activeclaw 2026.2.12 → 2026.2.13

package/dist/{routes-82Ywfho6.js → routes-CmOI1hIH.js}

@@ -1,9 +1,10 @@
-import { _ as resolveConfigDir } from "./utils-BHPdZE4h.js";
-import { n as runExec } from "./exec-DXtR2fhb.js";
+import { W as resolvePreferredOpenClawTmpDir } from "./subsystem-BoExtIHo.js";
+import { _ as resolveConfigDir } from "./utils-Cd9QdCHh.js";
+import { n as runExec } from "./exec-YIosokWE.js";
 import { t as parseBooleanValue } from "./boolean-BgXe2hyu.js";
-import { c as writeConfigFile, i as loadConfig } from "./config-DH9TLUNc.js";
-import { D as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, E as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, a as resolveOpenClawUserDataDir, h as captureScreenshot, k as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, m as resolveBrowserExecutableForPlatform, y as snapshotAria } from "./chrome-juQxt0zf.js";
-import { a as resolveProfile, c as getUsedColors, d as deriveDefaultBrowserCdpPortRange, f as getPwAiModule$1, l as getUsedPorts, n as movePathToTrash, o as allocateCdpPort, r as parseHttpUrl, s as allocateColor, u as isValidProfileName } from "./server-context-Lb-eUZG_.js";
+import { c as writeConfigFile, i as loadConfig } from "./config-aFQssWKX.js";
+import { D as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, E as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, O as DEFAULT_AI_SNAPSHOT_MAX_CHARS, a as resolveOpenClawUserDataDir, h as captureScreenshot, k as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, m as resolveBrowserExecutableForPlatform, y as snapshotAria } from "./chrome-Cvr-57lg.js";
+import { a as resolveProfile, c as getUsedColors, d as deriveDefaultBrowserCdpPortRange, f as getPwAiModule$1, l as getUsedPorts, n as movePathToTrash, o as allocateCdpPort, r as parseHttpUrl, s as allocateColor, u as isValidProfileName } from "./server-context-Cl0U0vE3.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -590,6 +591,7 @@ function registerBrowserAgentActRoutes(app, ctx) {
 
 //#endregion
 //#region src/browser/routes/agent.debug.ts
+const DEFAULT_TRACE_DIR = resolvePreferredOpenClawTmpDir();
 function registerBrowserAgentDebugRoutes(app, ctx) {
 	app.get("/console", async (req, res) => {
 		const profileCtx = resolveProfileContext(req, res, ctx);
@@ -700,7 +702,7 @@ function registerBrowserAgentDebugRoutes(app, ctx) {
 			const pw = await requirePwAi(res, "trace stop");
 			if (!pw) return;
 			const id = crypto.randomUUID();
-			const dir = "/tmp/openclaw";
+			const dir = DEFAULT_TRACE_DIR;
 			await fs$1.mkdir(dir, { recursive: true });
 			const tracePath = out.trim() || path.join(dir, `browser-trace-${id}.zip`);
 			await pw.traceStopViaPlaywright({
@@ -743,6 +745,22 @@ function normalizeHostnameSet(values) {
 	if (!values || values.length === 0) return /* @__PURE__ */ new Set();
 	return new Set(values.map((value) => normalizeHostname(value)).filter(Boolean));
 }
+function normalizeHostnameAllowlist(values) {
+	if (!values || values.length === 0) return [];
+	return Array.from(new Set(values.map((value) => normalizeHostname(value)).filter((value) => value !== "*" && value !== "*." && value.length > 0)));
+}
+function isHostnameAllowedByPattern(hostname, pattern) {
+	if (pattern.startsWith("*.")) {
+		const suffix = pattern.slice(2);
+		if (!suffix || hostname === suffix) return false;
+		return hostname.endsWith(`.${suffix}`);
+	}
+	return hostname === pattern;
+}
+function matchesHostnameAllowlist(hostname, allowlist) {
+	if (allowlist.length === 0) return true;
+	return allowlist.some((pattern) => isHostnameAllowedByPattern(hostname, pattern));
+}
 function parseIpv4(address) {
 	const parts = address.split(".");
 	if (parts.length !== 4) return null;
@@ -843,7 +861,10 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 	const normalized = normalizeHostname(hostname);
 	if (!normalized) throw new Error("Invalid hostname");
 	const allowPrivateNetwork = Boolean(params.policy?.allowPrivateNetwork);
-	const isExplicitAllowed = normalizeHostnameSet(params.policy?.allowedHostnames).has(normalized);
+	const allowedHostnames = normalizeHostnameSet(params.policy?.allowedHostnames);
+	const hostnameAllowlist = normalizeHostnameAllowlist(params.policy?.hostnameAllowlist);
+	const isExplicitAllowed = allowedHostnames.has(normalized);
+	if (!matchesHostnameAllowlist(normalized, hostnameAllowlist)) throw new SsrFBlockedError(`Blocked hostname (not in allowlist): ${hostname}`);
 	if (!allowPrivateNetwork && !isExplicitAllowed) {
 		if (isBlockedHostname(normalized)) throw new SsrFBlockedError(`Blocked hostname: ${hostname}`);
 		if (isPrivateIpAddress(normalized)) throw new SsrFBlockedError("Blocked: private/internal IP address");
@@ -864,9 +885,6 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 		})
 	};
 }
-async function resolvePinnedHostname(hostname, lookupFn = lookup$1) {
-	return await resolvePinnedHostnameWithPolicy(hostname, { lookupFn });
-}
 function createPinnedDispatcher(pinned) {
 	return new Agent({ connect: { lookup: pinned.lookup } });
 }
@@ -2412,4 +2430,4 @@ function registerBrowserRoutes(app, ctx) {
 }
 
