@spacebar_ai/moldclaw-core 2026.3.34 → 2026.3.37

package/dist/{deliver-runtime-rxgXLPmI.js → deliver-runtime-CjzjNvfD.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import "./links-BcahUP5U.js";
 import "./setup-binary-C17YnmA8.js";
-import { su as deliverOutboundPayloads } from "./auth-profiles-DyDb7qXP.js";
+import { su as deliverOutboundPayloads } from "./auth-profiles-DrQTUlZ0.js";
 import "./model-selection-hL8i1Jbs.js";
 import "./agent-scope-C-YmLnnb.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -60,7 +60,7 @@ import "./resolve-route-CSHDsa_m.js";
 import "./internal-hooks-83AcmxP3.js";
 import "./lazy-runtime-BoGB4usD.js";
 import "./config-schema-BNU4GQh_.js";
-import "./method-scopes-DTNYkocH.js";
+import "./method-scopes-CfRtamRU.js";
 import "./session-cost-usage-DWgQk6XT.js";
 import "./paths-ApLcu1Uu.js";
 import "./routing-DQ-fpTaA.js";
@@ -75,18 +75,18 @@ import "./runtime-env-BlEtPF6b.js";
 import "./registry-BFMbkmgR.js";
 import "./provider-onboard-Ca0TaNud.js";
 import "./model-definitions-Cyyzm6Kr.js";
-import "./usage-mHPlkPI4.js";
-import "./device-identity-DdfNLdug.js";
-import "./auth-C-elARYa.js";
-import "./subscription-D9tfSJfc.js";
+import "./usage-CqX1OOPJ.js";
+import "./device-identity-B4itFxET.js";
+import "./auth-44xGYGG8.js";
+import "./subscription-DVc65BPl.js";
 import "./diagnostic-D96Xaqrj.js";
 import "./message-hook-mappers-CeiHXgSQ.js";
 import "./json-store--7cBPxTG.js";
-import "./call-7m_dY36v.js";
+import "./call-DPyZUKSd.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-Cv1SBrn7.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-BmwOKnaU.js";
+import "./search-manager-CkjD54Cn.js";
 import "./core-CvDzLs7B.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CxP9suT8.js";
@@ -102,10 +102,10 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-Xw6kjEpM.js";
+import "./audit-7XJK3Cs2.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import "./help-format-BFzPm_8V.js";
 import "./progress-Cwq59vgZ.js";
-import "./gateway-runtime-D4jWu9X8.js";
+import "./gateway-runtime-BY9n2Yad.js";
 export { deliverOutboundPayloads };

package/dist/{deliver-Dk3MOfDe.js → deliver-yhe2g8_w.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import "./links-BcahUP5U.js";
 import "./setup-binary-C17YnmA8.js";
-import { su as deliverOutboundPayloads } from "./auth-profiles-DyDb7qXP.js";
+import { su as deliverOutboundPayloads } from "./auth-profiles-DrQTUlZ0.js";
 import "./model-selection-hL8i1Jbs.js";
 import "./agent-scope-C-YmLnnb.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -60,7 +60,7 @@ import "./resolve-route-CSHDsa_m.js";
 import "./internal-hooks-83AcmxP3.js";
 import "./lazy-runtime-BoGB4usD.js";
 import "./config-schema-BNU4GQh_.js";
-import "./method-scopes-DTNYkocH.js";
+import "./method-scopes-CfRtamRU.js";
 import "./session-cost-usage-DWgQk6XT.js";
 import "./paths-ApLcu1Uu.js";
 import "./routing-DQ-fpTaA.js";
@@ -75,18 +75,18 @@ import "./runtime-env-BlEtPF6b.js";
 import "./registry-BFMbkmgR.js";
 import "./provider-onboard-Ca0TaNud.js";
 import "./model-definitions-Cyyzm6Kr.js";
-import "./usage-mHPlkPI4.js";
-import "./device-identity-DdfNLdug.js";
-import "./auth-C-elARYa.js";
-import "./subscription-D9tfSJfc.js";
+import "./usage-CqX1OOPJ.js";
+import "./device-identity-B4itFxET.js";
+import "./auth-44xGYGG8.js";
+import "./subscription-DVc65BPl.js";
 import "./diagnostic-D96Xaqrj.js";
 import "./message-hook-mappers-CeiHXgSQ.js";
 import "./json-store--7cBPxTG.js";
-import "./call-7m_dY36v.js";
+import "./call-DPyZUKSd.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-Cv1SBrn7.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-BmwOKnaU.js";
+import "./search-manager-CkjD54Cn.js";
 import "./core-CvDzLs7B.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CxP9suT8.js";
@@ -102,10 +102,10 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-Xw6kjEpM.js";
+import "./audit-7XJK3Cs2.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import "./help-format-BFzPm_8V.js";
 import "./progress-Cwq59vgZ.js";
-import "./gateway-runtime-D4jWu9X8.js";
+import "./gateway-runtime-BY9n2Yad.js";
 export { deliverOutboundPayloads };

