@workclaw/openclaw-workclaw 1.0.32 → 1.0.33

package/dist/node_modules/.pnpm/openclaw@2026.4.14_@emnapi__48b26e3018d2f6ac73290fb8288ef325/node_modules/openclaw/dist/host-env-security-B-Ebh6At.js

@@ -0,0 +1,334 @@
+var host_env_security_policy_default = {
+  blockedEverywhereKeys: [
+    "NODE_OPTIONS",
+    "NODE_PATH",
+    "PYTHONHOME",
+    "PYTHONPATH",
+    "PERL5LIB",
+    "PERL5OPT",
+    "RUBYLIB",
+    "RUBYOPT",
+    "BASH_ENV",
+    "ENV",
+    "BROWSER",
+    "GIT_EDITOR",
+    "GIT_EXTERNAL_DIFF",
+    "GIT_DIR",
+    "GIT_WORK_TREE",
+    "GIT_COMMON_DIR",
+    "GIT_EXEC_PATH",
+    "GIT_INDEX_FILE",
+    "GIT_OBJECT_DIRECTORY",
+    "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+    "GIT_NAMESPACE",
+    "GIT_SEQUENCE_EDITOR",
+    "GIT_TEMPLATE_DIR",
+    "GIT_SSL_NO_VERIFY",
+    "GIT_SSL_CAINFO",
+    "GIT_SSL_CAPATH",
+    "CC",
+    "CXX",
+    "CARGO_BUILD_RUSTC",
+    "CARGO_BUILD_RUSTC_WRAPPER",
+    "RUSTC_WRAPPER",
+    "CMAKE_C_COMPILER",
+    "CMAKE_CXX_COMPILER",
+    "SHELL",
+    "SHELLOPTS",
+    "PS4",
+    "GCONV_PATH",
+    "IFS",
+    "SSLKEYLOGFILE",
+    "JAVA_OPTS",
+    "JAVA_TOOL_OPTIONS",
+    "_JAVA_OPTIONS",
+    "JDK_JAVA_OPTIONS",
+    "PYTHONBREAKPOINT",
+    "DOTNET_STARTUP_HOOKS",
+    "DOTNET_ADDITIONAL_DEPS",
+    "GLIBC_TUNABLES",
+    "MAVEN_OPTS",
+    "MAKEFLAGS",
+    "MFLAGS",
+    "SBT_OPTS",
+    "GRADLE_OPTS",
+    "ANT_OPTS",
+    "HGRCPATH",
+    "EXINIT",
+    "VIMINIT",
+    "MYVIMRC",
+    "GVIMINIT",
+    "LUA_INIT",
+    "LUA_INIT_5_1",
+    "LUA_INIT_5_2",
+    "LUA_INIT_5_3",
+    "LUA_INIT_5_4",
+    "EMACSLOADPATH",
+    "RUBYSHELL",
+    "GIT_HOOK_PATH",
+    "SVN_EDITOR",
+    "SVN_SSH",
+    "BZR_EDITOR",
+    "BZR_SSH",
+    "BZR_PLUGIN_PATH",
+    "SUDO_ASKPASS",
+    "JULIA_EDITOR",
+    "CONFIG_SITE",
+    "CONFIG_SHELL",
+    "CMAKE_TOOLCHAIN_FILE",
+    "CATALINA_OPTS",
+    "CORECLR_PROFILER",
+    "HELM_PLUGINS",
+    "PACKER_PLUGIN_PATH",
+    "VAGRANT_VAGRANTFILE",
+    "ERL_AFLAGS",
+    "ERL_FLAGS",
+    "ERL_ZFLAGS",
+    "ELIXIR_ERL_OPTIONS",
+    "R_ENVIRON",
+    "R_PROFILE",
+    "R_ENVIRON_USER",
+    "R_PROFILE_USER",
+    "HOSTALIASES"
+  ],
+  blockedOverrideOnlyKeys: [
+    "HOME",
+    "GRADLE_USER_HOME",
+    "ZDOTDIR",
+    "GIT_DIR",
+    "GIT_WORK_TREE",
+    "GIT_COMMON_DIR",
+    "GIT_INDEX_FILE",
+    "GIT_OBJECT_DIRECTORY",
+    "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+    "GIT_NAMESPACE",
+    "GIT_SSH_COMMAND",
+    "GIT_SSH",
+    "GIT_PROXY_COMMAND",
+    "GIT_ASKPASS",
+    "GIT_SSL_NO_VERIFY",
+    "GIT_SSL_CAINFO",
+    "GIT_SSL_CAPATH",
+    "SSH_ASKPASS",
+    "LESSOPEN",
+    "LESSCLOSE",
+    "PAGER",
+    "MANPAGER",
+    "GIT_PAGER",
+    "EDITOR",
+    "VISUAL",
+    "FCEDIT",
+    "SUDO_EDITOR",
+    "PROMPT_COMMAND",
+    "HISTFILE",
+    "PERL5DB",
+    "PERL5DBCMD",
+    "OPENSSL_CONF",
+    "OPENSSL_ENGINES",
+    "PYTHONSTARTUP",
+    "WGETRC",
+    "CURL_HOME",
+    "CLASSPATH",
+    "CFLAGS",
