@spacebar_ai/moldclaw-core 2026.3.14 → 2026.3.16

package/dist/webhooks-cli-B46t2VT5.js

@@ -0,0 +1,349 @@
+import "./logger-BFfIIIKH.js";
+import { t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-D6AgsMTU.js";
+import "./tmp-moldclaw-dir-DWF-d8qD.js";
+import { r as theme } from "./theme-BSXzMzAA.js";
+import { t as danger } from "./globals-DESrFYmC.js";
+import { m as defaultRuntime } from "./subsystem-S4LNMNHd.js";
+import "./ansi-BPhP6LBZ.js";
+import "./boolean-D8Ha5nYV.js";
+import "./env-Dgex_t9p.js";
+import { o as displayPath } from "./utils-rjVNXUns.js";
+import { t as formatDocsLink } from "./links-C5I443Xb.js";
+import "./model-selection-DfA4esOK.js";
+import "./agent-scope-DA7O8MVG.js";
+import "./boundary-file-read-Y1cMjPlu.js";
+import "./logger-wrbK9-ju.js";
+import { n as runCommandWithTimeout } from "./exec-CoBTyh8B.js";
+import "./workspace-CxNKYS0V.js";
+import { c as loadConfig, f as readConfigFileSnapshot, w as validateConfigObjectWithPlugins, y as writeConfigFile } from "./io-C6XifaT4.js";
+import "./host-env-security-xy11yVnm.js";
+import "./safe-text-BcUvBreN.js";
+import "./version-rW_3ob2o.js";
+import "./env-substitution-C9xZMTDL.js";
+import "./config-state-D1JkXt39.js";
+import "./network-mode-CE-ihBf6.js";
+import "./registry-DcDGl2X7.js";
+import "./manifest-registry-_0xclaVY.js";
+import "./ip-w605xvSx.js";
+import "./zod-schema.core-D5reNip6.js";
+import "./config-B2W1zTP1.js";
+import { t as formatCliCommand } from "./command-format-DIDjlImI.js";
+import "./frontmatter-BTDAgsA3.js";
+import "./env-overrides-DYVIkuvN.js";
+import "./path-alias-guards-B3ZKrId1.js";
+import "./skills-4-r1mfJM.js";
+import { C as parseTopicPath, S as normalizeServePath, _ as buildGogWatchStartArgs, a as ensureTopic, b as mergeHookPresets, c as DEFAULT_GMAIL_LABEL, d as DEFAULT_GMAIL_SERVE_PATH, f as DEFAULT_GMAIL_SERVE_PORT, g as buildGogWatchServeArgs, h as buildDefaultHookUrl, i as ensureTailscaleEndpoint, l as DEFAULT_GMAIL_MAX_BYTES, m as DEFAULT_GMAIL_TOPIC, n as ensureGcloudAuth, o as resolveProjectIdFromGogCredentials, p as DEFAULT_GMAIL_SUBSCRIPTION, r as ensureSubscription, s as runGcloud, t as ensureDependency, u as DEFAULT_GMAIL_SERVE_BIND, v as buildTopicPath, w as resolveGmailHookRuntimeConfig, x as normalizeHooksPath, y as generateHookToken } from "./gmail-setup-utils-yNP6c0Px.js";
+import { spawn } from "node:child_process";
+//#region src/hooks/gmail-ops.ts
+const DEFAULT_GMAIL_TOPIC_IAM_MEMBER = "serviceAccount:gmail-api-push@system.gserviceaccount.com";
+async function runGmailSetup(opts) {
+	await ensureDependency("gcloud", ["--cask", "gcloud-cli"]);
+	await ensureDependency("gog", ["gogcli"]);
+	if (opts.tailscale !== "off" && !opts.pushEndpoint) await ensureDependency("tailscale", ["tailscale"]);
+	await ensureGcloudAuth();
+	const configSnapshot = await readConfigFileSnapshot();
+	if (!configSnapshot.valid) throw new Error(`Config invalid: ${CONFIG_PATH}`);
+	const baseConfig = configSnapshot.config;
+	const hooksPath = normalizeHooksPath(baseConfig.hooks?.path);
+	const hookToken = opts.hookToken ?? baseConfig.hooks?.token ?? generateHookToken();
+	const pushToken = opts.pushToken ?? baseConfig.hooks?.gmail?.pushToken ?? generateHookToken();
+	const topicInput = opts.topic ?? baseConfig.hooks?.gmail?.topic ?? "gog-gmail-watch";
+	const parsedTopic = parseTopicPath(topicInput);
+	const topicName = parsedTopic?.topicName ?? topicInput;
+	const projectId = opts.project ?? parsedTopic?.projectId ?? await resolveProjectIdFromGogCredentials();
