@spacebar_ai/moldclaw-core 2026.3.44 → 2026.3.45

package/dist/{auth-choice-CEFSlnLT.js → auth-choice-DZYg94gS.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import "./links-BcahUP5U.js";
 import "./setup-binary-CcAv8NXz.js";
-import "./auth-profiles-smABVXzp.js";
+import "./auth-profiles-C-Ul-Qkn.js";
 import "./model-selection-bBBxfXdb.js";
 import "./agent-scope-lZlwP1At.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -86,7 +86,7 @@ import "./call-gdDAt07d.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-tTD5o_rU.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-BS5Db0A6.js";
+import "./search-manager-D-G9UaXe.js";
 import "./core-BwKq3krw.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CdisccbY.js";
@@ -102,7 +102,7 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-CpfSjvyo.js";
+import "./audit-ChWS6RiF.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import "./help-format-BFzPm_8V.js";
@@ -112,11 +112,11 @@ import "./control-ui-shared-Dm5Dh0Lo.js";
 import "./onboard-helpers-DiSRTpZC.js";
 import "./setup-browser-C4eRV3h6.js";
 import "./provider-auth-choice-helpers-hzDkh3f1.js";
-import "./provider-auth-guidance-BaAUiNr_.js";
-import "./enable-Bc8bCuVe.js";
+import "./provider-auth-guidance-BxxMxMEt.js";
+import "./enable-Cyagpq3b.js";
 import "./provider-auth-choices-0KaDNPBQ.js";
-import "./provider-auth-choice-CB_HzdTl.js";
+import "./provider-auth-choice-BOQA0idb.js";
 import "./auth-choice.apply-helpers-BhbNIV8X.js";
-import { t as resolvePreferredProviderForAuthChoice } from "./provider-auth-choice-preference-BHCXvNSE.js";
-import { n as applyAuthChoice, t as warnIfModelConfigLooksOff } from "./auth-choice-CVCef-eU.js";
+import { t as resolvePreferredProviderForAuthChoice } from "./provider-auth-choice-preference-BPcuoO9b.js";
+import { n as applyAuthChoice, t as warnIfModelConfigLooksOff } from "./auth-choice-Beq0dWPS.js";
 export { applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff };

package/dist/{auth-choice-Cez-pXrg.js → auth-choice-TVG_8lJj.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import "./links-BcahUP5U.js";
 import "./setup-binary-CcAv8NXz.js";
-import { Gm as applyAuthProfileConfig, Lg as normalizeSecretInputModeInput, lx as resolveEnvApiKey, mE as resolveApiKeyForProfile, n as resolveAuthProfileOrder, wE as ensureAuthProfileStore } from "./auth-profiles-smABVXzp.js";
+import { Gm as applyAuthProfileConfig, Lg as normalizeSecretInputModeInput, lx as resolveEnvApiKey, mE as resolveApiKeyForProfile, n as resolveAuthProfileOrder, wE as ensureAuthProfileStore } from "./auth-profiles-C-Ul-Qkn.js";
 import "./model-selection-bBBxfXdb.js";
 import { a as resolveAgentDir, m as resolveDefaultAgentId, p as resolveAgentWorkspaceDir } from "./agent-scope-lZlwP1At.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -87,7 +87,7 @@ import "./call-gdDAt07d.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-tTD5o_rU.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-BS5Db0A6.js";
+import "./search-manager-D-G9UaXe.js";
 import "./core-BwKq3krw.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CdisccbY.js";
@@ -103,7 +103,7 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-CpfSjvyo.js";
+import "./audit-ChWS6RiF.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import "./help-format-BFzPm_8V.js";
@@ -111,12 +111,12 @@ import "./progress-Cwq59vgZ.js";
 import "./gateway-runtime-CBm3CCoA.js";
 import { t as applyCloudflareAiGatewayConfig } from "./onboard-BON0C360.js";
 import "./onboard-DsKI17iq.js";
-import { t as enablePluginInConfig } from "./enable-Bc8bCuVe.js";
+import { t as enablePluginInConfig } from "./enable-Cyagpq3b.js";
 import "./provider-auth-choices-0KaDNPBQ.js";
 import "./auth-choice.apply-helpers-BhbNIV8X.js";
-import { a as setCloudflareAiGatewayConfig, i as applyLitellmConfig, o as setLitellmApiKey, r as normalizeApiKeyTokenProviderAuthChoice, t as resolvePreferredProviderForAuthChoice } from "./provider-auth-choice-preference-BHCXvNSE.js";
-import "./model-picker-DG4z_dBs.js";
-import { a as resolveCustomProviderId, n as applyCustomApiConfig, r as parseNonInteractiveCustomApiFlags, t as CustomApiError } from "./onboard-custom-BjPrMo_R.js";
