activeclaw 2026.2.12 → 2026.2.13

package/dist/{pi-embedded-helpers-CmftU5Zj.js → pi-embedded-helpers-CMKLjW6X.js}

@@ -1,6 +1,6 @@
-import { t as createSubsystemLogger } from "./subsystem-Bv7dGhES.js";
-import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-BW8Xnkw1.js";
-import { o as resizeToJpeg, r as getImageMetadata } from "./routes-82Ywfho6.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-Bhjnh1Xg.js";
+import { o as resizeToJpeg, r as getImageMetadata } from "./routes-CmOI1hIH.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { createHash } from "node:crypto";
@@ -353,19 +353,22 @@ function isContextOverflowError(errorMessage) {
 	return lower.includes("request_too_large") || lower.includes("request exceeds the maximum size") || lower.includes("context length exceeded") || lower.includes("maximum context length") || lower.includes("prompt is too long") || lower.includes("exceeds model context window") || hasRequestSizeExceeds && hasContextWindow || lower.includes("context overflow:") || lower.includes("413") && lower.includes("too large");
 }
 const CONTEXT_WINDOW_TOO_SMALL_RE = /context window.*(too small|minimum is)/i;
-const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|(?:prompt|request|input).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|prompt.*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:request|input).*(?:context|window|length|token).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const RATE_LIMIT_HINT_RE = /rate limit|too many requests|requests per (?:minute|hour|day)|quota|throttl|429\b/i;
 function isLikelyContextOverflowError(errorMessage) {
 	if (!errorMessage) return false;
 	if (CONTEXT_WINDOW_TOO_SMALL_RE.test(errorMessage)) return false;
 	if (isRateLimitErrorMessage(errorMessage)) return false;
 	if (isContextOverflowError(errorMessage)) return true;
+	if (RATE_LIMIT_HINT_RE.test(errorMessage)) return false;
 	return CONTEXT_OVERFLOW_HINT_RE.test(errorMessage);
 }
 function isCompactionFailureError(errorMessage) {
 	if (!errorMessage) return false;
 	const lower = errorMessage.toLowerCase();
 	if (!(lower.includes("summarization failed") || lower.includes("auto-compaction") || lower.includes("compaction failed") || lower.includes("compaction"))) return false;
-	return isContextOverflowError(errorMessage) || lower.includes("context overflow");
+	if (isLikelyContextOverflowError(errorMessage)) return true;
+	return lower.includes("context overflow");
 }
 const ERROR_PAYLOAD_PREFIX_RE = /^(?:error|api\s*error|apierror|openai\s*error|anthropic\s*error|gateway\s*error)[:\s-]+/i;
 const FINAL_TAG_RE = /<\s*\/?\s*final\s*>/gi;

package/dist/{pi-embedded-helpers-CfXnSIFx.js → pi-embedded-helpers-CUzTc1v6.js}

@@ -1,12 +1,12 @@
 import { i as resolveGatewayPort, t as STATE_DIR } from "./paths-rb94mUrR.js";
-import { C as resolveOpenClawPackageRootSync, D as buildAgentMainSessionKey, M as normalizeAgentId, N as normalizeMainKey, P as resolveAgentIdFromSessionKey, T as DEFAULT_AGENT_ID, _ as DEFAULT_TOOLS_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, g as DEFAULT_SOUL_FILENAME, h as DEFAULT_IDENTITY_FILENAME, j as normalizeAccountId$1, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_USER_FILENAME, w as DEFAULT_ACCOUNT_ID, y as ensureAgentWorkspace } from "./agent-scope-CN8DM4Xb.js";
-import { C as CONFIG_DIR, I as resolveConfigDir, O as escapeRegExp, P as normalizeE164, R as resolveUserPath, _ as normalizeAnyChannelId, b as getActivePluginRegistry, g as getChatChannelMeta, h as CHAT_CHANNEL_ORDER, l as createSubsystemLogger, m as CHANNEL_IDS, n as runExec, u as defaultRuntime, x as requireActivePluginRegistry, y as normalizeChatChannelId } from "./exec-D12IZYtJ.js";
-import { O as isTruthyEnvValue, k as parseBooleanValue } from "./model-selection-B9Y7dKQd.js";