package/dist/{device-id-cli-B9imn0Kc.js → device-id-cli-BuGh2DaA.js}

@@ -2,8 +2,8 @@ import "./redact-fatrROh9.js";
 import "./errors-DOJWZqNo.js";
 import "./paths-D6AgsMTU.js";
 import { n as defaultRuntime } from "./runtime-_tQz41uA.js";
-import { i as publicKeyRawBase64UrlFromPem, n as loadOrCreateDeviceIdentity } from "./device-identity-DdfNLdug.js";
-import { t as createSubscriptionAuthHeaders } from "./auth-C-elARYa.js";
+import { i as publicKeyRawBase64UrlFromPem, n as loadOrCreateDeviceIdentity } from "./device-identity-B4itFxET.js";
+import { t as createSubscriptionAuthHeaders } from "./auth-44xGYGG8.js";
 import { n as runCommandWithRuntime } from "./cli-utils-BCuSS4l6.js";
 //#region src/cli/device-id-cli.ts
 /**

package/dist/device-identity-B4itFxET.js

@@ -0,0 +1,340 @@
+import { _ as resolveStateDir } from "./paths-D6AgsMTU.js";
+import fs from "node:fs";
+import path from "node:path";
+import { execSync } from "node:child_process";
+import os from "node:os";
+import crypto from "node:crypto";
+//#region src/infra/fingerprint.ts
+/**
+* Device Fingerprint Generation
+*
+* Generates platform-specific device fingerprint using hardware identifiers.
+* Must match Rust implementation in moldClaw Desktop (fingerprint.rs).
+*
+* Security notes:
+* - Only hash is transmitted, never raw hardware info
+* - Multiple sources combined for uniqueness
+* - Works in VM environments
+*/
+function sha256(input) {
+	return crypto.createHash("sha256").update(input).digest("hex");
+}
+function execCommand(command) {
+	try {
+		return execSync(command, {
+			encoding: "utf8",
+			timeout: 5e3,
+			stdio: [
+				"pipe",
+				"pipe",
+				"pipe"
+			]
+		}).trim();
+	} catch {
+		return null;
+	}
+}
+/**
+* Windows fingerprint: MachineGuid + ProcessorId + BIOS
+* Must match Rust: collect_fingerprint_data() for Windows
+*/
+function collectWindowsFingerprint() {
+	const components = [];
+	const machineGuid = execCommand(`powershell -NoProfile -Command "(Get-ItemProperty -Path 'HKLM:\\SOFTWARE\\Microsoft\\Cryptography' -Name 'MachineGuid').MachineGuid"`);
+	if (machineGuid) components.push(`machine_guid:${machineGuid}`);
+	const processorId = execCommand(`powershell -NoProfile -Command "(Get-WmiObject -Class Win32_Processor).ProcessorId"`);
+	if (processorId) components.push(`cpu_id:${processorId}`);
+	const biosSerial = execCommand(`powershell -NoProfile -Command "(Get-WmiObject Win32_BIOS).SerialNumber"`);
+	if (biosSerial && !biosSerial.includes("To Be Filled")) components.push(`bios:${biosSerial}`);
+	if (components.length < 2) {
+		const username = process.env.USERNAME || "";
+		const computername = process.env.COMPUTERNAME || "";
+		components.push(`fallback:${username}@${computername}`);
+	}
+	if (components.length === 0) throw new Error("Failed to collect Windows fingerprint data");
+	return components.join("|");
+}
+/**
+* macOS fingerprint: IOPlatformUUID + Hardware UUID
+* Must match Rust: collect_fingerprint_data() for macOS
+*/
+function collectMacOSFingerprint() {
+	const components = [];
+	const uuid = execCommand(`ioreg -rd1 -c IOPlatformExpertDevice | awk -F'"' '/IOPlatformUUID/{print $4}'`);
