activeclaw 2026.2.12 → 2026.2.13

package/dist/{tailscale-DHfcfRCx.js → auth-CQNl_IaI.js}

@@ -1,7 +1,9 @@
-import { A as logVerbose, O as isVerbose, c as defaultRuntime, k as isYes } from "./subsystem-Bv7dGhES.js";
-import { n as runExec } from "./exec-DXtR2fhb.js";
+import { A as logVerbose, O as isVerbose, c as defaultRuntime, k as isYes } from "./subsystem-BoExtIHo.js";
+import { n as runExec } from "./exec-YIosokWE.js";
+import { i as isTrustedProxyAddress, l as resolveGatewayClientIp, n as isLoopbackAddress, o as parseForwardedForClientIp } from "./ws-CHCQHs0F.js";
 import { stdin, stdout } from "node:process";
 import { existsSync } from "node:fs";
+import { timingSafeEqual } from "node:crypto";
 import readline from "node:readline/promises";
 
 //#region src/cli/prompt.ts
@@ -249,4 +251,189 @@ async function readTailscaleWhoisIdentity(ip, exec = runExec, opts) {
 }
 
 //#endregion
-export { findTailscaleBinary as a, readTailscaleWhoisIdentity as c, enableTailscaleServe as i, ensureBinary as l, disableTailscaleServe as n, getTailnetHostname as o, enableTailscaleFunnel as r, readTailscaleStatusJson as s, disableTailscaleFunnel as t, promptYesNo as u };
+//#region src/security/secret-equal.ts
+function safeEqualSecret(provided, expected) {
+	if (typeof provided !== "string" || typeof expected !== "string") return false;
+	const providedBuffer = Buffer.from(provided);
+	const expectedBuffer = Buffer.from(expected);
+	if (providedBuffer.length !== expectedBuffer.length) return false;
+	return timingSafeEqual(providedBuffer, expectedBuffer);
+}
+
+//#endregion
+//#region src/gateway/auth.ts
+function normalizeLogin(login) {
+	return login.trim().toLowerCase();
+}
+function getHostName(hostHeader) {
+	const host = (hostHeader ?? "").trim().toLowerCase();
+	if (!host) return "";
+	if (host.startsWith("[")) {
+		const end = host.indexOf("]");
+		if (end !== -1) return host.slice(1, end);
+	}
+	const [name] = host.split(":");
+	return name ?? "";
+}
+function headerValue(value) {
+	return Array.isArray(value) ? value[0] : value;
+}
+function resolveTailscaleClientIp(req) {
+	if (!req) return;
+	const forwardedFor = headerValue(req.headers?.["x-forwarded-for"]);
+	return forwardedFor ? parseForwardedForClientIp(forwardedFor) : void 0;
+}
+function resolveRequestClientIp(req, trustedProxies) {
+	if (!req) return;
+	return resolveGatewayClientIp({
+		remoteAddr: req.socket?.remoteAddress ?? "",
+		forwardedFor: headerValue(req.headers?.["x-forwarded-for"]),
+		realIp: headerValue(req.headers?.["x-real-ip"]),
+		trustedProxies
+	});
+}
+function isLocalDirectRequest(req, trustedProxies) {
+	if (!req) return false;
+	if (!isLoopbackAddress(resolveRequestClientIp(req, trustedProxies) ?? "")) return false;
+	const host = getHostName(req.headers?.host);
+	const hostIsLocal = host === "localhost" || host === "127.0.0.1" || host === "::1";
+	const hostIsTailscaleServe = host.endsWith(".ts.net");
+	const hasForwarded = Boolean(req.headers?.["x-forwarded-for"] || req.headers?.["x-real-ip"] || req.headers?.["x-forwarded-host"]);
+	const remoteIsTrustedProxy = isTrustedProxyAddress(req.socket?.remoteAddress, trustedProxies);
+	return (hostIsLocal || hostIsTailscaleServe) && (!hasForwarded || remoteIsTrustedProxy);
+}
+function getTailscaleUser(req) {
+	if (!req) return null;
+	const login = req.headers["tailscale-user-login"];
+	if (typeof login !== "string" || !login.trim()) return null;
+	const nameRaw = req.headers["tailscale-user-name"];
+	const profilePic = req.headers["tailscale-user-profile-pic"];
+	const name = typeof nameRaw === "string" && nameRaw.trim() ? nameRaw.trim() : login.trim();
+	return {
+		login: login.trim(),
+		name,
+		profilePic: typeof profilePic === "string" && profilePic.trim() ? profilePic.trim() : void 0
+	};
+}
+function hasTailscaleProxyHeaders(req) {
+	if (!req) return false;
