activeclaw 2026.2.11 → 2026.2.13

package/dist/plugin-sdk/agents/models-config.providers.d.ts

@@ -4,6 +4,15 @@ export type ProviderConfig = NonNullable<ModelsConfig["providers"]>[string];
 export declare const XIAOMI_DEFAULT_MODEL_ID = "mimo-v2-flash";
 export declare const QIANFAN_BASE_URL = "https://qianfan.baidubce.com/v2";
 export declare const QIANFAN_DEFAULT_MODEL_ID = "deepseek-v3.2";
+/**
+ * Derive the Ollama native API base URL from a configured base URL.
+ *
+ * Users typically configure `baseUrl` with a `/v1` suffix (e.g.
+ * `http://192.168.20.14:11434/v1`) for the OpenAI-compatible endpoint.
+ * The native Ollama API lives at the root (e.g. `/api/tags`), so we
+ * strip the `/v1` suffix when present.
+ */
+export declare function resolveOllamaApiBase(configuredBaseUrl?: string): string;
 export declare function normalizeGoogleModelId(id: string): string;
 export declare function normalizeProviders(params: {
     providers: ModelsConfig["providers"];
@@ -13,6 +22,7 @@ export declare function buildXiaomiProvider(): ProviderConfig;
 export declare function buildQianfanProvider(): ProviderConfig;
 export declare function resolveImplicitProviders(params: {
     agentDir: string;
+    explicitProviders?: Record<string, ProviderConfig> | null;
 }): Promise<ModelsConfig["providers"]>;
 export declare function resolveImplicitCopilotProvider(params: {
     agentDir: string;

package/dist/plugin-sdk/agents/pi-embedded-helpers/errors.d.ts

@@ -1,10 +1,13 @@
 import type { AssistantMessage } from "@mariozechner/pi-ai";
 import type { OpenClawConfig } from "../../config/config.js";
 import type { FailoverReason } from "./types.js";
-export declare const BILLING_ERROR_USER_MESSAGE = "\u26A0\uFE0F API provider returned a billing error \u2014 your API key has run out of credits or has an insufficient balance. Check your provider's billing dashboard and top up or switch to a different API key.";
+export declare function formatBillingErrorMessage(provider?: string): string;
+export declare const BILLING_ERROR_USER_MESSAGE: string;
 export declare function isContextOverflowError(errorMessage?: string): boolean;
 export declare function isLikelyContextOverflowError(errorMessage?: string): boolean;
 export declare function isCompactionFailureError(errorMessage?: string): boolean;
+export declare function isCloudflareOrHtmlErrorPage(raw: string): boolean;
+export declare function isTransientHttpError(raw: string): boolean;
 export declare function getApiErrorPayloadFingerprint(raw?: string): string | null;
 export declare function isRawApiErrorPayload(raw?: string): boolean;
 export type ApiErrorInfo = {
@@ -18,6 +21,7 @@ export declare function formatRawAssistantErrorForUi(raw?: string): string;
 export declare function formatAssistantErrorText(msg: AssistantMessage, opts?: {
     cfg?: OpenClawConfig;
     sessionKey?: string;
+    provider?: string;
 }): string | undefined;
 export declare function sanitizeUserFacingText(text: string, opts?: {
     errorContext?: boolean;

