH_ASKPASS`,`LESSOPEN`,`LESSCLOSE`,`PAGER`,`MANPAGER`,`GIT_PAGER`,`EDITOR`,`VISUAL`,`FCEDIT`,`SUDO_EDITOR`,`PROMPT_COMMAND`,`HISTFILE`,`PERL5DB`,`PERL5DBCMD`,`OPENSSL_CONF`,`OPENSSL_ENGINES`,`PYTHONSTARTUP`,`WGETRC`,`CURL_HOME`],blockedOverridePrefixes:[`GIT_CONFIG_`,`NPM_CONFIG_`],blockedPrefixes:[`DYLD_`,`LD_`,`BASH_FUNC_`]};const m=/^[A-Za-z_][A-Za-z0-9_]*$/,h=p,g=Object.freeze(h.blockedKeys.map(e=>e.toUpperCase())),ie=Object.freeze(h.blockedPrefixes.map(e=>e.toUpperCase())),ae=Object.freeze((h.blockedOverrideKeys??[]).map(e=>e.toUpperCase())),oe=Object.freeze((h.blockedOverridePrefixes??[]).map(e=>e.toUpperCase())),se=Object.freeze([`TERM`,`LANG`,`LC_ALL`,`LC_CTYPE`,`LC_MESSAGES`,`COLORTERM`,`NO_COLOR`,`FORCE_COLOR`]),ce=new Set(g),le=new Set(ae),ue=new Set(se);function _(e,t){let n=e.trim();return!n||t?.portable&&!m.test(n)?null:n}function v(e){let t=_(e);if(!t)return!1;let n=t.toUpperCase();return ce.has(n)?!0:ie.some(e=>n.startsWith(e))}function y(e){let t=_(e);if(!t)return!1;let n=t.toUpperCase();return le.has(n)?!0:oe.some(e=>n.startsWith(e))}function de(e){let n=e?.baseEnv??process.env,r=e?.overrides??void 0,i=e?.blockPathOverrides??!0,a={};for(let[e,t]of Object.entries(n)){if(typeof t!=`string`)continue;let n=_(e,{portable:!0});!n||v(n)||(a[n]=t)}if(!r)return t(a);for(let[e,t]of Object.entries(r)){if(typeof t!=`string`)continue;let n=_(e,{portable:!0});if(!n)continue;let r=n.toUpperCase();i&&r===`PATH`||v(r)||y(r)||(a[n]=t)}return t(a)}function fe(e){let t=e?.overrides??void 0;if(!t)return;if(!e?.shellWrapper)return t;let n={};for(let[e,r]of Object.entries(t)){if(typeof r!=`string`)continue;let t=_(e,{portable:!0});t&&ue.has(t.toUpperCase())&&(n[t]=r)}return Object.keys(n).length>0?n:void 0}const b=/^v?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z.-]+))?(?:\+([0-9A-Za-z.-]+))?$/,x=/^[A-Za-z0-9][A-Za-z0-9._-]*$/;function S(e){let t=e.trim();if(!t)return{ok:!1,error:`missing npm spec`};if(/\s/.test(t))return{ok:!1,error:`unsupported npm spec: whitespace is not allowed`};if(t.includes(`://`))return{ok:!1,error:`unsupported npm spec: URLs are not allowed`};if(t.includes(`#`))return{ok:!1,error:`unsupported npm spec: git refs are not allowed`};if(t.includes(`:`))return{ok:!1,error:`unsupported npm spec: protocol specs are not allowed`};let n=t.lastIndexOf(`@`),r=n>0,i=r?t.slice(0,n):t,a=r?t.slice(n+1):``;if(!(i.startsWith(`@`)?/^@[a-z0-9][a-z0-9-._~]*\/[a-z0-9][a-z0-9-._~]*$/.test(i):/^[a-z0-9][a-z0-9-._~]*$/.test(i)))return{ok:!1,error:`unsupported npm spec: expected <name> or <name>@<version> from the npm registry`};if(!r)return{ok:!0,parsed:{name:i,raw:t,selectorKind:`none`,selectorIsPrerelease:!1}};if(!a)return{ok:!1,error:`unsupported npm spec: missing version/tag after @`};if(/[\\/]/.test(a))return{ok:!1,error:`unsupported npm spec: invalid version/tag`};let o=b.exec(a);return o?{ok:!0,parsed:{name:i,raw:t,selector:a,selectorKind:`exact-version`,selectorIsPrerelease:!!o[4]}}:x.test(a)?{ok:!0,parsed:{name:i,raw:t,selector:a,selectorKind:`tag`,selectorIsPrerelease:!1}}:{ok:!1,error:`unsupported npm spec: use an exact version or dist-tag (ranges are not allowed)`}}function C(e){let t=S(e);return t.ok?t.parsed:null}function w(e){let t=S(e);return t.ok?null:t.error}function T(e){return!!b.exec(e.trim())?.[4]}function E(e){return!e.resolvedVersion||!T(e.resolvedVersion)?!0:e.spec.selectorKind===`none`?!1:e.spec.selectorKind===`exact-version`?e.spec.selectorIsPrerelease:e.spec.selector?.toLowerCase()!==`latest`}function D(e){let t=e.spec.selectorKind===`none`||e.spec.selector?.toLowerCase()===`latest`?`Use "${e.spec.name}@beta" (or another prerelease tag) or an exact prerelease version to opt in explicitly.`:`Use an explicit prerelease tag or exact prerelease version if you want prerelease installs.`;return`Resolved ${e.spec.raw} to prerelease version ${e.resolvedVersion}, but prereleases are only installed when explicitly requested. ${t}`}function O(e){return re(e)}const k=/^[A-Za-z0-9][A-Za-z0-9@+._/-]*$/,A=/^[A-Za-z0-9][A-Za-z0-9._~+\-/]*(?:@[A-Za-z0-9][A-Za-z0-9._~+\-/]*)?$/,j=/^[A-Za-z0-9][A-Za-z0-9._\-[\]=<>!~+,]*$/;function M(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||t.startsWith(`-`)||t.includes(`\\`)||t.includes(`..`))&&k.test(t))return t}function N(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||t.startsWith(`-`))&&w(t)===null)return t}function P(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||t.startsWith(`-`)||t.includes(`\\`)||t.includes(`://`))&&A.test(t))return t}function F(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||t.startsWith(`-`)||t.includes(`\\`)||t.includes(`://`))&&j.test(t))return t}function I(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||/\s/.test(t)))try{let e=new URL(t);return e.protocol!==`http:`&&e.protocol!==`https:`?void 0:e.toString()}catch{return}}function L(e){let t=i(e,[`brew`,`node`,`go`,`uv`,`download`]);if(!t)return;let{raw:n}=t,r=ne({kind:t.kind},t),a=ee(n.os);a.length>0&&(r.os=a);let o=M(n.formula);o&&(r.formula=o);let s=M(n.cask);if(!r.formula&&s&&(r.formula=s),r.kind===`node`){let e=N(n.package);e&&(r.package=e)}else if(r.kind===`uv`){let e=F(n.package);e&&(r.package=e)}let c=P(n.module);c&&(r.module=c);let l=I(n.url);if(l&&(r.url=l),typeof n.archive==`string`&&(r.archive=n.archive),typeof n.extract==`boolean`&&(r.extract=n.extract),typeof n.stripComponents==`number`&&(r.stripComponents=n.stripComponents),typeof n.targetDir==`string`&&(r.targetDir=n.targetDir),!(r.kind===`brew`&&!r.formula)&&!(r.kind===`node`&&!r.package)&&!(r.kind===`go`&&!r.module)&&!(r.kind===`uv`&&!r.package)&&!(r.kind===`download`&&!r.url))return r}function R(e){let t=d({frontmatter:e});if(!t)return;let n=l(t),r=te(t,L),i=a(t);return{always:typeof t.always==`boolean`?t.always:void 0,emoji:typeof t.emoji==`string`?t.emoji:void 0,homepage:typeof t.homepage==`string`?t.homepage:void 0,skillKey:typeof t.skillKey==`string`?t.skillKey:void 0,primaryEnv:typeof t.primaryEnv==`string`?t.primaryEnv:void 0,os:i.length>0?i:void 0,requires:n,install:r.length>0?r:void 0}}function z(e){return{userInvocable:c(u(e,`user-invocable`),!0),disableModelInvocation:c(u(e,`disable-model-invocation`),!1)}}function B(e,t){return t?.metadata?.skillKey??e.name}const pe={"browser.enabled":!0,"browser.evaluateEnabled":!0};function V(e,t){return f(e,t,pe)}function H(e,t){let n=e?.skills?.entries;if(!n||typeof n!=`object`)return;let r=n[t];if(!(!r||typeof r!=`object`))return r}function U(e){if(!e||!Array.isArray(e))return;let t=n(e);return t.length>0?t:void 0}const me=new Set([`openclaw-bundled`]);function he(e){return me.has(e.skill.source)}function ge(e){return U(e?.skills?.allowBundled)}function W(e,t){if(!t||t.length===0||!he(e))return!0;let n=B(e.skill,e);return t.includes(n)||t.includes(e.skill.name)}function _e(e){let{entry:t,config:n,eligibility:r}=e,i=H(n,B(t.skill,t)),a=U(n?.skills?.allowBundled);return i?.enabled===!1||!W(t,a)?!1:o({os:t.metadata?.os,remotePlatforms:r?.remote?.platforms,always:t.metadata?.always,requires:t.metadata?.requires,hasBin:s,hasRemoteBin:r?.remote?.hasBin,hasAnyRemoteBin:r?.remote?.hasAnyBin,hasEnv:e=>!!(process.env[e]||i?.env?.[e]||i?.apiKey&&t.metadata?.primaryEnv===e),isConfigPathTruthy:e=>V(n,e)})}const ve=[/^ANTHROPIC_API_KEY$/i,/^OPENAI_API_KEY$/i,/^GEMINI_API_KEY$/i,/^OPENROUTER_API_KEY$/i,/^MINIMAX_API_KEY$/i,/^ELEVENLABS_API_KEY$/i,/^SYNTHETIC_API_KEY$/i,/^TELEGRAM_BOT_TOKEN$/i,/^DISCORD_BOT_TOKEN$/i,/^SLACK_(BOT|APP)_TOKEN$/i,/^LINE_CHANNEL_SECRET$/i,/^LINE_CHANNEL_ACCESS_TOKEN$/i,/^OPENCLAW_GATEWAY_(TOKEN|PASSWORD)$/i,/^AWS_(SECRET_ACCESS_KEY|SECRET_KEY|SESSION_TOKEN)$/i,/^(GH|GITHUB)_TOKEN$/i,/^(AZURE|AZURE_OPENAI|COHERE|AI_GATEWAY|OPENROUTER)_API_KEY$/i,/_?(API_KEY|TOKEN|PASSWORD|PRIVATE_KEY|SECRET)$/i],ye=[/^LANG$/,/^LC_.*$/i,/^PATH$/i,/^HOME$/i,/^USER$/i,/^SHELL$/i,/^TERM$/i,/^TZ$/i,/^NODE_ENV$/i];function G(e){if(e.includes(`\0`))return`Contains null bytes`;if(e.length>32768)return`Value exceeds maximum length`;if(/^[A-Za-z0-9+/=]{80,}$/.test(e))return`Value looks like base64-encoded credential data`}function K(e,t){return t.some(t=>t.test(e))}function q(e,t={}){let n={},r=[],i=[],a=[...ve,...t.customBlockedPatterns??[]],o=[...ye,...t.customAllowedPatterns??[]];for(let[s,c]of Object.entries(e)){let e=s.trim();if(!e)continue;if(K(e,a)){r.push(e);continue}if(t.strictMode&&!K(e,o)){r.push(e);continue}let l=G(c);if(l){if(l===`Contains null bytes`){r.push(e);continue}i.push(`${e}: ${l}`)}n[e]=c}return{allowed:n,blocked:r,warnings:i}}const J=e(`env-overrides`),Y=new Map;function be(){return new Set(Y.keys())}function xe(e,t){let n=Y.get(e);return n?(n.count+=1,process.env[e]===void 0&&(process.env[e]=n.value),!0):process.env[e]===void 0?(Y.set(e,{baseline:process.env[e],value:t,count:1}),!0):!1}function Se(e){let t=Y.get(e);if(t){if(--t.count,t.count>0){process.env[e]===void 0&&(process.env[e]=t.value);return}Y.delete(e),t.baseline===void 0?delete process.env[e]:process.env[e]=t.baseline}}const Ce=[/^OPENSSL_CONF$/i];function X(e,t){return t.some(t=>t.test(e))}function Z(e){return v(e)||X(e,Ce)}function we(e){if(Object.keys(e.overrides).length===0)return{allowed:{},blocked:[],warnings:[]};let t=q(e.overrides),n={},r=new Set,i=[...t.warnings];for(let[e,i]of Object.entries(t.allowed)){if(Z(e)){r.add(e);continue}n[e]=i}for(let a of t.blocked){if(Z(a)||!e.allowedSensitiveKeys.has(a)){r.add(a);continue}let t=e.overrides[a];if(!t)continue;let o=G(t);if(o){if(o===`Contains null bytes`){r.add(a);continue}i.push(`${a}: ${o}`)}n[a]=t}return{allowed:n,blocked:[...r],warnings:i}}function Q(e){let{updates:t,skillConfig:n,primaryEnv:i,requiredEnv:a,skillKey:o}=e,s=new Set,c=i?.trim();c&&s.add(c);for(let e of a??[]){let t=e.trim();t&&s.add(t)}let l={};if(n.env)for(let[e,t]of Object.entries(n.env)){let n=e.trim(),r=process.env[n]!==void 0&&!Y.has(n);!n||!t||r||(l[n]=t)}let u=r({value:n.apiKey,path:`skills.entries.${o}.apiKey`})??``;c&&(process.env[c]===void 0||Y.has(c))&&u&&(l[c]||(l[c]=u));let d=we({overrides:l,allowedSensitiveKeys:s});d.blocked.length>0&&J.warn(`Blocked skill env overrides for ${o}: ${d.blocked.join(`, `)}`),d.warnings.length>0&&J.warn(`Suspicious skill env overrides for ${o}: ${d.warnings.join(`, `)}`);for(let[e,n]of Object.entries(d.allowed))xe(e,n)&&(t.push({key:e}),process.env[e]=Y.get(e)?.value??n)}function $(e){return()=>{for(let t of e)Se(t.key)}}function Te(e){let{skills:t,config:n}=e,r=[];for(let e of t){let t=B(e.skill,e),i=H(n,t);i&&Q({updates:r,skillConfig:i,primaryEnv:e.metadata?.primaryEnv,requiredEnv:e.metadata?.requires?.env,skillKey:t})}return $(r)}function Ee(e){let{snapshot:t,config:n}=e;if(!t)return()=>{};let r=[];for(let e of t.skills){let t=H(n,e.name);t&&Q({updates:r,skillConfig:t,primaryEnv:e.primaryEnv,requiredEnv:e.requiredEnv,skillKey:e.name})}return $(r)}export{fe as S,w as _,W as a,_ as b,H as c,R as d,z as f,C as g,E as h,q as i,_e as l,D as m,Ee as n,V as o,B as p,be as r,ge as s,Te as t,O as u,y as v,de as x,v as y};
+//# sourceMappingURL=env-overrides-DHtB4kK3.js.map

package/dist/env-overrides-DXJbFrwI.js

@@ -1 +1,2 @@
 import{t as e}from"./subsystem-C5XF2Fy5.js";import{r as t}from"./string-normalization-BrUPaXaM.js";import{c as n}from"./types.secrets-C-5U96pc.js";import{t as r}from"./openclaw-exec-env-BWbOu_YC.js";import{a as i,c as a,d as o,f as s,i as c,l,n as u,o as d,p as f,r as ee,s as te,t as ne,u as re}from"./frontmatter-BkZkwkVO.js";var p={blockedKeys:[`NODE_OPTIONS`,`NODE_PATH`,`PYTHONHOME`,`PYTHONPATH`,`PERL5LIB`,`PERL5OPT`,`RUBYLIB`,`RUBYOPT`,`BASH_ENV`,`ENV`,`GIT_EXTERNAL_DIFF`,`SHELL`,`SHELLOPTS`,`PS4`,`GCONV_PATH`,`IFS`,`SSLKEYLOGFILE`],blockedOverrideKeys:[`HOME`,`ZDOTDIR`,`GIT_SSH_COMMAND`,`GIT_SSH`,`GIT_PROXY_COMMAND`,`GIT_ASKPASS`,`SSH_ASKPASS`,`LESSOPEN`,`LESSCLOSE`,`PAGER`,`MANPAGER`,`GIT_PAGER`,`EDITOR`,`VISUAL`,`FCEDIT`,`SUDO_EDITOR`,`PROMPT_COMMAND`,`HISTFILE`,`PERL5DB`,`PERL5DBCMD`,`OPENSSL_CONF`,`OPENSSL_ENGINES`,`PYTHONSTARTUP`,`WGETRC`,`CURL_HOME`],blockedOverridePrefixes:[`GIT_CONFIG_`,`NPM_CONFIG_`],blockedPrefixes:[`DYLD_`,`LD_`,`BASH_FUNC_`]};const m=/^[A-Za-z_][A-Za-z0-9_]*$/,h=p,g=Object.freeze(h.blockedKeys.map(e=>e.toUpperCase())),ie=Object.freeze(h.blockedPrefixes.map(e=>e.toUpperCase())),ae=Object.freeze((h.blockedOverrideKeys??[]).map(e=>e.toUpperCase())),oe=Object.freeze((h.blockedOverridePrefixes??[]).map(e=>e.toUpperCase())),se=Object.freeze([`TERM`,`LANG`,`LC_ALL`,`LC_CTYPE`,`LC_MESSAGES`,`COLORTERM`,`NO_COLOR`,`FORCE_COLOR`]),ce=new Set(g),le=new Set(ae),ue=new Set(se);function _(e,t){let n=e.trim();return!n||t?.portable&&!m.test(n)?null:n}function v(e){let t=_(e);if(!t)return!1;let n=t.toUpperCase();return ce.has(n)?!0:ie.some(e=>n.startsWith(e))}function y(e){let t=_(e);if(!t)return!1;let n=t.toUpperCase();return le.has(n)?!0:oe.some(e=>n.startsWith(e))}function de(e){let t=e?.baseEnv??process.env,n=e?.overrides??void 0,i=e?.blockPathOverrides??!0,a={};for(let[e,n]of Object.entries(t)){if(typeof n!=`string`)continue;let t=_(e,{portable:!0});!t||v(t)||(a[t]=n)}if(!n)return r(a);for(let[e,t]of Object.entries(n)){if(typeof t!=`string`)continue;let n=_(e,{portable:!0});if(!n)continue;let r=n.toUpperCase();i&&r===`PATH`||v(r)||y(r)||(a[n]=t)}return r(a)}function fe(e){let t=e?.overrides??void 0;if(!t)return;if(!e?.shellWrapper)return t;let n={};for(let[e,r]of Object.entries(t)){if(typeof r!=`string`)continue;let t=_(e,{portable:!0});t&&ue.has(t.toUpperCase())&&(n[t]=r)}return Object.keys(n).length>0?n:void 0}const b=/^v?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z.-]+))?(?:\+([0-9A-Za-z.-]+))?$/,x=/^[A-Za-z0-9][A-Za-z0-9._-]*$/;function S(e){let t=e.trim();if(!t)return{ok:!1,error:`missing npm spec`};if(/\s/.test(t))return{ok:!1,error:`unsupported npm spec: whitespace is not allowed`};if(t.includes(`://`))return{ok:!1,error:`unsupported npm spec: URLs are not allowed`};if(t.includes(`#`))return{ok:!1,error:`unsupported npm spec: git refs are not allowed`};if(t.includes(`:`))return{ok:!1,error:`unsupported npm spec: protocol specs are not allowed`};let n=t.lastIndexOf(`@`),r=n>0,i=r?t.slice(0,n):t,a=r?t.slice(n+1):``;if(!(i.startsWith(`@`)?/^@[a-z0-9][a-z0-9-._~]*\/[a-z0-9][a-z0-9-._~]*$/.test(i):/^[a-z0-9][a-z0-9-._~]*$/.test(i)))return{ok:!1,error:`unsupported npm spec: expected <name> or <name>@<version> from the npm registry`};if(!r)return{ok:!0,parsed:{name:i,raw:t,selectorKind:`none`,selectorIsPrerelease:!1}};if(!a)return{ok:!1,error:`unsupported npm spec: missing version/tag after @`};if(/[\\/]/.test(a))return{ok:!1,error:`unsupported npm spec: invalid version/tag`};let o=b.exec(a);return o?{ok:!0,parsed:{name:i,raw:t,selector:a,selectorKind:`exact-version`,selectorIsPrerelease:!!o[4]}}:x.test(a)?{ok:!0,parsed:{name:i,raw:t,selector:a,selectorKind:`tag`,selectorIsPrerelease:!1}}:{ok:!1,error:`unsupported npm spec: use an exact version or dist-tag (ranges are not allowed)`}}function C(e){let t=S(e);return t.ok?t.parsed:null}function w(e){let t=S(e);return t.ok?null:t.error}function T(e){return!!b.exec(e.trim())?.[4]}function E(e){return!e.resolvedVersion||!T(e.resolvedVersion)?!0:e.spec.selectorKind===`none`?!1:e.spec.selectorKind===`exact-version`?e.spec.selectorIsPrerelease:e.spec.selector?.toLowerCase()!==`latest`}function D(e){let t=e.spec.selectorKind===`none`||e.spec.selector?.toLowerCase()===`latest`?`Use "${e.spec.name}@beta" (or another prerelease tag) or an exact prerelease version to opt in explicitly.`:`Use an explicit prerelease tag or exact prerelease version if you want prerelease installs.`;return`Resolved ${e.spec.raw} to prerelease version ${e.resolvedVersion}, but prereleases are only installed when explicitly requested. ${t}`}function O(e){return re(e)}const k=/^[A-Za-z0-9][A-Za-z0-9@+._/-]*$/,A=/^[A-Za-z0-9][A-Za-z0-9._~+\-/]*(?:@[A-Za-z0-9][A-Za-z0-9._~+\-/]*)?$/,j=/^[A-Za-z0-9][A-Za-z0-9._\-[\]=<>!~+,]*$/;function M(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||t.startsWith(`-`)||t.includes(`\\`)||t.includes(`..`))&&k.test(t))return t}function N(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||t.startsWith(`-`))&&w(t)===null)return t}function P(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||t.startsWith(`-`)||t.includes(`\\`)||t.includes(`://`))&&A.test(t))return t}function F(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||t.startsWith(`-`)||t.includes(`\\`)||t.includes(`://`))&&j.test(t))return t}function I(e){if(typeof e!=`string`)return;let t=e.trim();if(!(!t||/\s/.test(t)))try{let e=new URL(t);return e.protocol!==`http:`&&e.protocol!==`https:`?void 0:e.toString()}catch{return}}function L(e){let t=i(e,[`brew`,`node`,`go`,`uv`,`download`]);if(!t)return;let{raw:n}=t,r=ne({kind:t.kind},t),a=ee(n.os);a.length>0&&(r.os=a);let o=M(n.formula);o&&(r.formula=o);let s=M(n.cask);if(!r.formula&&s&&(r.formula=s),r.kind===`node`){let e=N(n.package);e&&(r.package=e)}else if(r.kind===`uv`){let e=F(n.package);e&&(r.package=e)}let c=P(n.module);c&&(r.module=c);let l=I(n.url);if(l&&(r.url=l),typeof n.archive==`string`&&(r.archive=n.archive),typeof n.extract==`boolean`&&(r.extract=n.extract),typeof n.stripComponents==`number`&&(r.stripComponents=n.stripComponents),typeof n.targetDir==`string`&&(r.targetDir=n.targetDir),!(r.kind===`brew`&&!r.formula)&&!(r.kind===`node`&&!r.package)&&!(r.kind===`go`&&!r.module)&&!(r.kind===`uv`&&!r.package)&&!(r.kind===`download`&&!r.url))return r}function R(e){let t=d({frontmatter:e});if(!t)return;let n=l(t),r=te(t,L),i=a(t);return{always:typeof t.always==`boolean`?t.always:void 0,emoji:typeof t.emoji==`string`?t.emoji:void 0,homepage:typeof t.homepage==`string`?t.homepage:void 0,skillKey:typeof t.skillKey==`string`?t.skillKey:void 0,primaryEnv:typeof t.primaryEnv==`string`?t.primaryEnv:void 0,os:i.length>0?i:void 0,requires:n,install:r.length>0?r:void 0}}function z(e){return{userInvocable:c(u(e,`user-invocable`),!0),disableModelInvocation:c(u(e,`disable-model-invocation`),!1)}}function B(e,t){return t?.metadata?.skillKey??e.name}const pe={"browser.enabled":!0,"browser.evaluateEnabled":!0};function V(e,t){return f(e,t,pe)}function H(e,t){let n=e?.skills?.entries;if(!n||typeof n!=`object`)return;let r=n[t];if(!(!r||typeof r!=`object`))return r}function U(e){if(!e||!Array.isArray(e))return;let n=t(e);return n.length>0?n:void 0}const me=new Set([`openclaw-bundled`]);function he(e){return me.has(e.skill.source)}function ge(e){return U(e?.skills?.allowBundled)}function W(e,t){if(!t||t.length===0||!he(e))return!0;let n=B(e.skill,e);return t.includes(n)||t.includes(e.skill.name)}function _e(e){let{entry:t,config:n,eligibility:r}=e,i=H(n,B(t.skill,t)),a=U(n?.skills?.allowBundled);return i?.enabled===!1||!W(t,a)?!1:o({os:t.metadata?.os,remotePlatforms:r?.remote?.platforms,always:t.metadata?.always,requires:t.metadata?.requires,hasBin:s,hasRemoteBin:r?.remote?.hasBin,hasAnyRemoteBin:r?.remote?.hasAnyBin,hasEnv:e=>!!(process.env[e]||i?.env?.[e]||i?.apiKey&&t.metadata?.primaryEnv===e),isConfigPathTruthy:e=>V(n,e)})}const ve=[/^ANTHROPIC_API_KEY$/i,/^OPENAI_API_KEY$/i,/^GEMINI_API_KEY$/i,/^OPENROUTER_API_KEY$/i,/^MINIMAX_API_KEY$/i,/^ELEVENLABS_API_KEY$/i,/^SYNTHETIC_API_KEY$/i,/^TELEGRAM_BOT_TOKEN$/i,/^DISCORD_BOT_TOKEN$/i,/^SLACK_(BOT|APP)_TOKEN$/i,/^LINE_CHANNEL_SECRET$/i,/^LINE_CHANNEL_ACCESS_TOKEN$/i,/^OPENCLAW_GATEWAY_(TOKEN|PASSWORD)$/i,/^AWS_(SECRET_ACCESS_KEY|SECRET_KEY|SESSION_TOKEN)$/i,/^(GH|GITHUB)_TOKEN$/i,/^(AZURE|AZURE_OPENAI|COHERE|AI_GATEWAY|OPENROUTER)_API_KEY$/i,/_?(API_KEY|TOKEN|PASSWORD|PRIVATE_KEY|SECRET)$/i],ye=[/^LANG$/,/^LC_.*$/i,/^PATH$/i,/^HOME$/i,/^USER$/i,/^SHELL$/i,/^TERM$/i,/^TZ$/i,/^NODE_ENV$/i];function G(e){if(e.includes(`\0`))return`Contains null bytes`;if(e.length>32768)return`Value exceeds maximum length`;if(/^[A-Za-z0-9+/=]{80,}$/.test(e))return`Value looks like base64-encoded credential data`}function K(e,t){return t.some(t=>t.test(e))}function q(e,t={}){let n={},r=[],i=[],a=[...ve,...t.customBlockedPatterns??[]],o=[...ye,...t.customAllowedPatterns??[]];for(let[s,c]of Object.entries(e)){let e=s.trim();if(!e)continue;if(K(e,a)){r.push(e);continue}if(t.strictMode&&!K(e,o)){r.push(e);continue}let l=G(c);if(l){if(l===`Contains null bytes`){r.push(e);continue}i.push(`${e}: ${l}`)}n[e]=c}return{allowed:n,blocked:r,warnings:i}}const J=e(`env-overrides`),Y=new Map;function be(){return new Set(Y.keys())}function xe(e,t){let n=Y.get(e);return n?(n.count+=1,process.env[e]===void 0&&(process.env[e]=n.value),!0):process.env[e]===void 0?(Y.set(e,{baseline:process.env[e],value:t,count:1}),!0):!1}function Se(e){let t=Y.get(e);if(t){if(--t.count,t.count>0){process.env[e]===void 0&&(process.env[e]=t.value);return}Y.delete(e),t.baseline===void 0?delete process.env[e]:process.env[e]=t.baseline}}const Ce=[/^OPENSSL_CONF$/i];function X(e,t){return t.some(t=>t.test(e))}function Z(e){return v(e)||X(e,Ce)}function we(e){if(Object.keys(e.overrides).length===0)return{allowed:{},blocked:[],warnings:[]};let t=q(e.overrides),n={},r=new Set,i=[...t.warnings];for(let[e,i]of Object.entries(t.allowed)){if(Z(e)){r.add(e);continue}n[e]=i}for(let a of t.blocked){if(Z(a)||!e.allowedSensitiveKeys.has(a)){r.add(a);continue}let t=e.overrides[a];if(!t)continue;let o=G(t);if(o){if(o===`Contains null bytes`){r.add(a);continue}i.push(`${a}: ${o}`)}n[a]=t}return{allowed:n,blocked:[...r],warnings:i}}function Q(e){let{updates:t,skillConfig:r,primaryEnv:i,requiredEnv:a,skillKey:o}=e,s=new Set,c=i?.trim();c&&s.add(c);for(let e of a??[]){let t=e.trim();t&&s.add(t)}let l={};if(r.env)for(let[e,t]of Object.entries(r.env)){let n=e.trim(),r=process.env[n]!==void 0&&!Y.has(n);!n||!t||r||(l[n]=t)}let u=n({value:r.apiKey,path:`skills.entries.${o}.apiKey`})??``;c&&(process.env[c]===void 0||Y.has(c))&&u&&(l[c]||(l[c]=u));let d=we({overrides:l,allowedSensitiveKeys:s});d.blocked.length>0&&J.warn(`Blocked skill env overrides for ${o}: ${d.blocked.join(`, `)}`),d.warnings.length>0&&J.warn(`Suspicious skill env overrides for ${o}: ${d.warnings.join(`, `)}`);for(let[e,n]of Object.entries(d.allowed))xe(e,n)&&(t.push({key:e}),process.env[e]=Y.get(e)?.value??n)}function $(e){return()=>{for(let t of e)Se(t.key)}}function Te(e){let{skills:t,config:n}=e,r=[];for(let e of t){let t=B(e.skill,e),i=H(n,t);i&&Q({updates:r,skillConfig:i,primaryEnv:e.metadata?.primaryEnv,requiredEnv:e.metadata?.requires?.env,skillKey:t})}return $(r)}function Ee(e){let{snapshot:t,config:n}=e;if(!t)return()=>{};let r=[];for(let e of t.skills){let t=H(n,e.name);t&&Q({updates:r,skillConfig:t,primaryEnv:e.primaryEnv,requiredEnv:e.requiredEnv,skillKey:e.name})}return $(r)}export{fe as S,w as _,W as a,_ as b,H as c,R as d,z as f,C as g,E as h,q as i,_e as l,D as m,Ee as n,V as o,B as p,be as r,ge as s,Te as t,O as u,y as v,de as x,v as y};
+//# sourceMappingURL=env-overrides-DXJbFrwI.js.map