+	return Boolean(req.headers["x-forwarded-for"] && req.headers["x-forwarded-proto"] && req.headers["x-forwarded-host"]);
+}
+function isTailscaleProxyRequest(req) {
+	if (!req) return false;
+	return isLoopbackAddress(req.socket?.remoteAddress) && hasTailscaleProxyHeaders(req);
+}
+async function resolveVerifiedTailscaleUser(params) {
+	const { req, tailscaleWhois } = params;
+	const tailscaleUser = getTailscaleUser(req);
+	if (!tailscaleUser) return {
+		ok: false,
+		reason: "tailscale_user_missing"
+	};
+	if (!isTailscaleProxyRequest(req)) return {
+		ok: false,
+		reason: "tailscale_proxy_missing"
+	};
+	const clientIp = resolveTailscaleClientIp(req);
+	if (!clientIp) return {
+		ok: false,
+		reason: "tailscale_whois_failed"
+	};
+	const whois = await tailscaleWhois(clientIp);
+	if (!whois?.login) return {
+		ok: false,
+		reason: "tailscale_whois_failed"
+	};
+	if (normalizeLogin(whois.login) !== normalizeLogin(tailscaleUser.login)) return {
+		ok: false,
+		reason: "tailscale_user_mismatch"
+	};
+	return {
+		ok: true,
+		user: {
+			login: whois.login,
+			name: whois.name ?? tailscaleUser.name,
+			profilePic: tailscaleUser.profilePic
+		}
+	};
+}
+function resolveGatewayAuth(params) {
+	const authConfig = params.authConfig ?? {};
+	const env = params.env ?? process.env;
+	const token = authConfig.token ?? env.OPENCLAW_GATEWAY_TOKEN ?? env.CLAWDBOT_GATEWAY_TOKEN ?? void 0;
+	const password = authConfig.password ?? env.OPENCLAW_GATEWAY_PASSWORD ?? env.CLAWDBOT_GATEWAY_PASSWORD ?? void 0;
+	const mode = authConfig.mode ?? (password ? "password" : "token");
+	return {
+		mode,
+		token,
+		password,
+		allowTailscale: authConfig.allowTailscale ?? (params.tailscaleMode === "serve" && mode !== "password")
+	};
+}
+function assertGatewayAuthConfigured(auth) {
+	if (auth.mode === "token" && !auth.token) {
+		if (auth.allowTailscale) return;
+		throw new Error("gateway auth mode is token, but no token was configured (set gateway.auth.token or OPENCLAW_GATEWAY_TOKEN)");
+	}
+	if (auth.mode === "password" && !auth.password) throw new Error("gateway auth mode is password, but no password was configured");
+}
+async function authorizeGatewayConnect(params) {
+	const { auth, connectAuth, req, trustedProxies } = params;
+	const tailscaleWhois = params.tailscaleWhois ?? readTailscaleWhoisIdentity;
+	const localDirect = isLocalDirectRequest(req, trustedProxies);
+	if (auth.allowTailscale && !localDirect) {
+		const tailscaleCheck = await resolveVerifiedTailscaleUser({
+			req,
+			tailscaleWhois
+		});
+		if (tailscaleCheck.ok) return {
+			ok: true,
+			method: "tailscale",
+			user: tailscaleCheck.user.login
+		};
+	}
+	if (auth.mode === "token") {
+		if (!auth.token) return {
+			ok: false,
+			reason: "token_missing_config"
+		};
+		if (!connectAuth?.token) return {
+			ok: false,
+			reason: "token_missing"
+		};
+		if (!safeEqualSecret(connectAuth.token, auth.token)) return {
+			ok: false,
+			reason: "token_mismatch"
+		};
+		return {
+			ok: true,
+			method: "token"
+		};
+	}
+	if (auth.mode === "password") {
+		const password = connectAuth?.password;
+		if (!auth.password) return {
+			ok: false,
+			reason: "password_missing_config"
+		};
+		if (!password) return {
+			ok: false,
+			reason: "password_missing"
+		};
+		if (!safeEqualSecret(password, auth.password)) return {
+			ok: false,
+			reason: "password_mismatch"
+		};
+		return {
+			ok: true,
+			method: "password"
+		};
+	}
+	return {
+		ok: false,
+		reason: "unauthorized"
+	};
+}
+
+//#endregion
+export { safeEqualSecret as a, enableTailscaleFunnel as c, getTailnetHostname as d, readTailscaleStatusJson as f, resolveGatewayAuth as i, enableTailscaleServe as l, promptYesNo as m, authorizeGatewayConnect as n, disableTailscaleFunnel as o, ensureBinary as p, isLocalDirectRequest as r, disableTailscaleServe as s, assertGatewayAuthConfigured as t, findTailscaleBinary as u };

