@spacebar_ai/moldclaw-core 2026.3.14 → 2026.3.16

package/dist/plugin-sdk/src/secrets/sec1-placeholder.d.ts

@@ -0,0 +1,181 @@
+/**
+ * SEC-1 Secure Placeholder Detection and Handling
+ *
+ * SEC-1 refers to the secure credential migration system used by moldClaw Tauri app.
+ * When sensitive values (API keys, tokens) are migrated to OS Credential Store,
+ * the config file retains a `__SECURE__` placeholder.
+ *
+ * Problem: moldclaw CLI reads config directly and cannot access the Credential Store.
+ * Solution: Detect `__SECURE__` placeholders and fall back to environment variables.
+ *
+ * This module provides utilities to:
+ * 1. Detect SEC-1 placeholders in config values
+ * 2. Resolve actual values from environment variables when placeholders are found
+ * 3. Filter out placeholder values to prevent authentication failures
+ *
+ * @see https://github.com/spacebar-ai/moldClaw/docs/SEC1_FIX_DESIGN.md
+ */
+/**
+ * The SEC-1 secure placeholder sentinel value.
+ * This value is written to config when the actual secret is stored in OS Credential Store.
+ */
+export declare const SEC1_SECURE_PLACEHOLDER = "__SECURE__";
+/**
+ * Alias for SEC1_SECURE_PLACEHOLDER for backward compatibility with tests.
+ */
+export declare const SEC1_PLACEHOLDER = "__SECURE__";
+/**
+ * Check if a value is a SEC-1 secure placeholder.
+ *
+ * SEC-1 placeholders indicate that the actual value has been migrated
+ * to OS Credential Store by moldClaw Tauri app. OpenClaw CLI cannot
+ * access the Credential Store, so these values should be treated as
+ * "not configured" and resolved from environment variables instead.
+ *
+ * @param value - The value to check (typically from config)
+ * @returns true if the value is a SEC-1 placeholder
+ *
+ * @example
+ * ```typescript
+ * isSecurePlaceholder("__SECURE__");           // true
+ * isSecurePlaceholder("sk-ant-api-key-xxx");   // false
+ * isSecurePlaceholder(undefined);              // false
+ * isSecurePlaceholder({ source: "env" });      // false
+ * ```
+ */
+export declare function isSecurePlaceholder(value: unknown): boolean;
+/**
+ * Check if a value is any variant of SEC-1 secure placeholder.
+ * This includes extended formats like __SECURE_DISCORD__.
+ *
+ * @param value - The value to check
+ * @returns true if the value matches any SEC-1 placeholder pattern
+ */
+export declare function isSecurePlaceholderExtended(value: unknown): boolean;
+/**
+ * Filter SEC-1 placeholder from a string value.
+ * Returns undefined if the value is a placeholder, otherwise returns the original value.
+ *
+ * @param value - The value to filter
+ * @returns The original value if not a placeholder, undefined otherwise
+ *
+ * @example
+ * ```typescript
+ * filterSecurePlaceholder("__SECURE__");           // undefined
+ * filterSecurePlaceholder("sk-ant-api-key-xxx");   // "sk-ant-api-key-xxx"
+ * filterSecurePlaceholder(undefined);              // undefined
+ * ```
+ */
+export declare function filterSecurePlaceholder(value: string | undefined): string | undefined;
+/**
+ * Resolve a config value with SEC-1 placeholder fallback to environment variable.
+ *
+ * If the config value is a SEC-1 placeholder (or empty), this function falls back
+ * to the specified environment variable. This ensures that values migrated to
+ * OS Credential Store by moldClaw can still be resolved when running via CLI.
+ *
+ * Resolution order:
+ * 1. If configValue is a valid non-placeholder string, use it
+ * 2. Otherwise, fall back to environment variable
+ *
+ * @param configValue - The value from config (may be __SECURE__ or actual value)
+ * @param envVar - Environment variable name to fall back to
+ * @param env - Environment object (defaults to process.env)
+ * @returns The resolved value, or undefined if neither source provides a value
+ *
+ * @example
+ * ```typescript
+ * // Config has placeholder, env has value
+ * resolveWithSecureFallback("__SECURE__", "ANTHROPIC_API_KEY");
+ * // → process.env.ANTHROPIC_API_KEY
+ *
+ * // Config has actual value
+ * resolveWithSecureFallback("sk-ant-xxx", "ANTHROPIC_API_KEY");
+ * // → "sk-ant-xxx"
+ *
+ * // Config empty, env has value
+ * resolveWithSecureFallback(undefined, "ANTHROPIC_API_KEY");
+ * // → process.env.ANTHROPIC_API_KEY
+ * ```
+ */
+export declare function resolveWithSecureFallback(configValue: string | undefined, envVar: string, env?: NodeJS.ProcessEnv): string | undefined;
+/**
+ * Resolve a config value with SEC-1 placeholder fallback to multiple environment variables.
+ *
+ * Tries each environment variable in order until one provides a non-empty value.
+ *
+ * @param configValue - The value from config
+ * @param envVars - Array of environment variable names to try (in order)
+ * @param env - Environment object (defaults to process.env)
+ * @returns The resolved value, or undefined if no source provides a value
+ *
+ * @example
+ * ```typescript
+ * resolveWithSecureFallbackMulti(
+ *   "__SECURE__",
+ *   ["ANTHROPIC_API_KEY", "CLAUDE_API_KEY"],
+ *   process.env
+ * );
+ * ```
+ */
+export declare function resolveWithSecureFallbackMulti(configValue: string | undefined, envVars: readonly string[], env?: NodeJS.ProcessEnv): string | undefined;
+/**
+ * Check if a config value requires SEC-1 fallback resolution.