+	if (uuid) components.push(`platform_uuid:${uuid}`);
+	const hardwareInfo = execCommand(`system_profiler SPHardwareDataType`);
+	if (hardwareInfo) {
+		const match = hardwareInfo.match(/Hardware UUID:\s*(.+)/i);
+		if (match?.[1]) components.push(`hardware_uuid:${match[1].trim()}`);
+	}
+	if (components.length === 0 && hardwareInfo) {
+		const match = hardwareInfo.match(/Serial Number.*?:\s*(.+)/i);
+		if (match?.[1]) components.push(`serial:${match[1].trim()}`);
+	}
+	if (components.length === 0) throw new Error("Failed to collect macOS fingerprint data");
+	return components.join("|");
+}
+/**
+* Linux fingerprint: /etc/machine-id + CPU info + product_uuid
+* Must match Rust: collect_fingerprint_data() for Linux
+*/
+function collectLinuxFingerprint() {
+	const components = [];
+	try {
+		const machineId = fs.readFileSync("/etc/machine-id", "utf8").trim();
+		if (machineId) components.push(`machine_id:${machineId}`);
+	} catch {
+		try {
+			const machineId = fs.readFileSync("/var/lib/dbus/machine-id", "utf8").trim();
+			if (machineId) components.push(`dbus_machine_id:${machineId}`);
+		} catch {}
+	}
+	try {
+		const cpuinfo = fs.readFileSync("/proc/cpuinfo", "utf8");
+		let modelName = "";
+		let processorCount = 0;
+		for (const line of cpuinfo.split("\n")) {
+			if (line.startsWith("model name") && !modelName) {
+				const parts = line.split(":");
+				if (parts[1]) modelName = parts[1].trim();
+			}
+			if (line.startsWith("processor")) processorCount++;
+		}
+		if (modelName) components.push(`cpu:${processorCount}x${modelName}`);
+	} catch {}
+	try {
+		const uuid = fs.readFileSync("/sys/class/dmi/id/product_uuid", "utf8").trim();
+		if (uuid && uuid !== "To Be Filled By O.E.M.") components.push(`product_uuid:${uuid}`);
+	} catch {}
+	if (components.length === 0) throw new Error("Failed to collect Linux fingerprint data");
+	return components.join("|");
+}
+/**
+* Get device fingerprint (platform-specific)
+*
+* @returns SHA256 hash of hardware identifiers
+*/
+function getDeviceFingerprint() {
+	const platform = os.platform();
+	let rawFingerprint;
+	switch (platform) {
+		case "win32":
+			rawFingerprint = collectWindowsFingerprint();
+			break;
+		case "darwin":
+			rawFingerprint = collectMacOSFingerprint();
+			break;
+		case "linux":
+			rawFingerprint = collectLinuxFingerprint();
+			break;
+		default: throw new Error(`Unsupported platform: ${platform}`);
+	}
+	return sha256(rawFingerprint);
+}
+//#endregion
+//#region src/infra/device-identity.ts
+const INSTANCE_SALT_SIZE = 32;
+/**
+* Read instance salt from Rust's location
+* ~/.moldclaw/license/instance.salt
+*/
+function readInstanceSalt() {
+	try {
+		const saltPath = path.join(resolveStateDir(), "license", "instance.salt");
+		if (!fs.existsSync(saltPath)) return null;
+		const saltB64 = fs.readFileSync(saltPath, "utf8").trim();
+		const salt = Buffer.from(saltB64, "base64");
+		if (salt.length !== INSTANCE_SALT_SIZE) return null;
+		return salt;
+	} catch {
+		return null;
+	}
+}
+/**
+* Derive AES-256 key using HKDF-SHA256
+* Must match Rust: derive_key(fingerprint, "device")
+*/
+function deriveKey(fingerprint, salt, instanceSalt) {