package/dist/errors-6SQWM9dj.js

@@ -1 +1,2 @@
 import{n as e}from"./redact-CnRxK70G.js";function t(e){if(!e||typeof e!=`object`)return;let t=e.code;if(typeof t==`string`)return t;if(typeof t==`number`)return String(t)}function n(e){if(!e||typeof e!=`object`)return``;let t=e.name;return typeof t==`string`?t:``}function r(e,t){let n=[e],r=new Set,i=[];for(;n.length>0;){let e=n.shift();if(!(e==null||r.has(e))&&(r.add(e),i.push(e),!(!e||typeof e!=`object`||!t)))for(let i of t(e))i!=null&&!r.has(i)&&n.push(i)}return i}function i(e){return!!(e&&typeof e==`object`&&`code`in e)}function a(e,t){return i(e)&&e.code===t}function o(t){let n;if(t instanceof Error)n=t.message||t.name||`Error`;else if(typeof t==`string`)n=t;else if(typeof t==`number`||typeof t==`boolean`||typeof t==`bigint`)n=String(t);else try{n=JSON.stringify(t)}catch{n=Object.prototype.toString.call(t)}return e(n)}function s(n){return t(n)===`INVALID_CONFIG`?o(n):n instanceof Error?e(n.stack??n.message??n.name):o(n)}export{a,s as i,t as n,i as o,o as r,n as s,r as t};
+//# sourceMappingURL=errors-6SQWM9dj.js.map

package/dist/errors-Bunti32V.js

@@ -1 +1,2 @@
 import{n as e}from"./redact-3_CiXMY6.js";function t(e){if(!e||typeof e!=`object`)return;let t=e.code;if(typeof t==`string`)return t;if(typeof t==`number`)return String(t)}function n(e){if(!e||typeof e!=`object`)return``;let t=e.name;return typeof t==`string`?t:``}function r(e,t){let n=[e],r=new Set,i=[];for(;n.length>0;){let e=n.shift();if(!(e==null||r.has(e))&&(r.add(e),i.push(e),!(!e||typeof e!=`object`||!t)))for(let i of t(e))i!=null&&!r.has(i)&&n.push(i)}return i}function i(e){return!!(e&&typeof e==`object`&&`code`in e)}function a(e,t){return i(e)&&e.code===t}function o(t){let n;if(t instanceof Error)n=t.message||t.name||`Error`;else if(typeof t==`string`)n=t;else if(typeof t==`number`||typeof t==`boolean`||typeof t==`bigint`)n=String(t);else try{n=JSON.stringify(t)}catch{n=Object.prototype.toString.call(t)}return e(n)}function s(n){return t(n)===`INVALID_CONFIG`?o(n):n instanceof Error?e(n.stack??n.message??n.name):o(n)}export{a,s as i,t as n,i as o,o as r,n as s,r as t};
+//# sourceMappingURL=errors-Bunti32V.js.map

package/dist/exec-B3eleY5O.js

@@ -1 +1,2 @@
 import{T as e,v as t}from"./subsystem-BLbY429l.js";import{n}from"./entry.js";import{n as r,t as i}from"./logger-kQAOe3qp.js";import{execFile as a,spawn as o}from"node:child_process";import s from"node:process";import c from"node:path";import l from"node:fs";import{promisify as u}from"node:util";const d=[`EBADF`];function f(e){return[e.hasInput?`pipe`:e.preferInherit?`inherit`:`pipe`,`pipe`,`pipe`]}function p(e,t){let n=e&&typeof e==`object`&&`code`in e?String(e.code):``;return n.length>0&&t.includes(n)}async function m(e,t,n){let r=e(t[0],t.slice(1),n);return await new Promise((e,t)=>{let n=!1,i=()=>{r.removeListener(`error`,o),r.removeListener(`spawn`,s)},a=()=>{n||(n=!0,i(),e(r))},o=e=>{n||(n=!0,i(),t(e))},s=()=>{a()};r.once(`error`,o),r.once(`spawn`,s),process.nextTick(()=>{typeof r.pid==`number`&&a()})})}async function h(e){let t=e.spawnImpl??o,n=e.retryCodes??d,r={...e.options},i=e.fallbacks??[],a=[{options:r},...i.map(e=>({label:e.label,options:{...r,...e.options}}))],s;for(let r=0;r<a.length;r+=1){let o=a[r];try{return{child:await m(t,e.argv,o.options),usedFallback:r>0,fallbackLabel:o.label}}catch(t){s=t;let a=i[r];if(!a||!p(t,n))throw t;e.onFallback?.(t,a)}}throw s}function g(e){if((e.platform??s.platform)!==`win32`)return e.command;let t=c.basename(e.command).toLowerCase();return c.extname(t)?e.command:e.cmdCommands.includes(t)?`${e.command}.cmd`:e.command}const _=u(a),v=/[&|<>^%\r\n]/;function y(e){if(s.platform!==`win32`)return!1;let t=c.extname(e).toLowerCase();return t===`.cmd`||t===`.bat`}function b(e){if(v.test(e))throw Error(`Unsafe Windows cmd.exe argument detected: ${JSON.stringify(e)}. Pass an explicit shell-wrapper argv at the call site instead.`);return!e.includes(` `)&&!e.includes(`"`)?e:`"${e.replace(/"/g,`""`)}"`}function x(e,t){return[b(e),...t.map(b)].join(` `)}function S(e){if(s.platform!==`win32`||e.length===0)return null;let t=c.basename(e[0]).toLowerCase().replace(/\.(cmd|exe|bat)$/,``),n=t===`npx`?`npx-cli.js`:t===`npm`?`npm-cli.js`:null;if(!n)return null;let r=c.dirname(s.execPath),i=c.join(r,`node_modules`,`npm`,`bin`,n);if(!l.existsSync(i)){let t=e[0]??``;return[c.extname(t).toLowerCase()?t:`${t}.cmd`,...e.slice(1)]}return[s.execPath,i,...e.slice(1)]}function C(e){return g({command:e,cmdCommands:[`pnpm`,`yarn`]})}function w(e){return!1}async function T(n,a,o=1e4){let c=typeof o==`number`?{timeout:o,encoding:`utf8`}:{timeout:o.timeoutMs,maxBuffer:o.maxBuffer,cwd:o.cwd,encoding:`utf8`};try{let t=[n,...a],o,l;if(s.platform===`win32`){let e=S(t);e?(o=e[0]??``,l=e.slice(1)):(o=C(n),l=a)}else o=C(n),l=a;let{stdout:u,stderr:d}=y(o)?await _(s.env.ComSpec??`cmd.exe`,[`/d`,`/s`,`/c`,x(o,l)],{...c,windowsVerbatimArguments:!0}):await _(o,l,c);return e()&&(u.trim()&&i(u.trim()),d.trim()&&r(d.trim())),{stdout:u,stderr:d}}catch(i){throw e()&&r(t(`Command failed: ${n} ${a.join(` `)}`)),i}}function E(e){let t=e.baseEnv??s.env,r=e.argv,i=(()=>{let e=c.basename(r[0]??``);return e===`npm`||e===`npm.cmd`||e===`npm.exe`?!0:e===`node`||e===`node.exe`?(r[1]??``).includes(`npm-cli.js`):!1})(),a=e.env?{...t,...e.env}:{...t},o=Object.fromEntries(Object.entries(a).filter(([,e])=>e!==void 0).map(([e,t])=>[e,String(t)]));return i&&(o.NPM_CONFIG_FUND??=`false`,o.npm_config_fund??=`false`),n(o)}async function D(e,t){let n=typeof t==`number`?{timeoutMs:t}:t,{timeoutMs:r,cwd:i,input:a,env:c,noOutputTimeoutMs:l}=n,{windowsVerbatimArguments:u}=n,d=a!==void 0,p=E({argv:e,env:c}),m=f({hasInput:d,preferInherit:!0}),h=s.platform===`win32`?S(e)??e:e,g=h===e?C(e[0]??``):h[0]??``,_=y(g),v=o(_?s.env.ComSpec??`cmd.exe`:g,_?[`/d`,`/s`,`/c`,x(g,h.slice(1))]:h.slice(1),{stdio:m,cwd:i,env:p,windowsVerbatimArguments:_?!0:u,...w({resolvedCommand:g,platform:s.platform})?{shell:!0}:{}});return await new Promise((e,t)=>{let n=``,i=``,o=!1,s=!1,c=!1,u=null,f=typeof l==`number`&&Number.isFinite(l)&&l>0,p=()=>{u&&=(clearTimeout(u),null)},m=()=>{!f||o||(p(),u=setTimeout(()=>{o||(c=!0,typeof v.kill==`function`&&v.kill(`SIGKILL`))},Math.floor(l)))},h=setTimeout(()=>{s=!0,typeof v.kill==`function`&&v.kill(`SIGKILL`)},r);m(),d&&v.stdin&&(v.stdin.write(a??``),v.stdin.end()),v.stdout?.on(`data`,e=>{n+=e.toString(),m()}),v.stderr?.on(`data`,e=>{i+=e.toString(),m()}),v.on(`error`,e=>{o||(o=!0,clearTimeout(h),p(),t(e))}),v.on(`close`,(t,r)=>{if(o)return;o=!0,clearTimeout(h),p();let a=c?`no-output-timeout`:s?`timeout`:r==null?`exit`:`signal`;e({pid:v.pid??void 0,stdout:n,stderr:i,code:t,signal:r,killed:v.killed,termination:a,noOutputTimedOut:c})})})}export{h as i,T as n,g as r,D as t};
+//# sourceMappingURL=exec-B3eleY5O.js.map

package/dist/exec-DHqLtFYt.js

@@ -1 +1,2 @@
 import{T as e,v as t}from"./subsystem-C5XF2Fy5.js";import{t as n}from"./openclaw-exec-env-BWbOu_YC.js";import{n as r,t as i}from"./logger-Bl8URnrW.js";import a from"node:process";import o from"node:fs";import s from"node:path";import{promisify as c}from"node:util";import{execFile as l,spawn as u}from"node:child_process";const d=[`EBADF`];function f(e){return[e.hasInput?`pipe`:e.preferInherit?`inherit`:`pipe`,`pipe`,`pipe`]}function p(e,t){let n=e&&typeof e==`object`&&`code`in e?String(e.code):``;return n.length>0&&t.includes(n)}async function m(e,t,n){let r=e(t[0],t.slice(1),n);return await new Promise((e,t)=>{let n=!1,i=()=>{r.removeListener(`error`,o),r.removeListener(`spawn`,s)},a=()=>{n||(n=!0,i(),e(r))},o=e=>{n||(n=!0,i(),t(e))},s=()=>{a()};r.once(`error`,o),r.once(`spawn`,s),process.nextTick(()=>{typeof r.pid==`number`&&a()})})}async function h(e){let t=e.spawnImpl??u,n=e.retryCodes??d,r={...e.options},i=e.fallbacks??[],a=[{options:r},...i.map(e=>({label:e.label,options:{...r,...e.options}}))],o;for(let r=0;r<a.length;r+=1){let s=a[r];try{return{child:await m(t,e.argv,s.options),usedFallback:r>0,fallbackLabel:s.label}}catch(t){o=t;let a=i[r];if(!a||!p(t,n))throw t;e.onFallback?.(t,a)}}throw o}function g(e){if((e.platform??a.platform)!==`win32`)return e.command;let t=s.basename(e.command).toLowerCase();return s.extname(t)?e.command:e.cmdCommands.includes(t)?`${e.command}.cmd`:e.command}const _=c(l),v=/[&|<>^%\r\n]/;function y(e){if(a.platform!==`win32`)return!1;let t=s.extname(e).toLowerCase();return t===`.cmd`||t===`.bat`}function b(e){if(v.test(e))throw Error(`Unsafe Windows cmd.exe argument detected: ${JSON.stringify(e)}. Pass an explicit shell-wrapper argv at the call site instead.`);return!e.includes(` `)&&!e.includes(`"`)?e:`"${e.replace(/"/g,`""`)}"`}function x(e,t){return[b(e),...t.map(b)].join(` `)}function S(e){if(a.platform!==`win32`||e.length===0)return null;let t=s.basename(e[0]).toLowerCase().replace(/\.(cmd|exe|bat)$/,``),n=t===`npx`?`npx-cli.js`:t===`npm`?`npm-cli.js`:null;if(!n)return null;let r=s.dirname(a.execPath),i=s.join(r,`node_modules`,`npm`,`bin`,n);if(!o.existsSync(i)){let t=e[0]??``;return[s.extname(t).toLowerCase()?t:`${t}.cmd`,...e.slice(1)]}return[a.execPath,i,...e.slice(1)]}function C(e){return g({command:e,cmdCommands:[`pnpm`,`yarn`]})}function w(e){return!1}async function T(n,o,s=1e4){let c=typeof s==`number`?{timeout:s,encoding:`utf8`}:{timeout:s.timeoutMs,maxBuffer:s.maxBuffer,cwd:s.cwd,encoding:`utf8`};try{let t=[n,...o],s,l;if(a.platform===`win32`){let e=S(t);e?(s=e[0]??``,l=e.slice(1)):(s=C(n),l=o)}else s=C(n),l=o;let{stdout:u,stderr:d}=y(s)?await _(a.env.ComSpec??`cmd.exe`,[`/d`,`/s`,`/c`,x(s,l)],{...c,windowsVerbatimArguments:!0}):await _(s,l,c);return e()&&(u.trim()&&i(u.trim()),d.trim()&&r(d.trim())),{stdout:u,stderr:d}}catch(i){throw e()&&r(t(`Command failed: ${n} ${o.join(` `)}`)),i}}function E(e){let t=e.baseEnv??a.env,r=e.argv,i=(()=>{let e=s.basename(r[0]??``);return e===`npm`||e===`npm.cmd`||e===`npm.exe`?!0:e===`node`||e===`node.exe`?(r[1]??``).includes(`npm-cli.js`):!1})(),o=e.env?{...t,...e.env}:{...t},c=Object.fromEntries(Object.entries(o).filter(([,e])=>e!==void 0).map(([e,t])=>[e,String(t)]));return i&&(c.NPM_CONFIG_FUND??=`false`,c.npm_config_fund??=`false`),n(c)}async function D(e,t){let n=typeof t==`number`?{timeoutMs:t}:t,{timeoutMs:r,cwd:i,input:o,env:s,noOutputTimeoutMs:c}=n,{windowsVerbatimArguments:l}=n,d=o!==void 0,p=E({argv:e,env:s}),m=f({hasInput:d,preferInherit:!0}),h=a.platform===`win32`?S(e)??e:e,g=h===e?C(e[0]??``):h[0]??``,_=y(g),v=u(_?a.env.ComSpec??`cmd.exe`:g,_?[`/d`,`/s`,`/c`,x(g,h.slice(1))]:h.slice(1),{stdio:m,cwd:i,env:p,windowsVerbatimArguments:_?!0:l,...w({resolvedCommand:g,platform:a.platform})?{shell:!0}:{}});return await new Promise((e,t)=>{let n=``,i=``,a=!1,s=!1,l=!1,u=null,f=typeof c==`number`&&Number.isFinite(c)&&c>0,p=()=>{u&&=(clearTimeout(u),null)},m=()=>{!f||a||(p(),u=setTimeout(()=>{a||(l=!0,typeof v.kill==`function`&&v.kill(`SIGKILL`))},Math.floor(c)))},h=setTimeout(()=>{s=!0,typeof v.kill==`function`&&v.kill(`SIGKILL`)},r);m(),d&&v.stdin&&(v.stdin.write(o??``),v.stdin.end()),v.stdout?.on(`data`,e=>{n+=e.toString(),m()}),v.stderr?.on(`data`,e=>{i+=e.toString(),m()}),v.on(`error`,e=>{a||(a=!0,clearTimeout(h),p(),t(e))}),v.on(`close`,(t,r)=>{if(a)return;a=!0,clearTimeout(h),p();let o=l?`no-output-timeout`:s?`timeout`:r==null?`exit`:`signal`;e({pid:v.pid??void 0,stdout:n,stderr:i,code:t,signal:r,killed:v.killed,termination:o,noOutputTimedOut:l})})})}export{h as i,T as n,g as r,D as t};
+//# sourceMappingURL=exec-DHqLtFYt.js.map

package/dist/exec-approvals-BXO9Cezj.js

@@ -1,3 +1,4 @@
 import{_ as e}from"./paths-BjD3T_xq.js";import{t}from"./session-key-C7F_iqYg.js";import n from"node:path";import r from"node:fs";import i from"node:crypto";import a from"node:net";async function o(e){let{socketPath:t,payload:n,timeoutMs:r,accept:i}=e;return await new Promise(e=>{let o=new a.Socket,s=!1,c=``,l=t=>{if(!s){s=!0;try{o.destroy()}catch{}e(t)}},u=setTimeout(()=>l(null),r);o.on(`error`,()=>l(null)),o.connect(t,()=>{o.write(`${n}\n`)}),o.on(`data`,e=>{c+=e.toString(`utf8`);let t=c.indexOf(`
 `);for(;t!==-1;){let e=c.slice(0,t).trim();if(c=c.slice(t+1),t=c.indexOf(`
 `),e)try{let t=i(JSON.parse(e));if(t===void 0)continue;clearTimeout(u),l(t);return}catch{}}})})}function s(e){let t=e?.trim().toLowerCase();return t===`sandbox`||t===`gateway`||t===`node`?t:null}function c(e){let t=e?.trim().toLowerCase();return t===`deny`||t===`allowlist`||t===`full`?t:null}function l(e){let t=e?.trim().toLowerCase();return t===`off`||t===`on-miss`||t===`always`?t:null}const u=12e4;function d(e){return i.createHash(`sha256`).update(e??``).digest(`hex`)}function f(){return e(`~/.qbotclaw/exec-approvals.json`)}function p(){return e(`~/.qbotclaw/exec-approvals.sock`)}function m(e){let t=e?.trim()??``;return t?t.toLowerCase():null}function h(e,t){let n=[],r=new Set,i=e=>{let t=m(e.pattern);!t||r.has(t)||(r.add(t),n.push(e))};for(let t of e.allowlist??[])i(t);for(let e of t.allowlist??[])i(e);return{security:e.security??t.security,ask:e.ask??t.ask,askFallback:e.askFallback??t.askFallback,autoAllowSkills:e.autoAllowSkills??t.autoAllowSkills,allowlist:n.length>0?n:void 0}}function g(e){let t=n.dirname(e);r.mkdirSync(t,{recursive:!0})}function _(e){if(!Array.isArray(e)||e.length===0)return Array.isArray(e)?e:void 0;let t=!1,n=[];for(let r of e)if(typeof r==`string`){let e=r.trim();e&&n.push({pattern:e}),t=!0}else if(r&&typeof r==`object`&&!Array.isArray(r)){let e=r.pattern;typeof e==`string`&&e.trim().length>0?n.push(r):t=!0}else t=!0;return t?n.length>0?n:void 0:e}function v(e){if(!Array.isArray(e)||e.length===0)return e;let t=!1,n=e.map(e=>e.id?e:(t=!0,{...e,id:i.randomUUID()}));return t?n:e}function y(e){let n=e.socket?.path?.trim(),r=e.socket?.token?.trim(),i={...e.agents},a=i.default;if(a){let e=i[t];i[t]=e?h(e,a):a,delete i.default}for(let[e,t]of Object.entries(i)){let n=v(_(t.allowlist));n!==t.allowlist&&(i[e]={...t,allowlist:n})}return{version:1,socket:{path:n&&n.length>0?n:void 0,token:r&&r.length>0?r:void 0},defaults:{security:e.defaults?.security,ask:e.defaults?.ask,askFallback:e.defaults?.askFallback,autoAllowSkills:e.defaults?.autoAllowSkills},agents:i}}function b(e){let t=e.current?.socket?.path?.trim(),n=e.current?.socket?.token?.trim(),r=e.normalized.socket?.path?.trim()??t??p(),i=e.normalized.socket?.token?.trim()??n??``;return{...e.normalized,socket:{path:r,token:i}}}function x(){return i.randomBytes(24).toString(`base64url`)}function S(){let e=f();if(!r.existsSync(e))return{path:e,exists:!1,raw:null,file:y({version:1,agents:{}}),hash:d(null)};let t=r.readFileSync(e,`utf8`),n=null;try{n=JSON.parse(t)}catch{n=null}return{path:e,exists:!0,raw:t,file:n?.version===1?y(n):y({version:1,agents:{}}),hash:d(t)}}function C(){let e=f();try{if(!r.existsSync(e))return y({version:1,agents:{}});let t=r.readFileSync(e,`utf8`),n=JSON.parse(t);return n?.version===1?y(n):y({version:1,agents:{}})}catch{return y({version:1,agents:{}})}}function w(e){let t=f();g(t),r.writeFileSync(t,`${JSON.stringify(e,null,2)}\n`,{mode:384});try{r.chmodSync(t,384)}catch{}}function T(){let e=y(C()),t=e.socket?.path?.trim(),n=e.socket?.token?.trim(),r={...e,socket:{path:t&&t.length>0?t:p(),token:n&&n.length>0?n:x()}};return w(r),r}function E(e,t){return e===`allowlist`||e===`full`||e===`deny`?e:t}function D(e,t){return e===`always`||e===`off`||e===`on-miss`?e:t}function O(t,n){let r=T();return k({file:r,agentId:t,overrides:n,path:f(),socketPath:e(r.socket?.path??p()),token:r.socket?.token??``})}function k(t){let n=y(t.file),r=n.defaults??{},i=t.agentId??`main`,a=n.agents?.[i]??{},o=n.agents?.[`*`]??{},s=t.overrides?.security??`deny`,c=t.overrides?.ask??`on-miss`,l=t.overrides?.askFallback??`deny`,u=t.overrides?.autoAllowSkills??!1,d={security:E(r.security,s),ask:D(r.ask,c),askFallback:E(r.askFallback??l,l),autoAllowSkills:!!(r.autoAllowSkills??u)},m={security:E(a.security??o.security??d.security,d.security),ask:D(a.ask??o.ask??d.ask,d.ask),askFallback:E(a.askFallback??o.askFallback??d.askFallback,d.askFallback),autoAllowSkills:!!(a.autoAllowSkills??o.autoAllowSkills??d.autoAllowSkills)},h=[...Array.isArray(o.allowlist)?o.allowlist:[],...Array.isArray(a.allowlist)?a.allowlist:[]];return{path:t.path??f(),socketPath:e(t.socketPath??n.socket?.path??p()),token:t.token??n.socket?.token??``,defaults:d,agent:m,allowlist:h,file:n}}function A(e){return e.ask===`always`||e.ask===`on-miss`&&e.security===`allowlist`&&(!e.analysisOk||!e.allowlistSatisfied)}function j(e,t,n,r,a){let o=t??`main`,s=e.agents??{},c=s[o]??{},l=(Array.isArray(c.allowlist)?c.allowlist:[]).map(e=>e.pattern===n.pattern?{...e,id:e.id??i.randomUUID(),lastUsedAt:Date.now(),lastUsedCommand:r,lastResolvedPath:a}:e);s[o]={...c,allowlist:l},e.agents=s,w(e)}function M(e,t,n){let r=t??`main`,a=e.agents??{},o=a[r]??{},s=Array.isArray(o.allowlist)?o.allowlist:[],c=n.trim();c&&(s.some(e=>e.pattern===c)||(s.push({id:i.randomUUID(),pattern:c,lastUsedAt:Date.now()}),a[r]={...o,allowlist:s},e.agents=a,w(e)))}function N(e,t){let n={deny:0,allowlist:1,full:2};return n[e]<=n[t]?e:t}function P(e,t){let n={off:0,"on-miss":1,always:2};return n[e]>=n[t]?e:t}export{w as _,P as a,y as c,c as d,S as f,k as g,O as h,C as i,l,A as m,M as n,b as o,j as p,T as r,N as s,u as t,s as u,o as v};
+//# sourceMappingURL=exec-approvals-BXO9Cezj.js.map