+ *
+ * Returns true if the value is:
+ * - undefined or empty
+ * - A SEC-1 placeholder
+ *
+ * @param value - The config value to check
+ * @returns true if fallback resolution is needed
+ */
+export declare function needsSecureFallback(value: unknown): boolean;
+/**
+ * Normalize a potentially SEC-1 affected secret input.
+ *
+ * If the value is a SEC-1 placeholder, returns undefined to signal
+ * that the value should be resolved from environment or SecretRef.
+ *
+ * @param value - The secret input value
+ * @returns Normalized string value, or undefined if placeholder/empty
+ */
+export declare function normalizeSecretWithSec1(value: unknown): string | undefined;
+/**
+ * Resolve SEC-1 placeholder with environment fallback.
+ *
+ * @param configValue - The value from config (may be __SECURE__)
+ * @param envValue - The environment variable value to fall back to
+ * @returns The resolved value
+ */
+export declare function resolveSecurePlaceholder(configValue: string | undefined | null, envValue: string | undefined): string | undefined;
+/**
+ * Normalize a secret value, filtering out SEC-1 placeholders.
+ *
+ * @param value - The value to normalize
+ * @returns Normalized string value, or undefined if placeholder/empty/invalid
+ */
+export declare function normalizeSecretValue(value: unknown): string | undefined;
+/**
+ * Inspect a secret value to determine if it's a placeholder.
+ *
+ * @param value - The value to inspect
+ * @returns Object with isPlaceholder flag and normalizedValue
+ */
+export declare function inspectSecretValue(value: unknown): {
+    isPlaceholder: boolean;
+    normalizedValue: string | undefined;
+};
+/**
+ * Resolve secret with priority: override > config > fallback.
+ *
+ * Resolution order:
+ * 1. If envOverride is provided and non-empty, use it
+ * 2. If configValue is a valid non-placeholder string, use it
+ * 3. Otherwise, use envFallback
+ *
+ * @param configValue - The value from config (may be __SECURE__)
+ * @param envOverride - High-priority override (e.g., CLI argument)
+ * @param envFallback - Fallback value (e.g., environment variable)
+ * @returns The resolved value
+ */
+export declare function resolveSecretWithPriority(configValue: string | undefined | null, envOverride: string | undefined, envFallback?: string): string | undefined;

package/dist/plugin-sdk/src/secrets/sec1-utils.d.ts

@@ -0,0 +1,57 @@
+/**
+ * SEC-1: Secure Token Placeholder Protocol
+ *
+ * SEC-1 defines a standard pattern for placeholder values that indicate
+ * a secret is managed externally and will be resolved at runtime.
+ *
+ * Format: __SECURE__<identifier>
+ * Example: __SECURE__DISCORD_TOKEN
+ *
+ * When a value starts with __SECURE__, it signals that:
+ * 1. The actual secret value is stored securely elsewhere
+ * 2. Token format validation should be skipped
+ * 3. The placeholder will be resolved to the real value at runtime
+ */
+/** SEC-1 placeholder prefix */
+export declare const SEC1_PREFIX = "__SECURE__";
+/**
+ * Checks if a value is a SEC-1 secure placeholder.
+ * SEC-1 placeholders start with "__SECURE__" and indicate the actual
+ * secret value will be resolved at runtime from a secure source.
+ *
+ * @param value - The value to check
+ * @returns true if the value is a SEC-1 placeholder
+ */
+export declare function isSec1Placeholder(value: unknown): boolean;
+/**
+ * Extracts the identifier from a SEC-1 placeholder.
+ *
+ * @param value - The SEC-1 placeholder value
+ * @returns The identifier portion after __SECURE__, or null if not a valid placeholder
+ */
+export declare function extractSec1Identifier(value: string): string | null;
+/**
+ * Creates a SEC-1 placeholder from an identifier.
+ *
+ * @param identifier - The identifier for the secret (e.g., "DISCORD_TOKEN")
+ * @returns The SEC-1 placeholder string
+ */
+export declare function createSec1Placeholder(identifier: string): string;
+/**
+ * Normalizes a secret string value, returning empty string for SEC-1 placeholders.
+ * This is used when collecting secrets to avoid treating SEC-1 placeholders as
+ * actual configured values.
+ *
+ * @param value - The value to normalize
+ * @returns The trimmed string value, or empty string if SEC-1 placeholder or non-string
+ */
+export declare function normalizeSecretStringValueSec1(value: unknown): string;
+/**
+ * Checks if a value is a configured secret input, excluding SEC-1 placeholders.
+ * SEC-1 placeholders are not considered "configured" because the actual value
+ * is not yet available.
