activeclaw 2026.2.12 → 2026.2.13

package/dist/{pi-embedded-helpers-Bri9tk9g.js → pi-embedded-helpers-WDwx99UA.js}

@@ -1,12 +1,12 @@
 import { i as resolveGatewayPort, t as STATE_DIR } from "./paths-BZtyHNCi.js";
-import { C as resolveOpenClawPackageRootSync, D as buildAgentMainSessionKey, M as normalizeAgentId, N as normalizeMainKey, P as resolveAgentIdFromSessionKey, T as DEFAULT_AGENT_ID, _ as DEFAULT_TOOLS_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, g as DEFAULT_SOUL_FILENAME, h as DEFAULT_IDENTITY_FILENAME, j as normalizeAccountId$1, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_USER_FILENAME, w as DEFAULT_ACCOUNT_ID, y as ensureAgentWorkspace } from "./agent-scope-rXQ7WARN.js";
-import { F as normalizeE164, L as resolveConfigDir, S as requireActivePluginRegistry, _ as getChatChannelMeta, b as normalizeChatChannelId, h as CHAT_CHANNEL_ORDER, k as escapeRegExp, l as createSubsystemLogger, m as CHANNEL_IDS, n as runExec, u as defaultRuntime, v as normalizeAnyChannelId, w as CONFIG_DIR, x as getActivePluginRegistry, z as resolveUserPath } from "./exec-4WHuOniw.js";
-import { G as parseBooleanValue, W as isTruthyEnvValue } from "./model-auth-CbqRVYRp.js";
+import { C as resolveOpenClawPackageRootSync, D as buildAgentMainSessionKey, M as normalizeAgentId, N as normalizeMainKey, P as resolveAgentIdFromSessionKey, T as DEFAULT_AGENT_ID, _ as DEFAULT_TOOLS_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, g as DEFAULT_SOUL_FILENAME, h as DEFAULT_IDENTITY_FILENAME, j as normalizeAccountId$1, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_USER_FILENAME, w as DEFAULT_ACCOUNT_ID, y as ensureAgentWorkspace } from "./agent-scope-BIEhVP4_.js";
+import { F as normalizeE164, L as resolveConfigDir, S as requireActivePluginRegistry, _ as getChatChannelMeta, b as normalizeChatChannelId, h as CHAT_CHANNEL_ORDER, k as escapeRegExp, l as createSubsystemLogger, m as CHANNEL_IDS, n as runExec, ot as resolvePreferredOpenClawTmpDir, u as defaultRuntime, v as normalizeAnyChannelId, w as CONFIG_DIR, x as getActivePluginRegistry, z as resolveUserPath } from "./exec-B8lXct-k.js";
+import { G as parseBooleanValue, W as isTruthyEnvValue } from "./model-auth-CabXIF6O.js";
 import { t as formatCliCommand } from "./command-format-qUVxzqYm.js";
-import { b as resolveMemorySlotDecision, d as parseDurationMs, g as MANIFEST_KEY, h as LEGACY_MANIFEST_KEYS, i as writeConfigFile, j as resolveWhatsAppAccount, o as parseByteSize, p as loadPluginManifestRegistry, t as loadConfig, v as normalizePluginsConfig, y as resolveEnableState } from "./config-BuF7vm-v.js";
-import { A as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, C as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, D as DEFAULT_BROWSER_EVALUATE_ENABLED, E as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, O as DEFAULT_OPENCLAW_BROWSER_COLOR, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, a as resolveOpenClawUserDataDir, b as isLoopbackHost, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, h as getHeadersWithAuth, i as launchOpenClawChrome, k as DEFAULT_OPENCLAW_BROWSER_ENABLED, l as createTargetViaCdp, n as isChromeCdpReady, o as stopOpenClawChrome, p as appendCdpPath, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as stopChromeExtensionRelayServer, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-svgmQ8T_.js";
+import { b as resolveMemorySlotDecision, d as parseDurationMs, g as MANIFEST_KEY, h as LEGACY_MANIFEST_KEYS, i as writeConfigFile, j as resolveWhatsAppAccount, o as parseByteSize, p as loadPluginManifestRegistry, t as loadConfig, v as normalizePluginsConfig, y as resolveEnableState } from "./config-BvMsmctM.js";
+import { A as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, C as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, D as DEFAULT_BROWSER_EVALUATE_ENABLED, E as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, O as DEFAULT_OPENCLAW_BROWSER_COLOR, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, a as resolveOpenClawUserDataDir, b as isLoopbackHost, c as captureScreenshot, d as normalizeCdpWsUrl, f as snapshotAria, h as getHeadersWithAuth, i as launchOpenClawChrome, k as DEFAULT_OPENCLAW_BROWSER_ENABLED, l as createTargetViaCdp, n as isChromeCdpReady, o as stopOpenClawChrome, p as appendCdpPath, r as isChromeReachable, s as resolveBrowserExecutableForPlatform, v as stopChromeExtensionRelayServer, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-BfB6JdKF.js";
 import { n as formatErrorMessage, t as extractErrorCode } from "./errors-B91HIDPD.js";
-import { r as resolveSessionTranscriptPath, t as resolveDefaultSessionStorePath } from "./paths-DwKNqk_S.js";