+import { a as setCloudflareAiGatewayConfig, i as applyLitellmConfig, o as setLitellmApiKey, r as normalizeApiKeyTokenProviderAuthChoice, t as resolvePreferredProviderForAuthChoice } from "./provider-auth-choice-preference-BPcuoO9b.js";
+import "./model-picker-D9Gmg9vM.js";
+import { a as resolveCustomProviderId, n as applyCustomApiConfig, r as parseNonInteractiveCustomApiFlags, t as CustomApiError } from "./onboard-custom-D6YDrk9n.js";
 //#region src/commands/onboard-non-interactive/api-keys.ts
 function parseEnvVarNameFromSourceLabel(source) {
 	if (!source) return;
@@ -217,7 +217,7 @@ async function applySimpleNonInteractiveApiKeyChoice(params) {
 //#region src/commands/onboard-non-interactive/local/auth-choice.plugin-providers.ts
 const PROVIDER_PLUGIN_CHOICE_PREFIX = "provider-plugin:";
 async function loadPluginProviderRuntime() {
-	return import("./auth-choice.plugin-providers.runtime-4BhqvEw_.js");
+	return import("./auth-choice.plugin-providers.runtime-CVC4Jzhp.js");
 }
 const loadAuthChoicePluginProvidersRuntime = createLazyRuntimeSurface(loadPluginProviderRuntime, ({ authChoicePluginProvidersRuntime }) => authChoicePluginProvidersRuntime);
 function buildIsolatedProviderResolutionConfig(cfg, providerId) {

package/dist/{auth-choice-options-DO78mvPe.js → auth-choice-options-B_qxsjdj.js}

@@ -1,5 +1,5 @@
 import { r as resolveManifestProviderAuthChoices } from "./provider-auth-choices-0KaDNPBQ.js";
-import { r as resolveProviderWizardOptions } from "./provider-wizard-CanJoxNC.js";
+import { r as resolveProviderWizardOptions } from "./provider-wizard-BMc1Dzks.js";
 import { t as AUTH_CHOICE_LEGACY_ALIASES_FOR_CLI } from "./auth-choice-legacy-CSR3WV5B.js";
 //#region src/commands/auth-choice-options.static.ts
 const CORE_AUTH_CHOICE_OPTIONS = [

package/dist/{auth-choice-prompt-DCuQRiVl.js → auth-choice-prompt-BayzDobT.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import "./links-BcahUP5U.js";
 import "./setup-binary-CcAv8NXz.js";
-import "./auth-profiles-smABVXzp.js";
+import "./auth-profiles-C-Ul-Qkn.js";
 import "./model-selection-bBBxfXdb.js";
 import "./agent-scope-lZlwP1At.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -86,7 +86,7 @@ import "./call-gdDAt07d.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-tTD5o_rU.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-BS5Db0A6.js";
+import "./search-manager-D-G9UaXe.js";
 import "./core-BwKq3krw.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CdisccbY.js";
@@ -102,14 +102,14 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-CpfSjvyo.js";
+import "./audit-ChWS6RiF.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import "./help-format-BFzPm_8V.js";
 import "./progress-Cwq59vgZ.js";
 import "./gateway-runtime-CBm3CCoA.js";
 import "./provider-auth-choices-0KaDNPBQ.js";
-import "./provider-wizard-CanJoxNC.js";
-import "./auth-choice-options-DO78mvPe.js";
-import { t as promptAuthChoiceGrouped } from "./auth-choice-prompt-CUkC7Mmb.js";
+import "./provider-wizard-BMc1Dzks.js";
+import "./auth-choice-options-B_qxsjdj.js";
+import { t as promptAuthChoiceGrouped } from "./auth-choice-prompt-_UES859x.js";
 export { promptAuthChoiceGrouped };

package/dist/{auth-choice-prompt-CUkC7Mmb.js → auth-choice-prompt-_UES859x.js}

@@ -1,4 +1,4 @@
-import { t as buildAuthChoiceGroups } from "./auth-choice-options-DO78mvPe.js";
+import { t as buildAuthChoiceGroups } from "./auth-choice-options-B_qxsjdj.js";
 //#region src/commands/auth-choice-prompt.ts
 const BACK_VALUE = "__back";
 async function promptAuthChoiceGrouped(params) {

package/dist/{auth-choice.plugin-providers.runtime-4BhqvEw_.js → auth-choice.plugin-providers.runtime-CVC4Jzhp.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import "./links-BcahUP5U.js";
 import "./setup-binary-CcAv8NXz.js";
-import { Nn as resolveOwningPluginIdsForProvider, Pn as resolvePluginProviders } from "./auth-profiles-smABVXzp.js";
+import { Nn as resolveOwningPluginIdsForProvider, Pn as resolvePluginProviders } from "./auth-profiles-C-Ul-Qkn.js";
 import "./model-selection-bBBxfXdb.js";
