@yuf1011/openclaw 2026.3.1 → 2026.3.2

package/dist/{doctor-config-flow-BoMU70Ko.js → doctor-config-flow-AkAVT_nE.js}

@@ -1,24 +1,24 @@
 import { $ as isRecord, $t as resolveStateDir, Rt as CONFIG_PATH, Xt as resolveNewStateDir, Yt as resolveLegacyStateDirs, Zt as resolveOAuthDir, at as resolveHomeDir, j as normalizeChatChannelId } from "./entry.js";
-import { N as readConfigFileSnapshot, O as migrateLegacyConfig, Qt as resolveCommandResolutionFromArgv, Rt as getTrustedSafeBinDirs, Vt as normalizeTrustedSafeBinDirs, _n as resolveDiscordPreviewStreamMode, bn as resolveTelegramPreviewStreamMode, vn as resolveSlackNativeStreaming, yn as resolveSlackStreamingMode, z as OpenClawSchema, zt as isTrustedSafeBinPath } from "./auth-profiles-qnck2ozy.js";
+import { N as readConfigFileSnapshot, O as migrateLegacyConfig, Qt as resolveCommandResolutionFromArgv, Rt as getTrustedSafeBinDirs, Vt as normalizeTrustedSafeBinDirs, _n as resolveDiscordPreviewStreamMode, bn as resolveTelegramPreviewStreamMode, vn as resolveSlackNativeStreaming, yn as resolveSlackStreamingMode, z as OpenClawSchema, zt as isTrustedSafeBinPath } from "./auth-profiles-D3FyYUSG.js";
 import { t as formatCliCommand } from "./command-format-BYm_a0tW.js";
-import { d as resolveDefaultAgentId } from "./agent-scope-CaXaKovT.js";
+import { d as resolveDefaultAgentId } from "./agent-scope-B33Scyaw.js";
 import { h as normalizeAccountId, m as DEFAULT_ACCOUNT_ID, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-qmb11-mH.js";
-import { f as parseToolsBySenderTypedKey } from "./dock-BYLdmpt5.js";
-import { Q as canonicalizeMainSessionAlias, p as saveSessionStore } from "./sessions-IKxRT_G9.js";
-import { d as resolveTelegramAccount, l as listTelegramAccountIds } from "./plugins-CiBXm-v1.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-BCQlhcV7.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-_x0NQEfq.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-B2Kx-xH3.js";
+import { f as parseToolsBySenderTypedKey } from "./dock-SjEhga7i.js";
+import { Q as canonicalizeMainSessionAlias, p as saveSessionStore } from "./sessions-aGmwHv0g.js";
+import { d as resolveTelegramAccount, l as listTelegramAccountIds } from "./plugins-Cb8JznN4.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-BQ4FXdVM.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-C49WkfCi.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-gT66Wggm.js";
 import { t as collectProviderDangerousNameMatchingScopes } from "./dangerous-name-matching-C2i9AEgf.js";
 import { r as shouldMoveSingleAccountChannelKey, t as fetchTelegramChatId } from "./api-DaLeB0gD.js";
 import { t as note } from "./note-DQ26Rw8p.js";
-import { t as isWithinDir } from "./path-safety-DBBDWKy1.js";
+import { t as isWithinDir } from "./path-safety-DeVxBPre.js";
 import { a as isMattermostMutableAllowEntry, c as normalizeTelegramAllowFromEntry, i as isMSTeamsMutableAllowEntry, n as isGoogleChatMutableAllowEntry, o as isSlackMutableAllowEntry, r as isIrcMutableAllowEntry, s as isNumericTelegramUserId, t as isDiscordMutableAllowEntry } from "./mutable-allowlist-detectors-COMtneie.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs";
 import JSON5 from "json5";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/commands/doctor-legacy-config.ts
 function normalizeCompatibilityConfigValues(cfg) {
@@ -2106,7 +2106,7 @@ async function maybeMigrateLegacyConfig() {
 	const targetDir = path.join(home, ".openclaw");
 	const targetPath = path.join(targetDir, "openclaw.json");
 	try {
-		await fsPromises.access(targetPath);
+		await fs$1.access(targetPath);
 		return changes;
 	} catch {}
 	const legacyCandidates = [
@@ -2116,14 +2116,14 @@ async function maybeMigrateLegacyConfig() {
 	];
 	let legacyPath = null;
 	for (const candidate of legacyCandidates) try {
-		await fsPromises.access(candidate);
+		await fs$1.access(candidate);
 		legacyPath = candidate;
 		break;
 	} catch {}
 	if (!legacyPath) return changes;
-	await fsPromises.mkdir(targetDir, { recursive: true });
+	await fs$1.mkdir(targetDir, { recursive: true });
 	try {
-		await fsPromises.copyFile(legacyPath, targetPath, fsPromises.constants.COPYFILE_EXCL);
+		await fs$1.copyFile(legacyPath, targetPath, fs$1.constants.COPYFILE_EXCL);
 		changes.push(`Migrated legacy config: ${legacyPath} -> ${targetPath}`);
 	} catch {}
 	return changes;