package/dist/exec-approvals-BpBNEy6i.js

@@ -1,3 +1,4 @@
 import{_ as e}from"./paths-B4IRk3wi.js";import{t}from"./session-key-D3P0tf5P.js";import n from"node:fs";import r from"node:path";import i from"node:crypto";import a from"node:net";async function o(e){let{socketPath:t,payload:n,timeoutMs:r,accept:i}=e;return await new Promise(e=>{let o=new a.Socket,s=!1,c=``,l=t=>{if(!s){s=!0;try{o.destroy()}catch{}e(t)}},u=setTimeout(()=>l(null),r);o.on(`error`,()=>l(null)),o.connect(t,()=>{o.write(`${n}\n`)}),o.on(`data`,e=>{c+=e.toString(`utf8`);let t=c.indexOf(`
 `);for(;t!==-1;){let e=c.slice(0,t).trim();if(c=c.slice(t+1),t=c.indexOf(`
 `),e)try{let t=i(JSON.parse(e));if(t===void 0)continue;clearTimeout(u),l(t);return}catch{}}})})}function s(e){let t=e?.trim().toLowerCase();return t===`sandbox`||t===`gateway`||t===`node`?t:null}function c(e){let t=e?.trim().toLowerCase();return t===`deny`||t===`allowlist`||t===`full`?t:null}function l(e){let t=e?.trim().toLowerCase();return t===`off`||t===`on-miss`||t===`always`?t:null}const u=12e4;function d(e){return i.createHash(`sha256`).update(e??``).digest(`hex`)}function f(){return e(`~/.qbotclaw/exec-approvals.json`)}function p(){return e(`~/.qbotclaw/exec-approvals.sock`)}function m(e){let t=e?.trim()??``;return t?t.toLowerCase():null}function h(e,t){let n=[],r=new Set,i=e=>{let t=m(e.pattern);!t||r.has(t)||(r.add(t),n.push(e))};for(let t of e.allowlist??[])i(t);for(let e of t.allowlist??[])i(e);return{security:e.security??t.security,ask:e.ask??t.ask,askFallback:e.askFallback??t.askFallback,autoAllowSkills:e.autoAllowSkills??t.autoAllowSkills,allowlist:n.length>0?n:void 0}}function g(e){let t=r.dirname(e);n.mkdirSync(t,{recursive:!0})}function _(e){if(!Array.isArray(e)||e.length===0)return Array.isArray(e)?e:void 0;let t=!1,n=[];for(let r of e)if(typeof r==`string`){let e=r.trim();e&&n.push({pattern:e}),t=!0}else if(r&&typeof r==`object`&&!Array.isArray(r)){let e=r.pattern;typeof e==`string`&&e.trim().length>0?n.push(r):t=!0}else t=!0;return t?n.length>0?n:void 0:e}function v(e){if(!Array.isArray(e)||e.length===0)return e;let t=!1,n=e.map(e=>e.id?e:(t=!0,{...e,id:i.randomUUID()}));return t?n:e}function y(e){let n=e.socket?.path?.trim(),r=e.socket?.token?.trim(),i={...e.agents},a=i.default;if(a){let e=i[t];i[t]=e?h(e,a):a,delete i.default}for(let[e,t]of Object.entries(i)){let n=v(_(t.allowlist));n!==t.allowlist&&(i[e]={...t,allowlist:n})}return{version:1,socket:{path:n&&n.length>0?n:void 0,token:r&&r.length>0?r:void 0},defaults:{security:e.defaults?.security,ask:e.defaults?.ask,askFallback:e.defaults?.askFallback,autoAllowSkills:e.defaults?.autoAllowSkills},agents:i}}function b(e){let t=e.current?.socket?.path?.trim(),n=e.current?.socket?.token?.trim(),r=e.normalized.socket?.path?.trim()??t??p(),i=e.normalized.socket?.token?.trim()??n??``;return{...e.normalized,socket:{path:r,token:i}}}function x(){return i.randomBytes(24).toString(`base64url`)}function S(){let e=f();if(!n.existsSync(e))return{path:e,exists:!1,raw:null,file:y({version:1,agents:{}}),hash:d(null)};let t=n.readFileSync(e,`utf8`),r=null;try{r=JSON.parse(t)}catch{r=null}return{path:e,exists:!0,raw:t,file:r?.version===1?y(r):y({version:1,agents:{}}),hash:d(t)}}function C(){let e=f();try{if(!n.existsSync(e))return y({version:1,agents:{}});let t=n.readFileSync(e,`utf8`),r=JSON.parse(t);return r?.version===1?y(r):y({version:1,agents:{}})}catch{return y({version:1,agents:{}})}}function w(e){let t=f();g(t),n.writeFileSync(t,`${JSON.stringify(e,null,2)}\n`,{mode:384});try{n.chmodSync(t,384)}catch{}}function T(){let e=y(C()),t=e.socket?.path?.trim(),n=e.socket?.token?.trim(),r={...e,socket:{path:t&&t.length>0?t:p(),token:n&&n.length>0?n:x()}};return w(r),r}function E(e,t){return e===`allowlist`||e===`full`||e===`deny`?e:t}function D(e,t){return e===`always`||e===`off`||e===`on-miss`?e:t}function O(t,n){let r=T();return k({file:r,agentId:t,overrides:n,path:f(),socketPath:e(r.socket?.path??p()),token:r.socket?.token??``})}function k(t){let n=y(t.file),r=n.defaults??{},i=t.agentId??`main`,a=n.agents?.[i]??{},o=n.agents?.[`*`]??{},s=t.overrides?.security??`deny`,c=t.overrides?.ask??`on-miss`,l=t.overrides?.askFallback??`deny`,u=t.overrides?.autoAllowSkills??!1,d={security:E(r.security,s),ask:D(r.ask,c),askFallback:E(r.askFallback??l,l),autoAllowSkills:!!(r.autoAllowSkills??u)},m={security:E(a.security??o.security??d.security,d.security),ask:D(a.ask??o.ask??d.ask,d.ask),askFallback:E(a.askFallback??o.askFallback??d.askFallback,d.askFallback),autoAllowSkills:!!(a.autoAllowSkills??o.autoAllowSkills??d.autoAllowSkills)},h=[...Array.isArray(o.allowlist)?o.allowlist:[],...Array.isArray(a.allowlist)?a.allowlist:[]];return{path:t.path??f(),socketPath:e(t.socketPath??n.socket?.path??p()),token:t.token??n.socket?.token??``,defaults:d,agent:m,allowlist:h,file:n}}function A(e){return e.ask===`always`||e.ask===`on-miss`&&e.security===`allowlist`&&(!e.analysisOk||!e.allowlistSatisfied)}function j(e,t,n,r,a){let o=t??`main`,s=e.agents??{},c=s[o]??{},l=(Array.isArray(c.allowlist)?c.allowlist:[]).map(e=>e.pattern===n.pattern?{...e,id:e.id??i.randomUUID(),lastUsedAt:Date.now(),lastUsedCommand:r,lastResolvedPath:a}:e);s[o]={...c,allowlist:l},e.agents=s,w(e)}function M(e,t,n){let r=t??`main`,a=e.agents??{},o=a[r]??{},s=Array.isArray(o.allowlist)?o.allowlist:[],c=n.trim();c&&(s.some(e=>e.pattern===c)||(s.push({id:i.randomUUID(),pattern:c,lastUsedAt:Date.now()}),a[r]={...o,allowlist:s},e.agents=a,w(e)))}function N(e,t){let n={deny:0,allowlist:1,full:2};return n[e]<=n[t]?e:t}function P(e,t){let n={off:0,"on-miss":1,always:2};return n[e]>=n[t]?e:t}export{w as _,P as a,y as c,c as d,S as f,k as g,O as h,C as i,l,A as m,M as n,b as o,j as p,T as r,N as s,u as t,s as u,o as v};
+//# sourceMappingURL=exec-approvals-BpBNEy6i.js.map

package/dist/exec-approvals-allowlist-CE3nYh0K.js

@@ -1 +1,2 @@
 import{_ as e}from"./paths-B4IRk3wi.js";import{Bc as t,Hc as n,Jc as r,Kc as i,Lc as a,Wc as o,Xc as s,Yc as c,el as l,fl as u,nl as d,ol as f,qc as p,rl as m,sl as h}from"./model-selection-BlC_rXAN.js";import g from"node:path";function _(e){return/\\(?:\r\n|\n|\r)/.test(e)}function v(e){if(!Array.isArray(e))return new Set;let t=e.map(e=>e.trim().toLowerCase()).filter(e=>e.length>0);return new Set(t)}function y(e){return v(e===void 0?p:e??[])}function b(e){if(o(e.platform??process.platform)||e.safeBins.size===0)return!1;let n=e.resolution,r=n?.executableName?.toLowerCase();if(!r||!e.safeBins.has(r)||!n?.resolvedPath||!(e.isTrustedSafeBinPathFn??a)({resolvedPath:n.resolvedPath,trustedDirs:e.trustedSafeBinDirs}))return!1;let i=e.argv.slice(1),s=(e.safeBinProfiles??u)[r];return s?t(i,s):!1}function x(e){return e.includes(`/`)||e.includes(`\\`)}function S(e){return{allowlist:e.allowlist,safeBins:e.safeBins,safeBinProfiles:e.safeBinProfiles,cwd:e.cwd,platform:e.platform,trustedSafeBinDirs:e.trustedSafeBinDirs,skillBins:e.skillBins,autoAllowSkills:e.autoAllowSkills}}function C(e){let t=e?.trim().toLowerCase();return t&&t.length>0?t:null}function w(e){let t=e?.trim();if(!t)return null;let n=g.resolve(t);return process.platform===`win32`?n.replace(/\\/g,`/`).toLowerCase():n}function T(e){let t=new Map;if(!e||e.length===0)return t;for(let n of e){let e=C(n.name),r=w(n.resolvedPath);if(!e||!r)continue;let i=t.get(e)??new Set;i.add(r),t.set(e,i)}return t}function E(e){if(!e.allowSkills)return!1;let t=e.segment.resolution;if(!t?.resolvedPath)return!1;let n=t.rawExecutable?.trim()??``;if(!n||x(n))return!1;let r=C(t.executableName),i=w(t.resolvedPath);return!r||!i?!1:!!e.skillBinTrust.get(r)?.has(i)}function D(e,t){let n=[],i=T(t.skillBins),a=t.autoAllowSkills===!0&&i.size>0,o=[];return{satisfied:e.every(e=>{if(e.resolution?.policyBlocked===!0)return o.push(null),!1;let s=e.resolution?.effectiveArgv&&e.resolution.effectiveArgv.length>0?e.resolution.effectiveArgv:e.argv,u=s===e.argv?e:{...e,argv:s},d=c(e.resolution,t.cwd),f=d&&e.resolution?{...e.resolution,resolvedPath:d}:e.resolution,p=r(t.allowlist,f),m=l(u.argv)===null?P({segment:u,cwd:t.cwd}):void 0,h=m?r(t.allowlist,{rawExecutable:m,resolvedPath:m,executableName:g.basename(m)}):null,_=p??h;_&&n.push(_);let v=b({argv:s,resolution:e.resolution,safeBins:t.safeBins,safeBinProfiles:t.safeBinProfiles,platform:t.platform,trustedSafeBinDirs:t.trustedSafeBinDirs}),y=E({segment:e,allowSkills:a,skillBinTrust:i}),x=_?`allowlist`:v?`safeBins`:y?`skills`:null;return o.push(x),!!x}),matches:n,segmentSatisfiedBy:o}}function O(e){return e.chains?e.chains:[e.segments]}function k(e){let t=[],n=[];if(!e.analysis.ok||e.analysis.segments.length===0)return{allowlistSatisfied:!1,allowlistMatches:t,segmentSatisfiedBy:n};let r=S(e),i=!!e.analysis.chains;for(let a of O(e.analysis)){let e=D(a,r);if(!e.satisfied)return i?{allowlistSatisfied:!1,allowlistMatches:[],segmentSatisfiedBy:[]}:{allowlistSatisfied:!1,allowlistMatches:e.matches,segmentSatisfiedBy:e.segmentSatisfiedBy};t.push(...e.matches),n.push(...e.segmentSatisfiedBy)}return{allowlistSatisfied:!0,allowlistMatches:t,segmentSatisfiedBy:n}}function A(e,t){let n=[e.resolution?.executableName,e.resolution?.rawExecutable,e.argv[0]];for(let e of n){let n=e?.trim();if(n&&t(n))return!0}return!1}function j(e){return A(e,m)}function M(e){return A(e,d)}const N=new Set([`-c`,`--command`,`-o`,`-O`,`+O`,`--rcfile`,`--init-file`,`--startup-file`]);function P(t){if(!j(t.segment))return;let n=t.segment.argv;if(!Array.isArray(n)||n.length<2)return;let r=1;for(;r<n.length;){let e=n[r]?.trim()??``;if(!e){r+=1;continue}if(e===`--`){r+=1;break}if(e===`-c`||e===`--command`||/^-[^-]*c[^-]*$/i.test(e)||e===`-s`||/^-[^-]*s[^-]*$/i.test(e))return;if(N.has(e)){r+=2;continue}if(e.startsWith(`-`)||e.startsWith(`+`)){r+=1;continue}break}let i=n[r]?.trim();if(!i)return;if(g.isAbsolute(i))return i;let a=i.startsWith(`~`)?e(i):i,o=t.cwd&&t.cwd.trim().length>0?t.cwd:process.cwd();return g.resolve(o,a)}function F(e){if(e.depth>=3)return;let t=t=>{F({segment:{raw:t.join(` `),argv:t,resolution:s(t,e.cwd,e.env)},cwd:e.cwd,env:e.env,platform:e.platform,depth:e.depth+1,out:e.out})};if(M(e.segment)){let n=f(e.segment.argv);if(n.kind!==`unwrapped`||n.argv.length===0)return;t(n.argv);return}let r=h(e.segment.argv);if(r.kind===`blocked`)return;if(r.kind===`unwrapped`){t(r.argv);return}let i=c(e.segment.resolution,e.cwd);if(!i)return;if(!j(e.segment)){e.out.add(i);return}let a=l(e.segment.argv);if(!a){let t=P({segment:e.segment,cwd:e.cwd});t&&e.out.add(t);return}let o=n({command:a,cwd:e.cwd,env:e.env,platform:e.platform});if(o.ok)for(let t of o.segments)F({segment:t,cwd:e.cwd,env:e.env,platform:e.platform,depth:e.depth+1,out:e.out})}function I(e){let t=new Set;for(let n of e.segments)F({segment:n,cwd:e.cwd,env:e.env,platform:e.platform,depth:0,out:t});return Array.from(t)}function L(e){let t=S(e),r=()=>({analysisOk:!1,allowlistSatisfied:!1,allowlistMatches:[],segments:[],segmentSatisfiedBy:[]});if(_(e.command))return r();let a=o(e.platform)?null:i(e.command);if(!a){let i=n({command:e.command,cwd:e.cwd,env:e.env,platform:e.platform});if(!i.ok)return r();let a=k({analysis:i,...t});return{analysisOk:!0,allowlistSatisfied:a.allowlistSatisfied,allowlistMatches:a.allowlistMatches,segments:i.segments,segmentSatisfiedBy:a.segmentSatisfiedBy}}let s=[],c=[],l=[];for(let i of a){let a=n({command:i,cwd:e.cwd,env:e.env,platform:e.platform});if(!a.ok)return r();c.push(...a.segments);let o=k({analysis:a,...t});if(s.push(...o.allowlistMatches),l.push(...o.segmentSatisfiedBy),!o.allowlistSatisfied)return{analysisOk:!0,allowlistSatisfied:!1,allowlistMatches:s,segments:c,segmentSatisfiedBy:l}}return{analysisOk:!0,allowlistSatisfied:!0,allowlistMatches:s,segments:c,segmentSatisfiedBy:l}}export{y as i,L as n,I as r,k as t};
+//# sourceMappingURL=exec-approvals-allowlist-CE3nYh0K.js.map

package/dist/exec-approvals-allowlist-D8mN7nxV.js

@@ -1 +1,2 @@
 import{_ as e}from"./paths-BjD3T_xq.js";import{As as t,Bs as n,Cs as r,Ds as i,Js as a,Ls as o,Ms as s,Ns as c,Ts as l,Us as u,Ws as d,bs as f,js as p,ks as m,zs as h}from"./auth-profiles-T8DuH3ax.js";import g from"node:path";function _(e){return/\\(?:\r\n|\n|\r)/.test(e)}function v(e){if(!Array.isArray(e))return new Set;let t=e.map(e=>e.trim().toLowerCase()).filter(e=>e.length>0);return new Set(t)}function y(e){return v(e===void 0?t:e??[])}function b(e){if(i(e.platform??process.platform)||e.safeBins.size===0)return!1;let t=e.resolution,n=t?.executableName?.toLowerCase();if(!n||!e.safeBins.has(n)||!t?.resolvedPath||!(e.isTrustedSafeBinPathFn??f)({resolvedPath:t.resolvedPath,trustedDirs:e.trustedSafeBinDirs}))return!1;let o=e.argv.slice(1),s=(e.safeBinProfiles??a)[n];return s?r(o,s):!1}function x(e){return e.includes(`/`)||e.includes(`\\`)}function S(e){return{allowlist:e.allowlist,safeBins:e.safeBins,safeBinProfiles:e.safeBinProfiles,cwd:e.cwd,platform:e.platform,trustedSafeBinDirs:e.trustedSafeBinDirs,skillBins:e.skillBins,autoAllowSkills:e.autoAllowSkills}}function C(e){let t=e?.trim().toLowerCase();return t&&t.length>0?t:null}function w(e){let t=e?.trim();if(!t)return null;let n=g.resolve(t);return process.platform===`win32`?n.replace(/\\/g,`/`).toLowerCase():n}function T(e){let t=new Map;if(!e||e.length===0)return t;for(let n of e){let e=C(n.name),r=w(n.resolvedPath);if(!e||!r)continue;let i=t.get(e)??new Set;i.add(r),t.set(e,i)}return t}function E(e){if(!e.allowSkills)return!1;let t=e.segment.resolution;if(!t?.resolvedPath)return!1;let n=t.rawExecutable?.trim()??``;if(!n||x(n))return!1;let r=C(t.executableName),i=w(t.resolvedPath);return!r||!i?!1:!!e.skillBinTrust.get(r)?.has(i)}function D(e,t){let n=[],r=T(t.skillBins),i=t.autoAllowSkills===!0&&r.size>0,a=[];return{satisfied:e.every(e=>{if(e.resolution?.policyBlocked===!0)return a.push(null),!1;let c=e.resolution?.effectiveArgv&&e.resolution.effectiveArgv.length>0?e.resolution.effectiveArgv:e.argv,l=c===e.argv?e:{...e,argv:c},u=s(e.resolution,t.cwd),d=u&&e.resolution?{...e.resolution,resolvedPath:u}:e.resolution,f=p(t.allowlist,d),m=o(l.argv)===null?P({segment:l,cwd:t.cwd}):void 0,h=m?p(t.allowlist,{rawExecutable:m,resolvedPath:m,executableName:g.basename(m)}):null,_=f??h;_&&n.push(_);let v=b({argv:c,resolution:e.resolution,safeBins:t.safeBins,safeBinProfiles:t.safeBinProfiles,platform:t.platform,trustedSafeBinDirs:t.trustedSafeBinDirs}),y=E({segment:e,allowSkills:i,skillBinTrust:r}),x=_?`allowlist`:v?`safeBins`:y?`skills`:null;return a.push(x),!!x}),matches:n,segmentSatisfiedBy:a}}function O(e){return e.chains?e.chains:[e.segments]}function k(e){let t=[],n=[];if(!e.analysis.ok||e.analysis.segments.length===0)return{allowlistSatisfied:!1,allowlistMatches:t,segmentSatisfiedBy:n};let r=S(e),i=!!e.analysis.chains;for(let a of O(e.analysis)){let e=D(a,r);if(!e.satisfied)return i?{allowlistSatisfied:!1,allowlistMatches:[],segmentSatisfiedBy:[]}:{allowlistSatisfied:!1,allowlistMatches:e.matches,segmentSatisfiedBy:e.segmentSatisfiedBy};t.push(...e.matches),n.push(...e.segmentSatisfiedBy)}return{allowlistSatisfied:!0,allowlistMatches:t,segmentSatisfiedBy:n}}function A(e,t){let n=[e.resolution?.executableName,e.resolution?.rawExecutable,e.argv[0]];for(let e of n){let n=e?.trim();if(n&&t(n))return!0}return!1}function j(e){return A(e,n)}function M(e){return A(e,h)}const N=new Set([`-c`,`--command`,`-o`,`-O`,`+O`,`--rcfile`,`--init-file`,`--startup-file`]);function P(t){if(!j(t.segment))return;let n=t.segment.argv;if(!Array.isArray(n)||n.length<2)return;let r=1;for(;r<n.length;){let e=n[r]?.trim()??``;if(!e){r+=1;continue}if(e===`--`){r+=1;break}if(e===`-c`||e===`--command`||/^-[^-]*c[^-]*$/i.test(e)||e===`-s`||/^-[^-]*s[^-]*$/i.test(e))return;if(N.has(e)){r+=2;continue}if(e.startsWith(`-`)||e.startsWith(`+`)){r+=1;continue}break}let i=n[r]?.trim();if(!i)return;if(g.isAbsolute(i))return i;let a=i.startsWith(`~`)?e(i):i,o=t.cwd&&t.cwd.trim().length>0?t.cwd:process.cwd();return g.resolve(o,a)}function F(e){if(e.depth>=3)return;let t=t=>{F({segment:{raw:t.join(` `),argv:t,resolution:c(t,e.cwd,e.env)},cwd:e.cwd,env:e.env,platform:e.platform,depth:e.depth+1,out:e.out})};if(M(e.segment)){let n=u(e.segment.argv);if(n.kind!==`unwrapped`||n.argv.length===0)return;t(n.argv);return}let n=d(e.segment.argv);if(n.kind===`blocked`)return;if(n.kind===`unwrapped`){t(n.argv);return}let r=s(e.segment.resolution,e.cwd);if(!r)return;if(!j(e.segment)){e.out.add(r);return}let i=o(e.segment.argv);if(!i){let t=P({segment:e.segment,cwd:e.cwd});t&&e.out.add(t);return}let a=l({command:i,cwd:e.cwd,env:e.env,platform:e.platform});if(a.ok)for(let t of a.segments)F({segment:t,cwd:e.cwd,env:e.env,platform:e.platform,depth:e.depth+1,out:e.out})}function I(e){let t=new Set;for(let n of e.segments)F({segment:n,cwd:e.cwd,env:e.env,platform:e.platform,depth:0,out:t});return Array.from(t)}function L(e){let t=S(e),n=()=>({analysisOk:!1,allowlistSatisfied:!1,allowlistMatches:[],segments:[],segmentSatisfiedBy:[]});if(_(e.command))return n();let r=i(e.platform)?null:m(e.command);if(!r){let r=l({command:e.command,cwd:e.cwd,env:e.env,platform:e.platform});if(!r.ok)return n();let i=k({analysis:r,...t});return{analysisOk:!0,allowlistSatisfied:i.allowlistSatisfied,allowlistMatches:i.allowlistMatches,segments:r.segments,segmentSatisfiedBy:i.segmentSatisfiedBy}}let a=[],o=[],s=[];for(let i of r){let r=l({command:i,cwd:e.cwd,env:e.env,platform:e.platform});if(!r.ok)return n();o.push(...r.segments);let c=k({analysis:r,...t});if(a.push(...c.allowlistMatches),s.push(...c.segmentSatisfiedBy),!c.allowlistSatisfied)return{analysisOk:!0,allowlistSatisfied:!1,allowlistMatches:a,segments:o,segmentSatisfiedBy:s}}return{analysisOk:!0,allowlistSatisfied:!0,allowlistMatches:a,segments:o,segmentSatisfiedBy:s}}export{y as i,L as n,I as r,k as t};
+//# sourceMappingURL=exec-approvals-allowlist-D8mN7nxV.js.map