 //#endregion
-export { resolvePinnedHostnameWithPolicy as C, resolvePinnedHostname as S, maxBytesForKind as _, optimizeImageToPng as a, closeDispatcher as b, saveMediaBuffer as c, getFileExtension as d, imageMimeFromFormat as f, MAX_IMAGE_BYTES as g, kindFromMime as h, hasAlphaChannel as i, detectMime as l, isGifMedia as m, convertHeicToJpeg as n, resizeToJpeg as o, isAudioFileName as p, getImageMetadata as r, getMediaDir as s, registerBrowserRoutes as t, extensionForMime as u, mediaKindFromMime as v, createPinnedDispatcher as x, SsrFBlockedError as y };
+export { resolvePinnedHostnameWithPolicy as S, maxBytesForKind as _, optimizeImageToPng as a, closeDispatcher as b, saveMediaBuffer as c, getFileExtension as d, imageMimeFromFormat as f, MAX_IMAGE_BYTES as g, kindFromMime as h, hasAlphaChannel as i, detectMime as l, isGifMedia as m, convertHeicToJpeg as n, resizeToJpeg as o, isAudioFileName as p, getImageMetadata as r, getMediaDir as s, registerBrowserRoutes as t, extensionForMime as u, mediaKindFromMime as v, createPinnedDispatcher as x, SsrFBlockedError as y };

package/dist/{routes-BqxA3ZYr.js → routes-DewK5tq2.js}

@@ -1,9 +1,9 @@
-import { a as parseBooleanValue } from "./entry.js";
-import { g as resolveConfigDir } from "./utils-Dk86IbEs.js";
-import { n as runExec } from "./exec-B8JKbXKW.js";
-import { c as writeConfigFile, i as loadConfig } from "./config-B7sno9eI.js";
-import { c as allocateColor, d as isValidProfileName, f as deriveDefaultBrowserCdpPortRange, i as parseHttpUrl, l as getUsedColors, n as movePathToTrash, o as resolveProfile, r as getPwAiModule$1, s as allocateCdpPort, u as getUsedPorts } from "./server-context-fX4xiYRh.js";
-import { C as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, E as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, a as resolveOpenClawUserDataDir, f as captureScreenshot, g as snapshotAria, s as resolveBrowserExecutableForPlatform, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-yIKmOzCO.js";
+import { Q as resolvePreferredOpenClawTmpDir, a as parseBooleanValue } from "./entry.js";
+import { g as resolveConfigDir } from "./utils-BLJAc3ZV.js";
+import { n as runExec } from "./exec-CACT5OAW.js";
+import { c as writeConfigFile, i as loadConfig } from "./config-Bdhomfei.js";
+import { c as allocateColor, d as isValidProfileName, f as deriveDefaultBrowserCdpPortRange, i as parseHttpUrl, l as getUsedColors, n as movePathToTrash, o as resolveProfile, r as getPwAiModule$1, s as allocateCdpPort, u as getUsedPorts } from "./server-context-BGpGs3qd.js";
+import { C as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, E as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, a as resolveOpenClawUserDataDir, f as captureScreenshot, g as snapshotAria, s as resolveBrowserExecutableForPlatform, w as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS } from "./chrome-foEwx3lN.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs";
@@ -510,6 +510,22 @@ function normalizeHostnameSet(values) {
 	if (!values || values.length === 0) return /* @__PURE__ */ new Set();
 	return new Set(values.map((value) => normalizeHostname(value)).filter(Boolean));
 }
+function normalizeHostnameAllowlist(values) {
+	if (!values || values.length === 0) return [];
+	return Array.from(new Set(values.map((value) => normalizeHostname(value)).filter((value) => value !== "*" && value !== "*." && value.length > 0)));
+}
+function isHostnameAllowedByPattern(hostname, pattern) {
+	if (pattern.startsWith("*.")) {
+		const suffix = pattern.slice(2);
+		if (!suffix || hostname === suffix) return false;
+		return hostname.endsWith(`.${suffix}`);
+	}
+	return hostname === pattern;
+}
+function matchesHostnameAllowlist(hostname, allowlist) {
+	if (allowlist.length === 0) return true;
+	return allowlist.some((pattern) => isHostnameAllowedByPattern(hostname, pattern));
+}
 function parseIpv4(address) {
 	const parts = address.split(".");
 	if (parts.length !== 4) return null;
@@ -610,7 +626,10 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 	const normalized = normalizeHostname(hostname);
 	if (!normalized) throw new Error("Invalid hostname");
 	const allowPrivateNetwork = Boolean(params.policy?.allowPrivateNetwork);
-	const isExplicitAllowed = normalizeHostnameSet(params.policy?.allowedHostnames).has(normalized);
+	const allowedHostnames = normalizeHostnameSet(params.policy?.allowedHostnames);
+	const hostnameAllowlist = normalizeHostnameAllowlist(params.policy?.hostnameAllowlist);
+	const isExplicitAllowed = allowedHostnames.has(normalized);
+	if (!matchesHostnameAllowlist(normalized, hostnameAllowlist)) throw new SsrFBlockedError(`Blocked hostname (not in allowlist): ${hostname}`);
 	if (!allowPrivateNetwork && !isExplicitAllowed) {
 		if (isBlockedHostname(normalized)) throw new SsrFBlockedError(`Blocked hostname: ${hostname}`);
 		if (isPrivateIpAddress(normalized)) throw new SsrFBlockedError("Blocked: private/internal IP address");
@@ -631,9 +650,6 @@ async function resolvePinnedHostnameWithPolicy(hostname, params = {}) {
 		})
 	};
 }
-async function resolvePinnedHostname(hostname, lookupFn = lookup$1) {
-	return await resolvePinnedHostnameWithPolicy(hostname, { lookupFn });
-}
 function createPinnedDispatcher(pinned) {
 	return new Agent({ connect: { lookup: pinned.lookup } });
 }
@@ -1225,6 +1241,7 @@ function registerBrowserAgentActRoutes(app, ctx) {
 
