activeclaw 2026.2.12 → 2026.2.13

package/dist/plugin-sdk/config/types.gateway.d.ts

@@ -126,6 +126,11 @@ export type GatewayHttpResponsesConfig = {
      * Default: 20MB.
      */
     maxBodyBytes?: number;
+    /**
+     * Max number of URL-based `input_file` + `input_image` parts per request.
+     * Default: 8.
+     */
+    maxUrlParts?: number;
     /** File inputs (input_file). */
     files?: GatewayHttpResponsesFilesConfig;
     /** Image inputs (input_image). */
@@ -134,6 +139,11 @@ export type GatewayHttpResponsesConfig = {
 export type GatewayHttpResponsesFilesConfig = {
     /** Allow URL fetches for input_file. Default: true. */
     allowUrl?: boolean;
+    /**
+     * Optional hostname allowlist for URL fetches.
+     * Supports exact hosts and `*.example.com` wildcards.
+     */
+    urlAllowlist?: string[];
     /** Allowed MIME types (case-insensitive). */
     allowedMimes?: string[];
     /** Max bytes per file. Default: 5MB. */
@@ -158,6 +168,11 @@ export type GatewayHttpResponsesPdfConfig = {
 export type GatewayHttpResponsesImagesConfig = {
     /** Allow URL fetches for input_image. Default: true. */
     allowUrl?: boolean;
+    /**
+     * Optional hostname allowlist for URL fetches.
+     * Supports exact hosts and `*.example.com` wildcards.
+     */
+    urlAllowlist?: string[];
     /** Allowed MIME types (case-insensitive). */
     allowedMimes?: string[];
     /** Max bytes per image. Default: 10MB. */

package/dist/plugin-sdk/config/types.hooks.d.ts

@@ -98,6 +98,21 @@ export type HooksConfig = {
     enabled?: boolean;
     path?: string;
     token?: string;
+    /**
+     * Default session key used for hook agent runs when no request/mapping session key is used.
+     * If omitted, OpenClaw generates `hook:<uuid>` per request.
+     */
+    defaultSessionKey?: string;
+    /**
+     * Allow `sessionKey` from external `/hooks/agent` request payloads.
+     * Default: false.
+     */
+    allowRequestSessionKey?: boolean;
+    /**
+     * Optional allowlist for explicit session keys (request + mapping). Example: ["hook:"].
+     * Empty/omitted means no prefix restriction.
+     */
+    allowedSessionKeyPrefixes?: string[];
     /**
      * Restrict explicit hook `agentId` routing to these agent ids.
      * Omit or include `*` to allow any agent. Set `[]` to deny all explicit `agentId` routing.

package/dist/plugin-sdk/config/zod-schema.agents.d.ts

@@ -473,6 +473,7 @@ export declare const BindingsSchema: z.ZodOptional<z.ZodArray<z.ZodObject<{
         }, z.core.$strict>>;
         guildId: z.ZodOptional<z.ZodString>;
         teamId: z.ZodOptional<z.ZodString>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>;
 }, z.core.$strict>>>;
 export declare const BroadcastStrategySchema: z.ZodEnum<{