+    "CGO_CFLAGS",
+    "CGO_LDFLAGS",
+    "GOFLAGS",
+    "MAKEFLAGS",
+    "MFLAGS",
+    "CORECLR_PROFILER_PATH",
+    "PHPRC",
+    "PHP_INI_SCAN_DIR",
+    "DENO_DIR",
+    "BUN_CONFIG_REGISTRY",
+    "YARN_RC_FILENAME",
+    "HTTP_PROXY",
+    "HTTPS_PROXY",
+    "ALL_PROXY",
+    "NO_PROXY",
+    "NODE_TLS_REJECT_UNAUTHORIZED",
+    "NODE_EXTRA_CA_CERTS",
+    "SSL_CERT_FILE",
+    "SSL_CERT_DIR",
+    "REQUESTS_CA_BUNDLE",
+    "CURL_CA_BUNDLE",
+    "DOCKER_HOST",
+    "DOCKER_TLS_VERIFY",
+    "DOCKER_CERT_PATH",
+    "PIP_INDEX_URL",
+    "PIP_PYPI_URL",
+    "PIP_EXTRA_INDEX_URL",
+    "PIP_CONFIG_FILE",
+    "PIP_FIND_LINKS",
+    "PIP_TRUSTED_HOST",
+    "UV_INDEX",
+    "UV_INDEX_URL",
+    "UV_PYTHON",
+    "UV_EXTRA_INDEX_URL",
+    "UV_DEFAULT_INDEX",
+    "DOCKER_CONTEXT",
+    "LIBRARY_PATH",
+    "LDFLAGS",
+    "CPATH",
+    "C_INCLUDE_PATH",
+    "CPLUS_INCLUDE_PATH",
+    "OBJC_INCLUDE_PATH",
+    "GOPROXY",
+    "GONOSUMCHECK",
+    "GONOSUMDB",
+    "GONOPROXY",
+    "GOPRIVATE",
+    "GOENV",
+    "GOPATH",
+    "HGRCPATH",
+    "PYTHONUSERBASE",
+    "RUSTC_WRAPPER",
+    "RUSTFLAGS",
+    "CARGO_HOME",
+    "VIRTUAL_ENV",
+    "LUA_PATH",
+    "LUA_CPATH",
+    "GEM_HOME",
+    "GEM_PATH",
+    "BUNDLE_GEMFILE",
+    "COMPOSER_HOME",
+    "CARGO_BUILD_RUSTC_WRAPPER",
+    "XDG_CONFIG_HOME",
+    "XDG_CONFIG_DIRS",
+    "AWS_CONFIG_FILE",
+    "KUBECONFIG",
+    "GOOGLE_APPLICATION_CREDENTIALS",
+    "AWS_SHARED_CREDENTIALS_FILE",
+    "AWS_WEB_IDENTITY_TOKEN_FILE",
+    "AZURE_AUTH_LOCATION",
+    "HELM_HOME",
+    "ANSIBLE_CONFIG",
+    "ANSIBLE_LIBRARY",
+    "ANSIBLE_CALLBACK_PLUGINS",
+    "ANSIBLE_COLLECTIONS_PATH",
+    "ANSIBLE_CONNECTION_PLUGINS",
+    "ANSIBLE_FILTER_PLUGINS",
+    "ANSIBLE_INVENTORY_PLUGINS",
+    "ANSIBLE_LOOKUP_PLUGINS",
+    "ANSIBLE_MODULE_UTILS",
+    "ANSIBLE_REMOTE_TEMP",
+    "ANSIBLE_ROLES_PATH",
+    "ANSIBLE_STRATEGY_PLUGINS",
+    "R_LIBS_USER",
+    "TF_CLI_CONFIG_FILE",
+    "TF_PLUGIN_CACHE_DIR",
+    "AMQP_URL",
+    "AWS_ACCESS_KEY_ID",
+    "AWS_CONTAINER_CREDENTIALS_FULL_URI",
+    "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",
+    "AWS_SECRET_ACCESS_KEY",
+    "AWS_SECURITY_TOKEN",
+    "AWS_SESSION_TOKEN",
+    "AZURE_CLIENT_ID",
+    "AZURE_CLIENT_SECRET",
+    "DATABASE_URL",
+    "GH_TOKEN",
+    "GITHUB_TOKEN",
+    "GITLAB_TOKEN",
+    "MONGODB_URI",
+    "NODE_AUTH_TOKEN",
+    "NPM_TOKEN",
+    "REDIS_URL",
+    "SSH_AUTH_SOCK"
+  ],
+  allowedInheritedOverrideOnlyKeys: [
+    "ALL_PROXY",
+    "AWS_CONFIG_FILE",
+    "AWS_SHARED_CREDENTIALS_FILE",
+    "AWS_WEB_IDENTITY_TOKEN_FILE",
+    "AZURE_AUTH_LOCATION",
+    "CURL_CA_BUNDLE",
+    "DOCKER_CERT_PATH",
+    "DOCKER_CONTEXT",
+    "DOCKER_HOST",
+    "DOCKER_TLS_VERIFY",
+    "GIT_PAGER",
+    "GOOGLE_APPLICATION_CREDENTIALS",
+    "GRADLE_USER_HOME",
+    "HISTFILE",
+    "HOME",
+    "HTTPS_PROXY",
+    "HTTP_PROXY",
+    "KUBECONFIG",
+    "MANPAGER",
+    "NODE_EXTRA_CA_CERTS",