+ *
+ * @param value - The value to check
+ * @returns true if the value is a real configured secret (not a SEC-1 placeholder)
+ */
+export declare function hasConfiguredSecretInputValueSec1(value: unknown): boolean;

package/dist/plugin-sdk/synology-chat.js

@@ -14,7 +14,7 @@ import "../warning-filter-gJuwHM7C.js";
 import "../utils-rjVNXUns.js";
 import "../links-C5I443Xb.js";
 import "../setup-binary-Fw3cCSWL.js";
-import { Ch as createFixedWindowRateLimiter, WT as setAccountEnabledInConfigSection, bS as readRequestBodyWithLimit, vS as isRequestBodyLimitError, xS as requestBodyErrorToText, xs as registerPluginHttpRoute } from "../auth-profiles-BJcHzwPy.js";
+import { Ch as createFixedWindowRateLimiter, WT as setAccountEnabledInConfigSection, bS as readRequestBodyWithLimit, vS as isRequestBodyLimitError, xS as requestBodyErrorToText, xs as registerPluginHttpRoute } from "../auth-profiles-9zZdaXJK.js";
 import "../model-selection-DfA4esOK.js";
 import "../agent-scope-DA7O8MVG.js";
 import { t as DEFAULT_ACCOUNT_ID } from "../account-id-O4Og6DrK.js";
@@ -22,7 +22,7 @@ import "../boundary-file-read-Y1cMjPlu.js";
 import "../logger-wrbK9-ju.js";
 import "../exec-CoBTyh8B.js";
 import "../workspace-CxNKYS0V.js";
-import "../io-DcoxdH6t.js";
+import "../io-C6XifaT4.js";
 import "../host-env-security-xy11yVnm.js";
 import "../safe-text-BcUvBreN.js";
 import "../version-rW_3ob2o.js";
@@ -32,22 +32,22 @@ import "../network-mode-CE-ihBf6.js";
 import "../registry-DcDGl2X7.js";
 import "../manifest-registry-_0xclaVY.js";
 import "../ip-w605xvSx.js";
-import "../zod-schema.core-CWxzqcUs.js";
-import "../config-CkD8DJ7L.js";
+import "../zod-schema.core-D5reNip6.js";
+import "../config-B2W1zTP1.js";
 import "../audit-fs-SjcfoPO7.js";
-import "../resolve-3ErMOltL.js";
-import "../provider-web-search-BR7etTjJ.js";
+import "../resolve-BbsCHGLY.js";
+import "../provider-web-search-BJhXD5dH.js";
 import "../text-runtime-CgEQ9Y9_.js";
-import "../workspace-dirs-L1_QQ9mB.js";
-import "../config-BbxrRaLf.js";
+import "../workspace-dirs-d3Ms_ryk.js";
+import "../config-CMhKplgO.js";
 import "../tailnet-KyAU6tj_.js";
 import "../net-B_Iq_SVP.js";
-import "../credentials-D5uBf_C5.js";
-import "../routes-BNDsNO_e.js";
+import "../credentials-yYt6VWCq.js";
+import "../routes-BZtqNrBf.js";
 import "../frontmatter-BTDAgsA3.js";
-import "../env-overrides-BHxqjYZG.js";
+import "../env-overrides-DYVIkuvN.js";
 import "../path-alias-guards-B3ZKrId1.js";
-import "../skills-B4h1k-SP.js";
+import "../skills-4-r1mfJM.js";
 import "../ports-BVwQuCIR.js";
 import "../ports-lsof-DiY6GaAf.js";
 import "../ssh-tunnel-BaHTFPzH.js";
@@ -60,50 +60,50 @@ import "../resolve-route-IkBfMjBz.js";
 import "../internal-hooks-0x1JiQ5f.js";
 import "../lazy-runtime-DdzFA4b9.js";
 import { t as emptyPluginConfigSchema } from "../config-schema-DqodvBpN.js";
-import { r as buildChannelConfigSchema } from "../config-schema-GQ6uWjXe.js";
-import "../method-scopes-D-Q9dvbj.js";
+import { r as buildChannelConfigSchema } from "../config-schema-pPBCF4hz.js";
+import "../method-scopes-Du8ODGFW.js";
 import "../session-cost-usage-B-57mlS8.js";
 import "../paths-CDWV-9nX.js";
 import "../routing-3o2D0ix4.js";
-import "../send-Cm9v3uhF.js";
-import "../node-resolve-DfOpQmxm.js";
+import "../send-BRRtHxyR.js";
+import "../node-resolve-CupmrA0Y.js";
 import "../provider-stream-gVymYPmd.js";
 import "../identity-file-DM4N5_7H.js";
 import "../provider-models-BA3hqqPq.js";
 import "../secret-file-Bjh19aoH.js";
 import "../logging-BdFqMomc.js";
 import "../runtime-env-CT-voxYE.js";
-import "../registry-xhgvU89y.js";
+import "../registry-Dgwc-7eS.js";
 import "../provider-onboard-CBC3kdk_.js";
 import "../model-definitions-DwehIMlw.js";
-import "../diagnostic-vMghIesG.js";
+import "../diagnostic-CkiYEGqt.js";
 import "../message-hook-mappers-DORrSLHM.js";
 import "../json-store-DlpyvQXN.js";
-import "../call-CoaQYq7c.js";
+import "../call-DYFR7oGy.js";
 import "../multimodal-BWF8MRkz.js";
 import "../memory-search-BBG2BKIh.js";
 import "../query-expansion-8R79qExs.js";
-import "../search-manager-CfizyEMk.js";
+import "../search-manager-DxkQvUrW.js";
 import "../core-EKuk2FxR.js";
