activeclaw 2026.2.11 → 2026.2.13

package/dist/{onboarding-Du_7qEng.js → onboarding-CN-EDLjd.js}

@@ -1,43 +1,43 @@
 import { n as DEFAULT_GATEWAY_PORT, u as resolveGatewayPort } from "./paths-DVBShlw6.js";
-import { D as info, L as isRich, R as theme, c as defaultRuntime, l as restoreTerminalState } from "./subsystem-Bh1Y_6Uv.js";
-import { b as resolveUserPath, g as pathExists, w as sleep } from "./utils-es4ygvQ-.js";
-import { At as probeGatewayReachable, Bt as getRemoteSkillEligibility, Ct as formatControlUiSshHint, Dr as peekSystemEvents, Dt as normalizeGatewayTokenInput, Ft as waitForGatewayReachable, J as summarizeRestartSentinel, Mt as resolveControlUiLinks, Ot as openUrl, Pt as summarizeExistingConfig, Rt as normalizeControlUiBasePath, St as ensureWorkspaceAndSessions, Tt as handleReset, Vn as getMemorySearchManager, a as buildChannelSummary, br as lookupContextTokens, dt as loadProviderUsageSummary, f as sha256HexPrefix, ft as formatUsageReportLines, h as listAgentsForGateway, jt as randomToken, kt as printWizardHeader, q as readRestartSentinel, vt as DEFAULT_WORKSPACE, xt as detectBrowserOpenSupport, yt as applyWizardMetadata } from "./reply--b7BsXGP.js";
+import { D as info, L as isRich, R as theme, c as defaultRuntime, l as restoreTerminalState } from "./subsystem-BoExtIHo.js";
+import { b as resolveUserPath, g as pathExists, w as sleep } from "./utils-Cd9QdCHh.js";
+import { At as probeGatewayReachable, Bt as getRemoteSkillEligibility, Ct as formatControlUiSshHint, Dt as normalizeGatewayTokenInput, Ft as waitForGatewayReachable, J as summarizeRestartSentinel, Mt as resolveControlUiLinks, Ot as openUrl, Pt as summarizeExistingConfig, Rt as normalizeControlUiBasePath, Sr as lookupContextTokens, St as ensureWorkspaceAndSessions, Tt as handleReset, Vn as getMemorySearchManager, a as buildChannelSummary, dt as loadProviderUsageSummary, f as sha256HexPrefix, ft as formatUsageReportLines, h as listAgentsForGateway, jt as randomToken, kr as peekSystemEvents, kt as printWizardHeader, q as readRestartSentinel, vt as DEFAULT_WORKSPACE, xt as detectBrowserOpenSupport, yt as applyWizardMetadata } from "./reply-DICXkh_C.js";
 import { l as normalizeAgentId, y as parseAgentSessionKey } from "./session-key-BWxPj0z_.js";
-import { n as runExec } from "./exec-Cv_Ofd1m.js";
-import { t as resolveOpenClawPackageRoot } from "./openclaw-root-JLDMp6ux.js";
-import { c as resolveDefaultAgentId, h as DEFAULT_IDENTITY_FILENAME, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir } from "./agent-scope-CGmuusG9.js";
-import { Dt as DEFAULT_MODEL, Et as DEFAULT_CONTEXT_TOKENS, Ot as DEFAULT_PROVIDER, d as resolveConfiguredModelRef, ht as ensureAuthProfileStore } from "./model-selection-BK7DuyH8.js";
+import { n as runExec } from "./exec-YIosokWE.js";
+import { t as resolveOpenClawPackageRoot } from "./openclaw-root-1VeFrph_.js";
+import { c as resolveDefaultAgentId, h as DEFAULT_IDENTITY_FILENAME, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir } from "./agent-scope-CQCus0rI.js";
+import { Dt as DEFAULT_MODEL, Et as DEFAULT_CONTEXT_TOKENS, Ot as DEFAULT_PROVIDER, d as resolveConfiguredModelRef, ht as ensureAuthProfileStore } from "./model-selection-BLuqsGVB.js";
 import { r as resolveCliName, t as formatCliCommand } from "./command-format-ChfKqObn.js";
-import { M as VERSION, c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config--NUdpACy.js";
-import { n as listChannelPlugins } from "./plugins-CNaHNND_.js";
-import { L as resolveMainSessionKey, d as loadSessionStore } from "./sandbox-DqUO2K83.js";
-import { d as inspectPortUsage, f as resolveLsofCommandSync, p as formatPortDiagnostics } from "./chrome-Dm-EgOjJ.js";
-import { o as resolveStorePath } from "./paths-Bkhd_qY8.js";
-import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-Bek1xlgk.js";
-import { r as formatDurationPrecise } from "./format-duration-CEmFWLyX.js";
-import { n as formatTimeAgo } from "./format-relative-Db7eqEu8.js";
-import { n as withProgress } from "./progress-DIQJt9Va.js";
-import { a as findTailscaleBinary, o as getTailnetHostname, s as readTailscaleStatusJson } from "./tailscale-Cu-2HNvU.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-UsK-tOty.js";
-import { t as resolveChannelDefaultAccountId } from "./helpers-C89IG08W.js";
-import { n as logConfigUpdated } from "./logging-MMRGFxGI.js";
-import { t as WizardCancelledError } from "./prompts--d-6l5Ln.js";
-import { _ as promptAuthChoiceGrouped, a as promptCustomApiConfig, c as applyPrimaryModel, d as resolvePreferredProviderForAuthChoice, f as warnIfModelConfigLooksOff, l as promptDefaultModel, p as applyAuthChoice, r as promptRemoteGatewayConfig, t as setupSkills } from "./onboard-skills-DQwOQ6Ry.js";
-import { n as setupChannels } from "./onboard-channels-CXhnVy4E.js";
-import { l as healthCommand, n as ensureControlUiAssetsBuilt, s as formatHealthChannelLines, t as formatHealthCheckFailure, u as resolveHeartbeatSummaryForAgent } from "./health-format-Dy1caGsq.js";