+import { C as resolveOpenClawPackageRootSync, D as buildAgentMainSessionKey, M as normalizeAgentId, N as normalizeMainKey, P as resolveAgentIdFromSessionKey, T as DEFAULT_AGENT_ID, _ as DEFAULT_TOOLS_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, g as DEFAULT_SOUL_FILENAME, h as DEFAULT_IDENTITY_FILENAME, j as normalizeAccountId$1, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_USER_FILENAME, w as DEFAULT_ACCOUNT_ID, y as ensureAgentWorkspace } from "./agent-scope-DPIFau3f.js";
+import { C as CONFIG_DIR, I as resolveConfigDir, O as escapeRegExp, P as normalizeE164, R as resolveUserPath, _ as normalizeAnyChannelId, at as resolvePreferredOpenClawTmpDir, b as getActivePluginRegistry, g as getChatChannelMeta, h as CHAT_CHANNEL_ORDER, l as createSubsystemLogger, m as CHANNEL_IDS, n as runExec, u as defaultRuntime, x as requireActivePluginRegistry, y as normalizeChatChannelId } from "./exec-CJFFoM7H.js";
+import { O as isTruthyEnvValue, k as parseBooleanValue } from "./model-selection-C1GmkTAV.js";
 import { t as formatCliCommand } from "./command-format-CFzL448l.js";
-import { b as resolveMemorySlotDecision, d as parseDurationMs, g as MANIFEST_KEY, h as LEGACY_MANIFEST_KEYS, i as writeConfigFile, j as resolveWhatsAppAccount, o as parseByteSize, p as loadPluginManifestRegistry, t as loadConfig, v as normalizePluginsConfig, y as resolveEnableState } from "./config-D50SQVar.js";
-import { A as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, C as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, D as DEFAULT_BROWSER_EVALUATE_ENABLED, E as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, O as DEFAULT_OPENCLAW_BROWSER_COLOR, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, a as resolveOpenClawUserDataDir, b as isLoopbackHost, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, h as getHeadersWithAuth, i as launchOpenClawChrome, k as DEFAULT_OPENCLAW_BROWSER_ENABLED, l as createTargetViaCdp, n as isChromeCdpReady, o as stopOpenClawChrome, p as appendCdpPath, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as stopChromeExtensionRelayServer, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-BCPPeLQ6.js";
+import { b as resolveMemorySlotDecision, d as parseDurationMs, g as MANIFEST_KEY, h as LEGACY_MANIFEST_KEYS, i as writeConfigFile, j as resolveWhatsAppAccount, o as parseByteSize, p as loadPluginManifestRegistry, t as loadConfig, v as normalizePluginsConfig, y as resolveEnableState } from "./config-QYrbd7x7.js";
+import { A as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, C as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, D as DEFAULT_BROWSER_EVALUATE_ENABLED, E as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, O as DEFAULT_OPENCLAW_BROWSER_COLOR, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, a as resolveOpenClawUserDataDir, b as isLoopbackHost, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, h as getHeadersWithAuth, i as launchOpenClawChrome, k as DEFAULT_OPENCLAW_BROWSER_ENABLED, l as createTargetViaCdp, n as isChromeCdpReady, o as stopOpenClawChrome, p as appendCdpPath, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as stopChromeExtensionRelayServer, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-DL0avO8n.js";
 import { n as formatErrorMessage, t as extractErrorCode } from "./errors-dpUbQseI.js";
-import { r as resolveSessionTranscriptPath, t as resolveDefaultSessionStorePath } from "./paths-CB2fqqbX.js";
+import { n as resolveSessionFilePath, t as resolveDefaultSessionStorePath } from "./paths-D0O87MfH.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-BrkSiEN9.js";
 import path from "node:path";
 import fs from "node:fs";
@@ -1679,6 +1679,83 @@ function applySkillEnvOverridesFromSnapshot(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/sandbox-paths.ts