 import "./agent-scope-lZlwP1At.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -86,7 +86,7 @@ import "./call-gdDAt07d.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-tTD5o_rU.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-BS5Db0A6.js";
+import "./search-manager-D-G9UaXe.js";
 import "./core-BwKq3krw.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CdisccbY.js";
@@ -102,13 +102,13 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-CpfSjvyo.js";
+import "./audit-ChWS6RiF.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import "./help-format-BFzPm_8V.js";
 import "./progress-Cwq59vgZ.js";
 import "./gateway-runtime-CBm3CCoA.js";
-import { n as resolveProviderPluginChoice } from "./provider-wizard-CanJoxNC.js";
+import { n as resolveProviderPluginChoice } from "./provider-wizard-BMc1Dzks.js";
 //#region src/commands/onboard-non-interactive/local/auth-choice.plugin-providers.runtime.ts
 const authChoicePluginProvidersRuntime = {
 	resolveOwningPluginIdsForProvider,

package/dist/{auth-profiles-smABVXzp.js → auth-profiles-C-Ul-Qkn.js}

@@ -1,3 +1,4 @@
+import { i as __require } from "./chunk-DORXReHP.js";
 import { a as compileConfigRegexes, n as redactSensitiveText, r as redactToolDetail, t as getDefaultRedactPatterns } from "./redact-fatrROh9.js";
 import { i as formatUncaughtError, n as extractErrorCode, r as formatErrorMessage$1, s as readErrorName, t as collectErrorGraphCandidates } from "./errors-DOJWZqNo.js";
 import { a as registerUnhandledRejectionHandler, n as isAbortError$2 } from "./unhandled-rejections-CTvNvnT0.js";
@@ -102,7 +103,7 @@ import { i as getMemoryMultimodalExtensions, r as classifyMemoryMultimodalPath,
 import { t as resolveMemorySearchConfig } from "./memory-search-tTD5o_rU.js";
 import { t as parseGeminiAuth } from "./google-CWlY451I.js";
 import { C as isFileMissingError, S as splitTextToUtf8ByteLimit, _ as remapChunkLines, a as listSessionFilesForAgent, b as estimateStructuredEmbeddingInputBytes, c as buildMultimodalChunkForIndexing, d as ensureDir$2, f as hashText$1, g as parseEmbedding, h as normalizeExtraMemoryPaths, i as buildSessionEntry, l as chunkMarkdown, m as listMemoryFiles, n as isQueryStopWordToken, o as sessionPathForFile, p as isMemoryPath, r as requireNodeSqlite, s as buildFileEntry, t as extractKeywords, u as cosineSimilarity, v as runWithConcurrency$1, w as statRegularFile, x as estimateUtf8Bytes, y as hasNonTextEmbeddingParts } from "./query-expansion-D_Mm5Hhi.js";
-import { n as getMemorySearchManager, r as resolveMemoryBackendConfig } from "./search-manager-BS5Db0A6.js";
+import { n as getMemorySearchManager, r as resolveMemoryBackendConfig } from "./search-manager-D-G9UaXe.js";
 import { a as buildOutboundBaseSessionKey, c as buildOauthProviderAuthResult, i as normalizeOutboundThreadId, n as definePluginEntry } from "./core-BwKq3krw.js";
 import { n as formatConfigIssueLines } from "./issue-format-B0SI57Es.js";
 import { n as logConfigUpdated } from "./logging-CdisccbY.js";
@@ -125,7 +126,7 @@ import { a as resolvePairingPaths, i as pruneExpiredPending, n as verifyPairingT
 import { i as resolveLineAccount, n as normalizeAccountId$2, r as resolveDefaultLineAccountId, t as listLineAccountIds } from "./accounts-J2OhhhQi.js";
 import { t as buildTemplateMessageFromPayload } from "./template-messages-dPxEb-WR.js";
 import { r as isAllowedParsedChatSender } from "./allow-from-Brz0jyla.js";
-import { n as collectTelegramUnmentionedGroupIds } from "./audit-CpfSjvyo.js";
+import { n as collectTelegramUnmentionedGroupIds } from "./audit-ChWS6RiF.js";
 import { t as waitForever } from "./cli-runtime-DTCHPjCi.js";
 import { r as withManager } from "./cli-utils-BCuSS4l6.js";
 import { t as formatHelpExamples } from "./help-format-BFzPm_8V.js";
@@ -200,7 +201,7 @@ function resolveAuthProfileDisplayLabel(params) {
 //#region src/agents/auth-profiles/doctor.ts
 let providerRuntimePromise$3;
 function loadProviderRuntime$3() {
-	providerRuntimePromise$3 ??= import("./provider-runtime.runtime-4xwmsl5L.js");
+	providerRuntimePromise$3 ??= import("./provider-runtime.runtime-DFAIaPZT.js");
 	return providerRuntimePromise$3;
 }
 async function formatAuthDoctorHint(params) {
@@ -1136,7 +1137,7 @@ function repairOAuthProfileIdMismatch(params) {
