@workclaw/openclaw-workclaw 1.0.339 → 1.0.341

package/dist/node_modules/.pnpm/@earendil-works_pi-coding-a_998091a29946ec209e36f7c0d09f7c02/node_modules/@earendil-works/pi-coding-agent/dist/core/auth-guidance.js

@@ -1,32 +0,0 @@
-import { join } from "node:path";
-import { getDocsPath } from "../config.js";
-const UNKNOWN_PROVIDER = "unknown";
-function getProviderLoginHelp() {
-  return [
-    "Use /login to log into a provider via OAuth or API key. See:",
-    `  ${join(getDocsPath(), "providers.md")}`,
-    `  ${join(getDocsPath(), "models.md")}`
-  ].join("\n");
-}
-function formatNoModelsAvailableMessage() {
-  return `No models available. ${getProviderLoginHelp()}`;
-}
-function formatNoModelSelectedMessage() {
-  return `No model selected.
-
-${getProviderLoginHelp()}
-
-Then use /model to select a model.`;
-}
-function formatNoApiKeyFoundMessage(provider) {
-  const providerDisplay = provider === UNKNOWN_PROVIDER ? "the selected model" : provider;
-  return `No API key found for ${providerDisplay}.
-
-${getProviderLoginHelp()}`;
-}
-export {
-  formatNoApiKeyFoundMessage,
-  formatNoModelSelectedMessage,
-  formatNoModelsAvailableMessage,
-  getProviderLoginHelp
-};

package/dist/node_modules/.pnpm/@earendil-works_pi-coding-a_998091a29946ec209e36f7c0d09f7c02/node_modules/@earendil-works/pi-coding-agent/dist/core/auth-storage.js

@@ -1,419 +0,0 @@
-import "../../../../../../typebox@1.1.38/node_modules/typebox/build/system/hashing/hash.js";
-import "../../../../../../typebox@1.1.38/node_modules/typebox/build/type/script/token/internal/char.js";
-import "../../../../../../typebox@1.1.38/node_modules/typebox/build/type/script/token/ident.js";
-import { getEnvApiKey, findEnvKeys } from "../../../../../../@earendil-works_pi-ai@0.75._3ea128c92bbfa86e7bf0be095ab1043e/node_modules/@earendil-works/pi-ai/dist/env-api-keys.js";
-import "../../../../../../@earendil-works_pi-ai@0.75._3ea128c92bbfa86e7bf0be095ab1043e/node_modules/@earendil-works/pi-ai/dist/image-models.js";
-import "../../../../../../@earendil-works_pi-ai@0.75._3ea128c92bbfa86e7bf0be095ab1043e/node_modules/@earendil-works/pi-ai/dist/providers/images/register-builtins.js";
-import "../../../../../../@earendil-works_pi-ai@0.75._3ea128c92bbfa86e7bf0be095ab1043e/node_modules/@earendil-works/pi-ai/dist/models.js";
-import "../../../../../../@earendil-works_pi-ai@0.75._3ea128c92bbfa86e7bf0be095ab1043e/node_modules/@earendil-works/pi-ai/dist/providers/register-builtins.js";
-import "../../../../../../partial-json@0.1.7/node_modules/partial-json/dist/index.js";
-import "../../../../../../typebox@1.1.38/node_modules/typebox/build/format/_registry.js";
-import "../../../../../../typebox@1.1.38/node_modules/typebox/build/schema/engine/_stack.js";
-import "../../../../../../typebox@1.1.38/node_modules/typebox/build/value/convert/try/try_number.js";
-import "../../../../../../typebox@1.1.38/node_modules/typebox/build/value/delta/edit.js";
-import { getOAuthProvider, getOAuthApiKey, getOAuthProviders } from "../../../../../../@earendil-works_pi-ai@0.75._3ea128c92bbfa86e7bf0be095ab1043e/node_modules/@earendil-works/pi-ai/dist/utils/oauth/index.js";
-import { existsSync, mkdirSync, writeFileSync, chmodSync, readFileSync } from "fs";
-import { join, dirname } from "path";
-import lockfile from "../../../../../../proper-lockfile@4.1.2/node_modules/proper-lockfile/index.js";
-import { getAgentDir } from "../config.js";
-import { resolveConfigValue } from "./resolve-config-value.js";
-class FileAuthStorageBackend {
-  authPath;
-  constructor(authPath = join(getAgentDir(), "auth.json")) {
-    this.authPath = authPath;
-  }
-  ensureParentDir() {
-    const dir = dirname(this.authPath);
-    if (!existsSync(dir)) {