package/dist/plugin-sdk/agents/pi-embedded-helpers.d.ts

@@ -1,5 +1,5 @@
 export { buildBootstrapContextFiles, DEFAULT_BOOTSTRAP_MAX_CHARS, ensureSessionHeader, resolveBootstrapMaxChars, stripThoughtSignatures, } from "./pi-embedded-helpers/bootstrap.js";
-export { BILLING_ERROR_USER_MESSAGE, classifyFailoverReason, formatRawAssistantErrorForUi, formatAssistantErrorText, getApiErrorPayloadFingerprint, isAuthAssistantError, isAuthErrorMessage, isBillingAssistantError, parseApiErrorInfo, sanitizeUserFacingText, isBillingErrorMessage, isCloudCodeAssistFormatError, isCompactionFailureError, isContextOverflowError, isLikelyContextOverflowError, isFailoverAssistantError, isFailoverErrorMessage, isImageDimensionErrorMessage, isImageSizeError, isOverloadedErrorMessage, isRawApiErrorPayload, isRateLimitAssistantError, isRateLimitErrorMessage, isTimeoutErrorMessage, parseImageDimensionError, parseImageSizeError, } from "./pi-embedded-helpers/errors.js";
+export { BILLING_ERROR_USER_MESSAGE, formatBillingErrorMessage, classifyFailoverReason, formatRawAssistantErrorForUi, formatAssistantErrorText, getApiErrorPayloadFingerprint, isAuthAssistantError, isAuthErrorMessage, isBillingAssistantError, parseApiErrorInfo, sanitizeUserFacingText, isBillingErrorMessage, isCloudflareOrHtmlErrorPage, isCloudCodeAssistFormatError, isCompactionFailureError, isContextOverflowError, isLikelyContextOverflowError, isFailoverAssistantError, isFailoverErrorMessage, isImageDimensionErrorMessage, isImageSizeError, isOverloadedErrorMessage, isRawApiErrorPayload, isRateLimitAssistantError, isRateLimitErrorMessage, isTransientHttpError, isTimeoutErrorMessage, parseImageDimensionError, parseImageSizeError, } from "./pi-embedded-helpers/errors.js";
 export { isGoogleModelApi, sanitizeGoogleTurnOrdering } from "./pi-embedded-helpers/google.js";
 export { downgradeOpenAIReasoningBlocks } from "./pi-embedded-helpers/openai.js";
 export { isEmptyAssistantMessageContent, sanitizeSessionMessagesImages, } from "./pi-embedded-helpers/images.js";

package/dist/plugin-sdk/agents/pi-embedded-runner/google.d.ts

@@ -2,6 +2,7 @@ import type { AgentMessage, AgentTool } from "@mariozechner/pi-agent-core";
 import type { SessionManager } from "@mariozechner/pi-coding-agent";
 import type { TSchema } from "@sinclair/typebox";
 import type { TranscriptPolicy } from "../transcript-policy.js";
+export declare function sanitizeAntigravityThinkingBlocks(messages: AgentMessage[]): AgentMessage[];
 export declare function sanitizeToolsForGoogle<TSchemaType extends TSchema = TSchema, TResult = unknown>(params: {
     tools: AgentTool<TSchemaType, TResult>[];
     provider: string;

package/dist/plugin-sdk/agents/pi-embedded-runner/run/params.d.ts

@@ -3,6 +3,7 @@ import type { ReasoningLevel, ThinkLevel, VerboseLevel } from "../../../auto-rep
 import type { AgentStreamParams } from "../../../commands/agent/types.js";
 import type { OpenClawConfig } from "../../../config/config.js";
 import type { enqueueCommand } from "../../../process/command-queue.js";
+import type { InputProvenance } from "../../../sessions/input-provenance.js";
 import type { ExecElevatedDefaults, ExecToolDefaults } from "../../bash-tools.js";
 import type { BlockReplyChunking, ToolResultFormat } from "../../pi-embedded-subscribe.js";
 import type { SkillSnapshot } from "../../skills.js";
@@ -110,6 +111,7 @@ export type RunEmbeddedPiAgentParams = {
     lane?: string;
     enqueue?: typeof enqueueCommand;
     extraSystemPrompt?: string;
+    inputProvenance?: InputProvenance;
     streamParams?: AgentStreamParams;
     ownerNumbers?: string[];
     enforceFinalTag?: boolean;

package/dist/plugin-sdk/agents/pi-embedded-runner/run/payloads.d.ts

@@ -17,6 +17,7 @@ export declare function buildEmbeddedRunPayloads(params: {
     };
     config?: OpenClawConfig;
     sessionKey: string;
+    provider?: string;
     verboseLevel?: VerboseLevel;
     reasoningLevel?: ReasoningLevel;
     toolResultFormat?: ToolResultFormat;