+import { n as resolveSessionFilePath, t as resolveDefaultSessionStorePath } from "./paths-B0a4ywSO.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-BHS7QoRl.js";
 import fs from "node:fs/promises";
 import os from "node:os";
@@ -1679,6 +1679,83 @@ function applySkillEnvOverridesFromSnapshot(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/sandbox-paths.ts
+const UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
+function normalizeUnicodeSpaces(str) {
+	return str.replace(UNICODE_SPACES, " ");
+}
+function expandPath(filePath) {
+	const normalized = normalizeUnicodeSpaces(filePath);
+	if (normalized === "~") return os.homedir();
+	if (normalized.startsWith("~/")) return os.homedir() + normalized.slice(1);
+	return normalized;
+}
+function resolveToCwd(filePath, cwd) {
+	const expanded = expandPath(filePath);
+	if (path.isAbsolute(expanded)) return expanded;
+	return path.resolve(cwd, expanded);
+}
+function resolveSandboxPath(params) {
+	const resolved = resolveToCwd(params.filePath, params.cwd);
+	const rootResolved = path.resolve(params.root);
+	const relative = path.relative(rootResolved, resolved);
+	if (!relative || relative === "") return {
+		resolved,
+		relative: ""
+	};
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`Path escapes sandbox root (${shortPath(rootResolved)}): ${params.filePath}`);
+	return {
+		resolved,
+		relative
+	};
+}
+async function assertSandboxPath(params) {
+	const resolved = resolveSandboxPath(params);
+	await assertNoSymlink(resolved.relative, path.resolve(params.root));
+	return resolved;
+}
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
+async function assertNoSymlink(relative, root) {
+	if (!relative) return;
+	const parts = relative.split(path.sep).filter(Boolean);
+	let current = root;
+	for (const part of parts) {
+		current = path.join(current, part);
+		try {
+			if ((await fs.lstat(current)).isSymbolicLink()) throw new Error(`Symlink not allowed in sandbox path: ${current}`);
+		} catch (err) {
+			if (err.code === "ENOENT") return;
+			throw err;
+		}
+	}
+}
+function shortPath(value) {
+	if (value.startsWith(os.homedir())) return `~${value.slice(os.homedir().length)}`;
+	return value;
+}
+
 //#endregion
 //#region src/agents/skills/bundled-dir.ts
 function looksLikeSkillsDir(dir) {
@@ -1922,6 +1999,36 @@ function resolveSkillsPromptForRun(params) {
 function loadWorkspaceSkillEntries(workspaceDir, opts) {
 	return loadSkillEntries(workspaceDir, opts);
 }
+function resolveUniqueSyncedSkillDirName(base, used) {
+	if (!used.has(base)) {
+		used.add(base);
+		return base;
+	}
+	for (let index = 2; index < 1e4; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!used.has(candidate)) {
+			used.add(candidate);
+			return candidate;
+		}
+	}
+	let fallbackIndex = 1e4;
+	let fallback = `${base}-${fallbackIndex}`;
+	while (used.has(fallback)) {
+		fallbackIndex += 1;
+		fallback = `${base}-${fallbackIndex}`;
+	}
+	used.add(fallback);
+	return fallback;
+}
+function resolveSyncedSkillDestinationPath(params) {
+	const sourceDirName = path.basename(params.entry.skill.baseDir).trim();
+	if (!sourceDirName || sourceDirName === "." || sourceDirName === "..") return null;
+	return resolveSandboxPath({
+		filePath: resolveUniqueSyncedSkillDirName(sourceDirName, params.usedDirNames),
+		cwd: params.targetSkillsDir,
+		root: params.targetSkillsDir
+	}).resolved;
+}
 async function syncSkillsToWorkspace(params) {
 	const sourceDir = resolveUserPath(params.sourceWorkspaceDir);
 	const targetDir = resolveUserPath(params.targetWorkspaceDir);
@@ -1938,8 +2045,24 @@ async function syncSkillsToWorkspace(params) {
 			force: true
 		});
 		await fsp.mkdir(targetSkillsDir, { recursive: true });
+		const usedDirNames = /* @__PURE__ */ new Set();
 		for (const entry of entries) {
-			const dest = path.join(targetSkillsDir, entry.skill.name);
+			let dest = null;
+			try {
+				dest = resolveSyncedSkillDestinationPath({
+					targetSkillsDir,
+					entry,
+					usedDirNames
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: ${message}`);
+				continue;
+			}
+			if (!dest) {
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: invalid source directory name`);
+				continue;
+			}
 			try {
 				await fsp.cp(entry.skill.baseDir, dest, {
 					recursive: true,
@@ -2052,7 +2175,7 @@ function isModuleNotFoundError(err) {
 }
 async function loadPwAiModule(mode) {
 	try {
-		return await import("./pw-ai-zVebjrSG.js");
+		return await import("./pw-ai-FGoRVblI.js");
 	} catch (err) {
 		if (mode === "soft") return null;
 		if (isModuleNotFoundError(err)) return null;
@@ -2609,6 +2732,7 @@ function registerBrowserAgentActRoutes(app, ctx) {
 