-import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, d as formatUpdateOneLiner, f as getUpdateCheckResult, h as compareSemverStrings, l as ensureCompletionCacheExists, m as checkUpdateStatus, p as resolveUpdateAvailability, s as checkShellCompletionStatus, u as formatUpdateAvailableHint, x as formatUpdateChannelLabel } from "./update-runner-CmE6cHdn.js";
-import { i as probeGateway, t as runSecurityAudit } from "./audit-C4wLaF0D.js";
-import { t as renderTable } from "./table-DEnmtvl5.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-BosMnzIs.js";
-import { o as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-Cd4BxKuo.js";
-import { r as isSystemdUserServiceAvailable } from "./systemd-D6wTPnHi.js";
-import { o as readLastGatewayErrorLine } from "./service-audit-CCFxuvKs.js";
-import { t as resolveNodeService } from "./node-service-CM5vkdIo.js";
-import { t as collectChannelStatusIssues } from "./channels-status-issues-DQkRaZts.js";
-import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-DLOJPZmo.js";
-import { r as installCompletion } from "./completion-cli-DOec3E2Z.js";
-import { t as buildWorkspaceHookStatus } from "./hooks-status-DNQJSa4B.js";
-import { t as runTui } from "./tui-Bc7XUQGP.js";
+import { M as VERSION, c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config-aFQssWKX.js";
+import { n as listChannelPlugins } from "./plugins-X7d_tfTE.js";
+import { L as resolveMainSessionKey, d as loadSessionStore } from "./sandbox-Bhjnh1Xg.js";
+import { d as inspectPortUsage, f as resolveLsofCommandSync, p as formatPortDiagnostics } from "./chrome-Cvr-57lg.js";
+import { s as resolveStorePath } from "./paths-B49s6UZQ.js";
+import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-SolyGS1r.js";
+import { r as formatDurationPrecise } from "./format-duration-84n6_DgO.js";
+import { n as formatTimeAgo } from "./format-relative-cegC_FF5.js";
+import { n as withProgress } from "./progress-C9kngsTD.js";
+import { d as getTailnetHostname, f as readTailscaleStatusJson, u as findTailscaleBinary } from "./auth-CQNl_IaI.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Bsjeut6m.js";
+import { t as resolveChannelDefaultAccountId } from "./helpers-HyeZXsnu.js";
+import { n as logConfigUpdated } from "./logging-BAyPwvdH.js";
+import { t as WizardCancelledError } from "./prompts-Bg96reub.js";
+import { S as promptAuthChoiceGrouped, _ as applyAuthChoice, c as promptCustomApiConfig, f as applyPrimaryModel, g as warnIfModelConfigLooksOff, h as resolvePreferredProviderForAuthChoice, p as promptDefaultModel, r as promptRemoteGatewayConfig, t as setupSkills } from "./onboard-skills-rlBHcu3Q.js";
+import { n as setupChannels } from "./onboard-channels-Dxzroasd.js";
+import { l as healthCommand, n as ensureControlUiAssetsBuilt, s as formatHealthChannelLines, t as formatHealthCheckFailure, u as resolveHeartbeatSummaryForAgent } from "./health-format-KGPokKJH.js";
+import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, d as formatUpdateOneLiner, f as getUpdateCheckResult, h as compareSemverStrings, l as ensureCompletionCacheExists, m as checkUpdateStatus, p as resolveUpdateAvailability, s as checkShellCompletionStatus, u as formatUpdateAvailableHint, x as formatUpdateChannelLabel } from "./update-runner-7Qa1T9y6.js";
+import { i as probeGateway, t as runSecurityAudit } from "./audit-Dmww_503.js";
+import { t as renderTable } from "./table-B8dx3v4v.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-5U3P3YfJ.js";
+import { o as resolveGatewayLogPaths, t as resolveGatewayService } from "./service--nPk7DvT.js";
+import { r as isSystemdUserServiceAvailable } from "./systemd-DrmBtJ5T.js";
+import { o as readLastGatewayErrorLine } from "./service-audit-DnLmRGQt.js";
+import { t as resolveNodeService } from "./node-service-C8DTHTMg.js";
+import { t as collectChannelStatusIssues } from "./channels-status-issues-DDAWeT-6.js";
+import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-DcfK-dwd.js";
+import { r as installCompletion } from "./completion-cli-DnjpxAag.js";
+import { t as buildWorkspaceHookStatus } from "./hooks-status-D9MhwHRp.js";
+import { t as runTui } from "./tui-CVTQn-dC.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -2535,7 +2535,7 @@ async function finalizeOnboardingWizard(options) {
 	const systemdAvailable = process.platform === "linux" ? await isSystemdUserServiceAvailable() : true;
 	if (process.platform === "linux" && !systemdAvailable) await prompter.note("Systemd user services are unavailable. Skipping lingering checks and service install.", "Systemd");
 	if (process.platform === "linux" && systemdAvailable) {
-		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-BxjTrgoH.js").then((n) => n.r);
+		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-NC2kl1SC.js").then((n) => n.r);
 		await ensureSystemdUserLingerInteractive({
 			runtime,
 			prompter: {