package/dist/plugin-sdk/agents/pi-embedded-runner/run/types.d.ts

@@ -4,6 +4,7 @@ import type { ReasoningLevel, ThinkLevel, VerboseLevel } from "../../../auto-rep
 import type { AgentStreamParams } from "../../../commands/agent/types.js";
 import type { OpenClawConfig } from "../../../config/config.js";
 import type { SessionSystemPromptReport } from "../../../config/sessions/types.js";
+import type { InputProvenance } from "../../../sessions/input-provenance.js";
 import type { ExecElevatedDefaults, ExecToolDefaults } from "../../bash-tools.js";
 import type { MessagingToolSend } from "../../pi-embedded-messaging.js";
 import type { BlockReplyChunking, ToolResultFormat } from "../../pi-embedded-subscribe.js";
@@ -100,6 +101,7 @@ export type EmbeddedRunAttemptParams = {
     /** If true, omit the message tool from the tool list. */
     disableMessageTool?: boolean;
     extraSystemPrompt?: string;
+    inputProvenance?: InputProvenance;
     streamParams?: AgentStreamParams;
     ownerNumbers?: string[];
     enforceFinalTag?: boolean;

package/dist/plugin-sdk/agents/pi-embedded-runner/types.d.ts

@@ -5,6 +5,7 @@ export type EmbeddedPiAgentMeta = {
     provider: string;
     model: string;
     compactionCount?: number;
+    promptTokens?: number;
     usage?: {
         input?: number;
         output?: number;
@@ -12,6 +13,20 @@ export type EmbeddedPiAgentMeta = {
         cacheWrite?: number;
         total?: number;
     };
+    /**
+     * Usage from the last individual API call (not accumulated across tool-use
+     * loops or compaction retries). Used for context-window utilization display
+     * (`totalTokens` in sessions.json) because the accumulated `usage.input`
+     * sums input tokens from every API call in the run, which overstates the
+     * actual context size.
+     */
+    lastCallUsage?: {
+        input?: number;
+        output?: number;
+        cacheRead?: number;
+        cacheWrite?: number;
+        total?: number;
+    };
 };
 export type EmbeddedPiRunMeta = {
     durationMs: number;

package/dist/plugin-sdk/agents/pi-embedded-subscribe.handlers.tools.d.ts

@@ -15,4 +15,4 @@ export declare function handleToolExecutionEnd(ctx: EmbeddedPiSubscribeContext,
     toolCallId: string;
     isError: boolean;
     result?: unknown;
-}): void;
+}): Promise<void>;

package/dist/plugin-sdk/agents/pi-embedded-subscribe.handlers.types.d.ts

@@ -2,6 +2,7 @@ import type { AgentEvent, AgentMessage } from "@mariozechner/pi-agent-core";
 import type { ReplyDirectiveParseResult } from "../auto-reply/reply/reply-directives.js";
 import type { ReasoningLevel } from "../auto-reply/thinking.js";
 import type { InlineCodeState } from "../markdown/code-spans.js";
+import type { HookRunner } from "../plugins/hooks.js";
 import type { EmbeddedBlockChunker } from "./pi-embedded-block-chunker.js";
 import type { MessagingToolSend } from "./pi-embedded-messaging.js";
 import type { BlockReplyChunking, SubscribeEmbeddedPiSessionParams } from "./pi-embedded-subscribe.types.js";
@@ -69,6 +70,7 @@ export type EmbeddedPiSubscribeContext = {
     log: EmbeddedSubscribeLogger;
     blockChunking?: BlockReplyChunking;
     blockChunker: EmbeddedBlockChunker | null;
+    hookRunner?: HookRunner;
     shouldEmitToolResult: () => boolean;
     shouldEmitToolOutput: () => boolean;
     emitToolSummary: (toolName?: string, meta?: string) => void;

package/dist/plugin-sdk/agents/pi-embedded-subscribe.types.d.ts

@@ -1,10 +1,12 @@
 import type { AgentSession } from "@mariozechner/pi-coding-agent";
 import type { ReasoningLevel, VerboseLevel } from "../auto-reply/thinking.js";
+import type { HookRunner } from "../plugins/hooks.js";
 import type { BlockReplyChunking } from "./pi-embedded-block-chunker.js";
 export type ToolResultFormat = "markdown" | "plain";
 export type SubscribeEmbeddedPiSessionParams = {
     session: AgentSession;
     runId: string;
+    hookRunner?: HookRunner;
     verboseLevel?: VerboseLevel;
     reasoningMode?: ReasoningLevel;
     toolResultFormat?: ToolResultFormat;