+	if (!projectId) throw new Error("GCP project id required (use --project or ensure gog credentials are available)");
+	const topicPath = buildTopicPath(projectId, topicName);
+	const subscription = opts.subscription ?? "gog-gmail-watch-push";
+	const label = opts.label ?? "INBOX";
+	const hookUrl = opts.hookUrl ?? baseConfig.hooks?.gmail?.hookUrl ?? buildDefaultHookUrl(hooksPath, resolveGatewayPort(baseConfig));
+	const serveBind = opts.bind ?? "127.0.0.1";
+	const servePort = opts.port ?? 8788;
+	const configuredServePath = opts.path ?? baseConfig.hooks?.gmail?.serve?.path;
+	const configuredTailscaleTarget = opts.tailscaleTarget ?? baseConfig.hooks?.gmail?.tailscale?.target;
+	const normalizedServePath = typeof configuredServePath === "string" && configuredServePath.trim().length > 0 ? normalizeServePath(configuredServePath) : DEFAULT_GMAIL_SERVE_PATH;
+	const normalizedTailscaleTarget = typeof configuredTailscaleTarget === "string" && configuredTailscaleTarget.trim().length > 0 ? configuredTailscaleTarget.trim() : void 0;
+	const includeBody = opts.includeBody ?? true;
+	const maxBytes = opts.maxBytes ?? 2e4;
+	const renewEveryMinutes = opts.renewEveryMinutes ?? 720;
+	const tailscaleMode = opts.tailscale ?? "funnel";
+	const servePath = normalizeServePath(tailscaleMode !== "off" && !normalizedTailscaleTarget ? "/" : normalizedServePath);
+	const tailscalePath = normalizeServePath(opts.tailscalePath ?? baseConfig.hooks?.gmail?.tailscale?.path ?? (tailscaleMode !== "off" ? normalizedServePath : servePath));
+	await runGcloud([
+		"config",
+		"set",
+		"project",
+		projectId,
+		"--quiet"
+	]);
+	await runGcloud([
+		"services",
+		"enable",
+		"gmail.googleapis.com",
+		"pubsub.googleapis.com",
+		"--project",
+		projectId,
+		"--quiet"
+	]);
+	await ensureTopic(projectId, topicName);
+	await runGcloud([
+		"pubsub",
+		"topics",
+		"add-iam-policy-binding",
+		topicName,
+		"--project",
+		projectId,
+		"--member",
+		DEFAULT_GMAIL_TOPIC_IAM_MEMBER,
+		"--role",
+		"roles/pubsub.publisher",
+		"--quiet"
+	]);
+	const pushEndpoint = opts.pushEndpoint ? opts.pushEndpoint : await ensureTailscaleEndpoint({
+		mode: tailscaleMode,
+		path: tailscalePath,
+		port: servePort,
+		target: normalizedTailscaleTarget,
+		token: pushToken
+	});
+	if (!pushEndpoint) throw new Error("push endpoint required (set --push-endpoint)");
+	await ensureSubscription(projectId, subscription, topicName, pushEndpoint);
+	await startGmailWatch({
+		account: opts.account,
+		label,
+		topic: topicPath
+	}, true);
+	const validated = validateConfigObjectWithPlugins({
+		...baseConfig,
+		hooks: {
+			...baseConfig.hooks,
+			enabled: true,
+			path: hooksPath,
+			token: hookToken,
+			presets: mergeHookPresets(baseConfig.hooks?.presets, "gmail"),
+			gmail: {
+				...baseConfig.hooks?.gmail,
+				account: opts.account,
+				label,
+				topic: topicPath,
+				subscription,
+				pushToken,
+				hookUrl,
+				includeBody,
+				maxBytes,
+				renewEveryMinutes,
+				serve: {
+					...baseConfig.hooks?.gmail?.serve,
+					bind: serveBind,
+					port: servePort,
+					path: servePath
+				},
+				tailscale: {
+					...baseConfig.hooks?.gmail?.tailscale,
+					mode: tailscaleMode,
+					path: tailscalePath,
+					target: normalizedTailscaleTarget
+				}
+			}
+		}
+	});
+	if (!validated.ok) throw new Error(`Config validation failed: ${validated.issues[0]?.message ?? "invalid"}`);
+	await writeConfigFile(validated.config);
+	const summary = {
+		projectId,
+		topic: topicPath,