 //#endregion
 //#region src/browser/routes/agent.debug.ts
+const DEFAULT_TRACE_DIR = resolvePreferredOpenClawTmpDir();
 function registerBrowserAgentDebugRoutes(app, ctx) {
 	app.get("/console", async (req, res) => {
 		const profileCtx = resolveProfileContext(req, res, ctx);
@@ -1335,7 +1352,7 @@ function registerBrowserAgentDebugRoutes(app, ctx) {
 			const pw = await requirePwAi(res, "trace stop");
 			if (!pw) return;
 			const id = crypto.randomUUID();
-			const dir = "/tmp/openclaw";
+			const dir = DEFAULT_TRACE_DIR;
 			await fs$1.mkdir(dir, { recursive: true });
 			const tracePath = out.trim() || path.join(dir, `browser-trace-${id}.zip`);
 			await pw.traceStopViaPlaywright({
@@ -2412,4 +2429,4 @@ function registerBrowserRoutes(app, ctx) {
 }
 
 //#endregion
-export { mediaKindFromMime as C, maxBytesForKind as S, imageMimeFromFormat as _, closeDispatcher as a, kindFromMime as b, resolvePinnedHostnameWithPolicy as c, hasAlphaChannel as d, optimizeImageToPng as f, getFileExtension as g, extensionForMime as h, SsrFBlockedError as i, convertHeicToJpeg as l, detectMime as m, getMediaDir as n, createPinnedDispatcher as o, resizeToJpeg as p, saveMediaBuffer as r, resolvePinnedHostname as s, registerBrowserRoutes as t, getImageMetadata as u, isAudioFileName as v, MAX_IMAGE_BYTES as x, isGifMedia as y };
+export { mediaKindFromMime as S, isAudioFileName as _, closeDispatcher as a, MAX_IMAGE_BYTES as b, convertHeicToJpeg as c, optimizeImageToPng as d, resizeToJpeg as f, imageMimeFromFormat as g, getFileExtension as h, SsrFBlockedError as i, getImageMetadata as l, extensionForMime as m, getMediaDir as n, createPinnedDispatcher as o, detectMime as p, saveMediaBuffer as r, resolvePinnedHostnameWithPolicy as s, registerBrowserRoutes as t, hasAlphaChannel as u, isGifMedia as v, maxBytesForKind as x, kindFromMime as y };

package/dist/{rpc-DcGBG-Fp.js → rpc-DHr30euf.js}

@@ -1,6 +1,6 @@
-import { n as callGateway } from "./call-Yxns4CVq.js";
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-BlgPSDAh.js";
-import { n as withProgress } from "./progress-Da1ehW-x.js";
+import { n as callGateway } from "./call-DVYCIV8m.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-C_MmebBt.js";
+import { n as withProgress } from "./progress-DWqhRakV.js";
 
 //#region src/cli/nodes-cli/format.ts
 function parsePairingList(value) {

package/dist/{rpc-CfdBHlnp.js → rpc-T300F8zI.js}

@@ -1,6 +1,6 @@
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-0717wOz-.js";
-import { n as callGateway } from "./call-C9az806y.js";
-import { n as withProgress } from "./progress-g9R--HZD.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-BLi2a6Yw.js";
+import { n as callGateway } from "./call-SolyGS1r.js";
+import { n as withProgress } from "./progress-C9kngsTD.js";
 