 //#endregion
 //#region src/browser/routes/agent.debug.ts
+const DEFAULT_TRACE_DIR = resolvePreferredOpenClawTmpDir();
 function registerBrowserAgentDebugRoutes(app, ctx) {
 	app.get("/console", async (req, res) => {
 		const profileCtx = resolveProfileContext(req, res, ctx);
@@ -2719,7 +2843,7 @@ function registerBrowserAgentDebugRoutes(app, ctx) {
 			const pw = await requirePwAi(res, "trace stop");
 			if (!pw) return;
 			const id = crypto.randomUUID();
-			const dir = "/tmp/openclaw";
+			const dir = DEFAULT_TRACE_DIR;
 			await fs.mkdir(dir, { recursive: true });
 			const tracePath = out.trim() || path.join(dir, `browser-trace-${id}.zip`);
 			await pw.traceStopViaPlaywright({
@@ -2762,6 +2886,22 @@ function normalizeHostnameSet(values) {
 	if (!values || values.length === 0) return /* @__PURE__ */ new Set();
 	return new Set(values.map((value) => normalizeHostname(value)).filter(Boolean));
 }
+function normalizeHostnameAllowlist(values) {
+	if (!values || values.length === 0) return [];
+	return Array.from(new Set(values.map((value) => normalizeHostname(value)).filter((value) => value !== "*" && value !== "*." && value.length > 0)));
+}
+function isHostnameAllowedByPattern(hostname, pattern) {
+	if (pattern.startsWith("*.")) {
+		const suffix = pattern.slice(2);
+		if (!suffix || hostname === suffix) return false;
+		return hostname.endsWith(`.${suffix}`);
+	}
+	return hostname === pattern;
+}
+function matchesHostnameAllowlist(hostname, allowlist) {
+	if (allowlist.length === 0) return true;
+	return allowlist.some((pattern) => isHostnameAllowedByPattern(hostname, pattern));
+}
 function parseIpv4(address) {
 	const parts = address.split(".");
 	if (parts.length !== 4) return null;
@@ -2862,7 +3002,10 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 	const normalized = normalizeHostname(hostname);
 	if (!normalized) throw new Error("Invalid hostname");
 	const allowPrivateNetwork = Boolean(params.policy?.allowPrivateNetwork);
-	const isExplicitAllowed = normalizeHostnameSet(params.policy?.allowedHostnames).has(normalized);
+	const allowedHostnames = normalizeHostnameSet(params.policy?.allowedHostnames);
+	const hostnameAllowlist = normalizeHostnameAllowlist(params.policy?.hostnameAllowlist);
+	const isExplicitAllowed = allowedHostnames.has(normalized);
+	if (!matchesHostnameAllowlist(normalized, hostnameAllowlist)) throw new SsrFBlockedError(`Blocked hostname (not in allowlist): ${hostname}`);
 	if (!allowPrivateNetwork && !isExplicitAllowed) {
 		if (isBlockedHostname(normalized)) throw new SsrFBlockedError(`Blocked hostname: ${hostname}`);
 		if (isPrivateIpAddress(normalized)) throw new SsrFBlockedError("Blocked: private/internal IP address");
@@ -2883,9 +3026,6 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 		})
 	};
 }
-async function resolvePinnedHostname(hostname, lookupFn = lookup$1) {
-	return await resolvePinnedHostnameWithPolicy(hostname, { lookupFn });
-}
 function createPinnedDispatcher(pinned) {
 	return new Agent({ connect: { lookup: pinned.lookup } });
 }
@@ -4874,11 +5014,11 @@ function createProfileContext(opts, profile) {
 		const userDataDir = resolveOpenClawUserDataDir(profile.name);
 		const profileState = getProfileState();
 		if (await isHttpReachable(300) && !profileState.running) try {
-			await (await import("./pw-ai-zVebjrSG.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-FGoRVblI.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (profileState.running) await stopRunningBrowser();
 		try {
-			await (await import("./pw-ai-zVebjrSG.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-FGoRVblI.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (!fs$1.existsSync(userDataDir)) return {
 			moved: false,
@@ -7317,7 +7457,15 @@ async function appendAssistantMessageToSessionTranscript(params) {
 		ok: false,
 		reason: `unknown sessionKey: ${sessionKey}`
 	};
-	const sessionFile = entry.sessionFile?.trim() || resolveSessionTranscriptPath(entry.sessionId, params.agentId);
+	let sessionFile;
+	try {
+		sessionFile = resolveSessionFilePath(entry.sessionId, entry, { sessionsDir: path.dirname(storePath) });
+	} catch (err) {
+		return {
+			ok: false,
+			reason: err instanceof Error ? err.message : String(err)
+		};
+	}
 	await ensureSessionHeader({
 		sessionFile,
 		sessionId: entry.sessionId
@@ -7587,19 +7735,22 @@ function isContextOverflowError(errorMessage) {
 	return lower.includes("request_too_large") || lower.includes("request exceeds the maximum size") || lower.includes("context length exceeded") || lower.includes("maximum context length") || lower.includes("prompt is too long") || lower.includes("exceeds model context window") || hasRequestSizeExceeds && hasContextWindow || lower.includes("context overflow:") || lower.includes("413") && lower.includes("too large");
 }
 const CONTEXT_WINDOW_TOO_SMALL_RE = /context window.*(too small|minimum is)/i;
-const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|(?:prompt|request|input).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const CONTEXT_OVERFLOW_HINT_RE = /context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|prompt.*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:request|input).*(?:context|window|length|token).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i;
+const RATE_LIMIT_HINT_RE = /rate limit|too many requests|requests per (?:minute|hour|day)|quota|throttl|429\b/i;
 function isLikelyContextOverflowError(errorMessage) {
 	if (!errorMessage) return false;
 	if (CONTEXT_WINDOW_TOO_SMALL_RE.test(errorMessage)) return false;
 	if (isRateLimitErrorMessage(errorMessage)) return false;
 	if (isContextOverflowError(errorMessage)) return true;
+	if (RATE_LIMIT_HINT_RE.test(errorMessage)) return false;
 	return CONTEXT_OVERFLOW_HINT_RE.test(errorMessage);
 }
 function isCompactionFailureError(errorMessage) {
 	if (!errorMessage) return false;
 	const lower = errorMessage.toLowerCase();
 	if (!(lower.includes("summarization failed") || lower.includes("auto-compaction") || lower.includes("compaction failed") || lower.includes("compaction"))) return false;
-	return isContextOverflowError(errorMessage) || lower.includes("context overflow");
+	if (isLikelyContextOverflowError(errorMessage)) return true;
+	return lower.includes("context overflow");
 }
 const ERROR_PAYLOAD_PREFIX_RE = /^(?:error|api\s*error|apierror|openai\s*error|anthropic\s*error|gateway\s*error)[:\s-]+/i;
 const FINAL_TAG_RE = /<\s*\/?\s*final\s*>/gi;
@@ -8797,4 +8948,4 @@ function validateAnthropicTurns(messages) {
 }
 