package/dist/{auth-health-BB3e3OmN.js → auth-health-C4L4FGBA.js}

@@ -1,4 +1,4 @@
-import { Ct as resolveAuthProfileDisplayLabel } from "./model-selection-unMJyUIE.js";
+import { Ct as resolveAuthProfileDisplayLabel } from "./model-selection-BLuqsGVB.js";
 
 //#region src/agents/auth-health.ts
 const DEFAULT_OAUTH_WARN_MS = 1440 * 60 * 1e3;

package/dist/{auth-health-zZ9dnQGC.js → auth-health-j6epgQbq.js}

@@ -1,4 +1,4 @@
-import { Et as resolveAuthProfileDisplayLabel } from "./auth-profiles-CcJ3hrog.js";
+import { Et as resolveAuthProfileDisplayLabel } from "./auth-profiles-ByNs3eEm.js";
 
 //#region src/agents/auth-health.ts
 const DEFAULT_OAUTH_WARN_MS = 1440 * 60 * 1e3;

package/dist/{auth-profiles-CcJ3hrog.js → auth-profiles-ByNs3eEm.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { X as resolveStateDir, Y as resolveOAuthPath, n as isTruthyEnvValue, o as createSubsystemLogger } from "./entry.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
+import { X as resolveOAuthPath, Z as resolveStateDir, n as isTruthyEnvValue, o as createSubsystemLogger } from "./entry.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
 import { n as DEFAULT_AGENT_ID } from "./session-key-DVvxnFKg.js";
-import { y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { a as resolveAgentModelPrimary } from "./agent-scope-RCSw6gHy.js";
-import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken, t as DEFAULT_COPILOT_API_BASE_URL } from "./github-copilot-token-SLWintYd.js";
+import { y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { a as resolveAgentModelPrimary } from "./agent-scope-CsRbLH4l.js";
+import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken, t as DEFAULT_COPILOT_API_BASE_URL } from "./github-copilot-token-Cfs0Wxr8.js";
 import { execFileSync, execSync } from "node:child_process";
 import path from "node:path";
 import fs from "node:fs";
@@ -1421,23 +1421,53 @@ function buildMinimaxProvider() {
 	return {
 		baseUrl: MINIMAX_API_BASE_URL,
 		api: "openai-completions",
-		models: [{
-			id: MINIMAX_DEFAULT_MODEL_ID,
-			name: "MiniMax M2.1",
-			reasoning: false,
-			input: ["text"],
-			cost: MINIMAX_API_COST,
-			contextWindow: MINIMAX_DEFAULT_CONTEXT_WINDOW,
-			maxTokens: MINIMAX_DEFAULT_MAX_TOKENS
-		}, {