+	const ikm = `${fingerprint}:${salt}`;
+	const info = Buffer.from("moldclaw-v1-encryption");
+	return Buffer.from(crypto.hkdfSync("sha256", Buffer.from(ikm), instanceSalt, info, 32));
+}
+/**
+* Decrypt encrypted private key using AES-256-GCM
+* Format: base64(nonce[12] + ciphertext + tag[16])
+*/
+function decryptPrivateKey(encryptedB64, key) {
+	try {
+		const data = Buffer.from(encryptedB64, "base64");
+		if (data.length < 28) return null;
+		const nonce = data.subarray(0, 12);
+		const tag = data.subarray(-16);
+		const ciphertext = data.subarray(12, -16);
+		const decipher = crypto.createDecipheriv("aes-256-gcm", key, nonce);
+		decipher.setAuthTag(tag);
+		return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
+	} catch {
+		return null;
+	}
+}
+/**
+* Try to load version 2 (encrypted) identity
+*/
+function tryLoadV2Identity(parsed) {
+	try {
+		const instanceSalt = readInstanceSalt();
+		if (!instanceSalt) return null;
+		const key = deriveKey(getDeviceFingerprint(), "device", instanceSalt);
+		const privateKeyPem = decryptPrivateKey(parsed.encryptedPrivateKey, key);
+		if (!privateKeyPem) return null;
+		return {
+			deviceId: parsed.deviceId,
+			publicKeyPem: parsed.publicKeyPem,
+			privateKeyPem
+		};
+	} catch {
+		return null;
+	}
+}
+function resolveDefaultIdentityPath() {
+	return path.join(resolveStateDir(), "device.json");
+}
+function ensureDir(filePath) {
+	fs.mkdirSync(path.dirname(filePath), { recursive: true });
+}
+const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
+function base64UrlEncode(buf) {
+	return buf.toString("base64").replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/g, "");
+}
+function base64UrlDecode(input) {
+	const normalized = input.replaceAll("-", "+").replaceAll("_", "/");
+	const padded = normalized + "=".repeat((4 - normalized.length % 4) % 4);
+	return Buffer.from(padded, "base64");
+}
+function derivePublicKeyRaw(publicKeyPem) {
+	const spki = crypto.createPublicKey(publicKeyPem).export({
+		type: "spki",
+		format: "der"
+	});
+	if (spki.length === ED25519_SPKI_PREFIX.length + 32 && spki.subarray(0, ED25519_SPKI_PREFIX.length).equals(ED25519_SPKI_PREFIX)) return spki.subarray(ED25519_SPKI_PREFIX.length);
+	return spki;
+}
+function fingerprintPublicKey(publicKeyPem) {
+	const raw = derivePublicKeyRaw(publicKeyPem);
+	return crypto.createHash("sha256").update(raw).digest("hex");
+}
+function generateIdentity() {
+	const { publicKey, privateKey } = crypto.generateKeyPairSync("ed25519");
+	const publicKeyPem = publicKey.export({
+		type: "spki",
+		format: "pem"
+	}).toString();
+	const privateKeyPem = privateKey.export({
+		type: "pkcs8",
+		format: "pem"
+	}).toString();
+	return {
+		deviceId: fingerprintPublicKey(publicKeyPem),
+		publicKeyPem,
+		privateKeyPem
+	};
+}
+function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
+	try {
+		if (fs.existsSync(filePath)) {
+			const raw = fs.readFileSync(filePath, "utf8");
+			const parsed = JSON.parse(raw);
+			if (parsed?.version === 2 && typeof parsed.deviceId === "string" && typeof parsed.publicKeyPem === "string" && typeof parsed.encryptedPrivateKey === "string") {
+				const identity = tryLoadV2Identity(parsed);