 //#region src/cli/nodes-cli/format.ts
 function parsePairingList(value) {

package/dist/{run-main-aolvSfj3.js → run-main-C5wpthq1.js}

@@ -1,87 +1,87 @@
 import { c as enableConsoleCapture, i as normalizeEnv, n as isTruthyEnvValue, p as defaultRuntime } from "./entry.js";
-import "./auth-profiles-CcJ3hrog.js";
-import "./utils-Dk86IbEs.js";
-import "./exec-B8JKbXKW.js";
-import "./agent-scope-RCSw6gHy.js";
-import "./github-copilot-token-SLWintYd.js";
+import "./auth-profiles-ByNs3eEm.js";
+import "./utils-BLJAc3ZV.js";
+import "./exec-CACT5OAW.js";
+import "./agent-scope-CsRbLH4l.js";
+import "./github-copilot-token-Cfs0Wxr8.js";
 import "./pi-model-discovery-DzEIEgHL.js";
-import { M as VERSION, N as loadDotEnv } from "./config-B7sno9eI.js";
-import "./manifest-registry-BTgLN_W2.js";
-import "./server-context-fX4xiYRh.js";
-import "./chrome-yIKmOzCO.js";
-import { r as formatUncaughtError } from "./errors-x4NYs-1P.js";
-import "./control-service-B2er20Ke.js";
-import { t as ensureOpenClawCliOnPath } from "./path-env-CXWUFfFv.js";
-import "./tailscale-DU6DgqVy.js";
-import "./auth-BcNHFK-i.js";
-import "./client-D7wrC1Ug.js";
-import "./call-Yxns4CVq.js";
-import "./message-channel-BlgPSDAh.js";
-import "./links-7M-j83As.js";
-import "./plugin-auto-enable-BY4CqJbD.js";
-import "./plugins-3GyCj5KL.js";
+import { M as VERSION, N as loadDotEnv } from "./config-Bdhomfei.js";
+import "./manifest-registry-u0okVSkU.js";
+import "./server-context-BGpGs3qd.js";
+import "./chrome-foEwx3lN.js";
+import "./auth-9x3lqfIY.js";
+import "./control-auth-8Cf4WXpR.js";
+import { r as formatUncaughtError } from "./errors-DjZBTJJ3.js";
+import "./control-service-DKnttEus.js";
+import { t as ensureOpenClawCliOnPath } from "./path-env-CLvYNwtL.js";
+import "./client-CTwXnRl7.js";
+import "./call-DVYCIV8m.js";
+import "./message-channel-C_MmebBt.js";
+import "./links-B8LAzWwg.js";
+import "./plugin-auto-enable-Bqhc3w5n.js";
+import "./plugins-4Hqd1WGf.js";
 import "./logging-CfEk_PnX.js";
-import "./accounts-DbzMEfKN.js";
-import "./loader-Caow9TPA.js";
-import "./progress-Da1ehW-x.js";
-import "./prompt-style-Dc0C5HC9.js";
-import "./note-Ci08TSbV.js";
-import "./clack-prompter-DuBVnTKy.js";
-import "./onboard-channels-DMcOT0dj.js";
+import "./accounts-DCDeFTra.js";
+import "./loader-KjT074JR.js";
+import "./progress-DWqhRakV.js";
+import "./prompt-style-BFH5D5LN.js";
+import "./note-hhtubr2j.js";
+import "./clack-prompter-ChCGXfyt.js";
+import "./onboard-channels-C501x8GI.js";
 import "./archive-D0z3LZDK.js";
-import "./skill-scanner-C_fQzVDu.js";
-import "./installs-NS0VMPN7.js";
-import "./manager-DseK7RWj.js";
-import "./paths-IivnSNkP.js";
-import "./sqlite-B7FPASCO.js";
-import "./redact-DuEEf1p1.js";
-import "./routes-BqxA3ZYr.js";
-import "./pi-embedded-helpers-Uan-3N1T.js";
-import "./deliver-DzcxEcza.js";
-import "./fetch-timeout-B2KlHXi3.js";
-import "./sandbox-B0K9e6Fw.js";
-import "./tui-formatters-C_baVYUz.js";
-import "./wsl-B-H6Z5wp.js";
-import "./skills-BvPUNjxo.js";
-import "./image-LxFvu0wL.js";
-import "./tool-display-sHJa3kRs.js";
-import "./channel-selection-BoQ7GurB.js";
-import "./session-cost-usage-CL8gnHRN.js";
-import { m as installUnhandledRejectionHandler } from "./runner-C1G8RFWl.js";
-import "./commands-BG25qku5.js";
-import "./pairing-store-fIWI3pXG.js";
-import "./login-qr-CAk9D-FM.js";
-import "./pairing-labels-Bin1K7_f.js";
-import "./channels-status-issues-Ca9--azp.js";
-import { n as ensurePluginRegistryLoaded } from "./command-options-BSDiKuyX.js";
-import { a as getCommandPath, c as getPrimaryCommand, d as hasHelpOrVersion } from "./register.subclis-BpX3ulH1.js";
-import "./completion-cli-C4zxjkC1.js";
-import "./gateway-rpc-8gue7Qjt.js";
-import "./deps-Cva7QM_t.js";
-import { h as assertSupportedRuntime } from "./daemon-runtime-BHF5NjQ7.js";
-import "./service-DNcIZ5Kp.js";
-import "./systemd-CNTodvCO.js";
-import "./service-audit-uhZSlxeb.js";
-import "./table-oJQPTUL6.js";
-import "./widearea-dns-WVCWJTEb.js";
-import "./audit-DMH3CSXY.js";
-import "./onboard-skills-DoxkpnEU.js";
-import "./health-format-gLMfE2wf.js";
-import "./update-runner-BLsqC24J.js";
-import "./github-copilot-auth-Cm2SB8Qf.js";
-import "./logging-D0MyqUlV.js";
-import "./hooks-status-Cgy6AtQk.js";
-import "./status-CxhnUa5J.js";
-import "./skills-status-DJDaA2Ur.js";
-import "./tui-Biw7aqPj.js";
-import "./agent-DZvDwqnd.js";
-import "./node-service-_vgO5xR-.js";
-import "./auth-health-zZ9dnQGC.js";
-import { a as findRoutedCommand, n as emitCliBanner, t as ensureConfigReady } from "./config-guard-DPxxY1iw.js";
-import "./help-format-DUy1KRxq.js";
-import "./configure-BZQ9uSVX.js";
-import "./systemd-linger-CArPbmvv.js";
-import "./doctor-BZfxDGUg.js";
+import "./skill-scanner-rHMtUHtP.js";
+import "./installs-CrLcWYHe.js";
+import "./deliver-CIU9Npgs.js";
+import "./manager-T1XfGchB.js";
+import "./paths-DLINmNFQ.js";
+import "./sqlite-BINzs1U0.js";
+import "./redact-Br9GfacZ.js";
+import "./routes-DewK5tq2.js";
+import "./pi-embedded-helpers-DfwkwPYD.js";
+import "./fetch-timeout-DTK9vxex.js";
+import "./sandbox-BKYnhYQH.js";
+import "./tui-formatters-DePhZK3J.js";
+import "./wsl-BUOkxKJu.js";
+import "./skills-DRjfSQT3.js";
+import "./image-DgtfXMcX.js";
+import "./tool-display-ClRud3pg.js";
+import "./channel-selection-D4D6ImhN.js";
+import "./session-cost-usage-D9hHANWI.js";
+import { m as installUnhandledRejectionHandler } from "./runner-CY0nmVme.js";
+import "./commands-BX_OIIVR.js";
+import "./pairing-store-Dp5_JGnG.js";
+import "./login-qr-CuvemJj4.js";
+import "./pairing-labels-CgNHnjzT.js";
+import "./channels-status-issues-D7GSV1GS.js";
+import { n as ensurePluginRegistryLoaded } from "./command-options-BvgxzPbK.js";
+import { a as getCommandPath, c as getPrimaryCommand, d as hasHelpOrVersion } from "./register.subclis-C02e4zuJ.js";
+import "./completion-cli-CR77-jyv.js";
+import "./gateway-rpc-BByb2Snz.js";
+import "./deps-QSwGcoNZ.js";
+import { h as assertSupportedRuntime } from "./daemon-runtime-B0tg_LsX.js";
+import "./service-99RDXwX4.js";
+import "./systemd-C0VZriGM.js";
+import "./service-audit-ckBaRCVC.js";
+import "./table-CwulTLQp.js";
+import "./widearea-dns-BaIgNEhY.js";
+import "./audit-wPu26VMb.js";
+import "./onboard-skills-DV0Qzvjj.js";
+import "./health-format-LZDxu3rv.js";
+import "./update-runner--ixK4J3W.js";
+import "./github-copilot-auth-DDispnyz.js";
+import "./logging-CRq4h04P.js";
+import "./hooks-status-Cw0xD8Lt.js";
+import "./status-DDWoOpeB.js";
+import "./skills-status-TDIgVd1K.js";
+import "./tui-Lu8FdrlK.js";
+import "./agent-CyMxTyrG.js";
+import "./node-service-WQuEKz6W.js";
+import "./auth-health-j6epgQbq.js";
+import { a as findRoutedCommand, n as emitCliBanner, t as ensureConfigReady } from "./config-guard-CljaSxJd.js";
+import "./help-format-R5fLToDw.js";
+import "./configure-BXLiucXo.js";
+import "./systemd-linger-xdn3BdPh.js";
+import "./doctor-sYG5V4Co.js";
 import path from "node:path";
 import process$1 from "node:process";
 import fs from "node:fs";
@@ -128,7 +128,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-u22vbFpH.js");
+	const { buildProgram } = await import("./program-Cf7lkBur.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -138,12 +138,12 @@ async function runCli(argv = process$1.argv) {
 	const parseArgv = rewriteUpdateFlagArgv(normalizedArgv);
 	const primary = getPrimaryCommand(parseArgv);
 	if (primary) {
-		const { registerSubCliByName } = await import("./register.subclis-BpX3ulH1.js").then((n) => n.i);
+		const { registerSubCliByName } = await import("./register.subclis-C02e4zuJ.js").then((n) => n.i);
 		await registerSubCliByName(program, primary);
 	}
 	if (!(!primary && hasHelpOrVersion(parseArgv))) {
-		const { registerPluginCliCommands } = await import("./cli-FdxAcu_y.js");
-		const { loadConfig } = await import("./config-B7sno9eI.js").then((n) => n.t);
+		const { registerPluginCliCommands } = await import("./cli-ZR9ugUBX.js");
+		const { loadConfig } = await import("./config-Bdhomfei.js").then((n) => n.t);
 		registerPluginCliCommands(program, loadConfig());
 	}
 	await program.parseAsync(parseArgv);