package/dist/exec-approvals-cli-CUcuN63y.js

@@ -1,3 +1,4 @@
 import"./paths-B4IRk3wi.js";import{A as e,k as t,p as n}from"./subsystem-C5XF2Fy5.js";import"./utils-UGOV_184.js";import"./model-selection-BlC_rXAN.js";import"./agent-scope-DXZc3eNT.js";import"./openclaw-root-D_0Q6--h.js";import"./github-copilot-token-DGYAlOmV.js";import"./boolean-Ch3DfXPy.js";import"./env-D7wNuBx1.js";import"./env-overrides-DXJbFrwI.js";import"./registry-hFAtCSWG.js";import"./skills-DHbOKEGc.js";import"./frontmatter-BkZkwkVO.js";import"./plugins-CYLrFT4h.js";import"./logger-Bl8URnrW.js";import"./exec-DHqLtFYt.js";import"./windows-spawn-AB7ItGAE.js";import"./redact-3_CiXMY6.js";import"./path-alias-guards-mvyLCPlN.js";import"./errors-Bunti32V.js";import"./paths-yLEk_25I.js";import"./chat-envelope-HVpKusFc.js";import"./call-CqoMqP5b.js";import"./exec-approvals-allowlist-CE3nYh0K.js";import{n as r}from"./format-relative-B9pSIdGe.js";import{t as i}from"./links-CySwdMcF.js";import"./progress-LNttnI-y.js";import{_ as a,f as o}from"./exec-approvals-BpBNEy6i.js";import{n as s}from"./gateway-rpc-iFvDyHYd.js";import"./systemd-D7odsu4K.js";import"./service-BtB9epJk.js";import{n as c,t as l}from"./table-CY440fI1.js";import{t as u}from"./shared-9x5sqYRb.js";import{a as d,r as f}from"./rpc-B3ReBNXG.js";import p from"json5";import m from"node:fs/promises";async function h(){let e=[];for await(let t of process.stdin)e.push(Buffer.isBuffer(t)?t:Buffer.from(String(t)));return Buffer.concat(e).toString(`utf8`)}async function g(e){if(e.gateway)return null;let t=e.node?.trim()??``;return t?await d(e,t):null}async function _(e,t){return await s(t?`exec.approvals.node.get`:`exec.approvals.get`,e,t?{nodeId:t}:{})}function v(){let e=o();return{path:e.path,exists:e.exists,hash:e.hash,file:e.file}}function y(e){return a(e),v()}async function b(e){if(!e.gateway&&!e.node)return{snapshot:v(),nodeId:null,source:`local`};let t=await g(e);return{snapshot:await _(e,t),nodeId:t,source:t?`node`:`gateway`}}function x(e){throw n.error(e),n.exit(1),Error(e)}function S(e,t){let n=e.trim();return n||x(t),n}async function C(t){let{snapshot:r,nodeId:i,source:a}=await b(t);a===`local`&&n.log(e.muted(`Writing local approvals.`));let o=a===`local`?`local`:i?`node:${i}`:`gateway`,s=r.hash;return s||x(`Exec approvals hash missing; reload and retry.`),{snapshot:r,nodeId:i,source:a,targetLabel:o,baseHash:s}}async function w(t){let r=t.source===`local`?y(t.file):await D(t.opts,t.nodeId,t.file,t.baseHash);if(t.opts.json){n.log(JSON.stringify(r));return}n.log(e.muted(`Target: ${t.targetLabel}`)),E(r,t.targetLabel)}function T(e){let t=u(e);return t.includes(`
 `)?t.split(`
 `)[0]:t}function E(i,a){let o=t(),s=t=>o?e.heading(t):t,u=t=>o?e.muted(t):t,d=l(),f=i.file??{version:1},p=f.defaults??{},m=[p.security?`security=${p.security}`:null,p.ask?`ask=${p.ask}`:null,p.askFallback?`askFallback=${p.askFallback}`:null,typeof p.autoAllowSkills==`boolean`?`autoAllowSkills=${p.autoAllowSkills?`on`:`off`}`:null].filter(Boolean),h=f.agents??{},g=[],_=Date.now();for(let[e,t]of Object.entries(h)){let n=Array.isArray(t.allowlist)?t.allowlist:[];for(let t of n){let n=t?.pattern?.trim()??``;if(!n)continue;let i=typeof t.lastUsedAt==`number`?t.lastUsedAt:null;g.push({Target:a,Agent:e,Pattern:n,LastUsed:i?r(Math.max(0,_-i)):u(`unknown`)})}}let v=[{Field:`Target`,Value:a},{Field:`Path`,Value:i.path},{Field:`Exists`,Value:i.exists?`yes`:`no`},{Field:`Hash`,Value:i.hash},{Field:`Version`,Value:String(f.version??1)},{Field:`Socket`,Value:f.socket?.path??`default`},{Field:`Defaults`,Value:m.length>0?m.join(`, `):`none`},{Field:`Agents`,Value:String(Object.keys(h).length)},{Field:`Allowlist`,Value:String(g.length)}];if(n.log(s(`Approvals`)),n.log(c({width:d,columns:[{key:`Field`,header:`Field`,minWidth:8},{key:`Value`,header:`Value`,minWidth:24,flex:!0}],rows:v}).trimEnd()),g.length===0){n.log(``),n.log(u(`No allowlist entries.`));return}n.log(``),n.log(s(`Allowlist`)),n.log(c({width:d,columns:[{key:`Target`,header:`Target`,minWidth:10},{key:`Agent`,header:`Agent`,minWidth:8},{key:`Pattern`,header:`Pattern`,minWidth:20,flex:!0},{key:`LastUsed`,header:`Last Used`,minWidth:10}],rows:g}).trimEnd())}async function D(e,t,n,r){return await s(t?`exec.approvals.node.set`:`exec.approvals.set`,e,t?{nodeId:t,file:n,baseHash:r}:{file:n,baseHash:r})}function O(e){return(e?.trim()??``)||`*`}function k(e){return(e?.pattern?.trim()??``)||null}function A(e,t){let n=e.agents??{},r=n[t]??{};return e.agents=n,r}function j(e){let t=Array.isArray(e.allowlist)?e.allowlist:[];return!e.security&&!e.ask&&!e.askFallback&&e.autoAllowSkills===void 0&&t.length===0}async function M(e){let{snapshot:t,nodeId:n,source:r,targetLabel:i,baseHash:a}=await C(e),o=t.file??{version:1};o.version=1;let s=O(e.agent),c=A(o,s);return{nodeId:n,source:r,targetLabel:i,baseHash:a,file:o,agentKey:s,agent:c,allowlistEntries:Array.isArray(c.allowlist)?c.allowlist:[]}}async function N(e,t,r){try{let n=S(e,`Pattern required.`),i=await M(t);if(!await r({...i,trimmedPattern:n}))return;await w({opts:t,source:i.source,nodeId:i.nodeId,file:i.file,baseHash:i.baseHash,targetLabel:i.targetLabel})}catch(e){n.error(T(e)),n.exit(1)}}function P(e){let t=e.allowlist.command(`${e.name} <pattern>`).description(e.description).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--agent <id>`,`Agent id (defaults to "*")`).action(async(t,n)=>{await N(t,n,e.mutate)});return f(t),t}function F(r){let a=(t,n)=>`  ${e.command(t)}\n    ${e.muted(n)}`,o=r.command(`approvals`).alias(`exec-approvals`).description(`Manage exec approvals (gateway or node host)`).addHelpText(`after`,()=>`\n${e.muted(`Docs:`)} ${i(`/cli/approvals`,`docs.openclaw.ai/cli/approvals`)}\n`);f(o.command(`get`).description(`Fetch exec approvals snapshot`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).action(async r=>{try{let{snapshot:i,nodeId:a,source:o}=await b(r);if(r.json){n.log(JSON.stringify(i));return}o===`local`&&(n.log((n=>t()?e.muted(n):n)(`Showing local approvals.`)),n.log(``)),E(i,o===`local`?`local`:a?`node:${a}`:`gateway`)}catch(e){n.error(T(e)),n.exit(1)}})),f(o.command(`set`).description(`Replace exec approvals with a JSON file`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--file <path>`,`Path to JSON file to upload`).option(`--stdin`,`Read JSON from stdin`,!1).action(async e=>{try{!e.file&&!e.stdin&&x(`Provide --file or --stdin.`),e.file&&e.stdin&&x(`Use either --file or --stdin (not both).`);let{source:t,nodeId:n,targetLabel:r,baseHash:i}=await C(e),a=e.stdin?await h():await m.readFile(String(e.file),`utf8`),o;try{o=p.parse(a)}catch(e){x(`Failed to parse approvals JSON: ${String(e)}`)}o.version=1,await w({opts:e,source:t,nodeId:n,file:o,baseHash:i,targetLabel:r})}catch(e){n.error(T(e)),n.exit(1)}}));let s=o.command(`allowlist`).description(`Edit the per-agent allowlist`).addHelpText(`after`,()=>`\n${e.heading(`Examples:`)}\n${a(`openclaw approvals allowlist add "~/Projects/**/bin/rg"`,`Allowlist a local binary pattern for the main agent.`)}\n${a(`openclaw approvals allowlist add --agent main --node <id|name|ip> "/usr/bin/uptime"`,`Allowlist on a specific node/agent.`)}\n${a(`openclaw approvals allowlist add --agent "*" "/usr/bin/uname"`,`Allowlist for all agents (wildcard).`)}\n${a(`openclaw approvals allowlist remove "~/Projects/**/bin/rg"`,`Remove an allowlist pattern.`)}\n\n${e.muted(`Docs:`)} ${i(`/cli/approvals`,`docs.openclaw.ai/cli/approvals`)}\n`);P({allowlist:s,name:`add`,description:`Add a glob pattern to an allowlist`,mutate:({trimmedPattern:e,file:t,agent:r,agentKey:i,allowlistEntries:a})=>a.some(t=>k(t)===e)?(n.log(`Already allowlisted.`),!1):(a.push({pattern:e,lastUsedAt:Date.now()}),r.allowlist=a,t.agents={...t.agents,[i]:r},!0)}),P({allowlist:s,name:`remove`,description:`Remove a glob pattern from an allowlist`,mutate:({trimmedPattern:e,file:t,agent:r,agentKey:i,allowlistEntries:a})=>{let o=a.filter(t=>k(t)!==e);if(o.length===a.length)return n.log(`Pattern not found.`),!1;if(o.length===0?delete r.allowlist:r.allowlist=o,j(r)){let e={...t.agents};delete e[i],t.agents=Object.keys(e).length>0?e:void 0}else t.agents={...t.agents,[i]:r};return!0}})}export{F as registerExecApprovalsCli};
+//# sourceMappingURL=exec-approvals-cli-CUcuN63y.js.map

package/dist/exec-approvals-cli-CxUGD08t.js

@@ -1,3 +1,4 @@
 import{A as e,k as t,p as n}from"./subsystem-BLbY429l.js";import"./paths-BjD3T_xq.js";import"./boolean-D15s2V33.js";import"./auth-profiles-T8DuH3ax.js";import"./agent-scope-DAWJwFfl.js";import"./utils-CGdo13HV.js";import"./openclaw-root-CnsBf6ZU.js";import"./github-copilot-token-C79yeDKS.js";import"./env-overrides-DHtB4kK3.js";import"./version-q3SkUw2K.js";import"./registry-BptzrW8D.js";import"./skills-CKTicUKS.js";import"./frontmatter-C7mzDNxd.js";import"./plugins-DNlgeTTc.js";import"./logger-kQAOe3qp.js";import"./exec-B3eleY5O.js";import"./windows-spawn-7oINn5ao.js";import"./redact-CnRxK70G.js";import"./path-alias-guards-kY_ZbWs-.js";import"./errors-6SQWM9dj.js";import"./paths-BfjJY2VL.js";import"./chat-envelope-Bznn2SoS.js";import"./exec-approvals-allowlist-D8mN7nxV.js";import"./call-B8Fb4_oh.js";import{n as r}from"./format-relative-DkMjYy7z.js";import{t as i}from"./links-CBnmRP9D.js";import"./progress-d1m2sqR1.js";import{_ as a,f as o}from"./exec-approvals-BXO9Cezj.js";import{n as s}from"./gateway-rpc-tEEvY0kH.js";import"./systemd-DbevZh65.js";import"./service-DZ9EbS15.js";import{n as c,t as l}from"./table-CR7TFMew.js";import{t as u}from"./shared-BKWhOp64.js";import{a as d,r as f}from"./rpc-DumDLalJ.js";import p from"json5";import m from"node:fs/promises";async function h(){let e=[];for await(let t of process.stdin)e.push(Buffer.isBuffer(t)?t:Buffer.from(String(t)));return Buffer.concat(e).toString(`utf8`)}async function g(e){if(e.gateway)return null;let t=e.node?.trim()??``;return t?await d(e,t):null}async function _(e,t){return await s(t?`exec.approvals.node.get`:`exec.approvals.get`,e,t?{nodeId:t}:{})}function v(){let e=o();return{path:e.path,exists:e.exists,hash:e.hash,file:e.file}}function y(e){return a(e),v()}async function b(e){if(!e.gateway&&!e.node)return{snapshot:v(),nodeId:null,source:`local`};let t=await g(e);return{snapshot:await _(e,t),nodeId:t,source:t?`node`:`gateway`}}function x(e){throw n.error(e),n.exit(1),Error(e)}function S(e,t){let n=e.trim();return n||x(t),n}async function C(t){let{snapshot:r,nodeId:i,source:a}=await b(t);a===`local`&&n.log(e.muted(`Writing local approvals.`));let o=a===`local`?`local`:i?`node:${i}`:`gateway`,s=r.hash;return s||x(`Exec approvals hash missing; reload and retry.`),{snapshot:r,nodeId:i,source:a,targetLabel:o,baseHash:s}}async function w(t){let r=t.source===`local`?y(t.file):await D(t.opts,t.nodeId,t.file,t.baseHash);if(t.opts.json){n.log(JSON.stringify(r));return}n.log(e.muted(`Target: ${t.targetLabel}`)),E(r,t.targetLabel)}function T(e){let t=u(e);return t.includes(`
 `)?t.split(`
 `)[0]:t}function E(i,a){let o=t(),s=t=>o?e.heading(t):t,u=t=>o?e.muted(t):t,d=l(),f=i.file??{version:1},p=f.defaults??{},m=[p.security?`security=${p.security}`:null,p.ask?`ask=${p.ask}`:null,p.askFallback?`askFallback=${p.askFallback}`:null,typeof p.autoAllowSkills==`boolean`?`autoAllowSkills=${p.autoAllowSkills?`on`:`off`}`:null].filter(Boolean),h=f.agents??{},g=[],_=Date.now();for(let[e,t]of Object.entries(h)){let n=Array.isArray(t.allowlist)?t.allowlist:[];for(let t of n){let n=t?.pattern?.trim()??``;if(!n)continue;let i=typeof t.lastUsedAt==`number`?t.lastUsedAt:null;g.push({Target:a,Agent:e,Pattern:n,LastUsed:i?r(Math.max(0,_-i)):u(`unknown`)})}}let v=[{Field:`Target`,Value:a},{Field:`Path`,Value:i.path},{Field:`Exists`,Value:i.exists?`yes`:`no`},{Field:`Hash`,Value:i.hash},{Field:`Version`,Value:String(f.version??1)},{Field:`Socket`,Value:f.socket?.path??`default`},{Field:`Defaults`,Value:m.length>0?m.join(`, `):`none`},{Field:`Agents`,Value:String(Object.keys(h).length)},{Field:`Allowlist`,Value:String(g.length)}];if(n.log(s(`Approvals`)),n.log(c({width:d,columns:[{key:`Field`,header:`Field`,minWidth:8},{key:`Value`,header:`Value`,minWidth:24,flex:!0}],rows:v}).trimEnd()),g.length===0){n.log(``),n.log(u(`No allowlist entries.`));return}n.log(``),n.log(s(`Allowlist`)),n.log(c({width:d,columns:[{key:`Target`,header:`Target`,minWidth:10},{key:`Agent`,header:`Agent`,minWidth:8},{key:`Pattern`,header:`Pattern`,minWidth:20,flex:!0},{key:`LastUsed`,header:`Last Used`,minWidth:10}],rows:g}).trimEnd())}async function D(e,t,n,r){return await s(t?`exec.approvals.node.set`:`exec.approvals.set`,e,t?{nodeId:t,file:n,baseHash:r}:{file:n,baseHash:r})}function O(e){return(e?.trim()??``)||`*`}function k(e){return(e?.pattern?.trim()??``)||null}function A(e,t){let n=e.agents??{},r=n[t]??{};return e.agents=n,r}function j(e){let t=Array.isArray(e.allowlist)?e.allowlist:[];return!e.security&&!e.ask&&!e.askFallback&&e.autoAllowSkills===void 0&&t.length===0}async function M(e){let{snapshot:t,nodeId:n,source:r,targetLabel:i,baseHash:a}=await C(e),o=t.file??{version:1};o.version=1;let s=O(e.agent),c=A(o,s);return{nodeId:n,source:r,targetLabel:i,baseHash:a,file:o,agentKey:s,agent:c,allowlistEntries:Array.isArray(c.allowlist)?c.allowlist:[]}}async function N(e,t,r){try{let n=S(e,`Pattern required.`),i=await M(t);if(!await r({...i,trimmedPattern:n}))return;await w({opts:t,source:i.source,nodeId:i.nodeId,file:i.file,baseHash:i.baseHash,targetLabel:i.targetLabel})}catch(e){n.error(T(e)),n.exit(1)}}function P(e){let t=e.allowlist.command(`${e.name} <pattern>`).description(e.description).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--agent <id>`,`Agent id (defaults to "*")`).action(async(t,n)=>{await N(t,n,e.mutate)});return f(t),t}function F(r){let a=(t,n)=>`  ${e.command(t)}\n    ${e.muted(n)}`,o=r.command(`approvals`).alias(`exec-approvals`).description(`Manage exec approvals (gateway or node host)`).addHelpText(`after`,()=>`\n${e.muted(`Docs:`)} ${i(`/cli/approvals`,`docs.openclaw.ai/cli/approvals`)}\n`);f(o.command(`get`).description(`Fetch exec approvals snapshot`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).action(async r=>{try{let{snapshot:i,nodeId:a,source:o}=await b(r);if(r.json){n.log(JSON.stringify(i));return}o===`local`&&(n.log((n=>t()?e.muted(n):n)(`Showing local approvals.`)),n.log(``)),E(i,o===`local`?`local`:a?`node:${a}`:`gateway`)}catch(e){n.error(T(e)),n.exit(1)}})),f(o.command(`set`).description(`Replace exec approvals with a JSON file`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--file <path>`,`Path to JSON file to upload`).option(`--stdin`,`Read JSON from stdin`,!1).action(async e=>{try{!e.file&&!e.stdin&&x(`Provide --file or --stdin.`),e.file&&e.stdin&&x(`Use either --file or --stdin (not both).`);let{source:t,nodeId:n,targetLabel:r,baseHash:i}=await C(e),a=e.stdin?await h():await m.readFile(String(e.file),`utf8`),o;try{o=p.parse(a)}catch(e){x(`Failed to parse approvals JSON: ${String(e)}`)}o.version=1,await w({opts:e,source:t,nodeId:n,file:o,baseHash:i,targetLabel:r})}catch(e){n.error(T(e)),n.exit(1)}}));let s=o.command(`allowlist`).description(`Edit the per-agent allowlist`).addHelpText(`after`,()=>`\n${e.heading(`Examples:`)}\n${a(`openclaw approvals allowlist add "~/Projects/**/bin/rg"`,`Allowlist a local binary pattern for the main agent.`)}\n${a(`openclaw approvals allowlist add --agent main --node <id|name|ip> "/usr/bin/uptime"`,`Allowlist on a specific node/agent.`)}\n${a(`openclaw approvals allowlist add --agent "*" "/usr/bin/uname"`,`Allowlist for all agents (wildcard).`)}\n${a(`openclaw approvals allowlist remove "~/Projects/**/bin/rg"`,`Remove an allowlist pattern.`)}\n\n${e.muted(`Docs:`)} ${i(`/cli/approvals`,`docs.openclaw.ai/cli/approvals`)}\n`);P({allowlist:s,name:`add`,description:`Add a glob pattern to an allowlist`,mutate:({trimmedPattern:e,file:t,agent:r,agentKey:i,allowlistEntries:a})=>a.some(t=>k(t)===e)?(n.log(`Already allowlisted.`),!1):(a.push({pattern:e,lastUsedAt:Date.now()}),r.allowlist=a,t.agents={...t.agents,[i]:r},!0)}),P({allowlist:s,name:`remove`,description:`Remove a glob pattern from an allowlist`,mutate:({trimmedPattern:e,file:t,agent:r,agentKey:i,allowlistEntries:a})=>{let o=a.filter(t=>k(t)!==e);if(o.length===a.length)return n.log(`Pattern not found.`),!1;if(o.length===0?delete r.allowlist:r.allowlist=o,j(r)){let e={...t.agents};delete e[i],t.agents=Object.keys(e).length>0?e:void 0}else t.agents={...t.agents,[i]:r};return!0}})}export{F as registerExecApprovalsCli};
+//# sourceMappingURL=exec-approvals-cli-CxUGD08t.js.map

package/dist/exec-safe-bin-runtime-policy-Dt0GchLp.js

@@ -1 +1,2 @@
 import{Ic as e,Rc as t,ml as n,pl as r,zc as i}from"./model-selection-BlC_rXAN.js";import{i as a}from"./exec-approvals-allowlist-CE3nYh0K.js";const o=new Set(`ash,bash,busybox,bun,cmd,cmd.exe,cscript,dash,deno,fish,ksh,lua,node,nodejs,perl,php,powershell,powershell.exe,pypy,pwsh,pwsh.exe,python,python2,python3,ruby,sh,toybox,wscript,zsh`.split(`,`)),s=[/^python\d+(?:\.\d+)?$/,/^ruby\d+(?:\.\d+)?$/,/^perl\d+(?:\.\d+)?$/,/^php\d+(?:\.\d+)?$/,/^node\d+(?:\.\d+)?$/];function c(e){let t=e.trim().toLowerCase();return t?t.split(/[\\/]/).at(-1)??t:``}function l(e){let t=c(e);return t?o.has(t)?!0:s.some(e=>e.test(t)):!1}function u(e){return Array.from(e).map(e=>c(e)).filter(e=>e.length>0&&l(e)).toSorted()}function d(e){let t=r(e.global?.safeBinProfiles),n=r(e.local?.safeBinProfiles);if(!(Object.keys(t).length===0&&Object.keys(n).length===0))return{...t,...n}}function f(r){let o=a(r.local?.safeBins??r.global?.safeBins),s=n(d({global:r.global,local:r.local})),c=Array.from(o).filter(e=>!s[e]).toSorted(),l=[...i(r.global?.safeBinTrustedDirs),...i(r.local?.safeBinTrustedDirs)],f=e({extraDirs:l}),p=t(l);if(r.onWarning)for(let e of p){let t=e.worldWritable||e.groupWritable?e.worldWritable?`world-writable`:`group-writable`:`writable`;r.onWarning(`exec: safeBinTrustedDirs includes ${t} directory '${e.dir}'; remove trust or tighten permissions (for example chmod 755).`)}return{safeBins:o,safeBinProfiles:s,trustedSafeBinDirs:f,unprofiledSafeBins:c,unprofiledInterpreterSafeBins:u(c),writableTrustedSafeBinDirs:p}}export{d as i,u as n,f as r,l as t};
+//# sourceMappingURL=exec-safe-bin-runtime-policy-Dt0GchLp.js.map

package/dist/exec-safe-bin-runtime-policy-dcCS_Adf.js

@@ -1 +1,2 @@
 import{Ss as e,Xs as t,Ys as n,xs as r,ys as i}from"./auth-profiles-T8DuH3ax.js";import{i as a}from"./exec-approvals-allowlist-D8mN7nxV.js";const o=new Set(`ash,bash,busybox,bun,cmd,cmd.exe,cscript,dash,deno,fish,ksh,lua,node,nodejs,perl,php,powershell,powershell.exe,pypy,pwsh,pwsh.exe,python,python2,python3,ruby,sh,toybox,wscript,zsh`.split(`,`)),s=[/^python\d+(?:\.\d+)?$/,/^ruby\d+(?:\.\d+)?$/,/^perl\d+(?:\.\d+)?$/,/^php\d+(?:\.\d+)?$/,/^node\d+(?:\.\d+)?$/];function c(e){let t=e.trim().toLowerCase();return t?t.split(/[\\/]/).at(-1)??t:``}function l(e){let t=c(e);return t?o.has(t)?!0:s.some(e=>e.test(t)):!1}function u(e){return Array.from(e).map(e=>c(e)).filter(e=>e.length>0&&l(e)).toSorted()}function d(e){let t=n(e.global?.safeBinProfiles),r=n(e.local?.safeBinProfiles);if(!(Object.keys(t).length===0&&Object.keys(r).length===0))return{...t,...r}}function f(n){let o=a(n.local?.safeBins??n.global?.safeBins),s=t(d({global:n.global,local:n.local})),c=Array.from(o).filter(e=>!s[e]).toSorted(),l=[...e(n.global?.safeBinTrustedDirs),...e(n.local?.safeBinTrustedDirs)],f=i({extraDirs:l}),p=r(l);if(n.onWarning)for(let e of p){let t=e.worldWritable||e.groupWritable?e.worldWritable?`world-writable`:`group-writable`:`writable`;n.onWarning(`exec: safeBinTrustedDirs includes ${t} directory '${e.dir}'; remove trust or tighten permissions (for example chmod 755).`)}return{safeBins:o,safeBinProfiles:s,trustedSafeBinDirs:f,unprofiledSafeBins:c,unprofiledInterpreterSafeBins:u(c),writableTrustedSafeBinDirs:p}}export{d as i,u as n,f as r,l as t};
+//# sourceMappingURL=exec-safe-bin-runtime-policy-dcCS_Adf.js.map

package/dist/fetch-B9tORjG8.js

@@ -1 +1,2 @@
 import{W as e,d as t,u as n}from"./paths-piJASC5k.js";import{c as r}from"./paths-BpQOWYiT.js";import{Z as i}from"./logger-DwWqfo66.js";import{n as a,t as o}from"./fetch-guard-cu7DGSRF.js";import s from"node:path";let c;function l(){return c||=i(),c}function u(e,t={}){let n=s.resolve(e);return[t.preferredTmpDir??l(),s.join(n,`media`),s.join(n,`agents`),s.join(n,`workspace`),s.join(n,`sandboxes`)]}function d(){return u(r())}function f(t,n){let i=u(r());if(!n?.trim())return i;let a=e(t,n);if(!a)return i;let o=s.resolve(a);return i.includes(o)||i.push(o),i}async function p(e,t){let n,r=!1;return await new Promise((i,a)=>{let o=()=>{n!==void 0&&(clearTimeout(n),n=void 0)};n=setTimeout(()=>{r=!0,o(),e.cancel().catch(()=>void 0),a(Error(`Media download stalled: no data received for ${t}ms`))},t),e.read().then(e=>{o(),r||i(e)},e=>{o(),r||a(e)})})}async function m(e,t,n){let r=n?.onOverflow??(e=>Error(`Content too large: ${e.size} bytes (limit: ${e.maxBytes} bytes)`)),i=n?.chunkTimeoutMs,a=e.body;if(!a||typeof a.getReader!=`function`){let n=Buffer.from(await e.arrayBuffer());if(n.length>t)throw r({size:n.length,maxBytes:t,res:e});return n}let o=a.getReader(),s=[],c=0;try{for(;;){let{done:n,value:a}=i?await p(o,i):await o.read();if(n)break;if(a?.length){if(c+=a.length,c>t){try{await o.cancel()}catch{}throw r({size:c,maxBytes:t,res:e})}s.push(a)}}}finally{try{o.releaseLock()}catch{}}return Buffer.concat(s.map(e=>Buffer.from(e)),c)}var h=class extends Error{constructor(e,t){super(t),this.code=e,this.name=`MediaFetchError`}};function g(e){return e.replace(/^["']|["']$/g,``)}function _(e){if(!e)return;let t=/filename\*\s*=\s*([^;]+)/i.exec(e);if(t?.[1]){let e=g(t[1].trim()),n=e.split(`''`).slice(1).join(`''`)||e;try{return s.basename(decodeURIComponent(n))}catch{return s.basename(n)}}let n=/filename\s*=\s*([^;]+)/i.exec(e);if(n?.[1])return s.basename(g(n[1].trim()))}async function v(e,t=200){try{let n=await e.text();if(!n)return;let r=n.replace(/\s+/g,` `).trim();return r?r.length<=t?r:`${r.slice(0,t)}…`:void 0}catch{return}}async function y(e){let{url:r,fetchImpl:i,requestInit:c,filePathHint:l,maxBytes:u,maxRedirects:d,readIdleTimeoutMs:f,ssrfPolicy:p,lookupFn:g}=e,y,b=r,x=null;try{let e=await o(a({url:r,fetchImpl:i,init:c,maxRedirects:d,policy:p,lookupFn:g}));y=e.response,b=e.finalUrl,x=e.release}catch(e){throw new h(`fetch_failed`,`Failed to fetch media from ${r}: ${String(e)}`)}try{if(!y.ok){let e=y.statusText?` ${y.statusText}`:``,t=b===r?``:` (redirected to ${b})`,n=`HTTP ${y.status}${e}`;if(!y.body)n=`HTTP ${y.status}${e}; empty response body`;else{let e=await v(y);e&&(n+=`; body: ${e}`)}throw new h(`http_error`,`Failed to fetch media from ${r}${t}: ${n}`)}let e=y.headers.get(`content-length`);if(u&&e){let t=Number(e);if(Number.isFinite(t)&&t>u)throw new h(`max_bytes`,`Failed to fetch media from ${r}: content length ${t} exceeds maxBytes ${u}`)}let i;try{i=u?await m(y,u,{onOverflow:({maxBytes:e,res:t})=>new h(`max_bytes`,`Failed to fetch media from ${t.url||r}: payload exceeds maxBytes ${e}`),chunkTimeoutMs:f}):Buffer.from(await y.arrayBuffer())}catch(e){throw e instanceof h?e:new h(`fetch_failed`,`Failed to fetch media from ${y.url||r}: ${String(e)}`)}let a;try{let e=new URL(b);a=s.basename(e.pathname)||void 0}catch{}let o=_(y.headers.get(`content-disposition`)),c=o||a||(l?s.basename(l):void 0),d=o&&s.extname(o)?o:l??b,p=await n({buffer:i,headerMime:y.headers.get(`content-type`),filePath:d});if(c&&!s.extname(c)&&p){let e=t(p);e&&(c=`${c}${e}`)}return{buffer:i,contentType:p??void 0,fileName:c}}finally{x&&await x()}}export{d as a,f as i,y as n,m as r,h as t};
+//# sourceMappingURL=fetch-B9tORjG8.js.map