package/dist/{openclaw-root-JLDMp6ux.js → openclaw-root-1VeFrph_.js}

@@ -48,6 +48,10 @@ function findPackageRootSync(startDir, maxDepth = 12) {
 function candidateDirsFromArgv1(argv1) {
 	const normalized = path.resolve(argv1);
 	const candidates = [path.dirname(normalized)];
+	try {
+		const resolved = fs.realpathSync(normalized);
+		if (resolved !== normalized) candidates.push(path.dirname(resolved));
+	} catch {}
 	const parts = normalized.split(path.sep);
 	const binIndex = parts.lastIndexOf(".bin");
 	if (binIndex > 0 && parts[binIndex - 1] === "node_modules") {

package/dist/{openclaw-root-Dw6gumSU.js → openclaw-root-BNlEap4i.js}

@@ -48,6 +48,10 @@ function findPackageRootSync(startDir, maxDepth = 12) {
 function candidateDirsFromArgv1(argv1) {
 	const normalized = path.resolve(argv1);
 	const candidates = [path.dirname(normalized)];
+	try {
+		const resolved = fs.realpathSync(normalized);
+		if (resolved !== normalized) candidates.push(path.dirname(resolved));
+	} catch {}
 	const parts = normalized.split(path.sep);
 	const binIndex = parts.lastIndexOf(".bin");
 	if (binIndex > 0 && parts[binIndex - 1] === "node_modules") {