 const OAUTH_PROVIDER_IDS = new Set(getOAuthProviders().map((provider) => provider.id));
 let providerRuntimePromise$2;
 function loadProviderRuntime$2() {
-	providerRuntimePromise$2 ??= import("./provider-runtime.runtime-4xwmsl5L.js");
+	providerRuntimePromise$2 ??= import("./provider-runtime.runtime-DFAIaPZT.js");
 	return providerRuntimePromise$2;
 }
 const isOAuthProvider = (provider) => OAUTH_PROVIDER_IDS.has(provider);
@@ -5694,15 +5695,15 @@ let discordInspectModulePromise;
 let slackInspectModulePromise;
 let telegramInspectModulePromise;
 function loadDiscordInspectModule() {
-	discordInspectModulePromise ??= import("./read-only-account-inspect.discord.runtime-BK0LaMgC.js");
+	discordInspectModulePromise ??= import("./read-only-account-inspect.discord.runtime-D_RVd1-r.js");
 	return discordInspectModulePromise;
 }
 function loadSlackInspectModule() {
-	slackInspectModulePromise ??= import("./read-only-account-inspect.slack.runtime-DgKiC5wT.js");
+	slackInspectModulePromise ??= import("./read-only-account-inspect.slack.runtime-Ckl92Rhy.js");
 	return slackInspectModulePromise;
 }
 function loadTelegramInspectModule() {
-	telegramInspectModulePromise ??= import("./read-only-account-inspect.telegram.runtime-mxfgFVOU.js");
+	telegramInspectModulePromise ??= import("./read-only-account-inspect.telegram.runtime-D97ssjQk.js");
 	return telegramInspectModulePromise;
 }
 async function inspectReadOnlyChannelAccount(params) {
@@ -10463,7 +10464,7 @@ const AWS_SECRET_KEY_ENV = "AWS_SECRET_ACCESS_KEY";
 const AWS_PROFILE_ENV = "AWS_PROFILE";
 let providerRuntimePromise$1;
 function loadProviderRuntime$1() {
-	providerRuntimePromise$1 ??= import("./provider-runtime.runtime-4xwmsl5L.js");
+	providerRuntimePromise$1 ??= import("./provider-runtime.runtime-DFAIaPZT.js");
 	return providerRuntimePromise$1;
 }
 function resolveProviderConfig(cfg, provider) {
@@ -11977,17 +11978,17 @@ async function ensuremoldClawModelsJson(config, agentDirOverride) {
 const log$35 = createSubsystemLogger("model-catalog");
 let modelCatalogPromise = null;
 let hasLoggedModelCatalogError = false;
-const defaultImportPiSdk = () => import("./pi-model-discovery-runtime-BrK7tcaO.js");
+const defaultImportPiSdk = () => import("./pi-model-discovery-runtime-vSSbBDFG.js");
 let importPiSdk = defaultImportPiSdk;
 let providerRuntimePromise;
 let modelSuppressionPromise;
 const NON_PI_NATIVE_MODEL_PROVIDERS = new Set(["kilocode"]);
 function loadProviderRuntime() {
-	providerRuntimePromise ??= import("./provider-runtime.runtime-4xwmsl5L.js");
+	providerRuntimePromise ??= import("./provider-runtime.runtime-DFAIaPZT.js");
 	return providerRuntimePromise;
 }
 function loadModelSuppression() {
-	modelSuppressionPromise ??= import("./model-suppression.runtime-BVG75tZ7.js");
+	modelSuppressionPromise ??= import("./model-suppression.runtime-IpdzuuaW.js");
 	return modelSuppressionPromise;
 }
 function normalizeConfiguredModelInput(input) {
@@ -16325,7 +16326,7 @@ function resolveProviderVisionModelFromConfig(params) {
 //#region src/media-understanding/providers/image.ts
 let piModelDiscoveryRuntimePromise = null;
 function loadPiModelDiscoveryRuntime() {
-	piModelDiscoveryRuntimePromise ??= import("./pi-model-discovery-runtime-BrK7tcaO.js");
+	piModelDiscoveryRuntimePromise ??= import("./pi-model-discovery-runtime-vSSbBDFG.js");
 	return piModelDiscoveryRuntimePromise;
 }
 function resolveImageToolMaxTokens$1(modelMaxTokens, requestedMaxTokens = 4096) {
@@ -23072,7 +23073,7 @@ async function runWithConcurrency(tasks, limit) {
 //#region src/media-understanding/echo-transcript.ts
 let deliverRuntimePromise$2 = null;
 function loadDeliverRuntime$2() {
-	deliverRuntimePromise$2 ??= import("./deliver-runtime-CCNZIhET.js");
+	deliverRuntimePromise$2 ??= import("./deliver-runtime-CwnLQZTN.js");
 	return deliverRuntimePromise$2;
 }
 function formatEchoTranscript(transcript, format) {
@@ -29948,7 +29949,7 @@ var LegacyContextEngine = class {
 	}
 	async afterTurn(_params) {}
 	async compact(params) {
-		const { compactEmbeddedPiSessionDirect } = await import("./compact.runtime-DyKL-Iar.js");
+		const { compactEmbeddedPiSessionDirect } = await import("./compact.runtime-C9a0kRAg.js");