-      mkdirSync(dir, { recursive: true, mode: 448 });
-    }
-  }
-  ensureFileExists() {
-    if (!existsSync(this.authPath)) {
-      writeFileSync(this.authPath, "{}", "utf-8");
-      chmodSync(this.authPath, 384);
-    }
-  }
-  acquireLockSyncWithRetry(path) {
-    const maxAttempts = 10;
-    let lastError;
-    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-      try {
-        return lockfile.lockSync(path, { realpath: false });
-      } catch (error) {
-        const code = typeof error === "object" && error !== null && "code" in error ? String(error.code) : void 0;
-        if (code !== "ELOCKED" || attempt === maxAttempts) {
-          throw error;
-        }
-        lastError = error;
-      }
-    }
-    throw lastError ?? new Error("Failed to acquire auth storage lock");
-  }
-  withLock(fn) {
-    this.ensureParentDir();
-    this.ensureFileExists();
-    let release;
-    try {
-      release = this.acquireLockSyncWithRetry(this.authPath);
-      const current = existsSync(this.authPath) ? readFileSync(this.authPath, "utf-8") : void 0;
-      const { result, next } = fn(current);
-      if (next !== void 0) {
-        writeFileSync(this.authPath, next, "utf-8");
-        chmodSync(this.authPath, 384);
-      }
-      return result;
-    } finally {
-      if (release) {
-        release();
-      }
-    }
-  }
-  async withLockAsync(fn) {
-    this.ensureParentDir();
-    this.ensureFileExists();
-    let release;
-    let lockCompromised = false;
-    let lockCompromisedError;
-    const throwIfCompromised = () => {
-      if (lockCompromised) {
-        throw lockCompromisedError ?? new Error("Auth storage lock was compromised");
-      }
-    };
-    try {
-      release = await lockfile.lock(this.authPath, {
-        retries: {
-          retries: 10,
-          factor: 2,
-          minTimeout: 100,
-          maxTimeout: 1e4,
-          randomize: true
-        },
-        stale: 3e4,
-        onCompromised: (err) => {
-          lockCompromised = true;
-          lockCompromisedError = err;
-        }
-      });
-      throwIfCompromised();
-      const current = existsSync(this.authPath) ? readFileSync(this.authPath, "utf-8") : void 0;
-      const { result, next } = await fn(current);
-      throwIfCompromised();
-      if (next !== void 0) {
-        writeFileSync(this.authPath, next, "utf-8");
-        chmodSync(this.authPath, 384);
-      }
-      throwIfCompromised();
-      return result;
-    } finally {
-      if (release) {
-        try {
-          await release();
-        } catch {
-        }
-      }
-    }
-  }
-}
-class InMemoryAuthStorageBackend {
-  value;
-  withLock(fn) {
-    const { result, next } = fn(this.value);
-    if (next !== void 0) {
-      this.value = next;
-    }
-    return result;
-  }
-  async withLockAsync(fn) {
-    const { result, next } = await fn(this.value);
-    if (next !== void 0) {
-      this.value = next;
-    }
-    return result;
-  }
-}
-class AuthStorage {
-  data = {};
-  runtimeOverrides = /* @__PURE__ */ new Map();
-  fallbackResolver;
-  loadError = null;
-  errors = [];
-  storage;
-  constructor(storage) {
-    this.storage = storage;
-    this.reload();
-  }
-  static create(authPath) {
-    return new AuthStorage(new FileAuthStorageBackend(authPath ?? join(getAgentDir(), "auth.json")));
-  }
-  static fromStorage(storage) {
-    return new AuthStorage(storage);
-  }
-  static inMemory(data = {}) {
-    const storage = new InMemoryAuthStorageBackend();
-    storage.withLock(() => ({ result: void 0, next: JSON.stringify(data, null, 2) }));
-    return AuthStorage.fromStorage(storage);
-  }
-  /**
-   * Set a runtime API key override (not persisted to disk).