package/dist/{runner-C1G8RFWl.js → runner-CY0nmVme.js}

@@ -1,12 +1,12 @@
-import { w as shouldLogVerbose, x as logVerbose } from "./entry.js";
-import { S as resolveOpenClawAgentDir, U as normalizeGoogleModelId, ct as resolveApiKeyForProvider, k as normalizeProviderId, st as requireApiKey } from "./auth-profiles-CcJ3hrog.js";
-import { n as runExec } from "./exec-B8JKbXKW.js";
-import { i as loadConfig } from "./config-B7sno9eI.js";
-import { r as formatUncaughtError, t as extractErrorCode } from "./errors-x4NYs-1P.js";
-import { _ as normalizeChatType } from "./plugins-3GyCj5KL.js";
-import { b as kindFromMime, g as getFileExtension, m as detectMime, v as isAudioFileName } from "./routes-BqxA3ZYr.js";
-import { i as fetchWithSsrFGuard, n as MediaFetchError, r as fetchRemoteMedia, t as fetchWithTimeout } from "./fetch-timeout-B2KlHXi3.js";
-import { t as describeImageWithModel, y as ensureOpenClawModelsJson } from "./image-LxFvu0wL.js";
+import { S as logVerbose, T as shouldLogVerbose } from "./entry.js";
+import { S as resolveOpenClawAgentDir, U as normalizeGoogleModelId, ct as resolveApiKeyForProvider, k as normalizeProviderId, st as requireApiKey } from "./auth-profiles-ByNs3eEm.js";
+import { n as runExec } from "./exec-CACT5OAW.js";
+import { i as loadConfig } from "./config-Bdhomfei.js";
+import { r as formatUncaughtError, t as extractErrorCode } from "./errors-DjZBTJJ3.js";
+import { _ as normalizeChatType } from "./plugins-4Hqd1WGf.js";
+import { _ as isAudioFileName, h as getFileExtension, p as detectMime, y as kindFromMime } from "./routes-DewK5tq2.js";
+import { i as fetchWithSsrFGuard, n as MediaFetchError, r as fetchRemoteMedia, t as fetchWithTimeout } from "./fetch-timeout-DTK9vxex.js";
+import { t as describeImageWithModel, y as ensureOpenClawModelsJson } from "./image-DgtfXMcX.js";
 import path from "node:path";
 import process$1 from "node:process";
 import os from "node:os";

