activeclaw 2026.2.11 → 2026.2.13

package/dist/plugin-sdk/infra/binaries.d.ts

@@ -0,0 +1,3 @@
+import { runExec } from "../process/exec.js";
+import { type RuntimeEnv } from "../runtime.js";
+export declare function ensureBinary(name: string, exec?: typeof runExec, runtime?: RuntimeEnv): Promise<void>;

package/dist/plugin-sdk/infra/heartbeat-active-hours.d.ts

@@ -0,0 +1,5 @@
+import type { OpenClawConfig } from "../config/config.js";
+import type { AgentDefaultsConfig } from "../config/types.agent-defaults.js";
+type HeartbeatConfig = AgentDefaultsConfig["heartbeat"];
+export declare function isWithinActiveHours(cfg: OpenClawConfig, heartbeat?: HeartbeatConfig, nowMs?: number): boolean;
+export {};

package/dist/plugin-sdk/infra/heartbeat-runner.d.ts

@@ -20,6 +20,7 @@ export type HeartbeatSummary = {
     model?: string;
     ackMaxChars: number;
 };
+export declare function isCronSystemEvent(evt: string): boolean;
 export type HeartbeatRunner = {
     stop: () => void;
     updateConfig: (cfg: OpenClawConfig) => void;

package/dist/plugin-sdk/infra/net/fetch-guard.d.ts

@@ -10,6 +10,7 @@ export type GuardedFetchOptions = {
     policy?: SsrFPolicy;
     lookupFn?: LookupFn;
     pinDns?: boolean;
+    auditContext?: string;
 };
 export type GuardedFetchResult = {
     response: Response;

package/dist/plugin-sdk/infra/net/ssrf.d.ts

@@ -8,6 +8,7 @@ export type LookupFn = typeof dnsLookup;
 export type SsrFPolicy = {
     allowPrivateNetwork?: boolean;
     allowedHostnames?: string[];
+    hostnameAllowlist?: string[];
 };
 export declare function isPrivateIpAddress(address: string): boolean;
 export declare function isBlockedHostname(hostname: string): boolean;

package/dist/plugin-sdk/infra/tailscale.d.ts

@@ -0,0 +1,34 @@
+import { promptYesNo } from "../cli/prompt.js";
+import { runExec } from "../process/exec.js";
+import { type RuntimeEnv } from "../runtime.js";
+/**
+ * Locate Tailscale binary using multiple strategies:
+ * 1. PATH lookup (via which command)
+ * 2. Known macOS app path
+ * 3. find /Applications for Tailscale.app
+ * 4. locate database (if available)
+ *
+ * @returns Path to Tailscale binary or null if not found
+ */
+export declare function findTailscaleBinary(): Promise<string | null>;
+export declare function getTailnetHostname(exec?: typeof runExec, detectedBinary?: string): Promise<string>;
+export declare function getTailscaleBinary(): Promise<string>;
+export declare function readTailscaleStatusJson(exec?: typeof runExec, opts?: {
+    timeoutMs?: number;
+}): Promise<Record<string, unknown>>;
+export declare function ensureGoInstalled(exec?: typeof runExec, prompt?: typeof promptYesNo, runtime?: RuntimeEnv): Promise<void>;
+export declare function ensureTailscaledInstalled(exec?: typeof runExec, prompt?: typeof promptYesNo, runtime?: RuntimeEnv): Promise<void>;
+export type TailscaleWhoisIdentity = {
+    login: string;
+    name?: string;
+};
+export declare function ensureFunnel(port: number, exec?: typeof runExec, runtime?: RuntimeEnv, prompt?: typeof promptYesNo): Promise<void>;
+export declare function enableTailscaleServe(port: number, exec?: typeof runExec): Promise<void>;
+export declare function disableTailscaleServe(exec?: typeof runExec): Promise<void>;
+export declare function enableTailscaleFunnel(port: number, exec?: typeof runExec): Promise<void>;
+export declare function disableTailscaleFunnel(exec?: typeof runExec): Promise<void>;
+export declare function readTailscaleWhoisIdentity(ip: string, exec?: typeof runExec, opts?: {
+    timeoutMs?: number;
+    cacheTtlMs?: number;
+    errorTtlMs?: number;
+}): Promise<TailscaleWhoisIdentity | null>;