 import "../issue-format-i6sEuV4a.js";
-import "../logging-S-5LPdfQ.js";
+import "../logging-BhqLWxTD.js";
 import "../note-z78_JyNp.js";
 import "../state-paths-C7dX__ql.js";
-import "../config-value-Dh8m-CFf.js";
+import "../config-value-Dl3XEpA6.js";
 import "../command-secret-targets-CO_lZ_ZZ.js";
-import "../brave-BG5Yopn8.js";
+import "../brave-CljenznH.js";
 import "../provider-usage-DzuzbNBv.js";
-import "../perplexity-Brhpb45X.js";
+import "../perplexity-Bw1u3CAF.js";
 import "../restart-stale-pids-CN9ElYwR.js";
 import "../delivery-queue-DLjFP-0C.js";
 import "../pairing-token-ANLRyJSu.js";
 import "../accounts-BCaV8MsT.js";
 import "../process-runtime-CicRKAFe.js";
-import "../audit-BqRK9OSj.js";
+import "../audit-hdKa3D-u.js";
 import "../cli-runtime-DtIDS2w7.js";
 import "../cli-utils-FHeUZLsT.js";
 import "../help-format-1yV2Xzq7.js";
 import "../progress-BQSTKUhd.js";
-import "../gateway-runtime-C76hUmUV.js";
-import { n as synologyChatSetupWizard, t as synologyChatSetupAdapter } from "../synology-chat-0G85jIqQ.js";
+import "../gateway-runtime-D9FRZqKP.js";
+import { n as synologyChatSetupWizard, t as synologyChatSetupAdapter } from "../synology-chat-BemXqdzG.js";
 export { DEFAULT_ACCOUNT_ID, buildChannelConfigSchema, createFixedWindowRateLimiter, emptyPluginConfigSchema, isRequestBodyLimitError, readRequestBodyWithLimit, registerPluginHttpRoute, requestBodyErrorToText, setAccountEnabledInConfigSection, synologyChatSetupAdapter, synologyChatSetupWizard };

package/dist/plugin-sdk/telegram.js

@@ -14,7 +14,7 @@ import "../warning-filter-gJuwHM7C.js";
 import "../utils-rjVNXUns.js";
 import "../links-C5I443Xb.js";
 import "../setup-binary-Fw3cCSWL.js";
-import { AT as formatPairingApproveHint, Bf as sendTelegramPayloadMessages, Cm as normalizeTelegramMessagingTarget, Df as isTelegramExecApprovalApprover, Em as inspectTelegramAccount, Ff as buildProviderKeyboard, Gf as getCacheStats, Gx as resolveDefaultTelegramAccountId, HT as clearAccountEntryFields, Hf as telegramMessageActions, If as calculateTotalPages, Jx as resolveTelegramToken, Lf as getModelsPageSize, Nf as buildBrowseProvidersButton, Of as isTelegramExecApprovalClientEnabled, Pf as buildModelsKeyboard, Sm as looksLikeTelegramTargetId, Tm as resolveTelegramTargetChatType, Tr as resolveTelegramGroupToolPolicy, Tw as applyAccountNameToChannelSection, UT as deleteAccountFromConfigSection, Ux as createTelegramActionGate, Vf as collectTelegramStatusIssues, WT as setAccountEnabledInConfigSection, Wx as listTelegramAccountIds, Xm as resolveTelegramPollVisibility, YC as buildTokenChannelStatusSummary, _m as fetchTelegramChatId, b_ as parseTelegramTopicConversation, bm as parseTelegramReplyToMessageId, cp as sendMessageTelegram, ep as createForumTopicTelegram, ew as projectCredentialSnapshotFields, gm as resolveTelegramInlineButtonsScope, gw as listTelegramDirectoryPeersFromConfig, hm as resolveTelegramReactionLevel, hw as listTelegramDirectoryGroupsFromConfig, ip as editMessageTelegram, kw as migrateBaseNameToDefaultAccount, lp as sendPollTelegram, np as editForumTopicTelegram, nw as resolveConfiguredFromCredentialStatuses, op as reactMessageTelegram, qf as searchStickers, qx as resolveTelegramPollActionGateState, tp as deleteMessageTelegram, up as sendStickerTelegram, vm as isNumericTelegramUserId, wr as resolveTelegramGroupRequireMention, ww as PAIRING_APPROVED_MESSAGE, xm as parseTelegramThreadId, ym as normalizeTelegramAllowFromEntry } from "../auth-profiles-BJcHzwPy.js";
+import { AT as formatPairingApproveHint, Bf as sendTelegramPayloadMessages, Cm as normalizeTelegramMessagingTarget, Df as isTelegramExecApprovalApprover, Em as inspectTelegramAccount, Ff as buildProviderKeyboard, Gf as getCacheStats, Gx as resolveDefaultTelegramAccountId, HT as clearAccountEntryFields, Hf as telegramMessageActions, If as calculateTotalPages, Jx as resolveTelegramToken, Lf as getModelsPageSize, Nf as buildBrowseProvidersButton, Of as isTelegramExecApprovalClientEnabled, Pf as buildModelsKeyboard, Sm as looksLikeTelegramTargetId, Tm as resolveTelegramTargetChatType, Tr as resolveTelegramGroupToolPolicy, Tw as applyAccountNameToChannelSection, UT as deleteAccountFromConfigSection, Ux as