 //#endregion
-export { updateSessionStore as $, collectExplicitAllowlist as $t, isBillingAssistantError as A, mediaKindFromMime as An, resolveProfile as At, isTransientHttpError as B, resolveTelegramAccount as Bn, createPinnedDispatcher as Bt, BILLING_ERROR_USER_MESSAGE as C, getFileExtension as Cn, resolveChannelGroupRequireMention as Ct, formatRawAssistantErrorForUi as D, kindFromMime as Dn, createBrowserRouteContext as Dt, formatBillingErrorMessage as E, isGifMedia as En, resolveGroupSessionKey as Et, isFailoverErrorMessage as F, normalizeChannelId as Fn, resizeToJpeg as Ft, resolveSandboxContext as G, resolveSlackBotToken as Gn, loadWorkspaceSkillEntries as Gt, parseImageSizeError as H, listBindings as Hn, resolvePinnedHostnameWithPolicy as Ht, isLikelyContextOverflowError as I, isWhatsAppGroupJid as In, getMediaDir as It, resolveMirroredTranscriptText as J, resolveDiscordAccount as Jn, applySkillEnvOverrides as Jt, resolveSandboxRuntimeStatus as K, normalizeChatType as Kn, resolveSkillsPromptForRun as Kt, isRateLimitAssistantError as L, normalizeWhatsAppTarget as Ln, saveMediaBuffer as Lt, isCompactionFailureError as M, resolveSignalAccount as Mn, getImageMetadata as Mt, isContextOverflowError as N, getChannelPlugin as Nn, hasAlphaChannel as Nt, getApiErrorPayloadFingerprint as O, MAX_IMAGE_BYTES$1 as On, registerBrowserRoutes as Ot, isFailoverAssistantError as P, listChannelPlugins as Pn, optimizeImageToPng as Pt, updateLastRoute as Q, buildPluginToolGroups as Qt, isRawApiErrorPayload as R, listEnabledTelegramAccounts as Rn, SsrFBlockedError as Rt, isGoogleModelApi as S, extensionForMime as Sn, resolveChannelGroupPolicy as St, formatAssistantErrorText as T, isAudioFileName as Tn, resolveConversationLabel as Tt, sanitizeUserFacingText as U, resolveSlackAccount as Un, buildWorkspaceSkillCommandSpecs as Ut, parseImageDimensionError as V, resolveTelegramToken as Vn, resolvePinnedHostname as Vt, ensureSandboxWorkspaceForSession as W, resolveSlackAppToken as Wn, buildWorkspaceSkillSnapshot as Wt, readSessionUpdatedAt as X, resolveSandboxConfigForAgent as Xt, loadSessionStore as Y, normalizeDiscordToken as Yn, applySkillEnvOverridesFromSnapshot as Yt, recordSessionMetaFromInbound as Z, applyOwnerOnlyToolPolicy as Zt, sanitizeSessionMessagesImages as _, resolveMessageChannel as _n, resolveMainSessionKey as _t, formatXHighModelHint as a, buildBootstrapContextFiles as an, mergeDeliveryContext as at, downgradeOpenAIReasoningBlocks as b, GATEWAY_CLIENT_NAMES as bn, listChannelDocks as bt, normalizeReasoningLevel as c, sanitizeGoogleTurnOrdering as cn, normalizeAccountId as ct, normalizeVerboseLevel as d, isGatewayMessageChannel as dn, resolveChannelResetConfig as dt, expandPolicyWithPluginGroups as en, updateSessionStoreEntry as et, resolveResponseUsageMode as f, isInternalMessageChannel as fn, resolveSessionResetPolicy as ft, normalizeTextForComparison as g, resolveGatewayMessageChannel as gn, resolveExplicitAgentSessionKey as gt, isMessagingToolDuplicateNormalized as h, normalizeMessageChannel as hn, DEFAULT_RESET_TRIGGERS as ht, formatThinkingLevels as i, stripPluginOnlyAllowlist as in, deliveryContextKey as it, isCloudCodeAssistFormatError as j, listEnabledSignalAccounts as jn, convertHeicToJpeg as jt, isAuthAssistantError as k, maxBytesForKind as kn, resolveBrowserConfig as kt, normalizeThinkLevel as l, INTERNAL_MESSAGE_CHANNEL as ln, resolveSessionKey as lt, isMessagingToolDuplicate as m, listDeliverableMessageChannels as mn, resolveThreadFlag as mt, validateGeminiTurns as n, normalizeToolName as nn, resolveCacheTtlMs as nt, listThinkingLevels as o, ensureSessionHeader$1 as on, normalizeDeliveryContext as ot, supportsXHighThinking as p, isMarkdownCapableMessageChannel as pn, resolveSessionResetType as pt, appendAssistantMessageToSessionTranscript as q, listEnabledDiscordAccounts as qn, resolvePluginSkillDirs as qt, pickFallbackThinkingLevel as r, resolveToolProfilePolicy as rn, deliveryContextFromSession as rt, normalizeElevatedLevel as s, resolveBootstrapMaxChars as sn, normalizeSessionDeliveryFields as st, validateAnthropicTurns as t, expandToolGroups as tn, isCacheEnabled as tt, normalizeUsageDisplay as u, isDeliverableMessageChannel as un, evaluateSessionFreshness as ut, sanitizeImageBlocks as v, GATEWAY_CLIENT_IDS as vn, deriveSessionMetaPatch as vt, classifyFailoverReason as w, imageMimeFromFormat as wn, resolveChannelGroupToolsPolicy as wt, isAntigravityClaude as x, detectMime as xn, resolveIMessageAccount as xt, sanitizeToolResultImages as y, GATEWAY_CLIENT_MODES as yn, getChannelDock as yt, isTimeoutErrorMessage as z, listTelegramAccountIds as zn, closeDispatcher as zt };