package/dist/plugin-sdk/infra/tmp-openclaw-dir.d.ts

@@ -0,0 +1,10 @@
+export declare const POSIX_OPENCLAW_TMP_DIR = "/tmp/openclaw";
+type ResolvePreferredOpenClawTmpDirOptions = {
+    accessSync?: (path: string, mode?: number) => void;
+    statSync?: (path: string) => {
+        isDirectory(): boolean;
+    };
+    tmpdir?: () => string;
+};
+export declare function resolvePreferredOpenClawTmpDir(options?: ResolvePreferredOpenClawTmpDirOptions): string;
+export {};

package/dist/plugin-sdk/logging/console.d.ts

@@ -11,6 +11,7 @@ export declare function routeLogsToStderr(): void;
 export declare function setConsoleSubsystemFilter(filters?: string[] | null): void;
 export declare function setConsoleTimestampPrefix(enabled: boolean): void;
 export declare function shouldLogSubsystemToConsole(subsystem: string): boolean;
+export declare function formatConsoleTimestamp(style: ConsoleStyle): string;
 /**
  * Route console.* calls through file logging while still emitting to stdout/stderr.
  * This keeps user-facing output unchanged but guarantees every console call is captured in log files.

package/dist/plugin-sdk/logging/logger.d.ts

@@ -1,7 +1,7 @@
 import { Logger as TsLogger } from "tslog";
 import type { ConsoleStyle } from "./console.js";
 import { type LogLevel } from "./levels.js";
-export declare const DEFAULT_LOG_DIR = "/tmp/openclaw";
+export declare const DEFAULT_LOG_DIR: string;
 export declare const DEFAULT_LOG_FILE: string;
 export type LoggerSettings = {
     level?: LogLevel;

package/dist/plugin-sdk/logging/state.d.ts

@@ -8,6 +8,7 @@ export declare const loggingState: {
     consoleTimestampPrefix: boolean;
     consoleSubsystemFilter: string[] | null;
     resolvingConsoleSettings: boolean;
+    streamErrorHandlersInstalled: boolean;
     rawConsole: {
         log: typeof console.log;
         info: typeof console.info;

package/dist/plugin-sdk/markdown/ir.d.ts

@@ -1,5 +1,5 @@
 import type { MarkdownTableMode } from "../config/types.base.js";
-export type MarkdownStyle = "bold" | "italic" | "strikethrough" | "code" | "code_block" | "spoiler";
+export type MarkdownStyle = "bold" | "italic" | "strikethrough" | "code" | "code_block" | "spoiler" | "blockquote";
 export type MarkdownStyleSpan = {
     start: number;
     end: number;

package/dist/plugin-sdk/markdown/whatsapp.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Convert standard Markdown bold/italic/strikethrough to WhatsApp formatting.
+ *
+ * Order of operations matters:
+ * 1. Protect fenced code blocks (```...```) — already WhatsApp-compatible
+ * 2. Protect inline code (`...`) — leave as-is
+ * 3. Convert **bold** → *bold* and __bold__ → *bold*
+ * 4. Convert ~~strike~~ → ~strike~
+ * 5. Restore protected spans
+ *
+ * Italic *text* and _text_ are left alone since WhatsApp uses _text_ for italic
+ * and single * is already WhatsApp bold — no conversion needed for single markers.
+ */
+export declare function markdownToWhatsApp(text: string): string;

package/dist/plugin-sdk/media/input-files.d.ts

@@ -1,3 +1,4 @@
+import type { SsrFPolicy } from "../infra/net/ssrf.js";
 export type InputImageContent = {
     type: "image";
     data: string;
@@ -15,6 +16,7 @@ export type InputPdfLimits = {
 };
 export type InputFileLimits = {
     allowUrl: boolean;
+    urlAllowlist?: string[];
     allowedMimes: Set<string>;
     maxBytes: number;
     maxChars: number;
@@ -24,6 +26,7 @@ export type InputFileLimits = {
 };
 export type InputImageLimits = {
     allowUrl: boolean;
+    urlAllowlist?: string[];
     allowedMimes: Set<string>;
     maxBytes: number;
     maxRedirects: number;
@@ -68,6 +71,8 @@ export declare function fetchWithGuard(params: {
     maxBytes: number;
     timeoutMs: number;
     maxRedirects: number;
+    policy?: SsrFPolicy;
+    auditContext?: string;
 }): Promise<InputFetchResult>;
 export declare function extractImageContentFromSource(source: InputImageSource, limits: InputImageLimits): Promise<InputImageContent>;
 export declare function extractFileContentFromSource(params: {

