activeclaw 2026.2.11 → 2026.2.13

package/dist/{pi-embedded-helpers-DYH6OWft.js → pi-embedded-helpers-CMKLjW6X.js}

@@ -1,6 +1,6 @@
-import { t as createSubsystemLogger } from "./subsystem-Bh1Y_6Uv.js";
-import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-DqUO2K83.js";
-import { o as resizeToJpeg, r as getImageMetadata } from "./routes-DUkEKAc1.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-Bhjnh1Xg.js";
+import { o as resizeToJpeg, r as getImageMetadata } from "./routes-CmOI1hIH.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { createHash } from "node:crypto";
@@ -339,7 +339,12 @@ function sanitizeGoogleTurnOrdering(messages) {
 
 //#endregion
 //#region src/agents/pi-embedded-helpers/errors.ts
-const BILLING_ERROR_USER_MESSAGE = "⚠️ API provider returned a billing error — your API key has run out of credits or has an insufficient balance. Check your provider's billing dashboard and top up or switch to a different API key.";
+function formatBillingErrorMessage(provider) {
+	const providerName = provider?.trim();
+	if (providerName) return `⚠️ ${providerName} returned a billing error — your API key has run out of credits or has an insufficient balance. Check your ${providerName} billing dashboard and top up or switch to a different API key.`;
+	return "⚠️ API provider returned a billing error — your API key has run out of credits or has an insufficient balance. Check your provider's billing dashboard and top up or switch to a different API key.";
+}
+const BILLING_ERROR_USER_MESSAGE = formatBillingErrorMessage();
 function isContextOverflowError(errorMessage) {
 	if (!errorMessage) return false;
 	const lower = errorMessage.toLowerCase();
@@ -348,24 +353,49 @@ function isContextOverflowError(errorMessage) {
 	return lower.includes("request_too_large") || lower.includes("request exceeds the maximum size") || lower.includes("context length exceeded") || lower.includes("maximum context length") || lower.includes("prompt is too long") || lower.includes("exceeds model context window") || hasRequestSizeExceeds && hasContextWindow || lower.includes("context overflow:") || lower.includes("413") && lower.includes("too large");
 }
 const CONTEXT_WINDOW_TOO_SMALL_RE = /context window.*(too small|minimum is)/i;
-const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|(?:prompt|request|input).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|prompt.*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:request|input).*(?:context|window|length|token).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const RATE_LIMIT_HINT_RE = /rate limit|too many requests|requests per (?:minute|hour|day)|quota|throttl|429\b/i;
 function isLikelyContextOverflowError(errorMessage) {
 	if (!errorMessage) return false;
 	if (CONTEXT_WINDOW_TOO_SMALL_RE.test(errorMessage)) return false;
+	if (isRateLimitErrorMessage(errorMessage)) return false;
 	if (isContextOverflowError(errorMessage)) return true;
+	if (RATE_LIMIT_HINT_RE.test(errorMessage)) return false;
 	return CONTEXT_OVERFLOW_HINT_RE.test(errorMessage);
 }
 function isCompactionFailureError(errorMessage) {
 	if (!errorMessage) return false;
 	const lower = errorMessage.toLowerCase();
 	if (!(lower.includes("summarization failed") || lower.includes("auto-compaction") || lower.includes("compaction failed") || lower.includes("compaction"))) return false;
-	return isContextOverflowError(errorMessage) || lower.includes("context overflow");
+	if (isLikelyContextOverflowError(errorMessage)) return true;
+	return lower.includes("context overflow");
 }
 const ERROR_PAYLOAD_PREFIX_RE = /^(?:error|api\s*error|apierror|openai\s*error|anthropic\s*error|gateway\s*error)[:\s-]+/i;
 const FINAL_TAG_RE = /<\s*\/?\s*final\s*>/gi;
 const ERROR_PREFIX_RE = /^(?:error|api\s*error|openai\s*error|anthropic\s*error|gateway\s*error|request failed|failed|exception)[:\s-]+/i;
 const CONTEXT_OVERFLOW_ERROR_HEAD_RE = /^(?:context overflow:|request_too_large\b|request size exceeds\b|request exceeds the maximum size\b|context length exceeded\b|maximum context length\b|prompt is too long\b|exceeds model context window\b)/i;
 const HTTP_STATUS_PREFIX_RE = /^(?:http\s*)?(\d{3})\s+(.+)$/i;
+const HTTP_STATUS_CODE_PREFIX_RE = /^(?:http\s*)?(\d{3})(?:\s+([\s\S]+))?$/i;
+const HTML_ERROR_PREFIX_RE = /^\s*(?:<!doctype\s+html\b|<html\b)/i;
+const CLOUDFLARE_HTML_ERROR_CODES = new Set([
+	521,
+	522,
+	523,
+	524,
+	525,
+	526,
+	530
+]);
+const TRANSIENT_HTTP_ERROR_CODES = new Set([
+	500,
+	502,
+	503,
+	521,
+	522,
+	523,
+	524,
+	529
+]);
 const HTTP_ERROR_HINTS = [
 	"error",
 	"bad request",
@@ -383,6 +413,31 @@ const HTTP_ERROR_HINTS = [
 	"too many requests",
 	"permission"
 ];
+function extractLeadingHttpStatus(raw) {
+	const match = raw.match(HTTP_STATUS_CODE_PREFIX_RE);
+	if (!match) return null;
+	const code = Number(match[1]);
+	if (!Number.isFinite(code)) return null;
+	return {
+		code,
+		rest: (match[2] ?? "").trim()
+	};
+}
+function isCloudflareOrHtmlErrorPage(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return false;
+	const status = extractLeadingHttpStatus(trimmed);
+	if (!status || status.code < 500) return false;
+	if (CLOUDFLARE_HTML_ERROR_CODES.has(status.code)) return true;
+	return status.code < 600 && HTML_ERROR_PREFIX_RE.test(status.rest) && /<\/html>/i.test(status.rest);
+}
+function isTransientHttpError(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return false;