+export { updateSessionStore as $, applyOwnerOnlyToolPolicy as $t, isBillingAssistantError as A, MAX_IMAGE_BYTES$1 as An, resolveProfile as At, isTransientHttpError as B, listEnabledTelegramAccounts as Bn, createPinnedDispatcher as Bt, BILLING_ERROR_USER_MESSAGE as C, detectMime as Cn, resolveChannelGroupRequireMention as Ct, formatRawAssistantErrorForUi as D, isAudioFileName as Dn, createBrowserRouteContext as Dt, formatBillingErrorMessage as E, imageMimeFromFormat as En, resolveGroupSessionKey as Et, isFailoverErrorMessage as F, getChannelPlugin as Fn, resizeToJpeg as Ft, resolveSandboxContext as G, resolveSlackAccount as Gn, resolveSkillsPromptForRun as Gt, parseImageSizeError as H, resolveTelegramAccount as Hn, buildWorkspaceSkillCommandSpecs as Ht, isLikelyContextOverflowError as I, listChannelPlugins as In, getMediaDir as It, resolveMirroredTranscriptText as J, normalizeChatType as Jn, assertSandboxPath as Jt, resolveSandboxRuntimeStatus as K, resolveSlackAppToken as Kn, resolvePluginSkillDirs as Kt, isRateLimitAssistantError as L, normalizeChannelId as Ln, saveMediaBuffer as Lt, isCompactionFailureError as M, mediaKindFromMime as Mn, getImageMetadata as Mt, isContextOverflowError as N, listEnabledSignalAccounts as Nn, hasAlphaChannel as Nt, getApiErrorPayloadFingerprint as O, isGifMedia as On, registerBrowserRoutes as Ot, isFailoverAssistantError as P, resolveSignalAccount as Pn, optimizeImageToPng as Pt, updateLastRoute as Q, resolveSandboxConfigForAgent as Qt, isRawApiErrorPayload as R, isWhatsAppGroupJid as Rn, SsrFBlockedError as Rt, isGoogleModelApi as S, GATEWAY_CLIENT_NAMES as Sn, resolveChannelGroupPolicy as St, formatAssistantErrorText as T, getFileExtension as Tn, resolveConversationLabel as Tt, sanitizeUserFacingText as U, resolveTelegramToken as Un, buildWorkspaceSkillSnapshot as Ut, parseImageDimensionError as V, listTelegramAccountIds as Vn, resolvePinnedHostnameWithPolicy as Vt, ensureSandboxWorkspaceForSession as W, listBindings as Wn, loadWorkspaceSkillEntries as Wt, readSessionUpdatedAt as X, resolveDiscordAccount as Xn, applySkillEnvOverrides as Xt, loadSessionStore as Y, listEnabledDiscordAccounts as Yn, resolveSandboxedMediaSource as Yt, recordSessionMetaFromInbound as Z, normalizeDiscordToken as Zn, applySkillEnvOverridesFromSnapshot as Zt, sanitizeSessionMessagesImages as _, normalizeMessageChannel as _n, resolveMainSessionKey as _t, formatXHighModelHint as a, resolveToolProfilePolicy as an, mergeDeliveryContext as at, downgradeOpenAIReasoningBlocks as b, GATEWAY_CLIENT_IDS as bn, listChannelDocks as bt, normalizeReasoningLevel as c, ensureSessionHeader$1 as cn, normalizeAccountId as ct, normalizeVerboseLevel as d, INTERNAL_MESSAGE_CHANNEL as dn, resolveChannelResetConfig as dt, buildPluginToolGroups as en, updateSessionStoreEntry as et, resolveResponseUsageMode as f, isDeliverableMessageChannel as fn, resolveSessionResetPolicy as ft, normalizeTextForComparison as g, listDeliverableMessageChannels as gn, resolveExplicitAgentSessionKey as gt, isMessagingToolDuplicateNormalized as h, isMarkdownCapableMessageChannel as hn, DEFAULT_RESET_TRIGGERS as ht, formatThinkingLevels as i, normalizeToolName as in, deliveryContextKey as it, isCloudCodeAssistFormatError as j, maxBytesForKind as jn, convertHeicToJpeg as jt, isAuthAssistantError as k, kindFromMime as kn, resolveBrowserConfig as kt, normalizeThinkLevel as l, resolveBootstrapMaxChars as ln, resolveSessionKey as lt, isMessagingToolDuplicate as m, isInternalMessageChannel as mn, resolveThreadFlag as mt, validateGeminiTurns as n, expandPolicyWithPluginGroups as nn, resolveCacheTtlMs as nt, listThinkingLevels as o, stripPluginOnlyAllowlist as on, normalizeDeliveryContext as ot, supportsXHighThinking as p, isGatewayMessageChannel as pn, resolveSessionResetType as pt, appendAssistantMessageToSessionTranscript as q, resolveSlackBotToken as qn, assertMediaNotDataUrl as qt, pickFallbackThinkingLevel as r, expandToolGroups as rn, deliveryContextFromSession as rt, normalizeElevatedLevel as s, buildBootstrapContextFiles as sn, normalizeSessionDeliveryFields as st, validateAnthropicTurns as t, collectExplicitAllowlist as tn, isCacheEnabled as tt, normalizeUsageDisplay as u, sanitizeGoogleTurnOrdering as un, evaluateSessionFreshness as ut, sanitizeImageBlocks as v, resolveGatewayMessageChannel as vn, deriveSessionMetaPatch as vt, classifyFailoverReason as w, extensionForMime as wn, resolveChannelGroupToolsPolicy as wt, isAntigravityClaude as x, GATEWAY_CLIENT_MODES as xn, resolveIMessageAccount as xt, sanitizeToolResultImages as y, resolveMessageChannel as yn, getChannelDock as yt, isTimeoutErrorMessage as z, normalizeWhatsAppTarget as zn, closeDispatcher as zt };

