activeclaw 2026.2.12 → 2026.2.13

package/dist/{shared-j4Qtr475.js → shared-Bs4vduG4.js}

@@ -1,7 +1,7 @@
-import { c as defaultRuntime } from "./subsystem-Bv7dGhES.js";
+import { c as defaultRuntime } from "./subsystem-BoExtIHo.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
-import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-DuoCkWRh.js";
-import { t as resolveGatewayService } from "./service-DZMXgMra.js";
+import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-BvQ6S8j5.js";
+import { t as resolveGatewayService } from "./service--nPk7DvT.js";
 
 //#region src/cli/gateway-cli/shared.ts
 function parsePort(raw) {

package/dist/{shared-BBw6F-YC.js → shared-CEY5IkwG.js}

@@ -1,7 +1,7 @@
 import { p as defaultRuntime } from "./entry.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
 import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-JPeoOZnw.js";
-import { t as resolveGatewayService } from "./service-DNcIZ5Kp.js";
+import { t as resolveGatewayService } from "./service-99RDXwX4.js";
 
 //#region src/cli/gateway-cli/shared.ts
 function parsePort(raw) {

package/dist/{shared-DOZs2SoH.js → shared-DRohONn_.js}

@@ -1,8 +1,8 @@
-import { V as getResolvedLoggerSettings, c as defaultRuntime } from "./subsystem-Bv7dGhES.js";
+import { V as getResolvedLoggerSettings, c as defaultRuntime } from "./subsystem-BoExtIHo.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
 import { s as pickPrimaryLanIPv4 } from "./ws-CHCQHs0F.js";
-import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-DuoCkWRh.js";
-import { o as resolveGatewayLogPaths } from "./service-DZMXgMra.js";
+import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-BvQ6S8j5.js";
+import { o as resolveGatewayLogPaths } from "./service--nPk7DvT.js";
 import { Writable } from "node:stream";
 
 //#region src/cli/daemon-cli/response.ts

package/dist/{shared-CtP9K-o2.js → shared-ICqOZibV.js}

@@ -1,8 +1,8 @@
-import { M as getResolvedLoggerSettings, p as defaultRuntime } from "./entry.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
+import { N as getResolvedLoggerSettings, p as defaultRuntime } from "./entry.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
 import { s as pickPrimaryLanIPv4 } from "./ws-C0k_dhCP.js";
 import { d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName, l as resolveGatewayLaunchAgentLabel } from "./constants-JPeoOZnw.js";
-import { o as resolveGatewayLogPaths } from "./service-DNcIZ5Kp.js";
+import { o as resolveGatewayLogPaths } from "./service-99RDXwX4.js";
 import { Writable } from "node:stream";
 
 //#region src/cli/daemon-cli/response.ts

package/dist/{skill-scanner-C_fQzVDu.js → skill-scanner-rHMtUHtP.js}

@@ -1,4 +1,4 @@
-import { i as hasErrnoCode } from "./errors-x4NYs-1P.js";
+import { i as hasErrnoCode } from "./errors-DjZBTJJ3.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/{skills-BvPUNjxo.js → skills-DRjfSQT3.js}