 		const runtimeContext = params.runtimeContext ?? {};
 		const currentTokenCount = params.currentTokenCount ?? (typeof runtimeContext.currentTokenCount === "number" && Number.isFinite(runtimeContext.currentTokenCount) && runtimeContext.currentTokenCount > 0 ? Math.floor(runtimeContext.currentTokenCount) : void 0);
 		const result = await compactEmbeddedPiSessionDirect({
@@ -35806,7 +35807,7 @@ async function loginOpenAICodexOAuth(params) {
 }
 //#endregion
 //#region src/plugins/provider-api-key-auth.ts
-const loadProviderApiKeyAuthRuntime = createLazyRuntimeSurface(() => import("./provider-api-key-auth.runtime-CAFeIQ1u.js"), ({ providerApiKeyAuthRuntime }) => providerApiKeyAuthRuntime);
+const loadProviderApiKeyAuthRuntime = createLazyRuntimeSurface(() => import("./provider-api-key-auth.runtime-DgGM_pHf.js"), ({ providerApiKeyAuthRuntime }) => providerApiKeyAuthRuntime);
 function resolveStringOption(opts, optionKey) {
 	return normalizeOptionalSecretInput(opts?.[optionKey]);
 }
@@ -46120,11 +46121,11 @@ const CRED_KEY_TO_ENV_VAR = {
 	"channel:slack:appToken": "SLACK_APP_TOKEN",
 	"channel:mattermost:botToken": "MATTERMOST_BOT_TOKEN",
 	"channel:whatsapp:sessionToken": "WHATSAPP_SESSION_TOKEN",
-	"channel:kakao-talkchannel:sessionToken": "KAKAO_SESSION_TOKEN",
+	"channel:kakao-talkchannel:sessionToken": "KAKAO_TALKCHANNEL_SESSION_TOKEN",
 	"model:anthropic:apiKey": "ANTHROPIC_API_KEY",
 	"model:openai:apiKey": "OPENAI_API_KEY",
 	"model:google:apiKey": "GEMINI_API_KEY",
-	"model:azure:apiKey": "AZURE_API_KEY",
+	"model:azure:apiKey": "AZURE_OPENAI_API_KEY",
 	"model:cohere:apiKey": "COHERE_API_KEY",
 	"model:mistral:apiKey": "MISTRAL_API_KEY",
 	"model:groq:apiKey": "GROQ_API_KEY",
@@ -46250,13 +46251,92 @@ function decryptData(encrypted, fingerprint, salt) {
 	return Buffer.concat([decipher.update(actualCiphertext), decipher.final()]).toString("utf-8");
 }
 /**
-* Read a credential from secure file store
-*
-* @param key - Credential key (e.g., "channel:discord:token")
-* @returns Decrypted credential value or null if not found
+* Read credential from Windows Credential Manager using PowerShell
+* Uses P/Invoke to access advapi32.dll CredRead function
 */
-function readSecureCredential(key) {
-	if (process.platform !== "linux") return null;
+function readWindowsCredential(key) {
+	const { execSync } = __require("node:child_process");
+	const script = `
+Add-Type -TypeDefinition @"
+using System;
+using System.Runtime.InteropServices;
+using System.Text;
+
+public class CredManager {
+    [DllImport("advapi32.dll", SetLastError=true, CharSet=CharSet.Unicode)]
+    public static extern bool CredRead(string target, int type, int flags, out IntPtr credential);
+    
+    [DllImport("advapi32.dll", SetLastError=true)]
+    public static extern void CredFree(IntPtr credential);
+    
+    [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)]
+    public struct CREDENTIAL {
+        public int Flags;
+        public int Type;
+        public string TargetName;
+        public string Comment;
+        public System.Runtime.InteropServices.ComTypes.FILETIME LastWritten;
+        public int CredentialBlobSize;
+        public IntPtr CredentialBlob;
+        public int Persist;
+        public int AttributeCount;
+        public IntPtr Attributes;
+        public string TargetAlias;
+        public string UserName;
+    }
+    
+    public static string GetCredential(string target) {
+        IntPtr credPtr;
+        if (!CredRead(target, 1, 0, out credPtr)) {
+            return null;
+        }
+        try {
+            CREDENTIAL cred = (CREDENTIAL)Marshal.PtrToStructure(credPtr, typeof(CREDENTIAL));
+            if (cred.CredentialBlobSize > 0 && cred.CredentialBlob != IntPtr.Zero) {
+                return Marshal.PtrToStringUni(cred.CredentialBlob, cred.CredentialBlobSize / 2);
+            }
+            return null;
+        } finally {
+            CredFree(credPtr);
+        }
+    }
+}
+"@
+$result = [CredManager]::GetCredential('${`${SERVICE_NAME}:moldclaw:${key}`.replace(/'/g, "''")}')
+if ($result) { Write-Output $result }
+`;
+	try {