+const UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
+function normalizeUnicodeSpaces(str) {
+	return str.replace(UNICODE_SPACES, " ");
+}
+function expandPath(filePath) {
+	const normalized = normalizeUnicodeSpaces(filePath);
+	if (normalized === "~") return os.homedir();
+	if (normalized.startsWith("~/")) return os.homedir() + normalized.slice(1);
+	return normalized;
+}
+function resolveToCwd(filePath, cwd) {
+	const expanded = expandPath(filePath);
+	if (path.isAbsolute(expanded)) return expanded;
+	return path.resolve(cwd, expanded);
+}
+function resolveSandboxPath(params) {
+	const resolved = resolveToCwd(params.filePath, params.cwd);
+	const rootResolved = path.resolve(params.root);
+	const relative = path.relative(rootResolved, resolved);
+	if (!relative || relative === "") return {
+		resolved,
+		relative: ""
+	};
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`Path escapes sandbox root (${shortPath(rootResolved)}): ${params.filePath}`);
+	return {
+		resolved,
+		relative
+	};
+}
+async function assertSandboxPath(params) {
+	const resolved = resolveSandboxPath(params);
+	await assertNoSymlink(resolved.relative, path.resolve(params.root));
+	return resolved;
+}
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
+async function assertNoSymlink(relative, root) {
+	if (!relative) return;
+	const parts = relative.split(path.sep).filter(Boolean);
+	let current = root;
+	for (const part of parts) {
+		current = path.join(current, part);
+		try {
+			if ((await fs$1.lstat(current)).isSymbolicLink()) throw new Error(`Symlink not allowed in sandbox path: ${current}`);
+		} catch (err) {
+			if (err.code === "ENOENT") return;
+			throw err;
+		}
+	}
+}
+function shortPath(value) {
+	if (value.startsWith(os.homedir())) return `~${value.slice(os.homedir().length)}`;
+	return value;
+}
+
 //#endregion
 //#region src/agents/skills/bundled-dir.ts
 function looksLikeSkillsDir(dir) {
@@ -1922,6 +1999,36 @@ function resolveSkillsPromptForRun(params) {
 function loadWorkspaceSkillEntries(workspaceDir, opts) {
 	return loadSkillEntries(workspaceDir, opts);
 }
+function resolveUniqueSyncedSkillDirName(base, used) {
+	if (!used.has(base)) {
+		used.add(base);
+		return base;
+	}
+	for (let index = 2; index < 1e4; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!used.has(candidate)) {
+			used.add(candidate);
+			return candidate;
+		}
+	}
+	let fallbackIndex = 1e4;
+	let fallback = `${base}-${fallbackIndex}`;
+	while (used.has(fallback)) {
+		fallbackIndex += 1;
+		fallback = `${base}-${fallbackIndex}`;
+	}
+	used.add(fallback);
+	return fallback;
+}
+function resolveSyncedSkillDestinationPath(params) {
+	const sourceDirName = path.basename(params.entry.skill.baseDir).trim();
+	if (!sourceDirName || sourceDirName === "." || sourceDirName === "..") return null;
+	return resolveSandboxPath({
+		filePath: resolveUniqueSyncedSkillDirName(sourceDirName, params.usedDirNames),
+		cwd: params.targetSkillsDir,
+		root: params.targetSkillsDir
+	}).resolved;
+}
 async function syncSkillsToWorkspace(params) {
 	const sourceDir = resolveUserPath(params.sourceWorkspaceDir);
 	const targetDir = resolveUserPath(params.targetWorkspaceDir);
@@ -1938,8 +2045,24 @@ async function syncSkillsToWorkspace(params) {
 			force: true
 		});
 		await fsp.mkdir(targetSkillsDir, { recursive: true });
+		const usedDirNames = /* @__PURE__ */ new Set();
 		for (const entry of entries) {
-			const dest = path.join(targetSkillsDir, entry.skill.name);
+			let dest = null;
+			try {
+				dest = resolveSyncedSkillDestinationPath({
+					targetSkillsDir,
+					entry,
+					usedDirNames
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: ${message}`);
+				continue;
+			}