package/dist/fetch-BJT3BrkJ.js

@@ -1 +1,2 @@
 import{t as e}from"./subsystem-Bc2XrjUz.js";import{r as t,t as n}from"./proxy-env-DcmW_urA.js";import{t as r}from"./proxy-fetch-BZ9O8Dvj.js";import{t as i}from"./fetch-_g8lZ8K8.js";import"node:fs/promises";import{readFileSync as a}from"node:fs";import o from"node:process";import*as s from"node:dns";import{Agent as c,EnvHttpProxyAgent as l,ProxyAgent as u,fetch as d}from"undici";function f(){return!!(process.env.WSL_INTEROP||process.env.WSL_DISTRO_NAME||process.env.WSLENV)}function p(){if(process.platform!==`linux`)return!1;if(f())return!0;try{let e=a(`/proc/version`,`utf8`).toLowerCase();return e.includes(`microsoft`)||e.includes(`wsl`)}catch{return!1}}function m(){if(!p())return!1;try{let e=a(`/proc/version`,`utf8`).toLowerCase();return e.includes(`wsl2`)||e.includes(`microsoft-standard`)}catch{return!1}}const h=`OPENCLAW_TELEGRAM_DNS_RESULT_ORDER`;let g;function _(){return typeof g==`boolean`||(g=m()),g}function v(e){let n=e?.env??o.env,r=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(o.versions.node.split(`.`)[0]);return t(n.OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY)?{value:!0,source:`env:OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY`}:t(n.OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY)?{value:!1,source:`env:OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY`}:typeof e?.network?.autoSelectFamily==`boolean`?{value:e.network.autoSelectFamily,source:`config`}:_()?{value:!1,source:`default-wsl2`}:Number.isFinite(r)&&r>=22?{value:!0,source:`default-node22`}:{value:null}}function y(e){let t=e?.env??o.env,n=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(o.versions.node.split(`.`)[0]),r=t[h]?.trim().toLowerCase();if(r===`ipv4first`||r===`verbatim`)return{value:r,source:`env:${h}`};let i=(e?.network)?.dnsResultOrder?.trim().toLowerCase();return i===`ipv4first`||i===`verbatim`?{value:i,source:`config`}:Number.isFinite(n)&&n>=22?{value:`ipv4first`,source:`default-node22`}:{value:null}}const b=e(`telegram/network`),x=[`ETIMEDOUT`,`ENETUNREACH`,`EHOSTUNREACH`,`UND_ERR_CONNECT_TIMEOUT`,`UND_ERR_SOCKET`],S=[{name:`fetch-failed-envelope`,matches:({message:e})=>e.includes(`fetch failed`)},{name:`known-network-code`,matches:({codes:e})=>x.some(t=>e.has(t))}];function C(e){return e===`ipv4first`||e===`verbatim`?e:null}function w(e){if(!e)return;let t=s.lookup;return(n,r,i)=>{t(n,{...typeof r==`number`?{family:r}:r?{...r}:{},order:e,verbatim:e===`verbatim`},i)}}function T(e){let t={};e.forceIpv4?(t.family=4,t.autoSelectFamily=!1):typeof e.autoSelectFamily==`boolean`&&(t.autoSelectFamily=e.autoSelectFamily,t.autoSelectFamilyAttemptTimeout=300);let n=w(e.dnsResultOrder);return n&&(t.lookup=n),Object.keys(t).length>0?t:null}function E(e=process.env){let t=e.no_proxy??e.NO_PROXY??``;if(!t)return!1;if(t===`*`)return!0;let n=`api.telegram.org`,r=t.split(/[,\s]/);for(let e=0;e<r.length;e++){let t=r[e];if(!t)continue;let i=t.match(/^(.+):(\d+)$/),a=(i?i[1]:t).replace(/^\*?\./,``).toLowerCase(),o=i?Number.parseInt(i[2],10):0;if(!(o&&o!==443)&&(n===a||n.slice(-(a.length+1))===`.${a}`))return!0}return!1}function D(e=process.env){return n(`https`,e)}function O(e){let t=T({autoSelectFamily:e.autoSelectFamily,dnsResultOrder:e.dnsResultOrder,forceIpv4:e.forceIpv4}),n=e.proxyUrl?.trim();if(n){let e=t?{uri:n,proxyTls:t}:n;try{return{dispatcher:new u(e),mode:`explicit-proxy`}}catch(e){let t=e instanceof Error?e.message:String(e);throw Error(`explicit proxy dispatcher init failed: ${t}`,{cause:e})}}if(e.useEnvProxy){let e=t?{connect:t,proxyTls:t}:void 0;try{return{dispatcher:new l(e),mode:`env-proxy`}}catch(e){b.warn(`env proxy dispatcher init failed; falling back to direct dispatcher: ${e instanceof Error?e.message:String(e)}`)}}return{dispatcher:new c(t?{connect:t}:void 0),mode:`direct`}}function k(e,t){return e?.dispatcher?e??{}:e?{...e,dispatcher:t}:{dispatcher:t}}function A(e){return i(e)??e}function j(e){if(e.autoSelectDecision.value!==null){let t=e.autoSelectDecision.source?` (${e.autoSelectDecision.source})`:``;b.info(`autoSelectFamily=${e.autoSelectDecision.value}${t}`)}if(e.dnsDecision.value!==null){let t=e.dnsDecision.source?` (${e.dnsDecision.source})`:``;b.info(`dnsResultOrder=${e.dnsDecision.value}${t}`)}}function M(e){let t=new Set,n=[e],r=new Set;for(;n.length>0;){let e=n.shift();if(!(!e||r.has(e))&&(r.add(e),typeof e==`object`)){let i=e.code;typeof i==`string`&&i.trim()&&t.add(i.trim().toUpperCase());let a=e.cause;a&&!r.has(a)&&n.push(a);let o=e.errors;if(Array.isArray(o))for(let e of o)e&&!r.has(e)&&n.push(e)}}return t}function N(e){let t=[...M(e)];return t.length>0?t.join(`,`):`none`}function P(e){let t={message:e&&typeof e==`object`&&`message`in e?String(e.message).toLowerCase():``,codes:M(e)};for(let e of S)if(!e.matches(t))return!1;return!0}function F(e,t){let n=v({network:t?.network}),i=y({network:t?.network});j({autoSelectDecision:n,dnsDecision:i});let a=e?r(e):void 0,o=A(d),s=a?o:e?A(e):o;if(e&&!a)return s;let c=C(i.value),l=!a&&D(),u=O({autoSelectFamily:n.value,dnsResultOrder:c,useEnvProxy:l,forceIpv4:!1,proxyUrl:a}),f=u.dispatcher,p=E(),m=u.mode===`direct`||u.mode===`env-proxy`&&p,h=u.mode===`env-proxy`,g=!1,_=null,x=()=>(_||=O({autoSelectFamily:!1,dnsResultOrder:`ipv4first`,useEnvProxy:h,forceIpv4:!0,proxyUrl:a}).dispatcher,_);return(async(e,t)=>{let n=!!t?.dispatcher,r=k(t,g?x():f);try{return await s(e,r)}catch(r){if(P(r)){if(n)return s(e,t??{});if(!m)throw r;return g||(g=!0,b.warn(`fetch fallback: enabling sticky IPv4-only dispatcher (codes=${N(r)})`)),s(e,k(t,x()))}throw r}})}export{F as t};
+//# sourceMappingURL=fetch-BJT3BrkJ.js.map

package/dist/fetch-B_wRifvZ.js

@@ -1 +1,2 @@
 import{G as e,d as t,u as n}from"./paths-CrCoPIVK.js";import{c as r}from"./paths-CChBdtE8.js";import{E as i}from"./subsystem-Bc2XrjUz.js";import{n as a,t as o}from"./fetch-guard-D10s0raB.js";import s from"node:path";let c;function l(){return c||=i(),c}function u(e,t={}){let n=s.resolve(e);return[t.preferredTmpDir??l(),s.join(n,`media`),s.join(n,`agents`),s.join(n,`workspace`),s.join(n,`sandboxes`)]}function d(){return u(r())}function f(t,n){let i=u(r());if(!n?.trim())return i;let a=e(t,n);if(!a)return i;let o=s.resolve(a);return i.includes(o)||i.push(o),i}async function p(e,t){let n,r=!1;return await new Promise((i,a)=>{let o=()=>{n!==void 0&&(clearTimeout(n),n=void 0)};n=setTimeout(()=>{r=!0,o(),e.cancel().catch(()=>void 0),a(Error(`Media download stalled: no data received for ${t}ms`))},t),e.read().then(e=>{o(),r||i(e)},e=>{o(),r||a(e)})})}async function m(e,t,n){let r=n?.onOverflow??(e=>Error(`Content too large: ${e.size} bytes (limit: ${e.maxBytes} bytes)`)),i=n?.chunkTimeoutMs,a=e.body;if(!a||typeof a.getReader!=`function`){let n=Buffer.from(await e.arrayBuffer());if(n.length>t)throw r({size:n.length,maxBytes:t,res:e});return n}let o=a.getReader(),s=[],c=0;try{for(;;){let{done:n,value:a}=i?await p(o,i):await o.read();if(n)break;if(a?.length){if(c+=a.length,c>t){try{await o.cancel()}catch{}throw r({size:c,maxBytes:t,res:e})}s.push(a)}}}finally{try{o.releaseLock()}catch{}}return Buffer.concat(s.map(e=>Buffer.from(e)),c)}var h=class extends Error{constructor(e,t){super(t),this.code=e,this.name=`MediaFetchError`}};function g(e){return e.replace(/^["']|["']$/g,``)}function _(e){if(!e)return;let t=/filename\*\s*=\s*([^;]+)/i.exec(e);if(t?.[1]){let e=g(t[1].trim()),n=e.split(`''`).slice(1).join(`''`)||e;try{return s.basename(decodeURIComponent(n))}catch{return s.basename(n)}}let n=/filename\s*=\s*([^;]+)/i.exec(e);if(n?.[1])return s.basename(g(n[1].trim()))}async function v(e,t=200){try{let n=await e.text();if(!n)return;let r=n.replace(/\s+/g,` `).trim();return r?r.length<=t?r:`${r.slice(0,t)}…`:void 0}catch{return}}async function y(e){let{url:r,fetchImpl:i,requestInit:c,filePathHint:l,maxBytes:u,maxRedirects:d,readIdleTimeoutMs:f,ssrfPolicy:p,lookupFn:g}=e,y,b=r,x=null;try{let e=await o(a({url:r,fetchImpl:i,init:c,maxRedirects:d,policy:p,lookupFn:g}));y=e.response,b=e.finalUrl,x=e.release}catch(e){throw new h(`fetch_failed`,`Failed to fetch media from ${r}: ${String(e)}`)}try{if(!y.ok){let e=y.statusText?` ${y.statusText}`:``,t=b===r?``:` (redirected to ${b})`,n=`HTTP ${y.status}${e}`;if(!y.body)n=`HTTP ${y.status}${e}; empty response body`;else{let e=await v(y);e&&(n+=`; body: ${e}`)}throw new h(`http_error`,`Failed to fetch media from ${r}${t}: ${n}`)}let e=y.headers.get(`content-length`);if(u&&e){let t=Number(e);if(Number.isFinite(t)&&t>u)throw new h(`max_bytes`,`Failed to fetch media from ${r}: content length ${t} exceeds maxBytes ${u}`)}let i;try{i=u?await m(y,u,{onOverflow:({maxBytes:e,res:t})=>new h(`max_bytes`,`Failed to fetch media from ${t.url||r}: payload exceeds maxBytes ${e}`),chunkTimeoutMs:f}):Buffer.from(await y.arrayBuffer())}catch(e){throw e instanceof h?e:new h(`fetch_failed`,`Failed to fetch media from ${y.url||r}: ${String(e)}`)}let a;try{let e=new URL(b);a=s.basename(e.pathname)||void 0}catch{}let o=_(y.headers.get(`content-disposition`)),c=o||a||(l?s.basename(l):void 0),d=o&&s.extname(o)?o:l??b,p=await n({buffer:i,headerMime:y.headers.get(`content-type`),filePath:d});if(c&&!s.extname(c)&&p){let e=t(p);e&&(c=`${c}${e}`)}return{buffer:i,contentType:p??void 0,fileName:c}}finally{x&&await x()}}export{d as a,f as i,y as n,m as r,h as t};
+//# sourceMappingURL=fetch-B_wRifvZ.js.map

package/dist/fetch-Bn0mWg6a.js

@@ -1 +1,2 @@
 import{t as e}from"./subsystem-C5XF2Fy5.js";import{t}from"./env-D7wNuBx1.js";import{t as n}from"./proxy-env-FJr5nlvs.js";import{t as r}from"./proxy-fetch-BADsUK4d.js";import{t as i}from"./fetch-Dikjvc5M.js";import{n as a}from"./wsl-Ok7GaSJ6.js";import o from"node:process";import*as s from"node:dns";import{Agent as c,EnvHttpProxyAgent as l,ProxyAgent as u,fetch as d}from"undici";const f=`OPENCLAW_TELEGRAM_DNS_RESULT_ORDER`;let p;function m(){return typeof p==`boolean`||(p=a()),p}function h(e){let n=e?.env??o.env,r=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(o.versions.node.split(`.`)[0]);return t(n.OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY)?{value:!0,source:`env:OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY`}:t(n.OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY)?{value:!1,source:`env:OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY`}:typeof e?.network?.autoSelectFamily==`boolean`?{value:e.network.autoSelectFamily,source:`config`}:m()?{value:!1,source:`default-wsl2`}:Number.isFinite(r)&&r>=22?{value:!0,source:`default-node22`}:{value:null}}function g(e){let t=e?.env??o.env,n=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(o.versions.node.split(`.`)[0]),r=t[f]?.trim().toLowerCase();if(r===`ipv4first`||r===`verbatim`)return{value:r,source:`env:${f}`};let i=(e?.network)?.dnsResultOrder?.trim().toLowerCase();return i===`ipv4first`||i===`verbatim`?{value:i,source:`config`}:Number.isFinite(n)&&n>=22?{value:`ipv4first`,source:`default-node22`}:{value:null}}const _=e(`telegram/network`),v=[`ETIMEDOUT`,`ENETUNREACH`,`EHOSTUNREACH`,`UND_ERR_CONNECT_TIMEOUT`,`UND_ERR_SOCKET`],y=[{name:`fetch-failed-envelope`,matches:({message:e})=>e.includes(`fetch failed`)},{name:`known-network-code`,matches:({codes:e})=>v.some(t=>e.has(t))}];function b(e){return e===`ipv4first`||e===`verbatim`?e:null}function x(e){if(!e)return;let t=s.lookup;return(n,r,i)=>{t(n,{...typeof r==`number`?{family:r}:r?{...r}:{},order:e,verbatim:e===`verbatim`},i)}}function S(e){let t={};e.forceIpv4?(t.family=4,t.autoSelectFamily=!1):typeof e.autoSelectFamily==`boolean`&&(t.autoSelectFamily=e.autoSelectFamily,t.autoSelectFamilyAttemptTimeout=300);let n=x(e.dnsResultOrder);return n&&(t.lookup=n),Object.keys(t).length>0?t:null}function C(e=process.env){let t=e.no_proxy??e.NO_PROXY??``;if(!t)return!1;if(t===`*`)return!0;let n=`api.telegram.org`,r=t.split(/[,\s]/);for(let e=0;e<r.length;e++){let t=r[e];if(!t)continue;let i=t.match(/^(.+):(\d+)$/),a=(i?i[1]:t).replace(/^\*?\./,``).toLowerCase(),o=i?Number.parseInt(i[2],10):0;if(!(o&&o!==443)&&(n===a||n.slice(-(a.length+1))===`.${a}`))return!0}return!1}function w(e=process.env){return n(`https`,e)}function T(e){let t=S({autoSelectFamily:e.autoSelectFamily,dnsResultOrder:e.dnsResultOrder,forceIpv4:e.forceIpv4}),n=e.proxyUrl?.trim();if(n){let e=t?{uri:n,proxyTls:t}:n;try{return{dispatcher:new u(e),mode:`explicit-proxy`}}catch(e){let t=e instanceof Error?e.message:String(e);throw Error(`explicit proxy dispatcher init failed: ${t}`,{cause:e})}}if(e.useEnvProxy){let e=t?{connect:t,proxyTls:t}:void 0;try{return{dispatcher:new l(e),mode:`env-proxy`}}catch(e){_.warn(`env proxy dispatcher init failed; falling back to direct dispatcher: ${e instanceof Error?e.message:String(e)}`)}}return{dispatcher:new c(t?{connect:t}:void 0),mode:`direct`}}function E(e,t){return e?.dispatcher?e??{}:e?{...e,dispatcher:t}:{dispatcher:t}}function D(e){return i(e)??e}function O(e){if(e.autoSelectDecision.value!==null){let t=e.autoSelectDecision.source?` (${e.autoSelectDecision.source})`:``;_.info(`autoSelectFamily=${e.autoSelectDecision.value}${t}`)}if(e.dnsDecision.value!==null){let t=e.dnsDecision.source?` (${e.dnsDecision.source})`:``;_.info(`dnsResultOrder=${e.dnsDecision.value}${t}`)}}function k(e){let t=new Set,n=[e],r=new Set;for(;n.length>0;){let e=n.shift();if(!(!e||r.has(e))&&(r.add(e),typeof e==`object`)){let i=e.code;typeof i==`string`&&i.trim()&&t.add(i.trim().toUpperCase());let a=e.cause;a&&!r.has(a)&&n.push(a);let o=e.errors;if(Array.isArray(o))for(let e of o)e&&!r.has(e)&&n.push(e)}}return t}function A(e){let t=[...k(e)];return t.length>0?t.join(`,`):`none`}function j(e){let t={message:e&&typeof e==`object`&&`message`in e?String(e.message).toLowerCase():``,codes:k(e)};for(let e of y)if(!e.matches(t))return!1;return!0}function M(e,t){let n=h({network:t?.network}),i=g({network:t?.network});O({autoSelectDecision:n,dnsDecision:i});let a=e?r(e):void 0,o=D(d),s=a?o:e?D(e):o;if(e&&!a)return s;let c=b(i.value),l=!a&&w(),u=T({autoSelectFamily:n.value,dnsResultOrder:c,useEnvProxy:l,forceIpv4:!1,proxyUrl:a}),f=u.dispatcher,p=C(),m=u.mode===`direct`||u.mode===`env-proxy`&&p,v=u.mode===`env-proxy`,y=!1,x=null,S=()=>(x||=T({autoSelectFamily:!1,dnsResultOrder:`ipv4first`,useEnvProxy:v,forceIpv4:!0,proxyUrl:a}).dispatcher,x);return(async(e,t)=>{let n=!!t?.dispatcher,r=E(t,y?S():f);try{return await s(e,r)}catch(r){if(j(r)){if(n)return s(e,t??{});if(!m)throw r;return y||(y=!0,_.warn(`fetch fallback: enabling sticky IPv4-only dispatcher (codes=${A(r)})`)),s(e,E(t,S()))}throw r}})}export{M as t};
+//# sourceMappingURL=fetch-Bn0mWg6a.js.map

package/dist/fetch-CQaNr5J1.js

@@ -1 +1,2 @@
 import{H as e}from"./subsystem-BLbY429l.js";import{g as t}from"./paths-BjD3T_xq.js";import{d as n}from"./agent-scope-DAWJwFfl.js";import{i as r,r as i}from"./windows-spawn-7oINn5ao.js";import{n as a,t as o}from"./fetch-guard-BrTtJw7h.js";import s from"node:path";let c;function l(){return c||=e(),c}function u(e,t={}){let n=s.resolve(e);return[t.preferredTmpDir??l(),s.join(n,`media`),s.join(n,`agents`),s.join(n,`workspace`),s.join(n,`sandboxes`)]}function d(){return u(t())}function f(e,r){let i=u(t());if(!r?.trim())return i;let a=n(e,r);if(!a)return i;let o=s.resolve(a);return i.includes(o)||i.push(o),i}async function p(e,t){let n,r=!1;return await new Promise((i,a)=>{let o=()=>{n!==void 0&&(clearTimeout(n),n=void 0)};n=setTimeout(()=>{r=!0,o(),e.cancel().catch(()=>void 0),a(Error(`Media download stalled: no data received for ${t}ms`))},t),e.read().then(e=>{o(),r||i(e)},e=>{o(),r||a(e)})})}async function m(e,t,n){let r=n?.onOverflow??(e=>Error(`Content too large: ${e.size} bytes (limit: ${e.maxBytes} bytes)`)),i=n?.chunkTimeoutMs,a=e.body;if(!a||typeof a.getReader!=`function`){let n=Buffer.from(await e.arrayBuffer());if(n.length>t)throw r({size:n.length,maxBytes:t,res:e});return n}let o=a.getReader(),s=[],c=0;try{for(;;){let{done:n,value:a}=i?await p(o,i):await o.read();if(n)break;if(a?.length){if(c+=a.length,c>t){try{await o.cancel()}catch{}throw r({size:c,maxBytes:t,res:e})}s.push(a)}}}finally{try{o.releaseLock()}catch{}}return Buffer.concat(s.map(e=>Buffer.from(e)),c)}var h=class extends Error{constructor(e,t){super(t),this.code=e,this.name=`MediaFetchError`}};function g(e){return e.replace(/^["']|["']$/g,``)}function _(e){if(!e)return;let t=/filename\*\s*=\s*([^;]+)/i.exec(e);if(t?.[1]){let e=g(t[1].trim()),n=e.split(`''`).slice(1).join(`''`)||e;try{return s.basename(decodeURIComponent(n))}catch{return s.basename(n)}}let n=/filename\s*=\s*([^;]+)/i.exec(e);if(n?.[1])return s.basename(g(n[1].trim()))}async function v(e,t=200){try{let n=await e.text();if(!n)return;let r=n.replace(/\s+/g,` `).trim();return r?r.length<=t?r:`${r.slice(0,t)}…`:void 0}catch{return}}async function y(e){let{url:t,fetchImpl:n,requestInit:c,filePathHint:l,maxBytes:u,maxRedirects:d,readIdleTimeoutMs:f,ssrfPolicy:p,lookupFn:g}=e,y,b=t,x=null;try{let e=await o(a({url:t,fetchImpl:n,init:c,maxRedirects:d,policy:p,lookupFn:g}));y=e.response,b=e.finalUrl,x=e.release}catch(e){throw new h(`fetch_failed`,`Failed to fetch media from ${t}: ${String(e)}`)}try{if(!y.ok){let e=y.statusText?` ${y.statusText}`:``,n=b===t?``:` (redirected to ${b})`,r=`HTTP ${y.status}${e}`;if(!y.body)r=`HTTP ${y.status}${e}; empty response body`;else{let e=await v(y);e&&(r+=`; body: ${e}`)}throw new h(`http_error`,`Failed to fetch media from ${t}${n}: ${r}`)}let e=y.headers.get(`content-length`);if(u&&e){let n=Number(e);if(Number.isFinite(n)&&n>u)throw new h(`max_bytes`,`Failed to fetch media from ${t}: content length ${n} exceeds maxBytes ${u}`)}let n;try{n=u?await m(y,u,{onOverflow:({maxBytes:e,res:n})=>new h(`max_bytes`,`Failed to fetch media from ${n.url||t}: payload exceeds maxBytes ${e}`),chunkTimeoutMs:f}):Buffer.from(await y.arrayBuffer())}catch(e){throw e instanceof h?e:new h(`fetch_failed`,`Failed to fetch media from ${y.url||t}: ${String(e)}`)}let a;try{let e=new URL(b);a=s.basename(e.pathname)||void 0}catch{}let o=_(y.headers.get(`content-disposition`)),c=o||a||(l?s.basename(l):void 0),d=o&&s.extname(o)?o:l??b,p=await i({buffer:n,headerMime:y.headers.get(`content-type`),filePath:d});if(c&&!s.extname(c)&&p){let e=r(p);e&&(c=`${c}${e}`)}return{buffer:n,contentType:p??void 0,fileName:c}}finally{x&&await x()}}export{d as a,f as i,y as n,m as r,h as t};
+//# sourceMappingURL=fetch-CQaNr5J1.js.map