-			id: MINIMAX_DEFAULT_VISION_MODEL_ID,
-			name: "MiniMax VL 01",
-			reasoning: false,
-			input: ["text", "image"],
-			cost: MINIMAX_API_COST,
-			contextWindow: MINIMAX_DEFAULT_CONTEXT_WINDOW,
-			maxTokens: MINIMAX_DEFAULT_MAX_TOKENS
-		}]
+		models: [
+			{
+				id: MINIMAX_DEFAULT_MODEL_ID,
+				name: "MiniMax M2.1",
+				reasoning: false,
+				input: ["text"],
+				cost: MINIMAX_API_COST,
+				contextWindow: MINIMAX_DEFAULT_CONTEXT_WINDOW,
+				maxTokens: MINIMAX_DEFAULT_MAX_TOKENS
+			},
+			{
+				id: "MiniMax-M2.1-lightning",
+				name: "MiniMax M2.1 Lightning",
+				reasoning: false,
+				input: ["text"],
+				cost: MINIMAX_API_COST,
+				contextWindow: MINIMAX_DEFAULT_CONTEXT_WINDOW,
+				maxTokens: MINIMAX_DEFAULT_MAX_TOKENS
+			},
+			{
+				id: MINIMAX_DEFAULT_VISION_MODEL_ID,
+				name: "MiniMax VL 01",
+				reasoning: false,
+				input: ["text", "image"],
+				cost: MINIMAX_API_COST,
+				contextWindow: MINIMAX_DEFAULT_CONTEXT_WINDOW,
+				maxTokens: MINIMAX_DEFAULT_MAX_TOKENS
+			},
+			{
+				id: "MiniMax-M2.5",
+				name: "MiniMax M2.5",
+				reasoning: true,
+				input: ["text"],
+				cost: MINIMAX_API_COST,
+				contextWindow: MINIMAX_DEFAULT_CONTEXT_WINDOW,
+				maxTokens: MINIMAX_DEFAULT_MAX_TOKENS
+			},
+			{
+				id: "MiniMax-M2.5-Lightning",
+				name: "MiniMax M2.5 Lightning",
+				reasoning: true,
+				input: ["text"],
+				cost: MINIMAX_API_COST,
+				contextWindow: MINIMAX_DEFAULT_CONTEXT_WINDOW,
+				maxTokens: MINIMAX_DEFAULT_MAX_TOKENS
+			}
+		]
 	};
 }
 function buildMinimaxPortalProvider() {
@@ -1452,6 +1482,14 @@ function buildMinimaxPortalProvider() {
 			cost: MINIMAX_API_COST,
 			contextWindow: MINIMAX_DEFAULT_CONTEXT_WINDOW,
 			maxTokens: MINIMAX_DEFAULT_MAX_TOKENS
+		}, {
+			id: "MiniMax-M2.5",
+			name: "MiniMax M2.5",
+			reasoning: true,
+			input: ["text"],
+			cost: MINIMAX_API_COST,
+			contextWindow: MINIMAX_DEFAULT_CONTEXT_WINDOW,
+			maxTokens: MINIMAX_DEFAULT_MAX_TOKENS
 		}]
 	};
 }

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.2.12",
-  "commit": "978caae43cb91f7446e223579191e110fa522743",
-  "builtAt": "2026-02-12T20:38:27.227Z"
+  "version": "2026.2.13",
+  "commit": "a5516aa558835f9a5a093b567b24f6657987810e",
+  "builtAt": "2026-02-13T02:29:14.868Z"
 }