+		subscription,
+		pushEndpoint,
+		hookUrl,
+		hookToken,
+		pushToken,
+		serve: {
+			bind: serveBind,
+			port: servePort,
+			path: servePath
+		}
+	};
+	if (opts.json) {
+		defaultRuntime.log(JSON.stringify(summary, null, 2));
+		return;
+	}
+	defaultRuntime.log("Gmail hooks configured:");
+	defaultRuntime.log(`- project: ${projectId}`);
+	defaultRuntime.log(`- topic: ${topicPath}`);
+	defaultRuntime.log(`- subscription: ${subscription}`);
+	defaultRuntime.log(`- push endpoint: ${pushEndpoint}`);
+	defaultRuntime.log(`- hook url: ${hookUrl}`);
+	defaultRuntime.log(`- config: ${displayPath(CONFIG_PATH)}`);
+	defaultRuntime.log(`Next: ${formatCliCommand("moldclaw webhooks gmail run")}`);
+}
+async function runGmailService(opts) {
+	await ensureDependency("gog", ["gogcli"]);
+	const resolved = resolveGmailHookRuntimeConfig(loadConfig(), {
+		account: opts.account,
+		topic: opts.topic,
+		subscription: opts.subscription,
+		label: opts.label,
+		hookToken: opts.hookToken,
+		pushToken: opts.pushToken,
+		hookUrl: opts.hookUrl,
+		serveBind: opts.bind,
+		servePort: opts.port,
+		servePath: opts.path,
+		includeBody: opts.includeBody,
+		maxBytes: opts.maxBytes,
+		renewEveryMinutes: opts.renewEveryMinutes,
+		tailscaleMode: opts.tailscale,
+		tailscalePath: opts.tailscalePath,
+		tailscaleTarget: opts.tailscaleTarget
+	});
+	if (!resolved.ok) throw new Error(resolved.error);
+	const runtimeConfig = resolved.value;
+	if (runtimeConfig.tailscale.mode !== "off") {
+		await ensureDependency("tailscale", ["tailscale"]);
+		await ensureTailscaleEndpoint({
+			mode: runtimeConfig.tailscale.mode,
+			path: runtimeConfig.tailscale.path,
+			port: runtimeConfig.serve.port,
+			target: runtimeConfig.tailscale.target
+		});
+	}
+	await startGmailWatch(runtimeConfig);
+	let shuttingDown = false;
+	let child = spawnGogServe(runtimeConfig);
+	const renewMs = runtimeConfig.renewEveryMinutes * 6e4;
+	const renewTimer = setInterval(() => {
+		startGmailWatch(runtimeConfig);
+	}, renewMs);
+	const detachSignals = () => {
+		process.off("SIGINT", shutdown);
+		process.off("SIGTERM", shutdown);
+	};
+	const shutdown = () => {
+		if (shuttingDown) return;
+		shuttingDown = true;
+		detachSignals();
+		clearInterval(renewTimer);
+		child.kill("SIGTERM");
+	};
+	process.on("SIGINT", shutdown);
+	process.on("SIGTERM", shutdown);
+	child.on("exit", () => {
+		if (shuttingDown) {
+			detachSignals();
+			return;
+		}
+		defaultRuntime.log("gog watch serve exited; restarting in 2s");
+		setTimeout(() => {
+			if (shuttingDown) return;
+			child = spawnGogServe(runtimeConfig);
+		}, 2e3);
+	});
+}
+function spawnGogServe(cfg) {
+	const args = buildGogWatchServeArgs(cfg);
+	defaultRuntime.log(`Starting gog ${args.join(" ")}`);
+	return spawn("gog", args, { stdio: "inherit" });
+}
+async function startGmailWatch(cfg, fatal = false) {
+	const result = await runCommandWithTimeout(["gog", ...buildGogWatchStartArgs(cfg)], { timeoutMs: 12e4 });
+	if (result.code !== 0) {
+		const message = result.stderr || result.stdout || "gog watch start failed";
+		if (fatal) throw new Error(message);
+		defaultRuntime.error(message);
+	}
+}
+//#endregion
+//#region src/cli/webhooks-cli.ts
+function registerWebhooksCli(program) {
+	const gmail = program.command("webhooks").description("Webhook helpers and integrations").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/webhooks", "docs.moldclaw.ai/cli/webhooks")}\n`).command("gmail").description("Gmail Pub/Sub hooks (via gogcli)");