+		return execSync(`powershell -NoProfile -ExecutionPolicy Bypass -Command "${script.replace(/"/g, "\\\"").replace(/\n/g, " ")}"`, {
+			encoding: "utf-8",
+			stdio: [
+				"pipe",
+				"pipe",
+				"pipe"
+			],
+			windowsHide: true
+		}).trim() || null;
+	} catch {
+		return null;
+	}
+}
+/**
+* Read credential from macOS Keychain using security CLI
+* Matches the account format used by Rust secure_store.rs
+*/
+function readMacCredential(key) {
+	const { execSync } = __require("node:child_process");
+	const account = `${SERVICE_NAME}:moldclaw:${key}`;
+	try {
+		return execSync(`security find-generic-password -s "${SERVICE_NAME}" -a "${account}" -w 2>/dev/null`, { encoding: "utf-8" }).trim() || null;
+	} catch {
+		return null;
+	}
+}
+/**
+* Read credential from Linux fallback .enc file store
+* Uses AES-256-GCM encryption with device fingerprint
+*/
+function readLinuxCredential(key) {
 	const secureDir = path$1.join(os$1.homedir(), ".moldclaw", "secure");
 	const filename = `${SERVICE_NAME.replace(/\./g, "_")}_moldclaw_${key.replace(/:/g, "_")}.enc`;
 	const filepath = path$1.join(secureDir, filename);
@@ -46271,6 +46351,20 @@ function readSecureCredential(key) {
 	}
 }
 /**
+* Read a credential from platform-specific secure store
+*
+* @param key - Credential key (e.g., "channel:discord:token")
+* @returns Decrypted credential value or null if not found
+*/
+function readSecureCredential(key) {
+	switch (process.platform) {
+		case "win32": return readWindowsCredential(key);
+		case "darwin": return readMacCredential(key);
+		case "linux": return readLinuxCredential(key);
+		default: return null;
+	}
+}
+/**
 * Load all available credentials from secure file store and set as environment variables
 *
 * @returns Object with loaded credential keys and their env var names
@@ -46288,13 +46382,18 @@ function loadSecureCredentialsToEnv() {
 	return loaded;
 }
 /**
-* Check if secure file store is available
+* Check if secure credential store is available for the current platform
 */
 function isSecureFileStoreAvailable() {
-	if (process.platform !== "linux") return false;
-	const secureDir = path$1.join(os$1.homedir(), ".moldclaw", "secure");
-	const saltPath = path$1.join(os$1.homedir(), ".moldclaw", "license", "instance.salt");
-	return fs$3.existsSync(secureDir) && fs$3.existsSync(saltPath);
+	switch (process.platform) {
+		case "win32": return true;
+		case "darwin": return true;
+		case "linux":
+			const secureDir = path$1.join(os$1.homedir(), ".moldclaw", "secure");
+			const saltPath = path$1.join(os$1.homedir(), ".moldclaw", "license", "instance.salt");
+			return fs$3.existsSync(secureDir) && fs$3.existsSync(saltPath);
+		default: return false;
+	}
 }
 //#endregion
 //#region src/secrets/secret-value.ts
@@ -60745,7 +60844,7 @@ function ensureContextWindowCacheLoaded() {
 			await ensuremoldClawModelsJson(cfg);
 		} catch {}
 		try {
-			const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-runtime-BrK7tcaO.js");
+			const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-runtime-vSSbBDFG.js");
 			const agentDir = resolvemoldClawAgentDir();
 			const modelRegistry = discoverModels(discoverAuthStorage(agentDir), agentDir);
 			applyDiscoveredContextWindows({
@@ -82517,7 +82616,7 @@ function normalizeReplyPayload(payload, opts = {}) {
 */
 let deliverRuntimePromise$1 = null;
 function loadDeliverRuntime$1() {
-	deliverRuntimePromise$1 ??= import("./deliver-runtime-CCNZIhET.js");
+	deliverRuntimePromise$1 ??= import("./deliver-runtime-CwnLQZTN.js");
 	return deliverRuntimePromise$1;
 }
 /**
@@ -83069,7 +83168,7 @@ const MAX_TIMER_SAFE_TIMEOUT_MS = 2147e6;
 const GATEWAY_TIMEOUT_PATTERN = /gateway timeout/i;
 let subagentRegistryRuntimePromise = null;
 function loadSubagentRegistryRuntime() {
-	subagentRegistryRuntimePromise ??= import("./subagent-registry-runtime-DYYU5p3X.js");
+	subagentRegistryRuntimePromise ??= import("./subagent-registry-runtime-oG47Fzvg.js");
 	return subagentRegistryRuntimePromise;
 }
 const DIRECT_ANNOUNCE_TRANSIENT_RETRY_DELAYS_MS = FAST_TEST_MODE ? [
@@ -84616,7 +84715,7 @@ function restoreSubagentRunsOnce() {
 		ensureListener();
 		if ([...subagentRuns.values()].some((entry) => entry.archiveAtMs)) startSweeper();