package/dist/fetch-Ce-scEU-.js

@@ -1 +1,2 @@
 import{t as e}from"./subsystem-BLbY429l.js";import{i as t}from"./entry.js";import{t as n}from"./proxy-env-FJr5nlvs.js";import{t as r}from"./proxy-fetch-gWETR3cl.js";import{t as i}from"./fetch-Dh-apy46.js";import{n as a}from"./wsl-DHxB2Ew_.js";import o from"node:process";import*as s from"node:dns";import{Agent as c,EnvHttpProxyAgent as l,ProxyAgent as u,fetch as d}from"undici";const f=`OPENCLAW_TELEGRAM_DNS_RESULT_ORDER`;let p;function m(){return typeof p==`boolean`||(p=a()),p}function h(e){let n=e?.env??o.env,r=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(o.versions.node.split(`.`)[0]);return t(n.OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY)?{value:!0,source:`env:OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY`}:t(n.OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY)?{value:!1,source:`env:OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY`}:typeof e?.network?.autoSelectFamily==`boolean`?{value:e.network.autoSelectFamily,source:`config`}:m()?{value:!1,source:`default-wsl2`}:Number.isFinite(r)&&r>=22?{value:!0,source:`default-node22`}:{value:null}}function g(e){let t=e?.env??o.env,n=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(o.versions.node.split(`.`)[0]),r=t[f]?.trim().toLowerCase();if(r===`ipv4first`||r===`verbatim`)return{value:r,source:`env:${f}`};let i=(e?.network)?.dnsResultOrder?.trim().toLowerCase();return i===`ipv4first`||i===`verbatim`?{value:i,source:`config`}:Number.isFinite(n)&&n>=22?{value:`ipv4first`,source:`default-node22`}:{value:null}}const _=e(`telegram/network`),v=[`ETIMEDOUT`,`ENETUNREACH`,`EHOSTUNREACH`,`UND_ERR_CONNECT_TIMEOUT`,`UND_ERR_SOCKET`],y=[{name:`fetch-failed-envelope`,matches:({message:e})=>e.includes(`fetch failed`)},{name:`known-network-code`,matches:({codes:e})=>v.some(t=>e.has(t))}];function b(e){return e===`ipv4first`||e===`verbatim`?e:null}function x(e){if(!e)return;let t=s.lookup;return(n,r,i)=>{t(n,{...typeof r==`number`?{family:r}:r?{...r}:{},order:e,verbatim:e===`verbatim`},i)}}function S(e){let t={};e.forceIpv4?(t.family=4,t.autoSelectFamily=!1):typeof e.autoSelectFamily==`boolean`&&(t.autoSelectFamily=e.autoSelectFamily,t.autoSelectFamilyAttemptTimeout=300);let n=x(e.dnsResultOrder);return n&&(t.lookup=n),Object.keys(t).length>0?t:null}function C(e=process.env){let t=e.no_proxy??e.NO_PROXY??``;if(!t)return!1;if(t===`*`)return!0;let n=`api.telegram.org`,r=t.split(/[,\s]/);for(let e=0;e<r.length;e++){let t=r[e];if(!t)continue;let i=t.match(/^(.+):(\d+)$/),a=(i?i[1]:t).replace(/^\*?\./,``).toLowerCase(),o=i?Number.parseInt(i[2],10):0;if(!(o&&o!==443)&&(n===a||n.slice(-(a.length+1))===`.${a}`))return!0}return!1}function w(e=process.env){return n(`https`,e)}function T(e){let t=S({autoSelectFamily:e.autoSelectFamily,dnsResultOrder:e.dnsResultOrder,forceIpv4:e.forceIpv4}),n=e.proxyUrl?.trim();if(n){let e=t?{uri:n,proxyTls:t}:n;try{return{dispatcher:new u(e),mode:`explicit-proxy`}}catch(e){let t=e instanceof Error?e.message:String(e);throw Error(`explicit proxy dispatcher init failed: ${t}`,{cause:e})}}if(e.useEnvProxy){let e=t?{connect:t,proxyTls:t}:void 0;try{return{dispatcher:new l(e),mode:`env-proxy`}}catch(e){_.warn(`env proxy dispatcher init failed; falling back to direct dispatcher: ${e instanceof Error?e.message:String(e)}`)}}return{dispatcher:new c(t?{connect:t}:void 0),mode:`direct`}}function E(e,t){return e?.dispatcher?e??{}:e?{...e,dispatcher:t}:{dispatcher:t}}function D(e){return i(e)??e}function O(e){if(e.autoSelectDecision.value!==null){let t=e.autoSelectDecision.source?` (${e.autoSelectDecision.source})`:``;_.info(`autoSelectFamily=${e.autoSelectDecision.value}${t}`)}if(e.dnsDecision.value!==null){let t=e.dnsDecision.source?` (${e.dnsDecision.source})`:``;_.info(`dnsResultOrder=${e.dnsDecision.value}${t}`)}}function k(e){let t=new Set,n=[e],r=new Set;for(;n.length>0;){let e=n.shift();if(!(!e||r.has(e))&&(r.add(e),typeof e==`object`)){let i=e.code;typeof i==`string`&&i.trim()&&t.add(i.trim().toUpperCase());let a=e.cause;a&&!r.has(a)&&n.push(a);let o=e.errors;if(Array.isArray(o))for(let e of o)e&&!r.has(e)&&n.push(e)}}return t}function A(e){let t=[...k(e)];return t.length>0?t.join(`,`):`none`}function j(e){let t={message:e&&typeof e==`object`&&`message`in e?String(e.message).toLowerCase():``,codes:k(e)};for(let e of y)if(!e.matches(t))return!1;return!0}function M(e,t){let n=h({network:t?.network}),i=g({network:t?.network});O({autoSelectDecision:n,dnsDecision:i});let a=e?r(e):void 0,o=D(d),s=a?o:e?D(e):o;if(e&&!a)return s;let c=b(i.value),l=!a&&w(),u=T({autoSelectFamily:n.value,dnsResultOrder:c,useEnvProxy:l,forceIpv4:!1,proxyUrl:a}),f=u.dispatcher,p=C(),m=u.mode===`direct`||u.mode===`env-proxy`&&p,v=u.mode===`env-proxy`,y=!1,x=null,S=()=>(x||=T({autoSelectFamily:!1,dnsResultOrder:`ipv4first`,useEnvProxy:v,forceIpv4:!0,proxyUrl:a}).dispatcher,x);return(async(e,t)=>{let n=!!t?.dispatcher,r=E(t,y?S():f);try{return await s(e,r)}catch(r){if(j(r)){if(n)return s(e,t??{});if(!m)throw r;return y||(y=!0,_.warn(`fetch fallback: enabling sticky IPv4-only dispatcher (codes=${A(r)})`)),s(e,E(t,S()))}throw r}})}export{M as t};
+//# sourceMappingURL=fetch-Ce-scEU-.js.map

package/dist/fetch-D0rZDHKO.js

@@ -1 +1,2 @@
 function e(){this.abort()}function t(t){return e.bind(t)}async function n(e,t,n,r=fetch){let i=new AbortController,a=setTimeout(i.abort.bind(i),Math.max(1,n));try{return await r(e,{...t,signal:i.signal})}finally{clearTimeout(a)}}const r=Symbol.for(`openclaw.fetch.abort-signal-wrapped`);function i(e,t){let n=e?.body!=null,r=!n&&typeof Request<`u`&&t instanceof Request&&t.body!=null;return!n&&!r||e&&`duplex`in e?e:e?{...e,duplex:`half`}:{duplex:`half`}}function a(e){if(e[r])return e;let n=Object.assign(((n,r)=>{let a=i(r,n),o=a?.signal;if(!o||typeof AbortSignal<`u`&&o instanceof AbortSignal||typeof AbortController>`u`||typeof o.addEventListener!=`function`)return e(n,a);let s=new AbortController,c=t(s),l=!1;o.aborted?s.abort():(o.addEventListener(`abort`,c,{once:!0}),l=!0);let u=()=>{if(!(!l||typeof o.removeEventListener!=`function`)){l=!1;try{o.removeEventListener(`abort`,c)}catch{}}};try{return e(n,{...a,signal:s.signal}).finally(u)}catch(e){throw u(),e}}),e),a=e;return n.preconnect=typeof a.preconnect==`function`?a.preconnect.bind(a):()=>{},Object.defineProperty(n,r,{value:!0,enumerable:!1,configurable:!1,writable:!1}),n}function o(e){let t=e??globalThis.fetch;if(t)return a(t)}export{t as n,n as r,o as t};
+//# sourceMappingURL=fetch-D0rZDHKO.js.map

package/dist/fetch-DHo17YmK.js

@@ -1 +1,2 @@
 import{t as e}from"./fetch-timeout-Cj8_oAls.js";const t=Symbol.for(`openclaw.fetch.abort-signal-wrapped`);function n(e,t){let n=e?.body!=null,r=!n&&typeof Request<`u`&&t instanceof Request&&t.body!=null;return!n&&!r||e&&`duplex`in e?e:e?{...e,duplex:`half`}:{duplex:`half`}}function r(r){if(r[t])return r;let i=Object.assign(((t,i)=>{let a=n(i,t),o=a?.signal;if(!o||typeof AbortSignal<`u`&&o instanceof AbortSignal||typeof AbortController>`u`||typeof o.addEventListener!=`function`)return r(t,a);let s=new AbortController,c=e(s),l=!1;o.aborted?s.abort():(o.addEventListener(`abort`,c,{once:!0}),l=!0);let u=()=>{if(!(!l||typeof o.removeEventListener!=`function`)){l=!1;try{o.removeEventListener(`abort`,c)}catch{}}};try{return r(t,{...a,signal:s.signal}).finally(u)}catch(e){throw u(),e}}),r),a=r;return i.preconnect=typeof a.preconnect==`function`?a.preconnect.bind(a):()=>{},Object.defineProperty(i,t,{value:!0,enumerable:!1,configurable:!1,writable:!1}),i}function i(e){let t=e??globalThis.fetch;if(t)return r(t)}export{r as n,i as t};
+//# sourceMappingURL=fetch-DHo17YmK.js.map

package/dist/fetch-Dh-apy46.js

@@ -1 +1,2 @@
 import{t as e}from"./fetch-timeout-CdYxWG9w.js";const t=Symbol.for(`openclaw.fetch.abort-signal-wrapped`);function n(e,t){let n=e?.body!=null,r=!n&&typeof Request<`u`&&t instanceof Request&&t.body!=null;return!n&&!r||e&&`duplex`in e?e:e?{...e,duplex:`half`}:{duplex:`half`}}function r(r){if(r[t])return r;let i=Object.assign(((t,i)=>{let a=n(i,t),o=a?.signal;if(!o||typeof AbortSignal<`u`&&o instanceof AbortSignal||typeof AbortController>`u`||typeof o.addEventListener!=`function`)return r(t,a);let s=new AbortController,c=e(s),l=!1;o.aborted?s.abort():(o.addEventListener(`abort`,c,{once:!0}),l=!0);let u=()=>{if(!(!l||typeof o.removeEventListener!=`function`)){l=!1;try{o.removeEventListener(`abort`,c)}catch{}}};try{return r(t,{...a,signal:s.signal}).finally(u)}catch(e){throw u(),e}}),r),a=r;return i.preconnect=typeof a.preconnect==`function`?a.preconnect.bind(a):()=>{},Object.defineProperty(i,t,{value:!0,enumerable:!1,configurable:!1,writable:!1}),i}function i(e){let t=e??globalThis.fetch;if(t)return r(t)}export{r as n,i as t};
+//# sourceMappingURL=fetch-Dh-apy46.js.map

package/dist/fetch-Dikjvc5M.js

@@ -1 +1,2 @@
 import{t as e}from"./fetch-timeout-u8g99Ax0.js";const t=Symbol.for(`openclaw.fetch.abort-signal-wrapped`);function n(e,t){let n=e?.body!=null,r=!n&&typeof Request<`u`&&t instanceof Request&&t.body!=null;return!n&&!r||e&&`duplex`in e?e:e?{...e,duplex:`half`}:{duplex:`half`}}function r(r){if(r[t])return r;let i=Object.assign(((t,i)=>{let a=n(i,t),o=a?.signal;if(!o||typeof AbortSignal<`u`&&o instanceof AbortSignal||typeof AbortController>`u`||typeof o.addEventListener!=`function`)return r(t,a);let s=new AbortController,c=e(s),l=!1;o.aborted?s.abort():(o.addEventListener(`abort`,c,{once:!0}),l=!0);let u=()=>{if(!(!l||typeof o.removeEventListener!=`function`)){l=!1;try{o.removeEventListener(`abort`,c)}catch{}}};try{return r(t,{...a,signal:s.signal}).finally(u)}catch(e){throw u(),e}}),r),a=r;return i.preconnect=typeof a.preconnect==`function`?a.preconnect.bind(a):()=>{},Object.defineProperty(i,t,{value:!0,enumerable:!1,configurable:!1,writable:!1}),i}function i(e){let t=e??globalThis.fetch;if(t)return r(t)}export{r as n,i as t};
+//# sourceMappingURL=fetch-Dikjvc5M.js.map

package/dist/fetch-DsjPfQlp.js

@@ -1 +1,2 @@
 import{c as e,r as t,t as n}from"./proxy-env-DrC3TIGh.js";import{t as r}from"./fetch-D0rZDHKO.js";import"node:fs/promises";import{readFileSync as i}from"node:fs";import a from"node:process";import*as o from"node:dns";import{Agent as s,EnvHttpProxyAgent as c,ProxyAgent as l,fetch as u}from"undici";function d(){return!!(process.env.WSL_INTEROP||process.env.WSL_DISTRO_NAME||process.env.WSLENV)}function f(){if(process.platform!==`linux`)return!1;if(d())return!0;try{let e=i(`/proc/version`,`utf8`).toLowerCase();return e.includes(`microsoft`)||e.includes(`wsl`)}catch{return!1}}function p(){if(!f())return!1;try{let e=i(`/proc/version`,`utf8`).toLowerCase();return e.includes(`wsl2`)||e.includes(`microsoft-standard`)}catch{return!1}}const m=`OPENCLAW_TELEGRAM_DNS_RESULT_ORDER`;let h;function g(){return typeof h==`boolean`||(h=p()),h}function _(e){let n=e?.env??a.env,r=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(a.versions.node.split(`.`)[0]);return t(n.OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY)?{value:!0,source:`env:OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY`}:t(n.OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY)?{value:!1,source:`env:OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY`}:typeof e?.network?.autoSelectFamily==`boolean`?{value:e.network.autoSelectFamily,source:`config`}:g()?{value:!1,source:`default-wsl2`}:Number.isFinite(r)&&r>=22?{value:!0,source:`default-node22`}:{value:null}}function v(e){let t=e?.env??a.env,n=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(a.versions.node.split(`.`)[0]),r=t[m]?.trim().toLowerCase();if(r===`ipv4first`||r===`verbatim`)return{value:r,source:`env:${m}`};let i=(e?.network)?.dnsResultOrder?.trim().toLowerCase();return i===`ipv4first`||i===`verbatim`?{value:i,source:`config`}:Number.isFinite(n)&&n>=22?{value:`ipv4first`,source:`default-node22`}:{value:null}}const y=Symbol.for(`openclaw.proxyFetch.proxyUrl`);function b(e){let t=null,n=()=>(t||=new l(e),t),r=((e,t)=>u(e,{...t,dispatcher:n()}));return Object.defineProperty(r,y,{value:e,enumerable:!1,configurable:!1,writable:!1}),r}function x(e){let t=e?.[y];return typeof t==`string`&&t.trim()||void 0}const S=e(`telegram/network`),C=[`ETIMEDOUT`,`ENETUNREACH`,`EHOSTUNREACH`,`UND_ERR_CONNECT_TIMEOUT`,`UND_ERR_SOCKET`],w=[{name:`fetch-failed-envelope`,matches:({message:e})=>e.includes(`fetch failed`)},{name:`known-network-code`,matches:({codes:e})=>C.some(t=>e.has(t))}];function T(e){return e===`ipv4first`||e===`verbatim`?e:null}function E(e){if(!e)return;let t=o.lookup;return(n,r,i)=>{t(n,{...typeof r==`number`?{family:r}:r?{...r}:{},order:e,verbatim:e===`verbatim`},i)}}function D(e){let t={};e.forceIpv4?(t.family=4,t.autoSelectFamily=!1):typeof e.autoSelectFamily==`boolean`&&(t.autoSelectFamily=e.autoSelectFamily,t.autoSelectFamilyAttemptTimeout=300);let n=E(e.dnsResultOrder);return n&&(t.lookup=n),Object.keys(t).length>0?t:null}function O(e=process.env){let t=e.no_proxy??e.NO_PROXY??``;if(!t)return!1;if(t===`*`)return!0;let n=`api.telegram.org`,r=t.split(/[,\s]/);for(let e=0;e<r.length;e++){let t=r[e];if(!t)continue;let i=t.match(/^(.+):(\d+)$/),a=(i?i[1]:t).replace(/^\*?\./,``).toLowerCase(),o=i?Number.parseInt(i[2],10):0;if(!(o&&o!==443)&&(n===a||n.slice(-(a.length+1))===`.${a}`))return!0}return!1}function k(e=process.env){return n(`https`,e)}function A(e){let t=D({autoSelectFamily:e.autoSelectFamily,dnsResultOrder:e.dnsResultOrder,forceIpv4:e.forceIpv4}),n=e.proxyUrl?.trim();if(n){let e=t?{uri:n,proxyTls:t}:n;try{return{dispatcher:new l(e),mode:`explicit-proxy`}}catch(e){let t=e instanceof Error?e.message:String(e);throw Error(`explicit proxy dispatcher init failed: ${t}`,{cause:e})}}if(e.useEnvProxy){let e=t?{connect:t,proxyTls:t}:void 0;try{return{dispatcher:new c(e),mode:`env-proxy`}}catch(e){S.warn(`env proxy dispatcher init failed; falling back to direct dispatcher: ${e instanceof Error?e.message:String(e)}`)}}return{dispatcher:new s(t?{connect:t}:void 0),mode:`direct`}}function j(e,t){return e?.dispatcher?e??{}:e?{...e,dispatcher:t}:{dispatcher:t}}function M(e){return r(e)??e}function N(e){if(e.autoSelectDecision.value!==null){let t=e.autoSelectDecision.source?` (${e.autoSelectDecision.source})`:``;S.info(`autoSelectFamily=${e.autoSelectDecision.value}${t}`)}if(e.dnsDecision.value!==null){let t=e.dnsDecision.source?` (${e.dnsDecision.source})`:``;S.info(`dnsResultOrder=${e.dnsDecision.value}${t}`)}}function P(e){let t=new Set,n=[e],r=new Set;for(;n.length>0;){let e=n.shift();if(!(!e||r.has(e))&&(r.add(e),typeof e==`object`)){let i=e.code;typeof i==`string`&&i.trim()&&t.add(i.trim().toUpperCase());let a=e.cause;a&&!r.has(a)&&n.push(a);let o=e.errors;if(Array.isArray(o))for(let e of o)e&&!r.has(e)&&n.push(e)}}return t}function F(e){let t=[...P(e)];return t.length>0?t.join(`,`):`none`}function I(e){let t={message:e&&typeof e==`object`&&`message`in e?String(e.message).toLowerCase():``,codes:P(e)};for(let e of w)if(!e.matches(t))return!1;return!0}function L(e,t){let n=_({network:t?.network}),r=v({network:t?.network});N({autoSelectDecision:n,dnsDecision:r});let i=e?x(e):void 0,a=M(u),o=i?a:e?M(e):a;if(e&&!i)return o;let s=T(r.value),c=!i&&k(),l=A({autoSelectFamily:n.value,dnsResultOrder:s,useEnvProxy:c,forceIpv4:!1,proxyUrl:i}),d=l.dispatcher,f=O(),p=l.mode===`direct`||l.mode===`env-proxy`&&f,m=l.mode===`env-proxy`,h=!1,g=null,y=()=>(g||=A({autoSelectFamily:!1,dnsResultOrder:`ipv4first`,useEnvProxy:m,forceIpv4:!0,proxyUrl:i}).dispatcher,g);return(async(e,t)=>{let n=!!t?.dispatcher,r=j(t,h?y():d);try{return await o(e,r)}catch(r){if(I(r)){if(n)return o(e,t??{});if(!p)throw r;return h||(h=!0,S.warn(`fetch fallback: enabling sticky IPv4-only dispatcher (codes=${F(r)})`)),o(e,j(t,y()))}throw r}})}export{b as n,L as t};
+//# sourceMappingURL=fetch-DsjPfQlp.js.map

package/dist/fetch-_g8lZ8K8.js

@@ -1 +1,2 @@
 import{t as e}from"./fetch-timeout-DoOI_izT.js";const t=Symbol.for(`openclaw.fetch.abort-signal-wrapped`);function n(e,t){let n=e?.body!=null,r=!n&&typeof Request<`u`&&t instanceof Request&&t.body!=null;return!n&&!r||e&&`duplex`in e?e:e?{...e,duplex:`half`}:{duplex:`half`}}function r(r){if(r[t])return r;let i=Object.assign(((t,i)=>{let a=n(i,t),o=a?.signal;if(!o||typeof AbortSignal<`u`&&o instanceof AbortSignal||typeof AbortController>`u`||typeof o.addEventListener!=`function`)return r(t,a);let s=new AbortController,c=e(s),l=!1;o.aborted?s.abort():(o.addEventListener(`abort`,c,{once:!0}),l=!0);let u=()=>{if(!(!l||typeof o.removeEventListener!=`function`)){l=!1;try{o.removeEventListener(`abort`,c)}catch{}}};try{return r(t,{...a,signal:s.signal}).finally(u)}catch(e){throw u(),e}}),r),a=r;return i.preconnect=typeof a.preconnect==`function`?a.preconnect.bind(a):()=>{},Object.defineProperty(i,t,{value:!0,enumerable:!1,configurable:!1,writable:!1}),i}function i(e){let t=e??globalThis.fetch;if(t)return r(t)}export{r as n,i as t};
+//# sourceMappingURL=fetch-_g8lZ8K8.js.map

package/dist/fetch-guard-BrTtJw7h.js

@@ -1 +1,2 @@
 import{_i as e,gi as t,hi as n,yi as r}from"./auth-profiles-T8DuH3ax.js";import{i}from"./logger-kQAOe3qp.js";import{n as a}from"./proxy-env-FJr5nlvs.js";import{t as o}from"./fetch-timeout-CdYxWG9w.js";import{EnvHttpProxyAgent as s}from"undici";const c={STRICT:`strict`,TRUSTED_ENV_PROXY:`trusted_env_proxy`},l=new Set([`accept`,`accept-encoding`,`accept-language`,`cache-control`,`content-language`,`content-type`,`if-match`,`if-modified-since`,`if-none-match`,`if-unmodified-since`,`pragma`,`range`,`user-agent`]);function u(e){return{...e,mode:c.STRICT}}function d(e){return{...e,mode:c.TRUSTED_ENV_PROXY}}function f(e){return e.mode?e.mode:e.proxy===`env`&&e.dangerouslyAllowEnvProxyWithoutPinnedDns===!0?c.TRUSTED_ENV_PROXY:c.STRICT}function p(e){return e===301||e===302||e===303||e===307||e===308}function m(e){if(!e?.headers)return e;let t=new Headers(e.headers),n=new Headers;for(let[e,r]of t.entries())l.has(e.toLowerCase())&&n.set(e,r);return{...e,headers:n}}function h(e){let{timeoutMs:t,signal:n}=e;if(!t&&!n)return{signal:void 0,cleanup:()=>{}};if(!t)return{signal:n,cleanup:()=>{}};let r=new AbortController,i=setTimeout(r.abort.bind(r),t),a=o(r);return n&&(n.aborted?r.abort():n.addEventListener(`abort`,a,{once:!0})),{signal:r.signal,cleanup:()=>{clearTimeout(i),n&&n.removeEventListener(`abort`,a)}}}async function g(o){let l=o.fetchImpl??globalThis.fetch;if(!l)throw Error(`fetch is not available`);let u=typeof o.maxRedirects==`number`&&Number.isFinite(o.maxRedirects)?Math.max(0,Math.floor(o.maxRedirects)):3,d=f(o),{signal:g,cleanup:_}=h({timeoutMs:o.timeoutMs,signal:o.signal}),v=!1,y=async e=>{v||(v=!0,_(),await t(e??void 0))},b=new Set,x=o.url,S=o.init?{...o.init}:void 0,C=0;for(;;){let f;try{f=new URL(x)}catch{throw await y(),Error(`Invalid URL: must be http or https`)}if(![`http:`,`https:`].includes(f.protocol))throw await y(),Error(`Invalid URL: must be http or https`);let h=null;try{let n=await r(f.hostname,{lookupFn:o.lookupFn,policy:o.policy});d===c.TRUSTED_ENV_PROXY&&a()?h=new s:o.pinDns!==!1&&(h=e(n));let i={...S?{...S}:{},redirect:`manual`,...h?{dispatcher:h}:{},...g?{signal:g}:{}},_=await l(f.toString(),i);if(p(_.status)){let e=_.headers.get(`location`);if(!e)throw await y(h),Error(`Redirect missing location header (${_.status})`);if(C+=1,C>u)throw await y(h),Error(`Too many redirects (limit: ${u})`);let n=new URL(e,f),r=n.toString();if(b.has(r))throw await y(h),Error(`Redirect loop detected`);n.origin!==f.origin&&(S=m(S)),b.add(r),_.body?.cancel(),await t(h),x=r;continue}return{response:_,finalUrl:x,release:async()=>y(h)}}catch(e){throw e instanceof n&&i(`security: blocked URL fetch (${o.auditContext??`url-fetch`}) target=${f.origin}${f.pathname} reason=${e.message}`),await y(h),e}}}export{u as n,d as r,g as t};
+//# sourceMappingURL=fetch-guard-BrTtJw7h.js.map

package/dist/fetch-guard-D10s0raB.js

@@ -1 +1,2 @@
 import{Ji as e,Yi as t,Zi as n,qi as r}from"./model-selection-B5JsBS9D.js";import{n as i}from"./proxy-env-DcmW_urA.js";import{i as a}from"./logger-5W0OocJW.js";import{t as o}from"./fetch-timeout-DoOI_izT.js";import{EnvHttpProxyAgent as s}from"undici";const c={STRICT:`strict`,TRUSTED_ENV_PROXY:`trusted_env_proxy`},l=new Set([`accept`,`accept-encoding`,`accept-language`,`cache-control`,`content-language`,`content-type`,`if-match`,`if-modified-since`,`if-none-match`,`if-unmodified-since`,`pragma`,`range`,`user-agent`]);function u(e){return{...e,mode:c.STRICT}}function d(e){return{...e,mode:c.TRUSTED_ENV_PROXY}}function f(e){return e.mode?e.mode:e.proxy===`env`&&e.dangerouslyAllowEnvProxyWithoutPinnedDns===!0?c.TRUSTED_ENV_PROXY:c.STRICT}function p(e){return e===301||e===302||e===303||e===307||e===308}function m(e){if(!e?.headers)return e;let t=new Headers(e.headers),n=new Headers;for(let[e,r]of t.entries())l.has(e.toLowerCase())&&n.set(e,r);return{...e,headers:n}}function h(e){let{timeoutMs:t,signal:n}=e;if(!t&&!n)return{signal:void 0,cleanup:()=>{}};if(!t)return{signal:n,cleanup:()=>{}};let r=new AbortController,i=setTimeout(r.abort.bind(r),t),a=o(r);return n&&(n.aborted?r.abort():n.addEventListener(`abort`,a,{once:!0})),{signal:r.signal,cleanup:()=>{clearTimeout(i),n&&n.removeEventListener(`abort`,a)}}}async function g(o){let l=o.fetchImpl??globalThis.fetch;if(!l)throw Error(`fetch is not available`);let u=typeof o.maxRedirects==`number`&&Number.isFinite(o.maxRedirects)?Math.max(0,Math.floor(o.maxRedirects)):3,d=f(o),{signal:g,cleanup:_}=h({timeoutMs:o.timeoutMs,signal:o.signal}),v=!1,y=async t=>{v||(v=!0,_(),await e(t??void 0))},b=new Set,x=o.url,S=o.init?{...o.init}:void 0,C=0;for(;;){let f;try{f=new URL(x)}catch{throw await y(),Error(`Invalid URL: must be http or https`)}if(![`http:`,`https:`].includes(f.protocol))throw await y(),Error(`Invalid URL: must be http or https`);let h=null;try{let r=await n(f.hostname,{lookupFn:o.lookupFn,policy:o.policy});d===c.TRUSTED_ENV_PROXY&&i()?h=new s:o.pinDns!==!1&&(h=t(r));let a={...S?{...S}:{},redirect:`manual`,...h?{dispatcher:h}:{},...g?{signal:g}:{}},_=await l(f.toString(),a);if(p(_.status)){let t=_.headers.get(`location`);if(!t)throw await y(h),Error(`Redirect missing location header (${_.status})`);if(C+=1,C>u)throw await y(h),Error(`Too many redirects (limit: ${u})`);let n=new URL(t,f),r=n.toString();if(b.has(r))throw await y(h),Error(`Redirect loop detected`);n.origin!==f.origin&&(S=m(S)),b.add(r),_.body?.cancel(),await e(h),x=r;continue}return{response:_,finalUrl:x,release:async()=>y(h)}}catch(e){throw e instanceof r&&a(`security: blocked URL fetch (${o.auditContext??`url-fetch`}) target=${f.origin}${f.pathname} reason=${e.message}`),await y(h),e}}}export{u as n,d as r,g as t};
+//# sourceMappingURL=fetch-guard-D10s0raB.js.map