-   * Used for CLI --api-key flag.
-   */
-  setRuntimeApiKey(provider, apiKey) {
-    this.runtimeOverrides.set(provider, apiKey);
-  }
-  /**
-   * Remove a runtime API key override.
-   */
-  removeRuntimeApiKey(provider) {
-    this.runtimeOverrides.delete(provider);
-  }
-  /**
-   * Set a fallback resolver for API keys not found in auth.json or env vars.
-   * Used for custom provider keys from models.json.
-   */
-  setFallbackResolver(resolver) {
-    this.fallbackResolver = resolver;
-  }
-  recordError(error) {
-    const normalizedError = error instanceof Error ? error : new Error(String(error));
-    this.errors.push(normalizedError);
-  }
-  parseStorageData(content) {
-    if (!content) {
-      return {};
-    }
-    return JSON.parse(content);
-  }
-  /**
-   * Reload credentials from storage.
-   */
-  reload() {
-    let content;
-    try {
-      this.storage.withLock((current) => {
-        content = current;
-        return { result: void 0 };
-      });
-      this.data = this.parseStorageData(content);
-      this.loadError = null;
-    } catch (error) {
-      this.loadError = error;
-      this.recordError(error);
-    }
-  }
-  persistProviderChange(provider, credential) {
-    if (this.loadError) {
-      return;
-    }
-    try {
-      this.storage.withLock((current) => {
-        const currentData = this.parseStorageData(current);
-        const merged = { ...currentData };
-        if (credential) {
-          merged[provider] = credential;
-        } else {
-          delete merged[provider];
-        }
-        return { result: void 0, next: JSON.stringify(merged, null, 2) };
-      });
-    } catch (error) {
-      this.recordError(error);
-    }
-  }
-  /**
-   * Get credential for a provider.
-   */
-  get(provider) {
-    return this.data[provider] ?? void 0;
-  }
-  /**
-   * Set credential for a provider.
-   */
-  set(provider, credential) {
-    this.data[provider] = credential;
-    this.persistProviderChange(provider, credential);
-  }
-  /**
-   * Remove credential for a provider.
-   */
-  remove(provider) {
-    delete this.data[provider];
-    this.persistProviderChange(provider, void 0);
-  }
-  /**
-   * List all providers with credentials.
-   */
-  list() {
-    return Object.keys(this.data);
-  }
-  /**
-   * Check if credentials exist for a provider in auth.json.
-   */
-  has(provider) {
-    return provider in this.data;
-  }
-  /**
-   * Check if any form of auth is configured for a provider.
-   * Unlike getApiKey(), this doesn't refresh OAuth tokens.
-   */
-  hasAuth(provider) {
-    if (this.runtimeOverrides.has(provider))
-      return true;
-    if (this.data[provider])
-      return true;
-    if (getEnvApiKey(provider))
-      return true;
-    if (this.fallbackResolver?.(provider))
-      return true;
-    return false;
-  }
-  /**
-   * Return auth status without exposing credential values or refreshing tokens.