package/dist/plugin-sdk/config/zod-schema.d.ts

@@ -936,6 +936,7 @@ export declare const OpenClawSchema: z.ZodObject<{
             }, z.core.$strict>>;
             guildId: z.ZodOptional<z.ZodString>;
             teamId: z.ZodOptional<z.ZodString>;
+            roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>;
     }, z.core.$strict>>>;
     broadcast: z.ZodOptional<z.ZodObject<{
@@ -1165,6 +1166,9 @@ export declare const OpenClawSchema: z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
         path: z.ZodOptional<z.ZodString>;
         token: z.ZodOptional<z.ZodString>;
+        defaultSessionKey: z.ZodOptional<z.ZodString>;
+        allowRequestSessionKey: z.ZodOptional<z.ZodBoolean>;
+        allowedSessionKeyPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
         allowedAgentIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
         maxBodyBytes: z.ZodOptional<z.ZodNumber>;
         presets: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -1810,6 +1814,7 @@ export declare const OpenClawSchema: z.ZodObject<{
                     own: "own";
                 }>>;
                 users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
                 channels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodObject<{
                     allow: z.ZodOptional<z.ZodBoolean>;
                     requireMention: z.ZodOptional<z.ZodBoolean>;
@@ -1826,6 +1831,7 @@ export declare const OpenClawSchema: z.ZodObject<{
                     skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     enabled: z.ZodOptional<z.ZodBoolean>;
                     users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                    roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
                     systemPrompt: z.ZodOptional<z.ZodString>;
                     includeThreadStarter: z.ZodOptional<z.ZodBoolean>;
                     autoThread: z.ZodOptional<z.ZodBoolean>;
@@ -1953,6 +1959,7 @@ export declare const OpenClawSchema: z.ZodObject<{
                         own: "own";
                     }>>;
                     users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                    roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
                     channels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodObject<{
                         allow: z.ZodOptional<z.ZodBoolean>;
                         requireMention: z.ZodOptional<z.ZodBoolean>;
@@ -1969,6 +1976,7 @@ export declare const OpenClawSchema: z.ZodObject<{
                         skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         enabled: z.ZodOptional<z.ZodBoolean>;
                         users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                        roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
                         systemPrompt: z.ZodOptional<z.ZodString>;
                         includeThreadStarter: z.ZodOptional<z.ZodBoolean>;
                         autoThread: z.ZodOptional<z.ZodBoolean>;
@@ -3159,8 +3167,10 @@ export declare const OpenClawSchema: z.ZodObject<{
                 responses: z.ZodOptional<z.ZodObject<{
                     enabled: z.ZodOptional<z.ZodBoolean>;
                     maxBodyBytes: z.ZodOptional<z.ZodNumber>;
+                    maxUrlParts: z.ZodOptional<z.ZodNumber>;
                     files: z.ZodOptional<z.ZodObject<{
                         allowUrl: z.ZodOptional<z.ZodBoolean>;
+                        urlAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         allowedMimes: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         maxBytes: z.ZodOptional<z.ZodNumber>;
                         maxChars: z.ZodOptional<z.ZodNumber>;
@@ -3174,6 +3184,7 @@ export declare const OpenClawSchema: z.ZodObject<{
                     }, z.core.$strict>>;
                     images: z.ZodOptional<z.ZodObject<{
                         allowUrl: z.ZodOptional<z.ZodBoolean>;
+                        urlAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         allowedMimes: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         maxBytes: z.ZodOptional<z.ZodNumber>;
                         maxRedirects: z.ZodOptional<z.ZodNumber>;

package/dist/plugin-sdk/config/zod-schema.providers-core.d.ts

@@ -649,6 +649,7 @@ export declare const DiscordGuildChannelSchema: z.ZodObject<{
     skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
     enabled: z.ZodOptional<z.ZodBoolean>;
     users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
     systemPrompt: z.ZodOptional<z.ZodString>;
     includeThreadStarter: z.ZodOptional<z.ZodBoolean>;
     autoThread: z.ZodOptional<z.ZodBoolean>;
@@ -673,6 +674,7 @@ export declare const DiscordGuildSchema: z.ZodObject<{
         own: "own";
     }>>;
     users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
     channels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodObject<{
         allow: z.ZodOptional<z.ZodBoolean>;
         requireMention: z.ZodOptional<z.ZodBoolean>;
@@ -689,6 +691,7 @@ export declare const DiscordGuildSchema: z.ZodObject<{
         skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
         enabled: z.ZodOptional<z.ZodBoolean>;
         users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
         systemPrompt: z.ZodOptional<z.ZodString>;
         includeThreadStarter: z.ZodOptional<z.ZodBoolean>;
         autoThread: z.ZodOptional<z.ZodBoolean>;
@@ -795,6 +798,7 @@ export declare const DiscordAccountSchema: z.ZodObject<{
             own: "own";
         }>>;
         users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
         channels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodObject<{
             allow: z.ZodOptional<z.ZodBoolean>;
             requireMention: z.ZodOptional<z.ZodBoolean>;
@@ -811,6 +815,7 @@ export declare const DiscordAccountSchema: z.ZodObject<{
             skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
             enabled: z.ZodOptional<z.ZodBoolean>;
             users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+            roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
             systemPrompt: z.ZodOptional<z.ZodString>;
             includeThreadStarter: z.ZodOptional<z.ZodBoolean>;
             autoThread: z.ZodOptional<z.ZodBoolean>;
@@ -939,6 +944,7 @@ export declare const DiscordConfigSchema: z.ZodObject<{
             own: "own";
         }>>;
         users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
         channels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodObject<{
             allow: z.ZodOptional<z.ZodBoolean>;
             requireMention: z.ZodOptional<z.ZodBoolean>;
@@ -955,6 +961,7 @@ export declare const DiscordConfigSchema: z.ZodObject<{
             skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
             enabled: z.ZodOptional<z.ZodBoolean>;
             users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+            roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
             systemPrompt: z.ZodOptional<z.ZodString>;
             includeThreadStarter: z.ZodOptional<z.ZodBoolean>;
             autoThread: z.ZodOptional<z.ZodBoolean>;
@@ -1082,6 +1089,7 @@ export declare const DiscordConfigSchema: z.ZodObject<{
                 own: "own";
             }>>;
             users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+            roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
             channels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodObject<{
                 allow: z.ZodOptional<z.ZodBoolean>;
                 requireMention: z.ZodOptional<z.ZodBoolean>;
@@ -1098,6 +1106,7 @@ export declare const DiscordConfigSchema: z.ZodObject<{
                 skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 enabled: z.ZodOptional<z.ZodBoolean>;
                 users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
                 systemPrompt: z.ZodOptional<z.ZodString>;
                 includeThreadStarter: z.ZodOptional<z.ZodBoolean>;
                 autoThread: z.ZodOptional<z.ZodBoolean>;