package/dist/{pi-tools.policy-CJFi1sny.js → pi-tools.policy-BpsROZbz.js}

@@ -1,8 +1,8 @@
 import { b as resolveThreadParentSessionKey, d as resolveAgentIdFromSessionKey } from "./session-key-BWxPj0z_.js";
-import { n as resolveAgentConfig } from "./agent-scope---6LLHj0.js";
-import { r as normalizeChannelId } from "./plugins-BL9lIXSA.js";
-import { J as resolveChannelGroupToolsPolicy, V as getChannelDock, at as normalizeToolName, it as expandToolGroups } from "./sandbox-BW8Xnkw1.js";
-import { l as normalizeMessageChannel } from "./message-channel-0717wOz-.js";
+import { n as resolveAgentConfig } from "./agent-scope-CQCus0rI.js";
+import { r as normalizeChannelId } from "./plugins-X7d_tfTE.js";
+import { J as resolveChannelGroupToolsPolicy, V as getChannelDock, at as normalizeToolName, it as expandToolGroups } from "./sandbox-Bhjnh1Xg.js";
+import { l as normalizeMessageChannel } from "./message-channel-BLi2a6Yw.js";
 
 //#region src/config/commands.ts
 function resolveAutoDefault(providerId) {

package/dist/{plugin-auto-enable-BY4CqJbD.js → plugin-auto-enable-Bqhc3w5n.js}

@@ -1,8 +1,8 @@
-import { nt as getChatChannelMeta, ot as normalizeChatChannelId, rt as listChatChannels } from "./entry.js";
-import { k as normalizeProviderId } from "./auth-profiles-CcJ3hrog.js";
-import { d as isRecord, t as CONFIG_DIR, y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { a as MANIFEST_KEY, n as discoverOpenClawPlugins } from "./manifest-registry-BTgLN_W2.js";
-import { t as hasAnyWhatsAppAuth } from "./accounts-DbzMEfKN.js";
+import { at as listChatChannels, ct as normalizeChatChannelId, it as getChatChannelMeta } from "./entry.js";
+import { k as normalizeProviderId } from "./auth-profiles-ByNs3eEm.js";
+import { d as isRecord, t as CONFIG_DIR, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { a as MANIFEST_KEY, n as discoverOpenClawPlugins } from "./manifest-registry-u0okVSkU.js";
+import { t as hasAnyWhatsAppAuth } from "./accounts-DCDeFTra.js";
 import path from "node:path";
 import fs from "node:fs";
 

package/dist/{plugin-auto-enable-DbQrtQjL.js → plugin-auto-enable-PW76g_PJ.js}

@@ -1,8 +1,8 @@
-import { S as normalizeChatChannelId, v as getChatChannelMeta, y as listChatChannels } from "./subsystem-Bv7dGhES.js";
-import { b as resolveUserPath, f as isRecord, t as CONFIG_DIR } from "./utils-BHPdZE4h.js";
-import { s as normalizeProviderId } from "./model-selection-unMJyUIE.js";
-import { a as MANIFEST_KEY, n as discoverOpenClawPlugins } from "./manifest-registry-DFckk-L8.js";
-import { t as hasAnyWhatsAppAuth } from "./accounts-DimKrt7j.js";
+import { S as normalizeChatChannelId, v as getChatChannelMeta, y as listChatChannels } from "./subsystem-BoExtIHo.js";
+import { b as resolveUserPath, f as isRecord, t as CONFIG_DIR } from "./utils-Cd9QdCHh.js";
+import { s as normalizeProviderId } from "./model-selection-BLuqsGVB.js";
+import { a as MANIFEST_KEY, n as discoverOpenClawPlugins } from "./manifest-registry-CQhdnDBZ.js";
+import { t as hasAnyWhatsAppAuth } from "./accounts-DeqIQjo1.js";
 import fs from "node:fs";
 import path from "node:path";
 

package/dist/plugin-sdk/agents/pi-embedded-runner/run/params.d.ts

@@ -3,6 +3,7 @@ import type { ReasoningLevel, ThinkLevel, VerboseLevel } from "../../../auto-rep
 import type { AgentStreamParams } from "../../../commands/agent/types.js";
 import type { OpenClawConfig } from "../../../config/config.js";
 import type { enqueueCommand } from "../../../process/command-queue.js";
+import type { InputProvenance } from "../../../sessions/input-provenance.js";
 import type { ExecElevatedDefaults, ExecToolDefaults } from "../../bash-tools.js";
 import type { BlockReplyChunking, ToolResultFormat } from "../../pi-embedded-subscribe.js";
 import type { SkillSnapshot } from "../../skills.js";
@@ -110,6 +111,7 @@ export type RunEmbeddedPiAgentParams = {
     lane?: string;
     enqueue?: typeof enqueueCommand;
     extraSystemPrompt?: string;
+    inputProvenance?: InputProvenance;
     streamParams?: AgentStreamParams;
     ownerNumbers?: string[];
     enforceFinalTag?: boolean;

package/dist/plugin-sdk/agents/pi-embedded-runner/run/types.d.ts

@@ -4,6 +4,7 @@ import type { ReasoningLevel, ThinkLevel, VerboseLevel } from "../../../auto-rep
 import type { AgentStreamParams } from "../../../commands/agent/types.js";
 import type { OpenClawConfig } from "../../../config/config.js";
 import type { SessionSystemPromptReport } from "../../../config/sessions/types.js";
+import type { InputProvenance } from "../../../sessions/input-provenance.js";
 import type { ExecElevatedDefaults, ExecToolDefaults } from "../../bash-tools.js";
 import type { MessagingToolSend } from "../../pi-embedded-messaging.js";
 import type { BlockReplyChunking, ToolResultFormat } from "../../pi-embedded-subscribe.js";
@@ -100,6 +101,7 @@ export type EmbeddedRunAttemptParams = {
     /** If true, omit the message tool from the tool list. */
     disableMessageTool?: boolean;
     extraSystemPrompt?: string;
+    inputProvenance?: InputProvenance;
     streamParams?: AgentStreamParams;
     ownerNumbers?: string[];
     enforceFinalTag?: boolean;