package/dist/plugin-sdk/agents/session-tool-result-guard-wrapper.d.ts

@@ -1,4 +1,5 @@
 import type { SessionManager } from "@mariozechner/pi-coding-agent";
+import { type InputProvenance } from "../sessions/input-provenance.js";
 export type GuardedSessionManager = SessionManager & {
     /** Flush any synthetic tool results for pending tool calls. Idempotent. */
     flushPendingToolResults?: () => void;
@@ -10,5 +11,6 @@ export type GuardedSessionManager = SessionManager & {
 export declare function guardSessionManager(sessionManager: SessionManager, opts?: {
     agentId?: string;
     sessionKey?: string;
+    inputProvenance?: InputProvenance;
     allowSyntheticToolResults?: boolean;
 }): GuardedSessionManager;

package/dist/plugin-sdk/agents/session-tool-result-guard.d.ts

@@ -1,6 +1,10 @@
 import type { AgentMessage } from "@mariozechner/pi-agent-core";
 import type { SessionManager } from "@mariozechner/pi-coding-agent";
 export declare function installSessionToolResultGuard(sessionManager: SessionManager, opts?: {
+    /**
+     * Optional transform applied to any message before persistence.
+     */
+    transformMessageForPersistence?: (message: AgentMessage) => AgentMessage;
     /**
      * Optional, synchronous transform applied to toolResult messages *before* they are
      * persisted to the session transcript.

package/dist/plugin-sdk/agents/tools/agent-step.d.ts

@@ -9,4 +9,7 @@ export declare function runAgentStep(params: {
     timeoutMs: number;
     channel?: string;
     lane?: string;
+    sourceSessionKey?: string;
+    sourceChannel?: string;
+    sourceTool?: string;
 }): Promise<string | undefined>;

package/dist/plugin-sdk/agents/tools/browser-tool.schema.d.ts

@@ -27,7 +27,7 @@ export declare const BrowserToolSchema: import("node_modules/@sinclair/typebox/b
     accept: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TBoolean>;
     promptText: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;
     request: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TObject<{
-        kind: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TUnsafe<"fill" | "type" | "close" | "select" | "wait" | "click" | "drag" | "evaluate" | "hover" | "press" | "resize">;
+        kind: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TUnsafe<"fill" | "close" | "resize" | "type" | "select" | "wait" | "click" | "drag" | "evaluate" | "hover" | "press">;
         targetId: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;
         ref: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;
         doubleClick: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TBoolean>;

package/dist/plugin-sdk/agents/tools/web-search.d.ts

@@ -18,6 +18,12 @@ type GrokSearchResponse = {
         content?: Array<{
             type?: string;
             text?: string;
+            annotations?: Array<{
+                type?: string;
+                url?: string;
+                start_index?: number;
+                end_index?: number;
+            }>;
         }>;
     }>;
     output_text?: string;
@@ -29,7 +35,10 @@ type GrokSearchResponse = {
     }>;
 };
 type PerplexityBaseUrlHint = "direct" | "openrouter";
-declare function extractGrokContent(data: GrokSearchResponse): string | undefined;
+declare function extractGrokContent(data: GrokSearchResponse): {
+    text: string | undefined;
+    annotationCitations: string[];
+};
 declare function inferPerplexityBaseUrlFromApiKey(apiKey?: string): PerplexityBaseUrlHint | undefined;
 declare function resolvePerplexityBaseUrl(perplexity?: PerplexityConfig, apiKeySource?: PerplexityApiKeySource, apiKey?: string): string;
 declare function isDirectPerplexityBaseUrl(baseUrl: string): boolean;

package/dist/plugin-sdk/agents/usage.d.ts

@@ -41,4 +41,5 @@ export declare function deriveSessionTotalTokens(params: {
         cacheWrite?: number;
     };
     contextTokens?: number;
+    promptTokens?: number;
 }): number | undefined;