-   */
-  getAuthStatus(provider) {
-    if (this.data[provider]) {
-      return { configured: true, source: "stored" };
-    }
-    if (this.runtimeOverrides.has(provider)) {
-      return { configured: false, source: "runtime", label: "--api-key" };
-    }
-    const envKeys = findEnvKeys(provider);
-    if (envKeys?.[0]) {
-      return { configured: false, source: "environment", label: envKeys[0] };
-    }
-    if (this.fallbackResolver?.(provider)) {
-      return { configured: false, source: "fallback", label: "custom provider config" };
-    }
-    return { configured: false };
-  }
-  /**
-   * Get all credentials (for passing to getOAuthApiKey).
-   */
-  getAll() {
-    return { ...this.data };
-  }
-  drainErrors() {
-    const drained = [...this.errors];
-    this.errors = [];
-    return drained;
-  }
-  /**
-   * Login to an OAuth provider.
-   */
-  async login(providerId, callbacks) {
-    const provider = getOAuthProvider(providerId);
-    if (!provider) {
-      throw new Error(`Unknown OAuth provider: ${providerId}`);
-    }
-    const credentials = await provider.login(callbacks);
-    this.set(providerId, { type: "oauth", ...credentials });
-  }
-  /**
-   * Logout from a provider.
-   */
-  logout(provider) {
-    this.remove(provider);
-  }
-  /**
-   * Refresh OAuth token with backend locking to prevent race conditions.
-   * Multiple pi instances may try to refresh simultaneously when tokens expire.
-   */
-  async refreshOAuthTokenWithLock(providerId) {
-    const provider = getOAuthProvider(providerId);
-    if (!provider) {
-      return null;
-    }
-    const result = await this.storage.withLockAsync(async (current) => {
-      const currentData = this.parseStorageData(current);
-      this.data = currentData;
-      this.loadError = null;
-      const cred = currentData[providerId];
-      if (cred?.type !== "oauth") {
-        return { result: null };
-      }
-      if (Date.now() < cred.expires) {
-        return { result: { apiKey: provider.getApiKey(cred), newCredentials: cred } };
-      }
-      const oauthCreds = {};
-      for (const [key, value] of Object.entries(currentData)) {
-        if (value.type === "oauth") {
-          oauthCreds[key] = value;
-        }
-      }
-      const refreshed = await getOAuthApiKey(providerId, oauthCreds);
-      if (!refreshed) {
-        return { result: null };
-      }
-      const merged = {
-        ...currentData,
-        [providerId]: { type: "oauth", ...refreshed.newCredentials }
-      };
-      this.data = merged;
-      this.loadError = null;
-      return { result: refreshed, next: JSON.stringify(merged, null, 2) };
-    });
-    return result;
-  }
-  /**
-   * Get API key for a provider.
-   * Priority:
-   * 1. Runtime override (CLI --api-key)
-   * 2. API key from auth.json
-   * 3. OAuth token from auth.json (auto-refreshed with locking)
-   * 4. Environment variable
-   * 5. Fallback resolver (models.json custom providers)
-   */
-  async getApiKey(providerId, options) {
-    const runtimeKey = this.runtimeOverrides.get(providerId);
-    if (runtimeKey) {
-      return runtimeKey;
-    }
-    const cred = this.data[providerId];
-    if (cred?.type === "api_key") {
-      return resolveConfigValue(cred.key);
-    }
-    if (cred?.type === "oauth") {
-      const provider = getOAuthProvider(providerId);
-      if (!provider) {
-        return void 0;
-      }
-      const needsRefresh = Date.now() >= cred.expires;
-      if (needsRefresh) {
-        try {
-          const result = await this.refreshOAuthTokenWithLock(providerId);
-          if (result) {
-            return result.apiKey;
-          }
-        } catch (error) {
-          this.recordError(error);
-          this.reload();
-          const updatedCred = this.data[providerId];