package/dist/{enable-BIW6JnCC.js → enable-D8_8_z2E.js}

@@ -1,5 +1,5 @@
 import { j as normalizeChatChannelId } from "./entry.js";
-import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-B2Kx-xH3.js";
+import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-gT66Wggm.js";
 
 //#region src/plugins/toggle-config.ts
 function setPluginEnabledInConfig(config, pluginId, enabled) {

package/dist/entry.js

@@ -2716,7 +2716,7 @@ if (!isMainModule({
 	}
 	function tryHandleRootHelpFastPath(argv) {
 		if (!isRootHelpInvocation(argv)) return false;
-		import("./program-Aj-MXGpl.js").then(({ buildProgram }) => {
+		import("./program-D5ThaA_K.js").then(({ buildProgram }) => {
 			buildProgram().outputHelp();
 		}).catch((error) => {
 			console.error("[openclaw] Failed to display help:", error instanceof Error ? error.stack ?? error.message : error);
@@ -2735,7 +2735,7 @@ if (!isMainModule({
 			applyCliProfileEnv({ profile: parsed.profile });
 			process$1.argv = parsed.argv;
 		}
-		if (!tryHandleRootVersionFastPath(process$1.argv) && !tryHandleRootHelpFastPath(process$1.argv)) import("./run-main-dqrwXIoU.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
+		if (!tryHandleRootVersionFastPath(process$1.argv) && !tryHandleRootHelpFastPath(process$1.argv)) import("./run-main-CAQXzgkK.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
 			console.error("[openclaw] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 			process$1.exitCode = 1;
 		});

package/dist/{exec-approvals-allowlist-CklJrJwI.js → exec-approvals-allowlist-CjjR0Lj9.js}

@@ -1,4 +1,4 @@
-import { Ht as validateSafeBinArgv, Jt as splitCommandChain, Kt as isWindowsPlatform, Qt as resolveCommandResolutionFromArgv, Wt as analyzeShellCommand, Xt as matchAllowlist, Yt as DEFAULT_SAFE_BINS, Zt as resolveAllowlistCandidatePath, en as extractShellWrapperInlineCommand, ln as SAFE_BIN_PROFILES, nn as isDispatchWrapperExecutable, on as unwrapKnownDispatchWrapperInvocation, rn as isShellWrapperExecutable, sn as unwrapKnownShellMultiplexerInvocation, zt as isTrustedSafeBinPath } from "./auth-profiles-qnck2ozy.js";
+import { Ht as validateSafeBinArgv, Jt as splitCommandChain, Kt as isWindowsPlatform, Qt as resolveCommandResolutionFromArgv, Wt as analyzeShellCommand, Xt as matchAllowlist, Yt as DEFAULT_SAFE_BINS, Zt as resolveAllowlistCandidatePath, en as extractShellWrapperInlineCommand, ln as SAFE_BIN_PROFILES, nn as isDispatchWrapperExecutable, on as unwrapKnownDispatchWrapperInvocation, rn as isShellWrapperExecutable, sn as unwrapKnownShellMultiplexerInvocation, zt as isTrustedSafeBinPath } from "./auth-profiles-D3FyYUSG.js";
 import path from "node:path";
 