package/dist/plugin-sdk/agents/pi-embedded-runner/types.d.ts

@@ -5,6 +5,7 @@ export type EmbeddedPiAgentMeta = {
     provider: string;
     model: string;
     compactionCount?: number;
+    promptTokens?: number;
     usage?: {
         input?: number;
         output?: number;
@@ -12,6 +13,20 @@ export type EmbeddedPiAgentMeta = {
         cacheWrite?: number;
         total?: number;
     };
+    /**
+     * Usage from the last individual API call (not accumulated across tool-use
+     * loops or compaction retries). Used for context-window utilization display
+     * (`totalTokens` in sessions.json) because the accumulated `usage.input`
+     * sums input tokens from every API call in the run, which overstates the
+     * actual context size.
+     */
+    lastCallUsage?: {
+        input?: number;
+        output?: number;
+        cacheRead?: number;
+        cacheWrite?: number;
+        total?: number;
+    };
 };
 export type EmbeddedPiRunMeta = {
     durationMs: number;

package/dist/plugin-sdk/agents/pi-embedded-subscribe.handlers.tools.d.ts

@@ -15,4 +15,4 @@ export declare function handleToolExecutionEnd(ctx: EmbeddedPiSubscribeContext,
     toolCallId: string;
     isError: boolean;
     result?: unknown;
-}): void;
+}): Promise<void>;

package/dist/plugin-sdk/agents/pi-embedded-subscribe.handlers.types.d.ts

@@ -2,6 +2,7 @@ import type { AgentEvent, AgentMessage } from "@mariozechner/pi-agent-core";
 import type { ReplyDirectiveParseResult } from "../auto-reply/reply/reply-directives.js";
 import type { ReasoningLevel } from "../auto-reply/thinking.js";
 import type { InlineCodeState } from "../markdown/code-spans.js";
+import type { HookRunner } from "../plugins/hooks.js";
 import type { EmbeddedBlockChunker } from "./pi-embedded-block-chunker.js";
 import type { MessagingToolSend } from "./pi-embedded-messaging.js";
 import type { BlockReplyChunking, SubscribeEmbeddedPiSessionParams } from "./pi-embedded-subscribe.types.js";
@@ -69,6 +70,7 @@ export type EmbeddedPiSubscribeContext = {
     log: EmbeddedSubscribeLogger;
     blockChunking?: BlockReplyChunking;
     blockChunker: EmbeddedBlockChunker | null;
+    hookRunner?: HookRunner;
     shouldEmitToolResult: () => boolean;
     shouldEmitToolOutput: () => boolean;
     emitToolSummary: (toolName?: string, meta?: string) => void;

package/dist/plugin-sdk/agents/pi-embedded-subscribe.types.d.ts

@@ -1,10 +1,12 @@
 import type { AgentSession } from "@mariozechner/pi-coding-agent";
 import type { ReasoningLevel, VerboseLevel } from "../auto-reply/thinking.js";
+import type { HookRunner } from "../plugins/hooks.js";
 import type { BlockReplyChunking } from "./pi-embedded-block-chunker.js";
 export type ToolResultFormat = "markdown" | "plain";
 export type SubscribeEmbeddedPiSessionParams = {
     session: AgentSession;
     runId: string;
+    hookRunner?: HookRunner;
     verboseLevel?: VerboseLevel;
     reasoningMode?: ReasoningLevel;
     toolResultFormat?: ToolResultFormat;

package/dist/plugin-sdk/agents/session-tool-result-guard-wrapper.d.ts

@@ -1,4 +1,5 @@
 import type { SessionManager } from "@mariozechner/pi-coding-agent";
+import { type InputProvenance } from "../sessions/input-provenance.js";
 export type GuardedSessionManager = SessionManager & {
     /** Flush any synthetic tool results for pending tool calls. Idempotent. */
     flushPendingToolResults?: () => void;
@@ -10,5 +11,6 @@ export type GuardedSessionManager = SessionManager & {
 export declare function guardSessionManager(sessionManager: SessionManager, opts?: {
     agentId?: string;
     sessionKey?: string;
+    inputProvenance?: InputProvenance;
     allowSyntheticToolResults?: boolean;
 }): GuardedSessionManager;

package/dist/plugin-sdk/agents/session-tool-result-guard.d.ts

@@ -1,6 +1,10 @@
 import type { AgentMessage } from "@mariozechner/pi-agent-core";
 import type { SessionManager } from "@mariozechner/pi-coding-agent";
 export declare function installSessionToolResultGuard(sessionManager: SessionManager, opts?: {
+    /**
+     * Optional transform applied to any message before persistence.
+     */
+    transformMessageForPersistence?: (message: AgentMessage) => AgentMessage;
     /**
      * Optional, synchronous transform applied to toolResult messages *before* they are
      * persisted to the session transcript.

package/dist/plugin-sdk/agents/tools/agent-step.d.ts

@@ -9,4 +9,7 @@ export declare function runAgentStep(params: {
     timeoutMs: number;
     channel?: string;
     lane?: string;
+    sourceSessionKey?: string;
+    sourceChannel?: string;
+    sourceTool?: string;
 }): Promise<string | undefined>;

package/dist/plugin-sdk/agents/usage.d.ts

@@ -41,4 +41,5 @@ export declare function deriveSessionTotalTokens(params: {
         cacheWrite?: number;
     };
     contextTokens?: number;
+    promptTokens?: number;
 }): number | undefined;

package/dist/plugin-sdk/auto-reply/reply/reply-reference.d.ts

@@ -9,7 +9,7 @@ export type ReplyReferencePlanner = {
 };
 export declare function createReplyReferencePlanner(options: {
     replyToMode: ReplyToMode;
-    /** Existing thread/reference id (always used when present). */
+    /** Existing thread/reference id (preferred when allowed by replyToMode). */
     existingId?: string;
     /** Id to start a new thread/reference when allowed (e.g., parent message id). */
     startId?: string;

