@qqbrowser/openclaw-qbot 0.0.148 → 0.10.1

package/dist/plugin-sdk/mattermost.cjs

@@ -10,4 +10,3 @@ Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=requi
 • Audio – Generate TTS from custom text
 • Help – Show usage guide`}}),y({key:`whoami`,nativeName:`whoami`,description:`Show your sender id.`,textAlias:`/whoami`,category:`status`}),y({key:`session`,nativeName:`session`,description:`Manage session-level settings (for example /session idle).`,textAlias:`/session`,category:`session`,args:[{name:`action`,description:`idle | max-age`,type:`string`,choices:[`idle`,`max-age`]},{name:`value`,description:`Duration (24h, 90m) or off`,type:`string`,captureRemaining:!0}],argsMenu:`auto`}),y({key:`subagents`,nativeName:`subagents`,description:`List, kill, log, spawn, or steer subagent runs for this session.`,textAlias:`/subagents`,category:`management`,args:[{name:`action`,description:`list | kill | log | info | send | steer | spawn`,type:`string`,choices:[`list`,`kill`,`log`,`info`,`send`,`steer`,`spawn`]},{name:`target`,description:`Run id, index, or session key`,type:`string`},{name:`value`,description:`Additional input (limit/message)`,type:`string`,captureRemaining:!0}],argsMenu:`auto`}),y({key:`acp`,nativeName:`acp`,description:`Manage ACP sessions and runtime options.`,textAlias:`/acp`,category:`management`,args:[{name:`action`,description:`Action to run`,type:`string`,preferAutocomplete:!0,choices:[`spawn`,`cancel`,`steer`,`close`,`sessions`,`status`,`set-mode`,`set`,`cwd`,`permissions`,`timeout`,`model`,`reset-options`,`doctor`,`install`,`help`]},{name:`value`,description:`Action arguments`,type:`string`,captureRemaining:!0}],argsMenu:`auto`}),y({key:`focus`,nativeName:`focus`,description:`Bind this thread (Discord) or topic/conversation (Telegram) to a session target.`,textAlias:`/focus`,category:`management`,args:[{name:`target`,description:`Subagent label/index or session key/id/label`,type:`string`,captureRemaining:!0}]}),y({key:`unfocus`,nativeName:`unfocus`,description:`Remove the current thread (Discord) or topic/conversation (Telegram) binding.`,textAlias:`/unfocus`,category:`management`}),y({key:`agents`,nativeName:`agents`,description:`List thread-bound agents for this session.`,textAlias:`/agents`,category:`management`}),y({key:`kill`,nativeName:`kill`,description:`Kill a running subagent (or all).`,textAlias:`/kill`,category:`management`,args:[{name:`target`,description:`Label, run id, index, or all`,type:`string`}],argsMenu:`auto`}),y({key:`steer`,nativeName:`steer`,description:`Send guidance to a running subagent.`,textAlias:`/steer`,category:`management`,args:[{name:`target`,description:`Label, run id, or index`,type:`string`},{name:`message`,description:`Steering message`,type:`string`,captureRemaining:!0}]}),y({key:`config`,nativeName:`config`,description:`Show or set config values.`,textAlias:`/config`,category:`management`,args:[{name:`action`,description:`show | get | set | unset`,type:`string`,choices:[`show`,`get`,`set`,`unset`]},{name:`path`,description:`Config path`,type:`string`},{name:`value`,description:`Value for set`,type:`string`,captureRemaining:!0}],argsParsing:`none`,formatArgs:v.config}),y({key:`debug`,nativeName:`debug`,description:`Set runtime debug overrides.`,textAlias:`/debug`,category:`management`,args:[{name:`action`,description:`show | reset | set | unset`,type:`string`,choices:[`show`,`reset`,`set`,`unset`]},{name:`path`,description:`Debug path`,type:`string`},{name:`value`,description:`Value for set`,type:`string`,captureRemaining:!0}],argsParsing:`none`,formatArgs:v.debug}),y({key:`usage`,nativeName:`usage`,description:`Usage footer or cost summary.`,textAlias:`/usage`,category:`options`,args:[{name:`mode`,description:`off, tokens, full, or cost`,type:`string`,choices:[`off`,`tokens`,`full`,`cost`]}],argsMenu:`auto`}),y({key:`stop`,nativeName:`stop`,description:`Stop the current run.`,textAlias:`/stop`,category:`session`}),y({key:`restart`,nativeName:`restart`,description:`Restart OpenClaw.`,textAlias:`/restart`,category:`tools`}),y({key:`activation`,nativeName:`activation`,description:`Set group activation mode.`,textAlias:`/activation`,category:`management`,args:[{name:`mode`,description:`mention or always`,type:`string`,choices:[`mention`,`always`]}],argsMenu:`auto`}),y({key:`send`,nativeName:`send`,description:`Set send policy.`,textAlias:`/send`,category:`management`,args:[{name:`mode`,description:`on, off, or inherit`,type:`string`,choices:[`on`,`off`,`inherit`]}],argsMenu:`auto`}),y({key:`reset`,nativeName:`reset`,description:`Reset the current session.`,textAlias:`/reset`,acceptsArgs:!0,category:`session`}),y({key:`new`,nativeName:`new`,description:`Start a new session.`,textAlias:`/new`,acceptsArgs:!0,category:`session`}),y({key:`compact`,nativeName:`compact`,description:`Compact the session context.`,textAlias:`/compact`,category:`session`,args:[{name:`instructions`,description:`Extra compaction instructions`,type:`string`,captureRemaining:!0}]}),y({key:`think`,nativeName:`think`,description:`Set thinking level.`,textAlias:`/think`,category:`options`,args:[{name:`level`,description:`off, minimal, low, medium, high, xhigh`,type:`string`,choices:({provider:t,model:n})=>e.l(t,n)}],argsMenu:`auto`}),y({key:`verbose`,nativeName:`verbose`,description:`Toggle verbose mode.`,textAlias:`/verbose`,category:`options`,args:[{name:`mode`,description:`on or off`,type:`string`,choices:[`on`,`off`]}],argsMenu:`auto`}),y({key:`reasoning`,nativeName:`reasoning`,description:`Toggle reasoning visibility.`,textAlias:`/reasoning`,category:`options`,args:[{name:`mode`,description:`on, off, or stream`,type:`string`,choices:[`on`,`off`,`stream`]}],argsMenu:`auto`}),y({key:`elevated`,nativeName:`elevated`,description:`Toggle elevated mode.`,textAlias:`/elevated`,category:`options`,args:[{name:`mode`,description:`on, off, ask, or full`,type:`string`,choices:[`on`,`off`,`ask`,`full`]}],argsMenu:`auto`}),y({key:`exec`,nativeName:`exec`,description:`Set exec defaults for this session.`,textAlias:`/exec`,category:`options`,args:[{name:`host`,description:`sandbox, gateway, or node`,type:`string`,choices:[`sandbox`,`gateway`,`node`]},{name:`security`,description:`deny, allowlist, or full`,type:`string`,choices:[`deny`,`allowlist`,`full`]},{name:`ask`,description:`off, on-miss, or always`,type:`string`,choices:[`off`,`on-miss`,`always`]},{name:`node`,description:`Node id or name`,type:`string`}],argsParsing:`none`,formatArgs:v.exec}),y({key:`model`,nativeName:`model`,description:`Show or set the model.`,textAlias:`/model`,category:`options`,args:[{name:`model`,description:`Model id (provider/model or id)`,type:`string`}]}),y({key:`models`,nativeName:`models`,description:`List model providers or provider models.`,textAlias:`/models`,argsParsing:`none`,acceptsArgs:!0,category:`options`}),y({key:`queue`,nativeName:`queue`,description:`Adjust queue settings.`,textAlias:`/queue`,category:`options`,args:[{name:`mode`,description:`queue mode`,type:`string`,choices:[`steer`,`interrupt`,`followup`,`collect`,`steer-backlog`]},{name:`debounce`,description:`debounce duration (e.g. 500ms, 2s)`,type:`string`},{name:`cap`,description:`queue cap`,type:`number`},{name:`drop`,description:`drop policy`,type:`string`,choices:[`old`,`new`,`summarize`]}],argsParsing:`none`,formatArgs:v.queue}),y({key:`bash`,description:`Run host shell commands (host-only).`,textAlias:`/bash`,scope:`text`,category:`tools`,args:[{name:`command`,description:`Shell command`,type:`string`,captureRemaining:!0}]}),...e.Y().filter(e=>e.capabilities.nativeCommands).map(e=>me(e))];return b(t,`whoami`,`/id`),b(t,`think`,`/thinking`,`/t`),b(t,`verbose`,`/v`),b(t,`reasoning`,`/reason`),b(t,`elevated`,`/elev`),b(t,`steer`,`/tell`),he(t),t}function ve(){let t=e.tt();if(x&&t===ge)return x;let n=_e();return x=n,ge=t,n}function ye(e){return!e||e.length===0?[]:e.map(e=>({key:`skill:${e.skillName}`,nativeName:e.name,description:e.description,textAliases:[`/${e.name}`],acceptsArgs:!0,argsParsing:`none`,scope:`both`}))}function be(e){let t=ve();return e?.skillCommands?.length?[...t,...ye(e.skillCommands)]:[...t]}function xe(e=[]){let t=new Set;for(let e of be()){e.nativeName&&t.add(e.nativeName.toLowerCase());for(let n of e.textAliases){let e=n.trim();e.startsWith(`/`)&&t.add(e.slice(1).toLowerCase())}}for(let n of e){let e=n.trim().toLowerCase();e&&t.add(e)}return t}function Se(e){let t=new Set,n=[];for(let r of e){let e=r.skillName.trim().toLowerCase();e&&t.has(e)||(e&&t.add(e),n.push(r))}return n}function Ce(n){let r=(e,t)=>{if(!(e===void 0||t===void 0))return e.length===0?Array.from(new Set(t)):t.length===0?Array.from(new Set(e)):Array.from(new Set([...e,...t]))},i=n.agentIds??e.mt(n.cfg),a=xe(),o=[],s=new Map;for(let a of i){let i=e._t(n.cfg,a);if(!t.default.existsSync(i)){e.Dt(`Skipping agent "${a}": workspace does not exist: ${i}`);continue}let o;try{o=t.default.realpathSync(i)}catch{e.Dt(`Skipping agent "${a}": cannot resolve workspace: ${i}`);continue}let c=e.gt(n.cfg,a),l=s.get(o);if(l){l.skillFilter=r(l.skillFilter,c);continue}s.set(o,{workspaceDir:i,skillFilter:c})}for(let{workspaceDir:t,skillFilter:r}of s.values()){let i=e.q(t,{config:n.cfg,skillFilter:r,eligibility:{remote:le()},reservedNames:a});for(let e of i)a.add(e.name.toLowerCase()),o.push(e)}return Se(o)}function we(e){let{useAccessGroups:t,authorizers:n}=e,r=e.modeWhenAccessGroupsOff??`allow`;return t?n.some(e=>e.configured&&e.allowed):r===`allow`?!0:r===`deny`?!1:n.some(e=>e.configured)?n.some(e=>e.configured&&e.allowed):!0}function Te(e){let t=we({useAccessGroups:e.useAccessGroups,authorizers:e.authorizers,modeWhenAccessGroupsOff:e.modeWhenAccessGroupsOff});return{commandAuthorized:t,shouldBlock:e.allowTextCommands&&e.hasControlCommand&&!t}}function Ee(e){let t=e.target?` target=${e.target}`:``;e.log(`${e.channel}: drop ${e.reason}${t}`)}function De(e){let t=e.target?` target=${e.target}`:``,n=e.action?` action=${e.action}`:``;e.log(`${e.channel} typing${n} failed${t}: ${String(e.error)}`)}function S(e){return typeof e==`number`&&Number.isFinite(e)&&e>0}function Oe(e){return e.explicitPresent&&S(e.explicitValue)?e.explicitValue:S(e.implicitValue)?e.implicitValue:S(e.explicitValue)?e.explicitValue:void 0}function C(e){if(!e||typeof e!=`object`)return``;let t=e.id;return typeof t==`string`?t.trim():``}function ke(e,t){let n=Array.isArray(e.models)?e.models:[],r=Array.isArray(t.models)?t.models:[];if(n.length===0)return{...e,...t};let i=new Map(n.map(e=>[C(e),e]).filter(([e])=>!!e)),a=new Set,o=r.map(e=>{let t=C(e);if(!t)return e;a.add(t);let n=i.get(t);if(!n)return e;let r=Oe({explicitPresent:`contextWindow`in e,explicitValue:e.contextWindow,implicitValue:n.contextWindow}),o=Oe({explicitPresent:`maxTokens`in e,explicitValue:e.maxTokens,implicitValue:n.maxTokens});return{...e,input:n.input,reasoning:`reasoning`in e?e.reasoning:n.reasoning,...r===void 0?{}:{contextWindow:r},...o===void 0?{}:{maxTokens:o}}});for(let e of n){let t=C(e);!t||a.has(t)||(a.add(t),o.push(e))}return{...e,...t,models:o}}function Ae(e){let t=e.implicit?{...e.implicit}:{};for(let[n,r]of Object.entries(e.explicit??{})){let e=n.trim();if(!e)continue;let i=t[e];t[e]=i?ke(i,r):r}return t}function je(e){if(typeof e?.api==`string`)return e.api.trim()||void 0}function Me(e){if(!Array.isArray(e?.models))return;let t=e.models.flatMap(e=>{if(!e||typeof e!=`object`)return[];let t=e.api;return typeof t==`string`&&t.trim()?[t.trim()]:[]}).toSorted();return t.length>0?JSON.stringify(t):void 0}function Ne(e){return je(e)??Me(e)}function Pe(t){let{providerKey:n,existing:r,nextEntry:i,secretRefManagedProviders:a}=t,o=typeof i.apiKey==`string`?i.apiKey:``;return o&&e.c(o)?!1:!a.has(n)&&typeof r.apiKey==`string`&&r.apiKey.length>0&&!e.c(r.apiKey,{includeEnvVarName:!1})}function Fe(e){let{providerKey:t,existing:n,nextEntry:r,explicitBaseUrlProviders:i}=e;if(i.has(t)||typeof n.baseUrl!=`string`||n.baseUrl.length===0)return!1;let a=Ne(n),o=Ne(r);return!a||!o||a===o}function Ie(e){let{nextProviders:t,existingProviders:n,secretRefManagedProviders:r,explicitBaseUrlProviders:i}=e,a={};for(let[e,t]of Object.entries(n))a[e]=t;for(let[e,o]of Object.entries(t)){let t=n[e];if(!t){a[e]=o;continue}let s={};Pe({providerKey:e,existing:t,nextEntry:o,secretRefManagedProviders:r})&&(s.apiKey=t.apiKey),Fe({providerKey:e,existing:t,nextEntry:o,explicitBaseUrlProviders:i})&&(s.baseUrl=t.baseUrl),a[e]={...o,...s}}return a}async function Le(t){let{cfg:n,agentDir:r,env:i}=t,a=n.models?.providers??{};return Ae({implicit:await e.s({agentDir:r,config:n,env:i,explicitProviders:a}),explicit:a})}function Re(e){return new Set(Object.entries(e?.providers??{}).map(([e,t])=>[e.trim(),t]).filter(([e,t])=>!!e&&typeof t?.baseUrl==`string`&&t.baseUrl.trim()).map(([e])=>e))}async function ze(t){if(t.mode!==`merge`)return t.providers;let n=t.existingParsed;if(!e.yt(n)||!e.yt(n.providers))return t.providers;let r=n.providers;return Ie({nextProviders:t.providers,existingProviders:r,secretRefManagedProviders:t.secretRefManagedProviders,explicitBaseUrlProviders:t.explicitBaseUrlProviders})}async function Be(t){let{cfg:n,agentDir:r,env:i}=t,a=await Le({cfg:n,agentDir:r,env:i});if(Object.keys(a).length===0)return{action:`skip`};let o=n.models?.mode??`merge`,s=new Set,c=e.o({providers:a,agentDir:r,env:i,secretDefaults:n.secrets?.defaults,secretRefManagedProviders:s})??a,l=await ze({mode:o,existingParsed:t.existingParsed,providers:c,secretRefManagedProviders:s,explicitBaseUrlProviders:Re(n.models)}),u=`${JSON.stringify({providers:l},null,2)}\n`;return t.existingRaw===u?{action:`noop`}:{action:`write`,contents:u}}const w=new Map;async function Ve(e){try{let t=await i.default.readFile(e,`utf8`);return{raw:t,parsed:JSON.parse(t)}}catch{return{raw:``,parsed:null}}}async function T(e){await i.default.chmod(e,384).catch(()=>{})}async function He(e,t){let n=`${e}.${process.pid}.${Date.now()}.tmp`;await i.default.writeFile(n,t,{mode:384}),await i.default.rename(n,e)}function Ue(t){let n=e.F();return t?n?e.L(t):t:n??e.I()}async function We(e,t){let n=w.get(e)??Promise.resolve(),r=()=>{},i=new Promise(e=>{r=e}),a=n.then(()=>i);w.set(e,a);try{return await n,await t()}finally{r(),w.get(e)===a&&w.delete(e)}}async function Ge(t,r){let a=Ue(t),o=r?.trim()?r.trim():e.G(),s=n.default.join(o,`models.json`);return await We(s,async()=>{let t=e.U(a),n=await Ve(s),r=await Be({cfg:a,agentDir:o,env:t,existingRaw:n.raw,existingParsed:n.parsed});return r.action===`skip`?{agentDir:o,wrote:!1}:r.action===`noop`?(await T(s),{agentDir:o,wrote:!1}):(await i.default.mkdir(o,{recursive:!0,mode:448}),await He(s,r.contents),await T(s),{agentDir:o,wrote:!0})})}const Ke=e.Et(`model-catalog`);let E=null,D=!1,qe=()=>Promise.resolve().then(()=>require(`./pi-model-discovery-5wc5qlmB.cjs`));const Je=`openai-codex`,O=`openai`,Ye=new Set([`kilocode`]),Xe=[{provider:O,id:`gpt-5.4`,templateIds:[`gpt-5.2`]},{provider:O,id:`gpt-5.4-pro`,templateIds:[`gpt-5.2-pro`,`gpt-5.2`]},{provider:Je,id:`gpt-5.4`,templateIds:[`gpt-5.3-codex`,`gpt-5.2-codex`]},{provider:Je,id:`gpt-5.3-codex-spark`,templateIds:[`gpt-5.3-codex`]}];function Ze(e){let t=(t,n)=>e.find(e=>e.provider.toLowerCase()===t.toLowerCase()&&e.id.toLowerCase()===n.toLowerCase());for(let n of Xe){if(t(n.provider,n.id))continue;let r=n.templateIds.map(e=>t(n.provider,e)).find(e=>e!==void 0);r&&e.push({...r,id:n.id,name:n.id})}}function Qe(e){if(!Array.isArray(e))return;let t=e.filter(e=>e===`text`||e===`image`||e===`document`);return t.length>0?t:void 0}function $e(e){let t=e.models?.providers;if(!t||typeof t!=`object`)return[];let n=[];for(let[e,r]of Object.entries(t)){let t=e.toLowerCase().trim();if(!Ye.has(t)||!r||typeof r!=`object`)continue;let i=r.models;if(Array.isArray(i))for(let e of i){if(!e||typeof e!=`object`)continue;let r=e.id;if(typeof r!=`string`)continue;let i=r.trim();if(!i)continue;let a=e.name,o=(typeof a==`string`?a:i).trim()||i,s=e.contextWindow,c=typeof s==`number`&&s>0?s:void 0,l=e.reasoning,u=typeof l==`boolean`?l:void 0,d=Qe(e.input);n.push({id:i,name:o,provider:t,contextWindow:c,reasoning:u,input:d})}}return n}function et(e){let t=$e(e.config);if(t.length===0)return;let n=new Set(e.models.map(e=>`${e.provider.toLowerCase().trim()}::${e.id.toLowerCase().trim()}`));for(let r of t){let t=`${r.provider.toLowerCase().trim()}::${r.id.toLowerCase().trim()}`;n.has(t)||(e.models.push(r),n.add(t))}}async function tt(t){return t?.useCache===!1&&(E=null),E||(E=(async()=>{let n=[],r=e=>e.sort((e,t)=>{let n=e.provider.localeCompare(t.provider);return n===0?e.name.localeCompare(t.name):n});try{let i=t?.config??e.I();await Ge(i);let a=await qe(),o=e.G(),{join:s}=await import(`node:path`),c=a.discoverAuthStorage(o),l=new a.ModelRegistry(c,s(o,`models.json`)),u=Array.isArray(l)?l:l.getAll();for(let e of u){let t=String(e?.id??``).trim();if(!t)continue;let r=String(e?.provider??``).trim();if(!r)continue;let i=String(e?.name??t).trim()||t,a=typeof e?.contextWindow==`number`&&e.contextWindow>0?e.contextWindow:void 0,o=typeof e?.reasoning==`boolean`?e.reasoning:void 0,s=Array.isArray(e?.input)?e.input:void 0;n.push({id:t,name:i,provider:r,contextWindow:a,reasoning:o,input:s})}return et({config:i,models:n}),Ze(n),n.length===0&&(E=null),r(n)}catch(e){return D||(D=!0,Ke.warn(`Failed to load model catalog: ${String(e)}`)),E=null,n.length>0?r(n):[]}})(),E)}async function nt(t,n){let r=e.i({cfg:t,agentId:n}),i=e.t({cfg:t,catalog:await tt({config:t}),defaultProvider:r.provider,defaultModel:r.model}),a=e.n({cfg:t,defaultProvider:r.provider}),o=new Map,s=(t,n)=>{let r=e.r(t),i=o.get(r)??new Set;i.add(n),o.set(r,i)},c=t=>{let n=t?.trim();if(!n)return;let i=e.a({raw:n,defaultProvider:r.provider,aliasIndex:a});i&&s(i.ref.provider,i.ref.model)},l=()=>{let e=t.agents?.defaults?.model;if(typeof e==`string`)c(e);else if(e&&typeof e==`object`){c(e.primary);for(let t of e.fallbacks??[])c(t)}let n=t.agents?.defaults?.imageModel;if(typeof n==`string`)c(n);else if(n&&typeof n==`object`){c(n.primary);for(let e of n.fallbacks??[])c(e)}};for(let e of i.allowedCatalog)s(e.provider,e.id);for(let e of Object.keys(t.agents?.defaults?.models??{}))c(e);return s(r.provider,r.model),l(),{byProvider:o,providers:[...o.keys()].toSorted(),resolvedDefault:r}}function rt(e,t){let n=e.initialMs*e.factor**Math.max(t-1,0),r=n*e.jitter*Math.random();return Math.min(e.maxMs,Math.round(n+r))}const it={initialMs:1e3,maxMs:6e4,factor:2,jitter:0};function at(e){for(let t of e.models){if(!t?.id)continue;let n=typeof t.contextWindow==`number`?Math.trunc(t.contextWindow):void 0;if(!n||n<=0)continue;let r=e.cache.get(t.id);(r===void 0||n<r)&&e.cache.set(t.id,n)}}function k(e){let t=e.modelsConfig?.providers;if(!(!t||typeof t!=`object`)){for(let n of Object.values(t))if(Array.isArray(n?.models))for(let t of n.models){let n=typeof t?.id==`string`?t.id:void 0,r=typeof t?.contextWindow==`number`?t.contextWindow:void 0;!n||!r||r<=0||e.cache.set(n,r)}}}const A=new Map;let j=null,M,N=0,P=0;function ot(t){let n=t.slice(2),r=[];for(let t=0;t<n.length;t+=1){let i=n[t];if(!i||i===`--`)break;let a=e.At(n,t);if(a>0){t+=a-1;continue}if(!i.startsWith(`-`)&&(r.push(i),r.length>=2))break}return r}function st(e=process.argv){let[t,n]=ot(e);return t===`config`&&n===`validate`}function ct(){if(M)return M;if(!(Date.now()<P))try{let t=e.I();return k({cache:A,modelsConfig:t.models}),M=t,N=0,P=0,t}catch{N+=1;let e=rt(it,N);P=Date.now()+e;return}}function lt(){if(j)return j;let t=ct();return t?(j=(async()=>{try{await Ge(t)}catch{}try{let{discoverAuthStorage:t,discoverModels:n}=await Promise.resolve().then(()=>require(`./pi-model-discovery-5wc5qlmB.cjs`)),r=e.G(),i=n(t(r),r);at({cache:A,models:typeof i.getAvailable==`function`?i.getAvailable():i.getAll()})}catch{}k({cache:A,modelsConfig:t.models})})().catch(()=>{}),j):Promise.resolve()}st()||lt();function ut(e){let t=e?.modelOverride?.trim();return t?{provider:e?.providerOverride?.trim()||void 0,model:t}:null}function dt(t){let n=t.parentSessionKey?.trim();if(n&&n!==t.sessionKey)return n;let r=e.Tt(t.sessionKey);return r&&r!