package/dist/bundled/boot-md/handler.js

@@ -1,23 +1,23 @@
 import "../../paths-BZtyHNCi.js";
-import { M as normalizeAgentId, N as normalizeMainKey, P as resolveAgentIdFromSessionKey, a as resolveAgentModelPrimary, i as resolveAgentModelFallbacksOverride, o as resolveAgentSkillsFilter, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, y as ensureAgentWorkspace } from "../../agent-scope-rXQ7WARN.js";
-import { g as DEFAULT_CHAT_CHANNEL, l as createSubsystemLogger, u as defaultRuntime } from "../../exec-4WHuOniw.js";
-import { K as SILENT_REPLY_TOKEN, a as normalizeOutboundPayloadsForJson, i as normalizeOutboundPayloads, m as sendMessageSignal, r as formatOutboundPayloadLog, t as deliverOutboundPayloads } from "../../deliver-COf5XFo_.js";
-import { C as emitAgentEvent, E as sendMessageSlack, S as clearAgentRunContext, T as sendMessageWhatsApp, _ as clearSessionAuthProfileOverride, a as getCliSessionId, b as resolveAgentTimeoutMs, c as resolveOutboundTarget, d as deriveSessionTotalTokens, f as hasNonzeroUsage, g as lookupContextTokens, h as getSkillsSnapshotVersion, i as sendMessageDiscord, l as resolveSessionDeliveryTarget, m as getRemoteSkillEligibility, n as sendMessageIMessage, o as setCliSessionId, p as resolveSendPolicy, r as sendMessageTelegram, s as runCliAgent, t as runEmbeddedPiAgent, u as runWithModelFallback, v as applyModelOverrideToSessionEntry, w as registerAgentRunContext, x as AGENT_LANE_NESTED, y as applyVerboseOverride } from "../../pi-embedded-DhYItk8O.js";
-import { $ as updateSessionStore, Fn as normalizeChannelId, Nn as getChannelPlugin, Wt as buildWorkspaceSkillSnapshot, Y as loadSessionStore, _n as resolveMessageChannel, _t as resolveMainSessionKey, a as formatXHighModelHint, ct as normalizeAccountId, d as normalizeVerboseLevel, dn as isGatewayMessageChannel, dt as resolveChannelResetConfig, fn as isInternalMessageChannel, ft as resolveSessionResetPolicy, gt as resolveExplicitAgentSessionKey, hn as normalizeMessageChannel, i as formatThinkingLevels, l as normalizeThinkLevel, ln as INTERNAL_MESSAGE_CHANNEL, lt as resolveSessionKey, p as supportsXHighThinking, pt as resolveSessionResetType, un as isDeliverableMessageChannel, ut as evaluateSessionFreshness } from "../../pi-embedded-helpers-Bri9tk9g.js";
-import { F as DEFAULT_MODEL, I as DEFAULT_PROVIDER, O as resolveThinkingDefault, P as DEFAULT_CONTEXT_TOKENS, S as modelKey, T as resolveConfiguredModelRef, h as ensureAuthProfileStore, v as buildAllowedModelSet, x as isCliProvider } from "../../model-auth-CbqRVYRp.js";
+import { M as normalizeAgentId, N as normalizeMainKey, P as resolveAgentIdFromSessionKey, a as resolveAgentModelPrimary, i as resolveAgentModelFallbacksOverride, o as resolveAgentSkillsFilter, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, y as ensureAgentWorkspace } from "../../agent-scope-BIEhVP4_.js";
+import { g as DEFAULT_CHAT_CHANNEL, l as createSubsystemLogger, u as defaultRuntime } from "../../exec-B8lXct-k.js";
+import { J as SILENT_REPLY_TOKEN, a as normalizeOutboundPayloadsForJson, i as normalizeOutboundPayloads, m as sendMessageSignal, r as formatOutboundPayloadLog, t as deliverOutboundPayloads } from "../../deliver-DYYCo1G7.js";
+import { C as emitAgentEvent, D as sendMessageSlack, E as sendMessageWhatsApp, S as clearAgentRunContext, _ as clearSessionAuthProfileOverride, a as getCliSessionId, b as resolveAgentTimeoutMs, c as resolveOutboundTarget, d as deriveSessionTotalTokens, f as hasNonzeroUsage, g as lookupContextTokens, h as getSkillsSnapshotVersion, i as sendMessageDiscord, l as resolveSessionDeliveryTarget, m as getRemoteSkillEligibility, n as sendMessageIMessage, o as setCliSessionId, p as resolveSendPolicy, r as sendMessageTelegram, s as runCliAgent, t as runEmbeddedPiAgent, u as runWithModelFallback, v as applyModelOverrideToSessionEntry, w as registerAgentRunContext, x as AGENT_LANE_NESTED, y as applyVerboseOverride } from "../../pi-embedded-Ctrt2kz0.js";