+	gmail.command("setup").description("Configure Gmail watch + Pub/Sub + moldClaw hooks").requiredOption("--account <email>", "Gmail account to watch").option("--project <id>", "GCP project id (OAuth client owner)").option("--topic <name>", "Pub/Sub topic name", DEFAULT_GMAIL_TOPIC).option("--subscription <name>", "Pub/Sub subscription name", DEFAULT_GMAIL_SUBSCRIPTION).option("--label <label>", "Gmail label to watch", DEFAULT_GMAIL_LABEL).option("--hook-url <url>", "moldClaw hook URL").option("--hook-token <token>", "moldClaw hook token").option("--push-token <token>", "Push token for gog watch serve").option("--bind <host>", "gog watch serve bind host", DEFAULT_GMAIL_SERVE_BIND).option("--port <port>", "gog watch serve port", String(DEFAULT_GMAIL_SERVE_PORT)).option("--path <path>", "gog watch serve path", DEFAULT_GMAIL_SERVE_PATH).option("--include-body", "Include email body snippets", true).option("--max-bytes <n>", "Max bytes for body snippets", String(DEFAULT_GMAIL_MAX_BYTES)).option("--renew-minutes <n>", "Renew watch every N minutes", String(720)).option("--tailscale <mode>", "Expose push endpoint via tailscale (funnel|serve|off)", "funnel").option("--tailscale-path <path>", "Path for tailscale serve/funnel").option("--tailscale-target <target>", "Tailscale serve/funnel target (port, host:port, or URL)").option("--push-endpoint <url>", "Explicit Pub/Sub push endpoint").option("--json", "Output JSON summary", false).action(async (opts) => {
+		try {
+			await runGmailSetup(parseGmailSetupOptions(opts));
+		} catch (err) {
+			defaultRuntime.error(danger(String(err)));
+			defaultRuntime.exit(1);
+		}
+	});
+	gmail.command("run").description("Run gog watch serve + auto-renew loop").option("--account <email>", "Gmail account to watch").option("--topic <topic>", "Pub/Sub topic path (projects/.../topics/..)").option("--subscription <name>", "Pub/Sub subscription name").option("--label <label>", "Gmail label to watch").option("--hook-url <url>", "moldClaw hook URL").option("--hook-token <token>", "moldClaw hook token").option("--push-token <token>", "Push token for gog watch serve").option("--bind <host>", "gog watch serve bind host").option("--port <port>", "gog watch serve port").option("--path <path>", "gog watch serve path").option("--include-body", "Include email body snippets").option("--max-bytes <n>", "Max bytes for body snippets").option("--renew-minutes <n>", "Renew watch every N minutes").option("--tailscale <mode>", "Expose push endpoint via tailscale (funnel|serve|off)").option("--tailscale-path <path>", "Path for tailscale serve/funnel").option("--tailscale-target <target>", "Tailscale serve/funnel target (port, host:port, or URL)").action(async (opts) => {
+		try {
+			await runGmailService(parseGmailRunOptions(opts));
+		} catch (err) {
+			defaultRuntime.error(danger(String(err)));
+			defaultRuntime.exit(1);
+		}
+	});
+}
+function parseGmailSetupOptions(raw) {
+	const accountRaw = raw.account;
+	const account = typeof accountRaw === "string" ? accountRaw.trim() : "";
+	if (!account) throw new Error("--account is required");
+	const common = parseGmailCommonOptions(raw);
+	return {
+		account,
+		project: stringOption(raw.project),
+		...gmailOptionsFromCommon(common),
+		pushEndpoint: stringOption(raw.pushEndpoint),
+		json: Boolean(raw.json)
+	};
+}
+function parseGmailRunOptions(raw) {
+	const common = parseGmailCommonOptions(raw);
+	return {
+		account: stringOption(raw.account),
+		...gmailOptionsFromCommon(common)
+	};
+}
+function parseGmailCommonOptions(raw) {