createTelegramActionGate, Vf as collectTelegramStatusIssues, WT as setAccountEnabledInConfigSection, Wx as listTelegramAccountIds, Xm as resolveTelegramPollVisibility, YC as buildTokenChannelStatusSummary, _m as fetchTelegramChatId, b_ as parseTelegramTopicConversation, bm as parseTelegramReplyToMessageId, cp as sendMessageTelegram, ep as createForumTopicTelegram, ew as projectCredentialSnapshotFields, gm as resolveTelegramInlineButtonsScope, gw as listTelegramDirectoryPeersFromConfig, hm as resolveTelegramReactionLevel, hw as listTelegramDirectoryGroupsFromConfig, ip as editMessageTelegram, kw as migrateBaseNameToDefaultAccount, lp as sendPollTelegram, np as editForumTopicTelegram, nw as resolveConfiguredFromCredentialStatuses, op as reactMessageTelegram, qf as searchStickers, qx as resolveTelegramPollActionGateState, tp as deleteMessageTelegram, up as sendStickerTelegram, vm as isNumericTelegramUserId, wr as resolveTelegramGroupRequireMention, ww as PAIRING_APPROVED_MESSAGE, xm as parseTelegramThreadId, ym as normalizeTelegramAllowFromEntry } from "../auth-profiles-9zZdaXJK.js";
 import "../model-selection-DfA4esOK.js";
 import "../agent-scope-DA7O8MVG.js";
 import { n as normalizeAccountId, t as DEFAULT_ACCOUNT_ID } from "../account-id-O4Og6DrK.js";
@@ -22,7 +22,7 @@ import "../boundary-file-read-Y1cMjPlu.js";
 import "../logger-wrbK9-ju.js";
 import "../exec-CoBTyh8B.js";
 import "../workspace-CxNKYS0V.js";
-import { k as TelegramConfigSchema } from "../io-DcoxdH6t.js";
+import { N as TelegramConfigSchema } from "../io-C6XifaT4.js";
 import "../host-env-security-xy11yVnm.js";
 import "../safe-text-BcUvBreN.js";
 import "../version-rW_3ob2o.js";
@@ -32,22 +32,22 @@ import "../network-mode-CE-ihBf6.js";
 import { r as getChatChannelMeta } from "../registry-DcDGl2X7.js";
 import "../manifest-registry-_0xclaVY.js";
 import "../ip-w605xvSx.js";
-import "../zod-schema.core-CWxzqcUs.js";
-import "../config-CkD8DJ7L.js";
+import "../zod-schema.core-D5reNip6.js";
+import "../config-B2W1zTP1.js";
 import "../audit-fs-SjcfoPO7.js";
-import "../resolve-3ErMOltL.js";
-import "../provider-web-search-BR7etTjJ.js";
+import "../resolve-BbsCHGLY.js";
+import "../provider-web-search-BJhXD5dH.js";
 import "../text-runtime-CgEQ9Y9_.js";
-import "../workspace-dirs-L1_QQ9mB.js";
-import "../config-BbxrRaLf.js";
+import "../workspace-dirs-d3Ms_ryk.js";
+import "../config-CMhKplgO.js";
 import "../tailnet-KyAU6tj_.js";
 import "../net-B_Iq_SVP.js";
-import "../credentials-D5uBf_C5.js";
-import "../routes-BNDsNO_e.js";
+import "../credentials-yYt6VWCq.js";
+import "../routes-BZtqNrBf.js";
 import "../frontmatter-BTDAgsA3.js";
-import "../env-overrides-BHxqjYZG.js";
+import "../env-overrides-DYVIkuvN.js";
 import "../path-alias-guards-B3ZKrId1.js";
-import "../skills-B4h1k-SP.js";
+import "../skills-4-r1mfJM.js";
 import "../ports-BVwQuCIR.js";
 import "../ports-lsof-DiY6GaAf.js";
 import "../ssh-tunnel-BaHTFPzH.js";
@@ -61,49 +61,49 @@ import "../internal-hooks-0x1JiQ5f.js";
 import { c as resolveAllowlistProviderRuntimeGroupPolicy, l as resolveDefaultGroupPolicy } from "../group-access-BWGTPTwF.js";
 import "../lazy-runtime-DdzFA4b9.js";
 import { t as emptyPluginConfigSchema } from "../config-schema-DqodvBpN.js";
-import { r as buildChannelConfigSchema } from "../config-schema-GQ6uWjXe.js";
-import "../method-scopes-D-Q9dvbj.js";
+import { r as buildChannelConfigSchema } from "../config-schema-pPBCF4hz.js";
+import "../method-scopes-Du8ODGFW.js";
 import "../session-cost-usage-B-57mlS8.js";
 import "../paths-CDWV-9nX.js";
 import "../routing-3o2D0ix4.js";
-import "../send-Cm9v3uhF.js";
-import "../node-resolve-DfOpQmxm.js";
+import "../send-BRRtHxyR.js";
+import "../node-resolve-CupmrA0Y.js";
 import "../provider-stream-gVymYPmd.js";
 import "../identity-file-DM4N5_7H.js";
 import "../provider-models-BA3hqqPq.js";
 import "../secret-file-Bjh19aoH.js";
 import "../logging-BdFqMomc.js";
 import "../runtime-env-CT-voxYE.js";
-import "../registry-xhgvU89y.js";
+import "../registry-Dgwc-7eS.js";
 import "../provider-onboard-CBC3kdk_.js";
 import "../model-definitions-DwehIMlw.js";
-import "../diagnostic-vMghIesG.js";
+import "../diagnostic-CkiYEGqt.js";