+			if (!dest) {
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: invalid source directory name`);
+				continue;
+			}
 			try {
 				await fsp.cp(entry.skill.baseDir, dest, {
 					recursive: true,
@@ -2052,7 +2175,7 @@ function isModuleNotFoundError(err) {
 }
 async function loadPwAiModule(mode) {
 	try {
-		return await import("./pw-ai-CWrnJ98b.js");
+		return await import("./pw-ai-sS1fRKW_.js");
 	} catch (err) {
 		if (mode === "soft") return null;
 		if (isModuleNotFoundError(err)) return null;
@@ -2609,6 +2732,7 @@ function registerBrowserAgentActRoutes(app, ctx) {
 
 //#endregion
 //#region src/browser/routes/agent.debug.ts
+const DEFAULT_TRACE_DIR = resolvePreferredOpenClawTmpDir();
 function registerBrowserAgentDebugRoutes(app, ctx) {
 	app.get("/console", async (req, res) => {
 		const profileCtx = resolveProfileContext(req, res, ctx);
@@ -2719,7 +2843,7 @@ function registerBrowserAgentDebugRoutes(app, ctx) {
 			const pw = await requirePwAi(res, "trace stop");
 			if (!pw) return;
 			const id = crypto.randomUUID();
-			const dir = "/tmp/openclaw";
+			const dir = DEFAULT_TRACE_DIR;
 			await fs$1.mkdir(dir, { recursive: true });
 			const tracePath = out.trim() || path.join(dir, `browser-trace-${id}.zip`);
 			await pw.traceStopViaPlaywright({
@@ -2762,6 +2886,22 @@ function normalizeHostnameSet(values) {
 	if (!values || values.length === 0) return /* @__PURE__ */ new Set();
 	return new Set(values.map((value) => normalizeHostname(value)).filter(Boolean));
 }
+function normalizeHostnameAllowlist(values) {
+	if (!values || values.length === 0) return [];
+	return Array.from(new Set(values.map((value) => normalizeHostname(value)).filter((value) => value !== "*" && value !== "*." && value.length > 0)));
+}
+function isHostnameAllowedByPattern(hostname, pattern) {
+	if (pattern.startsWith("*.")) {
+		const suffix = pattern.slice(2);
+		if (!suffix || hostname === suffix) return false;
+		return hostname.endsWith(`.${suffix}`);
+	}
+	return hostname === pattern;
+}
+function matchesHostnameAllowlist(hostname, allowlist) {
+	if (allowlist.length === 0) return true;
+	return allowlist.some((pattern) => isHostnameAllowedByPattern(hostname, pattern));
+}
 function parseIpv4(address) {
 	const parts = address.split(".");
 	if (parts.length !== 4) return null;
@@ -2862,7 +3002,10 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 	const normalized = normalizeHostname(hostname);
 	if (!normalized) throw new Error("Invalid hostname");
 	const allowPrivateNetwork = Boolean(params.policy?.allowPrivateNetwork);
-	const isExplicitAllowed = normalizeHostnameSet(params.policy?.allowedHostnames).has(normalized);
+	const allowedHostnames = normalizeHostnameSet(params.policy?.allowedHostnames);
+	const hostnameAllowlist = normalizeHostnameAllowlist(params.policy?.hostnameAllowlist);
+	const isExplicitAllowed = allowedHostnames.has(normalized);
+	if (!matchesHostnameAllowlist(normalized, hostnameAllowlist)) throw new SsrFBlockedError(`Blocked hostname (not in allowlist): ${hostname}`);
 	if (!allowPrivateNetwork && !isExplicitAllowed) {
 		if (isBlockedHostname(normalized)) throw new SsrFBlockedError(`Blocked hostname: ${hostname}`);
 		if (isPrivateIpAddress(normalized)) throw new SsrFBlockedError("Blocked: private/internal IP address");
@@ -2883,9 +3026,6 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 		})
 	};
 }
-async function resolvePinnedHostname(hostname, lookupFn = lookup$1) {
-	return await resolvePinnedHostnameWithPolicy(hostname, { lookupFn });
-}
 function createPinnedDispatcher(pinned) {
 	return new Agent({ connect: { lookup: pinned.lookup } });
 }
@@ -4874,11 +5014,11 @@ function createProfileContext(opts, profile) {
 		const userDataDir = resolveOpenClawUserDataDir(profile.name);