+    "NODE_TLS_REJECT_UNAUTHORIZED",
+    "NO_PROXY",
+    "PAGER",
+    "REQUESTS_CA_BUNDLE",
+    "SSH_AUTH_SOCK",
+    "SSL_CERT_DIR",
+    "SSL_CERT_FILE",
+    "ZDOTDIR"
+  ],
+  blockedOverridePrefixes: [
+    "GIT_CONFIG_",
+    "NPM_CONFIG_",
+    "CARGO_REGISTRIES_",
+    "TF_VAR_"
+  ],
+  blockedPrefixes: [
+    "DYLD_",
+    "LD_",
+    "BASH_FUNC_"
+  ]
+};
+function sortUniqueUppercase(values) {
+  return Object.freeze(Array.from(new Set(values.map((value) => value.toUpperCase()))).toSorted((a, b) => a.localeCompare(b)));
+}
+function derivePolicyArrays(policy) {
+  const blockedEverywhereKeys = policy.blockedEverywhereKeys ?? [];
+  const blockedOverrideOnlyKeys = policy.blockedOverrideOnlyKeys ?? [];
+  const allowedInheritedOverrideOnlyKeys = policy.allowedInheritedOverrideOnlyKeys ?? [];
+  const allowedInheritedOverrideOnlyUpper = new Set(allowedInheritedOverrideOnlyKeys.map((value) => value.toUpperCase()));
+  const blockedPrefixes = policy.blockedPrefixes ?? [];
+  const blockedOverridePrefixes = policy.blockedOverridePrefixes ?? [];
+  const blockedInheritedPrefixes = policy.blockedInheritedPrefixes ?? blockedPrefixes;
+  return {
+    blockedInheritedKeys: sortUniqueUppercase([...blockedEverywhereKeys, ...blockedOverrideOnlyKeys.filter((value) => !allowedInheritedOverrideOnlyUpper.has(value.toUpperCase()))]),
+    blockedInheritedPrefixes: sortUniqueUppercase(blockedInheritedPrefixes),
+    blockedKeys: sortUniqueUppercase(blockedEverywhereKeys),
+    blockedOverrideKeys: sortUniqueUppercase(blockedOverrideOnlyKeys),
+    blockedPrefixes: sortUniqueUppercase(blockedPrefixes),
+    blockedOverridePrefixes: sortUniqueUppercase(blockedOverridePrefixes)
+  };
+}
+function loadHostEnvSecurityPolicy(rawPolicy = host_env_security_policy_default) {
+  const derived = derivePolicyArrays(rawPolicy);
+  return Object.freeze({
+    blockedEverywhereKeys: Object.freeze(rawPolicy.blockedEverywhereKeys ?? []),
+    blockedOverrideOnlyKeys: Object.freeze(rawPolicy.blockedOverrideOnlyKeys ?? []),
+    allowedInheritedOverrideOnlyKeys: Object.freeze(rawPolicy.allowedInheritedOverrideOnlyKeys ?? []),
+    blockedInheritedKeys: derived.blockedInheritedKeys,
+    blockedInheritedPrefixes: derived.blockedInheritedPrefixes,
+    blockedPrefixes: derived.blockedPrefixes,
+    blockedOverridePrefixes: derived.blockedOverridePrefixes,
+    blockedKeys: derived.blockedKeys,
+    blockedOverrideKeys: derived.blockedOverrideKeys
+  });
+}
+const HOST_ENV_SECURITY_POLICY = loadHostEnvSecurityPolicy();
+const HOST_DANGEROUS_ENV_KEY_VALUES = Object.freeze([...HOST_ENV_SECURITY_POLICY.blockedKeys]);
+Object.freeze([...HOST_ENV_SECURITY_POLICY.blockedPrefixes]);
+const HOST_DANGEROUS_INHERITED_ENV_KEY_VALUES = Object.freeze([...HOST_ENV_SECURITY_POLICY.blockedInheritedKeys]);
+Object.freeze([...HOST_ENV_SECURITY_POLICY.blockedInheritedPrefixes]);
+const HOST_DANGEROUS_OVERRIDE_ENV_KEY_VALUES = Object.freeze([...HOST_ENV_SECURITY_POLICY.blockedOverrideKeys]);