+	return {
+		topic: stringOption(raw.topic),
+		subscription: stringOption(raw.subscription),
+		label: stringOption(raw.label),
+		hookUrl: stringOption(raw.hookUrl),
+		hookToken: stringOption(raw.hookToken),
+		pushToken: stringOption(raw.pushToken),
+		bind: stringOption(raw.bind),
+		port: numberOption(raw.port),
+		path: stringOption(raw.path),
+		includeBody: booleanOption(raw.includeBody),
+		maxBytes: numberOption(raw.maxBytes),
+		renewEveryMinutes: numberOption(raw.renewMinutes),
+		tailscaleRaw: stringOption(raw.tailscale),
+		tailscalePath: stringOption(raw.tailscalePath),
+		tailscaleTarget: stringOption(raw.tailscaleTarget)
+	};
+}
+function gmailOptionsFromCommon(common) {
+	return {
+		topic: common.topic,
+		subscription: common.subscription,
+		label: common.label,
+		hookUrl: common.hookUrl,
+		hookToken: common.hookToken,
+		pushToken: common.pushToken,
+		bind: common.bind,
+		port: common.port,
+		path: common.path,
+		includeBody: common.includeBody,
+		maxBytes: common.maxBytes,
+		renewEveryMinutes: common.renewEveryMinutes,
+		tailscale: common.tailscaleRaw,
+		tailscalePath: common.tailscalePath,
+		tailscaleTarget: common.tailscaleTarget
+	};
+}
+function stringOption(value) {
+	if (typeof value !== "string") return;
+	const trimmed = value.trim();
+	return trimmed ? trimmed : void 0;
+}
+function numberOption(value) {
+	if (value === void 0 || value === null) return;
+	const n = typeof value === "number" ? value : Number(value);
+	if (!Number.isFinite(n) || n <= 0) return;
+	return Math.floor(n);
+}
+function booleanOption(value) {
+	if (value === void 0 || value === null) return;
+	return Boolean(value);
+}
+//#endregion
+export { registerWebhooksCli };

package/dist/whatsapp-Dniwd4Rv.js

@@ -0,0 +1,109 @@
+import "./redact-fatrROh9.js";
+import "./errors-DOJWZqNo.js";
+import "./unhandled-rejections-CTvNvnT0.js";
+import "./logger-BFfIIIKH.js";
+import "./paths-D6AgsMTU.js";
+import "./tmp-moldclaw-dir-DWF-d8qD.js";
+import "./theme-BSXzMzAA.js";
+import "./globals-DESrFYmC.js";
+import "./subsystem-S4LNMNHd.js";
+import "./ansi-BPhP6LBZ.js";
+import "./boolean-D8Ha5nYV.js";
+import "./env-Dgex_t9p.js";
+import "./warning-filter-gJuwHM7C.js";
+import "./utils-rjVNXUns.js";
+import "./links-C5I443Xb.js";
+import "./setup-binary-Fw3cCSWL.js";
+import { tr as sendMessageWhatsApp } from "./auth-profiles-9zZdaXJK.js";
+import "./model-selection-DfA4esOK.js";
+import "./agent-scope-DA7O8MVG.js";
+import "./boundary-file-read-Y1cMjPlu.js";
+import "./logger-wrbK9-ju.js";
+import "./exec-CoBTyh8B.js";
+import "./workspace-CxNKYS0V.js";
+import "./io-C6XifaT4.js";
+import "./host-env-security-xy11yVnm.js";
+import "./safe-text-BcUvBreN.js";
+import "./version-rW_3ob2o.js";
+import "./env-substitution-C9xZMTDL.js";
+import "./config-state-D1JkXt39.js";
+import "./network-mode-CE-ihBf6.js";
+import "./registry-DcDGl2X7.js";
+import "./manifest-registry-_0xclaVY.js";
+import "./ip-w605xvSx.js";
+import "./zod-schema.core-D5reNip6.js";
+import "./config-B2W1zTP1.js";
+import "./audit-fs-SjcfoPO7.js";
+import "./resolve-BbsCHGLY.js";
+import "./provider-web-search-BJhXD5dH.js";
+import "./text-runtime-CgEQ9Y9_.js";
+import "./workspace-dirs-d3Ms_ryk.js";
+import "./config-CMhKplgO.js";
+import "./tailnet-KyAU6tj_.js";
+import "./net-B_Iq_SVP.js";
+import "./credentials-yYt6VWCq.js";
+import "./routes-BZtqNrBf.js";
+import "./frontmatter-BTDAgsA3.js";
+import "./env-overrides-DYVIkuvN.js";
+import "./path-alias-guards-B3ZKrId1.js";