+				if (identity) return identity;
+				console.error("[device-identity] Warning: Failed to decrypt v2 identity. This may indicate fingerprint mismatch between Rust and Node.js.");
+			}
+			if (parsed?.version === 1 && typeof parsed.deviceId === "string" && typeof parsed.publicKeyPem === "string" && typeof parsed.privateKeyPem === "string") {
+				const derivedId = fingerprintPublicKey(parsed.publicKeyPem);
+				if (derivedId && derivedId !== parsed.deviceId) {
+					const updated = {
+						...parsed,
+						deviceId: derivedId
+					};
+					fs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
+					try {
+						fs.chmodSync(filePath, 384);
+					} catch {}
+					return {
+						deviceId: derivedId,
+						publicKeyPem: parsed.publicKeyPem,
+						privateKeyPem: parsed.privateKeyPem
+					};
+				}
+				return {
+					deviceId: parsed.deviceId,
+					publicKeyPem: parsed.publicKeyPem,
+					privateKeyPem: parsed.privateKeyPem
+				};
+			}
+		}
+	} catch (err) {
+		console.error("[device-identity] Error loading identity:", err);
+	}
+	const identity = generateIdentity();
+	ensureDir(filePath);
+	const stored = {
+		version: 1,
+		deviceId: identity.deviceId,
+		publicKeyPem: identity.publicKeyPem,
+		privateKeyPem: identity.privateKeyPem,
+		createdAtMs: Date.now()
+	};
+	fs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
+	try {
+		fs.chmodSync(filePath, 384);
+	} catch {}
+	return identity;
+}
+function signDevicePayload(privateKeyPem, payload) {
+	const key = crypto.createPrivateKey(privateKeyPem);
+	return base64UrlEncode(crypto.sign(null, Buffer.from(payload, "utf8"), key));
+}
+function normalizeDevicePublicKeyBase64Url(publicKey) {
+	try {
+		if (publicKey.includes("BEGIN")) return base64UrlEncode(derivePublicKeyRaw(publicKey));
+		const raw = base64UrlDecode(publicKey);
+		if (raw.length === 0) return null;
+		return base64UrlEncode(raw);
+	} catch {
+		return null;
+	}
+}
+function deriveDeviceIdFromPublicKey(publicKey) {
+	try {
+		const raw = publicKey.includes("BEGIN") ? derivePublicKeyRaw(publicKey) : base64UrlDecode(publicKey);
+		if (raw.length === 0) return null;
+		return crypto.createHash("sha256").update(raw).digest("hex");
+	} catch {
+		return null;
+	}
+}
+function publicKeyRawBase64UrlFromPem(publicKeyPem) {
+	return base64UrlEncode(derivePublicKeyRaw(publicKeyPem));
+}
+function verifyDeviceSignature(publicKey, payload, signatureBase64Url) {
+	try {
+		const key = publicKey.includes("BEGIN") ? crypto.createPublicKey(publicKey) : crypto.createPublicKey({
+			key: Buffer.concat([ED25519_SPKI_PREFIX, base64UrlDecode(publicKey)]),
+			type: "spki",
+			format: "der"
+		});
+		const sig = (() => {
+			try {
+				return base64UrlDecode(signatureBase64Url);
+			} catch {
+				return Buffer.from(signatureBase64Url, "base64");
+			}
+		})();
+		return crypto.verify(null, Buffer.from(payload, "utf8"), key, sig);
+	} catch {
+		return false;
+	}
+}
+//#endregion
+export { signDevicePayload as a, publicKeyRawBase64UrlFromPem as i, loadOrCreateDeviceIdentity as n, verifyDeviceSignature as o, normalizeDevicePublicKeyBase64Url as r, deriveDeviceIdFromPublicKey as t };