==t.sessionKey?r:null}function ft(e){let t=ut(e.sessionEntry);if(t)return{...t,source:`session`};let n=dt({sessionKey:e.sessionKey,parentSessionKey:e.parentSessionKey});if(!n||!e.sessionStore)return null;let r=e.sessionStore[n],i=ut(r);return i?{...i,source:`parent`}:null}const pt=s.z.union([s.z.string(),s.z.number()]);s.z.array(pt).optional();function mt(e){let t=e;return typeof t.toJSONSchema==`function`?{schema:t.toJSONSchema({target:`draft-07`,unrepresentable:`any`})}:{schema:{type:`object`,additionalProperties:!0}}}const F=1024*1024;function ht(t){let n=e.wt(t.accountId),r=t.resolveChannelLimitMb({cfg:t.cfg,accountId:n});if(r)return r*F;if(t.cfg.agents?.defaults?.mediaMaxMb)return t.cfg.agents.defaults.mediaMaxMb*F}const I={openai:[`OPENAI_API_KEY`],anthropic:[`ANTHROPIC_API_KEY`],google:[`GEMINI_API_KEY`],minimax:[`MINIMAX_API_KEY`],"minimax-cn":[`MINIMAX_API_KEY`],moonshot:[`MOONSHOT_API_KEY`],"kimi-coding":[`KIMI_API_KEY`,`KIMICODE_API_KEY`],synthetic:[`SYNTHETIC_API_KEY`],venice:[`VENICE_API_KEY`],zai:[`ZAI_API_KEY`,`Z_AI_API_KEY`],xiaomi:[`XIAOMI_API_KEY`],openrouter:[`OPENROUTER_API_KEY`],"cloudflare-ai-gateway":[`CLOUDFLARE_AI_GATEWAY_API_KEY`],litellm:[`LITELLM_API_KEY`],"vercel-ai-gateway":[`AI_GATEWAY_API_KEY`],opencode:[`OPENCODE_API_KEY`,`OPENCODE_ZEN_API_KEY`],"opencode-go":[`OPENCODE_API_KEY`,`OPENCODE_ZEN_API_KEY`],together:[`TOGETHER_API_KEY`],huggingface:[`HUGGINGFACE_HUB_TOKEN`,`HF_TOKEN`],qianfan:[`QIANFAN_API_KEY`],xai:[`XAI_API_KEY`],mistral:[`MISTRAL_API_KEY`],kilocode:[`KILOCODE_API_KEY`],modelstudio:[`MODELSTUDIO_API_KEY`],volcengine:[`VOLCANO_ENGINE_API_KEY`],byteplus:[`BYTEPLUS_API_KEY`]},gt=[`VOYAGE_API_KEY`,`GROQ_API_KEY`,`DEEPGRAM_API_KEY`,`CEREBRAS_API_KEY`,`NVIDIA_API_KEY`,`COPILOT_GITHUB_TOKEN`,`GH_TOKEN`,`GITHUB_TOKEN`,`ANTHROPIC_OAUTH_TOKEN`,`CHUTES_OAUTH_TOKEN`,`CHUTES_API_KEY`,`QWEN_OAUTH_TOKEN`,`QWEN_PORTAL_API_KEY`,`MINIMAX_OAUTH_TOKEN`,`OLLAMA_API_KEY`,`VLLM_API_KEY`],_t=[...new Set(Object.values(I).flatMap(e=>e))];[...new Set([..._t,...gt])];function vt(e){return e instanceof Error&&typeof e.message==`string`&&e.message.trim()?e.message:String(e)}function yt(e){return I[e]?.find(e=>e.trim().length>0)}function bt(t){return`/providers/${e.N(t)}/apiKey`}async function xt(t){let n=t.preferredEnvVar??yt(t.provider)??``,r=bt(t.provider),i=`env`;for(;;){let a=await t.prompter.select({message:t.copy?.sourceMessage??`Where is this API key stored?`,initialValue:i,options:[{value:`env`,label:`Environment variable`,hint:`Reference a variable from your runtime environment`},{value:`provider`,label:`Configured secret provider`,hint:`Use a configured file or exec secret provider`}]})===`provider`?`provider`:`env`;if(i=a,a===`env`){let r=await t.prompter.text({message:t.copy?.envVarMessage??`Environment variable name`,initialValue:n||void 0,placeholder:t.copy?.envVarPlaceholder??`OPENAI_API_KEY`,validate:n=>{let r=n.trim();if(!e.dt(r))return t.copy?.envVarFormatError??`Use an env var name like "OPENAI_API_KEY" (uppercase letters, numbers, underscores).`;if(!process.env[r]?.trim())return t.copy?.envVarMissingError?.(r)??`Environment variable "${r}" is missing or empty in this session.`}}),i=String(r??``).trim(),a=i&&e.dt(i)?i:n;if(!a)throw Error(`No valid environment variable name provided for provider "${t.provider}".`);let o={source:`env`,provider:e.et(t.config,`env`,{preferFirstProviderForSource:!0}),id:a},s=await e.M(o,{config:t.config,env:process.env});return await t.prompter.note(t.copy?.envValidatedMessage?.(a)??`Validated environment variable ${a}. OpenClaw will store a reference, not the key value.`,`Reference validated`),{ref:o,resolvedValue:s}}let o=Object.entries(t.config.secrets?.providers??{}).filter(([,e])=>e?.source===`file`||e?.source===`exec`);if(o.length===0){await t.prompter.note(t.copy?.noProvidersMessage??`No file/exec secret providers are configured yet. Add one under secrets.providers, or select Environment variable.`,`No providers configured`);continue}let s=e.et(t.config,`file`,{preferFirstProviderForSource:!0}),c=await t.prompter.select({message:`Select secret provider`,initialValue:o.find(([e])=>e===s)?.[0]??o[0]?.[0],options:o.map(([e,t])=>({value:e,label:e,hint:t?.source===`exec`?`Exec provider`:`File provider`}))}),l=t.config.secrets?.providers?.[c];if(!l||l.source!==`file`&&l.source!==`exec`){await t.prompter.note(`Provider "${c}" is not a file/exec provider.`,`Invalid provider`);continue}let u=l.source===`file`?`Secret id (JSON pointer for json mode, or 'value' for singleValue mode)`:`Secret id for the exec provider`,d=l.source===`file`?l.mode===`singleValue`?`value`:r:`${t.provider}/apiKey`,f=await t.prompter.text({message:u,initialValue:d,placeholder:l.source===`file`?`/providers/openai/apiKey`:`openai/api-key`,validate:t=>{let n=t.trim();if(!n)return`Secret id cannot be empty.`;if(l.source===`file`&&l.mode!==`singleValue`&&!e.$(n))return`Use an absolute JSON pointer like "/providers/openai/apiKey".`;if(l.source===`file`&&l.mode===`singleValue`&&n!==`value`)return`singleValue mode expects id "value".`;if(l.source===`exec`&&!e.Q(n))return e.Z()}}),p=String(f??``).trim()||d,m={source:l.source,provider:c,id:p};try{let n=await e.M(m,{config:t.config,env:process.env});return await t.prompter.note(t.copy?.providerValidatedMessage?.(c,p,l.source)??`Validated ${l.source} reference ${c}:${p}. OpenClaw will store a reference, not the key value.`,`Reference validated`),{ref:m,resolvedValue:n}}catch(e){await t.prompter.note([`Could not validate provider reference ${c}:${p}.`,vt(e),`Check your provider configuration and try again.`].join(`
 `),`Reference check failed`)}}}async function St(e){return e.explicitMode?e.explicitMode:typeof e.prompter.select==`function`&&await e.prompter.select({message:e.copy?.modeMessage??`How do you want to provide this API key?`,initialValue:`plaintext`,options:[{value:`plaintext`,label:e.copy?.plaintextLabel??`Paste API key now`,hint:e.copy?.plaintextHint??`Stores the key directly in OpenClaw config`},{value:`ref`,label:e.copy?.refLabel??`Use external secret provider`,hint:e.copy?.refHint??`Stores a reference to env or configured external secret providers`}]})===`ref`?`ref`:`plaintext`}async function Ct(t){let n=t.listAccountIds(t.cfg),r=t.currentId?.trim()||t.defaultAccountId||`default`,i=await t.prompter.select({message:`${t.label} account`,options:[...n.map(e=>({value:e,label:e===`default`?`default (primary)`:e})),{value:`__new__`,label:`Add a new account`}],initialValue:r});if(i!==`__new__`)return e.wt(i);let a=await t.prompter.text({message:`New ${t.label} account id`,validate:e=>e?.trim()?void 0:`Required`}),o=e.wt(String(a));return String(a).trim()!==o&&await t.prompter.note(`Normalized account id to "${o}".`,`${t.label} account`),o}function wt(e,t){let n=e.channels?.[t];return!!(n?.accounts&&Object.keys(n.accounts).length>0)}function Tt(e){return e.alwaysUseAccounts||e.accountId!==`default`?!0:wt(e.cfg,e.channelKey)}function Et(t){let n=t.name?.trim();if(!n)return t.cfg;let r=e.wt(t.accountId),i=t.cfg.channels?.[t.channelKey],a=typeof i==`object`&&i?i:void 0;if(!Tt({cfg:t.cfg,channelKey:t.channelKey,accountId:r,alwaysUseAccounts:t.alwaysUseAccounts})&&r===`default`){let e=a??{};return{...t.cfg,channels:{...t.cfg.channels,[t.channelKey]:{...e,name:n}}}}let o=a?.accounts??{},s=o[r]??{},c=r===`default`?(({name:e,...t})=>t)(a??{}):a??{};return{...t.cfg,channels:{...t.cfg.channels,[t.channelKey]:{...c,accounts:{...o,[r]:{...s,name:n}}}}}}function Dt(t){if(t.alwaysUseAccounts)return t.cfg;let n=t.cfg.channels?.[t.channelKey],r=n?.name?.trim();if(!r)return t.cfg;let i={...n?.accounts},a=i.default??{};a.name||(i[e.Ct]={...a,name:r});let{name:o,...s}=n??{};return{...t.cfg,channels:{...t.cfg.channels,[t.channelKey]:{...s,accounts:i}}}}function Ot(e){return kt({cfg:e.cfg,channelKey:e.channelKey,accountId:e.accountId,patch:e.patch})}function kt(t){let n=e.wt(t.accountId),r=t.cfg.channels?.[t.channelKey],i=typeof r==`object`&&r?r:void 0,a=t.ensureChannelEnabled??!0,o=t.ensureAccountEnabled??a,s=t.patch,c=t.accountPatch??s;if(n===`default`)return{...t.cfg,channels:{...t.cfg.channels,[t.channelKey]:{...i,...a?{enabled:!0}:{},...s}}};let l=i?.accounts??{},u=l[n]??{};return{...t.cfg,channels:{...t.cfg.channels,[t.channelKey]:{...i,...a?{enabled:!0}:{},accounts:{...l,[n]:{...u,...o?{enabled:typeof u.enabled==`boolean`?u.enabled:!0}:{},...c}}}}}}const L=async e=>await Ct(e);async function At(t){let n=t.accountOverride?.trim(),r=n?e.wt(n):t.defaultAccountId;return t.shouldPromptAccountIds&&!n&&(r=await L({cfg:t.cfg,prompter:t.prompter,label:t.label,currentId:r,listAccountIds:t.listAccountIds,defaultAccountId:t.defaultAccountId})),r}function R(e){return{accountConfigured:e.accountConfigured,hasConfigToken:e.hasConfigToken,canUseEnv:e.allowEnv&&!!e.envValue?.trim()&&!e.hasConfigToken}}async function jt(e){let t=async()=>String(await e.prompter.text({message:e.inputPrompt,validate:e=>e?.trim()?void 0:`Required`})).trim();return e.canUseEnv?await e.prompter.confirm({message:e.envPrompt,initialValue:!0})?{useEnv:!0,token:null}:{useEnv:!1,token:await t()}:e.hasConfigToken&&e.accountConfigured&&await e.prompter.confirm({message:e.keepPrompt,initialValue:!0})?{useEnv:!1,token:null}:{useEnv:!1,token:await t()}}async function Mt(e){let t=R({accountConfigured:e.accountConfigured,hasConfigToken:e.hasConfigToken,allowEnv:e.allowEnv,envValue:e.envValue});!t.accountConfigured&&e.onMissingConfigured&&await e.onMissingConfigured();let n=await z({cfg:e.cfg,prompter:e.prompter,providerHint:e.providerHint,credentialLabel:e.credentialLabel,secretInputMode:e.secretInputMode,accountConfigured:t.accountConfigured,canUseEnv:t.canUseEnv,hasConfigToken:t.hasConfigToken,envPrompt:e.envPrompt,keepPrompt:e.keepPrompt,inputPrompt:e.inputPrompt,preferredEnvVar:e.preferredEnvVar});return n.action===`use-env`?{cfg:e.applyUseEnv?await e.applyUseEnv(e.cfg):e.cfg,action:n.action,resolvedValue:e.envValue?.trim()||void 0}:n.action===`set`?{cfg:e.applySet?await e.applySet(e.cfg,n.value,n.resolvedValue):e.cfg,action:n.action,resolvedValue:n.resolvedValue}:{cfg:e.cfg,action:n.action}}async function z(e){if(await St({prompter:e.prompter,explicitMode:e.secretInputMode,copy:{modeMessage:`How do you want to provide this ${e.credentialLabel}?`,plaintextLabel:`Enter ${e.credentialLabel}`,plaintextHint:`Stores the credential directly in OpenClaw config`,refLabel:`Use external secret provider`,refHint:`Stores a reference to env or configured external secret providers`}})===`plaintext`){let t=await jt({prompter:e.prompter,accountConfigured:e.accountConfigured,canUseEnv:e.canUseEnv,hasConfigToken:e.hasConfigToken,envPrompt:e.envPrompt,keepPrompt:e.keepPrompt,inputPrompt:e.inputPrompt});return t.useEnv?{action:`use-env`}:t.token?{action:`set`,value:t.token,resolvedValue:t.token}:{action:`keep`}}if(e.hasConfigToken&&e.accountConfigured&&await e.prompter.confirm({message:e.keepPrompt,initialValue:!0}))return{action:`keep`};let t=await xt({provider:e.providerHint,config:e.cfg,prompter:e.prompter,preferredEnvVar:e.preferredEnvVar,copy:{sourceMessage:`Where is this ${e.credentialLabel} stored?`,envVarPlaceholder:e.preferredEnvVar??`OPENCLAW_SECRET`,envVarFormatError:`Use an env var name like "OPENCLAW_SECRET" (uppercase letters, numbers, underscores).`,noProvidersMessage:`No file/exec secret providers are configured yet. Add one under secrets.providers, or select Environment variable.`}});return{action:`set`,value:t.ref,resolvedValue:t.resolvedValue}}function Nt(e){return t=>{e.setStatus({accountId:e.accountId,...t})}}function Pt(e){let{account:t,runtime:n,probe:r}=e;return{accountId:t.accountId,name:t.name,enabled:t.enabled,configured:t.configured,...It({runtime:n,probe:r}),lastInboundAt:n?.lastInboundAt??null,lastOutboundAt:n?.lastOutboundAt??null}}function Ft(e){let{accountId:t,name:n,enabled:r,configured:i,runtime:a,probe:o}=e;return Pt({account:{accountId:t,name:n,enabled:r,configured:i},runtime:a,probe:o})}function It(e){let{runtime:t,probe:n}=e;return{running:t?.running??!1,lastStartAt:t?.lastStartAt??null,lastStopAt:t?.lastStopAt??null,lastError:t?.lastError??null,probe:n}}function B(t,n){return e.ht(t,n)?.identity}function V(e,t){let n=B(e,t)?.name?.trim();if(n)return`[${n}]`}function Lt(e,t){return B(e,t)?.name?.trim()||void 0}function Rt(e,t,n){let r=n?.configured??e.messages?.messagePrefix;return r===void 0?n?.hasAllowFrom===!0?``:V(e,t)??n?.fallback??`[openclaw]`:r}function H(e,t){let n=e.channels?.[t];return typeof n==`object`&&n?n:void 0}function zt(e,t,n){if(n?.channel&&n?.accountId){let r=(H(e,n.channel)?.accounts)?.[n.accountId]?.responsePrefix;if(r!==void 0)return r===`auto`?V(e,t):r}if(n?.channel){let r=H(e,n.channel)?.responsePrefix;if(r!==void 0)return r===`auto`?V(e,t):r}let r=e.messages?.responsePrefix;if(r!==void 0)return r===`auto`?V(e,t):r}function Bt(e,t,n){return{messagePrefix:Rt(e,t,{hasAllowFrom:n?.hasAllowFrom,fallback:n?.fallbackMessagePrefix}),responsePrefix:zt(e,t,{channel:n?.channel,accountId:n?.accountId})}}function Vt(e){let t=e.lastIndexOf(`/`);return(t>=0?e.slice(t+1):e).replace(/-\d{8}$/,``).replace(/-latest$/,``)}function Ht(e){let{cfg:t,agentId:n}=e,r={identityName:Lt(t,n)};return{prefixContext:r,responsePrefix:Bt(t,n,{channel:e.channel,accountId:e.accountId}).responsePrefix,responsePrefixContextProvider:()=>r,onModelSelected:e=>{r.provider=e.provider,r.model=Vt(e.model),r.modelFull=`${e.provider}/${e.model}`,r.thinkingLevel=e.thinkLevel??`off`}}}function Ut(e){let{responsePrefix:t,responsePrefixContextProvider:n,onModelSelected:r}=Ht(e);return{responsePrefix:t,responsePrefixContextProvider:n,onModelSelected:r}}function Wt(e){let t,n=!1,r=async()=>{if(!n){n=!0;try{await e.onTick()}finally{n=!1}}};return{tick:r,start:()=>{e.intervalMs<=0||t||(t=setInterval(()=>{r()},e.intervalMs))},stop:()=>{t&&(clearInterval(t),t=void 0,n=!1)},isRunning:()=>t!==void 0}}function Gt(e){let t=typeof e.maxConsecutiveFailures==`number`&&e.maxConsecutiveFailures>0?Math.floor(e.maxConsecutiveFailures):void 0,n=0,r=!1,i=()=>e.isSealed()||r?!0:e.shouldBlock?.()===!0;return{run:async a=>{if(i())return`skipped`;try{return await a(),n=0,`started`}catch(i){if(n+=1,e.onStartError?.(i),e.rethrowOnError)throw i;return t&&n>=t?(r=!0,e.onTrip?.(),`tripped`):`failed`}},reset:()=>{n=0,r=!1},isTripped:()=>r}}function Kt(e){let t=e.stop,n=e.keepaliveIntervalMs??3e3,r=Math.max(1,e.maxConsecutiveFailures??2),i=e.maxDurationMs??6e4,a=!1,o=!1,s,c=Gt({isSealed:()=>o,onStartError:e.onStartError,maxConsecutiveFailures:r,onTrip:()=>{u.stop()}}),l=async()=>{await c.run(()=>e.start())},u=Wt({intervalMs:n,onTick:l}),d=()=>{i<=0||(f(),s=setTimeout(()=>{o||(console.warn(`[typing] TTL exceeded (${i}ms), auto-stopping typing indicator`),m())},i))},f=()=>{s&&=(clearTimeout(s),void 0)},p=async()=>{o||(a=!1,c.reset(),u.stop(),f(),await l(),!c.isTripped()&&(u.start(),d()))},m=()=>{o=!0,u.stop(),f(),!(!t||a)&&(a=!0,t().catch(t=>(e.onStopError??e.onStartError)(t)))};return{onReplyStart:p,onIdle:m,onCleanup:m}}function qt(e){return e?.dangerouslyAllowNameMatching===!0}function Jt(e){let t=e.configuredFallbackPolicy??`open`,n=e.missingProviderFallbackPolicy??`allowlist`;return{groupPolicy:e.providerConfigPresent?e.groupPolicy??e.defaultGroupPolicy??t:e.groupPolicy??n,providerMissingFallbackApplied:!e.providerConfigPresent&&e.groupPolicy===void 0}}function Yt(e){return e.channels?.defaults?.groupPolicy}function Xt(e){return Jt({providerConfigPresent:e.providerConfigPresent,groupPolicy:e.groupPolicy,defaultGroupPolicy:e.defaultGroupPolicy,configuredFallbackPolicy:`allowlist`,missingProviderFallbackPolicy:`allowlist`})}const U=new Set;function Zt(e){if(!e.providerMissingFallbackApplied)return!1;let t=`${e.providerKey}:${e.accountId??`*`}`;if(U.has(t))return!1;U.add(t);let n=e.blockedLabel?.trim()||`group messages`;return e.log(`${e.providerKey}: channels.${e.providerKey} is missing; defaulting groupPolicy to "allowlist" (${n} blocked until explicitly configured).`),!0}function Qt(){let t=s.z.string().regex(e.X,`Secret reference provider must match /^[a-z][a-z0-9_-]{0,63}$/ (example: "default").`);return s.z.union([s.z.string(),s.z.discriminatedUnion(`source`,[s.z.object({source:s.z.literal(`env`),provider:t,id:s.z.string().regex(e.lt,`Env secret reference id must match /^[A-Z][A-Z0-9_]{0,127}$/ (example: "OPENAI_API_KEY").`)}),s.z.object({source:s.z.literal(`file`),provider:t,id:s.z.string().refine(e.$,`File secret reference id must be an absolute JSON pointer (example: "/providers/openai/apiKey"), or "value" for singleValue mode.`)}),s.z.object({source:s.z.literal(`exec`),provider:t,id:s.z.string().refine(e.Q,e.Z())})])])}function $t(e,t){let n=Math.max(0,Math.floor(t));if(n<=0){e.clear();return}for(;e.size>n;){let t=e.keys().next();if(t.done)break;e.delete(t.value)}}function en(e){let t=Math.max(0,e.ttlMs),n=Math.max(0,Math.floor(e.maxSize)),r=new Map,i=(e,t)=>{r.delete(e),r.set(e,t)},a=e=>{let i=t>0?e-t:void 0;if(i!==void 0)for(let[e,t]of r)t<i&&r.delete(e);if(n<=0){r.clear();return}$t(r,n)},o=(e,n,a)=>{let o=r.get(e);return o===void 0?!1:t>0&&n-o>=t?(r.delete(e),!1):(a&&i(e,n),!0)};return{check:(e,t=Date.now())=>e?o(e,t,!0)?!0:(i(e,t),a(t),!1):!1,peek:(e,t=Date.now())=>e?o(e,t,!1):!1,clear:()=>{r.clear()},size:()=>r.size}}function tn(t){let n=t.registry??e.nt(),r=n.httpRoutes??[];n.httpRoutes=r;let i=e.it(t.path,t.fallbackPath),a=t.accountId?` for account "${t.accountId}"`:``;if(!i)return t.log?.(`plugin: webhook path missing${a}`),()=>{};let o=t.match??`exact`,s=e.rt(r,{path:i,match:o});if(s&&s.auth!==t.auth)return t.log?.(`plugin: route overlap denied at ${i} (${o}, ${t.auth})${a}; overlaps ${s.path} (${s.match}, ${s.auth}) owned by ${s.pluginId??`unknown-plugin`} (${s.source??`unknown-source`})`),()=>{};let c=r.findIndex(e=>e.path===i&&e.match===o);if(c>=0){let e=r[c];if(!e)return()=>{};if(!t.replaceExisting)return t.log?.(`plugin: route conflict at ${i} (${o})${a}; owned by ${e.pluginId??`unknown-plugin`} (${e.source??`unknown-source`})`),()=>{};if(e.pluginId&&t.pluginId&&e.pluginId!==t.pluginId)return t.log?.(`plugin: route replacement denied for ${i} (${o})${a}; owned by ${e.pluginId}`),()=>{};let n=t.pluginId?` (${t.pluginId})`:``;t.log?.(`plugin: replacing stale webhook path ${i} (${o})${a}${n}`),r.splice(c,1)}let l={path:i,handler:t.handler,auth:t.auth,match:o,pluginId:t.pluginId,source:t.source};return r.push(l),()=>{let e=r.indexOf(l);e>=0&&r.splice(e,1)}}function W(e){return{success:!1,error:{issues:[{path:[],message:e}]}}}function nn(){return{safeParse(e){return e===void 0?{success:!0,data:void 0}:!e||typeof e!=`object`||Array.isArray(e)?W(`expected config object`):Object.keys(e).length>0?W(`config must be empty`):{success:!0,data:e}},jsonSchema:{type:`object`,additionalProperties:!1,properties:{}}}}function rn(e){let t=e.dmPolicy===`allowlist`?[]:e.storeAllowFrom??[];return[...e.allowFrom??[],...t].map(e=>String(e).trim()).filter(Boolean)}function an(e){return((Array.isArray(e.groupAllowFrom)&&e.groupAllowFrom.length>0?e.groupAllowFrom:void 0)||(e.fallbackToAllowFrom===!1?[]:e.allowFrom??[])).map(e=>String(e).trim()).filter(Boolean)}function on(t){return e.J(t)?.pairing??null}async function sn(n,r){try{let i=e.xt(await t.default.promises.readFile(n,`utf-8`));return i==null?{value:r,exists:!0}:{value:i,exists:!0}}catch(e){return e.code,{value:r,exists:!1}}}const G=new Map;function K(t=process.env){return e.jt(t,e.Mt(t,()=>e.Nt(t,r.default.homedir)))}function cn(e){let t=String(e).trim().toLowerCase();if(!t)throw Error(`invalid pairing channel`);let n=t.replace(/[\\/:*?"<>|]/g,`_`).replace(/\.\./g,`_`);if(!n||n===`_`)throw Error(`invalid pairing channel`);return n}function ln(e){let t=String(e).trim().toLowerCase();if(!t)throw Error(`invalid pairing account id`);let n=t.replace(/[\\/:*?"<>|]/g,`_`).replace(/\.