+	const status = extractLeadingHttpStatus(trimmed);
+	if (!status) return false;
+	return TRANSIENT_HTTP_ERROR_CODES.has(status.code);
+}
 function stripFinalTagsFromText(text) {
 	if (!text) return text;
 	return text.replace(FINAL_TAG_RE, "");
@@ -405,6 +460,7 @@ function collapseConsecutiveDuplicateBlocks(text) {
 	return result.join("\n\n");
 }
 function isLikelyHttpErrorText(raw) {
+	if (isCloudflareOrHtmlErrorPage(raw)) return true;
 	const match = raw.match(HTTP_STATUS_PREFIX_RE);
 	if (!match) return false;
 	const code = Number(match[1]);
@@ -494,6 +550,8 @@ function parseApiErrorInfo(raw) {
 function formatRawAssistantErrorForUi(raw) {
 	const trimmed = (raw ?? "").trim();
 	if (!trimmed) return "LLM request failed with an unknown error.";
+	const leadingStatus = extractLeadingHttpStatus(trimmed);
+	if (leadingStatus && isCloudflareOrHtmlErrorPage(trimmed)) return `The AI service is temporarily unavailable (HTTP ${leadingStatus.code}). Please try again in a moment.`;
 	const httpMatch = trimmed.match(HTTP_STATUS_PREFIX_RE);
 	if (httpMatch) {
 		const rest = httpMatch[2].trim();
@@ -527,7 +585,7 @@ function formatAssistantErrorText(msg, opts) {
 	const invalidRequest = raw.match(/"type":"invalid_request_error".*?"message":"([^"]+)"/);
 	if (invalidRequest?.[1]) return `LLM request rejected: ${invalidRequest[1]}`;
 	if (isOverloadedErrorMessage(raw)) return "The AI service is temporarily overloaded. Please try again in a moment.";
-	if (isBillingErrorMessage(raw)) return BILLING_ERROR_USER_MESSAGE;
+	if (isBillingErrorMessage(raw)) return formatBillingErrorMessage(opts?.provider);
 	if (isLikelyHttpErrorText(raw) || isRawApiErrorPayload(raw)) return formatRawAssistantErrorForUi(raw);
 	if (raw.length > 600) console.warn("[formatAssistantErrorText] Long error truncated:", raw.slice(0, 200));
 	return raw.length > 600 ? `${raw.slice(0, 600)}…` : raw;
@@ -572,7 +630,7 @@ const ERROR_PATTERNS = {
 		"context deadline exceeded"
 	],
 	billing: [
-		/\b402\b/,
+		/["']?(?:status|code)["']?\s*[:=]\s*402\b|\bhttp\s*402\b|\berror(?:\s+code)?\s*[:=]?\s*402\b|\b(?:got|returned|received)\s+(?:a\s+)?402\b|^\s*402\s+payment/i,
 		"payment required",
 		"insufficient credits",
 		"credit balance",
@@ -678,6 +736,7 @@ function isAuthAssistantError(msg) {
 function classifyFailoverReason(raw) {
 	if (isImageDimensionErrorMessage(raw)) return null;
 	if (isImageSizeError(raw)) return null;
+	if (isTransientHttpError(raw)) return "timeout";
 	if (isRateLimitErrorMessage(raw)) return "rate_limit";
 	if (isOverloadedErrorMessage(raw)) return "rate_limit";
 	if (isCloudCodeAssistFormatError(raw)) return "format";
@@ -1305,4 +1364,4 @@ function validateAnthropicTurns(messages) {
 }
 
 //#endregion
-export { parseImageSizeError as A, normalizeElevatedLevel as B, isFailoverAssistantError as C, isRawApiErrorPayload as D, isRateLimitAssistantError as E, sanitizeGoogleTurnOrdering as F, resolveResponseUsageMode as G, normalizeThinkLevel as H, formatThinkingLevels as I, supportsXHighThinking as K, formatXHighModelHint as L, buildBootstrapContextFiles as M, ensureSessionHeader as N, isTimeoutErrorMessage as O, resolveBootstrapMaxChars as P, listThinkingLevelLabels as R, isContextOverflowError as S, isLikelyContextOverflowError as T, normalizeUsageDisplay as U, normalizeReasoningLevel as V, normalizeVerboseLevel as W, getApiErrorPayloadFingerprint as _, isMessagingToolDuplicateNormalized as a, isCloudCodeAssistFormatError as b, sanitizeImageBlocks as c, isAntigravityClaude as d, isGoogleModelApi as f, formatRawAssistantErrorForUi as g, formatAssistantErrorText as h, isMessagingToolDuplicate as i, sanitizeUserFacingText as j, parseImageDimensionError as k, sanitizeToolResultImages as l, classifyFailoverReason as m, validateGeminiTurns as n, normalizeTextForComparison as o, BILLING_ERROR_USER_MESSAGE as p, pickFallbackThinkingLevel as r, sanitizeSessionMessagesImages as s, validateAnthropicTurns as t, downgradeOpenAIReasoningBlocks as u, isAuthAssistantError as v, isFailoverErrorMessage as w, isCompactionFailureError as x, isBillingAssistantError as y, listThinkingLevels as z };
+export { isTransientHttpError as A, listThinkingLevelLabels as B, isContextOverflowError as C, isRateLimitAssistantError as D, isLikelyContextOverflowError as E, ensureSessionHeader as F, normalizeUsageDisplay as G, normalizeElevatedLevel as H, resolveBootstrapMaxChars as I, supportsXHighThinking as J, normalizeVerboseLevel as K, sanitizeGoogleTurnOrdering as L, parseImageSizeError as M, sanitizeUserFacingText as N, isRawApiErrorPayload as O, buildBootstrapContextFiles as P, formatThinkingLevels as R, isCompactionFailureError as S, isFailoverErrorMessage as T, normalizeReasoningLevel as U, listThinkingLevels as V, normalizeThinkLevel as W, formatRawAssistantErrorForUi as _, isMessagingToolDuplicateNormalized as a, isBillingAssistantError as b, sanitizeImageBlocks as c, isAntigravityClaude as d, isGoogleModelApi as f, formatBillingErrorMessage as g, formatAssistantErrorText as h, isMessagingToolDuplicate as i, parseImageDimensionError as j, isTimeoutErrorMessage as k, sanitizeToolResultImages as l, classifyFailoverReason as m, validateGeminiTurns as n, normalizeTextForComparison as o, BILLING_ERROR_USER_MESSAGE as p, resolveResponseUsageMode as q, pickFallbackThinkingLevel as r, sanitizeSessionMessagesImages as s, validateAnthropicTurns as t, downgradeOpenAIReasoningBlocks as u, getApiErrorPayloadFingerprint as v, isFailoverAssistantError as w, isCloudCodeAssistFormatError as x, isAuthAssistantError as y, formatXHighModelHint as z };