package/dist/{pairing-cli-CRQDpj8f.js → pairing-cli-CDHG4xuI.js}

@@ -1,19 +1,19 @@
-import { k as theme, p as defaultRuntime } from "./entry.js";
-import "./auth-profiles-Bv1AEm-Y.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
-import "./utils-Dk86IbEs.js";
-import "./exec-B8JKbXKW.js";
-import "./agent-scope-DQuy3dwI.js";
-import "./github-copilot-token-SLWintYd.js";
-import { i as loadConfig } from "./config-B00lvFac.js";
-import "./manifest-registry-D5SiA3xq.js";
-import { t as formatDocsLink } from "./links-7M-j83As.js";
-import { r as normalizeChannelId } from "./plugins-Db5BiELK.js";
+import { A as theme, p as defaultRuntime } from "./entry.js";
+import "./auth-profiles-ByNs3eEm.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
+import "./utils-BLJAc3ZV.js";
+import "./exec-CACT5OAW.js";
+import "./agent-scope-CsRbLH4l.js";
+import "./github-copilot-token-Cfs0Wxr8.js";
+import { i as loadConfig } from "./config-Bdhomfei.js";
+import "./manifest-registry-u0okVSkU.js";
+import { t as formatDocsLink } from "./links-B8LAzWwg.js";
+import { r as normalizeChannelId } from "./plugins-4Hqd1WGf.js";
 import "./logging-CfEk_PnX.js";
-import "./accounts-DbzMEfKN.js";
-import { c as listPairingChannels, l as notifyPairingApproved, n as approveChannelPairingCode, r as listChannelPairingRequests } from "./pairing-store-CgXR3ZWJ.js";
-import { t as resolvePairingIdLabel } from "./pairing-labels-CWFEtSc3.js";
-import { t as renderTable } from "./table-cCoGqLsk.js";
+import "./accounts-DCDeFTra.js";
+import { c as listPairingChannels, l as notifyPairingApproved, n as approveChannelPairingCode, r as listChannelPairingRequests } from "./pairing-store-Dp5_JGnG.js";
+import { t as resolvePairingIdLabel } from "./pairing-labels-CgNHnjzT.js";
+import { t as renderTable } from "./table-CwulTLQp.js";
 
 //#region src/cli/pairing-cli.ts
 /** Parse channel, allowing extension channels not in core registry. */

package/dist/{pairing-cli-Cng1KFWw.js → pairing-cli-CQP34Dlx.js}

@@ -1,22 +1,22 @@
 import "./paths-DVBShlw6.js";
-import { R as theme, c as defaultRuntime } from "./subsystem-Bh1Y_6Uv.js";
-import "./utils-es4ygvQ-.js";
-import "./exec-Cv_Ofd1m.js";
-import "./agent-scope-CGmuusG9.js";
-import "./model-selection-BK7DuyH8.js";
+import { R as theme, c as defaultRuntime } from "./subsystem-BoExtIHo.js";
+import "./utils-Cd9QdCHh.js";
+import "./exec-YIosokWE.js";
+import "./agent-scope-CQCus0rI.js";
+import "./model-selection-BLuqsGVB.js";
 import "./github-copilot-token-BW-SEg7E.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
 import "./boolean-BgXe2hyu.js";
-import "./env-BxRc6wWv.js";
-import { i as loadConfig } from "./config--NUdpACy.js";
-import "./manifest-registry-3It8Z8yN.js";
-import { r as normalizeChannelId } from "./plugins-CNaHNND_.js";
-import "./logging-BzvBIA3Y.js";
-import "./accounts-C2elk6PC.js";
-import { c as listPairingChannels, l as notifyPairingApproved, n as approveChannelPairingCode, r as listChannelPairingRequests } from "./pairing-store-c-QQ2u8p.js";
-import { t as formatDocsLink } from "./links-C591fM9M.js";
-import { t as resolvePairingIdLabel } from "./pairing-labels-Ciu3Zoxj.js";
-import { t as renderTable } from "./table-DEnmtvl5.js";
+import "./env-ONzUVAG2.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
+import "./manifest-registry-CQhdnDBZ.js";
+import { r as normalizeChannelId } from "./plugins-X7d_tfTE.js";
+import "./logging-fywhKCmE.js";
+import "./accounts-DeqIQjo1.js";
+import { c as listPairingChannels, l as notifyPairingApproved, n as approveChannelPairingCode, r as listChannelPairingRequests } from "./pairing-store-CmlRVqOz.js";
+import { t as formatDocsLink } from "./links-Eax1UO3w.js";
+import { t as resolvePairingIdLabel } from "./pairing-labels-B6CN0SNH.js";
+import { t as renderTable } from "./table-B8dx3v4v.js";
 
 //#region src/cli/pairing-cli.ts
 /** Parse channel, allowing extension channels not in core registry. */

package/dist/{pairing-labels-Ciu3Zoxj.js → pairing-labels-B6CN0SNH.js}

@@ -1,4 +1,4 @@
-import { s as getPairingAdapter } from "./pairing-store-c-QQ2u8p.js";
+import { s as getPairingAdapter } from "./pairing-store-CmlRVqOz.js";
 