package/dist/{devices-cli-CHUxOiPW.js → devices-cli-ClL9DKKe.js}

@@ -33,9 +33,9 @@ import "./tailnet-fFTz5Twr.js";
 import { r as isLoopbackHost } from "./net-K181nxTH.js";
 import "./credentials-D-5Pb-aZ.js";
 import { _ as GATEWAY_CLIENT_MODES, v as GATEWAY_CLIENT_NAMES } from "./message-channel-DFE4FuE_.js";
-import "./method-scopes-DTNYkocH.js";
-import "./device-identity-DdfNLdug.js";
-import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-7m_dY36v.js";
+import "./method-scopes-CfRtamRU.js";
+import "./device-identity-B4itFxET.js";
+import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-DPyZUKSd.js";
 import { n as formatTimeAgo } from "./format-relative-B1Jfwsqe.js";
 import "./pairing-token-bu1e6z6X.js";
 import { n as withProgress } from "./progress-Cwq59vgZ.js";

package/dist/{directory-cli-DPeXGtt_.js → directory-cli-b4FkF0YS.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import { t as formatDocsLink } from "./links-BcahUP5U.js";
 import "./setup-binary-C17YnmA8.js";
-import { MT as resolveChannelDefaultAccountId, hu as resolveMessageChannelSelection, w as getChannelPlugin } from "./auth-profiles-DyDb7qXP.js";
+import { MT as resolveChannelDefaultAccountId, hu as resolveMessageChannelSelection, w as getChannelPlugin } from "./auth-profiles-DrQTUlZ0.js";
 import "./model-selection-hL8i1Jbs.js";
 import "./agent-scope-C-YmLnnb.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -60,7 +60,7 @@ import "./resolve-route-CSHDsa_m.js";
 import "./internal-hooks-83AcmxP3.js";
 import "./lazy-runtime-BoGB4usD.js";
 import "./config-schema-BNU4GQh_.js";
-import "./method-scopes-DTNYkocH.js";
+import "./method-scopes-CfRtamRU.js";
 import "./session-cost-usage-DWgQk6XT.js";
 import "./paths-ApLcu1Uu.js";
 import "./routing-DQ-fpTaA.js";
@@ -75,18 +75,18 @@ import "./runtime-env-BlEtPF6b.js";
 import "./registry-BFMbkmgR.js";
 import "./provider-onboard-Ca0TaNud.js";
 import "./model-definitions-Cyyzm6Kr.js";
-import "./usage-mHPlkPI4.js";
-import "./device-identity-DdfNLdug.js";
-import "./auth-C-elARYa.js";
-import "./subscription-D9tfSJfc.js";
+import "./usage-CqX1OOPJ.js";
+import "./device-identity-B4itFxET.js";
+import "./auth-44xGYGG8.js";
+import "./subscription-DVc65BPl.js";
 import "./diagnostic-D96Xaqrj.js";
 import "./message-hook-mappers-CeiHXgSQ.js";
 import "./json-store--7cBPxTG.js";
-import "./call-7m_dY36v.js";
+import "./call-DPyZUKSd.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-Cv1SBrn7.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-BmwOKnaU.js";
+import "./search-manager-CkjD54Cn.js";
 import "./core-CvDzLs7B.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CxP9suT8.js";
@@ -102,12 +102,12 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-Xw6kjEpM.js";
+import "./audit-7XJK3Cs2.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import { t as formatHelpExamples } from "./help-format-BFzPm_8V.js";
 import "./progress-Cwq59vgZ.js";
-import "./gateway-runtime-D4jWu9X8.js";
+import "./gateway-runtime-BY9n2Yad.js";
 import { n as renderTable, t as getTerminalTableWidth } from "./table-BldgNDVQ.js";
 //#region src/cli/directory-cli.ts
 function parseLimit(value) {

package/dist/{directory-config-helpers-CpU1oflo.d.ts → directory-config-helpers-DroQgwas.d.ts}

@@ -1,4 +1,4 @@
-import { gA as ChannelDirectoryEntry } from "./types-BKldC9YN.js";
+import { gA as ChannelDirectoryEntry } from "./types-CNieyloX.js";
 
 //#region src/channels/plugins/directory-config-helpers.d.ts
 declare function applyDirectoryQueryAndLimit(ids: string[], params: {

package/dist/{directory.static-BZR7ICt0.js → directory.static-zvNwdlxR.js}

@@ -1,4 +1,4 @@
-import { Hh as resolveFeishuAccount } from "./auth-profiles-DyDb7qXP.js";
+import { Hh as resolveFeishuAccount } from "./auth-profiles-DrQTUlZ0.js";
 import { a as listDirectoryUserEntriesFromAllowFromAndMapKeys, r as listDirectoryGroupEntriesFromMapKeysAndAllowFrom } from "./directory-config-helpers-CbRZemIs.js";
 import { i as normalizeFeishuTarget } from "./runtime-BKcd1buT.js";
 //#region extensions/feishu/src/directory.static.ts