package/dist/{pi-embedded-helpers-y1_Se0yq.js → pi-embedded-helpers-CUzTc1v6.js}

@@ -1,12 +1,12 @@
 import { i as resolveGatewayPort, t as STATE_DIR } from "./paths-rb94mUrR.js";
-import { C as resolveOpenClawPackageRootSync, D as buildAgentMainSessionKey, M as normalizeAgentId, N as normalizeMainKey, P as resolveAgentIdFromSessionKey, T as DEFAULT_AGENT_ID, _ as DEFAULT_TOOLS_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, g as DEFAULT_SOUL_FILENAME, h as DEFAULT_IDENTITY_FILENAME, j as normalizeAccountId$1, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_USER_FILENAME, w as DEFAULT_ACCOUNT_ID, y as ensureAgentWorkspace } from "./agent-scope-BEf5crnU.js";
-import { C as CONFIG_DIR, I as resolveConfigDir, O as escapeRegExp, P as normalizeE164, R as resolveUserPath, _ as normalizeAnyChannelId, b as getActivePluginRegistry, g as getChatChannelMeta, h as CHAT_CHANNEL_ORDER, l as createSubsystemLogger, m as CHANNEL_IDS, n as runExec, u as defaultRuntime, x as requireActivePluginRegistry, y as normalizeChatChannelId } from "./exec-57A8Rlc8.js";
-import { O as isTruthyEnvValue, k as parseBooleanValue } from "./model-selection-CezC36lH.js";
+import { C as resolveOpenClawPackageRootSync, D as buildAgentMainSessionKey, M as normalizeAgentId, N as normalizeMainKey, P as resolveAgentIdFromSessionKey, T as DEFAULT_AGENT_ID, _ as DEFAULT_TOOLS_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, g as DEFAULT_SOUL_FILENAME, h as DEFAULT_IDENTITY_FILENAME, j as normalizeAccountId$1, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_USER_FILENAME, w as DEFAULT_ACCOUNT_ID, y as ensureAgentWorkspace } from "./agent-scope-DPIFau3f.js";
+import { C as CONFIG_DIR, I as resolveConfigDir, O as escapeRegExp, P as normalizeE164, R as resolveUserPath, _ as normalizeAnyChannelId, at as resolvePreferredOpenClawTmpDir, b as getActivePluginRegistry, g as getChatChannelMeta, h as CHAT_CHANNEL_ORDER, l as createSubsystemLogger, m as CHANNEL_IDS, n as runExec, u as defaultRuntime, x as requireActivePluginRegistry, y as normalizeChatChannelId } from "./exec-CJFFoM7H.js";
+import { O as isTruthyEnvValue, k as parseBooleanValue } from "./model-selection-C1GmkTAV.js";
 import { t as formatCliCommand } from "./command-format-CFzL448l.js";
-import { A as resolveWhatsAppAccount, _ as normalizePluginsConfig, d as parseDurationMs, g as MANIFEST_KEY, h as LEGACY_MANIFEST_KEYS, i as writeConfigFile, o as parseByteSize, p as loadPluginManifestRegistry, t as loadConfig, v as resolveEnableState, y as resolveMemorySlotDecision } from "./config-BqGVMf1y.js";
-import { A as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, C as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, D as DEFAULT_BROWSER_EVALUATE_ENABLED, E as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, O as DEFAULT_OPENCLAW_BROWSER_COLOR, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, a as resolveOpenClawUserDataDir, b as isLoopbackHost, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, h as getHeadersWithAuth, i as launchOpenClawChrome, k as DEFAULT_OPENCLAW_BROWSER_ENABLED, l as createTargetViaCdp, n as isChromeCdpReady, o as stopOpenClawChrome, p as appendCdpPath, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as stopChromeExtensionRelayServer, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-CF16STk9.js";
+import { b as resolveMemorySlotDecision, d as parseDurationMs, g as MANIFEST_KEY, h as LEGACY_MANIFEST_KEYS, i as writeConfigFile, j as resolveWhatsAppAccount, o as parseByteSize, p as loadPluginManifestRegistry, t as loadConfig, v as normalizePluginsConfig, y as resolveEnableState } from "./config-QYrbd7x7.js";
+import { A as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, C as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, D as DEFAULT_BROWSER_EVALUATE_ENABLED, E as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, O as DEFAULT_OPENCLAW_BROWSER_COLOR, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, a as resolveOpenClawUserDataDir, b as isLoopbackHost, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, h as getHeadersWithAuth, i as launchOpenClawChrome, k as DEFAULT_OPENCLAW_BROWSER_ENABLED, l as createTargetViaCdp, n as isChromeCdpReady, o as stopOpenClawChrome, p as appendCdpPath, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as stopChromeExtensionRelayServer, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-DL0avO8n.js";
 import { n as formatErrorMessage, t as extractErrorCode } from "./errors-dpUbQseI.js";
-import { r as resolveSessionTranscriptPath, t as resolveDefaultSessionStorePath } from "./paths-DL6EIRTw.js";
+import { n as resolveSessionFilePath, t as resolveDefaultSessionStorePath } from "./paths-D0O87MfH.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-BrkSiEN9.js";
 import path from "node:path";
 import fs from "node:fs";
@@ -1679,6 +1679,83 @@ function applySkillEnvOverridesFromSnapshot(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/sandbox-paths.ts
+const UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
+function normalizeUnicodeSpaces(str) {
+	return str.replace(UNICODE_SPACES, " ");
+}
+function expandPath(filePath) {
+	const normalized = normalizeUnicodeSpaces(filePath);
+	if (normalized === "~") return os.homedir();