+import "./skills-4-r1mfJM.js";
+import "./ports-BVwQuCIR.js";
+import "./ports-lsof-DiY6GaAf.js";
+import "./ssh-tunnel-BaHTFPzH.js";
+import "./image-ops-Uw4rEShL.js";
+import "./fs-safe-Da4H0IOU.js";
+import "./mime-_IkgFMS2.js";
+import "./server-middleware-BPq4bu3A.js";
+import "./message-channel-CKeDAoOT.js";
+import "./resolve-route-IkBfMjBz.js";
+import "./internal-hooks-0x1JiQ5f.js";
+import "./lazy-runtime-DdzFA4b9.js";
+import "./config-schema-pPBCF4hz.js";
+import "./method-scopes-Du8ODGFW.js";
+import "./session-cost-usage-B-57mlS8.js";
+import "./paths-CDWV-9nX.js";
+import "./routing-3o2D0ix4.js";
+import "./send-BRRtHxyR.js";
+import "./node-resolve-CupmrA0Y.js";
+import "./provider-stream-gVymYPmd.js";
+import "./identity-file-DM4N5_7H.js";
+import "./provider-models-BA3hqqPq.js";
+import "./secret-file-Bjh19aoH.js";
+import "./logging-BdFqMomc.js";
+import "./runtime-env-CT-voxYE.js";
+import "./registry-Dgwc-7eS.js";
+import "./provider-onboard-CBC3kdk_.js";
+import "./model-definitions-DwehIMlw.js";
+import "./diagnostic-CkiYEGqt.js";
+import "./message-hook-mappers-DORrSLHM.js";
+import "./json-store-DlpyvQXN.js";
+import "./call-DYFR7oGy.js";
+import "./multimodal-BWF8MRkz.js";
+import "./memory-search-BBG2BKIh.js";
+import "./query-expansion-8R79qExs.js";
+import "./search-manager-DxkQvUrW.js";
+import "./core-EKuk2FxR.js";
+import "./issue-format-i6sEuV4a.js";
+import "./logging-BhqLWxTD.js";
+import "./note-z78_JyNp.js";
+import "./state-paths-C7dX__ql.js";
+import "./config-value-Dl3XEpA6.js";
+import "./command-secret-targets-CO_lZ_ZZ.js";
+import "./brave-CljenznH.js";
+import "./provider-usage-DzuzbNBv.js";
+import "./perplexity-Bw1u3CAF.js";
+import "./restart-stale-pids-CN9ElYwR.js";
+import "./delivery-queue-DLjFP-0C.js";
+import "./pairing-token-ANLRyJSu.js";
+import "./accounts-BCaV8MsT.js";
+import "./process-runtime-CicRKAFe.js";
+import "./audit-hdKa3D-u.js";
+import "./cli-runtime-DtIDS2w7.js";
+import "./cli-utils-FHeUZLsT.js";
+import "./help-format-1yV2Xzq7.js";
+import "./progress-BQSTKUhd.js";
+import "./gateway-runtime-D9FRZqKP.js";
+//#region src/cli/send-runtime/whatsapp.ts
+const runtimeSend = { sendMessage: sendMessageWhatsApp };
+//#endregion
+export { runtimeSend };

package/dist/whatsapp-actions-fL46PsNs.js

@@ -0,0 +1,162 @@
+import "./redact-fatrROh9.js";
+import "./errors-DOJWZqNo.js";
+import "./unhandled-rejections-CTvNvnT0.js";
+import "./logger-BFfIIIKH.js";
+import "./paths-D6AgsMTU.js";
+import "./tmp-moldclaw-dir-DWF-d8qD.js";
+import "./theme-BSXzMzAA.js";
+import "./globals-DESrFYmC.js";
+import "./subsystem-S4LNMNHd.js";
+import "./ansi-BPhP6LBZ.js";
+import "./boolean-D8Ha5nYV.js";
+import "./env-Dgex_t9p.js";
+import "./warning-filter-gJuwHM7C.js";
+import "./utils-rjVNXUns.js";
+import "./links-C5I443Xb.js";
+import "./setup-binary-Fw3cCSWL.js";
+import { lr as resolveWhatsAppAccount, lw as resolveWhatsAppOutboundTarget, rr as sendReactionWhatsApp } from "./auth-profiles-9zZdaXJK.js";
+import "./model-selection-DfA4esOK.js";
+import "./agent-scope-DA7O8MVG.js";
+import "./boundary-file-read-Y1cMjPlu.js";
+import "./logger-wrbK9-ju.js";
+import "./exec-CoBTyh8B.js";
+import "./workspace-CxNKYS0V.js";
+import "./io-C6XifaT4.js";
+import "./host-env-security-xy11yVnm.js";
+import "./safe-text-BcUvBreN.js";
+import "./version-rW_3ob2o.js";
+import "./env-substitution-C9xZMTDL.js";
+import "./config-state-D1JkXt39.js";
+import "./network-mode-CE-ihBf6.js";
+import "./registry-DcDGl2X7.js";
+import "./manifest-registry-_0xclaVY.js";