 		for (const runId of subagentRuns.keys()) resumeSubagentRun(runId);
-		import("./subagent-orphan-recovery-BpRPryEj.js").then(({ scheduleOrphanRecovery }) => {
+		import("./subagent-orphan-recovery-CCVopsdP.js").then(({ scheduleOrphanRecovery }) => {
 			scheduleOrphanRecovery({ getActiveRuns: () => subagentRuns });
 		}, () => {});
 	} catch {}
@@ -94216,7 +94315,7 @@ async function createDiscordTypingLease(params) {
 }
 //#endregion
 //#region src/plugins/runtime/runtime-discord.ts
-const loadRuntimeDiscordOps = createLazyRuntimeSurface(() => import("./runtime-discord-ops.runtime-T4sf7aRB.js"), ({ runtimeDiscordOps }) => runtimeDiscordOps);
+const loadRuntimeDiscordOps = createLazyRuntimeSurface(() => import("./runtime-discord-ops.runtime-DWBnG-Hf.js"), ({ runtimeDiscordOps }) => runtimeDiscordOps);
 const auditChannelPermissionsLazy = createLazyRuntimeMethod(loadRuntimeDiscordOps, (runtimeDiscordOps) => runtimeDiscordOps.auditChannelPermissions);
 const listDirectoryGroupsLiveLazy$1 = createLazyRuntimeMethod(loadRuntimeDiscordOps, (runtimeDiscordOps) => runtimeDiscordOps.listDirectoryGroupsLive);
 const listDirectoryPeersLiveLazy$1 = createLazyRuntimeMethod(loadRuntimeDiscordOps, (runtimeDiscordOps) => runtimeDiscordOps.listDirectoryPeersLive);
@@ -97290,7 +97389,7 @@ function createRuntimeSignal() {
 }
 //#endregion
 //#region src/plugins/runtime/runtime-slack.ts
-const loadRuntimeSlackOps = createLazyRuntimeSurface(() => import("./runtime-slack-ops.runtime-BQpP48mC.js"), ({ runtimeSlackOps }) => runtimeSlackOps);
+const loadRuntimeSlackOps = createLazyRuntimeSurface(() => import("./runtime-slack-ops.runtime-oYfbYvX4.js"), ({ runtimeSlackOps }) => runtimeSlackOps);
 const listDirectoryGroupsLiveLazy = createLazyRuntimeMethod(loadRuntimeSlackOps, (runtimeSlackOps) => runtimeSlackOps.listDirectoryGroupsLive);
 const listDirectoryPeersLiveLazy = createLazyRuntimeMethod(loadRuntimeSlackOps, (runtimeSlackOps) => runtimeSlackOps.listDirectoryPeersLive);
 const probeSlackLazy = createLazyRuntimeMethod(loadRuntimeSlackOps, (runtimeSlackOps) => runtimeSlackOps.probeSlack);
@@ -97791,7 +97890,7 @@ async function createTelegramTypingLease(params) {
 }
 //#endregion
 //#region src/plugins/runtime/runtime-telegram.ts
-const loadRuntimeTelegramOps = createLazyRuntimeSurface(() => import("./runtime-telegram-ops.runtime-cVO5dqOp.js"), ({ runtimeTelegramOps }) => runtimeTelegramOps);
+const loadRuntimeTelegramOps = createLazyRuntimeSurface(() => import("./runtime-telegram-ops.runtime-EPGDYN1f.js"), ({ runtimeTelegramOps }) => runtimeTelegramOps);
 const auditGroupMembershipLazy = createLazyRuntimeMethod(loadRuntimeTelegramOps, (runtimeTelegramOps) => runtimeTelegramOps.auditGroupMembership);
 const probeTelegramLazy = createLazyRuntimeMethod(loadRuntimeTelegramOps, (runtimeTelegramOps) => runtimeTelegramOps.probeTelegram);
 const sendMessageTelegramLazy = createLazyRuntimeMethod(loadRuntimeTelegramOps, (runtimeTelegramOps) => runtimeTelegramOps.sendMessageTelegram);
@@ -98034,7 +98133,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-WFluMDMb.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-B2ElPfmb.js");
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -98074,8 +98173,8 @@ function createWhatsAppLoginTool() {
 }
 //#endregion
 //#region src/plugins/runtime/runtime-whatsapp.ts
-const loadWebOutbound = createLazyRuntimeSurface(() => import("./runtime-whatsapp-outbound.runtime-Bw47QbFK.js"), ({ runtimeWhatsAppOutbound }) => runtimeWhatsAppOutbound);
-const loadWebLogin = createLazyRuntimeSurface(() => import("./runtime-whatsapp-login.runtime-DtNx0dSY.js"), ({ runtimeWhatsAppLogin }) => runtimeWhatsAppLogin);
+const loadWebOutbound = createLazyRuntimeSurface(() => import("./runtime-whatsapp-outbound.runtime-D3Sag6Bv.js"), ({ runtimeWhatsAppOutbound }) => runtimeWhatsAppOutbound);
+const loadWebLogin = createLazyRuntimeSurface(() => import("./runtime-whatsapp-login.runtime-BGJoKM2h.js"), ({ runtimeWhatsAppLogin }) => runtimeWhatsAppLogin);
 const sendMessageWhatsAppLazy = createLazyRuntimeMethod(loadWebOutbound, (runtimeWhatsAppOutbound) => runtimeWhatsAppOutbound.sendMessageWhatsApp);