 		const profileState = getProfileState();
 		if (await isHttpReachable(300) && !profileState.running) try {
-			await (await import("./pw-ai-CWrnJ98b.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-sS1fRKW_.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (profileState.running) await stopRunningBrowser();
 		try {
-			await (await import("./pw-ai-CWrnJ98b.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-sS1fRKW_.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (!fs.existsSync(userDataDir)) return {
 			moved: false,
@@ -7314,7 +7454,15 @@ async function appendAssistantMessageToSessionTranscript(params) {
 		ok: false,
 		reason: `unknown sessionKey: ${sessionKey}`
 	};
-	const sessionFile = entry.sessionFile?.trim() || resolveSessionTranscriptPath(entry.sessionId, params.agentId);
+	let sessionFile;
+	try {
+		sessionFile = resolveSessionFilePath(entry.sessionId, entry, { sessionsDir: path.dirname(storePath) });
+	} catch (err) {
+		return {
+			ok: false,
+			reason: err instanceof Error ? err.message : String(err)
+		};
+	}
 	await ensureSessionHeader({
 		sessionFile,
 		sessionId: entry.sessionId
@@ -7584,19 +7732,22 @@ function isContextOverflowError(errorMessage) {
 	return lower.includes("request_too_large") || lower.includes("request exceeds the maximum size") || lower.includes("context length exceeded") || lower.includes("maximum context length") || lower.includes("prompt is too long") || lower.includes("exceeds model context window") || hasRequestSizeExceeds && hasContextWindow || lower.includes("context overflow:") || lower.includes("413") && lower.includes("too large");
 }
 const CONTEXT_WINDOW_TOO_SMALL_RE = /context window.*(too small|minimum is)/i;
-const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|(?:prompt|request|input).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|prompt.*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:request|input).*(?:context|window|length|token).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const RATE_LIMIT_HINT_RE = /rate limit|too many requests|requests per (?:minute|hour|day)|quota|throttl|429\b/i;
 function isLikelyContextOverflowError(errorMessage) {
 	if (!errorMessage) return false;
 	if (CONTEXT_WINDOW_TOO_SMALL_RE.test(errorMessage)) return false;
 	if (isRateLimitErrorMessage(errorMessage)) return false;
 	if (isContextOverflowError(errorMessage)) return true;
+	if (RATE_LIMIT_HINT_RE.test(errorMessage)) return false;
 	return CONTEXT_OVERFLOW_HINT_RE.test(errorMessage);
 }
 function isCompactionFailureError(errorMessage) {
 	if (!errorMessage) return false;
 	const lower = errorMessage.toLowerCase();
 	if (!(lower.includes("summarization failed") || lower.includes("auto-compaction") || lower.includes("compaction failed") || lower.includes("compaction"))) return false;
-	return isContextOverflowError(errorMessage) || lower.includes("context overflow");
+	if (isLikelyContextOverflowError(errorMessage)) return true;
+	return lower.includes("context overflow");
 }
 const ERROR_PAYLOAD_PREFIX_RE = /^(?:error|api\s*error|apierror|openai\s*error|anthropic\s*error|gateway\s*error)[:\s-]+/i;
 const FINAL_TAG_RE = /<\s*\/?\s*final\s*>/gi;
@@ -8794,4 +8945,4 @@ function validateAnthropicTurns(messages) {
 }
 
 //#endregion