+Object.freeze([...HOST_ENV_SECURITY_POLICY.blockedOverridePrefixes]);
+const HOST_SHELL_WRAPPER_ALLOWED_OVERRIDE_ENV_KEY_VALUES = Object.freeze([
+  "TERM",
+  "LANG",
+  "LC_ALL",
+  "LC_CTYPE",
+  "LC_MESSAGES",
+  "COLORTERM",
+  "NO_COLOR",
+  "FORCE_COLOR"
+]);
+new Set(HOST_DANGEROUS_ENV_KEY_VALUES);
+new Set(HOST_DANGEROUS_INHERITED_ENV_KEY_VALUES);
+new Set(HOST_DANGEROUS_OVERRIDE_ENV_KEY_VALUES);
+new Set(HOST_SHELL_WRAPPER_ALLOWED_OVERRIDE_ENV_KEY_VALUES);

package/dist/node_modules/.pnpm/openclaw@2026.4.14_@emnapi__48b26e3018d2f6ac73290fb8288ef325/node_modules/openclaw/dist/ids-By7Nkc8R.js

@@ -0,0 +1,76 @@
+import { o as normalizeOptionalLowercaseString } from "./string-coerce-BUSzWgUA.js";
+import { n as resolveOpenClawPackageRootSync } from "./openclaw-root-BNWw3cXT.js";
+import fs from "node:fs";
+import path from "node:path";
+const OFFICIAL_CHANNEL_CATALOG_RELATIVE_PATH = path.join("dist", "channel-catalog.json");
+function listPackageRoots() {
+  return [resolveOpenClawPackageRootSync({ cwd: process.cwd() }), resolveOpenClawPackageRootSync({ moduleUrl: import.meta.url })].filter((entry, index, all) => Boolean(entry) && all.indexOf(entry) === index);
+}
+function listBundledExtensionPackageJsonPaths() {
+  for (const packageRoot of listPackageRoots()) {
+    const extensionsRoot = path.join(packageRoot, "extensions");
+    if (!fs.existsSync(extensionsRoot)) continue;
+    try {
+      return fs.readdirSync(extensionsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => path.join(extensionsRoot, entry.name, "package.json")).filter((entry) => fs.existsSync(entry));
+    } catch {
+      continue;
+    }
+  }
+  return [];
+}
+function readBundledExtensionCatalogEntriesSync() {
+  const entries = [];
+  for (const packageJsonPath of listBundledExtensionPackageJsonPaths()) try {
+    const payload = JSON.parse(fs.readFileSync(packageJsonPath, "utf8"));
+    entries.push(payload);
+  } catch {
+    continue;
+  }
+  return entries;
+}
+function readOfficialCatalogFileSync() {
+  for (const packageRoot of listPackageRoots()) {
+    const candidate = path.join(packageRoot, OFFICIAL_CHANNEL_CATALOG_RELATIVE_PATH);
+    if (!fs.existsSync(candidate)) continue;
+    try {
+      const payload = JSON.parse(fs.readFileSync(candidate, "utf8"));
+      return Array.isArray(payload.entries) ? payload.entries : [];
+    } catch {
+      continue;
+    }
+  }
+  return [];
+}
+function toBundledChannelEntry(entry) {
+  const channel = entry.openclaw?.channel;
+  const id = normalizeOptionalLowercaseString(channel?.id);
+  if (!id || !channel) return null;
+  return {
+    id,
+    channel,
+    aliases: Array.isArray(channel.aliases) ? channel.aliases.map((alias) => normalizeOptionalLowercaseString(alias)).filter((alias) => Boolean(alias)) : [],
+    order: typeof channel.order === "number" && Number.isFinite(channel.order) ? channel.order : Number.MAX_SAFE_INTEGER
+  };
+}
+function listBundledChannelCatalogEntries() {