\./g,`_`);if(!n||n===`_`)throw Error(`invalid pairing account id`);return n}function q(e,t=process.env,r){let i=cn(e),a=typeof r==`string`?r.trim():``;return a?n.default.join(K(t),`${i}-${ln(a)}-allowFrom.json`):n.default.join(K(t),`${i}-allowFrom.json`)}async function un(e,t){return await sn(e,t)}function dn(e){return e?.trim().toLowerCase()||``}function fn(e){return!e||e===`default`}function pn(e){return dn(e)||`default`}function mn(e,t){let n=t.trim();if(!n||n===`*`)return``;let r=on(e),i=r?.normalizeAllowEntry?r.normalizeAllowEntry(n):n;return String(i).trim()}function hn(e,t){return gn((Array.isArray(t.allowFrom)?t.allowFrom:[]).map(t=>mn(e,String(t))).filter(Boolean))}function gn(e){let t=new Set,n=[];for(let r of e){let e=String(r).trim();!e||t.has(e)||(t.add(e),n.push(e))}return n}async function J(e,t){return(await xn(e,t)).entries}function _n(e){return{exists:e.exists,mtimeMs:e.mtimeMs,size:e.size,entries:e.entries.slice()}}function vn(e,t){G.set(e,_n(t))}function yn(e){let t=G.get(e.filePath);return!t||t.exists!==e.exists||e.exists&&(t.mtimeMs!==e.mtimeMs||t.size!==e.size)?null:_n(t)}function bn(e,t){let n=yn({filePath:e,exists:!!t,mtimeMs:t?.mtimeMs??null,size:t?.size??null});return n?{entries:n.entries,exists:n.exists}:t?null:(vn(e,{exists:!1,mtimeMs:null,size:null,entries:[]}),{entries:[],exists:!1})}async function xn(e,n){let r=null;try{r=await t.default.promises.stat(n)}catch(e){if(e.code!==`ENOENT`)throw e}let i=bn(n,r);if(i)return i;if(!r)return{entries:[],exists:!1};let{value:a,exists:o}=await un(n,{version:1,allowFrom:[]}),s=hn(e,a);return vn(n,{exists:o,mtimeMs:r.mtimeMs,size:r.size,entries:s}),{entries:s,exists:o}}async function Sn(e){let t=q(e.channel,e.env,e.accountId);return await J(e.channel,t)}async function Cn(e,t=process.env,n){let r=pn(n);if(!fn(r))return await Sn({channel:e,env:t,accountId:r});let i=await J(e,q(e,t,r)),a=await J(e,q(e,t));return gn([...i,...a])}function wn(e){if(e.groupPolicy===`disabled`)return{allowed:!1,groupPolicy:e.groupPolicy,reason:`disabled`};if(e.groupPolicy===`allowlist`){if(e.requireMatchInput&&!e.hasMatchInput)return{allowed:!1,groupPolicy:e.groupPolicy,reason:`missing_match_input`};if(!e.allowlistConfigured)return{allowed:!1,groupPolicy:e.groupPolicy,reason:`empty_allowlist`};if(!e.allowlistMatched)return{allowed:!1,groupPolicy:e.groupPolicy,reason:`not_allowlisted`}}return{allowed:!0,groupPolicy:e.groupPolicy,reason:`allowed`}}function Tn(e){if(e.groupPolicy===`disabled`)return{allowed:!1,groupPolicy:e.groupPolicy,providerMissingFallbackApplied:!!e.providerMissingFallbackApplied,reason:`disabled`};if(e.groupPolicy===`allowlist`){if(e.groupAllowFrom.length===0)return{allowed:!1,groupPolicy:e.groupPolicy,providerMissingFallbackApplied:!!e.providerMissingFallbackApplied,reason:`empty_allowlist`};if(!e.isSenderAllowed(e.senderId,e.groupAllowFrom))return{allowed:!1,groupPolicy:e.groupPolicy,providerMissingFallbackApplied:!!e.providerMissingFallbackApplied,reason:`sender_not_allowlisted`}}return{allowed:!0,groupPolicy:e.groupPolicy,providerMissingFallbackApplied:!!e.providerMissingFallbackApplied,reason:`allowed`}}function En(t){let n=Array.isArray(t.allowFrom)?t.allowFrom:void 0,r=Array.isArray(t.groupAllowFrom)?t.groupAllowFrom:void 0;return{effectiveAllowFrom:e.vt(rn({allowFrom:n,storeAllowFrom:Array.isArray(t.storeAllowFrom)?t.storeAllowFrom:void 0,dmPolicy:t.dmPolicy??void 0})),effectiveGroupAllowFrom:e.vt(an({allowFrom:n,groupAllowFrom:r,fallbackToAllowFrom:t.groupAllowFromFallbackToAllowFrom??void 0}))}}const Y={GROUP_POLICY_ALLOWED:`group_policy_allowed`,GROUP_POLICY_DISABLED:`group_policy_disabled`,GROUP_POLICY_EMPTY_ALLOWLIST:`group_policy_empty_allowlist`,GROUP_POLICY_NOT_ALLOWLISTED:`group_policy_not_allowlisted`,DM_POLICY_OPEN:`dm_policy_open`,DM_POLICY_DISABLED:`dm_policy_disabled`,DM_POLICY_ALLOWLISTED:`dm_policy_allowlisted`,DM_POLICY_PAIRING_REQUIRED:`dm_policy_pairing_required`,DM_POLICY_NOT_ALLOWLISTED:`dm_policy_not_allowlisted`};async function Dn(e){return e.shouldRead===!1||e.dmPolicy===`allowlist`?[]:await(e.readStore??((e,t)=>Cn(e,process.env,t)))(e.provider,e.accountId).catch(()=>[])}function On(t){let n=t.dmPolicy??`pairing`,r=t.groupPolicy===`open`||t.groupPolicy===`disabled`?t.groupPolicy:`allowlist`,i=e.vt(t.effectiveAllowFrom),a=e.vt(t.effectiveGroupAllowFrom);if(t.isGroup){let e=wn({groupPolicy:r,allowlistConfigured:a.length>0,allowlistMatched:t.isSenderAllowed(a)});if(!e.allowed){if(e.reason===`disabled`)return{decision:`block`,reasonCode:Y.GROUP_POLICY_DISABLED,reason:`groupPolicy=disabled`};if(e.reason===`empty_allowlist`)return{decision:`block`,reasonCode:Y.GROUP_POLICY_EMPTY_ALLOWLIST,reason:`groupPolicy=allowlist (empty allowlist)`};if(e.reason===`not_allowlisted`)return{decision:`block`,reasonCode:Y.GROUP_POLICY_NOT_ALLOWLISTED,reason:`groupPolicy=allowlist (not allowlisted)`}}return{decision:`allow`,reasonCode:Y.GROUP_POLICY_ALLOWED,reason:`groupPolicy=${r}`}}return n===`disabled`?{decision:`block`,reasonCode:Y.DM_POLICY_DISABLED,reason:`dmPolicy=disabled`}:n===`open`?{decision:`allow`,reasonCode:Y.DM_POLICY_OPEN,reason:`dmPolicy=open`}:t.isSenderAllowed(i)?{decision:`allow`,reasonCode:Y.DM_POLICY_ALLOWLISTED,reason:`dmPolicy=${n} (allowlisted)`}:n===`pairing`?{decision:`pairing`,reasonCode:Y.DM_POLICY_PAIRING_REQUIRED,reason:`dmPolicy=pairing (not allowlisted)`}:{decision:`block`,reasonCode:Y.DM_POLICY_NOT_ALLOWLISTED,reason:`dmPolicy=${n} (not allowlisted)`}}function kn(e){let{effectiveAllowFrom:t,effectiveGroupAllowFrom:n}=En({allowFrom:e.allowFrom,groupAllowFrom:e.groupAllowFrom,storeAllowFrom:e.storeAllowFrom,dmPolicy:e.dmPolicy,groupAllowFromFallbackToAllowFrom:e.groupAllowFromFallbackToAllowFrom});return{...On({isGroup:e.isGroup,dmPolicy:e.dmPolicy,groupPolicy:e.groupPolicy,effectiveAllowFrom:t,effectiveGroupAllowFrom:n,isSenderAllowed:e.isSenderAllowed}),effectiveAllowFrom:t,effectiveGroupAllowFrom:n}}function An(e){let t=e[0],n=e.map(e=>e.path),r=e.map(e=>e.contentType).filter(Boolean);return{MediaPath:t?.path,MediaType:t?.contentType??void 0,MediaUrl:t?.path,MediaPaths:n.length>0?n:void 0,MediaUrls:n.length>0?n:void 0,MediaTypes:r.length>0?r:void 0}}function jn(){this.abort()}function Mn(e){return jn.bind(e)}const X={STRICT:`strict`,TRUSTED_ENV_PROXY:`trusted_env_proxy`},Nn=new Set([`accept`,`accept-encoding`,`accept-language`,`cache-control`,`content-language`,`content-type`,`if-match`,`if-modified-since`,`if-none-match`,`if-unmodified-since`,`pragma`,`range`,`user-agent`]);function Pn(e){return{...e,mode:X.STRICT}}function Fn(e){return e.mode?e.mode:e.proxy===`env`&&e.dangerouslyAllowEnvProxyWithoutPinnedDns===!0?X.TRUSTED_ENV_PROXY:X.STRICT}function In(e){return e===301||e===302||e===303||e===307||e===308}function Ln(e){if(!e?.headers)return e;let t=new Headers(e.headers),n=new Headers;for(let[e,r]of t.entries())Nn.has(e.toLowerCase())&&n.set(e,r);return{...e,headers:n}}function Rn(e){let{timeoutMs:t,signal:n}=e;if(!t&&!n)return{signal:void 0,cleanup:()=>{}};if(!t)return{signal:n,cleanup:()=>{}};let r=new AbortController,i=setTimeout(r.abort.bind(r),t),a=Mn(r);return n&&(n.aborted?r.abort():n.addEventListener(`abort`,a,{once:!0})),{signal:r.signal,cleanup:()=>{clearTimeout(i),n&&n.removeEventListener(`abort`,a)}}}async function zn(t){let n=t.fetchImpl??globalThis.fetch;if(!n)throw Error(`fetch is not available`);let r=typeof t.maxRedirects==`number`&&Number.isFinite(t.maxRedirects)?Math.max(0,Math.floor(t.maxRedirects)):3,i=Fn(t),{signal:a,cleanup:o}=Rn({timeoutMs:t.timeoutMs,signal:t.signal}),s=!1,l=async t=>{s||(s=!0,o(),await e.E(t??void 0))},u=new Set,d=t.url,f=t.init?{...t.init}:void 0,p=0;for(;;){let o;try{o=new URL(d)}catch{throw await l(),Error(`Invalid URL: must be http or https`)}if(![`http:`,`https:`].includes(o.protocol))throw await l(),Error(`Invalid URL: must be http or https`);let s=null;try{let m=await e.O(o.hostname,{lookupFn:t.lookupFn,policy:t.policy});i===X.TRUSTED_ENV_PROXY&&e.w()?s=new c.EnvHttpProxyAgent:t.pinDns!==!1&&(s=e.D(m));let h={...f?{...f}:{},redirect:`manual`,...s?{dispatcher:s}:{},...a?{signal:a}:{}},g=await n(o.toString(),h);if(In(g.status)){let t=g.headers.get(`location`);if(!t)throw await l(s),Error(`Redirect missing location header (${g.status})`);if(p+=1,p>r)throw await l(s),Error(`Too many redirects (limit: ${r})`);let n=new URL(t,o),i=n.toString();if(u.has(i))throw await l(s),Error(`Redirect loop detected`);n.origin!==o.origin&&(f=Ln(f)),u.add(i),g.body?.cancel(),await e.E(s),d=i;continue}return{response:g,finalUrl:d,release:async()=>l(s)}}catch(n){throw n instanceof e.T&&e.P(`security: blocked URL fetch (${t.auditContext??`url-fetch`}) target=${o.origin}${o.pathname} reason=${n.message}`),await l(s),n}}}async function Bn(e,t){let n,r=!1;return await new Promise((i,a)=>{let o=()=>{n!==void 0&&(clearTimeout(n),n=void 0)};n=setTimeout(()=>{r=!0,o(),e.cancel().catch(()=>void 0),a(Error(`Media download stalled: no data received for ${t}ms`))},t),e.read().then(e=>{o(),r||i(e)},e=>{o(),r||a(e)})})}async function Vn(e,t,n){let r=n?.onOverflow??(e=>Error(`Content too large: ${e.size} bytes (limit: ${e.maxBytes} bytes)`)),i=n?.chunkTimeoutMs,a=e.body;if(!a||typeof a.getReader!=`function`){let n=Buffer.from(await e.arrayBuffer());if(n.length>t)throw r({size:n.length,maxBytes:t,res:e});return n}let o=a.getReader(),s=[],c=0;try{for(;;){let{done:n,value:a}=i?await Bn(o,i):await o.read();if(n)break;if(a?.length){if(c+=a.length,c>t){try{await o.cancel()}catch{}throw r({size:c,maxBytes:t,res:e})}s.push(a)}}}finally{try{o.releaseLock()}catch{}}return Buffer.concat(s.map(e=>Buffer.from(e)),c)}var Z=class extends Error{constructor(e,t){super(t),this.code=e,this.name=`MediaFetchError`}};function Hn(e){return e.replace(/^["']|["']$/g,``)}function Un(e){if(!e)return;let t=/filename\*\s*=\s*([^;]+)/i.exec(e);if(t?.[1]){let e=Hn(t[1].trim()),r=e.split(`''`).slice(1).join(`''`)||e;try{return n.default.basename(decodeURIComponent(r))}catch{return n.default.basename(r)}}let r=/filename\s*=\s*([^;]+)/i.exec(e);if(r?.[1])return n.default.basename(Hn(r[1].trim()))}async function Wn(e,t=200){try{let n=await e.text();if(!n)return;let r=n.replace(/\s+/g,` `).trim();return r?r.length<=t?r:`${r.slice(0,t)}…`:void 0}catch{return}}async function Gn(t){let{url:r,fetchImpl:i,requestInit:a,filePathHint:o,maxBytes:s,maxRedirects:c,readIdleTimeoutMs:l,ssrfPolicy:u,lookupFn:d}=t,f,p=r,m=null;try{let e=await zn(Pn({url:r,fetchImpl:i,init:a,maxRedirects:c,policy:u,lookupFn:d}));f=e.response,p=e.finalUrl,m=e.release}catch(e){throw new Z(`fetch_failed`,`Failed to fetch media from ${r}: ${String(e)}`)}try{if(!f.ok){let e=f.statusText?` ${f.statusText}`:``,t=p===r?``:` (redirected to ${p})`,n=`HTTP ${f.status}${e}`;if(!f.body)n=`HTTP ${f.status}${e}; empty response body`;else{let e=await Wn(f);e&&(n+=`; body: ${e}`)}throw new Z(`http_error`,`Failed to fetch media from ${r}${t}: ${n}`)}let t=f.headers.get(`content-length`);if(s&&t){let e=Number(t);if(Number.isFinite(e)&&e>s)throw new Z(`max_bytes`,`Failed to fetch media from ${r}: content length ${e} exceeds maxBytes ${s}`)}let i;try{i=s?await Vn(f,s,{onOverflow:({maxBytes:e,res:t})=>new Z(`max_bytes`,`Failed to fetch media from ${t.url||r}: payload exceeds maxBytes ${e}`),chunkTimeoutMs:l}):Buffer.from(await f.arrayBuffer())}catch(e){throw e instanceof Z?e:new Z(`fetch_failed`,`Failed to fetch media from ${f.url||r}: ${String(e)}`)}let a;try{let e=new URL(p);a=n.default.basename(e.pathname)||void 0}catch{}let c=Un(f.headers.get(`content-disposition`)),u=c||a||(o?n.default.basename(o):void 0),d=c&&n.default.extname(c)?c:o??p,m=await e.v({buffer:i,headerMime:f.headers.get(`content-type`),filePath:d});if(u&&!n.default.extname(u)&&m){let t=e.y(m);t&&(u=`${u}${t}`)}return{buffer:i,contentType:m??void 0,fileName:u}}finally{m&&await m()}}let Kn;function qn(){return Kn||=e.kt(),Kn}function Jn(e,t={}){let r=n.default.resolve(e);return[t.preferredTmpDir??qn(),n.default.join(r,`media`),n.default.join(r,`agents`),n.default.join(r,`workspace`),n.default.join(r,`sandboxes`)]}function Yn(){return Jn(e.Mt())}function Xn(e){return typeof e.maxBytesOrOptions==`number`||e.maxBytesOrOptions===void 0?{maxBytes:e.maxBytesOrOptions,optimizeImages:e.optimizeImages,ssrfPolicy:e.options?.ssrfPolicy,localRoots:e.options?.localRoots}:{...e.maxBytesOrOptions,optimizeImages:e.optimizeImages?e.maxBytesOrOptions.optimizeImages??!0:!1}}var Q=class extends Error{constructor(e,t,n){super(t,n),this.code=e,this.name=`LocalMediaAccessError`}};function Zn(){return Yn()}async function Qn(e,t){if(t===`any`)return;let r=t??Zn(),a;try{a=await i.default.realpath(e)}catch{a=n.default.resolve(e)}if(t===void 0){let t=r.find(e=>n.default.basename(e)===`workspace`);if(t){let r=n.default.dirname(t),i=n.default.relative(r,a);if(i&&!i.startsWith(`..`)&&!n.default.isAbsolute(i)&&(i.split(n.default.sep)[0]??``).startsWith(`workspace-`))throw new Q(`path-not-allowed`,`Local media path is not under an allowed directory: ${e}`)}}for(let e of r){let t;try{t=await i.default.realpath(e)}catch{t=n.default.resolve(e)}if(t===n.default.parse(t).root)throw new Q(`invalid-root`,`Invalid localRoots entry (refuses filesystem root): ${e}. Pass a narrower directory.`);if(a===t||a.startsWith(t+n.default.sep))return}throw new Q(`path-not-allowed`,`Local media path is not under an allowed directory: ${e}`)}const $n=/^image\/hei[cf]$/i,er=/\.(heic|heif)$/i;function $(e,t=2){return(e/1048576).toFixed(t)}function tr(e,t,n){return`${e} exceeds ${$(t,0)}MB limit (got ${$(n)}MB)`}function nr(e,t,n){return`${e} could not be reduced below ${$(t,0)}MB (got ${$(n)}MB)`}function rr(e){return!!(e.contentType&&$n.test(e.contentType.trim())||e.fileName&&er.test(e.fileName.trim()))}function ir(e){if(!e)return;let t=e.trim();if(!t)return e;let r=n.default.parse(t);return!r.ext||er.test(r.ext)?n.default.format({dir:r.dir,name:r.name||t,ext:`.jpg`}):n.default.format({dir:r.dir,name:r.name,ext:`.jpg`})}function ar(t){if(e.Ot()&&!(t.optimized.optimizedSize>=t.originalSize)){if(t.optimized.format===`png`){e.Dt(`Optimized PNG (preserving alpha) from ${$(t.originalSize)}MB to ${$(t.optimized.optimizedSize)}MB (side≤${t.optimized.resizeSide}px)`);return}e.Dt(`Optimized media from ${$(t.originalSize)}MB to ${$(t.optimized.optimizedSize)}MB (side≤${t.optimized.resizeSide}px, q=${t.optimized.quality})`)}}async function or(t){let{buffer:n,cap:r,meta:i}=t;if((i?.contentType===`image/png`||i?.fileName?.toLowerCase().endsWith(`.png`))&&await e.m(n)){let t=await e.h(n,r);if(t.buffer.length<=r)return{...t,format:`png`};e.Ot()&&e.Dt(`PNG with alpha still exceeds ${$(r,0)}MB after optimization; falling back to JPEG`)}return{...await lr(n,r,i),format:`jpeg`}}async function sr(t,r={}){let{maxBytes:i,optimizeImages:o=!0,ssrfPolicy:s,localRoots:c,sandboxValidated:l=!1,readFile:u}=r;if(t=t.replace(/^\s*MEDIA\s*:\s*/i,``),t.startsWith(`file://`))try{t=(0,a.fileURLToPath)(t)}catch{throw new Q(`invalid-file-url`,`Invalid file:// URL: ${t}`)}let d=async(e,t,n)=>{let r=e.length,i=await or({buffer:e,cap:t,meta:n});if(ar({originalSize:r,optimized:i}),i.buffer.length>t)throw Error(nr(`Media`,t,i.buffer.length));let a=i.format===`png`?`image/png`:`image/jpeg`,o=i.format===`jpeg`&&n&&rr(n)?ir(n.fileName):n?.fileName;return{buffer:i.buffer,contentType:a,kind:`image`,fileName:o}},f=async t=>{let n=i===void 0?e.x(t.kind??`document`):i;if(t.kind===`image`){let e=t.contentType===`image/gif`;if(e||!o){if(t.buffer.length>n)throw Error(tr(e?`GIF`:`Media`,n,t.buffer.length));return{buffer:t.buffer,contentType:t.contentType,kind:t.kind,fileName:t.fileName}}return{...await d(t.buffer,n,{contentType:t.contentType,fileName:t.fileName})}}if(t.buffer.length>n)throw Error(tr(`Media`,n,t.buffer.length));return{buffer:t.buffer,contentType:t.contentType??void 0,kind:t.kind,fileName:t.fileName}};if(/^https?:\/\//i.test(t)){let n=e.x(`document`),{buffer:r,contentType:a,fileName:c}=await Gn({url:t,maxBytes:i===void 0?n:o?Math.max(i,n):i,ssrfPolicy:s});return await f({buffer:r,contentType:a,kind:e.b(a),fileName:c})}if(t.startsWith(`~`)&&(t=e.bt(t)),(l||c===`any`)&&!u)throw new Q(`unsafe-bypass`,`Refusing localRoots bypass without readFile override. Use sandboxValidated with readFile, or pass explicit localRoots.`);l||c===`any`||await Qn(t,c);let p;if(u)p=await u(t);else try{p=(await e.C({filePath:t})).buffer}catch(n){throw n instanceof e.S?n.code===`not-found`?new Q(`not-found`,`Local media file not found: ${t}`,{cause:n}):n.code===`not-file`?new Q(`not-file`,`Local media path is not a file: ${t}`,{cause:n}):new Q(`invalid-path`,`Local media path is not safe to read: ${t}`,{cause:n}):n}let m=await e.v({buffer:p,filePath:t}),h=e.b(m),g=n.default.basename(t)||void 0;if(g&&!n.default.extname(g)&&m){let t=e.y(m);t&&(g=`${g}${t}`)}return await f({buffer:p,contentType:m,kind:h,fileName:g})}async function cr(e,t,n){return await sr(e,Xn({maxBytesOrOptions:t,options:n,optimizeImages:!0}))}async function lr(t,n,r={}){let i=t;if(rr(r))try{i=await e.p(t)}catch(e){throw Error(`HEIC image conversion failed: ${String(e)}`,{cause:e})}let a=[2048,1536,1280,1024,800],o=[80,70,60,50,40],s=null;for(let t of a)for(let r of o)try{let a=await e.g({buffer:i,maxSide:t,quality:r,withoutEnlargement:!0}),o=a.length;if((!s||o<s.size)&&(s={buffer:a,size:o,resizeSide:t,quality:r}),o<=n)return{buffer:a,optimizedSize:o,resizeSide:t,quality:r}}catch{}if(s)return{buffer:s.buffer,optimizedSize:s.size,resizeSide:s.resizeSide,quality:s.quality};throw Error(`Failed to optimize image`)}async function ur(e,t={}){return await cr(e,{maxBytes:t.maxBytes,localRoots:t.mediaLocalRoots})}function dr(t){let n=e.wt(t.accountId);return{accountId:n,readAllowFromStore:()=>t.core.channel.pairing.readAllowFromStore({channel:t.channel,accountId:n}),readStoreForDmPolicy:(n,r)=>t.core.channel.pairing.readAllowFromStore({channel:n,accountId:e.wt(r)}),upsertPairingRequest:e=>t.core.channel.pairing.upsertPairingRequest({channel:t.channel,accountId:n,...e})}}exports.BlockStreamingCoalesceSchema=e.R,exports.DEFAULT_ACCOUNT_ID=e.Ct,exports.DEFAULT_GROUP_HISTORY_LIMIT=50,exports.DM_GROUP_ACCESS_REASON=Y,exports.DmPolicySchema=e.z,exports.GroupPolicySchema=e.B,exports.MarkdownConfigSchema=e.V,exports.applyAccountNameToChannelSection=Et,exports.applySetupAccountConfigPatch=Ot,exports.buildAgentMediaPayload=An,exports.buildChannelConfigSchema=mt,exports.buildComputedAccountStatusSnapshot=Ft,exports.buildModelsProviderData=nt,exports.buildPendingHistoryContextFromMap=ne,exports.buildSecretInputSchema=Qt,exports.buildSingleChannelSecretPromptState=R,exports.clearHistoryEntriesIfEnabled=ie,exports.createAccountListHelpers=e.ct,exports.createAccountStatusSink=Nt,exports.createDedupeCache=en,exports.createReplyPrefixOptions=Ut,exports.createScopedPairingAccess=dr,exports.createTypingCallbacks=Kt,exports.deleteAccountFromConfigSection=e.ot,exports.emptyPluginConfigSchema=nn,exports.evaluateSenderGroupAccessForPolicy=Tn,exports.formatInboundFromLabel=l,exports.formatPairingApproveHint=e.at,exports.hasConfiguredSecretInput=e.ut,exports.isDangerousNameMatchingEnabled=qt,exports.isLoopbackHost=e.k,exports.isTrustedProxyAddress=e.A,exports.listSkillCommandsForAgents=Ce,exports.loadOutboundMediaFromUrl=ur,exports.loadSessionStore=e.u,exports.logInboundDrop=Ee,exports.logTypingFailure=De,exports.migrateBaseNameToDefaultAccount=Dt,exports.normalizeAccountId=e.wt,exports.normalizeProviderId=e.r,exports.normalizeResolvedSecretInputString=e.ft,exports.normalizeSecretInputString=e.pt,exports.parseStrictPositiveInteger=e.d,exports.promptAccountId=L,exports.promptSingleChannelSecretInput=z,exports.rawDataToString=e._,exports.readStoreAllowFromForDmPolicy=Dn,exports.recordPendingHistoryEntryIfEnabled=te,exports.registerPluginHttpRoute=tn,exports.requireOpenAllowFrom=e.H,exports.resolveAccountIdForConfigure=At,exports.resolveAllowlistMatchSimple=p,exports.resolveAllowlistProviderRuntimeGroupPolicy=Xt,exports.resolveChannelMediaMaxBytes=ht,exports.resolveClientIp=e.j,exports.resolveControlCommandGate=Te,exports.resolveDefaultGroupPolicy=Yt,exports.resolveDmGroupAccessWithLists=kn,exports.resolveEffectiveAllowFromLists=En,exports.resolveStorePath=e.f,exports.resolveStoredModelOverride=ft,exports.resolveThreadSessionKeys=e.St,exports.runSingleChannelSecretStep=Mt,exports.setAccountEnabledInConfigSection=e.st,exports.warnMissingProviderGroupPolicyFallbackOnce=Zt;
-//# sourceMappingURL=mattermost.cjs.map