 //#region src/pairing/pairing-labels.ts
 function resolvePairingIdLabel(channel) {

package/dist/{pairing-labels-CWFEtSc3.js → pairing-labels-CgNHnjzT.js}

@@ -1,4 +1,4 @@
-import { s as getPairingAdapter } from "./pairing-store-CgXR3ZWJ.js";
+import { s as getPairingAdapter } from "./pairing-store-Dp5_JGnG.js";
 
 //#region src/pairing/pairing-labels.ts
 function resolvePairingIdLabel(channel) {

package/dist/{pairing-store-c-QQ2u8p.js → pairing-store-CmlRVqOz.js}

@@ -1,6 +1,6 @@
 import { g as resolveStateDir, m as resolveOAuthDir, y as resolveRequiredHomeDir } from "./paths-DVBShlw6.js";
-import { x as safeParseJson } from "./utils-es4ygvQ-.js";
-import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-CNaHNND_.js";
+import { x as safeParseJson } from "./utils-Cd9QdCHh.js";
+import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-X7d_tfTE.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";

package/dist/{pairing-store-CgXR3ZWJ.js → pairing-store-Dp5_JGnG.js}

@@ -1,6 +1,6 @@
-import { J as resolveOAuthDir, X as resolveStateDir, pt as resolveRequiredHomeDir } from "./entry.js";
-import { b as safeParseJson } from "./utils-Dk86IbEs.js";
-import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-Db5BiELK.js";
+import { Y as resolveOAuthDir, Z as resolveStateDir, ht as resolveRequiredHomeDir } from "./entry.js";
+import { b as safeParseJson } from "./utils-BLJAc3ZV.js";
+import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-4Hqd1WGf.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs";

package/dist/{path-env-CXWUFfFv.js → path-env-CLvYNwtL.js}

@@ -1,5 +1,5 @@
 import { n as isTruthyEnvValue } from "./entry.js";
-import { n as resolveBrewPathDirs } from "./brew-BIrWdDps.js";
+import { n as resolveBrewPathDirs } from "./brew-BUIxHEkn.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs";

package/dist/{path-env-BgLvMbz_.js → path-env-CaYUVIML.js}

@@ -1,5 +1,5 @@
-import { t as isTruthyEnvValue } from "./env-BxRc6wWv.js";
-import { n as resolveBrewPathDirs } from "./brew-B7YK4ZoL.js";
+import { t as isTruthyEnvValue } from "./env-ONzUVAG2.js";
+import { n as resolveBrewPathDirs } from "./brew-ROHf0-Xp.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";

package/dist/{paths-MnZaxqPw.js → paths-B0a4ywSO.js}

@@ -1,5 +1,5 @@
 import { c as expandHomePrefix, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-BZtyHNCi.js";
-import { l as normalizeAgentId, n as DEFAULT_AGENT_ID } from "./session-key-nXYQSv-a.js";
+import { M as normalizeAgentId, T as DEFAULT_AGENT_ID } from "./agent-scope-BIEhVP4_.js";
 import os from "node:os";
 import path from "node:path";
 