+import { $ as updateSessionStore, Fn as getChannelPlugin, Ln as normalizeChannelId, Ut as buildWorkspaceSkillSnapshot, Y as loadSessionStore, _n as normalizeMessageChannel, _t as resolveMainSessionKey, a as formatXHighModelHint, ct as normalizeAccountId, d as normalizeVerboseLevel, dn as INTERNAL_MESSAGE_CHANNEL, dt as resolveChannelResetConfig, fn as isDeliverableMessageChannel, ft as resolveSessionResetPolicy, gt as resolveExplicitAgentSessionKey, i as formatThinkingLevels, l as normalizeThinkLevel, lt as resolveSessionKey, mn as isInternalMessageChannel, p as supportsXHighThinking, pn as isGatewayMessageChannel, pt as resolveSessionResetType, ut as evaluateSessionFreshness, yn as resolveMessageChannel } from "../../pi-embedded-helpers-WDwx99UA.js";
+import { F as DEFAULT_MODEL, I as DEFAULT_PROVIDER, O as resolveThinkingDefault, P as DEFAULT_CONTEXT_TOKENS, S as modelKey, T as resolveConfiguredModelRef, h as ensureAuthProfileStore, v as buildAllowedModelSet, x as isCliProvider } from "../../model-auth-CabXIF6O.js";
 import { t as formatCliCommand } from "../../command-format-qUVxzqYm.js";
-import { t as loadConfig } from "../../config-BuF7vm-v.js";
+import { t as loadConfig } from "../../config-BvMsmctM.js";
 import "../../github-copilot-token-DkiRbJdR.js";
 import "../../pi-model-discovery-DqgqUyAv.js";
-import "../../chrome-svgmQ8T_.js";
-import { a as resolveStorePath, n as resolveSessionFilePath } from "../../paths-DwKNqk_S.js";
-import "../../image-Dkawt9Kg.js";
-import "../../manager-CBApH7eR.js";
-import "../../sqlite-BkYnxkQO.js";
+import "../../chrome-BfB6JdKF.js";
+import { a as resolveStorePath, n as resolveSessionFilePath } from "../../paths-B0a4ywSO.js";
+import "../../image-Brk1sJbw.js";
+import "../../manager-BIMh_eSm.js";
+import "../../sqlite-DRRHmlug.js";
 import "../../redact-BrXLgslJ.js";
-import "../../fetch-timeout-4UKsdtE1.js";
-import { s as loadModelCatalog } from "../../runner-BCBs8JKA.js";
-import "../../login-qr-CoskdtvN.js";
+import "../../fetch-timeout-BEtUjM1S.js";
+import { s as loadModelCatalog } from "../../runner-Cfm5nTMc.js";
+import "../../login-qr-Bua-p0nG.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import crypto from "node:crypto";
@@ -268,6 +268,7 @@ function resolveAgentRunContext(opts) {
 async function updateSessionStoreAfterAgentRun(params) {
 	const { cfg, sessionId, sessionKey, storePath, sessionStore, defaultProvider, defaultModel, fallbackProvider, fallbackModel, result } = params;
 	const usage = result.meta.agentMeta?.usage;
+	const promptTokens = result.meta.agentMeta?.promptTokens;
 	const compactionsThisRun = Math.max(0, result.meta.agentMeta?.compactionCount ?? 0);
 	const modelUsed = result.meta.agentMeta?.model ?? fallbackModel ?? defaultModel;
 	const providerUsed = result.meta.agentMeta?.provider ?? fallbackProvider ?? defaultProvider;
@@ -296,7 +297,8 @@ async function updateSessionStoreAfterAgentRun(params) {
 		next.outputTokens = output;
 		next.totalTokens = deriveSessionTotalTokens({
 			usage,
-			contextTokens
+			contextTokens,
+			promptTokens
 		}) ?? input;
 	}
 	if (compactionsThisRun > 0) next.compactionCount = (entry.compactionCount ?? 0) + compactionsThisRun;
@@ -661,6 +663,7 @@ async function agentCommand(opts, runtime = defaultRuntime, deps = createDefault
 						lane: opts.lane,
 						abortSignal: opts.abortSignal,
 						extraSystemPrompt: opts.extraSystemPrompt,
+						inputProvenance: opts.inputProvenance,
 						streamParams: opts.streamParams,
 						agentDir,
 						onAgentEvent: (evt) => {