package/dist/plugin-sdk/auto-reply/heartbeat.d.ts

@@ -1,4 +1,4 @@
-export declare const HEARTBEAT_PROMPT = "Read HEARTBEAT.md if it exists (workspace context). Follow it strictly. Do not infer or repeat old tasks from prior chats. If nothing needs attention, reply HEARTBEAT_OK.";
+export declare const HEARTBEAT_PROMPT = "Read HEARTBEAT.md if it exists (workspace context). Follow its instructions, then find more useful work: explore the web, research topics, act on opportunities, reach out with discoveries. Do not rehash completed tasks. After exhausting all productive work, reply HEARTBEAT_OK.";
 export declare const DEFAULT_HEARTBEAT_EVERY = "30m";
 export declare const DEFAULT_HEARTBEAT_ACK_MAX_CHARS = 300;
 /**

package/dist/plugin-sdk/auto-reply/reply/get-reply-directives.d.ts

@@ -84,6 +84,7 @@ export declare function resolveReplyDirectives(params: {
     aliasIndex: ModelAliasIndex;
     provider: string;
     model: string;
+    hasResolvedHeartbeatModelOverride: boolean;
     typing: TypingController;
     opts?: GetReplyOptions;
     skillFilter?: string[];

package/dist/plugin-sdk/auto-reply/reply/mentions.d.ts

@@ -13,6 +13,7 @@ export declare function matchesMentionWithExplicit(params: {
     text: string;
     mentionRegexes: RegExp[];
     explicit?: ExplicitMentionSignal;
+    transcript?: string;
 }): boolean;
 export declare function stripStructuralPrefixes(text: string): string;
 export declare function stripMentions(text: string, ctx: MsgContext, cfg: OpenClawConfig | undefined, agentId?: string): string;

package/dist/plugin-sdk/auto-reply/reply/model-selection.d.ts

@@ -43,6 +43,9 @@ export declare function createModelSelectionState(params: {
     provider: string;
     model: string;
     hasModelDirective: boolean;
+    /** True when heartbeat.model was explicitly resolved for this run.
+     *  In that case, skip session-stored overrides so the heartbeat selection wins. */
+    hasResolvedHeartbeatModelOverride?: boolean;
 }): Promise<ModelSelectionState>;
 export declare function resolveModelDirectiveSelection(params: {
     raw: string;

package/dist/plugin-sdk/auto-reply/reply/reply-reference.d.ts

@@ -9,7 +9,7 @@ export type ReplyReferencePlanner = {
 };
 export declare function createReplyReferencePlanner(options: {
     replyToMode: ReplyToMode;
-    /** Existing thread/reference id (always used when present). */
+    /** Existing thread/reference id (preferred when allowed by replyToMode). */
     existingId?: string;
     /** Id to start a new thread/reference when allowed (e.g., parent message id). */
     startId?: string;

package/dist/plugin-sdk/auto-reply/reply/session-run-accounting.d.ts

@@ -0,0 +1,11 @@
+import { type NormalizedUsage } from "../../agents/usage.js";
+import { incrementCompactionCount } from "./session-updates.js";
+import { persistSessionUsageUpdate } from "./session-usage.js";
+type PersistRunSessionUsageParams = Parameters<typeof persistSessionUsageUpdate>[0];
+type IncrementRunCompactionCountParams = Omit<Parameters<typeof incrementCompactionCount>[0], "tokensAfter"> & {
+    lastCallUsage?: NormalizedUsage;
+    contextTokensUsed?: number;
+};
+export declare function persistRunSessionUsage(params: PersistRunSessionUsageParams): Promise<void>;
+export declare function incrementRunCompactionCount(params: IncrementRunCompactionCountParams): Promise<number | undefined>;
+export {};

package/dist/plugin-sdk/auto-reply/reply/session-usage.d.ts

@@ -4,9 +4,17 @@ export declare function persistSessionUsageUpdate(params: {
     storePath?: string;
     sessionKey?: string;
     usage?: NormalizedUsage;
+    /**
+     * Usage from the last individual API call (not accumulated). When provided,
+     * this is used for `totalTokens` instead of the accumulated `usage` so that
+     * context-window utilization reflects the actual current context size rather
+     * than the sum of input tokens across all API calls in the run.
+     */
+    lastCallUsage?: NormalizedUsage;
     modelUsed?: string;
     providerUsed?: string;
     contextTokensUsed?: number;
+    promptTokens?: number;
     systemPromptReport?: SessionSystemPromptReport;
     cliSessionId?: string;
     logLabel?: string;