package/dist/plugin-sdk/media-understanding/audio-preflight.d.ts

@@ -0,0 +1,16 @@
+import type { MsgContext } from "../auto-reply/templating.js";
+import type { OpenClawConfig } from "../config/config.js";
+import type { MediaUnderstandingProvider } from "./types.js";
+import { type ActiveMediaModel } from "./runner.js";
+/**
+ * Transcribes the first audio attachment BEFORE mention checking.
+ * This allows voice notes to be processed in group chats with requireMention: true.
+ * Returns the transcript or undefined if transcription fails or no audio is found.
+ */
+export declare function transcribeFirstAudio(params: {
+    ctx: MsgContext;
+    cfg: OpenClawConfig;
+    agentDir?: string;
+    providers?: Record<string, MediaUnderstandingProvider>;
+    activeModel?: ActiveMediaModel;
+}): Promise<string | undefined>;

package/dist/plugin-sdk/media-understanding/types.d.ts

@@ -5,6 +5,7 @@ export type MediaAttachment = {
     url?: string;
     mime?: string;
     index: number;
+    alreadyTranscribed?: boolean;
 };
 export type MediaUnderstandingOutput = {
     kind: MediaUnderstandingKind;

package/dist/plugin-sdk/memory/backend-config.d.ts

@@ -1,6 +1,6 @@
 import type { OpenClawConfig } from "../config/config.js";
 import type { SessionSendPolicyConfig } from "../config/types.base.js";
-import type { MemoryBackend, MemoryCitationsMode } from "../config/types.memory.js";
+import type { MemoryBackend, MemoryCitationsMode, MemoryQmdSearchMode } from "../config/types.memory.js";
 export type ResolvedMemoryBackendConfig = {
     backend: MemoryBackend;
     citations: MemoryCitationsMode;
@@ -35,6 +35,7 @@ export type ResolvedQmdSessionConfig = {
 };
 export type ResolvedQmdConfig = {
     command: string;
+    searchMode: MemoryQmdSearchMode;
     collections: ResolvedQmdCollection[];
     sessions: ResolvedQmdSessionConfig;
     update: ResolvedQmdUpdateConfig;

package/dist/plugin-sdk/memory/qmd-manager.d.ts

@@ -89,7 +89,9 @@ export declare class QmdMemoryManager implements MemorySearchManager {
     private clampResultsByInjectedChars;
     private shouldSkipUpdate;
     private isSqliteBusyError;
+    private isUnsupportedQmdOptionError;
     private createQmdBusyError;
     private waitForPendingUpdateBeforeSearch;
     private buildCollectionFilterArgs;
+    private buildSearchArgs;
 }

package/dist/plugin-sdk/memory/qmd-query-parser.d.ts

@@ -0,0 +1,8 @@
+export type QmdQueryResult = {
+    docid?: string;
+    score?: number;
+    file?: string;
+    snippet?: string;
+    body?: string;
+};
+export declare function parseQmdQueryJson(stdout: string, stderr: string): QmdQueryResult[];

package/dist/plugin-sdk/process/command-queue.d.ts

@@ -10,3 +10,19 @@ export declare function enqueueCommand<T>(task: () => Promise<T>, opts?: {
 export declare function getQueueSize(lane?: string): number;
 export declare function getTotalQueueSize(): number;
 export declare function clearCommandLane(lane?: string): number;
+/**
+ * Returns the total number of actively executing tasks across all lanes
+ * (excludes queued-but-not-started entries).
+ */
+export declare function getActiveTaskCount(): number;
+/**
+ * Wait for all currently active tasks across all lanes to finish.
+ * Polls at a short interval; resolves when no tasks are active or
+ * when `timeoutMs` elapses (whichever comes first).
+ *
+ * New tasks enqueued after this call are ignored — only tasks that are
+ * already executing are waited on.
+ */
+export declare function waitForActiveTasks(timeoutMs: number): Promise<{
+    drained: boolean;
+}>;