 import "../message-hook-mappers-DORrSLHM.js";
 import "../json-store-DlpyvQXN.js";
-import "../call-CoaQYq7c.js";
+import "../call-DYFR7oGy.js";
 import "../multimodal-BWF8MRkz.js";
 import "../memory-search-BBG2BKIh.js";
 import "../query-expansion-8R79qExs.js";
-import "../search-manager-CfizyEMk.js";
+import "../search-manager-DxkQvUrW.js";
 import "../core-EKuk2FxR.js";
 import "../issue-format-i6sEuV4a.js";
-import "../logging-S-5LPdfQ.js";
+import "../logging-BhqLWxTD.js";
 import "../note-z78_JyNp.js";
 import "../state-paths-C7dX__ql.js";
-import "../config-value-Dh8m-CFf.js";
+import "../config-value-Dl3XEpA6.js";
 import "../command-secret-targets-CO_lZ_ZZ.js";
-import "../brave-BG5Yopn8.js";
+import "../brave-CljenznH.js";
 import "../provider-usage-DzuzbNBv.js";
-import "../perplexity-Brhpb45X.js";
+import "../perplexity-Bw1u3CAF.js";
 import "../restart-stale-pids-CN9ElYwR.js";
 import "../delivery-queue-DLjFP-0C.js";
 import "../pairing-token-ANLRyJSu.js";
 import "../accounts-BCaV8MsT.js";
 import "../process-runtime-CicRKAFe.js";
-import "../audit-BqRK9OSj.js";
+import "../audit-hdKa3D-u.js";
 import "../cli-runtime-DtIDS2w7.js";
 import "../cli-utils-FHeUZLsT.js";
 import "../help-format-1yV2Xzq7.js";
 import "../progress-BQSTKUhd.js";
-import "../gateway-runtime-C76hUmUV.js";
+import "../gateway-runtime-D9FRZqKP.js";
 export { DEFAULT_ACCOUNT_ID, PAIRING_APPROVED_MESSAGE, TelegramConfigSchema, applyAccountNameToChannelSection, buildBrowseProvidersButton, buildChannelConfigSchema, buildModelsKeyboard, buildProviderKeyboard, buildTokenChannelStatusSummary, calculateTotalPages, clearAccountEntryFields, collectTelegramStatusIssues, createForumTopicTelegram, createTelegramActionGate, deleteAccountFromConfigSection, deleteMessageTelegram, editForumTopicTelegram, editMessageTelegram, emptyPluginConfigSchema, fetchTelegramChatId, formatPairingApproveHint, getCacheStats, getChatChannelMeta, getModelsPageSize, inspectTelegramAccount, isNumericTelegramUserId, isTelegramExecApprovalApprover, isTelegramExecApprovalClientEnabled, listTelegramAccountIds, listTelegramDirectoryGroupsFromConfig, listTelegramDirectoryPeersFromConfig, looksLikeTelegramTargetId, migrateBaseNameToDefaultAccount, normalizeAccountId, normalizeTelegramAllowFromEntry, normalizeTelegramMessagingTarget, parseTelegramReplyToMessageId, parseTelegramThreadId, parseTelegramTopicConversation, projectCredentialSnapshotFields, reactMessageTelegram, resolveAllowlistProviderRuntimeGroupPolicy, resolveConfiguredFromCredentialStatuses, resolveDefaultGroupPolicy, resolveDefaultTelegramAccountId, resolveTelegramGroupRequireMention, resolveTelegramGroupToolPolicy, resolveTelegramInlineButtonsScope, resolveTelegramPollActionGateState, resolveTelegramPollVisibility, resolveTelegramReactionLevel, resolveTelegramTargetChatType, resolveTelegramToken, searchStickers, sendMessageTelegram, sendPollTelegram, sendStickerTelegram, sendTelegramPayloadMessages, setAccountEnabledInConfigSection, telegramMessageActions };

package/dist/plugin-sdk/text-runtime.js

@@ -16,7 +16,7 @@ import "../boundary-file-read-Y1cMjPlu.js";
 import { a as logWarn, i as logSuccess, n as logError, r as logInfo, t as logDebug } from "../logger-wrbK9-ju.js";
 import "../exec-CoBTyh8B.js";
 import "../workspace-CxNKYS0V.js";
-import "../io-DcoxdH6t.js";
+import "../io-C6XifaT4.js";
 import "../host-env-security-xy11yVnm.js";
 import { t as sanitizeTerminalText } from "../safe-text-BcUvBreN.js";
 import "../version-rW_3ob2o.js";
@@ -26,10 +26,10 @@ import "../network-mode-CE-ihBf6.js";
 import "../registry-DcDGl2X7.js";
 import "../manifest-registry-_0xclaVY.js";
 import "../ip-w605xvSx.js";
-import "../zod-schema.core-CWxzqcUs.js";
-import "../config-CkD8DJ7L.js";
+import "../zod-schema.core-D5reNip6.js";
+import "../config-B2W1zTP1.js";
 import { A as sha256HexPrefix, C as findCodeRegions, O as summarizeStringEntries, S as stripReasoningTagsFromText, a as resolveGlobalMap, c as convertMarkdownTables, d as markdownToIR, f as markdownToIRWithMeta, i as stripAssistantInternalScaffolding, k as redactIdentifier, l as renderMarkdownWithMarkers, n as resolveReactionLevel, o as resolveGlobalSingleton, r as chunkItems, s as markdownToWhatsApp, t as withTimeout, u as chunkMarkdownIR, w as isInsideCode } from "../text-runtime-CgEQ9Y9_.js";