-export { updateLastRoute as $, expandPolicyWithPluginGroups as $t, isBillingAssistantError as A, resolveSignalAccount as An, convertHeicToJpeg as At, isTransientHttpError as B, listBindings as Bn, resolvePinnedHostname as Bt, BILLING_ERROR_USER_MESSAGE as C, isAudioFileName as Cn, resolveChannelGroupToolsPolicy as Ct, formatRawAssistantErrorForUi as D, maxBytesForKind as Dn, registerBrowserRoutes as Dt, formatBillingErrorMessage as E, MAX_IMAGE_BYTES$1 as En, createBrowserRouteContext as Et, isFailoverErrorMessage as F, normalizeWhatsAppTarget as Fn, getMediaDir as Ft, resolveSandboxContext as G, listEnabledDiscordAccounts as Gn, resolveSkillsPromptForRun as Gt, parseImageSizeError as H, resolveSlackAppToken as Hn, buildWorkspaceSkillCommandSpecs as Ht, isLikelyContextOverflowError as I, listEnabledTelegramAccounts as In, saveMediaBuffer as It, resolveMirroredTranscriptText as J, applySkillEnvOverridesFromSnapshot as Jt, resolveSandboxRuntimeStatus as K, resolveDiscordAccount as Kn, resolvePluginSkillDirs as Kt, isRateLimitAssistantError as L, listTelegramAccountIds as Ln, SsrFBlockedError as Lt, isCompactionFailureError as M, listChannelPlugins as Mn, hasAlphaChannel as Mt, isContextOverflowError as N, normalizeChannelId as Nn, optimizeImageToPng as Nt, getApiErrorPayloadFingerprint as O, mediaKindFromMime as On, resolveBrowserConfig as Ot, isFailoverAssistantError as P, isWhatsAppGroupJid as Pn, resizeToJpeg as Pt, saveSessionStore as Q, collectExplicitAllowlist as Qt, isRawApiErrorPayload as R, resolveTelegramAccount as Rn, closeDispatcher as Rt, isGoogleModelApi as S, imageMimeFromFormat as Sn, resolveChannelGroupRequireMention as St, formatAssistantErrorText as T, kindFromMime as Tn, resolveGroupSessionKey as Tt, sanitizeUserFacingText as U, resolveSlackBotToken as Un, buildWorkspaceSkillSnapshot as Ut, parseImageDimensionError as V, resolveSlackAccount as Vn, resolvePinnedHostnameWithPolicy as Vt, ensureSandboxWorkspaceForSession as W, normalizeChatType as Wn, loadWorkspaceSkillEntries as Wt, readSessionUpdatedAt as X, applyOwnerOnlyToolPolicy as Xt, loadSessionStore as Y, resolveSandboxConfigForAgent as Yt, recordSessionMetaFromInbound as Z, buildPluginToolGroups as Zt, sanitizeSessionMessagesImages as _, GATEWAY_CLIENT_MODES as _n, deriveSessionMetaPatch as _t, formatXHighModelHint as a, ensureSessionHeader$1 as an, deliveryContextKey as at, downgradeOpenAIReasoningBlocks as b, extensionForMime as bn, resolveIMessageAccount as bt, normalizeReasoningLevel as c, INTERNAL_MESSAGE_CHANNEL as cn, normalizeSessionDeliveryFields as ct, normalizeVerboseLevel as d, isMarkdownCapableMessageChannel as dn, resolveChannelResetConfig as dt, expandToolGroups as en, updateSessionStore as et, resolveResponseUsageMode as f, listDeliverableMessageChannels as fn, resolveSessionResetPolicy as ft, normalizeTextForComparison as g, GATEWAY_CLIENT_IDS as gn, resolveMainSessionKey as gt, isMessagingToolDuplicateNormalized as h, resolveMessageChannel as hn, DEFAULT_RESET_TRIGGERS as ht, formatThinkingLevels as i, buildBootstrapContextFiles as in, deliveryContextFromSession as it, isCloudCodeAssistFormatError as j, getChannelPlugin as jn, getImageMetadata as jt, isAuthAssistantError as k, listEnabledSignalAccounts as kn, resolveProfile as kt, normalizeThinkLevel as l, isDeliverableMessageChannel as ln, resolveSessionKey as lt, isMessagingToolDuplicate as m, resolveGatewayMessageChannel as mn, resolveThreadFlag as mt, validateGeminiTurns as n, resolveToolProfilePolicy as nn, isCacheEnabled as nt, listThinkingLevels as o, resolveBootstrapMaxChars as on, mergeDeliveryContext as ot, supportsXHighThinking as p, normalizeMessageChannel as pn, resolveSessionResetType as pt, appendAssistantMessageToSessionTranscript as q, normalizeDiscordToken as qn, applySkillEnvOverrides as qt, pickFallbackThinkingLevel as r, stripPluginOnlyAllowlist as rn, resolveCacheTtlMs as rt, normalizeElevatedLevel as s, sanitizeGoogleTurnOrdering as sn, normalizeDeliveryContext as st, validateAnthropicTurns as t, normalizeToolName as tn, updateSessionStoreEntry as tt, normalizeUsageDisplay as u, isInternalMessageChannel as un, evaluateSessionFreshness as ut, sanitizeImageBlocks as v, GATEWAY_CLIENT_NAMES as vn, getChannelDock as vt, classifyFailoverReason as w, isGifMedia as wn, resolveConversationLabel as wt, isAntigravityClaude as x, getFileExtension as xn, resolveChannelGroupPolicy as xt, sanitizeToolResultImages as y, detectMime as yn, listChannelDocks as yt, isTimeoutErrorMessage as z, resolveTelegramToken as zn, createPinnedDispatcher as zt };