package/dist/plugin-sdk/auto-reply/types.d.ts

@@ -24,6 +24,8 @@ export type GetReplyOptions = {
     onTypingCleanup?: () => void;
     onTypingController?: (typing: TypingController) => void;
     isHeartbeat?: boolean;
+    /** Resolved heartbeat model override (provider/model string from merged per-agent config). */
+    heartbeatModelOverride?: string;
     onPartialReply?: (payload: ReplyPayload) => Promise<void> | void;
     onReasoningStream?: (payload: ReplyPayload) => Promise<void> | void;
     onBlockReply?: (payload: ReplyPayload, context?: BlockReplyContext) => Promise<void> | void;

package/dist/plugin-sdk/browser/control-auth.d.ts

@@ -0,0 +1,13 @@
+import type { OpenClawConfig } from "../config/config.js";
+export type BrowserControlAuth = {
+    token?: string;
+    password?: string;
+};
+export declare function resolveBrowserControlAuth(cfg: OpenClawConfig | undefined, env?: NodeJS.ProcessEnv): BrowserControlAuth;
+export declare function ensureBrowserControlAuth(params: {
+    cfg: OpenClawConfig;
+    env?: NodeJS.ProcessEnv;
+}): Promise<{
+    auth: BrowserControlAuth;
+    generatedToken?: string;
+}>;

package/dist/plugin-sdk/channels/plugins/onboarding/signal.d.ts

@@ -1,2 +1,3 @@
 import type { ChannelOnboardingAdapter } from "../onboarding-types.js";
+export declare function normalizeSignalAccountInput(value: string | null | undefined): string | null;
 export declare const signalOnboardingAdapter: ChannelOnboardingAdapter;

package/dist/plugin-sdk/cli/prompt.d.ts

@@ -0,0 +1 @@
+export declare function promptYesNo(question: string, defaultYes?: boolean): Promise<boolean>;

package/dist/plugin-sdk/commands/agent/types.d.ts

@@ -1,5 +1,6 @@
 import type { ClientToolDefinition } from "../../agents/pi-embedded-runner/run/params.js";
 import type { ChannelOutboundTargetMode } from "../../channels/plugins/types.js";
+import type { InputProvenance } from "../../sessions/input-provenance.js";
 /** Image content block for Claude API multimodal messages. */
 export type ImageContent = {
     type: "image";
@@ -70,6 +71,7 @@ export type AgentCommandOpts = {
     lane?: string;
     runId?: string;
     extraSystemPrompt?: string;
+    inputProvenance?: InputProvenance;
     /** Per-call stream param overrides (best-effort). */
     streamParams?: AgentStreamParams;
 };