 import "../message-channel-CKeDAoOT.js";
 import { n as fetchWithTimeout, t as bindAbortRelay } from "../fetch-timeout-DARXcXbw.js";
-import { _ as startDiagnosticHeartbeat, a as logLaneEnqueue, c as logRunAttempt, d as logToolLoopAction, f as logWebhookError, g as resolveStuckSessionWarnMs, h as resetDiagnosticStateForTest, i as logLaneDequeue, l as logSessionStateChange, m as logWebhookReceived, n as getDiagnosticSessionStateCountForTest, o as logMessageProcessed, p as logWebhookProcessed, r as logActiveRuns, s as logMessageQueued, t as diag, u as logSessionStuck, v as stopDiagnosticHeartbeat } from "../diagnostic-vMghIesG.js";
+import { _ as startDiagnosticHeartbeat, a as logLaneEnqueue, c as logRunAttempt, d as logToolLoopAction, f as logWebhookError, g as resolveStuckSessionWarnMs, h as resetDiagnosticStateForTest, i as logLaneDequeue, l as logSessionStateChange, m as logWebhookReceived, n as getDiagnosticSessionStateCountForTest, o as logMessageProcessed, p as logWebhookProcessed, r as logActiveRuns, s as logMessageQueued, t as diag, u as logSessionStuck, v as stopDiagnosticHeartbeat } from "../diagnostic-CkiYEGqt.js";
 export { CONFIG_DIR, DEFAULT_LOG_DIR, DEFAULT_LOG_FILE, __test__, assertWebChannel, bindAbortRelay, chunkItems, chunkMarkdownIR, clamp, clampInt, clampNumber, convertMarkdownTables, diag as diagnosticLogger, displayPath, displayString, ensureDir, escapeRegExp, fetchWithTimeout, findCodeRegions, formatTerminalLink, getChildLogger, getDefaultRedactPatterns, getDiagnosticSessionStateCountForTest, getLogger, getResolvedLoggerSettings, isFileLogLevelEnabled, isInsideCode, isPlainObject, isRecord, isSelfChatMode, jidToE164, logActiveRuns, logDebug, logError, logInfo, logLaneDequeue, logLaneEnqueue, logMessageProcessed, logMessageQueued, logRunAttempt, logSessionStateChange, logSessionStuck, logSuccess, logToolLoopAction, logWarn, logWebhookError, logWebhookProcessed, logWebhookReceived, markdownToIR, markdownToIRWithMeta, markdownToWhatsApp, normalizeAtHashSlug, normalizeE164, normalizeHyphenSlug, normalizeStringEntries, normalizeStringEntriesLower, pathExists, redactIdentifier, redactSensitiveText, redactToolDetail, registerLogTransport, renderMarkdownWithMarkers, resetDiagnosticStateForTest, resetLogger, resolveConfigDir, resolveGlobalMap, resolveGlobalSingleton, resolveHomeDir, resolveJidToE164, resolveReactionLevel, resolveStuckSessionWarnMs, resolveUserPath, safeParseJson, sanitizeTerminalText, setLoggerOverride, sha256HexPrefix, shortenHomeInString, shortenHomePath, sleep, sliceUtf16Safe, startDiagnosticHeartbeat, stopDiagnosticHeartbeat, stripAssistantInternalScaffolding, stripReasoningTagsFromText, summarizeStringEntries, toPinoLikeLogger, toWhatsappJid, truncateUtf16Safe, withTimeout };

package/dist/plugin-sdk/tlon.js

@@ -14,7 +14,7 @@ import "../warning-filter-gJuwHM7C.js";
 import "../utils-rjVNXUns.js";
 import { t as formatDocsLink } from "../links-C5I443Xb.js";
 import "../setup-binary-Fw3cCSWL.js";
-import { Tw as applyAccountNameToChannelSection, WS as createDedupeCache, jw as patchScopedAccountConfig, sg as createReplyPrefixOptions } from "../auth-profiles-BJcHzwPy.js";
+import { Tw as applyAccountNameToChannelSection, WS as createDedupeCache, jw as patchScopedAccountConfig, sg as createReplyPrefixOptions } from "../auth-profiles-9zZdaXJK.js";
 import "../model-selection-DfA4esOK.js";
 import "../agent-scope-DA7O8MVG.js";
 import { n as normalizeAccountId, t as DEFAULT_ACCOUNT_ID } from "../account-id-O4Og6DrK.js";
@@ -22,7 +22,7 @@ import "../boundary-file-read-Y1cMjPlu.js";
 import "../logger-wrbK9-ju.js";
 import "../exec-CoBTyh8B.js";
 import "../workspace-CxNKYS0V.js";
-import "../io-DcoxdH6t.js";
+import "../io-C6XifaT4.js";
 import "../host-env-security-xy11yVnm.js";
 import "../safe-text-BcUvBreN.js";
 import "../version-rW_3ob2o.js";
@@ -32,22 +32,22 @@ import "../network-mode-CE-ihBf6.js";
 import "../registry-DcDGl2X7.js";
 import "../manifest-registry-_0xclaVY.js";
 import "../ip-w605xvSx.js";
-import "../zod-schema.core-CWxzqcUs.js";