+export { updateLastRoute as $, buildPluginToolGroups as $t, isBillingAssistantError as A, mediaKindFromMime as An, convertHeicToJpeg as At, isTransientHttpError as B, resolveTelegramAccount as Bn, resolvePinnedHostnameWithPolicy as Bt, BILLING_ERROR_USER_MESSAGE as C, getFileExtension as Cn, resolveChannelGroupToolsPolicy as Ct, formatRawAssistantErrorForUi as D, kindFromMime as Dn, registerBrowserRoutes as Dt, formatBillingErrorMessage as E, isGifMedia as En, createBrowserRouteContext as Et, isFailoverErrorMessage as F, normalizeChannelId as Fn, getMediaDir as Ft, resolveSandboxContext as G, resolveSlackBotToken as Gn, resolvePluginSkillDirs as Gt, parseImageSizeError as H, listBindings as Hn, buildWorkspaceSkillSnapshot as Ht, isLikelyContextOverflowError as I, isWhatsAppGroupJid as In, saveMediaBuffer as It, resolveMirroredTranscriptText as J, resolveDiscordAccount as Jn, resolveSandboxedMediaSource as Jt, resolveSandboxRuntimeStatus as K, normalizeChatType as Kn, assertMediaNotDataUrl as Kt, isRateLimitAssistantError as L, normalizeWhatsAppTarget as Ln, SsrFBlockedError as Lt, isCompactionFailureError as M, resolveSignalAccount as Mn, hasAlphaChannel as Mt, isContextOverflowError as N, getChannelPlugin as Nn, optimizeImageToPng as Nt, getApiErrorPayloadFingerprint as O, MAX_IMAGE_BYTES$1 as On, resolveBrowserConfig as Ot, isFailoverAssistantError as P, listChannelPlugins as Pn, resizeToJpeg as Pt, saveSessionStore as Q, applyOwnerOnlyToolPolicy as Qt, isRawApiErrorPayload as R, listEnabledTelegramAccounts as Rn, closeDispatcher as Rt, isGoogleModelApi as S, extensionForMime as Sn, resolveChannelGroupRequireMention as St, formatAssistantErrorText as T, isAudioFileName as Tn, resolveGroupSessionKey as Tt, sanitizeUserFacingText as U, resolveSlackAccount as Un, loadWorkspaceSkillEntries as Ut, parseImageDimensionError as V, resolveTelegramToken as Vn, buildWorkspaceSkillCommandSpecs as Vt, ensureSandboxWorkspaceForSession as W, resolveSlackAppToken as Wn, resolveSkillsPromptForRun as Wt, readSessionUpdatedAt as X, applySkillEnvOverridesFromSnapshot as Xt, loadSessionStore as Y, normalizeDiscordToken as Yn, applySkillEnvOverrides as Yt, recordSessionMetaFromInbound as Z, resolveSandboxConfigForAgent as Zt, sanitizeSessionMessagesImages as _, resolveMessageChannel as _n, deriveSessionMetaPatch as _t, formatXHighModelHint as a, stripPluginOnlyAllowlist as an, deliveryContextKey as at, downgradeOpenAIReasoningBlocks as b, GATEWAY_CLIENT_NAMES as bn, resolveIMessageAccount as bt, normalizeReasoningLevel as c, resolveBootstrapMaxChars as cn, normalizeSessionDeliveryFields as ct, normalizeVerboseLevel as d, isDeliverableMessageChannel as dn, resolveChannelResetConfig as dt, collectExplicitAllowlist as en, updateSessionStore as et, resolveResponseUsageMode as f, isInternalMessageChannel as fn, resolveSessionResetPolicy as ft, normalizeTextForComparison as g, resolveGatewayMessageChannel as gn, resolveMainSessionKey as gt, isMessagingToolDuplicateNormalized as h, normalizeMessageChannel as hn, DEFAULT_RESET_TRIGGERS as ht, formatThinkingLevels as i, resolveToolProfilePolicy as in, deliveryContextFromSession as it, isCloudCodeAssistFormatError as j, listEnabledSignalAccounts as jn, getImageMetadata as jt, isAuthAssistantError as k, maxBytesForKind as kn, resolveProfile as kt, normalizeThinkLevel as l, sanitizeGoogleTurnOrdering as ln, resolveSessionKey as lt, isMessagingToolDuplicate as m, listDeliverableMessageChannels