package/dist/plugin-sdk/mattermost.js

@@ -10,4 +10,3 @@ import{$ as e,A as t,At as n,B as r,C as i,Ct as a,D as o,Dt as s,E as c,Et as l
 • Audio – Generate TTS from custom text
 • Help – Show usage guide`}}),N({key:`whoami`,nativeName:`whoami`,description:`Show your sender id.`,textAlias:`/whoami`,category:`status`}),N({key:`session`,nativeName:`session`,description:`Manage session-level settings (for example /session idle).`,textAlias:`/session`,category:`session`,args:[{name:`action`,description:`idle | max-age`,type:`string`,choices:[`idle`,`max-age`]},{name:`value`,description:`Duration (24h, 90m) or off`,type:`string`,captureRemaining:!0}],argsMenu:`auto`}),N({key:`subagents`,nativeName:`subagents`,description:`List, kill, log, spawn, or steer subagent runs for this session.`,textAlias:`/subagents`,category:`management`,args:[{name:`action`,description:`list | kill | log | info | send | steer | spawn`,type:`string`,choices:[`list`,`kill`,`log`,`info`,`send`,`steer`,`spawn`]},{name:`target`,description:`Run id, index, or session key`,type:`string`},{name:`value`,description:`Additional input (limit/message)`,type:`string`,captureRemaining:!0}],argsMenu:`auto`}),N({key:`acp`,nativeName:`acp`,description:`Manage ACP sessions and runtime options.`,textAlias:`/acp`,category:`management`,args:[{name:`action`,description:`Action to run`,type:`string`,preferAutocomplete:!0,choices:[`spawn`,`cancel`,`steer`,`close`,`sessions`,`status`,`set-mode`,`set`,`cwd`,`permissions`,`timeout`,`model`,`reset-options`,`doctor`,`install`,`help`]},{name:`value`,description:`Action arguments`,type:`string`,captureRemaining:!0}],argsMenu:`auto`}),N({key:`focus`,nativeName:`focus`,description:`Bind this thread (Discord) or topic/conversation (Telegram) to a session target.`,textAlias:`/focus`,category:`management`,args:[{name:`target`,description:`Subagent label/index or session key/id/label`,type:`string`,captureRemaining:!0}]}),N({key:`unfocus`,nativeName:`unfocus`,description:`Remove the current thread (Discord) or topic/conversation (Telegram) binding.`,textAlias:`/unfocus`,category:`management`}),N({key:`agents`,nativeName:`agents`,description:`List thread-bound agents for this session.`,textAlias:`/agents`,category:`management`}),N({key:`kill`,nativeName:`kill`,description:`Kill a running subagent (or all).`,textAlias:`/kill`,category:`management`,args:[{name:`target`,description:`Label, run id, index, or all`,type:`string`}],argsMenu:`auto`}),N({key:`steer`,nativeName:`steer`,description:`Send guidance to a running subagent.`,textAlias:`/steer`,category:`management`,args:[{name:`target`,description:`Label, run id, or index`,type:`string`},{name:`message`,description:`Steering message`,type:`string`,captureRemaining:!0}]}),N({key:`config`,nativeName:`config`,description:`Show or set config values.`,textAlias:`/config`,category:`management`,args:[{name:`action`,description:`show | get | set | unset`,type:`string`,choices:[`show`,`get`,`set`,`unset`]},{name:`path`,description:`Config path`,type:`string`},{name:`value`,description:`Value for set`,type:`string`,captureRemaining:!0}],argsParsing:`none`,formatArgs:M.config}),N({key:`debug`,nativeName:`debug`,description:`Set runtime debug overrides.`,textAlias:`/debug`,category:`management`,args:[{name:`action`,description:`show | reset | set | unset`,type:`string`,choices:[`show`,`reset`,`set`,`unset`]},{name:`path`,description:`Debug path`,type:`string`},{name:`value`,description:`Value for set`,type:`string`,captureRemaining:!0}],argsParsing:`none`,formatArgs:M.debug}),N({key:`usage`,nativeName:`usage`,description:`Usage footer or cost summary.`,textAlias:`/usage`,category:`options`,args:[{name:`mode`,description:`off, tokens, full, or cost`,type:`string`,choices:[`off`,`tokens`,`full`,`cost`]}],argsMenu:`auto`}),N({key:`stop`,nativeName:`stop`,description:`Stop the current run.`,textAlias:`/stop`,category:`session`}),N({key:`restart`,nativeName:`restart`,description:`Restart OpenClaw.`,textAlias:`/restart`,category:`tools`}),N({key:`activation`,nativeName:`activation`,description:`Set group activation mode.`,textAlias:`/activation`,category:`management`,args:[{name:`mode`,description:`mention or always`,type:`string`,choices:[`mention`,`always`]}],argsMenu:`auto`}),N({key:`send`,nativeName:`send`,description:`Set send policy.`,textAlias:`/send`,category:`management`,args:[{name:`mode`,description:`on, off, or inherit`,type:`string`,choices:[`on`,`off`,`inherit`]}],argsMenu:`auto`}),N({key:`reset`,nativeName:`reset`,description:`Reset the current session.`,textAlias:`/reset`,acceptsArgs:!0,category:`session`}),N({key:`new`,nativeName:`new`,description:`Start a new session.`,textAlias:`/new`,acceptsArgs:!0,category:`session`}),N({key:`compact`,nativeName:`compact`,description:`Compact the session context.`,textAlias:`/compact`,category:`session`,args:[{name:`instructions`,description:`Extra compaction instructions`,type:`string`,captureRemaining:!0}]}),N({key:`think`,nativeName:`think`,description:`Set thinking level.`,textAlias:`/think`,category:`options`,args:[{name:`level`,description:`off, minimal, low, medium, high, xhigh`,type:`string`,choices:({provider:e,model:t})=>Re(e,t)}],argsMenu:`auto`}),N({key:`verbose`,nativeName:`verbose`,description:`Toggle verbose mode.`,textAlias:`/verbose`,category:`options`,args:[{name:`mode`,description:`on or off`,type:`string`,choices:[`on`,`off`]}],argsMenu:`auto`}),N({key:`reasoning`,nativeName:`reasoning`,description:`Toggle reasoning visibility.`,textAlias:`/reasoning`,category:`options`,args:[{name:`mode`,description:`on, off, or stream`,type:`string`,choices:[`on`,`off`,`stream`]}],argsMenu:`auto`}),N({key:`elevated`,nativeName:`elevated`,description:`Toggle elevated mode.`,textAlias:`/elevated`,category:`options`,args:[{name:`mode`,description:`on, off, ask, or full`,type:`string`,choices:[`on`,`off`,`ask`,`full`]}],argsMenu:`auto`}),N({key:`exec`,nativeName:`exec`,description:`Set exec defaults for this session.`,textAlias:`/exec`,category:`options`,args:[{name:`host`,description:`sandbox, gateway, or node`,type:`string`,choices:[`sandbox`,`gateway`,`node`]},{name:`security`,description:`deny, allowlist, or full`,type:`string`,choices:[`deny`,`allowlist`,`full`]},{name:`ask`,description:`off, on-miss, or always`,type:`string`,choices:[`off`,`on-miss`,`always`]},{name:`node`,description:`Node id or name`,type:`string`}],argsParsing:`none`,formatArgs:M.exec}),N({key:`model`,nativeName:`model`,description:`Show or set the model.`,textAlias:`/model`,category:`options`,args:[{name:`model`,description:`Model id (provider/model or id)`,type:`string`}]}),N({key:`models`,nativeName:`models`,description:`List model providers or provider models.`,textAlias:`/models`,argsParsing:`none`,acceptsArgs:!0,category:`options`}),N({key:`queue`,nativeName:`queue`,description:`Adjust queue settings.`,textAlias:`/queue`,category:`options`,args:[{name:`mode`,description:`queue mode`,type:`string`,choices:[`steer`,`interrupt`,`followup`,`collect`,`steer-backlog`]},{name:`debounce`,description:`debounce duration (e.g. 500ms, 2s)`,type:`string`},{name:`cap`,description:`queue cap`,type:`number`},{name:`drop`,description:`drop policy`,type:`string`,choices:[`old`,`new`,`summarize`]}],argsParsing:`none`,formatArgs:M.queue}),N({key:`bash`,description:`Run host shell commands (host-only).`,textAlias:`/bash`,scope:`text`,category:`tools`,args:[{name:`command`,description:`Shell command`,type:`string`,captureRemaining:!0}]}),...pe().filter(e=>e.capabilities.nativeCommands).map(e=>jt(e))];return P(e,`whoami`,`/id`),P(e,`think`,`/thinking`,`/t`),P(e,`verbose`,`/v`),P(e,`reasoning`,`/reason`),P(e,`elevated`,`/elev`),P(e,`steer`,`/tell`),Mt(e),e}function Ft(){let e=$e();if(F&&e===Nt)return F;let t=Pt();return F=t,Nt=e,t}function It(e){return!e||e.length===0?[]:e.map(e=>({key:`skill:${e.skillName}`,nativeName:e.name,description:e.description,textAliases:[`/${e.name}`],acceptsArgs:!0,argsParsing:`none`,scope:`both`}))}function Lt(e){let t=Ft();return e?.skillCommands?.length?[...t,...It(e.skillCommands)]:[...t]}function Rt(e=[]){let t=new Set;for(let e of Lt()){e.nativeName&&t.add(e.nativeName.toLowerCase());for(let n of e.textAliases){let e=n.trim();e.startsWith(`/`)&&t.add(e.slice(1).toLowerCase())}}for(let n of e){let e=n.trim().toLowerCase();e&&t.add(e)}return t}function zt(e){let t=new Set,n=[];for(let r of e){let e=r.skillName.trim().toLowerCase();e&&t.has(e)||(e&&t.add(e),n.push(r))}return n}function Bt(e){let t=(e,t)=>{if(!(e===void 0||t===void 0))return e.length===0?Array.from(new Set(t)):t.length===0?Array.from(new Set(e)):Array.from(new Set([...e,...t]))},n=e.agentIds??Ve(e.cfg),r=Rt(),i=[],a=new Map;for(let r of n){let n=ge(e.cfg,r);if(!D.existsSync(n)){s(`Skipping agent "${r}": workspace does not exist: ${n}`);continue}let i;try{i=D.realpathSync(n)}catch{s(`Skipping agent "${r}": cannot resolve workspace: ${n}`);continue}let o=ke(e.cfg,r),c=a.get(i);if(c){c.skillFilter=t(c.skillFilter,o);continue}a.set(i,{workspaceDir:n,skillFilter:o})}for(let{workspaceDir:t,skillFilter:n}of a.values()){let a=Je(t,{config:e.cfg,skillFilter:n,eligibility:{remote:Et()},reservedNames:r});for(let e of a)r.add(e.name.toLowerCase()),i.push(e)}return zt(i)}function Vt(e){let{useAccessGroups:t,authorizers:n}=e,r=e.modeWhenAccessGroupsOff??`allow`;return t?n.some(e=>e.configured&&e.allowed):r===`allow`?!0:r===`deny`?!1:n.some(e=>e.configured)?n.some(e=>e.configured&&e.allowed):!0}function Ht(e){let t=Vt({useAccessGroups:e.useAccessGroups,authorizers:e.authorizers,modeWhenAccessGroupsOff:e.modeWhenAccessGroupsOff});return{commandAuthorized:t,shouldBlock:e.allowTextCommands&&e.hasControlCommand&&!t}}function Ut(e){let t=e.target?` target=${e.target}`:``;e.log(`${e.channel}: drop ${e.reason}${t}`)}function Wt(e){let t=e.target?` target=${e.target}`:``,n=e.action?` action=${e.action}`:``;e.log(`${e.channel} typing${n} failed${t}: ${String(e.error)}`)}function I(e){return typeof e==`number`&&Number.isFinite(e)&&e>0}function Gt(e){return e.explicitPresent&&I(e.explicitValue)?e.explicitValue:I(e.implicitValue)?e.implicitValue:I(e.explicitValue)?e.explicitValue:void 0}function L(e){if(!e||typeof e!=`object`)return``;let t=e.id;return typeof t==`string`?t.trim():``}function Kt(e,t){let n=Array.isArray(e.models)?e.models:[],r=Array.isArray(t.models)?t.models:[];if(n.length===0)return{...e,...t};let i=new Map(n.map(e=>[L(e),e]).filter(([e])=>!!e)),a=new Set,o=r.map(e=>{let t=L(e);if(!t)return e;a.add(t);let n=i.get(t);if(!n)return e;let r=Gt({explicitPresent:`contextWindow`in e,explicitValue:e.contextWindow,implicitValue:n.contextWindow}),o=Gt({explicitPresent:`maxTokens`in e,explicitValue:e.maxTokens,implicitValue:n.maxTokens});return{...e,input:n.input,reasoning:`reasoning`in e?e.reasoning:n.reasoning,...r===void 0?{}:{contextWindow:r},...o===void 0?{}:{maxTokens:o}}});for(let e of n){let t=L(e);!t||a.has(t)||(a.add(t),o.push(e))}return{...e,...t,models:o}}function qt(e){let t=e.implicit?{...e.implicit}:{};for(let[n,r]of Object.entries(e.explicit??{})){let e=n.trim();if(!e)continue;let i=t[e];t[e]=i?Kt(i,r):r}return t}function Jt(e){if(typeof e?.api==`string`)return e.api.trim()||void 0}function Yt(e){if(!Array.isArray(e?.models))return;let t=e.models.flatMap(e=>{if(!e||typeof e!=`object`)return[];let t=e.api;return typeof t==`string`&&t.trim()?[t.trim()]:[]}).toSorted();return t.length>0?JSON.stringify(t):void 0}function Xt(e){return Jt(e)??Yt(e)}function Zt(e){let{providerKey:t,existing:n,nextEntry:r,secretRefManagedProviders:i}=e,a=typeof r.apiKey==`string`?r.apiKey:``;return a&&xe(a)?!1:!i.has(t)&&typeof n.apiKey==`string`&&n.apiKey.length>0&&!xe(n.apiKey,{includeEnvVarName:!1})}function Qt(e){let{providerKey:t,existing:n,nextEntry:r,explicitBaseUrlProviders:i}=e;if(i.has(t)||typeof n.baseUrl!=`string`||n.baseUrl.length===0)return!1;let a=Xt(n),o=Xt(r);return!a||!o||a===o}function $t(e){let{nextProviders:t,existingProviders:n,secretRefManagedProviders:r,explicitBaseUrlProviders:i}=e,a={};for(let[e,t]of Object.entries(n))a[e]=t;for(let[e,o]of Object.entries(t)){let t=n[e];if(!t){a[e]=o;continue}let s={};Zt({providerKey:e,existing:t,nextEntry:o,secretRefManagedProviders:r})&&(s.apiKey=t.apiKey),Qt({providerKey:e,existing:t,nextEntry:o,explicitBaseUrlProviders:i})&&(s.baseUrl=t.baseUrl),a[e]={...o,...s}}return a}async function en(e){let{cfg:t,agentDir:n,env:r}=e,i=t.models?.providers??{};return qt({implicit:await Xe({agentDir:n,config:t,env:r,explicitProviders:i}),explicit:i})}function tn(e){return new Set(Object.entries(e?.providers??{}).map(([e,t])=>[e.trim(),t]).filter(([e,t])=>!!e&&typeof t?.baseUrl==`string`&&t.baseUrl.trim()).map(([e])=>e))}async function nn(e){if(e.mode!==`merge`)return e.providers;let t=e.existingParsed;if(!E(t)||!E(t.providers))return e.providers;let n=t.providers;return $t({nextProviders:e.providers,existingProviders:n,secretRefManagedProviders:e.secretRefManagedProviders,explicitBaseUrlProviders:e.explicitBaseUrlProviders})}async function rn(e){let{cfg:t,agentDir:n,env:r}=e,i=await en({cfg:t,agentDir:n,env:r});if(Object.keys(i).length===0)return{action:`skip`};let a=t.models?.mode??`merge`,o=new Set,s=We({providers:i,agentDir:n,env:r,secretDefaults:t.secrets?.defaults,secretRefManagedProviders:o})??i,c=await nn({mode:a,existingParsed:e.existingParsed,providers:s,secretRefManagedProviders:o,explicitBaseUrlProviders:tn(t.models)}),l=`${JSON.stringify({providers:c},null,2)}\n`;return e.existingRaw===l?{action:`noop`}:{action:`write`,contents:l}}const R=new Map;async function an(e){try{let t=await k.readFile(e,`utf8`);return{raw:t,parsed:JSON.parse(t)}}catch{return{raw:``,parsed:null}}}async function on(e){await k.chmod(e,384).catch(()=>{})}async function sn(e,t){let n=`${e}.${process.pid}.${Date.now()}.tmp`;await k.writeFile(n,t,{mode:384}),await k.rename(n,e)}function cn(e){let t=u();return e?t?g(e):e:t??p()}async function ln(e,t){let n=R.get(e)??Promise.resolve(),r=()=>{},i=new Promise(e=>{r=e}),a=n.then(()=>i);R.set(e,a);try{return await n,await t()}finally{r(),R.get(e)===a&&R.delete(e)}}async function z(e,t){let n=cn(e),r=t?.trim()?t.trim():d(),i=O.join(r,`models.json`);return await ln(i,async()=>{let e=ue(n),t=await an(i),a=await rn({cfg:n,agentDir:r,env:e,existingRaw:t.raw,existingParsed:t.parsed});return a.action===`skip`?{agentDir:r,wrote:!1}:a.action===`noop`?(await on(i),{agentDir:r,wrote:!1}):(await k.mkdir(r,{recursive:!0,mode:448}),await sn(i,a.contents),await on(i),{agentDir:r,wrote:!0})})}const un=l(`model-catalog`);let B=null,dn=!1,fn=()=>import(`./pi-model-discovery-DrZsxLaJ.js`);const pn=`openai-codex`,mn=`openai`,hn=new Set([`kilocode`]),gn=[{provider:mn,id:`gpt-5.4`,templateIds:[`gpt-5.2`]},{provider:mn,id:`gpt-5.4-pro`,templateIds:[`gpt-5.2-pro`,`gpt-5.2`]},{provider:pn,id:`gpt-5.4`,templateIds:[`gpt-5.3-codex`,`gpt-5.2-codex`]},{provider:pn,id:`gpt-5.3-codex-spark`,templateIds:[`gpt-5.3-codex`]}];function _n(e){let t=(t,n)=>e.find(e=>e.provider.toLowerCase()===t.toLowerCase()&&e.id.toLowerCase()===n.toLowerCase());for(let n of gn){if(t(n.provider,n.id))continue;let r=n.templateIds.map(e=>t(n.provider,e)).find(e=>e!==void 0);r&&e.push({...r,id:n.id,name:n.id})}}function vn(e){if(!Array.isArray(e))return;let t=e.filter(e=>e===`text`||e===`image`||e===`document`);return t.length>0?t:void 0}function yn(e){let t=e.models?.providers;if(!t||typeof t!=`object`)return[];let n=[];for(let[e,r]of Object.entries(t)){let t=e.toLowerCase().trim();if(!hn.has(t)||!r||typeof r!=`object`)continue;let i=r.models;if(Array.isArray(i))for(let e of i){if(!e||typeof e!=`object`)continue;let r=e.id;if(typeof r!=`string`)continue;let i=r.trim();if(!i)continue;let a=e.name,o=(typeof a==`string`?a:i).trim()||i,s=e.contextWindow,c=typeof s==`number`&&s>0?s:void 0,l=e.reasoning,u=typeof l==`boolean`?l:void 0,d=vn(e.input);n.push({id:i,name:o,provider:t,contextWindow:c,reasoning:u,input:d})}}return n}function bn(e){let t=yn(e.config);if(t.length===0)return;let n=new Set(e.models.map(e=>`${e.provider.toLowerCase().trim()}::${e.id.toLowerCase().trim()}`));for(let r of t){let t=`${r.provider.toLowerCase().trim()}::${r.id.toLowerCase().trim()}`;n.has(t)||(e.models.push(r),n.add(t))}}async function xn(e){return e?.useCache===!1&&(B=null),B||(B=(async()=>{let t=[],n=e=>e.sort((e,t)=>{let n=e.provider.localeCompare(t.provider);return n===0?e.name.localeCompare(t.name):n});try{let r=e?.config??p();await z(r);let i=await fn(),a=d(),{join:o}=await import(`node:path`),s=i.discoverAuthStorage(a),c=new i.ModelRegistry(s,o(a,`models.json`)),l=Array.isArray(c)?c:c.getAll();for(let e of l){let n=String(e?.id??``).trim();if(!n)continue;let r=String(e?.provider??``).trim();if(!r)continue;let i=String(e?.name??n).trim()||n,a=typeof e?.contextWindow==`number`&&e.contextWindow>0?e.contextWindow:void 0,o=typeof e?.reasoning==`boolean`?e.reasoning:void 0,s=Array.isArray(e?.input)?e.input:void 0;t.push({id:n,name:i,provider:r,contextWindow:a,reasoning:o,input:s})}return bn({config:r,models:t}),_n(t),t.length===0&&(B=null),n(t)}catch(e){return dn||(dn=!0,un.warn(`Failed to load model catalog: ${String(e)}`)),B=null,t.length>0?n(t):[]}})(),B)}async function Sn(e,t){let n=Me({cfg:e,agentId:t}),r=Qe({cfg:e,catalog:await xn({config:e}),defaultProvider:n.provider,defaultModel:n.model}),i=He({cfg:e,defaultProvider:n.provider}),a=new Map,o=(e,t)=>{let n=b(e),r=a.get(n)??new Set;r.add(t),a.set(n,r)},s=e=>{let t=e?.trim();if(!t)return;let r=_e({raw:t,defaultProvider:n.provider,aliasIndex:i});r&&o(r.ref.provider,r.ref.model)},c=()=>{let t=e.agents?.defaults?.model;if(typeof t==`string`)s(t);else if(t&&typeof t==`object`){s(t.primary);for(let e of t.fallbacks??[])s(e)}let n=e.agents?.defaults?.imageModel;if(typeof n==`string`)s(n);else if(n&&typeof n==`object`){s(n.primary);for(let e of n.fallbacks??[])s(e)}};for(let e of r.allowedCatalog)o(e.provider,e.id);for(let t of Object.keys(e.agents?.defaults?.models??{}))s(t);return o(n.provider,n.model),c(),{byProvider:a,providers:[...a.keys()].toSorted(),resolvedDefault:n}}function Cn(e,t){let n=e.initialMs*e.factor**Math.max(t-1,0),r=n*e.jitter*Math.random();return Math.min(e.maxMs,Math.round(n+r))}const wn={initialMs:1e3,maxMs:6e4,factor:2,jitter:0};function Tn(e){for(let t of e.models){if(!t?.id)continue;let n=typeof t.contextWindow==`number`?Math.trunc(t.contextWindow):void 0;if(!n||n<=0)continue;let r=e.cache.get(t.id);(r===void 0||n<r)&&e.cache.set(t.id,n)}}function En(e){let t=e.modelsConfig?.providers;if(!(!t||typeof t!=`object`)){for(let n of Object.values(t))if(Array.isArray(n?.models))for(let t of n.models){let n=typeof t?.id==`string`?t.id:void 0,r=typeof t?.contextWindow==`number`?t.contextWindow:void 0;!n||!r||r<=0||e.cache.set(n,r)}}}const V=new Map;let H=null,U,W=0,G=0;function Dn(e){let t=e.slice(2),r=[];for(let e=0;e<t.length;e+=1){let i=t[e];if(!i||i===`--`)break;let a=n(t,e);if(a>0){e+=a-1;continue}if(!i.startsWith(`-`)&&(r.push(i),r.length>=2))break}return r}function On(e=process.argv){let[t,n]=Dn(e);return t===`config`&&n===`validate`}function kn(){if(U)return U;if(!(Date.now()<G))try{let e=p();return En({cache:V,modelsConfig:e.models}),U=e,W=0,G=0,e}catch{W+=1;let e=Cn(wn,W);G=Date.now()+e;return}}function An(){if(H)return H;let e=kn();return e?(H=(async()=>{try{await z(e)}catch{}try{let{discoverAuthStorage:e,discoverModels:t}=await import(`./pi-model-discovery-DrZsxLaJ.js`),n=d(),r=t(e(n),n);Tn({cache:V,models:typeof r.getAvailable==`function`?r.getAvailable():r.getAll()})}catch{}En({cache:V,modelsConfig:e.models})})().catch(()=>{}),H):Promise.resolve()}On()||An();function jn(e){let t=e?.modelOverride?.trim();return t?{provider:e?.providerOverride?.trim()||void 0,model:t}:null}function Mn(e){let t=e.parentSessionKey?.trim();if(t&&t!==e.sessionKey)return t;let n=le(e.sessionKey);return n&&n!==e.sessionKey?n:null}function Nn(e){let t=jn(e.sessionEntry);if(t)return{...t,source:`session`};let n=Mn({sessionKey:e.sessionKey,parentSessionKey:e.parentSessionKey});if(!n||!e.sessionStore)return null;let r=e.sessionStore[n],i=jn(r);return i?{...i,source:`parent`}:null}const Pn=A.union([A.string(),A.number()]);A.array(Pn).optional();function Fn(e){let t=e;return typeof t.toJSONSchema==`function`?{schema:t.toJSONSchema({target:`draft-07`,unrepresentable:`any`})}:{schema:{type:`object`,additionalProperties:!0}}}const In=1024*1024;function Ln(e){let t=C(e.accountId),n=e.resolveChannelLimitMb({cfg:e.cfg,accountId:t});if(n)return n*In;if(e.cfg.agents?.defaults?.mediaMaxMb)return e.cfg.agents.defaults.mediaMaxMb*In}const Rn={openai:[`OPENAI_API_KEY`],anthropic:[`ANTHROPIC_API_KEY`],google:[`GEMINI_API_KEY`],minimax:[`MINIMAX_API_KEY`],"minimax-cn":[`MINIMAX_API_KEY`],moonshot:[`MOONSHOT_API_KEY`],"kimi-coding":[`KIMI_API_KEY`,`KIMICODE_API_KEY`],synthetic:[`SYNTHETIC_API_KEY`],venice:[`VENICE_API_KEY`],zai:[`ZAI_API_KEY`,`Z_AI_API_KEY`],xiaomi:[`XIAOMI_API_KEY`],openrouter:[`OPENROUTER_API_KEY`],"cloudflare-ai-gateway":[`CLOUDFLARE_AI_GATEWAY_API_KEY`],litellm:[`LITELLM_API_KEY`],"vercel-ai-gateway":[`AI_GATEWAY_API_KEY`],opencode:[`OPENCODE_API_KEY`,`OPENCODE_ZEN_API_KEY`],"opencode-go":[`OPENCODE_API_KEY`,`OPENCODE_ZEN_API_KEY`],together:[`TOGETHER_API_KEY`],huggingface:[`HUGGINGFACE_HUB_TOKEN`,`HF_TOKEN`],qianfan:[`QIANFAN_API_KEY`],xai:[`XAI_API_KEY`],mistral:[`MISTRAL_API_KEY`],kilocode:[`KILOCODE_API_KEY`],modelstudio:[`MODELSTUDIO_API_KEY`],volcengine:[`VOLCANO_ENGINE_API_KEY`],byteplus:[`BYTEPLUS_API_KEY`]},zn=[`VOYAGE_API_KEY`,`GROQ_API_KEY`,`DEEPGRAM_API_KEY`,`CEREBRAS_API_KEY`,`NVIDIA_API_KEY`,`COPILOT_GITHUB_TOKEN`,`GH_TOKEN`,`GITHUB_TOKEN`,`ANTHROPIC_OAUTH_TOKEN`,`CHUTES_OAUTH_TOKEN`,`CHUTES_API_KEY`,`QWEN_OAUTH_TOKEN`,`QWEN_PORTAL_API_KEY`,`MINIMAX_OAUTH_TOKEN`,`OLLAMA_API_KEY`,`VLLM_API_KEY`],Bn=[...new Set(Object.values(Rn).flatMap(e=>e))];[...new Set([...Bn,...zn])];function Vn(e){return e instanceof Error&&typeof e.message==`string`&&e.message.trim()?e.message:String(e)}function Hn(e){return Rn[e]?.find(e=>e.trim().length>0)}function Un(e){return`/providers/${ee(e)}/apiKey`}async function Wn(t){let n=t.preferredEnvVar??Hn(t.provider)??``,r=Un(t.provider),i=`env`;for(;;){let a=await t.prompter.select({message:t.copy?.sourceMessage??`Where is this API key stored?`,initialValue:i,options:[{value:`env`,label:`Environment variable`,hint:`Reference a variable from your runtime environment`},{value:`provider`,label:`Configured secret provider`,hint:`Use a configured file or exec secret provider`}]})===`provider`?`provider`:`env`;if(i=a,a===`env`){let e=await t.prompter.text({message:t.copy?.envVarMessage??`Environment variable name`,initialValue:n||void 0,placeholder:t.copy?.envVarPlaceholder??`OPENAI_API_KEY`,validate:e=>{let n=e.trim();if(!we(n))return t.copy?.envVarFormatError??`Use an env var name like "OPENAI_API_KEY" (uppercase letters, numbers, underscores).`;if(!process.env[n]?.trim())return t.copy?.envVarMissingError?.(n)??`Environment variable "${n}" is missing or empty in this session.`}}),r=String(e??``).trim(),i=r&&we(r)?r:n;if(!i)throw Error(`No valid environment variable name provided for provider "${t.provider}".`);let a={source:`env`,provider:Te(t.config,`env`,{preferFirstProviderForSource:!0}),id:i},o=await _(a,{config:t.config,env:process.env});return await t.prompter.note(t.copy?.envValidatedMessage?.(i)??`Validated environment variable ${i}. OpenClaw will store a reference, not the key value.`,`Reference validated`),{ref:a,resolvedValue:o}}let o=Object.entries(t.config.secrets?.providers??{}).filter(([,e])=>e?.source===`file`||e?.source===`exec`);if(o.length===0){await t.prompter.note(t.copy?.noProvidersMessage??`No file/exec secret providers are configured yet. Add one under secrets.providers, or select Environment variable.`,`No providers configured`);continue}let s=Te(t.config,`file`,{preferFirstProviderForSource:!0}),c=await t.prompter.select({message:`Select secret provider`,initialValue:o.find(([e])=>e===s)?.[0]??o[0]?.[0],options:o.map(([e,t])=>({value:e,label:e,hint:t?.source===`exec`?`Exec provider`:`File provider`}))}),l=t.config.secrets?.providers?.[c];if(!l||l.source!==`file`&&l.source!==`exec`){await t.prompter.note(`Provider "${c}" is not a file/exec provider.`,`Invalid provider`);continue}let u=l.source===`file`?`Secret id (JSON pointer for json mode, or 'value' for singleValue mode)`:`Secret id for the exec provider`,d=l.source===`file`?l.mode===`singleValue`?`value`:r:`${t.provider}/apiKey`,f=await t.prompter.text({message:u,initialValue:d,placeholder:l.source===`file`?`/providers/openai/apiKey`:`openai/api-key`,validate:t=>{let n=t.trim();if(!n)return`Secret id cannot be empty.`;if(l.source===`file`&&l.mode!==`singleValue`&&!e(n))return`Use an absolute JSON pointer like "/providers/openai/apiKey".`;if(l.source===`file`&&l.mode===`singleValue`&&n!==`value`)return`singleValue mode expects id "value".`;if(l.source===`exec`&&!ie(n))return me()}}),p=String(f??``).trim()||d,m={source:l.source,provider:c,id:p};try{let e=await _(m,{config:t.config,env:process.env});return await t.prompter.note(t.copy?.providerValidatedMessage?.(c,p,l.source)??`Validated ${l.source} reference ${c}:${p}. OpenClaw will store a reference, not the key value.`,`Reference validated`),{ref:m,resolvedValue:e}}catch(e){await t.prompter.note([`Could not validate provider reference ${c}:${p}.`,Vn(e),`Check your provider configuration and try again.`].join(`