package/dist/plugin-sdk/auto-reply/reply/session-run-accounting.d.ts

@@ -0,0 +1,11 @@
+import { type NormalizedUsage } from "../../agents/usage.js";
+import { incrementCompactionCount } from "./session-updates.js";
+import { persistSessionUsageUpdate } from "./session-usage.js";
+type PersistRunSessionUsageParams = Parameters<typeof persistSessionUsageUpdate>[0];
+type IncrementRunCompactionCountParams = Omit<Parameters<typeof incrementCompactionCount>[0], "tokensAfter"> & {
+    lastCallUsage?: NormalizedUsage;
+    contextTokensUsed?: number;
+};
+export declare function persistRunSessionUsage(params: PersistRunSessionUsageParams): Promise<void>;
+export declare function incrementRunCompactionCount(params: IncrementRunCompactionCountParams): Promise<number | undefined>;
+export {};

package/dist/plugin-sdk/auto-reply/reply/session-usage.d.ts

@@ -4,9 +4,17 @@ export declare function persistSessionUsageUpdate(params: {
     storePath?: string;
     sessionKey?: string;
     usage?: NormalizedUsage;
+    /**
+     * Usage from the last individual API call (not accumulated). When provided,
+     * this is used for `totalTokens` instead of the accumulated `usage` so that
+     * context-window utilization reflects the actual current context size rather
+     * than the sum of input tokens across all API calls in the run.
+     */
+    lastCallUsage?: NormalizedUsage;
     modelUsed?: string;
     providerUsed?: string;
     contextTokensUsed?: number;
+    promptTokens?: number;
     systemPromptReport?: SessionSystemPromptReport;
     cliSessionId?: string;
     logLabel?: string;

package/dist/plugin-sdk/browser/control-auth.d.ts

@@ -0,0 +1,13 @@
+import type { OpenClawConfig } from "../config/config.js";
+export type BrowserControlAuth = {
+    token?: string;
+    password?: string;
+};
+export declare function resolveBrowserControlAuth(cfg: OpenClawConfig | undefined, env?: NodeJS.ProcessEnv): BrowserControlAuth;
+export declare function ensureBrowserControlAuth(params: {
+    cfg: OpenClawConfig;
+    env?: NodeJS.ProcessEnv;
+}): Promise<{
+    auth: BrowserControlAuth;
+    generatedToken?: string;
+}>;

package/dist/plugin-sdk/channels/plugins/onboarding/signal.d.ts

@@ -1,2 +1,3 @@
 import type { ChannelOnboardingAdapter } from "../onboarding-types.js";
+export declare function normalizeSignalAccountInput(value: string | null | undefined): string | null;
 export declare const signalOnboardingAdapter: ChannelOnboardingAdapter;

package/dist/plugin-sdk/cli/prompt.d.ts

@@ -0,0 +1 @@
+export declare function promptYesNo(question: string, defaultYes?: boolean): Promise<boolean>;

package/dist/plugin-sdk/commands/agent/types.d.ts

@@ -1,5 +1,6 @@
 import type { ClientToolDefinition } from "../../agents/pi-embedded-runner/run/params.js";
 import type { ChannelOutboundTargetMode } from "../../channels/plugins/types.js";
+import type { InputProvenance } from "../../sessions/input-provenance.js";
 /** Image content block for Claude API multimodal messages. */
 export type ImageContent = {
     type: "image";
@@ -70,6 +71,7 @@ export type AgentCommandOpts = {
     lane?: string;
     runId?: string;
     extraSystemPrompt?: string;
+    inputProvenance?: InputProvenance;
     /** Per-call stream param overrides (best-effort). */
     streamParams?: AgentStreamParams;
 };

package/dist/plugin-sdk/config/sessions/paths.d.ts

@@ -1,10 +1,15 @@
-import type { SessionEntry } from "./types.js";
 export declare function resolveSessionTranscriptsDir(env?: NodeJS.ProcessEnv, homedir?: () => string): string;
 export declare function resolveSessionTranscriptsDirForAgent(agentId?: string, env?: NodeJS.ProcessEnv, homedir?: () => string): string;
 export declare function resolveDefaultSessionStorePath(agentId?: string): string;
+export declare const SAFE_SESSION_ID_RE: RegExp;
+export declare function validateSessionId(sessionId: string): string;
+export declare function resolveSessionTranscriptPathInDir(sessionId: string, sessionsDir: string, topicId?: string | number): string;
 export declare function resolveSessionTranscriptPath(sessionId: string, agentId?: string, topicId?: string | number): string;
-export declare function resolveSessionFilePath(sessionId: string, entry?: SessionEntry, opts?: {
+export declare function resolveSessionFilePath(sessionId: string, entry?: {
+    sessionFile?: string;
+}, opts?: {
     agentId?: string;
+    sessionsDir?: string;
 }): string;
 export declare function resolveStorePath(store?: string, opts?: {
     agentId?: string;

package/dist/plugin-sdk/config/types.agents.d.ts

@@ -74,5 +74,7 @@ export type AgentBinding = {
         };
         guildId?: string;
         teamId?: string;
+        /** Discord role IDs used for role-based routing. */
+        roles?: string[];
     };
 };

package/dist/plugin-sdk/config/types.discord.d.ts

@@ -27,6 +27,8 @@ export type DiscordGuildChannelConfig = {
     enabled?: boolean;
     /** Optional allowlist for channel senders (ids or names). */
     users?: Array<string | number>;
+    /** Optional allowlist for channel senders by role ID. */
+    roles?: Array<string | number>;
     /** Optional system prompt snippet for this channel. */
     systemPrompt?: string;
     /** If false, omit thread starter context for this channel (default: true). */
@@ -41,7 +43,10 @@ export type DiscordGuildEntry = {
     toolsBySender?: GroupToolPolicyBySenderConfig;
     /** Reaction notification mode (off|own|all|allowlist). Default: own. */
     reactionNotifications?: DiscordReactionNotificationMode;
+    /** Optional allowlist for guild senders (ids or names). */
     users?: Array<string | number>;
+    /** Optional allowlist for guild senders by role ID. */
+    roles?: Array<string | number>;
     channels?: Record<string, DiscordGuildChannelConfig>;
 };
 export type DiscordActionConfig = {