package/dist/plugin-sdk/config/zod-schema.providers.d.ts

@@ -558,6 +558,7 @@ export declare const ChannelsSchema: z.ZodOptional<z.ZodObject<{
                 own: "own";
             }>>;
             users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+            roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
             channels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodObject<{
                 allow: z.ZodOptional<z.ZodBoolean>;
                 requireMention: z.ZodOptional<z.ZodBoolean>;
@@ -574,6 +575,7 @@ export declare const ChannelsSchema: z.ZodOptional<z.ZodObject<{
                 skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 enabled: z.ZodOptional<z.ZodBoolean>;
                 users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
                 systemPrompt: z.ZodOptional<z.ZodString>;
                 includeThreadStarter: z.ZodOptional<z.ZodBoolean>;
                 autoThread: z.ZodOptional<z.ZodBoolean>;
@@ -701,6 +703,7 @@ export declare const ChannelsSchema: z.ZodOptional<z.ZodObject<{
                     own: "own";
                 }>>;
                 users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
                 channels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodObject<{
                     allow: z.ZodOptional<z.ZodBoolean>;
                     requireMention: z.ZodOptional<z.ZodBoolean>;
@@ -717,6 +720,7 @@ export declare const ChannelsSchema: z.ZodOptional<z.ZodObject<{
                     skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     enabled: z.ZodOptional<z.ZodBoolean>;
                     users: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                    roles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
                     systemPrompt: z.ZodOptional<z.ZodString>;
                     includeThreadStarter: z.ZodOptional<z.ZodBoolean>;
                     autoThread: z.ZodOptional<z.ZodBoolean>;

package/dist/plugin-sdk/discord/monitor/allow-list.d.ts

@@ -13,12 +13,14 @@ export type DiscordGuildEntryResolved = {
     requireMention?: boolean;
     reactionNotifications?: "off" | "own" | "all" | "allowlist";
     users?: Array<string | number>;
+    roles?: Array<string | number>;
     channels?: Record<string, {
         allow?: boolean;
         requireMention?: boolean;
         skills?: string[];
         enabled?: boolean;
         users?: Array<string | number>;
+        roles?: Array<string | number>;
         systemPrompt?: string;
         includeThreadStarter?: boolean;
         autoThread?: boolean;
@@ -30,6 +32,7 @@ export type DiscordChannelConfigResolved = {
     skills?: string[];
     enabled?: boolean;
     users?: Array<string | number>;
+    roles?: Array<string | number>;
     systemPrompt?: string;
     includeThreadStarter?: boolean;
     autoThread?: boolean;
@@ -61,6 +64,18 @@ export declare function resolveDiscordUserAllowed(params: {
     userName?: string;
     userTag?: string;
 }): boolean;
+export declare function resolveDiscordRoleAllowed(params: {
+    allowList?: Array<string | number>;
+    memberRoleIds: string[];
+}): boolean;
+export declare function resolveDiscordMemberAllowed(params: {
+    userAllowList?: Array<string | number>;
+    roleAllowList?: Array<string | number>;
+    memberRoleIds: string[];
+    userId: string;
+    userName?: string;
+    userTag?: string;
+}): boolean;
 export declare function resolveDiscordOwnerAllowFrom(params: {
     channelConfig?: DiscordChannelConfigResolved | null;
     guildInfo?: DiscordGuildEntryResolved | null;