 //#region src/infra/exec-approvals-allowlist.ts

package/dist/{exec-approvals-cli-tXCzQbvW.js → exec-approvals-cli-DzUDeKvk.js}

@@ -1,32 +1,32 @@
 import { Dt as isRich, Ot as theme, v as defaultRuntime } from "./entry.js";
-import "./auth-profiles-qnck2ozy.js";
-import "./agent-scope-CaXaKovT.js";
-import "./openclaw-root-DW-p-saf.js";
+import "./auth-profiles-D3FyYUSG.js";
+import "./agent-scope-B33Scyaw.js";
+import "./openclaw-root-Cw_9FXUV.js";
 import "./exec-BhaMholX.js";
 import "./github-copilot-token-DKRiM6oj.js";
 import "./host-env-security-BM8ktVlo.js";
 import "./version-CFqP9tDG.js";
 import "./env-vars-kURZgejA.js";
-import "./manifest-registry-YC37UceR.js";
+import "./manifest-registry-DRMtnPEQ.js";
 import "./message-channel-CIQTys4Q.js";
-import "./client-BBiFerkj.js";
-import "./call-C-oZgsJl.js";
-import "./pairing-token-PHk3tBUz.js";
-import "./net-CWUwrVfz.js";
-import "./tailnet-D3oqrI3q.js";
-import "./exec-approvals-allowlist-CklJrJwI.js";
+import "./client-CdetOJti.js";
+import "./call-BZSWeS2x.js";
+import "./pairing-token-CtND5y_8.js";
+import "./net-C63UEjlQ.js";
+import "./tailnet-DRVktntg.js";
+import "./exec-approvals-allowlist-CjjR0Lj9.js";
 import { n as formatTimeAgo } from "./format-relative-CLDwoKCS.js";
 import { c as readExecApprovalsSnapshot, p as saveExecApprovals } from "./exec-approvals-DJC4eXS0.js";
 import { t as formatDocsLink } from "./links-yQMT2QcX.js";
 import "./progress-bvyZjsUc.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-BTAI1-VC.js";
-import "./systemd-DpV5A3Tl.js";
-import "./service-oBfCq-qK.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-D_B_ulqD.js";
+import "./systemd-B48mxZjg.js";
+import "./service-B0CzjIz2.js";
 import { t as renderTable } from "./table-D7QRfQ5S.js";
-import { t as describeUnknownError } from "./shared-Q1aRCgme.js";
-import { i as resolveNodeId, r as nodesCallOpts } from "./rpc-BWpHds0n.js";
+import { t as describeUnknownError } from "./shared-5VPKZal4.js";
+import { i as resolveNodeId, r as nodesCallOpts } from "./rpc-u34pBflj.js";
 import JSON5 from "json5";
-import fsPromises from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/cli/exec-approvals-cli.ts
 async function readStdin() {
@@ -323,7 +323,7 @@ function registerExecApprovalsCli(program) {
 			if (!opts.file && !opts.stdin) exitWithError("Provide --file or --stdin.");
 			if (opts.file && opts.stdin) exitWithError("Use either --file or --stdin (not both).");
 			const { source, nodeId, targetLabel, baseHash } = await loadWritableSnapshotTarget(opts);
-			const raw = opts.stdin ? await readStdin() : await fsPromises.readFile(String(opts.file), "utf8");
+			const raw = opts.stdin ? await readStdin() : await fs.readFile(String(opts.file), "utf8");
 			let file;
 			try {
 				file = JSON5.parse(raw);

package/dist/{exec-safe-bin-runtime-policy-BCQlhcV7.js → exec-safe-bin-runtime-policy-BQ4FXdVM.js}