 `),`Reference check failed`)}}}async function Gn(e){return e.explicitMode?e.explicitMode:typeof e.prompter.select==`function`&&await e.prompter.select({message:e.copy?.modeMessage??`How do you want to provide this API key?`,initialValue:`plaintext`,options:[{value:`plaintext`,label:e.copy?.plaintextLabel??`Paste API key now`,hint:e.copy?.plaintextHint??`Stores the key directly in OpenClaw config`},{value:`ref`,label:e.copy?.refLabel??`Use external secret provider`,hint:e.copy?.refHint??`Stores a reference to env or configured external secret providers`}]})===`ref`?`ref`:`plaintext`}async function Kn(e){let t=e.listAccountIds(e.cfg),n=e.currentId?.trim()||e.defaultAccountId||`default`,r=await e.prompter.select({message:`${e.label} account`,options:[...t.map(e=>({value:e,label:e===`default`?`default (primary)`:e})),{value:`__new__`,label:`Add a new account`}],initialValue:n});if(r!==`__new__`)return C(r);let i=await e.prompter.text({message:`New ${e.label} account id`,validate:e=>e?.trim()?void 0:`Required`}),a=C(String(i));return String(i).trim()!==a&&await e.prompter.note(`Normalized account id to "${a}".`,`${e.label} account`),a}function qn(e,t){let n=e.channels?.[t];return!!(n?.accounts&&Object.keys(n.accounts).length>0)}function Jn(e){return e.alwaysUseAccounts||e.accountId!==`default`?!0:qn(e.cfg,e.channelKey)}function Yn(e){let t=e.name?.trim();if(!t)return e.cfg;let n=C(e.accountId),r=e.cfg.channels?.[e.channelKey],i=typeof r==`object`&&r?r:void 0;if(!Jn({cfg:e.cfg,channelKey:e.channelKey,accountId:n,alwaysUseAccounts:e.alwaysUseAccounts})&&n===`default`){let n=i??{};return{...e.cfg,channels:{...e.cfg.channels,[e.channelKey]:{...n,name:t}}}}let a=i?.accounts??{},o=a[n]??{},s=n===`default`?(({name:e,...t})=>t)(i??{}):i??{};return{...e.cfg,channels:{...e.cfg.channels,[e.channelKey]:{...s,accounts:{...a,[n]:{...o,name:t}}}}}}function Xn(e){if(e.alwaysUseAccounts)return e.cfg;let t=e.cfg.channels?.[e.channelKey],n=t?.name?.trim();if(!n)return e.cfg;let r={...t?.accounts},i=r.default??{};i.name||(r[a]={...i,name:n});let{name:o,...s}=t??{};return{...e.cfg,channels:{...e.cfg.channels,[e.channelKey]:{...s,accounts:r}}}}function Zn(e){return Qn({cfg:e.cfg,channelKey:e.channelKey,accountId:e.accountId,patch:e.patch})}function Qn(e){let t=C(e.accountId),n=e.cfg.channels?.[e.channelKey],r=typeof n==`object`&&n?n:void 0,i=e.ensureChannelEnabled??!0,a=e.ensureAccountEnabled??i,o=e.patch,s=e.accountPatch??o;if(t===`default`)return{...e.cfg,channels:{...e.cfg.channels,[e.channelKey]:{...r,...i?{enabled:!0}:{},...o}}};let c=r?.accounts??{},l=c[t]??{};return{...e.cfg,channels:{...e.cfg.channels,[e.channelKey]:{...r,...i?{enabled:!0}:{},accounts:{...c,[t]:{...l,...a?{enabled:typeof l.enabled==`boolean`?l.enabled:!0}:{},...s}}}}}}const $n=async e=>await Kn(e);async function er(e){let t=e.accountOverride?.trim(),n=t?C(t):e.defaultAccountId;return e.shouldPromptAccountIds&&!t&&(n=await $n({cfg:e.cfg,prompter:e.prompter,label:e.label,currentId:n,listAccountIds:e.listAccountIds,defaultAccountId:e.defaultAccountId})),n}function tr(e){return{accountConfigured:e.accountConfigured,hasConfigToken:e.hasConfigToken,canUseEnv:e.allowEnv&&!!e.envValue?.trim()&&!e.hasConfigToken}}async function nr(e){let t=async()=>String(await e.prompter.text({message:e.inputPrompt,validate:e=>e?.trim()?void 0:`Required`})).trim();return e.canUseEnv?await e.prompter.confirm({message:e.envPrompt,initialValue:!0})?{useEnv:!0,token:null}:{useEnv:!1,token:await t()}:e.hasConfigToken&&e.accountConfigured&&await e.prompter.confirm({message:e.keepPrompt,initialValue:!0})?{useEnv:!1,token:null}:{useEnv:!1,token:await t()}}async function rr(e){let t=tr({accountConfigured:e.accountConfigured,hasConfigToken:e.hasConfigToken,allowEnv:e.allowEnv,envValue:e.envValue});!t.accountConfigured&&e.onMissingConfigured&&await e.onMissingConfigured();let n=await ir({cfg:e.cfg,prompter:e.prompter,providerHint:e.providerHint,credentialLabel:e.credentialLabel,secretInputMode:e.secretInputMode,accountConfigured:t.accountConfigured,canUseEnv:t.canUseEnv,hasConfigToken:t.hasConfigToken,envPrompt:e.envPrompt,keepPrompt:e.keepPrompt,inputPrompt:e.inputPrompt,preferredEnvVar:e.preferredEnvVar});return n.action===`use-env`?{cfg:e.applyUseEnv?await e.applyUseEnv(e.cfg):e.cfg,action:n.action,resolvedValue:e.envValue?.trim()||void 0}:n.action===`set`?{cfg:e.applySet?await e.applySet(e.cfg,n.value,n.resolvedValue):e.cfg,action:n.action,resolvedValue:n.resolvedValue}:{cfg:e.cfg,action:n.action}}async function ir(e){if(await Gn({prompter:e.prompter,explicitMode:e.secretInputMode,copy:{modeMessage:`How do you want to provide this ${e.credentialLabel}?`,plaintextLabel:`Enter ${e.credentialLabel}`,plaintextHint:`Stores the credential directly in OpenClaw config`,refLabel:`Use external secret provider`,refHint:`Stores a reference to env or configured external secret providers`}})===`plaintext`){let t=await nr({prompter:e.prompter,accountConfigured:e.accountConfigured,canUseEnv:e.canUseEnv,hasConfigToken:e.hasConfigToken,envPrompt:e.envPrompt,keepPrompt:e.keepPrompt,inputPrompt:e.inputPrompt});return t.useEnv?{action:`use-env`}:t.token?{action:`set`,value:t.token,resolvedValue:t.token}:{action:`keep`}}if(e.hasConfigToken&&e.accountConfigured&&await e.prompter.confirm({message:e.keepPrompt,initialValue:!0}))return{action:`keep`};let t=await Wn({provider:e.providerHint,config:e.cfg,prompter:e.prompter,preferredEnvVar:e.preferredEnvVar,copy:{sourceMessage:`Where is this ${e.credentialLabel} stored?`,envVarPlaceholder:e.preferredEnvVar??`OPENCLAW_SECRET`,envVarFormatError:`Use an env var name like "OPENCLAW_SECRET" (uppercase letters, numbers, underscores).`,noProvidersMessage:`No file/exec secret providers are configured yet. Add one under secrets.providers, or select Environment variable.`}});return{action:`set`,value:t.ref,resolvedValue:t.resolvedValue}}function ar(e){return t=>{e.setStatus({accountId:e.accountId,...t})}}function or(e){let{account:t,runtime:n,probe:r}=e;return{accountId:t.accountId,name:t.name,enabled:t.enabled,configured:t.configured,...cr({runtime:n,probe:r}),lastInboundAt:n?.lastInboundAt??null,lastOutboundAt:n?.lastOutboundAt??null}}function sr(e){let{accountId:t,name:n,enabled:r,configured:i,runtime:a,probe:o}=e;return or({account:{accountId:t,name:n,enabled:r,configured:i},runtime:a,probe:o})}function cr(e){let{runtime:t,probe:n}=e;return{running:t?.running??!1,lastStartAt:t?.lastStartAt??null,lastStopAt:t?.lastStopAt??null,lastError:t?.lastError??null,probe:n}}function lr(e,t){return je(e,t)?.identity}function K(e,t){let n=lr(e,t)?.name?.trim();if(n)return`[${n}]`}function ur(e,t){return lr(e,t)?.name?.trim()||void 0}function dr(e,t,n){let r=n?.configured??e.messages?.messagePrefix;return r===void 0?n?.hasAllowFrom===!0?``:K(e,t)??n?.fallback??`[openclaw]`:r}function fr(e,t){let n=e.channels?.[t];return typeof n==`object`&&n?n:void 0}function pr(e,t,n){if(n?.channel&&n?.accountId){let r=(fr(e,n.channel)?.accounts)?.[n.accountId]?.responsePrefix;if(r!==void 0)return r===`auto`?K(e,t):r}if(n?.channel){let r=fr(e,n.channel)?.responsePrefix;if(r!==void 0)return r===`auto`?K(e,t):r}let r=e.messages?.responsePrefix;if(r!==void 0)return r===`auto`?K(e,t):r}function mr(e,t,n){return{messagePrefix:dr(e,t,{hasAllowFrom:n?.hasAllowFrom,fallback:n?.fallbackMessagePrefix}),responsePrefix:pr(e,t,{channel:n?.channel,accountId:n?.accountId})}}function hr(e){let t=e.lastIndexOf(`/`);return(t>=0?e.slice(t+1):e).replace(/-\d{8}$/,``).replace(/-latest$/,``)}function gr(e){let{cfg:t,agentId:n}=e,r={identityName:ur(t,n)};return{prefixContext:r,responsePrefix:mr(t,n,{channel:e.channel,accountId:e.accountId}).responsePrefix,responsePrefixContextProvider:()=>r,onModelSelected:e=>{r.provider=e.provider,r.model=hr(e.model),r.modelFull=`${e.provider}/${e.model}`,r.thinkingLevel=e.thinkLevel??`off`}}}function _r(e){let{responsePrefix:t,responsePrefixContextProvider:n,onModelSelected:r}=gr(e);return{responsePrefix:t,responsePrefixContextProvider:n,onModelSelected:r}}function vr(e){let t,n=!1,r=async()=>{if(!n){n=!0;try{await e.onTick()}finally{n=!1}}};return{tick:r,start:()=>{e.intervalMs<=0||t||(t=setInterval(()=>{r()},e.intervalMs))},stop:()=>{t&&(clearInterval(t),t=void 0,n=!1)},isRunning:()=>t!==void 0}}function yr(e){let t=typeof e.maxConsecutiveFailures==`number`&&e.maxConsecutiveFailures>0?Math.floor(e.maxConsecutiveFailures):void 0,n=0,r=!1,i=()=>e.isSealed()||r?!0:e.shouldBlock?.()===!0;return{run:async a=>{if(i())return`skipped`;try{return await a(),n=0,`started`}catch(i){if(n+=1,e.onStartError?.(i),e.rethrowOnError)throw i;return t&&n>=t?(r=!0,e.onTrip?.(),`tripped`):`failed`}},reset:()=>{n=0,r=!1},isTripped:()=>r}}function br(e){let t=e.stop,n=e.keepaliveIntervalMs??3e3,r=Math.max(1,e.maxConsecutiveFailures??2),i=e.maxDurationMs??6e4,a=!1,o=!1,s,c=yr({isSealed:()=>o,onStartError:e.onStartError,maxConsecutiveFailures:r,onTrip:()=>{u.stop()}}),l=async()=>{await c.run(()=>e.start())},u=vr({intervalMs:n,onTick:l}),d=()=>{i<=0||(f(),s=setTimeout(()=>{o||(console.warn(`[typing] TTL exceeded (${i}ms), auto-stopping typing indicator`),m())},i))},f=()=>{s&&=(clearTimeout(s),void 0)},p=async()=>{o||(a=!1,c.reset(),u.stop(),f(),await l(),!c.isTripped()&&(u.start(),d()))},m=()=>{o=!0,u.stop(),f(),!(!t||a)&&(a=!0,t().catch(t=>(e.onStopError??e.onStartError)(t)))};return{onReplyStart:p,onIdle:m,onCleanup:m}}function xr(e){return e?.dangerouslyAllowNameMatching===!0}function Sr(e){let t=e.configuredFallbackPolicy??`open`,n=e.missingProviderFallbackPolicy??`allowlist`;return{groupPolicy:e.providerConfigPresent?e.groupPolicy??e.defaultGroupPolicy??t:e.groupPolicy??n,providerMissingFallbackApplied:!e.providerConfigPresent&&e.groupPolicy===void 0}}function Cr(e){return e.channels?.defaults?.groupPolicy}function wr(e){return Sr({providerConfigPresent:e.providerConfigPresent,groupPolicy:e.groupPolicy,defaultGroupPolicy:e.defaultGroupPolicy,configuredFallbackPolicy:`allowlist`,missingProviderFallbackPolicy:`allowlist`})}const Tr=new Set;function Er(e){if(!e.providerMissingFallbackApplied)return!1;let t=`${e.providerKey}:${e.accountId??`*`}`;if(Tr.has(t))return!1;Tr.add(t);let n=e.blockedLabel?.trim()||`group messages`;return e.log(`${e.providerKey}: channels.${e.providerKey} is missing; defaulting groupPolicy to "allowlist" (${n} blocked until explicitly configured).`),!0}function Dr(){let t=A.string().regex(fe,`Secret reference provider must match /^[a-z][a-z0-9_-]{0,63}$/ (example: "default").`);return A.union([A.string(),A.discriminatedUnion(`source`,[A.object({source:A.literal(`env`),provider:t,id:A.string().regex(ze,`Env secret reference id must match /^[A-Z][A-Z0-9_]{0,127}$/ (example: "OPENAI_API_KEY").`)}),A.object({source:A.literal(`file`),provider:t,id:A.string().refine(e,`File secret reference id must be an absolute JSON pointer (example: "/providers/openai/apiKey"), or "value" for singleValue mode.`)}),A.object({source:A.literal(`exec`),provider:t,id:A.string().refine(ie,me())})])])}function Or(e,t){let n=Math.max(0,Math.floor(t));if(n<=0){e.clear();return}for(;e.size>n;){let t=e.keys().next();if(t.done)break;e.delete(t.value)}}function kr(e){let t=Math.max(0,e.ttlMs),n=Math.max(0,Math.floor(e.maxSize)),r=new Map,i=(e,t)=>{r.delete(e),r.set(e,t)},a=e=>{let i=t>0?e-t:void 0;if(i!==void 0)for(let[e,t]of r)t<i&&r.delete(e);if(n<=0){r.clear();return}Or(r,n)},o=(e,n,a)=>{let o=r.get(e);return o===void 0?!1:t>0&&n-o>=t?(r.delete(e),!1):(a&&i(e,n),!0)};return{check:(e,t=Date.now())=>e?o(e,t,!0)?!0:(i(e,t),a(t),!1):!1,peek:(e,t=Date.now())=>e?o(e,t,!1):!1,clear:()=>{r.clear()},size:()=>r.size}}function Ar(e){let t=e.registry??Ue(),n=t.httpRoutes??[];t.httpRoutes=n;let r=Ne(e.path,e.fallbackPath),i=e.accountId?` for account "${e.accountId}"`:``;if(!r)return e.log?.(`plugin: webhook path missing${i}`),()=>{};let a=e.match??`exact`,o=Ye(n,{path:r,match:a});if(o&&o.auth!==e.auth)return e.log?.(`plugin: route overlap denied at ${r} (${a}, ${e.auth})${i}; overlaps ${o.path} (${o.match}, ${o.auth}) owned by ${o.pluginId??`unknown-plugin`} (${o.source??`unknown-source`})`),()=>{};let s=n.findIndex(e=>e.path===r&&e.match===a);if(s>=0){let t=n[s];if(!t)return()=>{};if(!e.replaceExisting)return e.log?.(`plugin: route conflict at ${r} (${a})${i}; owned by ${t.pluginId??`unknown-plugin`} (${t.source??`unknown-source`})`),()=>{};if(t.pluginId&&e.pluginId&&t.pluginId!==e.pluginId)return e.log?.(`plugin: route replacement denied for ${r} (${a})${i}; owned by ${t.pluginId}`),()=>{};let o=e.pluginId?` (${e.pluginId})`:``;e.log?.(`plugin: replacing stale webhook path ${r} (${a})${i}${o}`),n.splice(s,1)}let c={path:r,handler:e.handler,auth:e.auth,match:a,pluginId:e.pluginId,source:e.source};return n.push(c),()=>{let e=n.indexOf(c);e>=0&&n.splice(e,1)}}function jr(e){return{success:!1,error:{issues:[{path:[],message:e}]}}}function Mr(){return{safeParse(e){return e===void 0?{success:!0,data:void 0}:!e||typeof e!=`object`||Array.isArray(e)?jr(`expected config object`):Object.keys(e).length>0?jr(`config must be empty`):{success:!0,data:e}},jsonSchema:{type:`object`,additionalProperties:!1,properties:{}}}}function Nr(e){let t=e.dmPolicy===`allowlist`?[]:e.storeAllowFrom??[];return[...e.allowFrom??[],...t].map(e=>String(e).trim()).filter(Boolean)}function Pr(e){return((Array.isArray(e.groupAllowFrom)&&e.groupAllowFrom.length>0?e.groupAllowFrom:void 0)||(e.fallbackToAllowFrom===!1?[]:e.allowFrom??[])).map(e=>String(e).trim()).filter(Boolean)}function Fr(e){return m(e)?.pairing??null}async function Ir(e,t){try{let n=rt(await D.promises.readFile(e,`utf-8`));return n==null?{value:t,exists:!0}:{value:n,exists:!0}}catch(e){return e.code,{value:t,exists:!1}}}const Lr=new Map;function Rr(e=process.env){return Fe(e,v(e,()=>te(e,at.homedir)))}function zr(e){let t=String(e).trim().toLowerCase();if(!t)throw Error(`invalid pairing channel`);let n=t.replace(/[\\/:*?"<>|]/g,`_`).replace(/\.\./g,`_`);if(!n||n===`_`)throw Error(`invalid pairing channel`);return n}function Br(e){let t=String(e).trim().toLowerCase();if(!t)throw Error(`invalid pairing account id`);let n=t.replace(/[\\/:*?"<>|]/g,`_`).replace(/\.\./g,`_`);if(!n||n===`_`)throw Error(`invalid pairing account id`);return n}function q(e,t=process.env,n){let r=zr(e),i=typeof n==`string`?n.trim():``;return i?O.join(Rr(t),`${r}-${Br(i)}-allowFrom.json`):O.join(Rr(t),`${r}-allowFrom.json`)}async function Vr(e,t){return await Ir(e,t)}function Hr(e){return e?.trim().toLowerCase()||``}function Ur(e){return!e||e===`default`}function Wr(e){return Hr(e)||`default`}function Gr(e,t){let n=t.trim();if(!n||n===`*`)return``;let r=Fr(e),i=r?.normalizeAllowEntry?r.normalizeAllowEntry(n):n;return String(i).trim()}function Kr(e,t){return qr((Array.isArray(t.allowFrom)?t.allowFrom:[]).map(t=>Gr(e,String(t))).filter(Boolean))}function qr(e){let t=new Set,n=[];for(let r of e){let e=String(r).trim();!e||t.has(e)||(t.add(e),n.push(e))}return n}async function J(e,t){return(await Qr(e,t)).entries}function Jr(e){return{exists:e.exists,mtimeMs:e.mtimeMs,size:e.size,entries:e.entries.slice()}}function Yr(e,t){Lr.set(e,Jr(t))}function Xr(e){let t=Lr.get(e.filePath);return!t||t.exists!==e.exists||e.exists&&(t.mtimeMs!==e.mtimeMs||t.size!==e.size)?null:Jr(t)}function Zr(e,t){let n=Xr({filePath:e,exists:!!t,mtimeMs:t?.mtimeMs??null,size:t?.size??null});return n?{entries:n.entries,exists:n.exists}:t?null:(Yr(e,{exists:!1,mtimeMs:null,size:null,entries:[]}),{entries:[],exists:!1})}async function Qr(e,t){let n=null;try{n=await D.promises.stat(t)}catch(e){if(e.code!==`ENOENT`)throw e}let r=Zr(t,n);if(r)return r;if(!n)return{entries:[],exists:!1};let{value:i,exists:a}=await Vr(t,{version:1,allowFrom:[]}),o=Kr(e,i);return Yr(t,{exists:a,mtimeMs:n.mtimeMs,size:n.size,entries:o}),{entries:o,exists:a}}async function $r(e){let t=q(e.channel,e.env,e.accountId);return await J(e.channel,t)}async function ei(e,t=process.env,n){let r=Wr(n);if(!Ur(r))return await $r({channel:e,env:t,accountId:r});let i=await J(e,q(e,t,r)),a=await J(e,q(e,t));return qr([...i,...a])}function ti(e){if(e.groupPolicy===`disabled`)return{allowed:!1,groupPolicy:e.groupPolicy,reason:`disabled`};if(e.groupPolicy===`allowlist`){if(e.requireMatchInput&&!e.hasMatchInput)return{allowed:!1,groupPolicy:e.groupPolicy,reason:`missing_match_input`};if(!e.allowlistConfigured)return{allowed:!1,groupPolicy:e.groupPolicy,reason:`empty_allowlist`};if(!e.allowlistMatched)return{allowed:!1,groupPolicy:e.groupPolicy,reason:`not_allowlisted`}}return{allowed:!0,groupPolicy:e.groupPolicy,reason:`allowed`}}function ni(e){if(e.groupPolicy===`disabled`)return{allowed:!1,groupPolicy:e.groupPolicy,providerMissingFallbackApplied:!!e.providerMissingFallbackApplied,reason:`disabled`};if(e.groupPolicy===`allowlist`){if(e.groupAllowFrom.length===0)return{allowed:!1,groupPolicy:e.groupPolicy,providerMissingFallbackApplied:!!e.providerMissingFallbackApplied,reason:`empty_allowlist`};if(!e.isSenderAllowed(e.senderId,e.groupAllowFrom))return{allowed:!1,groupPolicy:e.groupPolicy,providerMissingFallbackApplied:!!e.providerMissingFallbackApplied,reason:`sender_not_allowlisted`}}return{allowed:!0,groupPolicy:e.groupPolicy,providerMissingFallbackApplied:!!e.providerMissingFallbackApplied,reason:`allowed`}}function ri(e){let t=Array.isArray(e.allowFrom)?e.allowFrom:void 0,n=Array.isArray(e.groupAllowFrom)?e.groupAllowFrom:void 0;return{effectiveAllowFrom:S(Nr({allowFrom:t,storeAllowFrom:Array.isArray(e.storeAllowFrom)?e.storeAllowFrom:void 0,dmPolicy:e.dmPolicy??void 0})),effectiveGroupAllowFrom:S(Pr({allowFrom:t,groupAllowFrom:n,fallbackToAllowFrom:e.groupAllowFromFallbackToAllowFrom??void 0}))}}const Y={GROUP_POLICY_ALLOWED:`group_policy_allowed`,GROUP_POLICY_DISABLED:`group_policy_disabled`,GROUP_POLICY_EMPTY_ALLOWLIST:`group_policy_empty_allowlist`,GROUP_POLICY_NOT_ALLOWLISTED:`group_policy_not_allowlisted`,DM_POLICY_OPEN:`dm_policy_open`,DM_POLICY_DISABLED:`dm_policy_disabled`,DM_POLICY_ALLOWLISTED:`dm_policy_allowlisted`,DM_POLICY_PAIRING_REQUIRED:`dm_policy_pairing_required`,DM_POLICY_NOT_ALLOWLISTED:`dm_policy_not_allowlisted`};async function ii(e){return e.shouldRead===!1||e.dmPolicy===`allowlist`?[]:await(e.readStore??((e,t)=>ei(e,process.env,t)))(e.provider,e.accountId).catch(()=>[])}function ai(e){let t=e.dmPolicy??`pairing`,n=e.groupPolicy===`open`||e.groupPolicy===`disabled`?e.groupPolicy:`allowlist`,r=S(e.effectiveAllowFrom),i=S(e.effectiveGroupAllowFrom);if(e.isGroup){let t=ti({groupPolicy:n,allowlistConfigured:i.length>0,allowlistMatched:e.isSenderAllowed(i)});if(!t.allowed){if(t.reason===`disabled`)return{decision:`block`,reasonCode:Y.GROUP_POLICY_DISABLED,reason:`groupPolicy=disabled`};if(t.reason===`empty_allowlist`)return{decision:`block`,reasonCode:Y.GROUP_POLICY_EMPTY_ALLOWLIST,reason:`groupPolicy=allowlist (empty allowlist)`};if(t.reason===`not_allowlisted`)return{decision:`block`,reasonCode:Y.GROUP_POLICY_NOT_ALLOWLISTED,reason:`groupPolicy=allowlist (not allowlisted)`}}return{decision:`allow`,reasonCode:Y.GROUP_POLICY_ALLOWED,reason:`groupPolicy=${n}`}}return t===`disabled`?{decision:`block`,reasonCode:Y.DM_POLICY_DISABLED,reason:`dmPolicy=disabled`}:t===`open`?{decision:`allow`,reasonCode:Y.DM_POLICY_OPEN,reason:`dmPolicy=open`}:e.isSenderAllowed(r)?{decision:`allow`,reasonCode:Y.DM_POLICY_ALLOWLISTED,reason:`dmPolicy=${t} (allowlisted)`}:t===`pairing`?{decision:`pairing`,reasonCode:Y.DM_POLICY_PAIRING_REQUIRED,reason:`dmPolicy=pairing (not allowlisted)`}:{decision:`block`,reasonCode:Y.DM_POLICY_NOT_ALLOWLISTED,reason:`dmPolicy=${t} (not allowlisted)`}}function oi(e){let{effectiveAllowFrom:t,effectiveGroupAllowFrom:n}=ri({allowFrom:e.allowFrom,groupAllowFrom:e.groupAllowFrom,storeAllowFrom:e.storeAllowFrom,dmPolicy:e.dmPolicy,groupAllowFromFallbackToAllowFrom:e.groupAllowFromFallbackToAllowFrom});return{...ai({isGroup:e.isGroup,dmPolicy:e.dmPolicy,groupPolicy:e.groupPolicy,effectiveAllowFrom:t,effectiveGroupAllowFrom:n,isSenderAllowed:e.isSenderAllowed}),effectiveAllowFrom:t,effectiveGroupAllowFrom:n}}function si(e){let t=e[0],n=e.map(e=>e.path),r=e.map(e=>e.contentType).filter(Boolean);return{MediaPath:t?.path,MediaType:t?.contentType??void 0,MediaUrl:t?.path,MediaPaths:n.length>0?n:void 0,MediaUrls:n.length>0?n:void 0,MediaTypes:r.length>0?r:void 0}}function ci(){this.abort()}function li(e){return ci.bind(e)}const X={STRICT:`strict`,TRUSTED_ENV_PROXY:`trusted_env_proxy`},ui=new Set([`accept`,`accept-encoding`,`accept-language`,`cache-control`,`content-language`,`content-type`,`if-match`,`if-modified-since`,`if-none-match`,`if-unmodified-since`,`pragma`,`range`,`user-agent`]);function di(e){return{...e,mode:X.STRICT}}function fi(e){return e.mode?e.mode:e.proxy===`env`&&e.dangerouslyAllowEnvProxyWithoutPinnedDns===!0?X.TRUSTED_ENV_PROXY:X.STRICT}function pi(e){return e===301||e===302||e===303||e===307||e===308}function mi(e){if(!e?.headers)return e;let t=new Headers(e.headers),n=new Headers;for(let[e,r]of t.entries())ui.has(e.toLowerCase())&&n.set(e,r);return{...e,headers:n}}function hi(e){let{timeoutMs:t,signal:n}=e;if(!t&&!n)return{signal:void 0,cleanup:()=>{}};if(!t)return{signal:n,cleanup:()=>{}};let r=new AbortController,i=setTimeout(r.abort.bind(r),t),a=li(r);return n&&(n.aborted?r.abort():n.addEventListener(`abort`,a,{once:!0})),{signal:r.signal,cleanup:()=>{clearTimeout(i),n&&n.removeEventListener(`abort`,a)}}}async function gi(e){let t=e.fetchImpl??globalThis.fetch;if(!t)throw Error(`fetch is not available`);let n=typeof e.maxRedirects==`number`&&Number.isFinite(e.maxRedirects)?Math.max(0,Math.floor(e.maxRedirects)):3,r=fi(e),{signal:i,cleanup:a}=hi({timeoutMs:e.timeoutMs,signal:e.signal}),s=!1,l=async e=>{s||(s=!0,a(),await c(e??void 0))},u=new Set,d=e.url,f=e.init?{...e.init}:void 0,p=0;for(;;){let a;try{a=new URL(d)}catch{throw await l(),Error(`Invalid URL: must be http or https`)}if(![`http:`,`https:`].includes(a.protocol))throw await l(),Error(`Invalid URL: must be http or https`);let s=null;try{let m=await ne(a.hostname,{lookupFn:e.lookupFn,policy:e.policy});r===X.TRUSTED_ENV_PROXY&&nt()?s=new st:e.pinDns!==!1&&(s=o(m));let h={...f?{...f}:{},redirect:`manual`,...s?{dispatcher:s}:{},...i?{signal:i}:{}},g=await t(a.toString(),h);if(pi(g.status)){let e=g.headers.get(`location`);if(!e)throw await l(s),Error(`Redirect missing location header (${g.status})`);if(p+=1,p>n)throw await l(s),Error(`Too many redirects (limit: ${n})`);let t=new URL(e,a),r=t.toString();if(u.has(r))throw await l(s),Error(`Redirect loop detected`);t.origin!==a.origin&&(f=mi(f)),u.add(r),g.body?.cancel(),await c(s),d=r;continue}return{response:g,finalUrl:d,release:async()=>l(s)}}catch(t){throw t instanceof ce&&re(`security: blocked URL fetch (${e.auditContext??`url-fetch`}) target=${a.origin}${a.pathname} reason=${t.message}`),await l(s),t}}}async function _i(e,t){let n,r=!1;return await new Promise((i,a)=>{let o=()=>{n!==void 0&&(clearTimeout(n),n=void 0)};n=setTimeout(()=>{r=!0,o(),e.cancel().catch(()=>void 0),a(Error(`Media download stalled: no data received for ${t}ms`))},t),e.read().then(e=>{o(),r||i(e)},e=>{o(),r||a(e)})})}async function vi(e,t,n){let r=n?.onOverflow??(e=>Error(`Content too large: ${e.size} bytes (limit: ${e.maxBytes} bytes)`)),i=n?.chunkTimeoutMs,a=e.body;if(!a||typeof a.getReader!=`function`){let n=Buffer.from(await e.arrayBuffer());if(n.length>t)throw r({size:n.length,maxBytes:t,res:e});return n}let o=a.getReader(),s=[],c=0;try{for(;;){let{done:n,value:a}=i?await _i(o,i):await o.read();if(n)break;if(a?.length){if(c+=a.length,c>t){try{await o.cancel()}catch{}throw r({size:c,maxBytes:t,res:e})}s.push(a)}}}finally{try{o.releaseLock()}catch{}}return Buffer.concat(s.map(e=>Buffer.from(e)),c)}var Z=class extends Error{constructor(e,t){super(t),this.code=e,this.name=`MediaFetchError`}};function yi(e){return e.replace(/^["']|["']$/g,``)}function bi(e){if(!e)return;let t=/filename\*\s*=\s*([^;]+)/i.exec(e);if(t?.[1]){let e=yi(t[1].trim()),n=e.split(`''`).slice(1).join(`''`)||e;try{return O.basename(decodeURIComponent(n))}catch{return O.basename(n)}}let n=/filename\s*=\s*([^;]+)/i.exec(e);if(n?.[1])return O.basename(yi(n[1].trim()))}async function xi(e,t=200){try{let n=await e.text();if(!n)return;let r=n.replace(/\s+/g,` `).trim();return r?r.length<=t?r:`${r.slice(0,t)}…`:void 0}catch{return}}async function Si(e){let{url:t,fetchImpl:n,requestInit:r,filePathHint:i,maxBytes:a,maxRedirects:o,readIdleTimeoutMs:s,ssrfPolicy:c,lookupFn:l}=e,u,d=t,f=null;try{let e=await gi(di({url:t,fetchImpl:n,init:r,maxRedirects:o,policy:c,lookupFn:l}));u=e.response,d=e.finalUrl,f=e.release}catch(e){throw new Z(`fetch_failed`,`Failed to fetch media from ${t}: ${String(e)}`)}try{if(!u.ok){let e=u.statusText?` ${u.statusText}`:``,n=d===t?``:` (redirected to ${d})`,r=`HTTP ${u.status}${e}`;if(!u.body)r=`HTTP ${u.status}${e}; empty response body`;else{let e=await xi(u);e&&(r+=`; body: ${e}`)}throw new Z(`http_error`,`Failed to fetch media from ${t}${n}: ${r}`)}let e=u.headers.get(`content-length`);if(a&&e){let n=Number(e);if(Number.isFinite(n)&&n>a)throw new Z(`max_bytes`,`Failed to fetch media from ${t}: content length ${n} exceeds maxBytes ${a}`)}let n;try{n=a?await vi(u,a,{onOverflow:({maxBytes:e,res:n})=>new Z(`max_bytes`,`Failed to fetch media from ${n.url||t}: payload exceeds maxBytes ${e}`),chunkTimeoutMs:s}):Buffer.from(await u.arrayBuffer())}catch(e){throw e instanceof Z?e:new Z(`fetch_failed`,`Failed to fetch media from ${u.url||t}: ${String(e)}`)}let r;try{let e=new URL(d);r=O.basename(e.pathname)||void 0}catch{}let o=bi(u.headers.get(`content-disposition`)),c=o||r||(i?O.basename(i):void 0),l=o&&O.extname(o)?o:i??d,f=await x({buffer:n,headerMime:u.headers.get(`content-type`),filePath:l});if(c&&!O.extname(c)&&f){let e=T(f);e&&(c=`${c}${e}`)}return{buffer:n,contentType:f??void 0,fileName:c}}finally{f&&await f()}}let Ci;function wi(){return Ci||=Le(),Ci}function Ti(e,t={}){let n=O.resolve(e);return[t.preferredTmpDir??wi(),O.join(n,`media`),O.join(n,`agents`),O.join(n,`workspace`),O.join(n,`sandboxes`)]}function Ei(){return Ti(v())}function Di(e){return typeof e.maxBytesOrOptions==`number`||e.maxBytesOrOptions===void 0?{maxBytes:e.maxBytesOrOptions,optimizeImages:e.optimizeImages,ssrfPolicy:e.options?.ssrfPolicy,localRoots:e.options?.localRoots}:{...e.maxBytesOrOptions,optimizeImages:e.optimizeImages?e.maxBytesOrOptions.optimizeImages??!0:!1}}var Q=class extends Error{constructor(e,t,n){super(t,n),this.code=e,this.name=`LocalMediaAccessError`}};function Oi(){return Ei()}async function ki(e,t){if(t===`any`)return;let n=t??Oi(),r;try{r=await k.realpath(e)}catch{r=O.resolve(e)}if(t===void 0){let t=n.find(e=>O.basename(e)===`workspace`);if(t){let n=O.dirname(t),i=O.relative(n,r);if(i&&!i.startsWith(`..`)&&!O.isAbsolute(i)&&(i.split(O.sep)[0]??``).startsWith(`workspace-`))throw new Q(`path-not-allowed`,`Local media path is not under an allowed directory: ${e}`)}}for(let e of n){let t;try{t=await k.realpath(e)}catch{t=O.resolve(e)}if(t===O.parse(t).root)throw new Q(`invalid-root`,`Invalid localRoots entry (refuses filesystem root): ${e}. Pass a narrower directory.`);if(r===t||r.startsWith(t+O.sep))return}throw new Q(`path-not-allowed`,`Local media path is not under an allowed directory: ${e}`)}const Ai=/^image\/hei[cf]$/i,ji=/\.(heic|heif)$/i;function $(e,t=2){return(e/1048576).toFixed(t)}function Mi(e,t,n){return`${e} exceeds ${$(t,0)}MB limit (got ${$(n)}MB)`}function Ni(e,t,n){return`${e} could not be reduced below ${$(t,0)}MB (got ${$(n)}MB)`}function Pi(e){return!!(e.contentType&&Ai.test(e.contentType.trim())||e.fileName&&ji.test(e.fileName.trim()))}function Fi(e){if(!e)return;let t=e.trim();if(!t)return e;let n=O.parse(t);return!n.ext||ji.test(n.ext)?O.format({dir:n.dir,name:n.name||t,ext:`.jpg`}):O.format({dir:n.dir,name:n.name,ext:`.jpg`})}function Ii(e){if(y()&&!(e.optimized.optimizedSize>=e.originalSize)){if(e.optimized.format===`png`){s(`Optimized PNG (preserving alpha) from ${$(e.originalSize)}MB to ${$(e.optimized.optimizedSize)}MB (side≤${e.optimized.resizeSide}px)`);return}s(`Optimized media from ${$(e.originalSize)}MB to ${$(e.optimized.optimizedSize)}MB (side≤${e.optimized.resizeSide}px, q=${e.optimized.quality})`)}}async function Li(e){let{buffer:t,cap:n,meta:r}=e;if((r?.contentType===`image/png`||r?.fileName?.toLowerCase().endsWith(`.png`))&&await Be(t)){let e=await Ae(t,n);if(e.buffer.length<=n)return{...e,format:`png`};y()&&s(`PNG with alpha still exceeds ${$(n,0)}MB after optimization; falling back to JPEG`)}return{...await Bi(t,n,r),format:`jpeg`}}async function Ri(e,t={}){let{maxBytes:n,optimizeImages:r=!0,ssrfPolicy:a,localRoots:o,sandboxValidated:s=!1,readFile:c}=t;if(e=e.replace(/^\s*MEDIA\s*:\s*/i,``),e.startsWith(`file://`))try{e=ot(e)}catch{throw new Q(`invalid-file-url`,`Invalid file:// URL: ${e}`)}let l=async(e,t,n)=>{let r=e.length,i=await Li({buffer:e,cap:t,meta:n});if(Ii({originalSize:r,optimized:i}),i.buffer.length>t)throw Error(Ni(`Media`,t,i.buffer.length));let a=i.format===`png`?`image/png`:`image/jpeg`,o=i.format===`jpeg`&&n&&Pi(n)?Fi(n.fileName):n?.fileName;return{buffer:i.buffer,contentType:a,kind:`image`,fileName:o}},u=async e=>{let t=n===void 0?w(e.kind??`document`):n;if(e.kind===`image`){let n=e.contentType===`image/gif`;if(n||!r){if(e.buffer.length>t)throw Error(Mi(n?`GIF`:`Media`,t,e.buffer.length));return{buffer:e.buffer,contentType:e.contentType,kind:e.kind,fileName:e.fileName}}return{...await l(e.buffer,t,{contentType:e.contentType,fileName:e.fileName})}}if(e.buffer.length>t)throw Error(Mi(`Media`,t,e.buffer.length));return{buffer:e.buffer,contentType:e.contentType??void 0,kind:e.kind,fileName:e.fileName}};if(/^https?:\/\//i.test(e)){let t=w(`document`),{buffer:i,contentType:o,fileName:s}=await Si({url:e,maxBytes:n===void 0?t:r?Math.max(n,t):n,ssrfPolicy:a});return await u({buffer:i,contentType:o,kind:ye(o),fileName:s})}if(e.startsWith(`~`)&&(e=be(e)),(s||o===`any`)&&!c)throw new Q(`unsafe-bypass`,`Refusing localRoots bypass without readFile override. Use sandboxValidated with readFile, or pass explicit localRoots.`);s||o===`any`||await ki(e,o);let d;if(c)d=await c(e);else try{d=(await i({filePath:e})).buffer}catch(t){throw t instanceof oe?t.code===`not-found`?new Q(`not-found`,`Local media file not found: ${e}`,{cause:t}):t.code===`not-file`?new Q(`not-file`,`Local media path is not a file: ${e}`,{cause:t}):new Q(`invalid-path`,`Local media path is not safe to read: ${e}`,{cause:t}):t}let f=await x({buffer:d,filePath:e}),p=ye(f),m=O.basename(e)||void 0;if(m&&!O.extname(m)&&f){let e=T(f);e&&(m=`${m}${e}`)}return await u({buffer:d,contentType:f,kind:p,fileName:m})}async function zi(e,t,n){return await Ri(e,Di({maxBytesOrOptions:t,options:n,optimizeImages:!0}))}async function Bi(e,t,n={}){let r=e;if(Pi(n))try{r=await Ke(e)}catch(e){throw Error(`HEIC image conversion failed: ${String(e)}`,{cause:e})}let i=[2048,1536,1280,1024,800],a=[80,70,60,50,40],o=null;for(let e of i)for(let n of a)try{let i=await Oe({buffer:r,maxSide:e,quality:n,withoutEnlargement:!0}),a=i.length;if((!o||a<o.size)&&(o={buffer:i,size:a,resizeSide:e,quality:n}),a<=t)return{buffer:i,optimizedSize:a,resizeSide:e,quality:n}}catch{}if(o)return{buffer:o.buffer,optimizedSize:o.size,resizeSide:o.resizeSide,quality:o.quality};throw Error(`Failed to optimize image`)}async function Vi(e,t={}){return await zi(e,{maxBytes:t.maxBytes,localRoots:t.mediaLocalRoots})}function Hi(e){let t=C(e.accountId);return{accountId:t,readAllowFromStore:()=>e.core.channel.pairing.readAllowFromStore({channel:e.channel,accountId:t}),readStoreForDmPolicy:(t,n)=>e.core.channel.pairing.readAllowFromStore({channel:t,accountId:C(n)}),upsertPairingRequest:n=>e.core.channel.pairing.upsertPairingRequest({channel:e.channel,accountId:t,...n})}}export{ae as BlockStreamingCoalesceSchema,a as DEFAULT_ACCOUNT_ID,pt as DEFAULT_GROUP_HISTORY_LIMIT,Y as DM_GROUP_ACCESS_REASON,it as DmPolicySchema,r as GroupPolicySchema,de as MarkdownConfigSchema,Yn as applyAccountNameToChannelSection,Zn as applySetupAccountConfigPatch,si as buildAgentMediaPayload,Fn as buildChannelConfigSchema,sr as buildComputedAccountStatusSnapshot,Sn as buildModelsProviderData,yt as buildPendingHistoryContextFromMap,Dr as buildSecretInputSchema,tr as buildSingleChannelSecretPromptState,xt as clearHistoryEntriesIfEnabled,Se as createAccountListHelpers,ar as createAccountStatusSink,kr as createDedupeCache,_r as createReplyPrefixOptions,Hi as createScopedPairingAccess,br as createTypingCallbacks,Ge as deleteAccountFromConfigSection,Mr as emptyPluginConfigSchema,ni as evaluateSenderGroupAccessForPolicy,ct as formatInboundFromLabel,ve as formatPairingApproveHint,tt as hasConfiguredSecretInput,xr as isDangerousNameMatchingEnabled,Ie as isLoopbackHost,t as isTrustedProxyAddress,Bt as listSkillCommandsForAgents,Vi as loadOutboundMediaFromUrl,et as loadSessionStore,Ut as logInboundDrop,Wt as logTypingFailure,Xn as migrateBaseNameToDefaultAccount,C as normalizeAccountId,b as normalizeProviderId,De as normalizeResolvedSecretInputString,qe as normalizeSecretInputString,Ce as parseStrictPositiveInteger,$n as promptAccountId,ir as promptSingleChannelSecretInput,he as rawDataToString,ii as readStoreAllowFromForDmPolicy,vt as recordPendingHistoryEntryIfEnabled,Ar as registerPluginHttpRoute,f as requireOpenAllowFrom,er as resolveAccountIdForConfigure,ft as resolveAllowlistMatchSimple,wr as resolveAllowlistProviderRuntimeGroupPolicy,Ln as resolveChannelMediaMaxBytes,Pe as resolveClientIp,Ht as resolveControlCommandGate,Cr as resolveDefaultGroupPolicy,oi as resolveDmGroupAccessWithLists,ri as resolveEffectiveAllowFromLists,Ee as resolveStorePath,Nn as resolveStoredModelOverride,se as resolveThreadSessionKeys,rr as runSingleChannelSecretStep,Ze as setAccountEnabledInConfigSection,Er as warnMissingProviderGroupPolicyFallbackOnce};
-//# sourceMappingURL=mattermost.js.map