@@ -15,14 +15,39 @@ function resolveSessionTranscriptsDirForAgent(agentId, env = process.env, homedi
 function resolveDefaultSessionStorePath(agentId) {
 	return path.join(resolveAgentSessionsDir(agentId), "sessions.json");
 }
-function resolveSessionTranscriptPath(sessionId, agentId, topicId) {
+const SAFE_SESSION_ID_RE = /^[a-z0-9][a-z0-9._-]{0,127}$/i;
+function validateSessionId(sessionId) {
+	const trimmed = sessionId.trim();
+	if (!SAFE_SESSION_ID_RE.test(trimmed)) throw new Error(`Invalid session ID: ${sessionId}`);
+	return trimmed;
+}
+function resolveSessionsDir(opts) {
+	const sessionsDir = opts?.sessionsDir?.trim();
+	if (sessionsDir) return path.resolve(sessionsDir);
+	return resolveAgentSessionsDir(opts?.agentId);
+}
+function resolvePathWithinSessionsDir(sessionsDir, candidate) {
+	const trimmed = candidate.trim();
+	if (!trimmed) throw new Error("Session file path must not be empty");
+	const resolvedBase = path.resolve(sessionsDir);
+	const resolvedCandidate = path.resolve(resolvedBase, trimmed);
+	const relative = path.relative(resolvedBase, resolvedCandidate);
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error("Session file path must be within sessions directory");
+	return resolvedCandidate;
+}
+function resolveSessionTranscriptPathInDir(sessionId, sessionsDir, topicId) {
+	const safeSessionId = validateSessionId(sessionId);
 	const safeTopicId = typeof topicId === "string" ? encodeURIComponent(topicId) : typeof topicId === "number" ? String(topicId) : void 0;
-	const fileName = safeTopicId !== void 0 ? `${sessionId}-topic-${safeTopicId}.jsonl` : `${sessionId}.jsonl`;
-	return path.join(resolveAgentSessionsDir(agentId), fileName);
+	return resolvePathWithinSessionsDir(sessionsDir, safeTopicId !== void 0 ? `${safeSessionId}-topic-${safeTopicId}.jsonl` : `${safeSessionId}.jsonl`);
+}
+function resolveSessionTranscriptPath(sessionId, agentId, topicId) {
+	return resolveSessionTranscriptPathInDir(sessionId, resolveAgentSessionsDir(agentId), topicId);
 }
 function resolveSessionFilePath(sessionId, entry, opts) {
+	const sessionsDir = resolveSessionsDir(opts);
 	const candidate = entry?.sessionFile?.trim();
-	return candidate ? candidate : resolveSessionTranscriptPath(sessionId, opts?.agentId);
+	if (candidate) return resolvePathWithinSessionsDir(sessionsDir, candidate);
+	return resolveSessionTranscriptPathInDir(sessionId, sessionsDir);
 }
 function resolveStorePath(store, opts) {
 	const agentId = normalizeAgentId(opts?.agentId ?? DEFAULT_AGENT_ID);

package/dist/{paths-Bkhd_qY8.js → paths-B49s6UZQ.js}

@@ -18,14 +18,39 @@ function resolveSessionTranscriptsDirForAgent(agentId, env = process.env, homedi
 function resolveDefaultSessionStorePath(agentId) {
 	return path.join(resolveAgentSessionsDir(agentId), "sessions.json");
 }
-function resolveSessionTranscriptPath(sessionId, agentId, topicId) {
+const SAFE_SESSION_ID_RE = /^[a-z0-9][a-z0-9._-]{0,127}$/i;
+function validateSessionId(sessionId) {
+	const trimmed = sessionId.trim();
+	if (!SAFE_SESSION_ID_RE.test(trimmed)) throw new Error(`Invalid session ID: ${sessionId}`);
+	return trimmed;
+}
+function resolveSessionsDir(opts) {
+	const sessionsDir = opts?.sessionsDir?.trim();
+	if (sessionsDir) return path.resolve(sessionsDir);
+	return resolveAgentSessionsDir(opts?.agentId);
+}
+function resolvePathWithinSessionsDir(sessionsDir, candidate) {
+	const trimmed = candidate.trim();
+	if (!trimmed) throw new Error("Session file path must not be empty");
+	const resolvedBase = path.resolve(sessionsDir);
+	const resolvedCandidate = path.resolve(resolvedBase, trimmed);
+	const relative = path.relative(resolvedBase, resolvedCandidate);
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error("Session file path must be within sessions directory");
+	return resolvedCandidate;
+}
+function resolveSessionTranscriptPathInDir(sessionId, sessionsDir, topicId) {
+	const safeSessionId = validateSessionId(sessionId);
 	const safeTopicId = typeof topicId === "string" ? encodeURIComponent(topicId) : typeof topicId === "number" ? String(topicId) : void 0;
-	const fileName = safeTopicId !== void 0 ? `${sessionId}-topic-${safeTopicId}.jsonl` : `${sessionId}.jsonl`;
-	return path.join(resolveAgentSessionsDir(agentId), fileName);
+	return resolvePathWithinSessionsDir(sessionsDir, safeTopicId !== void 0 ? `${safeSessionId}-topic-${safeTopicId}.jsonl` : `${safeSessionId}.jsonl`);
+}
+function resolveSessionTranscriptPath(sessionId, agentId, topicId) {
+	return resolveSessionTranscriptPathInDir(sessionId, resolveAgentSessionsDir(agentId), topicId);
 }
 function resolveSessionFilePath(sessionId, entry, opts) {
+	const sessionsDir = resolveSessionsDir(opts);
 	const candidate = entry?.sessionFile?.trim();
-	return candidate ? candidate : resolveSessionTranscriptPath(sessionId, opts?.agentId);
+	if (candidate) return resolvePathWithinSessionsDir(sessionsDir, candidate);
+	return resolveSessionTranscriptPathInDir(sessionId, sessionsDir);
 }
 function resolveStorePath(store, opts) {
 	const agentId = normalizeAgentId(opts?.agentId ?? DEFAULT_AGENT_ID);
@@ -48,4 +73,4 @@ function resolveStorePath(store, opts) {
 }
 