@@ -1,5 +1,5 @@
-import { Bt as listWritableExplicitTrustedSafeBinDirs, Rt as getTrustedSafeBinDirs, Vt as normalizeTrustedSafeBinDirs, dn as resolveSafeBinProfiles, un as normalizeSafeBinProfileFixtures } from "./auth-profiles-qnck2ozy.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-CklJrJwI.js";
+import { Bt as listWritableExplicitTrustedSafeBinDirs, Rt as getTrustedSafeBinDirs, Vt as normalizeTrustedSafeBinDirs, dn as resolveSafeBinProfiles, un as normalizeSafeBinProfileFixtures } from "./auth-profiles-D3FyYUSG.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-CjjR0Lj9.js";
 
 //#region src/infra/exec-safe-bin-runtime-policy.ts
 const INTERPRETER_LIKE_SAFE_BINS = new Set([

package/dist/{fetch-guard-qBXlHXD_.js → fetch-guard-Cm1MSHHV.js}

@@ -1,5 +1,5 @@
 import { s as logWarn } from "./exec-BhaMholX.js";
-import { a as resolvePinnedHostnameWithPolicy, n as closeDispatcher, r as createPinnedDispatcher, t as SsrFBlockedError } from "./ssrf-6Hb9TNxM.js";
+import { a as resolvePinnedHostnameWithPolicy, n as closeDispatcher, r as createPinnedDispatcher, t as SsrFBlockedError } from "./ssrf-DQPhGAdC.js";
 import { t as bindAbortRelay } from "./fetch-timeout-Meg2TxSF.js";
 import { EnvHttpProxyAgent } from "undici";
 

package/dist/{fs-safe-Dr8G7a6P.js → fs-safe-CCDIEBbt.js}

@@ -1,10 +1,10 @@
 import { on as expandHomePrefix } from "./entry.js";
-import { d as isNotFoundPathError, f as isPathInside, p as isSymlinkOpenError, s as sameFileIdentity } from "./openclaw-root-DW-p-saf.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-z2hGNiIs.js";
+import { d as isNotFoundPathError, f as isPathInside, p as isSymlinkOpenError, s as sameFileIdentity } from "./openclaw-root-Cw_9FXUV.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-DEakBSGU.js";
 import os from "node:os";
 import path from "node:path";
 import { constants } from "node:fs";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/fs-safe.ts
 var SafeOpenError = class extends Error {
@@ -21,27 +21,27 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function expandRelativePathWithHome(relativePath) {
 	let home = process.env.HOME || process.env.USERPROFILE || os.homedir();
 	try {
-		home = await fsPromises.realpath(home);
+		home = await fs$1.realpath(home);
 	} catch {}
 	return expandHomePrefix(relativePath, { home });
 }
 async function openVerifiedLocalFile(filePath, options) {
 	let handle;
 	try {
-		handle = await fsPromises.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fsPromises.realpath(filePath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -59,7 +59,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function openFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -142,7 +142,7 @@ async function readLocalFileSafely(params) {
 async function writeFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -160,10 +160,10 @@ async function writeFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fsPromises.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fsPromises.realpath(resolved);
+		const resolvedRealPath = await fs$1.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -172,19 +172,19 @@ async function writeFileWithinRoot(params) {
 	}
 	let handle;
 	try {
-		handle = await fsPromises.open(ioPath, OPEN_WRITE_FLAGS, 384);
+		handle = await fs$1.open(ioPath, OPEN_WRITE_FLAGS, 384);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("invalid-path", "symlink open blocked", { cause: err });
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(ioPath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(ioPath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
-		const realPath = await fsPromises.realpath(ioPath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(ioPath);
+		const realStat = await fs$1.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");