package/dist/plugin-sdk/memory-core.cjs

@@ -1,2 +1 @@
 Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});function e(e){return{success:!1,error:{issues:[{path:[],message:e}]}}}function t(){return{safeParse(t){return t===void 0?{success:!0,data:void 0}:!t||typeof t!=`object`||Array.isArray(t)?e(`expected config object`):Object.keys(t).length>0?e(`config must be empty`):{success:!0,data:t}},jsonSchema:{type:`object`,additionalProperties:!1,properties:{}}}}exports.emptyPluginConfigSchema=t;
-//# sourceMappingURL=memory-core.cjs.map

package/dist/plugin-sdk/memory-core.js

@@ -1,2 +1 @@
 function e(e){return{success:!1,error:{issues:[{path:[],message:e}]}}}function t(){return{safeParse(t){return t===void 0?{success:!0,data:void 0}:!t||typeof t!=`object`||Array.isArray(t)?e(`expected config object`):Object.keys(t).length>0?e(`config must be empty`):{success:!0,data:t}},jsonSchema:{type:`object`,additionalProperties:!1,properties:{}}}}export{t as emptyPluginConfigSchema};
-//# sourceMappingURL=memory-core.js.map

package/dist/plugin-sdk/minimax-portal-auth.cjs

@@ -1,2 +1 @@
 Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require(`node:crypto`);function t(e){return{success:!1,error:{issues:[{path:[],message:e}]}}}function n(){return{safeParse(e){return e===void 0?{success:!0,data:void 0}:!e||typeof e!=`object`||Array.isArray(e)?t(`expected config object`):Object.keys(e).length>0?t(`config must be empty`):{success:!0,data:e}},jsonSchema:{type:`object`,additionalProperties:!1,properties:{}}}}function r(e){let t=e.email??void 0;return{profiles:[{profileId:`${e.profilePrefix??e.providerId}:${t??`default`}`,credential:{type:`oauth`,provider:e.providerId,access:e.access,...e.refresh?{refresh:e.refresh}:{},...Number.isFinite(e.expires)?{expires:e.expires}:{},...t?{email:t}:{},...e.credentialExtra}}],configPatch:e.configPatch??{agents:{defaults:{models:{[e.defaultModel]:{}}}}},defaultModel:e.defaultModel,notes:e.notes}}function i(e){return Object.entries(e).map(([e,t])=>`${encodeURIComponent(e)}=${encodeURIComponent(t)}`).join(`&`)}function a(){let t=(0,e.randomBytes)(32).toString(`base64url`);return{verifier:t,challenge:(0,e.createHash)(`sha256`).update(t).digest(`base64url`)}}exports.buildOauthProviderAuthResult=r,exports.emptyPluginConfigSchema=n,exports.generatePkceVerifierChallenge=a,exports.toFormUrlEncoded=i;
-//# sourceMappingURL=minimax-portal-auth.cjs.map

package/dist/plugin-sdk/minimax-portal-auth.js

@@ -1,2 +1 @@
 import{createHash as e,randomBytes as t}from"node:crypto";function n(e){return{success:!1,error:{issues:[{path:[],message:e}]}}}function r(){return{safeParse(e){return e===void 0?{success:!0,data:void 0}:!e||typeof e!=`object`||Array.isArray(e)?n(`expected config object`):Object.keys(e).length>0?n(`config must be empty`):{success:!0,data:e}},jsonSchema:{type:`object`,additionalProperties:!1,properties:{}}}}function i(e){let t=e.email??void 0;return{profiles:[{profileId:`${e.profilePrefix??e.providerId}:${t??`default`}`,credential:{type:`oauth`,provider:e.providerId,access:e.access,...e.refresh?{refresh:e.refresh}:{},...Number.isFinite(e.expires)?{expires:e.expires}:{},...t?{email:t}:{},...e.credentialExtra}}],configPatch:e.configPatch??{agents:{defaults:{models:{[e.defaultModel]:{}}}}},defaultModel:e.defaultModel,notes:e.notes}}function a(e){return Object.entries(e).map(([e,t])=>`${encodeURIComponent(e)}=${encodeURIComponent(t)}`).join(`&`)}function o(){let n=t(32).toString(`base64url`);return{verifier:n,challenge:e(`sha256`).update(n).digest(`base64url`)}}export{i as buildOauthProviderAuthResult,r as emptyPluginConfigSchema,o as generatePkceVerifierChallenge,a as toFormUrlEncoded};
-//# sourceMappingURL=minimax-portal-auth.js.map

package/dist/plugin-sdk/model-auth-1RA9nkQH.js

@@ -64,4 +64,3 @@ stat -c "%F|%s|%Y" -- "$2"`,args:[t.canonicalParentPath,t.basename],allowFailure
 `)}function oG(){try{if(bt(`which rg`,{encoding:`utf8`,stdio:[`ignore`,`pipe`,`ignore`],timeout:2e3}).trim())return}catch{}if(j.platform()===`darwin`)return{command:`/usr/bin/true`}}let sG=!1,cG=null;function lG(e,t){if(e===null)return!1;try{return JSON.stringify(e)===JSON.stringify(t)}catch{return!1}}let uG=null;async function dG(){return uG||=(await import(`@anthropic-ai/sandbox-runtime`)).SandboxManager,uG}const fG={network:{allowedDomains:[`github.com`,`*.github.com`,`*.githubusercontent.com`,`npmjs.org`,`*.npmjs.org`,`registry.npmjs.org`,`pypi.org`,`*.pypi.org`,`api.anthropic.com`,`*.openai.com`,`*.qq.com`,`*.imtt.qq.com`],deniedDomains:[],allowLocalBinding:!0},filesystem:{denyRead:[`~/.ssh`,`~/.gnupg`,`~/.aws/credentials`],allowWrite:[`.`,`/tmp`,`/private/tmp`,`/var/tmp`,`/private/var/tmp`],denyWrite:[`.env`,`.env.local`,`.env.production`]}};function pG(e,t){return e.map(e=>e===`.`?t?k.resolve(t):process.cwd():e===`~`||e.startsWith(`~/`)?k.resolve(j.homedir(),e.slice(e.startsWith(`~/`)?2:1)):e)}function mG(e,t){let n=oG(),r=n?{ripgrep:n}:{};if(!e)return{...fG,filesystem:{...fG.filesystem,allowWrite:pG(fG.filesystem?.allowWrite??[],t)},...r};let i=e.allowWrite??fG.filesystem?.allowWrite??[],a=e.allowedDomains?.includes(`*`);return{network:{allowedDomains:a?void 0:e.allowedDomains??fG.network?.allowedDomains??[],deniedDomains:a?[]:e.deniedDomains??fG.network?.deniedDomains??[],allowLocalBinding:e.allowLocalBinding??fG.network?.allowLocalBinding??!0,allowUnixSockets:e.allowUnixSockets},filesystem:{denyRead:e.denyRead??fG.filesystem?.denyRead??[],allowWrite:pG(i,t),denyWrite:e.denyWrite??fG.filesystem?.denyWrite??[]},...r}}async function hG(e){let t=e??mG();if(!(sG&&lG(cG,t)))try{await(await dG()).initialize(t,void 0,!0),sG=!0,cG=t,console.log(`[QBotClaw:SRT:Init] ✅ sandbox-runtime 初始化成功 | config=${JSON.stringify(t,null,2)}`),xG()}catch(e){let t=e instanceof Error?e.message:JSON.stringify(e);throw console.log(`[QBotClaw:SRT:Init] ❌ sandbox-runtime 初始化失败: ${t}`),e}}async function gG(e){sG||await hG();try{return await(await dG()).wrapWithSandbox(e)}catch(e){let t=e instanceof Error?e.message:JSON.stringify(e);throw console.log(`[QBotClaw:SRT:Exec] ❌ wrapWithSandbox 失败: ${t}`),e}}async function _G(){if(sG)try{await(await dG()).reset(),sG=!1,cG=null}catch(e){let t=e instanceof Error?e.message:JSON.stringify(e);console.log(`[QBotClaw:SRT:Cleanup] ❌ sandbox-runtime 重置失败: ${t}`)}}async function vG(e){if(!sG)return[];try{return(await dG()).getSandboxViolationStore().getViolationsForCommand(e)}catch{return[]}}async function yG(){if(sG)try{(await dG()).cleanupAfterCommand()}catch{}}let bG=!1;function xG(){if(!bG){bG=!0,process.on(`exit`,()=>{sG&&(console.log(`[QBotClaw:SRT:Cleanup] 🧹 进程退出，执行 SRT 清理...`),_G())});for(let e of[`SIGTERM`,`SIGINT`])process.on(e,()=>{_G().finally(()=>{process.kill(process.pid,e)})})}}async function SG(e,n,r){if(await M.mkdir(e,{recursive:!0}),n){let r=D(n),i=[S,we,ve,ce,xe,g,t];for(let t of i){let n=k.join(r,t),i=k.join(e,t);try{await M.access(i)}catch{try{let e=await Ee({absolutePath:n,rootPath:r,boundaryLabel:`sandbox seed workspace`});if(!e.ok)continue;try{let t=A.readFileSync(e.fd,`utf-8`);await M.writeFile(i,t,{encoding:`utf-8`,flag:`wx`})}finally{A.closeSync(e.fd)}}catch{}}}}await fe({dir:e,ensureBootstrapFiles:!r})}async function CG(e){let{cfg:t,rawSessionKey:n}=e,r=D(e.workspaceDir?.trim()||ee),i=D(t.workspaceRoot),a=PI(t.scope,n),o=t.scope===`shared`?i:NI(i,a),s=t.workspaceAccess===`rw`?r:o;if(s===o){if(await SG(o,r,e.config?.agents?.defaults?.skipBootstrap),t.workspaceAccess!==`rw`)try{await ZO({sourceWorkspaceDir:r,targetWorkspaceDir:o,config:e.config})}catch(e){let t=e instanceof Error?e.message:JSON.stringify(e);Re.error?.(`Sandbox skill sync failed: ${t}`)}}else await M.mkdir(s,{recursive:!0});return{agentWorkspaceDir:r,scopeKey:a,sandboxWorkspaceDir:o,workspaceDir:s}}async function wG(e){if(e.docker.user?.trim())return e.docker;let t=e.stat??(e=>M.stat(e));try{let n=await t(e.workspaceDir),r=Number.isInteger(n.uid)?n.uid:null,i=Number.isInteger(n.gid)?n.gid:null;return r===null||i===null||r<0||i<0?e.docker:{...e.docker,user:`${r}:${i}`}}catch{return e.docker}}function TG(e){let t=e.sessionKey?.trim();if(!t)return null;let n=iG({cfg:e.config,sessionKey:t});if(!n.sandboxed)return console.log(`[QBotClaw:Sandbox:Init] ❌ 沙箱未启用 | mode=${n.mode} | sessionKey=${t} | sandboxed=false`),null;let r=UT(e.config,n.agentId);return console.log(`[QBotClaw:Sandbox:Init] ✅ 沙箱已启用 | mode=${n.mode} | agentId=${n.agentId} | scope=${r.scope}`),{rawSessionKey:t,runtime:n,cfg:r}}async function EG(e){let t=TG(e);if(!t)return null;let{rawSessionKey:n,cfg:r}=t;if(r.runtime===`srt`){let t=D(e.workspaceDir?.trim()||ee);await M.mkdir(t,{recursive:!0});let i=e.config?.agents?.defaults?.sandbox?.srt,a=mG(i,t);try{await hG(a)}catch(e){let t=e instanceof Error?e.message:JSON.stringify(e);return console.log(`[QBotClaw:SRT:Init] ❌ SRT 初始化失败，回退到非沙箱模式: ${t}`),Re.error?.(`SRT sandbox initialization failed: ${t}`),null}let o={enabled:!0,runtime:`srt`,sessionKey:n,workspaceDir:t,agentWorkspaceDir:t,workspaceAccess:r.workspaceAccess===`none`?`rw`:r.workspaceAccess,containerName:`srt-sandbox-${n}`,containerWorkdir:t,docker:r.docker,tools:r.tools,browserAllowHostControl:r.browser.allowHostControl};if(i?.skillMounts!==!1){let n=[{hostRoot:t,containerRoot:t,writable:o.workspaceAccess===`rw`,source:`workspace`}];for(let e of r.docker.binds??[]){let t=e.split(`:`);if(t.length>=2&&t[0]&&t[1]){let e=D(t[0]);n.push({hostRoot:e,containerRoot:e,writable:!t[2]?.includes(`ro`),source:`bind`})}}let s=pG(i?.allowWrite??a.filesystem?.allowWrite??[],t),c=new Set(n.map(e=>e.hostRoot));for(let e of s){if(c.has(e))continue;let t=!1;for(let n of c)if(e.startsWith(n+k.sep)||e===n){t=!0;break}t||(c.add(e),n.push({hostRoot:e,containerRoot:e,writable:!0,source:`allowWrite`}))}let l=D(`~`);c.has(l)||(c.add(l),n.push({hostRoot:l,containerRoot:l,writable:!1,source:`bind`}));try{let r=JO(t,{config:e.config}),i=new Set;i.add(k.resolve(t));for(let e of r){let t=k.resolve(k.dirname(e.skill.baseDir));if(i.has(t))continue;let r=!1;for(let e of i)if(t.startsWith(e+k.sep)||t===e){r=!0;break}r||(i.add(t),n.push({hostRoot:t,containerRoot:t,writable:!1,source:`bind`}))}}catch(e){let t=e instanceof Error?e.message:JSON.stringify(e);console.log(`[QBotClaw:SRT:Init] ⚠️ Skills 源目录收集失败（非致命）: ${t}`),Re.error?.(`SRT sandbox skill mount collection failed: ${t}`)}o.fsBridge=xk({workspaceDir:t,containerWorkdir:t,mounts:n,denyReadPaths:(i?.denyRead??a.filesystem?.denyRead??[]).map(e=>D(e))})}else o.fsBridge=bk(t);return o}await eR(r);let{agentWorkspaceDir:i,scopeKey:a,workspaceDir:o}=await CG({cfg:r,rawSessionKey:n,config:e.config,workspaceDir:e.workspaceDir}),s=await wG({docker:r.docker,workspaceDir:o}),c=s===r.docker?r:{...r,docker:s},l=await wL({sessionKey:n,workspaceDir:o,agentWorkspaceDir:i,cfg:c});console.log(`[QBotClaw:Sandbox:Init] 🐳 沙箱容器就绪 | containerName=${l}`);let u=await IL({scopeKey:a,workspaceDir:o,agentWorkspaceDir:i,cfg:c,evaluateEnabled:e.config?.browser?.evaluateEnabled??!0,bridgeAuth:r.browser.enabled?await(async()=>{let t=e.config??LS(),n=FE(t);try{n=(await LE({cfg:t})).auth}catch(e){let t=e instanceof Error?e.message:JSON.stringify(e);Re.error?.(`Sandbox browser auth ensure failed: ${t}`)}return n})():void 0}),d={enabled:!0,runtime:`docker`,sessionKey:n,workspaceDir:o,agentWorkspaceDir:i,workspaceAccess:c.workspaceAccess,containerName:l,containerWorkdir:c.docker.workdir,docker:c.docker,tools:c.tools,browserAllowHostControl:c.browser.allowHostControl,browser:u??void 0};return d.fsBridge=GL({sandbox:d}),d}async function DG(e){let t=TG(e);if(!t)return null;let{rawSessionKey:n,cfg:r}=t,{workspaceDir:i}=await CG({cfg:r,rawSessionKey:n,config:e.config,workspaceDir:e.workspaceDir});return{workspaceDir:i,containerWorkdir:r.docker.workdir}}function OG(e){if(typeof e!=`object`||!e)return JSON.stringify(e)??`null`;if(Array.isArray(e))return`[${e.map(e=>OG(e)).join(`,`)}]`;let t=e;return`{${Object.keys(t).toSorted().map(e=>`${JSON.stringify(e)}:${OG(t[e])}`).join(`,`)}}`}const kG=/\b(?:daily|weekly|monthly)(?:\/(?:daily|weekly|monthly))* (?:usage )?limit(?:s)?(?: (?:exhausted|reached|exceeded))?\b/i,AG={rateLimit:[/rate[_ ]limit|too many requests|429/,`model_cooldown`,`exceeded your current quota`,`resource has been exhausted`,`quota exceeded`,`resource_exhausted`,`usage limit`,/\btpm\b/i,`tokens per minute`,`tokens per day`],overloaded:[/overloaded_error|"type"\s*:\s*"overloaded_error"/i,`overloaded`,/service[_ ]unavailable.*(?:overload|capacity|high[_ ]demand)|(?:overload|capacity|high[_ ]demand).*service[_ ]unavailable/i,`high demand`],timeout:[`timeout`,`timed out`,`service unavailable`,`deadline exceeded`,`context deadline exceeded`,`connection error`,`network error`,`network request failed`,`fetch failed`,`socket hang up`,/\beconn(?:refused|reset|aborted)\b/i,/\benotfound\b/i,/\beai_again\b/i,/without sending (?:any )?chunks?/i,/\bstop reason:\s*(?:abort|error|malformed_response)\b/i,/\breason:\s*(?:abort|error|malformed_response)\b/i,/\bunhandled stop reason:\s*(?:abort|error|malformed_response)\b/i],billing:[/["']?(?:status|code)["']?\s*[:=]\s*402\b|\bhttp\s*402\b|\berror(?:\s+code)?\s*[:=]?\s*402\b|\b(?:got|returned|received)\s+(?:a\s+)?402\b|^\s*402\s+payment/i,`payment required`,`insufficient credits`,/insufficient[_ ]quota/i,`credit balance`,`plans & billing`,`insufficient balance`,`insufficient usd or diem balance`],authPermanent:[/api[_ ]?key[_ ]?(?:revoked|invalid|deactivated|deleted)/i,`invalid_api_key`,`key has been disabled`,`key has been revoked`,`account has been deactivated`,/could not (?:authenticate|validate).*(?:api[_ ]?key|credentials)/i,`permission_error`,`not allowed for this organization`],auth:[/invalid[_ ]?api[_ ]?key/,`incorrect api key`,`invalid token`,`authentication`,`re-authenticate`,`oauth token refresh failed`,`unauthorized`,`forbidden`,`access denied`,`insufficient permissions`,`insufficient permission`,/missing scopes?:/i,`expired`,`token has expired`,/\b401\b/,/\b403\b/,`no credentials found`,`no api key found`],format:[`string should match pattern`,`tool_use.id`,`tool_use_id`,`messages.1.content.1.tool_use.id`,`invalid request format`,/tool call id was.*must be/i]},jG=/^(?:error[:\s-]+)?billing(?:\s+error)?(?:[:\s-]+|$)|^(?:error[:\s-]+)?(?:credit balance|insufficient credits?|payment required|http\s*402\b)/i,MG=/["']?(?:status|code)["']?\s*[:=]\s*402\b|\bhttp\s*402\b|\berror(?:\s+code)?\s*[:=]?\s*402\b|^\s*402\s+payment/i;function NG(e,t){if(!e)return!1;let n=e.toLowerCase();return t.some(e=>e instanceof RegExp?e.test(n):n.includes(e))}function PG(e){return NG(e,AG.format)}function FG(e){return NG(e,AG.rateLimit)}function IG(e){return NG(e,AG.timeout)}function LG(e){return kG.test(e)}function RG(e){let t=e.toLowerCase();return t?e.length>512?MG.test(t):NG(t,AG.billing)?!0:jG.test(e)?t.includes(`upgrade`)||t.includes(`credits`)||t.includes(`payment`)||t.includes(`plan`):!1:!1}function zG(e){return NG(e,AG.authPermanent)}function BG(e){return NG(e,AG.auth)}function VG(e){return NG(e,AG.overloaded)}const HG=T(`errors`);function UG(e,t){let n=e?.trim(),r=t?.trim(),i=n&&r?`${n} (${r})`:n||void 0;return i?`⚠️ ${i} returned a billing error — your API key has run out of credits or has an insufficient balance. Check your ${n} billing dashboard and top up or switch to a different API key.`:`⚠️ API provider returned a billing error — your API key has run out of credits or has an insufficient balance. Check your provider's billing dashboard and top up or switch to a different API key.`}const WG=UG();function GG(e){if(FG(e))return`⚠️ API rate limit reached. Please try again later.`;if(VG(e))return`The AI service is temporarily overloaded. Please try again in a moment.`}function KG(e){if(!e)return!1;let t=e.toLowerCase();return t.includes(`reasoning is mandatory`)||t.includes(`reasoning is required`)||t.includes(`requires reasoning`)||t.includes(`reasoning`)&&t.includes(`cannot be disabled`)}function qG(e){let t=e.toLowerCase();return/\btpm\b/i.test(t)||t.includes(`tokens per minute`)}function JG(e){if(!e)return!1;let t=e.toLowerCase();if(qG(e)||KG(e))return!1;let n=t.includes(`request size exceeds`),r=t.includes(`context window`)||t.includes(`context length`)||t.includes(`maximum context length`);return t.includes(`request_too_large`)||t.includes(`request exceeds the maximum size`)||t.includes(`context length exceeded`)||t.includes(`maximum context length`)||t.includes(`prompt is too long`)||t.includes(`exceeds model context window`)||t.includes(`model token limit`)||n&&r||t.includes(`context overflow:`)||t.includes(`exceed context limit`)||t.includes(`exceeds the model's maximum context`)||t.includes(`max_tokens`)&&t.includes(`exceed`)&&t.includes(`context`)||t.includes(`input length`)&&t.includes(`exceed`)&&t.includes(`context`)||t.includes(`is longer than`)&&r||t.includes(`413`)&&t.includes(`too large`)||t.includes(`context_window_exceeded`)||e.includes(`上下文过长`)||e.includes(`上下文超出`)||e.includes(`上下文长度超`)||e.includes(`超出最大上下文`)||e.includes(`请压缩上下文`)}const YG=/context window.*(too small|minimum is)/i,XG=/context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|prompt.*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:request|input).*(?:context|window|length|token).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:input|request).*(?:is longer|longer than).*(?:context|window|length)/i,ZG=/rate limit|too many requests|requests per (?:minute|hour|day)|quota|throttl|429\b|tokens per day/i;function QG(e){return!e||qG(e)||KG(e)||RG(e)||YG.test(e)||FG(e)?!1:JG(e)?!0:ZG.test(e)?!1:XG.test(e)}function $G(e){if(!e)return!1;let t=e.toLowerCase();return t.includes(`summarization failed`)||t.includes(`auto-compaction`)||t.includes(`compaction failed`)||t.includes(`compaction`)?QG(e)?!0:t.includes(`context overflow`):!1}const eK=/^(?:error|api\s*error|apierror|openai\s*error|anthropic\s*error|gateway\s*error)[:\s-]+/i,tK=/<\s*\/?\s*final\s*>/gi,nK=/^(?:error|api\s*error|openai\s*error|anthropic\s*error|gateway\s*error|request failed|failed|exception)[:\s-]+/i,rK=/^(?:context overflow:|request_too_large\b|request size exceeds\b|request exceeds the maximum size\b|context length exceeded\b|maximum context length\b|prompt is too long\b|exceeds model context window\b)/i,iK=/^(?:http\s*)?(\d{3})\s+(.+)$/i,aK=/^(?:http\s*)?(\d{3})(?:\s+([\s\S]+))?$/i,oK=/^\s*(?:<!doctype\s+html\b|<html\b)/i,sK=new Set([521,522,523,524,525,526,530]),cK=new Set([499,500,502,503,504,521,522,523,524,529]),lK=[`error`,`bad request`,`not found`,`unauthorized`,`forbidden`,`internal server`,`service unavailable`,`gateway`,`rate limit`,`overloaded`,`timeout`,`timed out`,`invalid`,`too many requests`,`permission`],uK=[`insufficient credits`,`insufficient quota`,`credit balance`,`insufficient balance`,`plans & billing`,`add more credits`,`top up`],dK=[`upgrade your plan`,`upgrade plan`,`current plan`,`subscription`],fK=[`daily`,`weekly`,`monthly`],pK=[`try again`,`retry`,`temporary`,`cooldown`],mK=[`usage limit`,`rate limit`,`organization usage`],hK=[`organization`,`workspace`],gK=[`billing period`,`exceeded`,`reached`,`exhausted`],_K=/["']?(?:status|code)["']?\s*[:=]\s*402\b|\bhttp\s*402\b|\berror(?:\s+code)?\s*[:=]?\s*402\b|\b(?:got|returned|received)\s+(?:a\s+)?402\b|^\s*402\s+payment required\b|^\s*402\s+.*used up your points\b/i,vK=/^(?:error[:\s-]+)?(?:(?:http\s*)?402(?:\s+payment required)?|payment required)(?:[:\s-]+|$)/i;function yK(e,t){return t.some(t=>e.includes(t))}function bK(e){return yK(e,uK)||yK(e,dK)&&e.includes(`limit`)||e.includes(`billing hard limit`)||e.includes(`hard limit reached`)||e.includes(`maximum allowed`)&&e.includes(`limit`)}function xK(e){let t=yK(e,fK),n=e.includes(`spend limit`)||e.includes(`spending limit`),r=yK(e,hK);return yK(e,pK)&&yK(e,mK)||t&&(e.includes(`usage limit`)||n)||t&&e.includes(`limit`)&&e.includes(`reset`)||r&&e.includes(`limit`)&&(n||yK(e,gK))}function SK(e){return e.trim().toLowerCase().replace(vK,``).trim()}function CK(e){let t=SK(e);return!t||bK(t)?`billing`:FG(t)||xK(t)?`rate_limit`:`billing`}function wK(e){return _K.test(e)?CK(e):null}function TK(e){let t=e.match(aK);if(!t)return null;let n=Number(t[1]);return Number.isFinite(n)?{code:n,rest:(t[2]??``).trim()}:null}function EK(e){let t=e.trim();if(!t)return!1;let n=TK(t);return!n||n.code<500?!1:sK.has(n.code)?!0:n.code<600&&oK.test(n.rest)&&/<\/html>/i.test(n.rest)}function DK(e){let t=e.trim();if(!t)return!1;let n=TK(t);return n?cK.has(n.code):!1}function OK(e,t){return typeof e!=`number`||!Number.isFinite(e)?null:e===402?t?CK(t):`billing`:e===429?`rate_limit`:e===401||e===403?t&&zG(t)?`auth_permanent`:`auth`:e===408?`timeout`:e===503||e===499?t&&VG(t)?`overloaded`:`timeout`:e===502||e===504?`timeout`:e===529?`overloaded`:e===400?t&&RG(t)?`billing`:`format`:null}function kK(e){return e&&e.replace(tK,``)}function AK(e){let t=e.trim();if(!t)return e;let n=t.split(/\n{2,}/);if(n.length<2)return e;let r=e=>e.trim().replace(/\s+/g,` `),i=[],a=null;for(let e of n){let t=r(e);a&&t===a||(i.push(e.trim()),a=t)}return i.length===n.length?e:i.join(`
 