+	if (normalized.startsWith("~/")) return os.homedir() + normalized.slice(1);
+	return normalized;
+}
+function resolveToCwd(filePath, cwd) {
+	const expanded = expandPath(filePath);
+	if (path.isAbsolute(expanded)) return expanded;
+	return path.resolve(cwd, expanded);
+}
+function resolveSandboxPath(params) {
+	const resolved = resolveToCwd(params.filePath, params.cwd);
+	const rootResolved = path.resolve(params.root);
+	const relative = path.relative(rootResolved, resolved);
+	if (!relative || relative === "") return {
+		resolved,
+		relative: ""
+	};
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`Path escapes sandbox root (${shortPath(rootResolved)}): ${params.filePath}`);
+	return {
+		resolved,
+		relative
+	};
+}
+async function assertSandboxPath(params) {
+	const resolved = resolveSandboxPath(params);
+	await assertNoSymlink(resolved.relative, path.resolve(params.root));
+	return resolved;
+}
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
+async function assertNoSymlink(relative, root) {
+	if (!relative) return;
+	const parts = relative.split(path.sep).filter(Boolean);
+	let current = root;
+	for (const part of parts) {
+		current = path.join(current, part);
+		try {
+			if ((await fs$1.lstat(current)).isSymbolicLink()) throw new Error(`Symlink not allowed in sandbox path: ${current}`);
+		} catch (err) {
+			if (err.code === "ENOENT") return;
+			throw err;
+		}
+	}
+}
+function shortPath(value) {
+	if (value.startsWith(os.homedir())) return `~${value.slice(os.homedir().length)}`;
+	return value;
+}
+
 //#endregion
 //#region src/agents/skills/bundled-dir.ts
 function looksLikeSkillsDir(dir) {
@@ -1836,7 +1913,7 @@ function loadSkillEntries(workspaceDir, opts) {
 		return [];
 	};
 	const managedSkillsDir = opts?.managedSkillsDir ?? path.join(CONFIG_DIR, "skills");
-	const workspaceSkillsDir = path.join(workspaceDir, "skills");
+	const workspaceSkillsDir = path.resolve(workspaceDir, "skills");
 	const bundledSkillsDir = opts?.bundledSkillsDir ?? resolveBundledSkillsDir();
 	const extraDirs = (opts?.config?.skills?.load?.extraDirs ?? []).map((d) => typeof d === "string" ? d.trim() : "").filter(Boolean);
 	const pluginSkillDirs = resolvePluginSkillDirs({
@@ -1858,6 +1935,14 @@ function loadSkillEntries(workspaceDir, opts) {
 		dir: managedSkillsDir,
 		source: "openclaw-managed"
 	});
+	const personalAgentsSkills = loadSkills({
+		dir: path.resolve(os.homedir(), ".agents", "skills"),
+		source: "agents-skills-personal"
+	});
+	const projectAgentsSkills = loadSkills({
+		dir: path.resolve(workspaceDir, ".agents", "skills"),
+		source: "agents-skills-project"
+	});
 	const workspaceSkills = loadSkills({
 		dir: workspaceSkillsDir,
 		source: "openclaw-workspace"
@@ -1866,6 +1951,8 @@ function loadSkillEntries(workspaceDir, opts) {
 	for (const skill of extraSkills) merged.set(skill.name, skill);
 	for (const skill of bundledSkills) merged.set(skill.name, skill);
 	for (const skill of managedSkills) merged.set(skill.name, skill);
+	for (const skill of personalAgentsSkills) merged.set(skill.name, skill);
+	for (const skill of projectAgentsSkills) merged.set(skill.name, skill);
 	for (const skill of workspaceSkills) merged.set(skill.name, skill);
 	return Array.from(merged.values()).map((skill) => {
 		let frontmatter = {};
@@ -1912,6 +1999,36 @@ function resolveSkillsPromptForRun(params) {
 function loadWorkspaceSkillEntries(workspaceDir, opts) {
 	return loadSkillEntries(workspaceDir, opts);
 }
+function resolveUniqueSyncedSkillDirName(base, used) {
+	if (!used.has(base)) {
+		used.add(base);
+		return base;
+	}
+	for (let index = 2; index < 1e4; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!used.has(candidate)) {
+			used.add(candidate);
+			return candidate;
+		}
+	}
+	let fallbackIndex = 1e4;
+	let fallback = `${base}-${fallbackIndex}`;
+	while (used.has(fallback)) {
+		fallbackIndex += 1;
+		fallback = `${base}-${fallbackIndex}`;
+	}
+	used.add(fallback);
+	return fallback;
+}
+function resolveSyncedSkillDestinationPath(params) {
+	const sourceDirName = path.basename(params.entry.skill.baseDir).trim();
+	if (!sourceDirName || sourceDirName === "." || sourceDirName === "..") return null;
+	return resolveSandboxPath({
+		filePath: resolveUniqueSyncedSkillDirName(sourceDirName, params.usedDirNames),
+		cwd: params.targetSkillsDir,
+		root: params.targetSkillsDir
+	}).resolved;
+}
 async function syncSkillsToWorkspace(params) {
 	const sourceDir = resolveUserPath(params.sourceWorkspaceDir);
 	const targetDir = resolveUserPath(params.targetWorkspaceDir);
@@ -1928,8 +2045,24 @@ async function syncSkillsToWorkspace(params) {
 			force: true
 		});
 		await fsp.mkdir(targetSkillsDir, { recursive: true });
+		const usedDirNames = /* @__PURE__ */ new Set();
 		for (const entry of entries) {
-			const dest = path.join(targetSkillsDir, entry.skill.name);
+			let dest = null;
+			try {
+				dest = resolveSyncedSkillDestinationPath({
+					targetSkillsDir,
+					entry,
+					usedDirNames
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: ${message}`);
+				continue;
+			}
+			if (!dest) {
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: invalid source directory name`);
+				continue;
+			}
 			try {
 				await fsp.cp(entry.skill.baseDir, dest, {
 					recursive: true,
@@ -2042,7 +2175,7 @@ function isModuleNotFoundError(err) {
 }
 async function loadPwAiModule(mode) {
 	try {