package/dist/bundled/session-memory/handler.js

@@ -1,22 +1,22 @@
 import { s as resolveStateDir } from "../../paths-BZtyHNCi.js";
-import { P as resolveAgentIdFromSessionKey, s as resolveAgentWorkspaceDir } from "../../agent-scope-rXQ7WARN.js";
-import { l as createSubsystemLogger } from "../../exec-4WHuOniw.js";
-import "../../deliver-COf5XFo_.js";
-import "../../pi-embedded-DhYItk8O.js";
-import "../../pi-embedded-helpers-Bri9tk9g.js";
-import "../../model-auth-CbqRVYRp.js";
-import "../../config-BuF7vm-v.js";
+import { P as resolveAgentIdFromSessionKey, s as resolveAgentWorkspaceDir } from "../../agent-scope-BIEhVP4_.js";
+import { l as createSubsystemLogger } from "../../exec-B8lXct-k.js";
+import "../../deliver-DYYCo1G7.js";
+import { T as hasInterSessionUserProvenance } from "../../pi-embedded-Ctrt2kz0.js";
+import "../../pi-embedded-helpers-WDwx99UA.js";
+import "../../model-auth-CabXIF6O.js";
+import "../../config-BvMsmctM.js";
 import "../../github-copilot-token-DkiRbJdR.js";
 import "../../pi-model-discovery-DqgqUyAv.js";
-import "../../chrome-svgmQ8T_.js";
-import "../../paths-DwKNqk_S.js";
-import "../../image-Dkawt9Kg.js";
-import "../../manager-CBApH7eR.js";
-import "../../sqlite-BkYnxkQO.js";
+import "../../chrome-BfB6JdKF.js";
+import "../../paths-B0a4ywSO.js";
+import "../../image-Brk1sJbw.js";
+import "../../manager-BIMh_eSm.js";
+import "../../sqlite-DRRHmlug.js";
 import "../../redact-BrXLgslJ.js";
-import "../../fetch-timeout-4UKsdtE1.js";
-import "../../runner-BCBs8JKA.js";
-import "../../login-qr-CoskdtvN.js";
+import "../../fetch-timeout-BEtUjM1S.js";
+import "../../runner-Cfm5nTMc.js";
+import "../../login-qr-Bua-p0nG.js";
 import { generateSlugViaLLM } from "../../llm-slug-generator.js";
 import fs from "node:fs/promises";
 import os from "node:os";
@@ -55,6 +55,7 @@ async function getRecentSessionContent(sessionFilePath, messageCount = 15) {
 				const msg = entry.message;
 				const role = msg.role;
 				if ((role === "user" || role === "assistant") && msg.content) {
+					if (role === "user" && hasInterSessionUserProvenance(msg)) continue;
 					const text = Array.isArray(msg.content) ? msg.content.find((c) => c.type === "text")?.text : msg.content;
 					if (text && !text.startsWith("/")) allMessages.push(`${role}: ${text}`);
 				}

package/dist/{call-Yxns4CVq.js → call-DVYCIV8m.js}

@@ -1,10 +1,10 @@
-import { B as resolveConfigPath, W as resolveGatewayPort, X as resolveStateDir } from "./entry.js";
-import { s as ensureDir, t as CONFIG_DIR, x as shortenHomeInString, y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { i as loadConfig } from "./config-B7sno9eI.js";
+import { G as resolveGatewayPort, V as resolveConfigPath, Z as resolveStateDir } from "./entry.js";
+import { s as ensureDir, t as CONFIG_DIR, x as shortenHomeInString, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { i as loadConfig } from "./config-Bdhomfei.js";
 import { t as pickPrimaryTailnetIPv4 } from "./tailnet-CL5GtL7t.js";
 import { s as pickPrimaryLanIPv4 } from "./ws-C0k_dhCP.js";
-import { Et as PROTOCOL_VERSION, Mt as normalizeFingerprint, Pt as loadOrCreateDeviceIdentity, t as GatewayClient } from "./client-D7wrC1Ug.js";
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-BlgPSDAh.js";
+import { Et as PROTOCOL_VERSION, Ft as normalizeFingerprint, Lt as loadOrCreateDeviceIdentity, t as GatewayClient } from "./client-CTwXnRl7.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-C_MmebBt.js";
 import { execFile } from "node:child_process";
 import path from "node:path";
 import { promisify } from "node:util";

package/dist/{call-C9az806y.js → call-SolyGS1r.js}

@@ -1,10 +1,10 @@
 import { g as resolveStateDir, o as resolveConfigPath, u as resolveGatewayPort } from "./paths-DVBShlw6.js";
-import { S as shortenHomeInString, b as resolveUserPath, c as ensureDir, t as CONFIG_DIR } from "./utils-BHPdZE4h.js";
-import { i as loadConfig } from "./config-DH9TLUNc.js";
+import { S as shortenHomeInString, b as resolveUserPath, c as ensureDir, t as CONFIG_DIR } from "./utils-Cd9QdCHh.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
 import { t as pickPrimaryTailnetIPv4 } from "./tailnet-DATIFSsY.js";
 import { s as pickPrimaryLanIPv4 } from "./ws-CHCQHs0F.js";
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-0717wOz-.js";
-import { Et as PROTOCOL_VERSION, Mt as normalizeFingerprint, Pt as loadOrCreateDeviceIdentity, t as GatewayClient } from "./client-B0_GiCjB.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-BLi2a6Yw.js";
+import { Et as PROTOCOL_VERSION, Ft as normalizeFingerprint, Lt as loadOrCreateDeviceIdentity, t as GatewayClient } from "./client-BrYfyoDK.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { execFile } from "node:child_process";