package/dist/fetch-guard-DPdY0NXR.js

@@ -1 +1,2 @@
 import{Aa as e,Ma as t,Pa as n,ja as r}from"./model-selection-BlC_rXAN.js";import{i}from"./logger-Bl8URnrW.js";import{n as a}from"./proxy-env-FJr5nlvs.js";import{t as o}from"./fetch-timeout-u8g99Ax0.js";import{EnvHttpProxyAgent as s}from"undici";const c={STRICT:`strict`,TRUSTED_ENV_PROXY:`trusted_env_proxy`},l=new Set([`accept`,`accept-encoding`,`accept-language`,`cache-control`,`content-language`,`content-type`,`if-match`,`if-modified-since`,`if-none-match`,`if-unmodified-since`,`pragma`,`range`,`user-agent`]);function u(e){return{...e,mode:c.STRICT}}function d(e){return{...e,mode:c.TRUSTED_ENV_PROXY}}function f(e){return e.mode?e.mode:e.proxy===`env`&&e.dangerouslyAllowEnvProxyWithoutPinnedDns===!0?c.TRUSTED_ENV_PROXY:c.STRICT}function p(e){return e===301||e===302||e===303||e===307||e===308}function m(e){if(!e?.headers)return e;let t=new Headers(e.headers),n=new Headers;for(let[e,r]of t.entries())l.has(e.toLowerCase())&&n.set(e,r);return{...e,headers:n}}function h(e){let{timeoutMs:t,signal:n}=e;if(!t&&!n)return{signal:void 0,cleanup:()=>{}};if(!t)return{signal:n,cleanup:()=>{}};let r=new AbortController,i=setTimeout(r.abort.bind(r),t),a=o(r);return n&&(n.aborted?r.abort():n.addEventListener(`abort`,a,{once:!0})),{signal:r.signal,cleanup:()=>{clearTimeout(i),n&&n.removeEventListener(`abort`,a)}}}async function g(o){let l=o.fetchImpl??globalThis.fetch;if(!l)throw Error(`fetch is not available`);let u=typeof o.maxRedirects==`number`&&Number.isFinite(o.maxRedirects)?Math.max(0,Math.floor(o.maxRedirects)):3,d=f(o),{signal:g,cleanup:_}=h({timeoutMs:o.timeoutMs,signal:o.signal}),v=!1,y=async e=>{v||(v=!0,_(),await r(e??void 0))},b=new Set,x=o.url,S=o.init?{...o.init}:void 0,C=0;for(;;){let f;try{f=new URL(x)}catch{throw await y(),Error(`Invalid URL: must be http or https`)}if(![`http:`,`https:`].includes(f.protocol))throw await y(),Error(`Invalid URL: must be http or https`);let h=null;try{let e=await n(f.hostname,{lookupFn:o.lookupFn,policy:o.policy});d===c.TRUSTED_ENV_PROXY&&a()?h=new s:o.pinDns!==!1&&(h=t(e));let i={...S?{...S}:{},redirect:`manual`,...h?{dispatcher:h}:{},...g?{signal:g}:{}},_=await l(f.toString(),i);if(p(_.status)){let e=_.headers.get(`location`);if(!e)throw await y(h),Error(`Redirect missing location header (${_.status})`);if(C+=1,C>u)throw await y(h),Error(`Too many redirects (limit: ${u})`);let t=new URL(e,f),n=t.toString();if(b.has(n))throw await y(h),Error(`Redirect loop detected`);t.origin!==f.origin&&(S=m(S)),b.add(n),_.body?.cancel(),await r(h),x=n;continue}return{response:_,finalUrl:x,release:async()=>y(h)}}catch(t){throw t instanceof e&&i(`security: blocked URL fetch (${o.auditContext??`url-fetch`}) target=${f.origin}${f.pathname} reason=${t.message}`),await y(h),t}}}export{u as n,d as r,g as t};
+//# sourceMappingURL=fetch-guard-DPdY0NXR.js.map

package/dist/fetch-guard-cu7DGSRF.js

@@ -1 +1,2 @@
 import{i as e}from"./logger-DwWqfo66.js";import{Ji as t,Yi as n,Zi as r,qi as i}from"./model-selection-vfhBuN9O.js";import{n as a}from"./proxy-env-BNhTHkd_.js";import{t as o}from"./fetch-timeout-Cj8_oAls.js";import{EnvHttpProxyAgent as s}from"undici";const c={STRICT:`strict`,TRUSTED_ENV_PROXY:`trusted_env_proxy`},l=new Set([`accept`,`accept-encoding`,`accept-language`,`cache-control`,`content-language`,`content-type`,`if-match`,`if-modified-since`,`if-none-match`,`if-unmodified-since`,`pragma`,`range`,`user-agent`]);function u(e){return{...e,mode:c.STRICT}}function d(e){return{...e,mode:c.TRUSTED_ENV_PROXY}}function f(e){return e.mode?e.mode:e.proxy===`env`&&e.dangerouslyAllowEnvProxyWithoutPinnedDns===!0?c.TRUSTED_ENV_PROXY:c.STRICT}function p(e){return e===301||e===302||e===303||e===307||e===308}function m(e){if(!e?.headers)return e;let t=new Headers(e.headers),n=new Headers;for(let[e,r]of t.entries())l.has(e.toLowerCase())&&n.set(e,r);return{...e,headers:n}}function h(e){let{timeoutMs:t,signal:n}=e;if(!t&&!n)return{signal:void 0,cleanup:()=>{}};if(!t)return{signal:n,cleanup:()=>{}};let r=new AbortController,i=setTimeout(r.abort.bind(r),t),a=o(r);return n&&(n.aborted?r.abort():n.addEventListener(`abort`,a,{once:!0})),{signal:r.signal,cleanup:()=>{clearTimeout(i),n&&n.removeEventListener(`abort`,a)}}}async function g(o){let l=o.fetchImpl??globalThis.fetch;if(!l)throw Error(`fetch is not available`);let u=typeof o.maxRedirects==`number`&&Number.isFinite(o.maxRedirects)?Math.max(0,Math.floor(o.maxRedirects)):3,d=f(o),{signal:g,cleanup:_}=h({timeoutMs:o.timeoutMs,signal:o.signal}),v=!1,y=async e=>{v||(v=!0,_(),await t(e??void 0))},b=new Set,x=o.url,S=o.init?{...o.init}:void 0,C=0;for(;;){let f;try{f=new URL(x)}catch{throw await y(),Error(`Invalid URL: must be http or https`)}if(![`http:`,`https:`].includes(f.protocol))throw await y(),Error(`Invalid URL: must be http or https`);let h=null;try{let e=await r(f.hostname,{lookupFn:o.lookupFn,policy:o.policy});d===c.TRUSTED_ENV_PROXY&&a()?h=new s:o.pinDns!==!1&&(h=n(e));let i={...S?{...S}:{},redirect:`manual`,...h?{dispatcher:h}:{},...g?{signal:g}:{}},_=await l(f.toString(),i);if(p(_.status)){let e=_.headers.get(`location`);if(!e)throw await y(h),Error(`Redirect missing location header (${_.status})`);if(C+=1,C>u)throw await y(h),Error(`Too many redirects (limit: ${u})`);let n=new URL(e,f),r=n.toString();if(b.has(r))throw await y(h),Error(`Redirect loop detected`);n.origin!==f.origin&&(S=m(S)),b.add(r),_.body?.cancel(),await t(h),x=r;continue}return{response:_,finalUrl:x,release:async()=>y(h)}}catch(t){throw t instanceof i&&e(`security: blocked URL fetch (${o.auditContext??`url-fetch`}) target=${f.origin}${f.pathname} reason=${t.message}`),await y(h),t}}}export{u as n,d as r,g as t};
+//# sourceMappingURL=fetch-guard-cu7DGSRF.js.map

package/dist/fetch-hy0JKSsm.js

@@ -1 +1,2 @@
 import{O as e}from"./logger-DwWqfo66.js";import{r as t,t as n}from"./proxy-env-BNhTHkd_.js";import{t as r}from"./proxy-fetch-DnjU1fEB.js";import{t as i}from"./fetch-DHo17YmK.js";import{readFileSync as a}from"node:fs";import"node:fs/promises";import o from"node:process";import*as s from"node:dns";import{Agent as c,EnvHttpProxyAgent as l,ProxyAgent as u,fetch as d}from"undici";function f(){return!!(process.env.WSL_INTEROP||process.env.WSL_DISTRO_NAME||process.env.WSLENV)}function p(){if(process.platform!==`linux`)return!1;if(f())return!0;try{let e=a(`/proc/version`,`utf8`).toLowerCase();return e.includes(`microsoft`)||e.includes(`wsl`)}catch{return!1}}function m(){if(!p())return!1;try{let e=a(`/proc/version`,`utf8`).toLowerCase();return e.includes(`wsl2`)||e.includes(`microsoft-standard`)}catch{return!1}}const h=`OPENCLAW_TELEGRAM_DNS_RESULT_ORDER`;let g;function _(){return typeof g==`boolean`||(g=m()),g}function v(e){let n=e?.env??o.env,r=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(o.versions.node.split(`.`)[0]);return t(n.OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY)?{value:!0,source:`env:OPENCLAW_TELEGRAM_ENABLE_AUTO_SELECT_FAMILY`}:t(n.OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY)?{value:!1,source:`env:OPENCLAW_TELEGRAM_DISABLE_AUTO_SELECT_FAMILY`}:typeof e?.network?.autoSelectFamily==`boolean`?{value:e.network.autoSelectFamily,source:`config`}:_()?{value:!1,source:`default-wsl2`}:Number.isFinite(r)&&r>=22?{value:!0,source:`default-node22`}:{value:null}}function y(e){let t=e?.env??o.env,n=typeof e?.nodeMajor==`number`?e.nodeMajor:Number(o.versions.node.split(`.`)[0]),r=t[h]?.trim().toLowerCase();if(r===`ipv4first`||r===`verbatim`)return{value:r,source:`env:${h}`};let i=(e?.network)?.dnsResultOrder?.trim().toLowerCase();return i===`ipv4first`||i===`verbatim`?{value:i,source:`config`}:Number.isFinite(n)&&n>=22?{value:`ipv4first`,source:`default-node22`}:{value:null}}const b=e(`telegram/network`),x=[`ETIMEDOUT`,`ENETUNREACH`,`EHOSTUNREACH`,`UND_ERR_CONNECT_TIMEOUT`,`UND_ERR_SOCKET`],S=[{name:`fetch-failed-envelope`,matches:({message:e})=>e.includes(`fetch failed`)},{name:`known-network-code`,matches:({codes:e})=>x.some(t=>e.has(t))}];function C(e){return e===`ipv4first`||e===`verbatim`?e:null}function w(e){if(!e)return;let t=s.lookup;return(n,r,i)=>{t(n,{...typeof r==`number`?{family:r}:r?{...r}:{},order:e,verbatim:e===`verbatim`},i)}}function T(e){let t={};e.forceIpv4?(t.family=4,t.autoSelectFamily=!1):typeof e.autoSelectFamily==`boolean`&&(t.autoSelectFamily=e.autoSelectFamily,t.autoSelectFamilyAttemptTimeout=300);let n=w(e.dnsResultOrder);return n&&(t.lookup=n),Object.keys(t).length>0?t:null}function E(e=process.env){let t=e.no_proxy??e.NO_PROXY??``;if(!t)return!1;if(t===`*`)return!0;let n=`api.telegram.org`,r=t.split(/[,\s]/);for(let e=0;e<r.length;e++){let t=r[e];if(!t)continue;let i=t.match(/^(.+):(\d+)$/),a=(i?i[1]:t).replace(/^\*?\./,``).toLowerCase(),o=i?Number.parseInt(i[2],10):0;if(!(o&&o!==443)&&(n===a||n.slice(-(a.length+1))===`.${a}`))return!0}return!1}function D(e=process.env){return n(`https`,e)}function O(e){let t=T({autoSelectFamily:e.autoSelectFamily,dnsResultOrder:e.dnsResultOrder,forceIpv4:e.forceIpv4}),n=e.proxyUrl?.trim();if(n){let e=t?{uri:n,proxyTls:t}:n;try{return{dispatcher:new u(e),mode:`explicit-proxy`}}catch(e){let t=e instanceof Error?e.message:String(e);throw Error(`explicit proxy dispatcher init failed: ${t}`,{cause:e})}}if(e.useEnvProxy){let e=t?{connect:t,proxyTls:t}:void 0;try{return{dispatcher:new l(e),mode:`env-proxy`}}catch(e){b.warn(`env proxy dispatcher init failed; falling back to direct dispatcher: ${e instanceof Error?e.message:String(e)}`)}}return{dispatcher:new c(t?{connect:t}:void 0),mode:`direct`}}function k(e,t){return e?.dispatcher?e??{}:e?{...e,dispatcher:t}:{dispatcher:t}}function A(e){return i(e)??e}function j(e){if(e.autoSelectDecision.value!==null){let t=e.autoSelectDecision.source?` (${e.autoSelectDecision.source})`:``;b.info(`autoSelectFamily=${e.autoSelectDecision.value}${t}`)}if(e.dnsDecision.value!==null){let t=e.dnsDecision.source?` (${e.dnsDecision.source})`:``;b.info(`dnsResultOrder=${e.dnsDecision.value}${t}`)}}function M(e){let t=new Set,n=[e],r=new Set;for(;n.length>0;){let e=n.shift();if(!(!e||r.has(e))&&(r.add(e),typeof e==`object`)){let i=e.code;typeof i==`string`&&i.trim()&&t.add(i.trim().toUpperCase());let a=e.cause;a&&!r.has(a)&&n.push(a);let o=e.errors;if(Array.isArray(o))for(let e of o)e&&!r.has(e)&&n.push(e)}}return t}function N(e){let t=[...M(e)];return t.length>0?t.join(`,`):`none`}function P(e){let t={message:e&&typeof e==`object`&&`message`in e?String(e.message).toLowerCase():``,codes:M(e)};for(let e of S)if(!e.matches(t))return!1;return!0}function F(e,t){let n=v({network:t?.network}),i=y({network:t?.network});j({autoSelectDecision:n,dnsDecision:i});let a=e?r(e):void 0,o=A(d),s=a?o:e?A(e):o;if(e&&!a)return s;let c=C(i.value),l=!a&&D(),u=O({autoSelectFamily:n.value,dnsResultOrder:c,useEnvProxy:l,forceIpv4:!1,proxyUrl:a}),f=u.dispatcher,p=E(),m=u.mode===`direct`||u.mode===`env-proxy`&&p,h=u.mode===`env-proxy`,g=!1,_=null,x=()=>(_||=O({autoSelectFamily:!1,dnsResultOrder:`ipv4first`,useEnvProxy:h,forceIpv4:!0,proxyUrl:a}).dispatcher,_);return(async(e,t)=>{let n=!!t?.dispatcher,r=k(t,g?x():f);try{return await s(e,r)}catch(r){if(P(r)){if(n)return s(e,t??{});if(!m)throw r;return g||(g=!0,b.warn(`fetch fallback: enabling sticky IPv4-only dispatcher (codes=${N(r)})`)),s(e,k(t,x()))}throw r}})}export{F as t};
+//# sourceMappingURL=fetch-hy0JKSsm.js.map

package/dist/fetch-timeout-CdYxWG9w.js

@@ -1 +1,2 @@
 function e(){this.abort()}function t(t){return e.bind(t)}async function n(e,t,n,r=fetch){let i=new AbortController,a=setTimeout(i.abort.bind(i),Math.max(1,n));try{return await r(e,{...t,signal:i.signal})}finally{clearTimeout(a)}}export{n,t};
+//# sourceMappingURL=fetch-timeout-CdYxWG9w.js.map

package/dist/fetch-timeout-Cj8_oAls.js

@@ -1 +1,2 @@
 function e(){this.abort()}function t(t){return e.bind(t)}async function n(e,t,n,r=fetch){let i=new AbortController,a=setTimeout(i.abort.bind(i),Math.max(1,n));try{return await r(e,{...t,signal:i.signal})}finally{clearTimeout(a)}}export{n,t};
+//# sourceMappingURL=fetch-timeout-Cj8_oAls.js.map

package/dist/fetch-timeout-DoOI_izT.js

@@ -1 +1,2 @@
 function e(){this.abort()}function t(t){return e.bind(t)}async function n(e,t,n,r=fetch){let i=new AbortController,a=setTimeout(i.abort.bind(i),Math.max(1,n));try{return await r(e,{...t,signal:i.signal})}finally{clearTimeout(a)}}export{n,t};
+//# sourceMappingURL=fetch-timeout-DoOI_izT.js.map

package/dist/fetch-timeout-u8g99Ax0.js

@@ -1 +1,2 @@
 function e(){this.abort()}function t(t){return e.bind(t)}async function n(e,t,n,r=fetch){let i=new AbortController,a=setTimeout(i.abort.bind(i),Math.max(1,n));try{return await r(e,{...t,signal:i.signal})}finally{clearTimeout(a)}}export{n,t};
+//# sourceMappingURL=fetch-timeout-u8g99Ax0.js.map

package/dist/format-Bn1bwJKX.js

@@ -1 +1,2 @@
 function e(e){let t=!!e?.token?.trim(),n=!!e?.password?.trim();return t&&n?`token+password`:t?`token`:n?`password`:`none`}function t(e){if(!e)return e;let t=e;return t=t.replace(/(\b(?:access[_-]?token|refresh[_-]?token|token|password|secret|api[_-]?key)\b\s*[:=]\s*)("?)([^"\\s]+)("?)/gi,`$1$2***$4`),t=t.replace(/\bBearer\s+[A-Za-z0-9._-]+\b/g,`Bearer ***`),t=t.replace(/\bsk-[A-Za-z0-9]{10,}\b/g,`sk-***`),t}export{t as n,e as t};
+//# sourceMappingURL=format-Bn1bwJKX.js.map

package/dist/format-Ce7I7s-k.js

@@ -1 +1,2 @@
 function e(e){let t=!!e?.token?.trim(),n=!!e?.password?.trim();return t&&n?`token+password`:t?`token`:n?`password`:`none`}function t(e){if(!e)return e;let t=e;return t=t.replace(/(\b(?:access[_-]?token|refresh[_-]?token|token|password|secret|api[_-]?key)\b\s*[:=]\s*)("?)([^"\\s]+)("?)/gi,`$1$2***$4`),t=t.replace(/\bBearer\s+[A-Za-z0-9._-]+\b/g,`Bearer ***`),t=t.replace(/\bsk-[A-Za-z0-9]{10,}\b/g,`sk-***`),t}export{t as n,e as t};
+//# sourceMappingURL=format-Ce7I7s-k.js.map

package/dist/format-duration-C8AzNqKh.js

@@ -1 +1,2 @@
 function e(e,t={}){if(!Number.isFinite(e))return`unknown`;let n=t.decimals??1,r=t.unit??`s`,i=(Math.max(0,e)/1e3).toFixed(Math.max(0,n)).replace(/\.0+$/,``).replace(/(\.\d*[1-9])0+$/,`$1`);return r===`seconds`?`${i} seconds`:`${i}s`}function t(t,n={}){return Number.isFinite(t)?t<1e3?`${t}ms`:e(t,{decimals:n.decimals??2,unit:n.unit??`s`}):`unknown`}function n(e,t){if(e==null||!Number.isFinite(e)||e<=0)return;if(e<1e3)return`${Math.round(e)}ms`;let n=t?.spaced?` `:``,r=Math.round(e/1e3),i=Math.floor(r/3600),a=Math.floor(r%3600/60),o=r%60;if(i>=24){let e=Math.floor(i/24),t=i%24;return t>0?`${e}d${n}${t}h`:`${e}d`}return i>0?a>0?`${i}h${n}${a}m`:`${i}h`:a>0?o>0?`${a}m${n}${o}s`:`${a}m`:`${o}s`}function r(e,t=`n/a`){if(e==null||!Number.isFinite(e)||e<0)return t;if(e<1e3)return`${Math.round(e)}ms`;let n=Math.round(e/1e3);if(n<60)return`${n}s`;let r=Math.round(n/60);if(r<60)return`${r}m`;let i=Math.round(r/60);return i<24?`${i}h`:`${Math.round(i/24)}d`}export{e as i,r as n,t as r,n as t};
+//# sourceMappingURL=format-duration-C8AzNqKh.js.map

package/dist/format-duration-D5AMtmHa.js

@@ -1 +1,2 @@
 function e(e,t={}){if(!Number.isFinite(e))return`unknown`;let n=t.decimals??1,r=t.unit??`s`,i=(Math.max(0,e)/1e3).toFixed(Math.max(0,n)).replace(/\.0+$/,``).replace(/(\.\d*[1-9])0+$/,`$1`);return r===`seconds`?`${i} seconds`:`${i}s`}function t(t,n={}){return Number.isFinite(t)?t<1e3?`${t}ms`:e(t,{decimals:n.decimals??2,unit:n.unit??`s`}):`unknown`}function n(e,t){if(e==null||!Number.isFinite(e)||e<=0)return;if(e<1e3)return`${Math.round(e)}ms`;let n=t?.spaced?` `:``,r=Math.round(e/1e3),i=Math.floor(r/3600),a=Math.floor(r%3600/60),o=r%60;if(i>=24){let e=Math.floor(i/24),t=i%24;return t>0?`${e}d${n}${t}h`:`${e}d`}return i>0?a>0?`${i}h${n}${a}m`:`${i}h`:a>0?o>0?`${a}m${n}${o}s`:`${a}m`:`${o}s`}function r(e,t=`n/a`){if(e==null||!Number.isFinite(e)||e<0)return t;if(e<1e3)return`${Math.round(e)}ms`;let n=Math.round(e/1e3);if(n<60)return`${n}s`;let r=Math.round(n/60);if(r<60)return`${r}m`;let i=Math.round(r/60);return i<24?`${i}h`:`${Math.round(i/24)}d`}export{e as i,r as n,t as r,n as t};
+//# sourceMappingURL=format-duration-D5AMtmHa.js.map

package/dist/format-relative-B9pSIdGe.js

@@ -1 +1,2 @@
 function e(e,t){let n=t?.suffix!==!1,r=t?.fallback??`unknown`;if(e==null||!Number.isFinite(e)||e<0)return r;let i=Math.round(e/1e3),a=Math.round(i/60);if(a<1)return n?`just now`:`${i}s`;if(a<60)return n?`${a}m ago`:`${a}m`;let o=Math.round(a/60);if(o<48)return n?`${o}h ago`:`${o}h`;let s=Math.round(o/24);return n?`${s}d ago`:`${s}d`}function t(e,t){let n=t?.fallback??`n/a`;if(e==null||!Number.isFinite(e))return n;let r=Date.now()-e,i=Math.abs(r),a=r>=0,o=Math.round(i/1e3);if(o<60)return a?`just now`:`in <1m`;let s=Math.round(o/60);if(s<60)return a?`${s}m ago`:`in ${s}m`;let c=Math.round(s/60);if(c<48)return a?`${c}h ago`:`in ${c}h`;let l=Math.round(c/24);if(!t?.dateFallback||l<=7)return a?`${l}d ago`:`in ${l}d`;try{return new Intl.DateTimeFormat(`en-US`,{month:`short`,day:`numeric`,...t.timezone?{timeZone:t.timezone}:{}}).format(new Date(e))}catch{return`${l}d ago`}}export{e as n,t};
+//# sourceMappingURL=format-relative-B9pSIdGe.js.map

package/dist/format-relative-DkMjYy7z.js

@@ -1 +1,2 @@
 function e(e,t){let n=t?.suffix!==!1,r=t?.fallback??`unknown`;if(e==null||!Number.isFinite(e)||e<0)return r;let i=Math.round(e/1e3),a=Math.round(i/60);if(a<1)return n?`just now`:`${i}s`;if(a<60)return n?`${a}m ago`:`${a}m`;let o=Math.round(a/60);if(o<48)return n?`${o}h ago`:`${o}h`;let s=Math.round(o/24);return n?`${s}d ago`:`${s}d`}function t(e,t){let n=t?.fallback??`n/a`;if(e==null||!Number.isFinite(e))return n;let r=Date.now()-e,i=Math.abs(r),a=r>=0,o=Math.round(i/1e3);if(o<60)return a?`just now`:`in <1m`;let s=Math.round(o/60);if(s<60)return a?`${s}m ago`:`in ${s}m`;let c=Math.round(s/60);if(c<48)return a?`${c}h ago`:`in ${c}h`;let l=Math.round(c/24);if(!t?.dateFallback||l<=7)return a?`${l}d ago`:`in ${l}d`;try{return new Intl.DateTimeFormat(`en-US`,{month:`short`,day:`numeric`,...t.timezone?{timeZone:t.timezone}:{}}).format(new Date(e))}catch{return`${l}d ago`}}export{e as n,t};
+//# sourceMappingURL=format-relative-DkMjYy7z.js.map

package/dist/frontmatter-BkZkwkVO.js

@@ -4,3 +4,4 @@ import{t as e}from"./boolean-Ch3DfXPy.js";import t from"node:fs";import n from"n
 `).replace(/\r/g,`
 `);if(!t.startsWith(`---`))return;let n=t.indexOf(`
 ---`,3);if(n!==-1)return t.slice(4,n)}function O(e){let t=D(e);if(!t)return{};let n=C(t),r=x(t);if(r===null)return w(n);let i={};for(let[e,t]of Object.entries(r)){i[e]=t.value;let r=n[e];r&&E({lineEntry:r,yamlValue:t})&&(i[e]=r.value)}for(let[e,t]of Object.entries(n))e in i||(i[e]=t.value);return i}function k(e){return e?Array.isArray(e)?e.map(e=>String(e).trim()).filter(Boolean):typeof e==`string`?e.split(`,`).map(e=>e.trim()).filter(Boolean):[]:[]}function A(e,t){let n=e[t];return typeof n==`string`?n:void 0}function j(t,n){let r=e(t);return r===void 0?n:r}function M(e){let t=A(e.frontmatter,e.key??`metadata`);if(t)try{let e=r.parse(t);if(!e||typeof e!=`object`)return;let n=[o,...s];for(let t of n){let n=e[t];if(n&&typeof n==`object`)return n}return}catch{return}}function N(e){let t=typeof e.requires==`object`&&e.requires!==null?e.requires:void 0;if(t)return{bins:k(t.bins),anyBins:k(t.anyBins),env:k(t.env),config:k(t.config)}}function P(e,t){return(Array.isArray(e.install)?e.install:[]).map(e=>t(e)).filter(e=>!!e)}function F(e){return k(e.os)}function I(e,t){if(!e||typeof e!=`object`)return;let n=e,r=(typeof n.kind==`string`?n.kind:typeof n.type==`string`?n.type:``).trim().toLowerCase();if(!t.includes(r))return;let i={raw:n,kind:r};typeof n.id==`string`&&(i.id=n.id),typeof n.label==`string`&&(i.label=n.label);let a=k(n.bins);return a.length>0&&(i.bins=a),i}function L(e,t){return t.id&&(e.id=t.id),t.label&&(e.label=t.label),t.bins&&(e.bins=t.bins),e}export{I as a,F as c,f as d,v as f,j as i,N as l,o as m,A as n,M as o,u as p,k as r,P as s,L as t,O as u};
+//# sourceMappingURL=frontmatter-BkZkwkVO.js.map