-          if (updatedCred?.type === "oauth" && Date.now() < updatedCred.expires) {
-            return provider.getApiKey(updatedCred);
-          }
-          return void 0;
-        }
-      } else {
-        return provider.getApiKey(cred);
-      }
-    }
-    const envKey = getEnvApiKey(providerId);
-    if (envKey)
-      return envKey;
-    if (options?.includeFallback !== false) {
-      return this.fallbackResolver?.(providerId) ?? void 0;
-    }
-    return void 0;
-  }
-  /**
-   * Get all registered OAuth providers
-   */
-  getOAuthProviders() {
-    return getOAuthProviders();
-  }
-}
-export {
-  AuthStorage,
-  FileAuthStorageBackend,
-  InMemoryAuthStorageBackend
-};

package/dist/node_modules/.pnpm/@earendil-works_pi-coding-a_998091a29946ec209e36f7c0d09f7c02/node_modules/@earendil-works/pi-coding-agent/dist/core/bash-executor.js

@@ -1,93 +0,0 @@
-import { randomBytes } from "node:crypto";
-import { createWriteStream } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { stripAnsi } from "../utils/ansi.js";
-import { sanitizeBinaryOutput } from "../utils/shell.js";
-import { truncateTail, DEFAULT_MAX_BYTES } from "./tools/truncate.js";
-async function executeBashWithOperations(command, cwd, operations, options) {
-  const outputChunks = [];
-  let outputBytes = 0;
-  const maxOutputBytes = DEFAULT_MAX_BYTES * 2;
-  let tempFilePath;
-  let tempFileStream;
-  let totalBytes = 0;
-  const ensureTempFile = () => {
-    if (tempFilePath) {
-      return;
-    }
-    const id = randomBytes(8).toString("hex");
-    tempFilePath = join(tmpdir(), `pi-bash-${id}.log`);
-    tempFileStream = createWriteStream(tempFilePath);
-    for (const chunk of outputChunks) {
-      tempFileStream.write(chunk);
-    }
-  };
-  const decoder = new TextDecoder();
-  const onData = (data) => {
-    totalBytes += data.length;
-    const text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\r/g, "");
-    if (totalBytes > DEFAULT_MAX_BYTES) {
-      ensureTempFile();
-    }
-    if (tempFileStream) {
-      tempFileStream.write(text);
-    }
-    outputChunks.push(text);
-    outputBytes += text.length;
-    while (outputBytes > maxOutputBytes && outputChunks.length > 1) {
-      const removed = outputChunks.shift();
-      outputBytes -= removed.length;
-    }
-    if (options?.onChunk) {
-      options.onChunk(text);
-    }
-  };
-  try {
-    const result = await operations.exec(command, cwd, {
-      onData,
-      signal: options?.signal
-    });
-    const fullOutput = outputChunks.join("");
-    const truncationResult = truncateTail(fullOutput);
-    if (truncationResult.truncated) {
-      ensureTempFile();
-    }
-    if (tempFileStream) {
-      tempFileStream.end();
-    }
-    const cancelled = options?.signal?.aborted ?? false;
-    return {
-      output: truncationResult.truncated ? truncationResult.content : fullOutput,
-      exitCode: cancelled ? void 0 : result.exitCode ?? void 0,
-      cancelled,
-      truncated: truncationResult.truncated,
-      fullOutputPath: tempFilePath
-    };
-  } catch (err) {
-    if (options?.signal?.aborted) {
-      const fullOutput = outputChunks.join("");
-      const truncationResult = truncateTail(fullOutput);
-      if (truncationResult.truncated) {
-        ensureTempFile();
-      }
-      if (tempFileStream) {
-        tempFileStream.end();
-      }
-      return {
-        output: truncationResult.truncated ? truncationResult.content : fullOutput,
-        exitCode: void 0,
-        cancelled: true,
-        truncated: truncationResult.truncated,
-        fullOutputPath: tempFilePath
-      };
-    }
-    if (tempFileStream) {
-      tempFileStream.end();
-    }
-    throw err;
-  }
-}
-export {
-  executeBashWithOperations
-};