-import "../config-CkD8DJ7L.js";
+import "../zod-schema.core-D5reNip6.js";
+import "../config-B2W1zTP1.js";
 import "../audit-fs-SjcfoPO7.js";
-import "../resolve-3ErMOltL.js";
-import { J as fetchWithSsrFGuard } from "../provider-web-search-BR7etTjJ.js";
+import "../resolve-BbsCHGLY.js";
+import { J as fetchWithSsrFGuard } from "../provider-web-search-BJhXD5dH.js";
 import "../text-runtime-CgEQ9Y9_.js";
-import "../workspace-dirs-L1_QQ9mB.js";
-import "../config-BbxrRaLf.js";
+import "../workspace-dirs-d3Ms_ryk.js";
+import "../config-CMhKplgO.js";
 import "../tailnet-KyAU6tj_.js";
 import "../net-B_Iq_SVP.js";
-import "../credentials-D5uBf_C5.js";
-import "../routes-BNDsNO_e.js";
+import "../credentials-yYt6VWCq.js";
+import "../routes-BZtqNrBf.js";
 import "../frontmatter-BTDAgsA3.js";
-import "../env-overrides-BHxqjYZG.js";
+import "../env-overrides-DYVIkuvN.js";
 import "../path-alias-guards-B3ZKrId1.js";
-import "../skills-B4h1k-SP.js";
+import "../skills-4-r1mfJM.js";
 import "../ports-BVwQuCIR.js";
 import "../ports-lsof-DiY6GaAf.js";
 import "../ssh-tunnel-BaHTFPzH.js";
@@ -60,51 +60,51 @@ import "../resolve-route-IkBfMjBz.js";
 import "../internal-hooks-0x1JiQ5f.js";
 import "../lazy-runtime-DdzFA4b9.js";
 import { t as emptyPluginConfigSchema } from "../config-schema-DqodvBpN.js";
-import { r as buildChannelConfigSchema } from "../config-schema-GQ6uWjXe.js";
-import "../method-scopes-D-Q9dvbj.js";
+import { r as buildChannelConfigSchema } from "../config-schema-pPBCF4hz.js";
+import "../method-scopes-Du8ODGFW.js";
 import "../session-cost-usage-B-57mlS8.js";
 import "../paths-CDWV-9nX.js";
 import "../routing-3o2D0ix4.js";
-import "../send-Cm9v3uhF.js";
-import "../node-resolve-DfOpQmxm.js";
+import "../send-BRRtHxyR.js";
+import "../node-resolve-CupmrA0Y.js";
 import "../provider-stream-gVymYPmd.js";
 import "../identity-file-DM4N5_7H.js";
 import "../provider-models-BA3hqqPq.js";
 import "../secret-file-Bjh19aoH.js";
 import "../logging-BdFqMomc.js";
 import "../runtime-env-CT-voxYE.js";
-import "../registry-xhgvU89y.js";
+import "../registry-Dgwc-7eS.js";
 import "../provider-onboard-CBC3kdk_.js";
 import "../model-definitions-DwehIMlw.js";
-import "../diagnostic-vMghIesG.js";
+import "../diagnostic-CkiYEGqt.js";
 import "../message-hook-mappers-DORrSLHM.js";
 import "../json-store-DlpyvQXN.js";
-import "../call-CoaQYq7c.js";
+import "../call-DYFR7oGy.js";
 import "../multimodal-BWF8MRkz.js";
 import "../memory-search-BBG2BKIh.js";
 import "../query-expansion-8R79qExs.js";
-import "../search-manager-CfizyEMk.js";
+import "../search-manager-DxkQvUrW.js";
 import "../core-EKuk2FxR.js";
 import "../issue-format-i6sEuV4a.js";
-import "../logging-S-5LPdfQ.js";
+import "../logging-BhqLWxTD.js";
 import "../note-z78_JyNp.js";
 import "../state-paths-C7dX__ql.js";
-import "../config-value-Dh8m-CFf.js";
+import "../config-value-Dl3XEpA6.js";
 import "../command-secret-targets-CO_lZ_ZZ.js";
-import "../brave-BG5Yopn8.js";
+import "../brave-CljenznH.js";
 import "../provider-usage-DzuzbNBv.js";
-import "../perplexity-Brhpb45X.js";
+import "../perplexity-Bw1u3CAF.js";
 import "../restart-stale-pids-CN9ElYwR.js";
 import "../delivery-queue-DLjFP-0C.js";
 import "../pairing-token-ANLRyJSu.js";
 import "../accounts-BCaV8MsT.js";
 import "../process-runtime-CicRKAFe.js";
-import "../audit-BqRK9OSj.js";
+import "../audit-hdKa3D-u.js";
 import "../cli-runtime-DtIDS2w7.js";
 import "../cli-utils-FHeUZLsT.js";
 import "../help-format-1yV2Xzq7.js";
 import "../progress-BQSTKUhd.js";
-import "../gateway-runtime-C76hUmUV.js";
+import "../gateway-runtime-D9FRZqKP.js";
 import { t as createLoggerBackedRuntime } from "../runtime-CE5bcF01.js";
-import { r as tlonSetupAdapter, t as tlonSetupWizard } from "../tlon-DmK1NUVP.js";
+import { r as tlonSetupAdapter, t as tlonSetupWizard } from "../tlon-Bpr4f3yF.js";
 export { DEFAULT_ACCOUNT_ID, SsrFBlockedError, applyAccountNameToChannelSection, buildChannelConfigSchema, createDedupeCache, createLoggerBackedRuntime, createReplyPrefixOptions, emptyPluginConfigSchema, fetchWithSsrFGuard, formatDocsLink, isBlockedHostnameOrIp, normalizeAccountId, patchScopedAccountConfig, tlonSetupAdapter, tlonSetupWizard };