package/dist/{runner-BCBs8JKA.js → runner-Cfm5nTMc.js}

@@ -1,9 +1,9 @@
-import { Y as logVerbose, Z as shouldLogVerbose, n as runExec } from "./exec-4WHuOniw.js";
-import { Cn as getFileExtension, Dn as kindFromMime, Kn as normalizeChatType, Tn as isAudioFileName, xn as detectMime } from "./pi-embedded-helpers-Bri9tk9g.js";
-import { C as normalizeProviderId, _ as resolveOpenClawAgentDir, i as resolveApiKeyForProvider, k as normalizeGoogleModelId, r as requireApiKey } from "./model-auth-CbqRVYRp.js";
-import { t as loadConfig } from "./config-BuF7vm-v.js";
-import { b as ensureOpenClawModelsJson, t as describeImageWithModel } from "./image-Dkawt9Kg.js";
-import { i as fetchWithSsrFGuard, n as MediaFetchError, r as fetchRemoteMedia, t as fetchWithTimeout } from "./fetch-timeout-4UKsdtE1.js";
+import { Y as logVerbose, Z as shouldLogVerbose, n as runExec } from "./exec-B8lXct-k.js";
+import { Cn as detectMime, Dn as isAudioFileName, Jn as normalizeChatType, Tn as getFileExtension, kn as kindFromMime } from "./pi-embedded-helpers-WDwx99UA.js";
+import { C as normalizeProviderId, _ as resolveOpenClawAgentDir, i as resolveApiKeyForProvider, k as normalizeGoogleModelId, r as requireApiKey } from "./model-auth-CabXIF6O.js";
+import { t as loadConfig } from "./config-BvMsmctM.js";
+import { b as ensureOpenClawModelsJson, t as describeImageWithModel } from "./image-Brk1sJbw.js";
+import { i as fetchWithSsrFGuard, n as MediaFetchError, r as fetchRemoteMedia, t as fetchWithTimeout } from "./fetch-timeout-BEtUjM1S.js";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";

package/dist/{runner-CInKPsiP.js → runner-D_dujMod.js}

@@ -1,12 +1,12 @@
-import { A as logVerbose, N as shouldLogVerbose } from "./subsystem-Bv7dGhES.js";
-import { n as runExec } from "./exec-DXtR2fhb.js";
-import { B as resolveApiKeyForProvider, bt as resolveOpenClawAgentDir, s as normalizeProviderId, x as normalizeGoogleModelId, z as requireApiKey } from "./model-selection-unMJyUIE.js";
-import { i as loadConfig } from "./config-DH9TLUNc.js";
-import { b as normalizeChatType } from "./plugins-BL9lIXSA.js";
-import { t as describeImageWithModel, v as ensureOpenClawModelsJson } from "./image-DI9s9eEx.js";
-import { d as getFileExtension, h as kindFromMime, l as detectMime, p as isAudioFileName } from "./routes-82Ywfho6.js";
+import { A as logVerbose, N as shouldLogVerbose } from "./subsystem-BoExtIHo.js";
+import { n as runExec } from "./exec-YIosokWE.js";
+import { B as resolveApiKeyForProvider, bt as resolveOpenClawAgentDir, s as normalizeProviderId, x as normalizeGoogleModelId, z as requireApiKey } from "./model-selection-BLuqsGVB.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
+import { b as normalizeChatType } from "./plugins-X7d_tfTE.js";
+import { t as describeImageWithModel, v as ensureOpenClawModelsJson } from "./image-C4Nn2p3e.js";
+import { d as getFileExtension, h as kindFromMime, l as detectMime, p as isAudioFileName } from "./routes-CmOI1hIH.js";
 import { r as formatUncaughtError, t as extractErrorCode } from "./errors-Bv81hF2P.js";
-import { i as fetchWithSsrFGuard, n as fetchRemoteMedia, r as fetchWithTimeout, t as MediaFetchError } from "./fetch-CqZP8jwB.js";
+import { i as fetchWithSsrFGuard, n as fetchRemoteMedia, r as fetchWithTimeout, t as MediaFetchError } from "./fetch-DmiOpALK.js";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
 import { constants } from "node:fs";