-		return await import("./pw-ai-CsvaObGM.js");
+		return await import("./pw-ai-sS1fRKW_.js");
 	} catch (err) {
 		if (mode === "soft") return null;
 		if (isModuleNotFoundError(err)) return null;
@@ -2599,6 +2732,7 @@ function registerBrowserAgentActRoutes(app, ctx) {
 
 //#endregion
 //#region src/browser/routes/agent.debug.ts
+const DEFAULT_TRACE_DIR = resolvePreferredOpenClawTmpDir();
 function registerBrowserAgentDebugRoutes(app, ctx) {
 	app.get("/console", async (req, res) => {
 		const profileCtx = resolveProfileContext(req, res, ctx);
@@ -2709,7 +2843,7 @@ function registerBrowserAgentDebugRoutes(app, ctx) {
 			const pw = await requirePwAi(res, "trace stop");
 			if (!pw) return;
 			const id = crypto.randomUUID();
-			const dir = "/tmp/openclaw";
+			const dir = DEFAULT_TRACE_DIR;
 			await fs$1.mkdir(dir, { recursive: true });
 			const tracePath = out.trim() || path.join(dir, `browser-trace-${id}.zip`);
 			await pw.traceStopViaPlaywright({
@@ -2752,6 +2886,22 @@ function normalizeHostnameSet(values) {
 	if (!values || values.length === 0) return /* @__PURE__ */ new Set();
 	return new Set(values.map((value) => normalizeHostname(value)).filter(Boolean));
 }
+function normalizeHostnameAllowlist(values) {
+	if (!values || values.length === 0) return [];
+	return Array.from(new Set(values.map((value) => normalizeHostname(value)).filter((value) => value !== "*" && value !== "*." && value.length > 0)));
+}
+function isHostnameAllowedByPattern(hostname, pattern) {
+	if (pattern.startsWith("*.")) {
+		const suffix = pattern.slice(2);
+		if (!suffix || hostname === suffix) return false;
+		return hostname.endsWith(`.${suffix}`);
+	}
+	return hostname === pattern;
+}
+function matchesHostnameAllowlist(hostname, allowlist) {
+	if (allowlist.length === 0) return true;
+	return allowlist.some((pattern) => isHostnameAllowedByPattern(hostname, pattern));
+}
 function parseIpv4(address) {
 	const parts = address.split(".");
 	if (parts.length !== 4) return null;
@@ -2852,7 +3002,10 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 	const normalized = normalizeHostname(hostname);
 	if (!normalized) throw new Error("Invalid hostname");
 	const allowPrivateNetwork = Boolean(params.policy?.allowPrivateNetwork);
-	const isExplicitAllowed = normalizeHostnameSet(params.policy?.allowedHostnames).has(normalized);
+	const allowedHostnames = normalizeHostnameSet(params.policy?.allowedHostnames);
+	const hostnameAllowlist = normalizeHostnameAllowlist(params.policy?.hostnameAllowlist);
+	const isExplicitAllowed = allowedHostnames.has(normalized);
+	if (!matchesHostnameAllowlist(normalized, hostnameAllowlist)) throw new SsrFBlockedError(`Blocked hostname (not in allowlist): ${hostname}`);
 	if (!allowPrivateNetwork && !isExplicitAllowed) {
 		if (isBlockedHostname(normalized)) throw new SsrFBlockedError(`Blocked hostname: ${hostname}`);
 		if (isPrivateIpAddress(normalized)) throw new SsrFBlockedError("Blocked: private/internal IP address");
@@ -2873,9 +3026,6 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 		})
 	};
 }
-async function resolvePinnedHostname(hostname, lookupFn = lookup$1) {
-	return await resolvePinnedHostnameWithPolicy(hostname, { lookupFn });
-}
 function createPinnedDispatcher(pinned) {
 	return new Agent({ connect: { lookup: pinned.lookup } });
 }
@@ -4864,11 +5014,11 @@ function createProfileContext(opts, profile) {
 		const userDataDir = resolveOpenClawUserDataDir(profile.name);
 		const profileState = getProfileState();
 		if (await isHttpReachable(300) && !profileState.running) try {
-			await (await import("./pw-ai-CsvaObGM.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-sS1fRKW_.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (profileState.running) await stopRunningBrowser();
 		try {
-			await (await import("./pw-ai-CsvaObGM.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-sS1fRKW_.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (!fs.existsSync(userDataDir)) return {
 			moved: false,
@@ -6859,7 +7009,7 @@ function loadSessionStore(storePath, opts = {}) {
 	let mtimeMs = getFileMtimeMs(storePath);
 	try {
 		const raw = fs.readFileSync(storePath, "utf-8");
-		const parsed = JSON5.parse(raw);
+		const parsed = JSON.parse(raw);
 		if (isSessionStoreRecord(parsed)) store = parsed;
 		mtimeMs = getFileMtimeMs(storePath) ?? mtimeMs;
 	} catch {}
@@ -7304,7 +7454,15 @@ async function appendAssistantMessageToSessionTranscript(params) {
 		ok: false,
 		reason: `unknown sessionKey: ${sessionKey}`
 	};
-	const sessionFile = entry.sessionFile?.trim() || resolveSessionTranscriptPath(entry.sessionId, params.agentId);
+	let sessionFile;
+	try {
+		sessionFile = resolveSessionFilePath(entry.sessionId, entry, { sessionsDir: path.dirname(storePath) });
+	} catch (err) {
+		return {
+			ok: false,
+			reason: err instanceof Error ? err.message : String(err)
+		};
+	}
 	await ensureSessionHeader({
 		sessionFile,
 		sessionId: entry.sessionId
@@ -7560,7 +7718,12 @@ async function ensureSandboxWorkspaceForSession(params) {
 
 //#endregion
 //#region src/agents/pi-embedded-helpers/errors.ts
-const BILLING_ERROR_USER_MESSAGE = "⚠️ API provider returned a billing error — your API key has run out of credits or has an insufficient balance. Check your provider's billing dashboard and top up or switch to a different API key.";
+function formatBillingErrorMessage(provider) {
+	const providerName = provider?.trim();