as mn, resolveThreadFlag as mt, validateGeminiTurns as n, expandToolGroups as nn, isCacheEnabled as nt, listThinkingLevels as o, buildBootstrapContextFiles as on, mergeDeliveryContext as ot, supportsXHighThinking as p, isMarkdownCapableMessageChannel as pn, resolveSessionResetType as pt, appendAssistantMessageToSessionTranscript as q, listEnabledDiscordAccounts as qn, assertSandboxPath as qt, pickFallbackThinkingLevel as r, normalizeToolName as rn, resolveCacheTtlMs as rt, normalizeElevatedLevel as s, ensureSessionHeader$1 as sn, normalizeDeliveryContext as st, validateAnthropicTurns as t, expandPolicyWithPluginGroups as tn, updateSessionStoreEntry as tt, normalizeUsageDisplay as u, INTERNAL_MESSAGE_CHANNEL as un, evaluateSessionFreshness as ut, sanitizeImageBlocks as v, GATEWAY_CLIENT_IDS as vn, getChannelDock as vt, classifyFailoverReason as w, imageMimeFromFormat as wn, resolveConversationLabel as wt, isAntigravityClaude as x, detectMime as xn, resolveChannelGroupPolicy as xt, sanitizeToolResultImages as y, GATEWAY_CLIENT_MODES as yn, listChannelDocks as yt, isTimeoutErrorMessage as z, listTelegramAccountIds as zn, createPinnedDispatcher as zt };

package/dist/{pi-embedded-helpers-Uan-3N1T.js → pi-embedded-helpers-DfwkwPYD.js}

@@ -1,6 +1,6 @@
 import { o as createSubsystemLogger } from "./entry.js";
-import { p as resizeToJpeg, u as getImageMetadata } from "./routes-BqxA3ZYr.js";
-import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-B0K9e6Fw.js";
+import { f as resizeToJpeg, l as getImageMetadata } from "./routes-DewK5tq2.js";
+import { s as formatSandboxToolPolicyBlockedMessage } from "./sandbox-BKYnhYQH.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { createHash } from "node:crypto";
@@ -513,19 +513,22 @@ function isContextOverflowError(errorMessage) {
 	return lower.includes("request_too_large") || lower.includes("request exceeds the maximum size") || lower.includes("context length exceeded") || lower.includes("maximum context length") || lower.includes("prompt is too long") || lower.includes("exceeds model context window") || hasRequestSizeExceeds && hasContextWindow || lower.includes("context overflow:") || lower.includes("413") && lower.includes("too large");
 }
 const CONTEXT_WINDOW_TOO_SMALL_RE = /context window.*(too small|minimum is)/i;
-const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|(?:prompt|request|input).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|prompt.*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:request|input).*(?:context|window|length|token).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const RATE_LIMIT_HINT_RE = /rate limit|too many requests|requests per (?:minute|hour|day)|quota|throttl|429\b/i;
 function isLikelyContextOverflowError(errorMessage) {
 	if (!errorMessage) return false;
 	if (CONTEXT_WINDOW_TOO_SMALL_RE.test(errorMessage)) return false;
 	if (isRateLimitErrorMessage(errorMessage)) return false;
 	if (isContextOverflowError(errorMessage)) return true;
+	if (RATE_LIMIT_HINT_RE.test(errorMessage)) return false;
 	return CONTEXT_OVERFLOW_HINT_RE.test(errorMessage);
 }
 function isCompactionFailureError(errorMessage) {
 	if (!errorMessage) return false;
 	const lower = errorMessage.toLowerCase();
 	if (!(lower.includes("summarization failed") || lower.includes("auto-compaction") || lower.includes("compaction failed") || lower.includes("compaction"))) return false;
-	return isContextOverflowError(errorMessage) || lower.includes("context overflow");
+	if (isLikelyContextOverflowError(errorMessage)) return true;
+	return lower.includes("context overflow");
 }
 const ERROR_PAYLOAD_PREFIX_RE = /^(?:error|api\s*error|apierror|openai\s*error|anthropic\s*error|gateway\s*error)[:\s-]+/i;
 const FINAL_TAG_RE = /<\s*\/?\s*final\s*>/gi;