package/dist/plugin-sdk/commands/onboard-types.d.ts

@@ -1,7 +1,7 @@
 import type { ChannelId } from "../channels/plugins/types.js";
 import type { GatewayDaemonRuntime } from "./daemon-runtime.js";
 export type OnboardMode = "local" | "remote";
-export type AuthChoice = "oauth" | "setup-token" | "claude-cli" | "token" | "chutes" | "openai-codex" | "openai-api-key" | "openrouter-api-key" | "ai-gateway-api-key" | "cloudflare-ai-gateway-api-key" | "moonshot-api-key" | "moonshot-api-key-cn" | "kimi-code-api-key" | "synthetic-api-key" | "venice-api-key" | "together-api-key" | "codex-cli" | "apiKey" | "gemini-api-key" | "google-antigravity" | "google-gemini-cli" | "zai-api-key" | "xiaomi-api-key" | "minimax-cloud" | "minimax" | "minimax-api" | "minimax-api-lightning" | "minimax-portal" | "opencode-zen" | "github-copilot" | "copilot-proxy" | "qwen-portal" | "xai-api-key" | "qianfan-api-key" | "custom-api-key" | "skip";
+export type AuthChoice = "oauth" | "setup-token" | "claude-cli" | "token" | "chutes" | "openai-codex" | "openai-api-key" | "openrouter-api-key" | "litellm-api-key" | "ai-gateway-api-key" | "cloudflare-ai-gateway-api-key" | "moonshot-api-key" | "moonshot-api-key-cn" | "kimi-code-api-key" | "synthetic-api-key" | "venice-api-key" | "together-api-key" | "codex-cli" | "apiKey" | "gemini-api-key" | "google-antigravity" | "google-gemini-cli" | "zai-api-key" | "zai-coding-global" | "zai-coding-cn" | "zai-global" | "zai-cn" | "xiaomi-api-key" | "minimax-cloud" | "minimax" | "minimax-api" | "minimax-api-lightning" | "minimax-portal" | "opencode-zen" | "github-copilot" | "copilot-proxy" | "qwen-portal" | "xai-api-key" | "qianfan-api-key" | "custom-api-key" | "skip";
 export type AuthChoiceGroupId = "openai" | "anthropic" | "google" | "copilot" | "openrouter" | "ai-gateway" | "cloudflare-ai-gateway" | "moonshot" | "zai" | "xiaomi" | "opencode-zen" | "minimax" | "synthetic" | "venice" | "qwen" | "qianfan" | "xai" | "custom";
 export type GatewayAuthChoice = "token" | "password";
 export type ResetScope = "config" | "config+creds+sessions" | "full";
@@ -31,6 +31,7 @@ export type OnboardOptions = {
     anthropicApiKey?: string;
     openaiApiKey?: string;
     openrouterApiKey?: string;
+    litellmApiKey?: string;
     aiGatewayApiKey?: string;
     cloudflareAiGatewayAccountId?: string;
     cloudflareAiGatewayGatewayId?: string;
@@ -47,6 +48,11 @@ export type OnboardOptions = {
     opencodeZenApiKey?: string;
     xaiApiKey?: string;
     qianfanApiKey?: string;
+    customBaseUrl?: string;
+    customApiKey?: string;
+    customModelId?: string;
+    customProviderId?: string;
+    customCompatibility?: "openai" | "anthropic";
     gatewayPort?: number;
     gatewayBind?: GatewayBind;
     gatewayAuth?: GatewayAuthChoice;

package/dist/plugin-sdk/config/sessions/paths.d.ts

@@ -1,10 +1,15 @@
-import type { SessionEntry } from "./types.js";
 export declare function resolveSessionTranscriptsDir(env?: NodeJS.ProcessEnv, homedir?: () => string): string;
 export declare function resolveSessionTranscriptsDirForAgent(agentId?: string, env?: NodeJS.ProcessEnv, homedir?: () => string): string;
 export declare function resolveDefaultSessionStorePath(agentId?: string): string;
+export declare const SAFE_SESSION_ID_RE: RegExp;
+export declare function validateSessionId(sessionId: string): string;
+export declare function resolveSessionTranscriptPathInDir(sessionId: string, sessionsDir: string, topicId?: string | number): string;
 export declare function resolveSessionTranscriptPath(sessionId: string, agentId?: string, topicId?: string | number): string;
-export declare function resolveSessionFilePath(sessionId: string, entry?: SessionEntry, opts?: {
+export declare function resolveSessionFilePath(sessionId: string, entry?: {
+    sessionFile?: string;
+}, opts?: {
     agentId?: string;
+    sessionsDir?: string;
 }): string;
 export declare function resolveStorePath(store?: string, opts?: {
     agentId?: string;

package/dist/plugin-sdk/config/types.agents.d.ts

@@ -74,5 +74,7 @@ export type AgentBinding = {
         };
         guildId?: string;
         teamId?: string;
+        /** Discord role IDs used for role-based routing. */
+        roles?: string[];
     };
 };

package/dist/plugin-sdk/config/types.discord.d.ts

@@ -27,6 +27,8 @@ export type DiscordGuildChannelConfig = {
     enabled?: boolean;
     /** Optional allowlist for channel senders (ids or names). */
     users?: Array<string | number>;
+    /** Optional allowlist for channel senders by role ID. */
+    roles?: Array<string | number>;
     /** Optional system prompt snippet for this channel. */
     systemPrompt?: string;
     /** If false, omit thread starter context for this channel (default: true). */
@@ -41,7 +43,10 @@ export type DiscordGuildEntry = {
     toolsBySender?: GroupToolPolicyBySenderConfig;
     /** Reaction notification mode (off|own|all|allowlist). Default: own. */
     reactionNotifications?: DiscordReactionNotificationMode;
+    /** Optional allowlist for guild senders (ids or names). */
     users?: Array<string | number>;
+    /** Optional allowlist for guild senders by role ID. */
+    roles?: Array<string | number>;
     channels?: Record<string, DiscordGuildChannelConfig>;
 };
 export type DiscordActionConfig = {