package/dist/frontmatter-C7mzDNxd.js

@@ -4,3 +4,4 @@ import{t as e}from"./boolean-D15s2V33.js";import t from"node:path";import n from
 `).replace(/\r/g,`
 `);if(!t.startsWith(`---`))return;let n=t.indexOf(`
 ---`,3);if(n!==-1)return t.slice(4,n)}function O(e){let t=D(e);if(!t)return{};let n=C(t),r=x(t);if(r===null)return w(n);let i={};for(let[e,t]of Object.entries(r)){i[e]=t.value;let r=n[e];r&&E({lineEntry:r,yamlValue:t})&&(i[e]=r.value)}for(let[e,t]of Object.entries(n))e in i||(i[e]=t.value);return i}function k(e){return e?Array.isArray(e)?e.map(e=>String(e).trim()).filter(Boolean):typeof e==`string`?e.split(`,`).map(e=>e.trim()).filter(Boolean):[]:[]}function A(e,t){let n=e[t];return typeof n==`string`?n:void 0}function j(t,n){let r=e(t);return r===void 0?n:r}function M(e){let t=A(e.frontmatter,e.key??`metadata`);if(t)try{let e=r.parse(t);if(!e||typeof e!=`object`)return;let n=[o,...s];for(let t of n){let n=e[t];if(n&&typeof n==`object`)return n}return}catch{return}}function N(e){let t=typeof e.requires==`object`&&e.requires!==null?e.requires:void 0;if(t)return{bins:k(t.bins),anyBins:k(t.anyBins),env:k(t.env),config:k(t.config)}}function P(e,t){return(Array.isArray(e.install)?e.install:[]).map(e=>t(e)).filter(e=>!!e)}function F(e){return k(e.os)}function I(e,t){if(!e||typeof e!=`object`)return;let n=e,r=(typeof n.kind==`string`?n.kind:typeof n.type==`string`?n.type:``).trim().toLowerCase();if(!t.includes(r))return;let i={raw:n,kind:r};typeof n.id==`string`&&(i.id=n.id),typeof n.label==`string`&&(i.label=n.label);let a=k(n.bins);return a.length>0&&(i.bins=a),i}function L(e,t){return t.id&&(e.id=t.id),t.label&&(e.label=t.label),t.bins&&(e.bins=t.bins),e}export{I as a,F as c,f as d,v as f,j as i,N as l,o as m,A as n,M as o,u as p,k as r,P as s,L as t,O as u};
+//# sourceMappingURL=frontmatter-C7mzDNxd.js.map

package/dist/frontmatter-CzpfPBFl.js

@@ -4,3 +4,4 @@ import{t as e}from"./subsystem-Bc2XrjUz.js";import{t}from"./boolean-DypnRoRK.js"
 `).replace(/\r/g,`
 `);if(!t.startsWith(`---`))return;let n=t.indexOf(`
 ---`,3);if(n!==-1)return t.slice(4,n)}function B(e){let t=z(e);if(!t)return{};let n=F(t),r=N(t);if(r===null)return I(n);let i={};for(let[e,t]of Object.entries(r)){i[e]=t.value;let r=n[e];r&&R({lineEntry:r,yamlValue:t})&&(i[e]=r.value)}for(let[e,t]of Object.entries(n))e in i||(i[e]=t.value);return i}function V(e){return e?Array.isArray(e)?e.map(e=>String(e).trim()).filter(Boolean):typeof e==`string`?e.split(`,`).map(e=>e.trim()).filter(Boolean):[]:[]}function H(e,t){let n=e[t];return typeof n==`string`?n:void 0}function U(e,n){let r=t(e);return r===void 0?n:r}function W(e){let t=H(e.frontmatter,e.key??`metadata`);if(t)try{let e=i.parse(t);if(!e||typeof e!=`object`)return;let n=[v,...y];for(let t of n){let n=e[t];if(n&&typeof n==`object`)return n}return}catch{return}}function G(e){let t=typeof e.requires==`object`&&e.requires!==null?e.requires:void 0;if(t)return{bins:V(t.bins),anyBins:V(t.anyBins),env:V(t.env),config:V(t.config)}}function K(e,t){return(Array.isArray(e.install)?e.install:[]).map(e=>t(e)).filter(e=>!!e)}function q(e){return V(e.os)}function J(e,t){if(!e||typeof e!=`object`)return;let n=e,r=(typeof n.kind==`string`?n.kind:typeof n.type==`string`?n.type:``).trim().toLowerCase();if(!t.includes(r))return;let i={raw:n,kind:r};typeof n.id==`string`&&(i.id=n.id),typeof n.label==`string`&&(i.label=n.label);let a=V(n.bins);return a.length>0&&(i.bins=a),i}function Y(e,t){return t.id&&(e.id=t.id),t.label&&(e.label=t.label),t.bins&&(e.bins=t.bins),e}export{g as _,J as a,q as c,w as d,A as f,h as g,d as h,U as i,G as l,v as m,H as n,W as o,S as p,V as r,K as s,Y as t,B as u,l as v,u as y};
+//# sourceMappingURL=frontmatter-CzpfPBFl.js.map

package/dist/gateway-cli-CKu0FA7D.js

@@ -208,3 +208,4 @@ Add your local tool notes here.
 `)]);await lM(Y.join(t,`AGENTS.md`),n),await lM(Y.join(t,`SOUL.md`),r),await lM(Y.join(t,`TOOLS.md`),i),await lM(Y.join(t,`IDENTITY.md`),a),await lM(Y.join(t,`USER.md`),o)}async function dM(e){let t=cM();e.reset&&await tu(`full`,t,_);let n=Fe().configPath,r=J.existsSync(n);!e.reset&&r||(await Vt({gateway:{mode:`local`,bind:`loopback`},agents:{defaults:{workspace:t,skipBootstrap:!0},list:[{id:`dev`,default:!0,workspace:t,identity:{name:iM,theme:aM,emoji:oM}}]}}),await uM(t),_.log(`Dev config ready: ${C(n)}`),_.log(`Dev workspace ready: ${C(E(t))}`))}const fM={launchd:[`LAUNCH_JOB_LABEL`,`LAUNCH_JOB_NAME`,`XPC_SERVICE_NAME`,`OPENCLAW_LAUNCHD_LABEL`],systemd:[`OPENCLAW_SYSTEMD_UNIT`,`INVOCATION_ID`,`SYSTEMD_EXEC_PID`,`JOURNAL_STREAM`],schtasks:[`OPENCLAW_WINDOWS_TASK_NAME`]};[...fM.launchd,...fM.systemd,...fM.schtasks];function pM(e,t){return t.some(t=>{let n=e[t];return typeof n==`string`&&n.trim().length>0})}function mM(e=process.env,t=process.platform){if(t===`darwin`)return pM(e,fM.launchd)?`launchd`:null;if(t===`linux`)return pM(e,fM.systemd)?`systemd`:null;if(t===`win32`){if(pM(e,fM.schtasks))return`schtasks`;let t=e.OPENCLAW_SERVICE_MARKER?.trim(),n=e.OPENCLAW_SERVICE_KIND?.trim();return t&&n===`gateway`?`schtasks`:null}return null}function hM(e){if(!e)return!1;let t=e.trim().toLowerCase();return t===`1`||t===`true`||t===`yes`||t===`on`}function gM(){if(hM(process.env.OPENCLAW_NO_RESPAWN))return{mode:`disabled`};let e=mM(process.env);if(e){if(e===`launchd`){let e=$u({env:process.env,mode:`start-after-exit`,waitForPid:process.pid});return e.ok?{mode:`supervised`,detail:`launchd restart handoff pid ${e.pid??`unknown`}`}:{mode:`supervised`,detail:`launchd exit fallback (${e.detail??`restart handoff failed`})`}}if(e===`schtasks`){let e=Ll();if(!e.ok)return{mode:`failed`,detail:e.detail??`${e.method} restart failed`}}return{mode:`supervised`}}if(process.platform===`win32`)return{mode:`disabled`,detail:`win32: detached respawn unsupported without Scheduled Task markers`};try{let e=[...process.execArgv,...process.argv.slice(1)],t=Sf(process.execPath,e,{env:process.env,detached:!0,stdio:`inherit`});return t.unref(),{mode:`spawned`,pid:t.pid??void 0}}catch(e){return{mode:`failed`,detail:e instanceof Error?e.message:String(e)}}}function _M(e){let t=!0;return()=>t?(t=!1,!1):(e(),!0)}const vM=v(`gateway`);async function yM(e){let t=await RA({port:e.lockPort}),n=null,r=!1,i=null,a=()=>{process.removeListener(`SIGTERM`,m),process.removeListener(`SIGINT`,h),process.removeListener(`SIGUSR1`,g)},o=t=>{a(),e.runtime.exit(t)},s=async()=>t?(await t.release(),t=null,!0):!1,c=async()=>{try{return t=await RA({port:e.lockPort}),!0}catch(e){return vM.error(`failed to reacquire gateway lock for in-process restart: ${String(e)}`),o(1),!1}},l=async()=>{let e=await s(),t=gM();if(t.mode===`spawned`||t.mode===`supervised`){let e=t.mode===`spawned`?`spawned pid ${t.pid??`unknown`}`:`supervisor restart`;vM.info(`restart mode: full process restart (${e})`),o(0);return}t.mode===`failed`?vM.warn(`full process restart failed (${t.detail??`unknown error`}); falling back to in-process restart`):vM.info(`restart mode: in-process restart (${t.detail??`OPENCLAW_NO_RESPAWN`})`),!(e&&!await c())&&(r=!1,i?.())},u=async()=>{await s(),o(0)},d=9e4,f=5e3,p=(e,t)=>{if(r){vM.info(`received ${t} during shutdown; ignoring`);return}r=!0;let i=e===`restart`;vM.info(`received ${t}; ${i?`restarting`:`shutting down`}`);let a=i?d+f:f,s=setTimeout(()=>{vM.error(`shutdown timed out; exiting without full cleanup`),o(i?1:0)},a);(async()=>{try{if(i){ni();let e=Ur(),t=Ci();if(t>0&&Mi(void 0,{mode:`compacting`}),e>0||t>0){vM.info(`draining ${e} active task(s) and ${t} active embedded run(s) before restart (timeout ${d}ms)`);let[n,r]=await Promise.all([e>0?Ri(d):Promise.resolve({drained:!0}),t>0?fi(d):Promise.resolve({drained:!0})]);n.drained&&r.drained?vM.info(`all active work drained`):(vM.warn(`drain timeout reached; proceeding with restart`),Mi(void 0,{mode:`all`}))}}await n?.close({reason:i?`gateway restarting`:`gateway stopping`,restartExpectedMs:i?1500:null})}catch(e){vM.error(`shutdown error: ${String(e)}`)}finally{clearTimeout(s),n=null,i?await l():await u()}})()},m=()=>{vM.info(`signal SIGTERM received`),p(`stop`,`SIGTERM`)},h=()=>{vM.info(`signal SIGINT received`),p(`stop`,`SIGINT`)},g=()=>{if(vM.info(`signal SIGUSR1 received`),!Hl()&&!Il()){vM.warn(`SIGUSR1 restart ignored (not authorized; commands.restart=false or use gateway tool).`);return}Pl(),p(`restart`,`SIGUSR1`)};process.on(`SIGTERM`,m),process.on(`SIGINT`,h),process.on(`SIGUSR1`,g);try{let t=_M(()=>{Ui()}),r=!0;for(;;){t();try{n=await e.start(),r=!1}catch(e){if(r)throw e;n=null,await s();let t=e instanceof Error?e.message:String(e),i=e instanceof Error&&e.stack?`\n${e.stack}`:``;vM.error(`gateway startup failed: ${t}. Process will stay alive; fix the issue and restart.${i}`)}await new Promise(e=>{i=e})}}finally{await s(),a()}}const bM=v(`gateway`),xM=[`port`,`bind`,`token`,`auth`,`password`,`passwordFile`,`tailscale`,`wsLog`,`rawStreamPath`],SM=[`tailscaleResetOnExit`,`allowUnconfigured`,`dev`,`reset`,`force`,`verbose`,`claudeCliLogs`,`compact`,`rawStream`],CM=[`none`,`token`,`password`,`trusted-proxy`],wM=[`off`,`serve`,`funnel`];function TM(){_.error(`Warning: --password can be exposed via process listings. Prefer --password-file or OPENCLAW_GATEWAY_PASSWORD.`)}function EM(e){let t=bd(e.password),n=bd(e.passwordFile);if(t&&n)throw Error(`Use either --password or --password-file.`);return n?Uu(n,`Gateway password`):t}function DM(e,t){return e&&t.includes(e)?e:null}function OM(e){return e.map(e=>`"${e}"`).join(`|`)}function kM(e){let t=e.map(e=>`"${e}"`);return t.length===0?``:t.length===1?t[0]:t.length===2?`${t[0]} or ${t[1]}`:`${t.slice(0,-1).join(`, `)}, or ${t[t.length-1]}`}function AM(e,t){let n={...e};for(let e of xM){let r=Wu(t,e);if(e===`wsLog`){n[e]=r??n[e];continue}n[e]=n[e]??r}for(let e of SM){let r=Wu(t,e);n[e]=!!(n[e]||r)}return n}async function jM(t){let n=process.env.OPENCLAW_PROFILE?.trim().toLowerCase()===`dev`,r=!!t.dev||n;if(t.reset&&!r){_.error(`Use --reset with --dev.`),_.exit(1);return}g(!0),y(!!t.verbose),t.claudeCliLogs&&(f([`agent/claude-cli`]),process.env.OPENCLAW_CLAUDE_CLI_LOG_OUTPUT=`1`);let i=t.compact?`compact`:t.wsLog,s=i===`compact`?`compact`:i===`full`?`full`:`auto`;i!==void 0&&i!==`auto`&&i!==`compact`&&i!==`full`&&(_.error(`Invalid --ws-log (use "auto", "full", "compact")`),_.exit(1)),Jd(s),t.rawStream&&(process.env.OPENCLAW_RAW_STREAM=`1`);let c=bd(t.rawStreamPath);c&&(process.env.OPENCLAW_RAW_STREAM_PATH=c),r&&await dM({reset:!!t.reset});let l=H(),u=ed(t.port);t.port!==void 0&&u===null&&(_.error(`Invalid port`),_.exit(1));let d=u??o(l);(!Number.isFinite(d)||d<=0)&&(_.error(`Invalid port`),_.exit(1));let p=bd(t.bind)??l.gateway?.bind??`loopback`,m=p===`loopback`||p===`lan`||p===`auto`||p===`custom`||p===`tailnet`?p:null;if(!m){_.error(`Invalid --bind (use "loopback", "lan", "tailnet", "auto", or "custom")`),_.exit(1);return}if(process.env.OPENCLAW_SERVICE_MARKER?.trim()){let e=Ul(d);e.length>0&&bM.info(`service-mode: cleared ${e.length} stale gateway pid(s) before bind on port ${d}`)}if(t.force)try{let{killed:e,waitedMs:t,escalatedToSigkill:n}=await Bu(d,{timeoutMs:2e3,intervalMs:100,sigtermTimeoutMs:700});if(e.length===0)bM.info(`force: no listeners on port ${d}`);else{for(let t of e)bM.info(`force: killed pid ${t.pid}${t.command?` (${t.command})`:``} on port ${d}`);n&&bM.info(`force: escalated to SIGKILL while freeing port ${d}`),t>0&&bM.info(`force: waited ${t}ms for port ${d} to free`)}let r=await zu(d,{timeoutMs:3e3,intervalMs:150,host:m===`loopback`?`127.0.0.1`:m===`lan`?`0.0.0.0`:m===`custom`?bd(l.gateway?.customBindHost):void 0});r>0&&bM.info(`force: waited ${r}ms for port ${d} to become bindable`)}catch(e){_.error(`Force: ${String(e)}`),_.exit(1);return}if(t.token){let e=bd(t.token);e&&(process.env.OPENCLAW_GATEWAY_TOKEN=e)}let h=bd(t.auth),v=DM(h,CM);if(h&&!v){_.error(`Invalid --auth (use ${kM(CM)})`),_.exit(1);return}let b=bd(t.tailscale),x=DM(b,wM);if(b&&!x){_.error(`Invalid --tailscale (use ${kM(wM)})`),_.exit(1);return}let S;try{S=EM(t)}catch(e){_.error(e instanceof Error?e.message:String(e)),_.exit(1);return}bd(t.password)&&TM();let C=bd(t.token),w=await Ge().catch(()=>null),T=w?.exists??J.existsSync(a),E=Y.join(e(process.env),`logs`,`config-audit.jsonl`),O=l.gateway?.mode;if(!t.allowUnconfigured&&O!==`local`){T?(_.error(`Gateway start blocked: set gateway.mode=local (current: ${O??`unset`}) or pass --allow-unconfigured.`),_.error(`Config write audit: ${E}`)):_.error(`Missing config. Run \`${$a(`openclaw setup`)}\` or set gateway.mode=local (or pass --allow-unconfigured).`),_.exit(1);return}let k=xd(w?.parsed),A=v||S||C||h?{...v?{mode:v}:{},...C?{token:C}:{},...S?{password:S}:{}}:void 0,j=D({authConfig:l.gateway?.auth,authOverride:A,env:process.env,tailscaleMode:x??l.gateway?.tailscale?.mode??`off`}),M=j.mode,N=j.token,P=j.password,ee=typeof N==`string`&&N.trim().length>0,F=typeof P==`string`&&P.trim().length>0,I=ee||Qa(A?.token??l.gateway?.auth?.token,l.secrets?.defaults),L=F||Qa(A?.password??l.gateway?.auth?.password,l.secrets?.defaults),te=M===`token`&&I||M===`password`&&L,R=M===`token`&&!I,z=[];if(k.hasGatewayToken&&z.push(`Found "gateway.token" in config. Use "gateway.auth.token" instead.`),k.hasRemoteToken&&z.push(`"gateway.remote.token" is for remote CLI calls; it does not enable local gateway auth.`),M===`password`&&!L){_.error([`Gateway auth is set to password, but no password is configured.`,`Set gateway.auth.password (or OPENCLAW_GATEWAY_PASSWORD), or pass --password.`,...z].filter(Boolean).join(`
 `)),_.exit(1);return}if(M===`none`&&bM.warn(`Gateway auth mode=none explicitly configured; all gateway connections are unauthenticated.`),m!==`loopback`&&!te&&!R&&M!==`trusted-proxy`){_.error([`Refusing to bind gateway to ${m} without auth.`,`Set gateway.auth.token/password (or OPENCLAW_GATEWAY_TOKEN/OPENCLAW_GATEWAY_PASSWORD) or pass --token/--password.`,...z].filter(Boolean).join(`
 `)),_.exit(1);return}let ne=x||t.tailscaleResetOnExit?{...x?{mode:x}:{},...t.tailscaleResetOnExit?{resetOnExit:!0}:{}}:void 0;try{await yM({runtime:_,lockPort:d,start:async()=>await rM(d,{bind:m,auth:A,tailscale:ne})})}catch(e){if(e instanceof jA||e&&typeof e==`object`&&e.name===`GatewayLockError`){let t=Cd(e);_.error(`Gateway failed to start: ${t}\nIf the gateway is supervised, stop it with: ${$a(`openclaw gateway stop`)}`);try{let e=await Qt(d);if(e.status===`busy`)for(let t of at(e))_.error(t)}catch{}await Sd(),_.exit(1);return}_.error(`Gateway failed to start: ${String(e)}`),_.exit(1)}}function MM(e){return e.option(`--port <port>`,`Port for the gateway WebSocket`).option(`--bind <mode>`,`Bind mode ("loopback"|"lan"|"tailnet"|"auto"|"custom"). Defaults to config gateway.bind (or loopback).`).option(`--token <token>`,`Shared token required in connect.params.auth.token (default: OPENCLAW_GATEWAY_TOKEN env if set)`).option(`--auth <mode>`,`Gateway auth mode (${OM(CM)})`).option(`--password <password>`,`Password for auth mode=password`).option(`--password-file <path>`,`Read gateway password from file`).option(`--tailscale <mode>`,`Tailscale exposure mode (${OM(wM)})`).option(`--tailscale-reset-on-exit`,`Reset Tailscale serve/funnel configuration on shutdown`,!1).option(`--allow-unconfigured`,`Allow gateway start without gateway.mode=local in config`,!1).option(`--dev`,`Create a dev config + workspace if missing (no BOOTSTRAP.md)`,!1).option(`--reset`,`Reset dev config + credentials + sessions + workspace (requires --dev)`,!1).option(`--force`,`Kill any existing listener on the target port before starting`,!1).option(`--verbose`,`Verbose logging to stdout/stderr`,!1).option(`--claude-cli-logs`,`Only show claude-cli logs in the console (includes stdout/stderr)`,!1).option(`--ws-log <style>`,`WebSocket log style ("auto"|"full"|"compact")`,`auto`).option(`--compact`,`Alias for "--ws-log compact"`,!1).option(`--raw-stream`,`Log raw model stream events to jsonl`,!1).option(`--raw-stream-path <path>`,`Raw stream jsonl path`).action(async(e,t)=>{await jM(AM(e,t))})}function NM(e,t){return uu(_,e,e=>{let n=String(e);_.error(t?`${t}: ${n}`:n),_.exit(1)})}function PM(e,t=30){if(typeof e==`number`&&Number.isFinite(e))return Math.max(1,Math.floor(e));if(typeof e==`string`&&e.trim()!==``){let t=Number(e);if(Number.isFinite(t))return Math.max(1,Math.floor(t))}return t}function FM(e,t){let n=Wu(t,`token`),r=Wu(t,`password`);return{...e,token:e.token??n,password:e.password??r}}function IM(e,t,n){let r=au(e.totals.totalCost)??`$0.00`,i=iu(e.totals.totalTokens)??`0`,a=[u(n,s.heading,`Usage cost (${t} days)`),`${u(n,s.muted,`Total:`)} ${r} · ${i} tokens`];e.totals.missingCostEntries>0&&a.push(`${u(n,s.muted,`Missing entries:`)} ${e.totals.missingCostEntries}`);let o=e.daily.at(-1);if(o){let e=au(o.totalCost)??`$0.00`,t=iu(o.totalTokens)??`0`;a.push(`${u(n,s.muted,`Latest day:`)} ${o.date} · ${e} · ${t} tokens`)}return a}function LM(e){let t=MM(e.command(`gateway`).description(`Run, inspect, and query the WebSocket Gateway`).addHelpText(`after`,()=>`\n${s.heading(`Examples:`)}\n${du([[`openclaw gateway run`,`Run the gateway in the foreground.`],[`openclaw gateway status`,`Show service status and probe reachability.`],[`openclaw gateway discover`,`Find local and wide-area gateway beacons.`],[`openclaw gateway call health`,`Call a gateway RPC method directly.`]])}\n\n${s.muted(`Docs:`)} ${lu(`/cli/gateway`,`docs.openclaw.ai/cli/gateway`)}\n`));MM(t.command(`run`).description(`Run the WebSocket Gateway (foreground)`)),nd(t,{statusDescription:`Show gateway service status + probe the Gateway`}),op(t.command(`call`).description(`Call a Gateway method`).argument(`<method>`,`Method name (health/status/system-presence/cron.*)`).option(`--params <json>`,`JSON object string for params`,`{}`).action(async(e,t,n)=>{await NM(async()=>{let r=FM(t,n),i=await ze(),a=JSON.parse(String(t.params??`{}`)),o=await sp(e,{...r,config:i},a);if(r.json){_.log(JSON.stringify(o,null,2));return}let c=m();_.log(`${u(c,s.heading,`Gateway call`)}: ${u(c,s.muted,String(e))}`),_.log(JSON.stringify(o,null,2))},`Gateway call failed`)})),op(t.command(`usage-cost`).description(`Fetch usage cost summary from session logs`).option(`--days <days>`,`Number of days to include`,`30`).action(async(e,t)=>{await NM(async()=>{let n=FM(e,t),r=PM(e.days),i=await ze(),a=await sp(`usage.cost`,{...n,config:i},{days:r});if(n.json){_.log(JSON.stringify(a,null,2));return}let o=m(),s=a;for(let e of IM(s,r,o))_.log(e)},`Gateway usage cost failed`)})),op(t.command(`health`).description(`Fetch Gateway health`).action(async(e,t)=>{await NM(async()=>{let n=FM(e,t),r=await ze(),i=await sp(`health`,{...n,config:r});if(n.json){_.log(JSON.stringify(i,null,2));return}let a=m(),o=i&&typeof i==`object`?i:{},c=typeof o.durationMs==`number`?o.durationMs:null;if(_.log(u(a,s.heading,`Gateway Health`)),_.log(`${u(a,s.success,`OK`)}${c==null?``:` (${c}ms)`}`),o.channels&&typeof o.channels==`object`)for(let e of jd(o))_.log(Dd(e,a))})})),t.command(`probe`).description(`Show gateway reachability + discovery + health + status summary (local + remote)`).option(`--url <url>`,`Explicit Gateway WebSocket URL (still probes localhost)`).option(`--ssh <target>`,`SSH target for remote gateway tunnel (user@host or user@host:port)`).option(`--ssh-identity <path>`,`SSH identity file path`).option(`--ssh-auto`,`Try to derive an SSH target from Bonjour discovery`,!1).option(`--token <token>`,`Gateway token (applies to all probes)`).option(`--password <password>`,`Gateway password (applies to all probes)`).option(`--timeout <ms>`,`Overall probe budget in ms`,`3000`).option(`--json`,`Output JSON`,!1).action(async(e,t)=>{await NM(async()=>{await np(FM(e,t),_)})}),t.command(`discover`).description(`Discover gateways via Bonjour (local + wide-area if configured)`).option(`--timeout <ms>`,`Per-command timeout in ms`,`2000`).option(`--json`,`Output JSON`,!1).action(async e=>{await NM(async()=>{let t=vd({configDomain:(await ze()).discovery?.wideArea?.domain}),n=cp(e.timeout,2e3),r=[`local.`,...t?[t]:[]],i=dp(await fu({label:`Scanning for gateways…`,indeterminate:!0,enabled:e.json!==!0,delayMs:0},async()=>await wd({timeoutMs:n,wideAreaDomain:t}))).toSorted((e,t)=>String(e.displayName||e.instanceName).localeCompare(String(t.displayName||t.instanceName)));if(e.json){let e=i.map(e=>{let t=lp(e),n=up(e);return{...e,wsUrl:t?`ws://${t}:${n}`:null}});_.log(JSON.stringify({timeoutMs:n,domains:r,count:e.length,beacons:e},null,2));return}let a=m();if(_.log(u(a,s.heading,`Gateway Discovery`)),_.log(u(a,s.muted,`Found ${i.length} gateway(s) · domains: ${r.join(`, `)}`)),i.length!==0)for(let e of i)for(let t of fp(e,a))_.log(t)},`gateway discover failed`)})}export{LM as registerGatewayCli};
+//# sourceMappingURL=gateway-cli-CKu0FA7D.js.map