 //#endregion
-export { resolveSessionTranscriptsDirForAgent as a, resolveSessionTranscriptsDir as i, resolveSessionFilePath as n, resolveStorePath as o, resolveSessionTranscriptPath as r, resolveDefaultSessionStorePath as t };
+export { resolveSessionTranscriptsDir as a, resolveSessionTranscriptPathInDir as i, resolveSessionFilePath as n, resolveSessionTranscriptsDirForAgent as o, resolveSessionTranscriptPath as r, resolveStorePath as s, resolveDefaultSessionStorePath as t };

package/dist/{paths-DL6EIRTw.js → paths-D0O87MfH.js}

@@ -1,5 +1,5 @@
 import { c as expandHomePrefix, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-rb94mUrR.js";
-import { M as normalizeAgentId, T as DEFAULT_AGENT_ID } from "./agent-scope-BEf5crnU.js";
+import { M as normalizeAgentId, T as DEFAULT_AGENT_ID } from "./agent-scope-DPIFau3f.js";
 import path from "node:path";
 import os from "node:os";
 
@@ -15,14 +15,39 @@ function resolveSessionTranscriptsDirForAgent(agentId, env = process.env, homedi
 function resolveDefaultSessionStorePath(agentId) {
 	return path.join(resolveAgentSessionsDir(agentId), "sessions.json");
 }
-function resolveSessionTranscriptPath(sessionId, agentId, topicId) {
+const SAFE_SESSION_ID_RE = /^[a-z0-9][a-z0-9._-]{0,127}$/i;
+function validateSessionId(sessionId) {
+	const trimmed = sessionId.trim();
+	if (!SAFE_SESSION_ID_RE.test(trimmed)) throw new Error(`Invalid session ID: ${sessionId}`);
+	return trimmed;
+}
+function resolveSessionsDir(opts) {
+	const sessionsDir = opts?.sessionsDir?.trim();
+	if (sessionsDir) return path.resolve(sessionsDir);
+	return resolveAgentSessionsDir(opts?.agentId);
+}
+function resolvePathWithinSessionsDir(sessionsDir, candidate) {
+	const trimmed = candidate.trim();
+	if (!trimmed) throw new Error("Session file path must not be empty");
+	const resolvedBase = path.resolve(sessionsDir);
+	const resolvedCandidate = path.resolve(resolvedBase, trimmed);
+	const relative = path.relative(resolvedBase, resolvedCandidate);
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error("Session file path must be within sessions directory");
+	return resolvedCandidate;
+}
+function resolveSessionTranscriptPathInDir(sessionId, sessionsDir, topicId) {
+	const safeSessionId = validateSessionId(sessionId);
 	const safeTopicId = typeof topicId === "string" ? encodeURIComponent(topicId) : typeof topicId === "number" ? String(topicId) : void 0;
-	const fileName = safeTopicId !== void 0 ? `${sessionId}-topic-${safeTopicId}.jsonl` : `${sessionId}.jsonl`;
-	return path.join(resolveAgentSessionsDir(agentId), fileName);
+	return resolvePathWithinSessionsDir(sessionsDir, safeTopicId !== void 0 ? `${safeSessionId}-topic-${safeTopicId}.jsonl` : `${safeSessionId}.jsonl`);
+}
+function resolveSessionTranscriptPath(sessionId, agentId, topicId) {
+	return resolveSessionTranscriptPathInDir(sessionId, resolveAgentSessionsDir(agentId), topicId);
 }
 function resolveSessionFilePath(sessionId, entry, opts) {
+	const sessionsDir = resolveSessionsDir(opts);
 	const candidate = entry?.sessionFile?.trim();
-	return candidate ? candidate : resolveSessionTranscriptPath(sessionId, opts?.agentId);
+	if (candidate) return resolvePathWithinSessionsDir(sessionsDir, candidate);
+	return resolveSessionTranscriptPathInDir(sessionId, sessionsDir);
 }
 function resolveStorePath(store, opts) {
 	const agentId = normalizeAgentId(opts?.agentId ?? DEFAULT_AGENT_ID);