package/dist/{runner-Cwfn-VOM.js → runner-DrGYLH5K.js}

@@ -1,9 +1,9 @@
-import { J as logVerbose, X as shouldLogVerbose, n as runExec } from "./exec-D12IZYtJ.js";
-import { B as resolveOpenClawAgentDir, b as resolveApiKeyForProvider, f as normalizeGoogleModelId, o as normalizeProviderId, y as requireApiKey } from "./model-selection-B9Y7dKQd.js";
-import { Cn as isAudioFileName, Tn as kindFromMime, Wn as normalizeChatType, xn as getFileExtension, yn as detectMime } from "./pi-embedded-helpers-CfXnSIFx.js";
-import { t as loadConfig } from "./config-D50SQVar.js";
-import { b as ensureOpenClawModelsJson, t as describeImageWithModel } from "./image-B4mDPdyz.js";
-import { i as fetchWithSsrFGuard, n as MediaFetchError, r as fetchRemoteMedia, t as fetchWithTimeout } from "./fetch-timeout-ohY5QmsW.js";
+import { J as logVerbose, X as shouldLogVerbose, n as runExec } from "./exec-CJFFoM7H.js";
+import { B as resolveOpenClawAgentDir, b as resolveApiKeyForProvider, f as normalizeGoogleModelId, o as normalizeProviderId, y as requireApiKey } from "./model-selection-C1GmkTAV.js";
+import { Cn as getFileExtension, Dn as kindFromMime, Kn as normalizeChatType, Tn as isAudioFileName, xn as detectMime } from "./pi-embedded-helpers-CUzTc1v6.js";
+import { t as loadConfig } from "./config-QYrbd7x7.js";
+import { b as ensureOpenClawModelsJson, t as describeImageWithModel } from "./image-RKwc3fsL.js";
+import { i as fetchWithSsrFGuard, n as MediaFetchError, r as fetchRemoteMedia, t as fetchWithTimeout } from "./fetch-timeout-DEoXG_SF.js";
 import path from "node:path";
 import { constants } from "node:fs";
 import os from "node:os";

package/dist/{sandbox-B0K9e6Fw.js → sandbox-BKYnhYQH.js}

@@ -1,18 +1,18 @@
-import { L as STATE_DIR, Q as CHAT_CHANNEL_ORDER, Z as CHANNEL_IDS, ct as requireActivePluginRegistry, nt as getChatChannelMeta, o as createSubsystemLogger, p as defaultRuntime } from "./entry.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
+import { $ as CHANNEL_IDS, R as STATE_DIR, et as CHAT_CHANNEL_ORDER, it as getChatChannelMeta, o as createSubsystemLogger, p as defaultRuntime, ut as requireActivePluginRegistry } from "./entry.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
 import { c as normalizeAccountId$1, d as resolveAgentIdFromSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, n as DEFAULT_AGENT_ID, t as DEFAULT_ACCOUNT_ID, u as normalizeMainKey } from "./session-key-DVvxnFKg.js";
-import { c as escapeRegExp, m as normalizeE164, y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { b as DEFAULT_USER_FILENAME, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-RCSw6gHy.js";
-import { d as parseByteSize, g as parseDurationMs, i as loadConfig } from "./config-B7sno9eI.js";
-import { o as resolveProfile, t as createBrowserRouteContext } from "./server-context-fX4xiYRh.js";
-import { A as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, D as DEFAULT_BROWSER_EVALUATE_ENABLED, O as DEFAULT_OPENCLAW_BROWSER_COLOR } from "./chrome-yIKmOzCO.js";
-import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-BlgPSDAh.js";
-import { _ as normalizeChatType, a as normalizeWhatsAppTarget, c as resolveTelegramAccount, m as resolveSlackReplyToMode, p as resolveSlackAccount, r as normalizeChannelId, y as resolveDiscordAccount } from "./plugins-3GyCj5KL.js";
-import { n as resolveWhatsAppAccount } from "./accounts-DbzMEfKN.js";
-import { r as resolveSessionTranscriptPath, t as resolveDefaultSessionStorePath } from "./paths-IivnSNkP.js";
-import { t as emitSessionTranscriptUpdate } from "./transcript-events-CZ8CG4ht.js";
-import { t as registerBrowserRoutes } from "./routes-BqxA3ZYr.js";
-import { o as syncSkillsToWorkspace } from "./skills-BvPUNjxo.js";
+import { c as escapeRegExp, m as normalizeE164, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { b as DEFAULT_USER_FILENAME, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-CsRbLH4l.js";
+import { d as parseByteSize, g as parseDurationMs, i as loadConfig } from "./config-Bdhomfei.js";
+import { o as resolveProfile, t as createBrowserRouteContext } from "./server-context-BGpGs3qd.js";
+import { A as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, D as DEFAULT_BROWSER_EVALUATE_ENABLED, O as DEFAULT_OPENCLAW_BROWSER_COLOR } from "./chrome-foEwx3lN.js";
+import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-C_MmebBt.js";
+import { _ as normalizeChatType, a as normalizeWhatsAppTarget, c as resolveTelegramAccount, m as resolveSlackReplyToMode, p as resolveSlackAccount, r as normalizeChannelId, y as resolveDiscordAccount } from "./plugins-4Hqd1WGf.js";
+import { n as resolveWhatsAppAccount } from "./accounts-DCDeFTra.js";
+import { n as resolveSessionFilePath, t as resolveDefaultSessionStorePath } from "./paths-DLINmNFQ.js";
+import { t as emitSessionTranscriptUpdate } from "./transcript-events-BtNd-j6q.js";
+import { t as registerBrowserRoutes } from "./routes-DewK5tq2.js";
+import { o as syncSkillsToWorkspace } from "./skills-DRjfSQT3.js";
 import { spawn } from "node:child_process";
 import path from "node:path";
 import fs from "node:fs";
@@ -2849,7 +2849,15 @@ async function appendAssistantMessageToSessionTranscript(params) {
 		ok: false,
 		reason: `unknown sessionKey: ${sessionKey}`
 	};
-	const sessionFile = entry.sessionFile?.trim() || resolveSessionTranscriptPath(entry.sessionId, params.agentId);
+	let sessionFile;
+	try {
+		sessionFile = resolveSessionFilePath(entry.sessionId, entry, { sessionsDir: path.dirname(storePath) });
+	} catch (err) {
+		return {
+			ok: false,
+			reason: err instanceof Error ? err.message : String(err)
+		};
+	}
 	await ensureSessionHeader({
 		sessionFile,
 		sessionId: entry.sessionId