package/dist/plugin-sdk/routing/resolve-route.d.ts

@@ -15,6 +15,8 @@ export type ResolveAgentRouteInput = {
     parentPeer?: RoutePeer | null;
     guildId?: string | null;
     teamId?: string | null;
+    /** Discord member role IDs — used for role-based agent routing. */
+    memberRoleIds?: string[];
 };
 export type ResolvedAgentRoute = {
     agentId: string;
@@ -25,7 +27,7 @@ export type ResolvedAgentRoute = {
     /** Convenience alias for direct-chat collapse. */
     mainSessionKey: string;
     /** Match description for debugging/logging. */
-    matchedBy: "binding.peer" | "binding.peer.parent" | "binding.guild" | "binding.team" | "binding.account" | "binding.channel" | "default";
+    matchedBy: "binding.peer" | "binding.peer.parent" | "binding.guild+roles" | "binding.guild" | "binding.team" | "binding.account" | "binding.channel" | "default";
 };
 export { DEFAULT_ACCOUNT_ID, DEFAULT_AGENT_ID } from "./session-key.js";
 export declare function buildAgentSessionKey(params: {

package/dist/plugin-sdk/security/external-content.d.ts

@@ -11,7 +11,7 @@
  * Check if content contains suspicious patterns that may indicate injection.
  */
 export declare function detectSuspiciousPatterns(content: string): string[];
-export type ExternalContentSource = "email" | "webhook" | "api" | "channel_metadata" | "web_search" | "web_fetch" | "unknown";
+export type ExternalContentSource = "email" | "webhook" | "api" | "browser" | "channel_metadata" | "web_search" | "web_fetch" | "unknown";
 export type WrapExternalContentOptions = {
     /** Source of the external content */
     source: ExternalContentSource;

package/dist/plugin-sdk/security/secret-equal.d.ts

@@ -0,0 +1 @@
+export declare function safeEqualSecret(provided: string | undefined | null, expected: string | undefined | null): boolean;

package/dist/plugin-sdk/sessions/input-provenance.d.ts

@@ -0,0 +1,16 @@
+import type { AgentMessage } from "@mariozechner/pi-agent-core";
+export declare const INPUT_PROVENANCE_KIND_VALUES: readonly ["external_user", "inter_session", "internal_system"];
+export type InputProvenanceKind = (typeof INPUT_PROVENANCE_KIND_VALUES)[number];
+export type InputProvenance = {
+    kind: InputProvenanceKind;
+    sourceSessionKey?: string;
+    sourceChannel?: string;
+    sourceTool?: string;
+};
+export declare function normalizeInputProvenance(value: unknown): InputProvenance | undefined;
+export declare function applyInputProvenanceToUserMessage(message: AgentMessage, inputProvenance: InputProvenance | undefined): AgentMessage;
+export declare function isInterSessionInputProvenance(value: unknown): boolean;
+export declare function hasInterSessionUserProvenance(message: {
+    role?: unknown;
+    provenance?: unknown;
+} | undefined): boolean;

package/dist/plugin-sdk/signal/monitor/event-handler.types.d.ts

@@ -16,10 +16,18 @@ export type SignalEnvelope = {
     syncMessage?: unknown;
     reactionMessage?: SignalReactionMessage | null;
 };
+export type SignalMention = {
+    name?: string | null;
+    number?: string | null;
+    uuid?: string | null;
+    start?: number | null;
+    length?: number | null;
+};
 export type SignalDataMessage = {
     timestamp?: number;
     message?: string | null;
     attachments?: Array<SignalAttachment>;
+    mentions?: Array<SignalMention> | null;
     groupInfo?: {
         groupId?: string | null;
         groupName?: string | null;

package/dist/plugin-sdk/signal/monitor/mentions.d.ts

@@ -0,0 +1,2 @@
+import type { SignalMention } from "./event-handler.types.js";
+export declare function renderSignalMentions(message: string, mentions?: SignalMention[] | null): string;

package/dist/plugin-sdk/slack/monitor/commands.d.ts

@@ -1,4 +1,9 @@
 import type { SlackSlashCommandConfig } from "../../config/config.js";
+/**
+ * Strip Slack mentions (<@U123>, <@U123|name>) so command detection works on
+ * normalized text. Use in both prepare and debounce gate for consistency.
+ */
+export declare function stripSlackMentionsForCommandDetection(text: string): string;
 export declare function normalizeSlackSlashCommandName(raw: string): string;
 export declare function resolveSlackSlashCommandConfig(raw?: SlackSlashCommandConfig): Required<SlackSlashCommandConfig>;
 export declare function buildSlackSlashCommandMatcher(name: string): RegExp;