 `)}function jK(e){if(EK(e))return!0;let t=e.match(iK);if(!t)return!1;let n=Number(t[1]);if(!Number.isFinite(n)||n<400)return!1;let r=t[2].toLowerCase();return lK.some(e=>r.includes(e))}function MK(e){return JG(e)?IK(e)||jK(e)||nK.test(e)||rK.test(e):!1}function NK(e){if(!e||typeof e!=`object`||Array.isArray(e))return!1;let t=e;if(t.type===`error`||typeof t.request_id==`string`||typeof t.requestId==`string`)return!0;if(`error`in t){let e=t.error;if(e&&typeof e==`object`&&!Array.isArray(e)){let t=e;if(typeof t.message==`string`||typeof t.type==`string`||typeof t.code==`string`)return!0}}return!1}function PK(e){if(!e)return null;let t=e.trim();if(!t)return null;let n=[t];eK.test(t)&&n.push(t.replace(eK,``).trim());for(let e of n)if(!(!e.startsWith(`{`)||!e.endsWith(`}`)))try{let t=JSON.parse(e);if(NK(t))return t}catch{}return null}function FK(e){if(!e)return null;let t=PK(e);return t?OG(t):null}function IK(e){return FK(e)!==null}function LK(e){if(!e)return null;let t=e.trim();if(!t)return null;let n,r=t,i=r.match(/^(\d{3})\s+(.+)$/s);i&&(n=i[1],r=i[2].trim());let a=PK(r);if(!a)return null;let o=typeof a.request_id==`string`?a.request_id:typeof a.requestId==`string`?a.requestId:void 0,s=typeof a.type==`string`?a.type:void 0,c=typeof a.message==`string`?a.message:void 0,l,u;if(a.error&&typeof a.error==`object`&&!Array.isArray(a.error)){let e=a.error;typeof e.type==`string`&&(l=e.type),typeof e.code==`string`&&!l&&(l=e.code),typeof e.message==`string`&&(u=e.message)}return{httpCode:n,type:l??s,message:u??c,requestId:o}}function RK(e){let t=(e??``).trim();if(!t)return`LLM request failed with an unknown error.`;let n=TK(t);if(n&&EK(t))return`The AI service is temporarily unavailable (HTTP ${n.code}). Please try again in a moment.`;let r=t.match(iK);if(r){let e=r[2].trim();if(!e.startsWith(`{`))return`HTTP ${r[1]}: ${e}`}let i=LK(t);if(i?.message){let e=i.httpCode?`HTTP ${i.httpCode}`:`LLM error`,t=i.type?` ${i.type}`:``,n=i.requestId?` (request_id: ${i.requestId})`:``;return`${e}${t}: ${i.message}${n}`}return t.length>600?`${t.slice(0,600)}…`:t}function zK(e,t){let n=(e.errorMessage??``).trim();if(e.stopReason!==`error`&&!n)return;if(!n)return`LLM request failed with an unknown error.`;let r=n.match(/unknown tool[:\s]+["']?([a-z0-9_-]+)["']?/i)??n.match(/tool\s+["']?([a-z0-9_-]+)["']?\s+(?:not found|is not available)/i);if(r?.[1]){let e=aG({cfg:t?.cfg,sessionKey:t?.sessionKey,toolName:r[1]});if(e)return e}if(JG(n))return`Context overflow: prompt too large for the model. Try /reset (or /new) to start a fresh session, or use a larger-context model.`;if(KG(n))return`Reasoning is required for this model endpoint. Use /think minimal (or any non-off level) and try again.`;if(/incorrect role information|roles must alternate|400.*role|"message".*role.*information/i.test(n))return`Message ordering conflict - please try again. If this persists, use /new to start a fresh session.`;if(qK(n))return`Session history looks corrupted (tool call input missing). Use /new to start a fresh session. If this keeps happening, reset the session or delete the corrupted session transcript.`;let i=n.match(/"type":"invalid_request_error".*?"message":"([^"]+)"/);return i?.[1]?`LLM request rejected: ${i[1]}`:GG(n)||(IG(n)?`LLM request timed out.`:RG(n)?UG(t?.provider,t?.model??e.model):jK(n)||IK(n)?RK(n):(n.length>600&&HG.warn(`Long error truncated: ${n.slice(0,200)}`),n.length>600?`${n.slice(0,600)}…`:n))}function BK(e,t){if(!e)return e;let n=t?.errorContext??!1,r=kK(e),i=r.trim();if(!i)return``;if(n){if(/incorrect role information|roles must alternate/i.test(i))return`Message ordering conflict - please try again. If this persists, use /new to start a fresh session.`;if(MK(i))return`Context overflow: prompt too large for the model. Try /reset (or /new) to start a fresh session, or use a larger-context model.`;if(RG(i))return WG;if(IK(i)||jK(i))return RK(i);if(nK.test(i))return GG(i)||(IG(i)?`LLM request timed out.`:RK(i))}return AK(r.replace(/^(?:[ \t]*\r?\n)+/,``))}function VK(e){return!e||e.stopReason!==`error`?!1:FG(e.errorMessage??``)}const HK=/tool_(?:use|call)\.(?:input|arguments).*?(?:field required|required)/i,UK=/messages\.\d+\.content\.\d+\.tool_(?:use|call)\.(?:input|arguments)/i,WK=/image dimensions exceed max allowed size for many-image requests:\s*(\d+)\s*pixels/i,GK=/messages\.(\d+)\.content\.(\d+)\.image/i,KK=/image exceeds\s*(\d+(?:\.\d+)?)\s*mb/i;function qK(e){return e?HK.test(e)||UK.test(e):!1}function JK(e){return!e||e.stopReason!==`error`?!1:RG(e.errorMessage??``)}function YK(e){if(!e)return!1;let t=e.toLowerCase();return t.includes(`"type":"api_error"`)&&t.includes(`internal server error`)}function XK(e){if(!e||!e.toLowerCase().includes(`image dimensions exceed max allowed size`))return null;let t=e.match(WK),n=e.match(GK);return{maxDimensionPx:t?.[1]?Number.parseInt(t[1],10):void 0,messageIndex:n?.[1]?Number.parseInt(n[1],10):void 0,contentIndex:n?.[2]?Number.parseInt(n[2],10):void 0,raw:e}}function ZK(e){return!!XK(e)}function QK(e){if(!e)return null;let t=e.toLowerCase();if(!t.includes(`image exceeds`)||!t.includes(`mb`))return null;let n=e.match(KK);return{maxMb:n?.[1]?Number.parseFloat(n[1]):void 0,raw:e}}function $K(e){return e?!!QK(e):!1}function eq(e){return!ZK(e)&&PG(e)}function tq(e){return!e||e.stopReason!==`error`?!1:BG(e.errorMessage??``)}function nq(e){if(!e)return!1;let t=e.toLowerCase();return!!(t.includes(`unknown model`)||t.includes(`model not found`)||t.includes(`model_not_found`)||t.includes(`not_found_error`)||t.includes(`does not exist`)&&t.includes(`model`)||t.includes(`invalid model`)&&!t.includes(`invalid model reference`)||/models\/[^\s]+ is not found/i.test(e)||/\b404\b/.test(e)&&/not[-_ ]?found/i.test(e))}function rq(e){if(!e)return!1;let t=e.toLowerCase();return t.includes(`session not found`)||t.includes(`session does not exist`)||t.includes(`session expired`)||t.includes(`session invalid`)||t.includes(`conversation not found`)||t.includes(`conversation does not exist`)||t.includes(`conversation expired`)||t.includes(`conversation invalid`)||t.includes(`no such session`)||t.includes(`invalid session`)||t.includes(`session id not found`)||t.includes(`conversation id not found`)}function iq(e){return ZK(e)||$K(e)?null:rq(e)?`session_expired`:nq(e)?`model_not_found`:wK(e)||(LG(e)?RG(e)?`billing`:`rate_limit`:FG(e)?`rate_limit`:VG(e)?`overloaded`:DK(e)?TK(e.trim())?.code===529?`overloaded`:`timeout`:YK(e)?`timeout`:eq(e)?`format`:RG(e)?`billing`:IG(e)?`timeout`:zG(e)?`auth_permanent`:BG(e)?`auth`:null)}function aq(e){return iq(e)!==null}function oq(e){return!e||e.stopReason!==`error`?!1:aq(e.errorMessage??``)}function sq(e){return e===`google-gemini-cli`||e===`google-generative-ai`}function cq(e){if(!e)return null;let t=null;if(typeof e==`string`){let n=e.trim();if(!n.startsWith(`{`)||!n.endsWith(`}`))return null;try{t=JSON.parse(n)}catch{return null}}else typeof e==`object`&&(t=e);if(!t)return null;let n=typeof t.id==`string`?t.id:``,r=typeof t.type==`string`?t.type:``;return n.startsWith(`rs_`)&&(r===`reasoning`||r.startsWith(`reasoning.`))?{id:n,type:r}:null}function lq(e,t){for(let n=t+1;n<e.length;n++){let t=e[n];if(!t||typeof t!=`object`||t.type!==`thinking`)return!0}return!1}function uq(e){let t=e.indexOf(`|`);return t<=0||t>=e.length-1?{callId:e}:{callId:e.slice(0,t),itemId:e.slice(t+1)}}function dq(e){return e===`toolCall`||e===`toolUse`||e===`functionCall`}function fq(e){let t=!1,n=[],r=null;for(let i of e){if(!i||typeof i!=`object`){r=null,n.push(i);continue}let e=i.role;if(e===`assistant`){let e=i;if(!Array.isArray(e.content)){r=null,n.push(i);continue}let a=new Map,o=!1,s=!1,c=e.content.map(e=>{if(!e||typeof e!=`object`)return e;let t=e;if(t.type===`thinking`&&cq(t.thinkingSignature))return o=!0,e;let n=e;if(!dq(n.type)||typeof n.id!=`string`)return e;let r=uq(n.id);return o||!r.itemId||!r.itemId.startsWith(`fc_`)?e:(s=!0,a.set(n.id,r.callId),{...e,id:r.callId})});if(r=a.size>0?a:null,!s){n.push(i);continue}t=!0,n.push({...e,content:c});continue}if(e===`toolResult`&&r&&r.size>0){let e=i,a=!1,o={};if(typeof e.toolCallId==`string`){let t=r.get(e.toolCallId);t&&t!==e.toolCallId&&(o.toolCallId=t,a=!0)}if(typeof e.toolUseId==`string`){let t=r.get(e.toolUseId);t&&t!==e.toolUseId&&(o.toolUseId=t,a=!0)}if(!a){n.push(i);continue}t=!0,n.push({...e,...o});continue}r=null,n.push(i)}return t?n:e}function pq(e){let t=[];for(let n of e){if(!n||typeof n!=`object`){t.push(n);continue}if(n.role!==`assistant`){t.push(n);continue}let e=n;if(!Array.isArray(e.content)){t.push(n);continue}let r=!1,i=[];for(let t=0;t<e.content.length;t++){let n=e.content[t];if(!n||typeof n!=`object`){i.push(n);continue}let a=n;if(a.type!==`thinking`){i.push(n);continue}if(!cq(a.thinkingSignature)){i.push(n);continue}if(lq(e.content,t)){i.push(n);continue}r=!0}if(!r){t.push(n);continue}i.length!==0&&t.push({...e,content:i})}return t}const mq=new Set([`toolCall`,`toolUse`,`functionCall`]);function hq(e,t=`strict`){if(!e||typeof e!=`string`)return t===`strict9`?`defaultid`:`defaulttoolid`;if(t===`strict9`){let t=e.replace(/[^a-zA-Z0-9]/g,``);return t.length>=9?t.slice(0,9):t.length>0?vq(t,9):vq(`sanitized`,9)}let n=e.replace(/[^a-zA-Z0-9]/g,``);return n.length>0?n:`sanitizedtoolid`}function gq(e){let t=e.content;if(!Array.isArray(t))return[];let n=[];for(let e of t){if(!e||typeof e!=`object`)continue;let t=e;typeof t.id!=`string`||!t.id||typeof t.type==`string`&&mq.has(t.type)&&n.push({id:t.id,name:typeof t.name==`string`?t.name:void 0})}return n}function _q(e){let t=e.toolCallId;if(typeof t==`string`&&t)return t;let n=e.toolUseId;return typeof n==`string`&&n?n:null}function vq(e,t=8){return kt(`sha256`).update(e).digest(`hex`).slice(0,t)}function yq(e){if(e.mode===`strict9`){let t=hq(e.id,e.mode),n=t.length>=9?t.slice(0,9):``;if(n&&!e.used.has(n))return n;for(let t=0;t<1e3;t+=1){let n=vq(`${e.id}:${t}`,9);if(!e.used.has(n))return n}return vq(`${e.id}:${Date.now()}`,9)}let t=hq(e.id,e.mode).slice(0,40);if(!e.used.has(t))return t;let n=vq(e.id),r=e.mode===`strict`?``:`_`,i=40-r.length-n.length,a=`${t.length>i?t.slice(0,i):t}${r}${n}`;if(!e.used.has(a))return a;for(let t=2;t<1e3;t+=1){let n=e.mode===`strict`?`x${t}`:`_${t}`,r=`${a.slice(0,40-n.length)}${n}`;if(!e.used.has(r))return r}let o=e.mode===`strict`?`t${Date.now()}`:`_${Date.now()}`;return`${a.slice(0,40-o.length)}${o}`}function bq(e){let t=e.message.content;if(!Array.isArray(t))return e.message;let n=!1,r=t.map(t=>{if(!t||typeof t!=`object`)return t;let r=t,i=r.type,a=r.id;if(i!==`functionCall`&&i!==`toolUse`&&i!==`toolCall`||typeof a!=`string`||!a)return t;let o=e.resolve(a);return o===a?t:(n=!0,{...t,id:o})});return n?{...e.message,content:r}:e.message}function xq(e){let t=typeof e.message.toolCallId==`string`&&e.message.toolCallId?e.message.toolCallId:void 0,n=e.message.toolUseId,r=typeof n==`string`&&n?n:void 0,i=t?e.resolve(t):void 0,a=r?e.resolve(r):void 0;return i===t&&a===r?e.message:{...e.message,...i&&{toolCallId:i},...a&&{toolUseId:a}}}function Sq(e,t=`strict`){let n=new Map,r=new Set,i=e=>{let i=n.get(e);if(i)return i;let a=yq({id:e,used:r,mode:t});return n.set(e,a),r.add(a),a},a=!1,o=e.map(e=>{if(!e||typeof e!=`object`)return e;let t=e.role;if(t===`assistant`){let t=bq({message:e,resolve:i});return t!==e&&(a=!0),t}if(t===`toolResult`){let t=xq({message:e,resolve:i});return t!==e&&(a=!0),t}return e});return a?o:e}function Cq(e){let t=0;for(let n=0;n<e.length;n+=1)e.charCodeAt(n)<=32||(t+=1);if(t===0)return 0;let n=0,r=e.length-1;for(;r>=0&&e.charCodeAt(r)<=32;)--r;if(r>=0&&e[r]===`=`){for(n=1,--r;r>=0&&e.charCodeAt(r)<=32;)--r;r>=0&&e[r]===`=`&&(n=2)}let i=Math.floor(t*3/4)-n;return Math.max(0,i)}const wq=/^[A-Za-z0-9+/]+={0,2}$/;function Tq(e){let t=e.replace(/\s+/g,``);if(!(!t||t.length%4!=0||!wq.test(t)))return t}function Eq(e){let t=e?.agents?.defaults?.imageMaxDimensionPx;return typeof t!=`number`||!Number.isFinite(t)?{}:{maxDimensionPx:Math.max(1,Math.floor(t))}}const Dq=T(`agents/tool-images`);function Oq(e){if(!e||typeof e!=`object`)return!1;let t=e;return t.type===`image`&&typeof t.data==`string`&&typeof t.mimeType==`string`}function kq(e){if(!e||typeof e!=`object`)return!1;let t=e;return t.type===`text`&&typeof t.text==`string`}function Aq(e){let t=e.trim();if(t){if(t.startsWith(`/9j/`))return`image/jpeg`;if(t.startsWith(`iVBOR`))return`image/png`;if(t.startsWith(`R0lGOD`))return`image/gif`}}function jq(e){return!Number.isFinite(e)||e<1024?`${Math.max(0,Math.round(e))}B`:e<1024*1024?`${(e/1024).toFixed(1)}KB`:`${(e/(1024*1024)).toFixed(2)}MB`}function Mq(e){for(let t of e.split(/\r?\n/u)){let e=t.trim();if(!e.startsWith(`MEDIA:`))continue;let n=e.slice(6).trim();if(n)return(n.match(/^`([^`]+)`$/u)?.[1]??n).trim()}}function Nq(e){let t=e.trim();if(!t)return;try{let e=new URL(t).pathname.split(`/`).filter(Boolean).at(-1);return e&&e.length>0?e:void 0}catch{}let n=t.replaceAll(`\\`,`/`).split(`/`).filter(Boolean).at(-1);return n&&n.length>0?n:void 0}function Pq(e){let t=e.block;for(let e of[`fileName`,`filename`,`path`,`url`]){let n=t[e];if(typeof n!=`string`||n.trim().length===0)continue;let r=Nq(n);if(r)return r}if(typeof t.name==`string`&&t.name.trim().length>0)return t.name.trim();if(e.mediaPathHint){let t=Nq(e.mediaPathHint);if(t)return t}if(typeof e.label==`string`&&e.label.startsWith(`read:`)){let t=Nq(e.label.slice(5));if(t)return t}}async function Fq(e){let t=Buffer.from(e.base64,`base64`),n=await zP(t),r=n?.width,i=n?.height,a=t.byteLength>e.maxBytes,o=typeof r==`number`&&typeof i==`number`,s=o&&(r>e.maxDimensionPx||i>e.maxDimensionPx);if(o&&!a&&r<=e.maxDimensionPx&&i<=e.maxDimensionPx)return{base64:e.base64,mimeType:e.mimeType,resized:!1,width:r,height:i};let c=o?Math.max(r??0,i??0):e.maxDimensionPx,l=c>0?Math.min(e.maxDimensionPx,c):e.maxDimensionPx,u=AP(e.maxDimensionPx,l),d=null;for(let n of u)for(let o of kP){let c=await VP({buffer:t,maxSide:n,quality:o,withoutEnlargement:!0});if((!d||c.byteLength<d.size)&&(d={buffer:c,size:c.byteLength}),c.byteLength<=e.maxBytes){let l=typeof r==`number`&&typeof i==`number`?`${r}x${i}px`:`unknown`,u=e.fileName?`${e.fileName} ${l}`:l,d=t.byteLength>0?Number(((t.byteLength-c.byteLength)/t.byteLength*100).toFixed(1)):0;return Dq.info(`Image resized to fit limits: ${u} ${jq(t.byteLength)} -> ${jq(c.byteLength)} (-${d}%)`,{label:e.label,fileName:e.fileName,sourceMimeType:e.mimeType,sourceWidth:r,sourceHeight:i,sourceBytes:t.byteLength,maxBytes:e.maxBytes,maxDimensionPx:e.maxDimensionPx,triggerOverBytes:a,triggerOverDimensions:s,outputMimeType:`image/jpeg`,outputBytes:c.byteLength,outputQuality:o,outputMaxSide:n,byteReductionPct:d}),{base64:c.toString(`base64`),mimeType:`image/jpeg`,resized:!0,width:r,height:i}}}let f=d?.buffer??t,p=(e.maxBytes/(1024*1024)).toFixed(0),m=(f.byteLength/(1024*1024)).toFixed(2),h=typeof r==`number`&&typeof i==`number`?`${r}x${i}px`:`unknown`,g=e.fileName?`${e.fileName} ${h}`:h;throw Dq.warn(`Image resize failed to fit limits: ${g} best=${jq(f.byteLength)} limit=${jq(e.maxBytes)}`,{label:e.label,fileName:e.fileName,sourceMimeType:e.mimeType,sourceWidth:r,sourceHeight:i,sourceBytes:t.byteLength,maxDimensionPx:e.maxDimensionPx,maxBytes:e.maxBytes,smallestCandidateBytes:f.byteLength,triggerOverBytes:a,triggerOverDimensions:s}),Error(`Image could not be reduced below ${p}MB (got ${m}MB)`)}async function Iq(e,t,n={}){let r=Math.max(n.maxDimensionPx??1200,1),i=Math.max(n.maxBytes??5242880,1),a=[],o;for(let n of e){if(kq(n)){let e=Mq(n.text);e&&(o=e)}if(!Oq(n)){a.push(n);continue}let e=n.data.trim();if(!e){a.push({type:`text`,text:`[${t}] omitted empty image payload`});continue}let s=Tq(e);if(!s){a.push({type:`text`,text:`[${t}] omitted image payload: invalid base64`});continue}try{let e=Aq(s)??n.mimeType,c=await Fq({base64:s,mimeType:e,maxDimensionPx:r,maxBytes:i,label:t,fileName:Pq({block:n,label:t,mediaPathHint:o})});a.push({...n,data:c.base64,mimeType:c.resized?c.mimeType:e})}catch(e){a.push({type:`text`,text:`[${t}] omitted image payload: ${String(e)}`})}}return a}async function Lq(e,t,n={}){if(e.length===0)return{images:e,dropped:0};let r=(await Iq(e,t,n)).filter(Oq);return{images:r,dropped:Math.max(0,e.length-r.length)}}async function Rq(e,t,n={}){let r=Array.isArray(e.content)?e.content:[];if(!r.some(e=>Oq(e)||kq(e)))return e;let i=await Iq(r,t,n);return{...e,content:i}}async function zq(e,t,n){let r=(n?.sanitizeMode??`full`)===`full`,i={maxDimensionPx:n?.maxDimensionPx,maxBytes:n?.maxBytes},a=n?.sanitizeToolCallIds===!0?Sq(e,n.toolCallIdMode):e,o=[];for(let e of a){if(!e||typeof e!=`object`){o.push(e);continue}let a=e.role;if(a===`toolResult`){let n=e,r=await Iq(Array.isArray(n.content)?n.content:[],t,i);o.push({...n,content:r});continue}if(a===`user`){let n=e,r=n.content;if(Array.isArray(r)){let e=await Iq(r,t,i);o.push({...n,content:e});continue}}if(a===`assistant`){let a=e;if(a.stopReason===`error`){let e=a.content;if(Array.isArray(e)){let n=await Iq(e,t,i);o.push({...a,content:n})}else o.push(a);continue}let s=a.content;if(Array.isArray(s)){if(!r){let e=await Iq(s,t,i);o.push({...a,content:e});continue}let e=await Iq((n?.preserveSignatures?s:Uw(s,n?.sanitizeThoughtSignatures)).filter(e=>{if(!e||typeof e!=`object`)return!0;let t=e;return t.type!==`text`||typeof t.text!=`string`?!0:t.text.trim().length>0}),t,i);if(e.length===0)continue;o.push({...a,content:e});continue}}o.push(e)}return o}function Bq(e){return e.trim().toLowerCase().replace(/\p{Emoji_Presentation}|\p{Extended_Pictographic}/gu,``).replace(/\s+/g,` `).trim()}function Vq(e,t){return t.length===0||!e||e.length<10?!1:t.some(t=>!t||t.length<10?!1:e.includes(t)||t.includes(e))}function Hq(e,t){if(t.length===0)return!1;let n=Bq(e);return!n||n.length<10?!1:Vq(n,t.map(Bq))}function Uq(e){if(!e)return``;let t=e.trim().toLowerCase();return t===`z.ai`||t===`z-ai`?`zai`:t}function Wq(e){return Uq(e)===`zai`}const Gq=[`openai/gpt-5.4`,`openai/gpt-5.4-pro`,`openai/gpt-5.2`,`openai-codex/gpt-5.4`,`openai-codex/gpt-5.3-codex`,`openai-codex/gpt-5.3-codex-spark`,`openai-codex/gpt-5.2-codex`,`openai-codex/gpt-5.1-codex`,`github-copilot/gpt-5.2-codex`,`github-copilot/gpt-5.2`],Kq=new Set(Gq.map(e=>e.toLowerCase())),qq=new Set(Gq.map(e=>e.split(`/`)[1]?.toLowerCase()).filter(e=>!!e));function Jq(e){if(!e)return;let t=e.trim().toLowerCase(),n=t.replace(/[\s_-]+/g,``);if(n===`adaptive`||n===`auto`)return`adaptive`;if(n===`xhigh`||n===`extrahigh`)return`xhigh`;if([`off`].includes(t))return`off`;if([`on`,`enable`,`enabled`].includes(t))return`low`;if([`min`,`minimal`].includes(t))return`minimal`;if([`low`,`thinkhard`,`think-hard`,`think_hard`].includes(t))return`low`;if([`mid`,`med`,`medium`,`thinkharder`,`think-harder`,`harder`].includes(t))return`medium`;if([`high`,`ultra`,`ultrathink`,`think-hard`,`thinkhardest`,`highest`,`max`].includes(t))return`high`;if([`think`].includes(t))return`minimal`}function Yq(e,t){let n=t?.trim().toLowerCase();if(!n)return!1;let r=e?.trim().toLowerCase();return r?Kq.has(`${r}/${n}`):qq.has(n)}function Xq(e,t){let n=[`off`,`minimal`,`low`,`medium`,`high`];return Yq(e,t)&&n.push(`xhigh`),n.push(`adaptive`),n}function Zq(e,t){return Wq(e)?[`off`,`on`]:Xq(e,t)}function Qq(e,t,n=`, `){return Zq(e,t).join(n)}function $q(){let e=[...Gq];return e.length===0?`unknown model`:e.length===1?e[0]:e.length===2?`${e[0]} or ${e[1]}`:`${e.slice(0,-1).join(`, `)} or ${e[e.length-1]}`}function eJ(e){if(!e)return;let t=e.toLowerCase();if([`off`,`false`,`no`,`0`].includes(t))return`off`;if([`full`,`all`,`everything`].includes(t))return`full`;if([`on`,`minimal`,`true`,`yes`,`1`].includes(t))return`on`}function tJ(e){return eJ(e)}function nJ(e){if(!e)return;let t=e.toLowerCase();if([`off`,`false`,`no`,`0`,`disable`,`disabled`].includes(t))return`off`;if([`on`,`true`,`yes`,`1`,`enable`,`enabled`].includes(t)||[`tokens`,`token`,`tok`,`minimal`,`min`].includes(t))return`tokens`;if([`full`,`session`].includes(t))return`full`}function rJ(e){return nJ(e)??`off`}function iJ(e){if(!e)return;let t=e.toLowerCase();if([`off`,`false`,`no`,`0`].includes(t))return`off`;if([`full`,`auto`,`auto-approve`,`autoapprove`].includes(t))return`full`;if([`ask`,`prompt`,`approval`,`approve`].includes(t))return`ask`;if([`on`,`true`,`yes`,`1`].includes(t))return`on`}function aJ(e){if(!e)return;let t=e.toLowerCase();if([`off`,`false`,`no`,`0`,`hide`,`hidden`,`disable`,`disabled`].includes(t))return`off`;if([`on`,`true`,`yes`,`1`,`show`,`visible`,`enable`,`enabled`].includes(t))return`on`;if([`stream`,`streaming`,`draft`,`live`].includes(t))return`stream`}function oJ(e){let t=e.match(/supported values are:\s*([^\n.]