package/dist/{paths-IivnSNkP.js → paths-DLINmNFQ.js}

@@ -1,4 +1,4 @@
-import { X as resolveStateDir, dt as expandHomePrefix, pt as resolveRequiredHomeDir } from "./entry.js";
+import { Z as resolveStateDir, ht as resolveRequiredHomeDir, pt as expandHomePrefix } from "./entry.js";
 import { l as normalizeAgentId, n as DEFAULT_AGENT_ID } from "./session-key-DVvxnFKg.js";
 import path from "node:path";
 import os from "node:os";
@@ -18,14 +18,39 @@ function resolveSessionTranscriptsDirForAgent(agentId, env = process.env, homedi
 function resolveDefaultSessionStorePath(agentId) {
 	return path.join(resolveAgentSessionsDir(agentId), "sessions.json");
 }
-function resolveSessionTranscriptPath(sessionId, agentId, topicId) {
+const SAFE_SESSION_ID_RE = /^[a-z0-9][a-z0-9._-]{0,127}$/i;
+function validateSessionId(sessionId) {
+	const trimmed = sessionId.trim();
+	if (!SAFE_SESSION_ID_RE.test(trimmed)) throw new Error(`Invalid session ID: ${sessionId}`);
+	return trimmed;
+}
+function resolveSessionsDir(opts) {
+	const sessionsDir = opts?.sessionsDir?.trim();
+	if (sessionsDir) return path.resolve(sessionsDir);
+	return resolveAgentSessionsDir(opts?.agentId);
+}
+function resolvePathWithinSessionsDir(sessionsDir, candidate) {
+	const trimmed = candidate.trim();
+	if (!trimmed) throw new Error("Session file path must not be empty");
+	const resolvedBase = path.resolve(sessionsDir);
+	const resolvedCandidate = path.resolve(resolvedBase, trimmed);
+	const relative = path.relative(resolvedBase, resolvedCandidate);
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error("Session file path must be within sessions directory");
+	return resolvedCandidate;
+}
+function resolveSessionTranscriptPathInDir(sessionId, sessionsDir, topicId) {
+	const safeSessionId = validateSessionId(sessionId);
 	const safeTopicId = typeof topicId === "string" ? encodeURIComponent(topicId) : typeof topicId === "number" ? String(topicId) : void 0;
-	const fileName = safeTopicId !== void 0 ? `${sessionId}-topic-${safeTopicId}.jsonl` : `${sessionId}.jsonl`;
-	return path.join(resolveAgentSessionsDir(agentId), fileName);
+	return resolvePathWithinSessionsDir(sessionsDir, safeTopicId !== void 0 ? `${safeSessionId}-topic-${safeTopicId}.jsonl` : `${safeSessionId}.jsonl`);
+}
+function resolveSessionTranscriptPath(sessionId, agentId, topicId) {
+	return resolveSessionTranscriptPathInDir(sessionId, resolveAgentSessionsDir(agentId), topicId);
 }
 function resolveSessionFilePath(sessionId, entry, opts) {
+	const sessionsDir = resolveSessionsDir(opts);
 	const candidate = entry?.sessionFile?.trim();
-	return candidate ? candidate : resolveSessionTranscriptPath(sessionId, opts?.agentId);
+	if (candidate) return resolvePathWithinSessionsDir(sessionsDir, candidate);
+	return resolveSessionTranscriptPathInDir(sessionId, sessionsDir);
 }
 function resolveStorePath(store, opts) {
 	const agentId = normalizeAgentId(opts?.agentId ?? DEFAULT_AGENT_ID);
@@ -48,4 +73,4 @@ function resolveStorePath(store, opts) {
 }
 
 //#endregion
-export { resolveSessionTranscriptsDirForAgent as a, resolveSessionTranscriptsDir as i, resolveSessionFilePath as n, resolveStorePath as o, resolveSessionTranscriptPath as r, resolveDefaultSessionStorePath as t };
+export { resolveSessionTranscriptsDir as a, resolveSessionTranscriptPathInDir as i, resolveSessionFilePath as n, resolveSessionTranscriptsDirForAgent as o, resolveSessionTranscriptPath as r, resolveStorePath as s, resolveDefaultSessionStorePath as t };