+  const bundledEntries = readBundledExtensionCatalogEntriesSync().map((entry) => toBundledChannelEntry(entry)).filter((entry) => Boolean(entry));
+  if (bundledEntries.length > 0) return bundledEntries;
+  return readOfficialCatalogFileSync().map((entry) => toBundledChannelEntry(entry)).filter((entry) => Boolean(entry));
+}
+function listBundledChatChannelEntries() {
+  return listBundledChannelCatalogEntries().map((entry) => ({
+    id: normalizeOptionalLowercaseString(entry.id) ?? entry.id,
+    aliases: entry.aliases,
+    order: entry.order
+  })).toSorted((left, right) => left.order - right.order || left.id.localeCompare(right.id, "en", { sensitivity: "base" }));
+}
+const BUNDLED_CHAT_CHANNEL_ENTRIES = Object.freeze(listBundledChatChannelEntries());
+new Set(BUNDLED_CHAT_CHANNEL_ENTRIES.map((entry) => entry.id));
+const CHAT_CHANNEL_ORDER = Object.freeze(BUNDLED_CHAT_CHANNEL_ENTRIES.map((entry) => entry.id));
+const CHANNEL_IDS = CHAT_CHANNEL_ORDER;
+Object.freeze(Object.fromEntries(BUNDLED_CHAT_CHANNEL_ENTRIES.flatMap((entry) => entry.aliases.map((alias) => [alias, entry.id]))));
+export {
+  listBundledChannelCatalogEntries as i,
+  CHAT_CHANNEL_ORDER as n,
+  CHANNEL_IDS as t
+};

package/dist/node_modules/.pnpm/openclaw@2026.4.14_@emnapi__48b26e3018d2f6ac73290fb8288ef325/node_modules/openclaw/dist/inbound-path-policy-CQkSSeSi.js

@@ -0,0 +1,26 @@
+import path from "node:path";
+const WILDCARD_SEGMENT = "*";
+const WINDOWS_DRIVE_ABS_RE = /^[A-Za-z]:\//;
+const WINDOWS_DRIVE_ROOT_RE = /^[A-Za-z]:$/;
+function normalizePosixAbsolutePath(value) {
+  const trimmed = value.trim();
+  if (!trimmed || trimmed.includes("\0")) return;
+  const normalized = path.posix.normalize(trimmed.replaceAll("\\", "/"));
+  if (!(normalized.startsWith("/") || WINDOWS_DRIVE_ABS_RE.test(normalized)) || normalized === "/") return;
+  const withoutTrailingSlash = normalized.endsWith("/") ? normalized.slice(0, -1) : normalized;
+  if (WINDOWS_DRIVE_ROOT_RE.test(withoutTrailingSlash)) return;
+  return withoutTrailingSlash;
+}
+function splitPathSegments(value) {
+  return value.split("/").filter(Boolean);
+}
+function isValidInboundPathRootPattern(value) {
+  const normalized = normalizePosixAbsolutePath(value);
+  if (!normalized) return false;
+  const segments = splitPathSegments(normalized);
+  if (segments.length === 0) return false;
+  return segments.every((segment) => segment === WILDCARD_SEGMENT || !segment.includes("*"));
+}
+export {
+  isValidInboundPathRootPattern as n
+};

package/dist/node_modules/.pnpm/openclaw@2026.4.14_@emnapi__48b26e3018d2f6ac73290fb8288ef325/node_modules/openclaw/dist/internal-hooks-D52pUqod.js

@@ -0,0 +1,5 @@
+import "./redact-D4nea1HF.js";
+import "./subsystem-BHv2zSx6.js";
+import { n as resolveGlobalSingleton } from "./global-singleton-DhGoboiG.js";
+resolveGlobalSingleton(Symbol.for("openclaw.internalHookHandlers"), () => /* @__PURE__ */ new Map());
+resolveGlobalSingleton(Symbol.for("openclaw.internalHooksEnabled"), () => ({ enabled: true }));