package/dist/{discord-2_kIR52A.js → discord-CEVo1fuW.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import "./links-BcahUP5U.js";
 import "./setup-binary-C17YnmA8.js";
-import { ta as sendMessageDiscord } from "./auth-profiles-DyDb7qXP.js";
+import { ta as sendMessageDiscord } from "./auth-profiles-DrQTUlZ0.js";
 import "./model-selection-hL8i1Jbs.js";
 import "./agent-scope-C-YmLnnb.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -60,7 +60,7 @@ import "./resolve-route-CSHDsa_m.js";
 import "./internal-hooks-83AcmxP3.js";
 import "./lazy-runtime-BoGB4usD.js";
 import "./config-schema-BNU4GQh_.js";
-import "./method-scopes-DTNYkocH.js";
+import "./method-scopes-CfRtamRU.js";
 import "./session-cost-usage-DWgQk6XT.js";
 import "./paths-ApLcu1Uu.js";
 import "./routing-DQ-fpTaA.js";
@@ -75,18 +75,18 @@ import "./runtime-env-BlEtPF6b.js";
 import "./registry-BFMbkmgR.js";
 import "./provider-onboard-Ca0TaNud.js";
 import "./model-definitions-Cyyzm6Kr.js";
-import "./usage-mHPlkPI4.js";
-import "./device-identity-DdfNLdug.js";
-import "./auth-C-elARYa.js";
-import "./subscription-D9tfSJfc.js";
+import "./usage-CqX1OOPJ.js";
+import "./device-identity-B4itFxET.js";
+import "./auth-44xGYGG8.js";
+import "./subscription-DVc65BPl.js";
 import "./diagnostic-D96Xaqrj.js";
 import "./message-hook-mappers-CeiHXgSQ.js";
 import "./json-store--7cBPxTG.js";
-import "./call-7m_dY36v.js";
+import "./call-DPyZUKSd.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-Cv1SBrn7.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-BmwOKnaU.js";
+import "./search-manager-CkjD54Cn.js";
 import "./core-CvDzLs7B.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CxP9suT8.js";
@@ -102,12 +102,12 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-Xw6kjEpM.js";
+import "./audit-7XJK3Cs2.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import "./help-format-BFzPm_8V.js";
 import "./progress-Cwq59vgZ.js";
-import "./gateway-runtime-D4jWu9X8.js";
+import "./gateway-runtime-BY9n2Yad.js";
 //#region src/cli/send-runtime/discord.ts
 const runtimeSend = { sendMessage: sendMessageDiscord };
 //#endregion

package/dist/{discovery-PnxQXxab.js → discovery-HRjgZ5qk.js}

@@ -1,4 +1,4 @@
-import { Fw as listChannelPluginCatalogEntries } from "./auth-profiles-DyDb7qXP.js";
+import { Fw as listChannelPluginCatalogEntries } from "./auth-profiles-DrQTUlZ0.js";
 import { m as resolveDefaultAgentId, p as resolveAgentWorkspaceDir } from "./agent-scope-C-YmLnnb.js";
 import { a as listChatChannels } from "./registry-C1pRrsQl.js";
 import { n as loadPluginManifestRegistry } from "./manifest-registry-DAd0SRAP.js";

package/dist/{dm-policy-shared-73A52W6E.d.ts → dm-policy-shared-BTiyOc7g.d.ts}

@@ -1,4 +1,4 @@
-import { bA as ChannelId } from "./types-BKldC9YN.js";
+import { bA as ChannelId } from "./types-CNieyloX.js";
 
 //#region src/security/dm-policy-shared.d.ts
 declare function resolvePinnedMainDmOwnerFromAllowlist(params: {

package/dist/{doctor-completion-B6Hpiujc.js → doctor-completion-wEPFcLD4.js}

@@ -1,7 +1,7 @@
 import { t as resolvemoldClawPackageRoot } from "./moldclaw-root-D6PbhbZk.js";
 import { n as resolveCliName } from "./cli-name-Bq08c3PW.js";
 import { t as note } from "./note-dOl5kPAy.js";
-import { c as usesSlowDynamicCompletion, i as isCompletionInstalled, o as resolveCompletionCachePath, r as installCompletion, s as resolveShellFromEnv, t as completionCacheExists } from "./completion-cli-ChlcvXnJ.js";
+import { c as usesSlowDynamicCompletion, i as isCompletionInstalled, o as resolveCompletionCachePath, r as installCompletion, s as resolveShellFromEnv, t as completionCacheExists } from "./completion-cli-CkUn1rS-.js";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
 //#region src/commands/doctor-completion.ts