package/dist/plugin-sdk/config/types.gateway.d.ts

@@ -126,6 +126,11 @@ export type GatewayHttpResponsesConfig = {
      * Default: 20MB.
      */
     maxBodyBytes?: number;
+    /**
+     * Max number of URL-based `input_file` + `input_image` parts per request.
+     * Default: 8.
+     */
+    maxUrlParts?: number;
     /** File inputs (input_file). */
     files?: GatewayHttpResponsesFilesConfig;
     /** Image inputs (input_image). */
@@ -134,6 +139,11 @@ export type GatewayHttpResponsesConfig = {
 export type GatewayHttpResponsesFilesConfig = {
     /** Allow URL fetches for input_file. Default: true. */
     allowUrl?: boolean;
+    /**
+     * Optional hostname allowlist for URL fetches.
+     * Supports exact hosts and `*.example.com` wildcards.
+     */
+    urlAllowlist?: string[];
     /** Allowed MIME types (case-insensitive). */
     allowedMimes?: string[];
     /** Max bytes per file. Default: 5MB. */
@@ -158,6 +168,11 @@ export type GatewayHttpResponsesPdfConfig = {
 export type GatewayHttpResponsesImagesConfig = {
     /** Allow URL fetches for input_image. Default: true. */
     allowUrl?: boolean;
+    /**
+     * Optional hostname allowlist for URL fetches.
+     * Supports exact hosts and `*.example.com` wildcards.
+     */
+    urlAllowlist?: string[];
     /** Allowed MIME types (case-insensitive). */
     allowedMimes?: string[];
     /** Max bytes per image. Default: 10MB. */

package/dist/plugin-sdk/config/types.hooks.d.ts

@@ -98,6 +98,21 @@ export type HooksConfig = {
     enabled?: boolean;
     path?: string;
     token?: string;
+    /**
+     * Default session key used for hook agent runs when no request/mapping session key is used.
+     * If omitted, OpenClaw generates `hook:<uuid>` per request.
+     */
+    defaultSessionKey?: string;
+    /**
+     * Allow `sessionKey` from external `/hooks/agent` request payloads.
+     * Default: false.
+     */
+    allowRequestSessionKey?: boolean;
+    /**
+     * Optional allowlist for explicit session keys (request + mapping). Example: ["hook:"].
+     * Empty/omitted means no prefix restriction.
+     */
+    allowedSessionKeyPrefixes?: string[];
     /**
      * Restrict explicit hook `agentId` routing to these agent ids.
      * Omit or include `*` to allow any agent. Set `[]` to deny all explicit `agentId` routing.

package/dist/plugin-sdk/config/types.memory.d.ts

@@ -1,6 +1,7 @@
 import type { SessionSendPolicyConfig } from "./types.base.js";
 export type MemoryBackend = "builtin" | "qmd";
 export type MemoryCitationsMode = "auto" | "on" | "off";
+export type MemoryQmdSearchMode = "query" | "search" | "vsearch";
 export type MemoryConfig = {
     backend?: MemoryBackend;
     citations?: MemoryCitationsMode;
@@ -8,6 +9,7 @@ export type MemoryConfig = {
 };
 export type MemoryQmdConfig = {
     command?: string;
+    searchMode?: MemoryQmdSearchMode;
     includeDefaultMemory?: boolean;
     paths?: MemoryQmdIndexPath[];
     sessions?: MemoryQmdSessionConfig;

package/dist/plugin-sdk/config/zod-schema.agents.d.ts

@@ -473,6 +473,7 @@ export declare const BindingsSchema: z.ZodOptional<z.ZodArray<z.ZodObject<{
         }, z.core.$strict>>;
         guildId: z.ZodOptional<z.ZodString>;
         teamId: z.ZodOptional<z.ZodString>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>;
 }, z.core.$strict>>>;
 export declare const BroadcastStrategySchema: z.ZodEnum<{