+	if (providerName) return `⚠️ ${providerName} returned a billing error — your API key has run out of credits or has an insufficient balance. Check your ${providerName} billing dashboard and top up or switch to a different API key.`;
+	return "⚠️ API provider returned a billing error — your API key has run out of credits or has an insufficient balance. Check your provider's billing dashboard and top up or switch to a different API key.";
+}
+const BILLING_ERROR_USER_MESSAGE = formatBillingErrorMessage();
 function isContextOverflowError(errorMessage) {
 	if (!errorMessage) return false;
 	const lower = errorMessage.toLowerCase();
@@ -7569,24 +7732,49 @@ function isContextOverflowError(errorMessage) {
 	return lower.includes("request_too_large") || lower.includes("request exceeds the maximum size") || lower.includes("context length exceeded") || lower.includes("maximum context length") || lower.includes("prompt is too long") || lower.includes("exceeds model context window") || hasRequestSizeExceeds && hasContextWindow || lower.includes("context overflow:") || lower.includes("413") && lower.includes("too large");
 }
 const CONTEXT_WINDOW_TOO_SMALL_RE = /context window.*(too small|minimum is)/i;
-const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|(?:prompt|request|input).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|prompt.*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:request|input).*(?:context|window|length|token).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const RATE_LIMIT_HINT_RE = /rate limit|too many requests|requests per (?:minute|hour|day)|quota|throttl|429\b/i;
 function isLikelyContextOverflowError(errorMessage) {
 	if (!errorMessage) return false;
 	if (CONTEXT_WINDOW_TOO_SMALL_RE.test(errorMessage)) return false;
+	if (isRateLimitErrorMessage(errorMessage)) return false;
 	if (isContextOverflowError(errorMessage)) return true;
+	if (RATE_LIMIT_HINT_RE.test(errorMessage)) return false;
 	return CONTEXT_OVERFLOW_HINT_RE.test(errorMessage);
 }
 function isCompactionFailureError(errorMessage) {
 	if (!errorMessage) return false;
 	const lower = errorMessage.toLowerCase();
 	if (!(lower.includes("summarization failed") || lower.includes("auto-compaction") || lower.includes("compaction failed") || lower.includes("compaction"))) return false;
-	return isContextOverflowError(errorMessage) || lower.includes("context overflow");
+	if (isLikelyContextOverflowError(errorMessage)) return true;
+	return lower.includes("context overflow");
 }
 const ERROR_PAYLOAD_PREFIX_RE = /^(?:error|api\s*error|apierror|openai\s*error|anthropic\s*error|gateway\s*error)[:\s-]+/i;
 const FINAL_TAG_RE = /<\s*\/?\s*final\s*>/gi;
 const ERROR_PREFIX_RE = /^(?:error|api\s*error|openai\s*error|anthropic\s*error|gateway\s*error|request failed|failed|exception)[:\s-]+/i;
 const CONTEXT_OVERFLOW_ERROR_HEAD_RE = /^(?:context overflow:|request_too_large\b|request size exceeds\b|request exceeds the maximum size\b|context length exceeded\b|maximum context length\b|prompt is too long\b|exceeds model context window\b)/i;
 const HTTP_STATUS_PREFIX_RE = /^(?:http\s*)?(\d{3})\s+(.+)$/i;
+const HTTP_STATUS_CODE_PREFIX_RE = /^(?:http\s*)?(\d{3})(?:\s+([\s\S]+))?$/i;
+const HTML_ERROR_PREFIX_RE = /^\s*(?:<!doctype\s+html\b|<html\b)/i;
+const CLOUDFLARE_HTML_ERROR_CODES = new Set([
+	521,
+	522,
+	523,
+	524,
+	525,
+	526,
+	530
+]);
+const TRANSIENT_HTTP_ERROR_CODES = new Set([
+	500,
+	502,
+	503,
+	521,
+	522,
+	523,
+	524,
+	529
+]);
 const HTTP_ERROR_HINTS = [
 	"error",
 	"bad request",
@@ -7604,6 +7792,31 @@ const HTTP_ERROR_HINTS = [
 	"too many requests",
 	"permission"
 ];
+function extractLeadingHttpStatus(raw) {
+	const match = raw.match(HTTP_STATUS_CODE_PREFIX_RE);
+	if (!match) return null;
+	const code = Number(match[1]);
+	if (!Number.isFinite(code)) return null;
+	return {
+		code,
+		rest: (match[2] ?? "").trim()
+	};
+}
+function isCloudflareOrHtmlErrorPage(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return false;
+	const status = extractLeadingHttpStatus(trimmed);
+	if (!status || status.code < 500) return false;
+	if (CLOUDFLARE_HTML_ERROR_CODES.has(status.code)) return true;
+	return status.code < 600 && HTML_ERROR_PREFIX_RE.test(status.rest) && /<\/html>/i.test(status.rest);
+}
+function isTransientHttpError(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return false;
+	const status = extractLeadingHttpStatus(trimmed);
+	if (!status) return false;
+	return TRANSIENT_HTTP_ERROR_CODES.has(status.code);
+}
 function stripFinalTagsFromText(text) {
 	if (!text) return text;
 	return text.replace(FINAL_TAG_RE, "");
@@ -7626,6 +7839,7 @@ function collapseConsecutiveDuplicateBlocks(text) {
 	return result.join("\n\n");
 }
 function isLikelyHttpErrorText(raw) {
+	if (isCloudflareOrHtmlErrorPage(raw)) return true;
 	const match = raw.match(HTTP_STATUS_PREFIX_RE);
 	if (!match) return false;
 	const code = Number(match[1]);
@@ -7715,6 +7929,8 @@ function parseApiErrorInfo(raw) {
 function formatRawAssistantErrorForUi(raw) {
 	const trimmed = (raw ?? "").trim();
 	if (!trimmed) return "LLM request failed with an unknown error.";
+	const leadingStatus = extractLeadingHttpStatus(trimmed);
+	if (leadingStatus && isCloudflareOrHtmlErrorPage(trimmed)) return `The AI service is temporarily unavailable (HTTP ${leadingStatus.code}). Please try again in a moment.`;
 	const httpMatch = trimmed.match(HTTP_STATUS_PREFIX_RE);