@@ -1,11 +1,12 @@
 import { a as parseBooleanValue, o as createSubsystemLogger } from "./entry.js";
-import { t as CONFIG_DIR, y as resolveUserPath } from "./utils-Dk86IbEs.js";
+import { t as CONFIG_DIR, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
 import { n as resolveOpenClawPackageRootSync } from "./openclaw-root-BNlEap4i.js";
-import { a as MANIFEST_KEY, d as resolveMemorySlotDecision, i as LEGACY_MANIFEST_KEYS, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-BTgLN_W2.js";
+import { a as MANIFEST_KEY, d as resolveMemorySlotDecision, i as LEGACY_MANIFEST_KEYS, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-u0okVSkU.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs";
 import JSON5 from "json5";
+import fs$1 from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 import { formatSkillsForPrompt, loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 import YAML from "yaml";
@@ -361,6 +362,83 @@ function applySkillEnvOverridesFromSnapshot(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/sandbox-paths.ts
+const UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
+function normalizeUnicodeSpaces(str) {
+	return str.replace(UNICODE_SPACES, " ");
+}
+function expandPath(filePath) {
+	const normalized = normalizeUnicodeSpaces(filePath);
+	if (normalized === "~") return os.homedir();
+	if (normalized.startsWith("~/")) return os.homedir() + normalized.slice(1);
+	return normalized;
+}
+function resolveToCwd(filePath, cwd) {
+	const expanded = expandPath(filePath);
+	if (path.isAbsolute(expanded)) return expanded;
+	return path.resolve(cwd, expanded);
+}
+function resolveSandboxPath(params) {
+	const resolved = resolveToCwd(params.filePath, params.cwd);
+	const rootResolved = path.resolve(params.root);
+	const relative = path.relative(rootResolved, resolved);
+	if (!relative || relative === "") return {
+		resolved,
+		relative: ""
+	};
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`Path escapes sandbox root (${shortPath(rootResolved)}): ${params.filePath}`);
+	return {
+		resolved,
+		relative
+	};
+}
+async function assertSandboxPath(params) {
+	const resolved = resolveSandboxPath(params);
+	await assertNoSymlink(resolved.relative, path.resolve(params.root));
+	return resolved;
+}
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
+async function assertNoSymlink(relative, root) {
+	if (!relative) return;
+	const parts = relative.split(path.sep).filter(Boolean);
+	let current = root;
+	for (const part of parts) {
+		current = path.join(current, part);
+		try {
+			if ((await fs$1.lstat(current)).isSymbolicLink()) throw new Error(`Symlink not allowed in sandbox path: ${current}`);
+		} catch (err) {
+			if (err.code === "ENOENT") return;
+			throw err;
+		}
+	}
+}
+function shortPath(value) {
+	if (value.startsWith(os.homedir())) return `~${value.slice(os.homedir().length)}`;
+	return value;
+}
+
 //#endregion
 //#region src/agents/skills/bundled-dir.ts
 function looksLikeSkillsDir(dir) {
@@ -604,6 +682,36 @@ function resolveSkillsPromptForRun(params) {
 function loadWorkspaceSkillEntries(workspaceDir, opts) {
 	return loadSkillEntries(workspaceDir, opts);
 }
+function resolveUniqueSyncedSkillDirName(base, used) {
+	if (!used.has(base)) {
+		used.add(base);
+		return base;
+	}
+	for (let index = 2; index < 1e4; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!used.has(candidate)) {
+			used.add(candidate);
+			return candidate;
+		}
+	}
+	let fallbackIndex = 1e4;
+	let fallback = `${base}-${fallbackIndex}`;
+	while (used.has(fallback)) {
+		fallbackIndex += 1;
+		fallback = `${base}-${fallbackIndex}`;
+	}
+	used.add(fallback);
+	return fallback;
+}
+function resolveSyncedSkillDestinationPath(params) {
+	const sourceDirName = path.basename(params.entry.skill.baseDir).trim();
+	if (!sourceDirName || sourceDirName === "." || sourceDirName === "..") return null;
+	return resolveSandboxPath({
+		filePath: resolveUniqueSyncedSkillDirName(sourceDirName, params.usedDirNames),
+		cwd: params.targetSkillsDir,
+		root: params.targetSkillsDir
+	}).resolved;
+}
 async function syncSkillsToWorkspace(params) {
 	const sourceDir = resolveUserPath(params.sourceWorkspaceDir);
 	const targetDir = resolveUserPath(params.targetWorkspaceDir);
@@ -620,8 +728,24 @@ async function syncSkillsToWorkspace(params) {
 			force: true
 		});
 		await fsp.mkdir(targetSkillsDir, { recursive: true });
+		const usedDirNames = /* @__PURE__ */ new Set();
 		for (const entry of entries) {
-			const dest = path.join(targetSkillsDir, entry.skill.name);
+			let dest = null;
+			try {
+				dest = resolveSyncedSkillDestinationPath({
+					targetSkillsDir,
+					entry,
+					usedDirNames
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: ${message}`);
+				continue;
+			}
+			if (!dest) {
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: invalid source directory name`);
+				continue;
+			}
 			try {
 				await fsp.cp(entry.skill.baseDir, dest, {
 					recursive: true,
@@ -701,4 +825,4 @@ function resolveSkillsInstallPreferences(config) {
 }
 