+)/i)??e.match(/supported values:\s*([^\n.]+)/i);if(!t?.[1])return[];let n=t[1],r=Array.from(n.matchAll(/['"]([^'"]+)['"]/g)).map(e=>e[1]?.trim());return r.length>0?r.filter(e=>!!e):n.split(/,|\band\b/gi).map(e=>e.replace(/^[^a-zA-Z]+|[^a-zA-Z]+$/g,``).trim()).filter(Boolean)}function sJ(e){let t=e.message?.trim();if(!t)return;let n=oJ(t);if(n.length===0)return/not supported/i.test(t)&&!e.attempted.has(`off`)?`off`:void 0;for(let t of n){let n=Jq(t);if(n&&!e.attempted.has(n))return n}}function cJ(e){let t=[];for(let n=0;n<e.length;n++){let r=e[n];if(!r||typeof r!=`object`){t.push(r);continue}if(r.role!==`assistant`){t.push(r);continue}let i=r,a=e[n+1];if((a&&typeof a==`object`?a.role:void 0)!==`user`){t.push(r);continue}let o=a,s=new Set;if(Array.isArray(o.content))for(let e of o.content)e&&e.type===`toolResult`&&e.toolUseId&&s.add(e.toolUseId);let c=Array.isArray(i.content)?i.content:[],l=c.filter(e=>e?e.type===`toolUse`?s.has(e.id||``):!0:!1);c.length>0&&l.length===0?t.push({...i,content:[{type:`text`,text:`[tool calls omitted]`}]}):t.push({...i,content:l})}return t}function lJ(e){let{messages:t,role:n,merge:r}=e;if(!Array.isArray(t)||t.length===0)return t;let i=[],a;for(let e of t){if(!e||typeof e!=`object`){i.push(e);continue}let t=e.role;if(!t){i.push(e);continue}if(t===a&&a===n){let t=i[i.length-1],n=e;if(t&&typeof t==`object`){let e=t;i[i.length-1]=r(e,n);continue}}i.push(e),a=t}return i}function uJ(e,t){let n=[...Array.isArray(e.content)?e.content:[],...Array.isArray(t.content)?t.content:[]];return{...e,content:n,...t.usage&&{usage:t.usage},...t.stopReason&&{stopReason:t.stopReason},...t.errorMessage&&{errorMessage:t.errorMessage}}}function dJ(e){return lJ({messages:e,role:`assistant`,merge:uJ})}function fJ(e,t){let n=[...Array.isArray(e.content)?e.content:[],...Array.isArray(t.content)?t.content:[]];return{...t,content:n,timestamp:t.timestamp??e.timestamp}}function pJ(e){return lJ({messages:cJ(e),role:`user`,merge:fJ})}const mJ=64e3,hJ=8e3,gJ=/\brequest[_ ]?id\b\s*[:=]\s*["'()]*([A-Za-z0-9._:-]+)/i,_J=[String.raw`\b(?:x-)?api[-_]?key\b\s*[:=]\s*(["']?)([^\s"'\\;]+)\1`,String.raw`"(?:api[-_]?key|api_key)"\s*:\s*"([^"]+)"`,String.raw`(?:\bCookie\b\s*[:=]\s*[^;=\s]+=|;\s*[^;=\s]+=)([^;\s\r\n]+)`];function vJ(){let e=Ve()?.redactPatterns;return Array.isArray(e)?e.filter(e=>typeof e==`string`):[]}function yJ(e,t){let n=e?.trim();if(n)return n.length>t?`${n.slice(0,t)}…`:n}function bJ(e){let t=e?.trim();if(t)return t.length>mJ?t.slice(0,mJ):t}function xJ(e,t=200){let n=e?.trim();if(!n)return;let r=Array.from(n).filter(e=>{let t=e.charCodeAt(0);return!(t<=8||t===11||t===12||t>=14&&t<=31||t===127)}).join(``).replace(/[\r\n\t]+/g,` `).replace(/\s+/g,` `).trim();return r.length>t?`${r.slice(0,t)}…`:r}function SJ(e,t){return!e||!t?e:e.split(t).join(Vw(t,{len:12}))}function CJ(e){if(!e)return e;let t=vJ();return p(e,{mode:`tools`,patterns:[...d(),...t,..._J]})}function wJ(e){if(e)return e.match(gJ)?.[1]?.trim()||void 0}function TJ(e){let t=e.message&&e.message.length>hJ?e.message.slice(0,hJ):e.message;return(e.httpCode||e.type||t?OG({httpCode:e.httpCode,type:e.type,message:t}):null)||(e.requestId?e.raw.split(e.requestId).join(`<request_id>`):FK(e.raw))}function EJ(e){let t=bJ(e);if(!t)return{};try{let e=LK(t),n=e?.requestId??wJ(t),r=n?Vw(n,{len:12}):void 0,i=TJ({raw:t,requestId:n,httpCode:e?.httpCode,type:e?.type,message:e?.message}),a=SJ(CJ(t),n),o=SJ(CJ(e?.message),n);return{rawErrorPreview:yJ(a,400),rawErrorHash:Vw(t,{len:12}),rawErrorFingerprint:i?Vw(i,{len:12}):void 0,httpCode:e?.httpCode,providerErrorType:e?.type,providerErrorMessagePreview:yJ(o,200),requestIdHash:r}}catch{return{}}}function DJ(e){let t=EJ(e);return{textPreview:t.rawErrorPreview,textHash:t.rawErrorHash,textFingerprint:t.rawErrorFingerprint,httpCode:t.httpCode,providerErrorType:t.providerErrorType,providerErrorMessagePreview:t.providerErrorMessagePreview,requestIdHash:t.requestIdHash}}const OJ=T(`agent/embedded`);function kJ(e){let t=e.reason===`billing`||e.reason===`auth_permanent`?`disabled`:`cooldown`,n=e.previous?.cooldownUntil,r=e.previous?.disabledUntil,i=t===`disabled`?typeof r==`number`&&Number.isFinite(r)&&r>e.now&&r===e.next.disabledUntil:typeof n==`number`&&Number.isFinite(n)&&n>e.now&&n===e.next.cooldownUntil,a=Vw(e.profileId,{len:12}),o=xJ(e.runId)??`-`,s=xJ(e.provider)??`-`;OJ.warn(`auth profile failure state updated`,{event:`auth_profile_failure_state_updated`,tags:[`error_handling`,`auth_profiles`,t],runId:e.runId,profileId:a,provider:e.provider,reason:e.reason,windowType:t,windowReused:i,previousErrorCount:e.previous?.errorCount,errorCount:e.next.errorCount,previousCooldownUntil:n,cooldownUntil:e.next.cooldownUntil,previousDisabledUntil:r,disabledUntil:e.next.disabledUntil,previousDisabledReason:e.previous?.disabledReason,disabledReason:e.next.disabledReason,failureCounts:e.next.failureCounts,consoleMessage:`auth profile failure state updated: runId=${o} profile=${a} provider=${s} reason=${e.reason} window=${t} reused=${String(i)}`})}const AJ=[`auth_permanent`,`auth`,`billing`,`format`,`model_not_found`,`overloaded`,`timeout`,`rate_limit`,`unknown`],jJ=new Set(AJ),MJ=new Map(AJ.map((e,t)=>[e,t]));function NJ(e){let t=z(e??``);return t===`openrouter`||t===`kilocode`}function PJ(e){let t=[e.cooldownUntil,e.disabledUntil].filter(e=>typeof e==`number`).filter(e=>Number.isFinite(e)&&e>0);return t.length===0?null:Math.max(...t)}function FJ(e,t,n){if(NJ(e.profiles[t]?.provider))return!1;let r=e.usageStats?.[t];if(!r)return!1;let i=PJ(r);return i?(n??Date.now())<i:!1}function IJ(e,t){return typeof e==`number`&&Number.isFinite(e)&&e>0&&t<e}function LJ(e){let t=e.now??Date.now(),n=new Map,r=(e,t)=>{!jJ.has(e)||t<=0||!Number.isFinite(t)||n.set(e,(n.get(e)??0)+t)};for(let n of e.profileIds){let i=e.store.usageStats?.[n];if(!i)continue;if(IJ(i.disabledUntil,t)&&i.disabledReason&&jJ.has(i.disabledReason)){r(i.disabledReason,1e3);continue}if(!IJ(i.cooldownUntil,t))continue;let a=!1;for(let[e,t]of Object.entries(i.failureCounts??{})){let n=e,i=typeof t==`number`?t:0;!jJ.has(n)||i<=0||(r(n,i),a=!0)}a||r(`unknown`,1)}if(n.size===0)return null;let i=null,a=-1,o=2**53-1;for(let e of AJ){let t=n.get(e);if(typeof t!=`number`)continue;let r=MJ.get(e)??2**53-1;(t>a||t===a&&r<o)&&(i=e,a=t,o=r)}return i}function RJ(e,t){let n=null;for(let r of t){let t=e.usageStats?.[r];if(!t)continue;let i=PJ(t);typeof i!=`number`||!Number.isFinite(i)||i<=0||(n===null||i<n)&&(n=i)}return n}function zJ(e,t){let n=e.usageStats;if(!n)return!1;let r=t??Date.now(),i=!1;for(let[e,t]of Object.entries(n)){if(!t)continue;let a=!1,o=typeof t.cooldownUntil==`number`&&Number.isFinite(t.cooldownUntil)&&t.cooldownUntil>0&&r>=t.cooldownUntil,s=typeof t.disabledUntil==`number`&&Number.isFinite(t.disabledUntil)&&t.disabledUntil>0&&r>=t.disabledUntil;o&&(t.cooldownUntil=void 0,a=!0),s&&(t.disabledUntil=void 0,t.disabledReason=void 0,a=!0),a&&!PJ(t)&&(t.errorCount=0,t.failureCounts=void 0),a&&(n[e]=t,i=!0)}return i}async function BJ(e){let{store:t,profileId:n,agentDir:r}=e,i=await Al({agentDir:r,updater:e=>e.profiles[n]?(GJ(e,n,e=>WJ(e,{lastUsed:Date.now()})),!0):!1});if(i){t.usageStats=i.usageStats;return}t.profiles[n]&&(GJ(t,n,e=>WJ(e,{lastUsed:Date.now()})),Ul(t,r))}function VJ(e){let t=Math.max(1,e);return Math.min(3600*1e3,60*1e3*5**Math.min(t-1,3))}function HJ(e){let t={billingBackoffHours:5,billingMaxHours:24,failureWindowHours:24},n=(e,t)=>typeof e==`number`&&Number.isFinite(e)&&e>0?e:t,r=e.cfg?.auth?.cooldowns,i=n((()=>{let t=r?.billingBackoffHoursByProvider;if(t){for(let[n,r]of Object.entries(t))if(z(n)===e.providerId)return r}})()??r?.billingBackoffHours,t.billingBackoffHours),a=n(r?.billingMaxHours,t.billingMaxHours),o=n(r?.failureWindowHours,t.failureWindowHours);return{billingBackoffMs:i*60*60*1e3,billingMaxMs:a*60*60*1e3,failureWindowMs:o*60*60*1e3}}function UJ(e){let t=Math.max(1,e.errorCount),n=Math.max(6e4,e.baseMs),r=Math.max(n,e.maxMs),i=n*2**Math.min(t-1,10);return Math.min(r,i)}function WJ(e,t){return{...e,errorCount:0,cooldownUntil:void 0,disabledUntil:void 0,disabledReason:void 0,failureCounts:void 0,...t}}function GJ(e,t,n){e.usageStats=e.usageStats??{},e.usageStats[t]=n(e.usageStats[t])}function KJ(e){let{existingUntil:t,now:n,recomputedUntil:r}=e;return typeof t==`number`&&Number.isFinite(t)&&t>n?t:r}function qJ(e){let t=e.cfgResolved.failureWindowMs,n=typeof e.existing.lastFailureAt==`number`&&e.existing.lastFailureAt>0&&e.now-e.existing.lastFailureAt>t,r=PJ(e.existing),i=typeof r==`number`&&e.now>=r,a=n||i,o=(a?0:e.existing.errorCount??0)+1,s=a?{}:{...e.existing.failureCounts};s[e.reason]=(s[e.reason]??0)+1;let c={...e.existing,errorCount:o,failureCounts:s,lastFailureAt:e.now};if(e.reason===`billing`||e.reason===`auth_permanent`){let t=UJ({errorCount:s[e.reason]??1,baseMs:e.cfgResolved.billingBackoffMs,maxMs:e.cfgResolved.billingMaxMs});c.disabledUntil=KJ({existingUntil:e.existing.disabledUntil,now:e.now,recomputedUntil:e.now+t}),c.disabledReason=e.reason}else{let t=VJ(o);c.cooldownUntil=KJ({existingUntil:e.existing.cooldownUntil,now:e.now,recomputedUntil:e.now+t})}return c}async function JJ(e){let{store:t,profileId:n,reason:r,agentDir:i,cfg:a,runId:o}=e,s=t.profiles[n];if(!s||NJ(s.provider))return;let c,l,u=0,d=await Al({agentDir:i,updater:e=>{let t=e.profiles[n];if(!t||NJ(t.provider))return!1;let i=Date.now(),o=HJ({cfg:a,providerId:z(t.provider)});l=e.usageStats?.[n],u=i;let s=qJ({existing:l??{},now:i,reason:r,cfgResolved:o});return c=s,GJ(e,n,()=>s),!0}});if(d){t.usageStats=d.usageStats,c&&kJ({runId:o,profileId:n,provider:s.provider,reason:r,previous:l,next:c,now:u});return}if(!t.profiles[n])return;let f=Date.now(),p=HJ({cfg:a,providerId:z(t.profiles[n]?.provider??``)});l=t.usageStats?.[n];let m=qJ({existing:l??{},now:f,reason:r,cfgResolved:p});c=m,GJ(t,n,()=>m),Ul(t,i),kJ({runId:o,profileId:n,provider:t.profiles[n]?.provider??s.provider,reason:r,previous:l,next:c,now:f})}function YJ(e){let t=kc(e.provider),n=e.store.profiles[e.profileId];if(!n)return{eligible:!1,reasonCode:`profile_missing`};if(kc(n.provider)!==t)return{eligible:!1,reasonCode:`provider_mismatch`};let r=e.cfg?.auth?.profiles?.[e.profileId];if(r){if(kc(r.provider)!==t)return{eligible:!1,reasonCode:`provider_mismatch`};if(r.mode!==n.type&&!(r.mode===`oauth`&&n.type===`token`))return{eligible:!1,reasonCode:`mode_mismatch`}}let i=Cw({credential:n,now:e.now});return{eligible:i.eligible,reasonCode:i.reasonCode}}function XJ(e){let{cfg:t,store:n,provider:r,preferredProfile:i}=e,a=z(r),o=kc(r),s=Date.now();zJ(n,s);let c=Ac(n.order,a),l=Ac(t?.auth?.order,a),u=c??l,d=t?.auth?.profiles?Object.entries(t.auth.profiles).filter(([,e])=>kc(e.provider)===o).map(([e])=>e):[],f=u??(d.length>0?d:Gl(n,r));if(f.length===0)return[];let p=e=>YJ({cfg:t,store:n,provider:o,profileId:e,now:s}).eligible,m=f.filter(p),h=f.every(e=>!n.profiles[e]);m.length===0&&d.length>0&&h&&(m=Gl(n,r).filter(p));let g=Wl(m);if(u&&u.length>0){let e=[],t=[];for(let r of g)if(FJ(n,r)){let e=PJ(n.usageStats?.[r]??{})??s;t.push({profileId:r,cooldownUntil:e})}else e.push(r);let r=t.toSorted((e,t)=>e.cooldownUntil-t.cooldownUntil).map(e=>e.profileId),a=[...e,...r];return i&&a.includes(i)?[i,...a.filter(e=>e!==i)]:a}let _=ZJ(g,n);return i&&_.includes(i)?[i,..._.filter(e=>e!==i)]:_}function ZJ(e,t){let n=Date.now(),r=[],i=[];for(let n of e)FJ(t,n)?i.push(n):r.push(n);let a=r.map(e=>{let n=t.profiles[e]?.type;return{profileId:e,typeScore:n===`oauth`?0:n===`token`?1:n===`api_key`?2:3,lastUsed:t.usageStats?.[e]?.lastUsed??0}}).toSorted((e,t)=>e.typeScore===t.typeScore?e.lastUsed-t.lastUsed:e.typeScore-t.typeScore).map(e=>e.profileId),o=i.map(e=>({profileId:e,cooldownUntil:PJ(t.usageStats?.[e]??{})??n})).toSorted((e,t)=>e.cooldownUntil-t.cooldownUntil).map(e=>e.profileId);return[...a,...o]}var QJ=e({CLAUDE_CLI_PROFILE_ID:()=>CLAUDE_CLI_PROFILE_ID,CODEX_CLI_PROFILE_ID:()=>CODEX_CLI_PROFILE_ID,ensureAuthProfileStore:()=>Hl});const $J=T(`model-auth`),eY=`AWS_BEARER_TOKEN_BEDROCK`,tY=`AWS_ACCESS_KEY_ID`,nY=`AWS_SECRET_ACCESS_KEY`,rY=`AWS_PROFILE`;function iY(e,t){let n=e?.models?.providers??{},r=n[t];if(r)return r;let i=z(t);return i===t?Object.entries(n).find(([e])=>z(e)===i)?.[1]:n[i]??Object.entries(n).find(([e])=>z(e)===i)?.[1]}function aY(e,t){return Ui(iY(e,t)?.apiKey)}function oY(e){let t=aY(e.cfg,e.provider);if(!t)return null;if(!va(t))return{apiKey:t,source:`models.json`};if(!pa(t))return null;let n=Ui((e.env??process.env)[t]);return n?{apiKey:n,source:uY({applied:new Set(Vi()),envVars:[t],label:`${t} (models.json marker)`})}:null}function sY(e,t,n){return!!oY({cfg:e,provider:t,env:n})}function cY(e,t){let n=iY(e,t)?.auth;if(n===`api-key`||n===`aws-sdk`||n===`oauth`||n===`token`)return n}function lY(e){if(z(e.provider)!==`ollama`)return null;let t=iY(e.cfg,e.provider);return!t||!(t.api?.trim()||t.baseUrl?.trim()||Array.isArray(t.models)&&t.models.length>0)?null:{apiKey:`ollama-local`,source:`models.providers.ollama (synthetic local key)`,mode:`api-key`}}function uY(e){return`${e.envVars.some(t=>e.applied.has(t))?`shell env: `:`env: `}${e.label}`}function dY(e=process.env){if(e[eY]?.trim())return eY;if(e[tY]?.trim()&&e[nY]?.trim())return tY;if(e[rY]?.trim())return rY}function fY(){let e=new Set(Vi());return process.env[eY]?.trim()?{mode:`aws-sdk`,source:uY({applied:e,envVars:[eY],label:eY})}:process.env[tY]?.trim()&&process.env[nY]?.trim()?{mode:`aws-sdk`,source:uY({applied:e,envVars:[tY,nY],label:`${tY} + ${nY}`})}:process.env[rY]?.trim()?{mode:`aws-sdk`,source:uY({applied:e,envVars:[rY],label:rY})}:{mode:`aws-sdk`,source:`aws-sdk default chain`}}async function pY(e){let{provider:t,cfg:n,profileId:r,preferredProfile:i}=e,a=e.store??Hl(e.agentDir);if(r){let t=await zw({cfg:n,store:a,profileId:r,agentDir:e.agentDir});if(!t)throw Error(`No credentials found for profile "${r}".`);let i=a.profiles[r]?.type;return{apiKey:t.apiKey,profileId:r,source:`profile:${r}`,mode:i===`oauth`?`oauth`:i===`token`?`token`:`api-key`}}let o=cY(n,t);if(o===`aws-sdk`)return fY();let s=XJ({cfg:n,store:a,provider:t,preferredProfile:i});for(let r of s)try{let t=await zw({cfg:n,store:a,profileId:r,agentDir:e.agentDir});if(t){let e=a.profiles[r]?.type;return{apiKey:t.apiKey,profileId:r,source:`profile:${r}`,mode:e===`oauth`?`oauth`:e===`token`?`token`:`api-key`}}}catch(e){$J.debug?.(`auth profile "${r}" failed for provider "${t}": ${String(e)}`)}let c=mY(t);if(c)return{apiKey:c.apiKey,source:c.source,mode:c.source.includes(`OAUTH_TOKEN`)?`oauth`:`api-key`};let l=oY({cfg:n,provider:t});if(l)return{apiKey:l.apiKey,source:l.source,mode:`api-key`};let u=lY({cfg:n,provider:t});if(u)return u;let d=z(t);if(o===void 0&&d===`amazon-bedrock`)return fY();if(t===`openai`&&Gl(a,`openai-codex`).length>0)throw Error(`No API key found for provider "openai". You are authenticated with OpenAI Codex OAuth. Use openai-codex/gpt-5.4 (OAuth) or set OPENAI_API_KEY to use openai/gpt-5.4.`);let f=Cl(e.agentDir),p=k.dirname(f);throw Error([`No API key found for provider "${t}".`,`Auth store: ${f} (agentDir: ${p}).`,`Configure auth for this agent (${ci(`openclaw agents add <id>`)}) or copy auth-profiles.json from the main agentDir.`].join(` `))}function mY(e,t=process.env){let n=z(e),r=new Set(Vi()),i=e=>{let n=Ui(t[e]);return n?{apiKey:n,source:r.has(e)?`shell env: ${e}`:`env: ${e}`}:null},a=oa[n];if(a)for(let e of a){let t=i(e);if(t)return t}if(n===`google-vertex`){let e=_t(n);return e?{apiKey:e,source:`gcloud adc`}:null}return null}function hY(e,t,n){let r=e?.trim();if(!r)return;let i=cY(t,r);if(i===`aws-sdk`)return`aws-sdk`;let a=n??Hl(),o=Gl(a,r);if(o.length>0){let e=new Set(o.map(e=>a.profiles[e]?.type).filter(e=>!!e));if([`oauth`,`token`,`api_key`].filter(t=>e.has(t)).length>=2)return`mixed`;if(e.has(`oauth`))return`oauth`;if(e.has(`token`))return`token`;if(e.has(`api_key`))return`api-key`}if(i===void 0&&z(r)===`amazon-bedrock`)return`aws-sdk`;let s=mY(r);return s?.apiKey?s.source.includes(`OAUTH_TOKEN`)?`oauth`:`api-key`:sY(t,r)?`api-key`:`unknown`}async function gY(e){return pY({provider:e.model.provider,cfg:e.cfg,profileId:e.profileId,preferredProfile:e.preferredProfile,store:e.store,agentDir:e.agentDir})}function _Y(e,t){let n=Hi(e.apiKey);if(n)return n;throw Error(`No API key resolved for provider "${t}" (auth mode: ${e.mode}).`)}export{tq as $,l_ as $a,jT as $i,Hz as $n,mf as $o,ON as $r,li as $s,ZH as $t,Yq as A,zS as Aa,WO as Ai,WB as An,nh as Ao,pR as Ar,ac as As,VW as At,gq as B,ky as Ba,lE as Bi,yB as Bn,Up as Bo,zP as Br,ba as Bs,wU as Bt,Xq as C,YS as Ca,Tn as Cc,Xk as Ci,cV as Cn,vh as Co,iR as Cr,z as Cs,$W as Ct,nJ as D,LS as Da,nn as Dc,jk as Di,lV as Dn,ch as Do,hR as Dr,Kc as Ds,WW as Dt,Jq as E,PS as Ea,rn as Ec,Jk as Ei,uV as En,gh as Eo,oR as Er,zc as Es,GW as Et,Lq as F,Py as Fa,fO as Fi,jB as Fn,Dm as Fo,gI as Fr,Wa as Fs,jU as Ft,sq as G,H as Ga,$T as Gi,iB as Gn,fp as Go,CP as Gr,Yi as Gs,yU as Gt,Sq as H,Ny as Ha,cE as Hi,aB as Hn,qp as Ho,qP as Hr,_a as Hs,SU as Ht,Rq as I,Fy as Ia,uO as Ii,OB as In,gm as Io,iI as Ir,Ha as Is,AU as It,OK as J,I_ as Ja,ET as Ji,Wz as Jn,hp as Jo,mP as Jr,Ui as Js,cU as Jt,WG as K,pv as Ka,KT as Ki,Nz as Kn,pp as Ko,hP as Kr,Ji as Ks,pU as Kt,Eq as L,Ly as La,mO as Li,kB as Ln,mm as Lo,GF as Lr,xa as Ls,DU as Lt,Vq as M,jS as Ma,qO as Mi,IB as Mn,Im as Mo,tR as Mr,xc as Ms,HW as Mt,Bq as N,BS as Na,CO as Ni,FB as Nn,Lm as No,rR as Nr,mo as Ns,kW as Nt,tJ as O,IS as Oa,Ek as Oi,QB as On,sh as Oo,lR as Or,Uc as Os,TW as Ot,zq as P,Nx as Pa,pO as Pi,PB as Pn,jm as Po,nR as Pr,go as Ps,BW as Pt,FK as Q,k_ as Qa,MT as Qi,Lz as Qn,Df as Qo,kN as Qr,xi as Qs,tU as Qt,Tq as R,Cy as Ra,eO as Ri,xB as Rn,om as Ro,UF as Rr,Sa as Rs,CU as Rt,$q as S,iC as Sa,xn as Sc,Mk as Si,gV as Sn,hh as So,bR as Sr,Pc as Ss,ZW as St,aJ as T,NS as Ta,an as Tc,Uk as Ti,rV as Tn,yh as To,dR as Tr,Vc as Ts,qW as Tt,fq as U,yy as Ua,tE as Ui,Zz as Un,Kp as Uo,VP as Ur,Zi as Us,bU as Ut,_q as V,My as Va,hE as Vi,vB as Vn,Jp as Vo,UP as Vr,va as Vs,xU as Vt,pq as W,Gv as Wa,W as Wi,rB as Wn,Rp as Wo,DP as Wr,Xi as Ws,_U as Wt,UG as X,B_ as Xa,DT as Xi,Rz as Xn,xf as Xo,SP as Xr,Bi as Xs,nU as Xt,zK as Y,L_ as Ya,OT as Yi,Vz as Yn,Af as Yo,gP as Yr,Hi as Ys,QH as Yt,RK as Z,V_ as Za,AT as Zi,Gz as Zn,Ef as Zo,fP as Zr,zi as Zs,iU as Zt,xJ as _,HC as _a,pn as _c,uA as _i,dH as _n,Gh as _o,QR as _r,Lc as _s,yG as _t,hY as a,Xw as aa,I as ac,lj as ai,zH as an,cg as ao,Sz as ar,ud as as,aq as at,sJ as b,zC as ba,hn as bc,iA as bi,vV as bn,jh as bo,MR as br,jc as bs,iG as bt,XJ as c,Kw as ca,L as cc,RA as ci,NH as cn,Jh as co,hz as cr,Ql as cs,IK as ct,FJ as d,Vw as da,Dn as dc,JA as di,wH as dn,rg as do,lz as dr,Kl as ds,QK as dt,bT as ea,ci as ec,GM as ei,XH as en,$g as eo,Mz as er,kd as es,JK as et,JJ as f,zw as fa,In as fc,yA as fi,SH as fn,ng as fo,dz as fr,Hl as fs,BK as ft,DJ as g,GC as ga,jn as gc,vA as gi,_H as gn,qh as go,ZR as gr,Wc as gs,EG as gt,EJ as h,pw as ha,Mn as hc,SA as hi,hH as hn,Kh as ho,tz as hr,ol as hs,DG as ht,mY as i,lT as ia,mr as ic,gj as ii,RH as in,fg as io,jz as ir,Ad as is,oq as it,Hq as j,Zx as ja,JO as ji,HB as jn,Fm as jo,mR as jr,dc as js,CW as jt,rJ as k,RS as ka,QO as ki,JB as kn,eh as ko,sR as kr,Gc as ks,EW as kt,zJ as l,Gw as la,An as lc,BA as li,OH as ln,eg as lo,uz as lr,Wl as ls,DK as lt,LJ as m,mw as ma,Nn as mc,xA as mi,gH as mn,Wh as mo,nz as mr,bl as ms,IG as mt,_Y as n,xT as na,hr as nc,Qj as ni,HH as nn,jg as no,Pz as nr,Nd as ns,$G as nt,oY as o,Yw as oa,yr as oc,dj as oi,PH as on,hg as oo,Tz as or,hu as os,QG as ot,BJ as p,hw as pa,Fn as pc,_A as pi,xH as pn,tg as po,fz as pr,Cl as ps,RG as pt,iq as q,A_ as qa,UT as qi,Uz as qn,Op as qo,vP as qr,qi as qs,fU as qt,pY as r,cT as ra,cr as rc,Tj as ri,VH as rn,yg as ro,zz as rr,Md as rs,JG as rt,QJ as s,Ww as sa,gr as sc,hj as si,jH as sn,gg as so,vz as sr,iu as ss,VK as st,gY as t,vT as ta,ei as tc,eM as ti,UH as tn,kg as to,Fz as tr,jd as ts,eq as tt,RJ as u,Zw as ua,kn as uc,qA as ui,TH as un,$h as uo,pz as ur,Gl as us,XK as ut,pJ as v,VC as va,bn as vc,rA as vi,uH as vn,Uh as vo,$R as vr,Rc as vs,vG as vt,iJ as w,JS as wa,dn as wc,Yk as wi,dV as wn,xh as wo,fR as wr,Bc as ws,JW as wt,Qq as x,oC as xa,wn as xc,tA as xi,xV as xn,Sh as xo,kR as xr,Oc as xs,eG as xt,dJ as y,WC as ya,N as yc,aA as yi,KV as yn,Bh as yo,NR as yr,Ac as ys,gG as yt,Cq as z,Ay as za,tO as zi,bB as zn,hm as zo,HP as zr,Ca as zs,TU as zt};
-//# sourceMappingURL=model-auth-1RA9nkQH.js.map