 	if (httpMatch) {
 		const rest = httpMatch[2].trim();
@@ -7748,7 +7964,7 @@ function formatAssistantErrorText(msg, opts) {
 	const invalidRequest = raw.match(/"type":"invalid_request_error".*?"message":"([^"]+)"/);
 	if (invalidRequest?.[1]) return `LLM request rejected: ${invalidRequest[1]}`;
 	if (isOverloadedErrorMessage(raw)) return "The AI service is temporarily overloaded. Please try again in a moment.";
-	if (isBillingErrorMessage(raw)) return BILLING_ERROR_USER_MESSAGE;
+	if (isBillingErrorMessage(raw)) return formatBillingErrorMessage(opts?.provider);
 	if (isLikelyHttpErrorText(raw) || isRawApiErrorPayload(raw)) return formatRawAssistantErrorForUi(raw);
 	if (raw.length > 600) console.warn("[formatAssistantErrorText] Long error truncated:", raw.slice(0, 200));
 	return raw.length > 600 ? `${raw.slice(0, 600)}…` : raw;
@@ -7793,7 +8009,7 @@ const ERROR_PATTERNS = {
 		"context deadline exceeded"
 	],
 	billing: [
-		/\b402\b/,
+		/["']?(?:status|code)["']?\s*[:=]\s*402\b|\bhttp\s*402\b|\berror(?:\s+code)?\s*[:=]?\s*402\b|\b(?:got|returned|received)\s+(?:a\s+)?402\b|^\s*402\s+payment/i,
 		"payment required",
 		"insufficient credits",
 		"credit balance",
@@ -7899,6 +8115,7 @@ function isAuthAssistantError(msg) {
 function classifyFailoverReason(raw) {
 	if (isImageDimensionErrorMessage(raw)) return null;
 	if (isImageSizeError(raw)) return null;
+	if (isTransientHttpError(raw)) return "timeout";
 	if (isRateLimitErrorMessage(raw)) return "rate_limit";
 	if (isOverloadedErrorMessage(raw)) return "rate_limit";
 	if (isCloudCodeAssistFormatError(raw)) return "format";
@@ -8728,4 +8945,4 @@ function validateAnthropicTurns(messages) {
 }
 
 //#endregion
-export { updateSessionStoreEntry as $, normalizeToolName as $t, isCloudCodeAssistFormatError as A, listChannelPlugins as An, hasAlphaChannel as At, parseImageSizeError as B, resolveSlackAppToken as Bn, buildWorkspaceSkillCommandSpecs as Bt, BILLING_ERROR_USER_MESSAGE as C, kindFromMime as Cn, resolveGroupSessionKey as Ct, getApiErrorPayloadFingerprint as D, listEnabledSignalAccounts as Dn, resolveProfile as Dt, formatRawAssistantErrorForUi as E, mediaKindFromMime as En, resolveBrowserConfig as Et, isLikelyContextOverflowError as F, listTelegramAccountIds as Fn, SsrFBlockedError as Ft, appendAssistantMessageToSessionTranscript as G, normalizeDiscordToken as Gn, applySkillEnvOverrides as Gt, ensureSandboxWorkspaceForSession as H, normalizeChatType as Hn, loadWorkspaceSkillEntries as Ht, isRateLimitAssistantError as I, resolveTelegramAccount as In, closeDispatcher as It, readSessionUpdatedAt as J, applyOwnerOnlyToolPolicy as Jt, resolveMirroredTranscriptText as K, applySkillEnvOverridesFromSnapshot as Kt, isRawApiErrorPayload as L, resolveTelegramToken as Ln, createPinnedDispatcher as Lt, isContextOverflowError as M, isWhatsAppGroupJid as Mn, resizeToJpeg as Mt, isFailoverAssistantError as N, normalizeWhatsAppTarget as Nn, getMediaDir as Nt, isAuthAssistantError as O, resolveSignalAccount as On, convertHeicToJpeg as Ot, isFailoverErrorMessage as P, listEnabledTelegramAccounts as Pn, saveMediaBuffer as Pt, updateSessionStore as Q, expandToolGroups as Qt, isTimeoutErrorMessage as R, listBindings as Rn, resolvePinnedHostname as Rt, isGoogleModelApi as S, isGifMedia as Sn, resolveConversationLabel as St, formatAssistantErrorText as T, maxBytesForKind as Tn, registerBrowserRoutes as Tt, resolveSandboxContext as U, listEnabledDiscordAccounts as Un, resolveSkillsPromptForRun as Ut, sanitizeUserFacingText as V, resolveSlackBotToken as Vn, buildWorkspaceSkillSnapshot as Vt, resolveSandboxRuntimeStatus as W, resolveDiscordAccount as Wn, resolvePluginSkillDirs as Wt, saveSessionStore as X, collectExplicitAllowlist as Xt, recordSessionMetaFromInbound as Y, buildPluginToolGroups as Yt, updateLastRoute as Z, expandPolicyWithPluginGroups as Zt, sanitizeSessionMessagesImages as _, detectMime as _n, listChannelDocks as _t, formatXHighModelHint as a, sanitizeGoogleTurnOrdering as an, normalizeDeliveryContext as at, downgradeOpenAIReasoningBlocks as b, imageMimeFromFormat as bn, resolveChannelGroupRequireMention as bt, normalizeReasoningLevel as c, isInternalMessageChannel as cn, evaluateSessionFreshness as ct, normalizeVerboseLevel as d, normalizeMessageChannel as dn, resolveSessionResetType as dt, resolveToolProfilePolicy as en, isCacheEnabled as et, resolveResponseUsageMode as f, resolveGatewayMessageChannel as fn, resolveThreadFlag as ft, normalizeTextForComparison as g, GATEWAY_CLIENT_NAMES as gn, getChannelDock as gt, isMessagingToolDuplicateNormalized as h, GATEWAY_CLIENT_MODES as hn, deriveSessionMetaPatch as ht, formatThinkingLevels as i, resolveBootstrapMaxChars as in, mergeDeliveryContext as it, isCompactionFailureError as j, normalizeChannelId as jn, optimizeImageToPng as jt, isBillingAssistantError as k, getChannelPlugin as kn, getImageMetadata as kt, normalizeThinkLevel as l, isMarkdownCapableMessageChannel as ln, resolveChannelResetConfig as lt, isMessagingToolDuplicate as m, GATEWAY_CLIENT_IDS as mn, resolveMainSessionKey as mt, validateGeminiTurns as n, buildBootstrapContextFiles as nn, deliveryContextFromSession as nt, listThinkingLevels as o, INTERNAL_MESSAGE_CHANNEL as on, normalizeSessionDeliveryFields as ot, supportsXHighThinking as p, resolveMessageChannel as pn, DEFAULT_RESET_TRIGGERS as pt, loadSessionStore as q, resolveSandboxConfigForAgent as qt, pickFallbackThinkingLevel as r, ensureSessionHeader$1 as rn, deliveryContextKey as rt, normalizeElevatedLevel as s, isDeliverableMessageChannel as sn, resolveSessionKey as st, validateAnthropicTurns as t, stripPluginOnlyAllowlist as tn, resolveCacheTtlMs as tt, normalizeUsageDisplay as u, listDeliverableMessageChannels as un, resolveSessionResetPolicy as ut, sanitizeImageBlocks as v, extensionForMime as vn, resolveIMessageAccount as vt, classifyFailoverReason as w, MAX_IMAGE_BYTES$1 as wn, createBrowserRouteContext as wt, isAntigravityClaude as x, isAudioFileName as xn, resolveChannelGroupToolsPolicy as xt, sanitizeToolResultImages as y, getFileExtension as yn, resolveChannelGroupPolicy as yt, parseImageDimensionError as z, resolveSlackAccount as zn, resolvePinnedHostnameWithPolicy as zt };