+import "./ip-w605xvSx.js";
+import "./zod-schema.core-D5reNip6.js";
+import "./config-B2W1zTP1.js";
+import "./audit-fs-SjcfoPO7.js";
+import "./resolve-BbsCHGLY.js";
+import { D as ToolAuthorizationError, F as readReactionParams, M as jsonResult, R as readStringParam, k as createActionGate } from "./provider-web-search-BJhXD5dH.js";
+import "./text-runtime-CgEQ9Y9_.js";
+import "./workspace-dirs-d3Ms_ryk.js";
+import "./config-CMhKplgO.js";
+import "./tailnet-KyAU6tj_.js";
+import "./net-B_Iq_SVP.js";
+import "./credentials-yYt6VWCq.js";
+import "./routes-BZtqNrBf.js";
+import "./frontmatter-BTDAgsA3.js";
+import "./env-overrides-DYVIkuvN.js";
+import "./path-alias-guards-B3ZKrId1.js";
+import "./skills-4-r1mfJM.js";
+import "./ports-BVwQuCIR.js";
+import "./ports-lsof-DiY6GaAf.js";
+import "./ssh-tunnel-BaHTFPzH.js";
+import "./image-ops-Uw4rEShL.js";
+import "./fs-safe-Da4H0IOU.js";
+import "./mime-_IkgFMS2.js";
+import "./server-middleware-BPq4bu3A.js";
+import "./message-channel-CKeDAoOT.js";
+import "./resolve-route-IkBfMjBz.js";
+import "./internal-hooks-0x1JiQ5f.js";
+import "./lazy-runtime-DdzFA4b9.js";
+import "./config-schema-pPBCF4hz.js";
+import "./method-scopes-Du8ODGFW.js";
+import "./session-cost-usage-B-57mlS8.js";
+import "./paths-CDWV-9nX.js";
+import "./routing-3o2D0ix4.js";
+import "./send-BRRtHxyR.js";
+import "./node-resolve-CupmrA0Y.js";
+import "./provider-stream-gVymYPmd.js";
+import "./identity-file-DM4N5_7H.js";
+import "./provider-models-BA3hqqPq.js";
+import "./secret-file-Bjh19aoH.js";
+import "./logging-BdFqMomc.js";
+import "./runtime-env-CT-voxYE.js";
+import "./registry-Dgwc-7eS.js";
+import "./provider-onboard-CBC3kdk_.js";
+import "./model-definitions-DwehIMlw.js";
+import "./diagnostic-CkiYEGqt.js";
+import "./message-hook-mappers-DORrSLHM.js";
+import "./json-store-DlpyvQXN.js";
+import "./call-DYFR7oGy.js";
+import "./multimodal-BWF8MRkz.js";
+import "./memory-search-BBG2BKIh.js";
+import "./query-expansion-8R79qExs.js";
+import "./search-manager-DxkQvUrW.js";
+import "./core-EKuk2FxR.js";
+import "./issue-format-i6sEuV4a.js";
+import "./logging-BhqLWxTD.js";
+import "./note-z78_JyNp.js";
+import "./state-paths-C7dX__ql.js";
+import "./config-value-Dl3XEpA6.js";
+import "./command-secret-targets-CO_lZ_ZZ.js";
+import "./brave-CljenznH.js";
+import "./provider-usage-DzuzbNBv.js";
+import "./perplexity-Bw1u3CAF.js";
+import "./restart-stale-pids-CN9ElYwR.js";
+import "./delivery-queue-DLjFP-0C.js";
+import "./pairing-token-ANLRyJSu.js";
+import "./accounts-BCaV8MsT.js";
+import "./process-runtime-CicRKAFe.js";
+import "./audit-hdKa3D-u.js";
+import "./cli-runtime-DtIDS2w7.js";
+import "./cli-utils-FHeUZLsT.js";
+import "./help-format-1yV2Xzq7.js";
+import "./progress-BQSTKUhd.js";
+import "./gateway-runtime-D9FRZqKP.js";
+//#region src/agents/tools/whatsapp-target-auth.ts
+function resolveAuthorizedWhatsAppOutboundTarget(params) {
+	const account = resolveWhatsAppAccount({
+		cfg: params.cfg,
+		accountId: params.accountId
+	});
+	const resolution = resolveWhatsAppOutboundTarget({
+		to: params.chatJid,
+		allowFrom: account.allowFrom ?? [],
+		mode: "implicit"
+	});
+	if (!resolution.ok) throw new ToolAuthorizationError(`WhatsApp ${params.actionLabel} blocked: chatJid "${params.chatJid}" is not in the configured allowFrom list for account "${account.accountId}".`);
+	return {
+		to: resolution.to,
+		accountId: account.accountId
+	};
+}
+//#endregion
+//#region src/agents/tools/whatsapp-actions.ts