package/dist/plugin-sdk/telegram/bot-message-context.d.ts

@@ -1,4 +1,5 @@
 import type { Bot } from "grammy";
+import type { MsgContext } from "../auto-reply/templating.js";
 import type { OpenClawConfig } from "../config/config.js";
 import type { DmPolicy, TelegramGroupConfig, TelegramTopicConfig } from "../config/types.js";
 import type { StickerMetadata, TelegramContext } from "./bot/types.js";
@@ -106,7 +107,7 @@ export declare const buildTelegramMessageContext: ({ primaryCtx, allMedia, store
         MediaUrls: string[] | undefined;
         MediaTypes: string[] | undefined;
         Sticker: StickerMetadata | undefined;
-    } & Omit<import("../auto-reply/templating.ts").MsgContext, "CommandAuthorized"> & {
+    } & Omit<MsgContext, "CommandAuthorized"> & {
         CommandAuthorized: boolean;
     };
     primaryCtx: TelegramContext;

package/dist/plugin-sdk/telegram/send.d.ts

@@ -46,6 +46,9 @@ export declare function buildInlineKeyboard(buttons?: TelegramSendOpts["buttons"
 export declare function sendMessageTelegram(to: string, text: string, opts?: TelegramSendOpts): Promise<TelegramSendResult>;
 export declare function reactMessageTelegram(chatIdInput: string | number, messageIdInput: string | number, emoji: string, opts?: TelegramReactionOpts): Promise<{
     ok: true;
+} | {
+    ok: false;
+    warning: string;
 }>;
 type TelegramDeleteOpts = {
     token?: string;

package/dist/plugin-sdk/web/media.d.ts

@@ -9,9 +9,11 @@ export type WebMediaResult = {
 };
 export declare function loadWebMedia(mediaUrl: string, maxBytes?: number, options?: {
     ssrfPolicy?: SsrFPolicy;
+    localRoots?: string[] | "any";
 }): Promise<WebMediaResult>;
 export declare function loadWebMediaRaw(mediaUrl: string, maxBytes?: number, options?: {
     ssrfPolicy?: SsrFPolicy;
+    localRoots?: string[] | "any";
 }): Promise<WebMediaResult>;
 export declare function optimizeImageToJpeg(buffer: Buffer, maxBytes: number, opts?: {
     contentType?: string;

package/dist/{plugins-Db5BiELK.js → plugins-4Hqd1WGf.js}

@@ -1,7 +1,7 @@
-import { Q as CHAT_CHANNEL_ORDER, ct as requireActivePluginRegistry, it as normalizeAnyChannelId, n as isTruthyEnvValue, ot as normalizeChatChannelId } from "./entry.js";
+import { ct as normalizeChatChannelId, et as CHAT_CHANNEL_ORDER, n as isTruthyEnvValue, ot as normalizeAnyChannelId, ut as requireActivePluginRegistry } from "./entry.js";
 import { c as normalizeAccountId, l as normalizeAgentId, t as DEFAULT_ACCOUNT_ID } from "./session-key-DVvxnFKg.js";
-import { m as normalizeE164 } from "./utils-Dk86IbEs.js";
-import { c as resolveDefaultAgentId } from "./agent-scope-DQuy3dwI.js";
+import { m as normalizeE164 } from "./utils-BLJAc3ZV.js";
+import { c as resolveDefaultAgentId } from "./agent-scope-CsRbLH4l.js";
 import fs from "node:fs";
 
 //#region src/discord/token.ts

package/dist/{plugins-CNaHNND_.js → plugins-X7d_tfTE.js}

@@ -1,8 +1,8 @@
-import { S as normalizeChatChannelId, b as normalizeAnyChannelId, m as CHAT_CHANNEL_ORDER, w as requireActivePluginRegistry } from "./subsystem-Bh1Y_6Uv.js";
-import { h as normalizeE164 } from "./utils-es4ygvQ-.js";
+import { S as normalizeChatChannelId, b as normalizeAnyChannelId, m as CHAT_CHANNEL_ORDER, w as requireActivePluginRegistry } from "./subsystem-BoExtIHo.js";
+import { h as normalizeE164 } from "./utils-Cd9QdCHh.js";
 import { c as normalizeAccountId, l as normalizeAgentId, t as DEFAULT_ACCOUNT_ID } from "./session-key-BWxPj0z_.js";
-import { c as resolveDefaultAgentId } from "./agent-scope-CGmuusG9.js";
-import { t as isTruthyEnvValue } from "./env-BxRc6wWv.js";
+import { c as resolveDefaultAgentId } from "./agent-scope-CQCus0rI.js";
+import { t as isTruthyEnvValue } from "./env-ONzUVAG2.js";
 import fs from "node:fs";
 
 //#region src/channels/chat-type.ts