+export { updateLastRoute as $, buildPluginToolGroups as $t, isBillingAssistantError as A, mediaKindFromMime as An, convertHeicToJpeg as At, isTransientHttpError as B, resolveTelegramAccount as Bn, resolvePinnedHostnameWithPolicy as Bt, BILLING_ERROR_USER_MESSAGE as C, getFileExtension as Cn, resolveChannelGroupToolsPolicy as Ct, formatRawAssistantErrorForUi as D, kindFromMime as Dn, registerBrowserRoutes as Dt, formatBillingErrorMessage as E, isGifMedia as En, createBrowserRouteContext as Et, isFailoverErrorMessage as F, normalizeChannelId as Fn, getMediaDir as Ft, resolveSandboxContext as G, resolveSlackBotToken as Gn, resolvePluginSkillDirs as Gt, parseImageSizeError as H, listBindings as Hn, buildWorkspaceSkillSnapshot as Ht, isLikelyContextOverflowError as I, isWhatsAppGroupJid as In, saveMediaBuffer as It, resolveMirroredTranscriptText as J, resolveDiscordAccount as Jn, resolveSandboxedMediaSource as Jt, resolveSandboxRuntimeStatus as K, normalizeChatType as Kn, assertMediaNotDataUrl as Kt, isRateLimitAssistantError as L, normalizeWhatsAppTarget as Ln, SsrFBlockedError as Lt, isCompactionFailureError as M, resolveSignalAccount as Mn, hasAlphaChannel as Mt, isContextOverflowError as N, getChannelPlugin as Nn, optimizeImageToPng as Nt, getApiErrorPayloadFingerprint as O, MAX_IMAGE_BYTES$1 as On, resolveBrowserConfig as Ot, isFailoverAssistantError as P, listChannelPlugins as Pn, resizeToJpeg as Pt, saveSessionStore as Q, applyOwnerOnlyToolPolicy as Qt, isRawApiErrorPayload as R, listEnabledTelegramAccounts as Rn, closeDispatcher as Rt, isGoogleModelApi as S, extensionForMime as Sn, resolveChannelGroupRequireMention as St, formatAssistantErrorText as T, isAudioFileName as Tn, resolveGroupSessionKey as Tt, sanitizeUserFacingText as U, resolveSlackAccount as Un, loadWorkspaceSkillEntries as Ut, parseImageDimensionError as V, resolveTelegramToken as Vn, buildWorkspaceSkillCommandSpecs as Vt, ensureSandboxWorkspaceForSession as W, resolveSlackAppToken as Wn, resolveSkillsPromptForRun as Wt, readSessionUpdatedAt as X, applySkillEnvOverridesFromSnapshot as Xt, loadSessionStore as Y, normalizeDiscordToken as Yn, applySkillEnvOverrides as Yt, recordSessionMetaFromInbound as Z, resolveSandboxConfigForAgent as Zt, sanitizeSessionMessagesImages as _, resolveMessageChannel as _n, deriveSessionMetaPatch as _t, formatXHighModelHint as a, stripPluginOnlyAllowlist as an, deliveryContextKey as at, downgradeOpenAIReasoningBlocks as b, GATEWAY_CLIENT_NAMES as bn, resolveIMessageAccount as bt, normalizeReasoningLevel as c, resolveBootstrapMaxChars as cn, normalizeSessionDeliveryFields as ct, normalizeVerboseLevel as d, isDeliverableMessageChannel as dn, resolveChannelResetConfig as dt, collectExplicitAllowlist as en, updateSessionStore as et, resolveResponseUsageMode as f, isInternalMessageChannel as fn, resolveSessionResetPolicy as ft, normalizeTextForComparison as g, resolveGatewayMessageChannel as gn, resolveMainSessionKey as gt, isMessagingToolDuplicateNormalized as h, normalizeMessageChannel as hn, DEFAULT_RESET_TRIGGERS as ht, formatThinkingLevels as i, resolveToolProfilePolicy as in, deliveryContextFromSession as it, isCloudCodeAssistFormatError as j, listEnabledSignalAccounts as jn, getImageMetadata as jt, isAuthAssistantError as k, maxBytesForKind as kn, resolveProfile as kt, normalizeThinkLevel as l, sanitizeGoogleTurnOrdering as ln, resolveSessionKey as lt, isMessagingToolDuplicate as m, listDeliverableMessageChannels as mn, resolveThreadFlag as mt, validateGeminiTurns as n, expandToolGroups as nn, isCacheEnabled as nt, listThinkingLevels as o, buildBootstrapContextFiles as on, mergeDeliveryContext as ot, supportsXHighThinking as p, isMarkdownCapableMessageChannel as pn, resolveSessionResetType as pt, appendAssistantMessageToSessionTranscript as q, listEnabledDiscordAccounts as qn, assertSandboxPath as qt, pickFallbackThinkingLevel as r, normalizeToolName as rn, resolveCacheTtlMs as rt, normalizeElevatedLevel as s, ensureSessionHeader$1 as sn, normalizeDeliveryContext as st, validateAnthropicTurns as t, expandPolicyWithPluginGroups as tn, updateSessionStoreEntry as tt, normalizeUsageDisplay as u, INTERNAL_MESSAGE_CHANNEL as un, evaluateSessionFreshness as ut, sanitizeImageBlocks as v, GATEWAY_CLIENT_IDS as vn, getChannelDock as vt, classifyFailoverReason as w, imageMimeFromFormat as wn, resolveConversationLabel as wt, isAntigravityClaude as x, detectMime as xn, resolveChannelGroupPolicy as xt, sanitizeToolResultImages as y, GATEWAY_CLIENT_MODES as yn, listChannelDocks as yt, isTimeoutErrorMessage as z, listTelegramAccountIds as zn, createPinnedDispatcher as zt };