 const sendPollWhatsAppLazy = createLazyRuntimeMethod(loadWebOutbound, (runtimeWhatsAppOutbound) => runtimeWhatsAppOutbound.sendPollWhatsApp);
 const loginWebLazy = createLazyRuntimeMethod(loadWebLogin, (runtimeWhatsAppLogin) => runtimeWhatsAppLogin.loginWeb);
@@ -98099,15 +98198,15 @@ let webLoginQrPromise = null;
 let webChannelPromise = null;
 let whatsappActionsPromise = null;
 function loadWebLoginQr() {
-	webLoginQrPromise ??= import("./login-qr-WFluMDMb.js");
+	webLoginQrPromise ??= import("./login-qr-B2ElPfmb.js");
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-CMczmL90.js");
+	webChannelPromise ??= import("./web-BGDXhunB.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
-	whatsappActionsPromise ??= import("./whatsapp-actions-Cg1Wxv8W.js");
+	whatsappActionsPromise ??= import("./whatsapp-actions-CVoTcagb.js");
 	return whatsappActionsPromise;
 }
 function createRuntimeWhatsApp() {
@@ -101384,7 +101483,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./auth-profiles.runtime-Cr-ojtTc.js");
+		const { ensureAuthProfileStore } = await import("./auth-profiles.runtime-Clyka_jV.js");
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -107705,7 +107804,7 @@ const warnedContexts = /* @__PURE__ */ new Map();
 const log$4 = createSubsystemLogger("session-maintenance-warning");
 let deliverRuntimePromise = null;
 function loadDeliverRuntime() {
-	deliverRuntimePromise ??= import("./deliver-runtime-CCNZIhET.js");
+	deliverRuntimePromise ??= import("./deliver-runtime-CwnLQZTN.js");
 	return deliverRuntimePromise;
 }
 function shouldSendWarning() {
@@ -114179,12 +114278,12 @@ function createLazySender(channelId, loader) {
 }
 function createDefaultDeps() {
 	return {
-		whatsapp: createLazySender("whatsapp", () => import("./whatsapp-VzRW8MdR.js")),
-		telegram: createLazySender("telegram", () => import("./telegram-RtKXoEsF.js")),
-		discord: createLazySender("discord", () => import("./discord-CrgxhEWw.js")),
-		slack: createLazySender("slack", () => import("./slack-C4T53Nc-.js")),
-		signal: createLazySender("signal", () => import("./signal-DBlETRu9.js")),
-		imessage: createLazySender("imessage", () => import("./imessage-VIHePprL.js"))
+		whatsapp: createLazySender("whatsapp", () => import("./whatsapp-D64cBQ_9.js")),
+		telegram: createLazySender("telegram", () => import("./telegram-Dug8pd82.js")),
+		discord: createLazySender("discord", () => import("./discord-DwFf1qp7.js")),
+		slack: createLazySender("slack", () => import("./slack-Bzt3M7d8.js")),
+		signal: createLazySender("signal", () => import("./signal-xxP4dGx7.js")),
+		imessage: createLazySender("imessage", () => import("./imessage-scXvYYHX.js"))
 	};
 }
 function createOutboundSendDeps$1(deps) {

package/dist/{auth-profiles.runtime-Cr-ojtTc.js → auth-profiles.runtime-Clyka_jV.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import "./links-BcahUP5U.js";
 import "./setup-binary-CcAv8NXz.js";
-import { wE as ensureAuthProfileStore$1 } from "./auth-profiles-smABVXzp.js";
+import { wE as ensureAuthProfileStore$1 } from "./auth-profiles-C-Ul-Qkn.js";
 import "./model-selection-bBBxfXdb.js";
 import "./agent-scope-lZlwP1At.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -86,7 +86,7 @@ import "./call-gdDAt07d.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-tTD5o_rU.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-BS5Db0A6.js";
+import "./search-manager-D-G9UaXe.js";
 import "./core-BwKq3krw.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CdisccbY.js";
@@ -102,7 +102,7 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-CpfSjvyo.js";
+import "./audit-ChWS6RiF.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import "./help-format-BFzPm_8V.js";

package/dist/{bluebubbles-CVk7M3Bl.js → bluebubbles-irYTGbfn.js}

@@ -1,5 +1,5 @@
 import { d as isRecord } from "./utils-C7ykRPCQ.js";
-import { bt as collectIssuesForEnabledAccounts, yt as asString } from "./auth-profiles-smABVXzp.js";
+import { bt as collectIssuesForEnabledAccounts, yt as asString } from "./auth-profiles-C-Ul-Qkn.js";
 //#region src/channels/plugins/status-issues/bluebubbles.ts
 function readBlueBubblesAccountStatus(value) {
 	if (!isRecord(value)) return null;