+async function handleWhatsAppAction(params, cfg) {
+	const action = readStringParam(params, "action", { required: true });
+	const isActionEnabled = createActionGate(cfg.channels?.whatsapp?.actions);
+	if (action === "react") {
+		if (!isActionEnabled("reactions")) throw new Error("WhatsApp reactions are disabled.");
+		const chatJid = readStringParam(params, "chatJid", { required: true });
+		const messageId = readStringParam(params, "messageId", { required: true });
+		const { emoji, remove, isEmpty } = readReactionParams(params, { removeErrorMessage: "Emoji is required to remove a WhatsApp reaction." });
+		const participant = readStringParam(params, "participant");
+		const accountId = readStringParam(params, "accountId");
+		const fromMeRaw = params.fromMe;
+		const fromMe = typeof fromMeRaw === "boolean" ? fromMeRaw : void 0;
+		const resolved = resolveAuthorizedWhatsAppOutboundTarget({
+			cfg,
+			chatJid,
+			accountId,
+			actionLabel: "reaction"
+		});
+		const resolvedEmoji = remove ? "" : emoji;
+		await sendReactionWhatsApp(resolved.to, messageId, resolvedEmoji, {
+			verbose: false,
+			fromMe,
+			participant: participant ?? void 0,
+			accountId: resolved.accountId
+		});
+		if (!remove && !isEmpty) return jsonResult({
+			ok: true,
+			added: emoji
+		});
+		return jsonResult({
+			ok: true,
+			removed: true
+		});
+	}
+	throw new Error(`Unsupported WhatsApp action: ${action}`);
+}
+//#endregion
+export { handleWhatsAppAction };

package/dist/windows-spawn-DGeE98SH.d.ts

@@ -0,0 +1,43 @@
+//#region src/plugin-sdk/windows-spawn.d.ts
+type WindowsSpawnResolution = "direct" | "node-entrypoint" | "exe-entrypoint" | "shell-fallback";
+type WindowsSpawnCandidateResolution = Exclude<WindowsSpawnResolution, "shell-fallback">;
+type WindowsSpawnProgramCandidate = {
+  command: string;
+  leadingArgv: string[];
+  resolution: WindowsSpawnCandidateResolution | "unresolved-wrapper";
+  windowsHide?: boolean;
+};
+type WindowsSpawnProgram = {
+  command: string;
+  leadingArgv: string[];
+  resolution: WindowsSpawnResolution;
+  shell?: boolean;
+  windowsHide?: boolean;
+};
+type WindowsSpawnInvocation = {
+  command: string;
+  argv: string[];
+  resolution: WindowsSpawnResolution;
+  shell?: boolean;
+  windowsHide?: boolean;
+};
+type ResolveWindowsSpawnProgramParams = {
+  command: string;
+  platform?: NodeJS.Platform;
+  env?: NodeJS.ProcessEnv;
+  execPath?: string;
+  packageName?: string;
+  allowShellFallback?: boolean;
+};
+type ResolveWindowsSpawnProgramCandidateParams = Omit<ResolveWindowsSpawnProgramParams, "allowShellFallback">;
+/** Resolve the safest direct spawn candidate for Windows wrappers, scripts, and binaries. */
+declare function resolveWindowsSpawnProgramCandidate(params: ResolveWindowsSpawnProgramCandidateParams): WindowsSpawnProgramCandidate;
+/** Apply shell-fallback policy when Windows wrapper resolution could not find a direct entrypoint. */
+declare function applyWindowsSpawnProgramPolicy(params: {
+  candidate: WindowsSpawnProgramCandidate;
+  allowShellFallback?: boolean;
+}): WindowsSpawnProgram;
+/** Combine a resolved Windows spawn program with call-site argv for actual process launch. */
+declare function materializeWindowsSpawnProgram(program: WindowsSpawnProgram, argv: string[]): WindowsSpawnInvocation;
+//#endregion
+export { materializeWindowsSpawnProgram as a, applyWindowsSpawnProgramPolicy as i, WindowsSpawnProgramCandidate as n, resolveWindowsSpawnProgramCandidate as o, WindowsSpawnResolution as r, WindowsSpawnProgram as t };