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-dc0ec67d7d57a4f9eade2786920a26e962b3e120e3dcaaefd6048e844b77c6b8
+08e97eaf1fea46c91808c5ad7ce3ea718fd9370808e86c28d97d783b63e5584e

package/dist/{channel-options-CjXPwMWu.js → channel-options-BwC2yQcR.js}

@@ -1,7 +1,7 @@
-import { Q as CHAT_CHANNEL_ORDER, n as isTruthyEnvValue } from "./entry.js";
-import { i as listChannelPluginCatalogEntries } from "./plugin-auto-enable-BY4CqJbD.js";
-import { n as listChannelPlugins } from "./plugins-3GyCj5KL.js";
-import { n as ensurePluginRegistryLoaded } from "./command-options-BSDiKuyX.js";
+import { et as CHAT_CHANNEL_ORDER, n as isTruthyEnvValue } from "./entry.js";
+import { i as listChannelPluginCatalogEntries } from "./plugin-auto-enable-Bqhc3w5n.js";
+import { n as listChannelPlugins } from "./plugins-4Hqd1WGf.js";
+import { n as ensurePluginRegistryLoaded } from "./command-options-BvgxzPbK.js";
 
 //#region src/cli/channel-options.ts
 function dedupe(values) {

package/dist/{channel-options-CX4iYQfR.js → channel-options-Cq9BVDkP.js}

@@ -1,10 +1,10 @@
-import { C as getActivePluginRegistry, m as CHAT_CHANNEL_ORDER, t as createSubsystemLogger } from "./subsystem-Bv7dGhES.js";
-import { ut as loadOpenClawPlugins } from "./reply-m467_fOC.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope---6LLHj0.js";
-import { t as isTruthyEnvValue } from "./env-DE9xvYOL.js";
-import { i as loadConfig } from "./config-DH9TLUNc.js";
-import { n as listChannelPlugins } from "./plugins-BL9lIXSA.js";
-import { i as listChannelPluginCatalogEntries } from "./plugin-auto-enable-DbQrtQjL.js";
+import { C as getActivePluginRegistry, m as CHAT_CHANNEL_ORDER, t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { ut as loadOpenClawPlugins } from "./reply-DICXkh_C.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CQCus0rI.js";
+import { t as isTruthyEnvValue } from "./env-ONzUVAG2.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
+import { n as listChannelPlugins } from "./plugins-X7d_tfTE.js";
+import { i as listChannelPluginCatalogEntries } from "./plugin-auto-enable-PW76g_PJ.js";
 
 //#region src/cli/command-options.ts
 function hasExplicitOptions(command, names) {

package/dist/{channel-selection-BoQ7GurB.js → channel-selection-D4D6ImhN.js}

@@ -1,5 +1,5 @@
-import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-BlgPSDAh.js";
-import { n as listChannelPlugins } from "./plugins-3GyCj5KL.js";
+import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-C_MmebBt.js";
+import { n as listChannelPlugins } from "./plugins-4Hqd1WGf.js";
 
 //#region src/infra/outbound/channel-selection.ts
 const getMessageChannels = () => listDeliverableMessageChannels();

package/dist/{channel-selection-C78IwbD-.js → channel-selection-MZAHm4U8.js}

@@ -1,5 +1,5 @@
-import { n as listChannelPlugins } from "./plugins-BL9lIXSA.js";
-import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-0717wOz-.js";
+import { n as listChannelPlugins } from "./plugins-X7d_tfTE.js";
+import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-BLi2a6Yw.js";
 
 //#region src/infra/outbound/channel-selection.ts
 const getMessageChannels = () => listDeliverableMessageChannels();