package/dist/plugin-sdk/discord/send.types.d.ts

@@ -117,6 +117,9 @@ export type DiscordChannelEdit = {
     parentId?: string | null;
     nsfw?: boolean;
     rateLimitPerUser?: number;
+    archived?: boolean;
+    locked?: boolean;
+    autoArchiveDuration?: number;
 };
 export type DiscordChannelMove = {
     guildId: string;

package/dist/plugin-sdk/gateway/auth.d.ts

@@ -0,0 +1,36 @@
+import type { IncomingMessage } from "node:http";
+import type { GatewayAuthConfig, GatewayTailscaleMode } from "../config/config.js";
+import { type TailscaleWhoisIdentity } from "../infra/tailscale.js";
+export type ResolvedGatewayAuthMode = "token" | "password";
+export type ResolvedGatewayAuth = {
+    mode: ResolvedGatewayAuthMode;
+    token?: string;
+    password?: string;
+    allowTailscale: boolean;
+};
+export type GatewayAuthResult = {
+    ok: boolean;
+    method?: "token" | "password" | "tailscale" | "device-token";
+    user?: string;
+    reason?: string;
+};
+type ConnectAuth = {
+    token?: string;
+    password?: string;
+};
+type TailscaleWhoisLookup = (ip: string) => Promise<TailscaleWhoisIdentity | null>;
+export declare function isLocalDirectRequest(req?: IncomingMessage, trustedProxies?: string[]): boolean;
+export declare function resolveGatewayAuth(params: {
+    authConfig?: GatewayAuthConfig | null;
+    env?: NodeJS.ProcessEnv;
+    tailscaleMode?: GatewayTailscaleMode;
+}): ResolvedGatewayAuth;
+export declare function assertGatewayAuthConfigured(auth: ResolvedGatewayAuth): void;
+export declare function authorizeGatewayConnect(params: {
+    auth: ResolvedGatewayAuth;
+    connectAuth?: ConnectAuth | null;
+    req?: IncomingMessage;
+    trustedProxies?: string[];
+    tailscaleWhois?: TailscaleWhoisLookup;
+}): Promise<GatewayAuthResult>;
+export {};

package/dist/plugin-sdk/gateway/protocol/schema/agent.d.ts

@@ -48,6 +48,12 @@ export declare const AgentParamsSchema: import("node_modules/@sinclair/typebox/b
     timeout: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TInteger>;
     lane: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;
     extraSystemPrompt: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;
+    inputProvenance: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TObject<{
+        kind: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString;
+        sourceSessionKey: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;
+        sourceChannel: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;
+        sourceTool: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;
+    }>>;
     idempotencyKey: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString;
     label: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;
     spawnedBy: import("node_modules/@sinclair/typebox/build/esm/index.mjs").TOptional<import("node_modules/@sinclair/typebox/build/esm/index.mjs").TString>;

package/dist/plugin-sdk/gateway/session-utils.fs.d.ts

@@ -6,6 +6,8 @@ export declare function capArrayByJsonBytes<T>(items: T[], maxBytes: number): {
     items: T[];
     bytes: number;
 };
-export declare function readFirstUserMessageFromTranscript(sessionId: string, storePath: string | undefined, sessionFile?: string, agentId?: string): string | null;
+export declare function readFirstUserMessageFromTranscript(sessionId: string, storePath: string | undefined, sessionFile?: string, agentId?: string, opts?: {
+    includeInterSession?: boolean;
+}): string | null;
 export declare function readLastMessagePreviewFromTranscript(sessionId: string, storePath: string | undefined, sessionFile?: string, agentId?: string): string | null;
 export declare function readSessionPreviewItemsFromTranscript(sessionId: string, storePath: string | undefined, sessionFile: string | undefined, agentId: string | undefined, maxItems: number, maxChars: number): SessionPreviewItem[];