package/dist/{sandbox-BW8Xnkw1.js → sandbox-Bhjnh1Xg.js}

@@ -1,18 +1,18 @@
 import { r as STATE_DIR } from "./paths-DVBShlw6.js";
-import { c as defaultRuntime, m as CHAT_CHANNEL_ORDER, p as CHANNEL_IDS, t as createSubsystemLogger, v as getChatChannelMeta, w as requireActivePluginRegistry } from "./subsystem-Bv7dGhES.js";
-import { b as resolveUserPath, h as normalizeE164, l as escapeRegExp } from "./utils-BHPdZE4h.js";
+import { c as defaultRuntime, m as CHAT_CHANNEL_ORDER, p as CHANNEL_IDS, t as createSubsystemLogger, v as getChatChannelMeta, w as requireActivePluginRegistry } from "./subsystem-BoExtIHo.js";
+import { b as resolveUserPath, h as normalizeE164, l as escapeRegExp } from "./utils-Cd9QdCHh.js";
 import { c as normalizeAccountId$1, d as resolveAgentIdFromSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, n as DEFAULT_AGENT_ID, t as DEFAULT_ACCOUNT_ID, u as normalizeMainKey } from "./session-key-BWxPj0z_.js";
-import { b as DEFAULT_USER_FILENAME, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope---6LLHj0.js";
+import { b as DEFAULT_USER_FILENAME, d as DEFAULT_AGENTS_FILENAME, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, v as DEFAULT_SOUL_FILENAME, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-CQCus0rI.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
-import { d as parseByteSize, g as parseDurationMs, i as loadConfig } from "./config-DH9TLUNc.js";
-import { a as normalizeWhatsAppTarget, b as normalizeChatType, c as resolveTelegramAccount, m as resolveSlackReplyToMode, p as resolveSlackAccount, r as normalizeChannelId, v as resolveDiscordAccount } from "./plugins-BL9lIXSA.js";
-import { A as DEFAULT_BROWSER_EVALUATE_ENABLED, N as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, j as DEFAULT_OPENCLAW_BROWSER_COLOR } from "./chrome-juQxt0zf.js";
-import { o as syncSkillsToWorkspace } from "./skills-aFOsriMP.js";
-import { t as registerBrowserRoutes } from "./routes-82Ywfho6.js";
-import { a as resolveProfile, t as createBrowserRouteContext } from "./server-context-Lb-eUZG_.js";
-import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-0717wOz-.js";
-import { n as resolveWhatsAppAccount } from "./accounts-DimKrt7j.js";
-import { r as resolveSessionTranscriptPath, t as resolveDefaultSessionStorePath } from "./paths-RITJT4UY.js";
+import { d as parseByteSize, g as parseDurationMs, i as loadConfig } from "./config-aFQssWKX.js";
+import { a as normalizeWhatsAppTarget, b as normalizeChatType, c as resolveTelegramAccount, m as resolveSlackReplyToMode, p as resolveSlackAccount, r as normalizeChannelId, v as resolveDiscordAccount } from "./plugins-X7d_tfTE.js";
+import { A as DEFAULT_BROWSER_EVALUATE_ENABLED, N as DEFAULT_OPENCLAW_BROWSER_PROFILE_NAME, j as DEFAULT_OPENCLAW_BROWSER_COLOR } from "./chrome-Cvr-57lg.js";
+import { o as syncSkillsToWorkspace } from "./skills-DprQj9X2.js";
+import { t as registerBrowserRoutes } from "./routes-CmOI1hIH.js";
+import { a as resolveProfile, t as createBrowserRouteContext } from "./server-context-Cl0U0vE3.js";
+import { c as listDeliverableMessageChannels, l as normalizeMessageChannel } from "./message-channel-BLi2a6Yw.js";
+import { n as resolveWhatsAppAccount } from "./accounts-DeqIQjo1.js";
+import { n as resolveSessionFilePath, t as resolveDefaultSessionStorePath } from "./paths-B49s6UZQ.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-Bp7fGnwv.js";
 import fs from "node:fs";
 import path from "node:path";
@@ -2850,7 +2850,15 @@ async function appendAssistantMessageToSessionTranscript(params) {
 		ok: false,
 		reason: `unknown sessionKey: ${sessionKey}`
 	};
-	const sessionFile = entry.sessionFile?.trim() || resolveSessionTranscriptPath(entry.sessionId, params.agentId);
+	let sessionFile;
+	try {
+		sessionFile = resolveSessionFilePath(entry.sessionId, entry, { sessionsDir: path.dirname(storePath) });
+	} catch (err) {
+		return {
+			ok: false,
+			reason: err instanceof Error ? err.message : String(err)
+		};
+	}
 	await ensureSessionHeader({
 		sessionFile,
 		sessionId: entry.sessionId