 //#endregion
-export { resolveSkillKey as _, resolveSkillsPromptForRun as a, resolveBundledSkillsDir as c, hasBinary as d, isBundledSkillAllowed as f, resolveSkillConfig as g, resolveConfigPath as h, loadWorkspaceSkillEntries as i, applySkillEnvOverrides as l, resolveBundledAllowlist as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, isConfigPathTruthy as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, applySkillEnvOverridesFromSnapshot as u, parseFrontmatterBlock as v };
+export { resolveBundledAllowlist as _, resolveSkillsPromptForRun as a, resolveSkillKey as b, resolveBundledSkillsDir as c, resolveSandboxedMediaSource as d, applySkillEnvOverrides as f, isConfigPathTruthy as g, isBundledSkillAllowed as h, loadWorkspaceSkillEntries as i, assertMediaNotDataUrl as l, hasBinary as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, applySkillEnvOverridesFromSnapshot as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, assertSandboxPath as u, resolveConfigPath as v, parseFrontmatterBlock as x, resolveSkillConfig as y };

package/dist/{skills-aFOsriMP.js → skills-DprQj9X2.js}

@@ -1,13 +1,14 @@
-import { t as createSubsystemLogger } from "./subsystem-Bv7dGhES.js";
-import { b as resolveUserPath, t as CONFIG_DIR } from "./utils-BHPdZE4h.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { b as resolveUserPath, t as CONFIG_DIR } from "./utils-Cd9QdCHh.js";
 import { n as resolveOpenClawPackageRootSync } from "./openclaw-root-1VeFrph_.js";
 import { t as parseBooleanValue } from "./boolean-BgXe2hyu.js";
-import { a as MANIFEST_KEY, d as resolveMemorySlotDecision, i as LEGACY_MANIFEST_KEYS, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-DFckk-L8.js";
+import { a as MANIFEST_KEY, d as resolveMemorySlotDecision, i as LEGACY_MANIFEST_KEYS, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-CQhdnDBZ.js";
 import { fileURLToPath } from "node:url";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
+import fs$1 from "node:fs/promises";
 import { formatSkillsForPrompt, loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 import YAML from "yaml";
 
@@ -362,6 +363,83 @@ function applySkillEnvOverridesFromSnapshot(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/sandbox-paths.ts
+const UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
+function normalizeUnicodeSpaces(str) {
+	return str.replace(UNICODE_SPACES, " ");
+}
+function expandPath(filePath) {
+	const normalized = normalizeUnicodeSpaces(filePath);
+	if (normalized === "~") return os.homedir();
+	if (normalized.startsWith("~/")) return os.homedir() + normalized.slice(1);
+	return normalized;
+}
+function resolveToCwd(filePath, cwd) {
+	const expanded = expandPath(filePath);
+	if (path.isAbsolute(expanded)) return expanded;
+	return path.resolve(cwd, expanded);
+}
+function resolveSandboxPath(params) {
+	const resolved = resolveToCwd(params.filePath, params.cwd);
+	const rootResolved = path.resolve(params.root);
+	const relative = path.relative(rootResolved, resolved);
+	if (!relative || relative === "") return {
+		resolved,
+		relative: ""
+	};
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`Path escapes sandbox root (${shortPath(rootResolved)}): ${params.filePath}`);
+	return {
+		resolved,
+		relative
+	};
+}
+async function assertSandboxPath(params) {
+	const resolved = resolveSandboxPath(params);
+	await assertNoSymlink(resolved.relative, path.resolve(params.root));
+	return resolved;
+}
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
+async function assertNoSymlink(relative, root) {
+	if (!relative) return;
+	const parts = relative.split(path.sep).filter(Boolean);
+	let current = root;
+	for (const part of parts) {
+		current = path.join(current, part);
+		try {
+			if ((await fs$1.lstat(current)).isSymbolicLink()) throw new Error(`Symlink not allowed in sandbox path: ${current}`);
+		} catch (err) {
+			if (err.code === "ENOENT") return;
+			throw err;
+		}
+	}
+}
+function shortPath(value) {
+	if (value.startsWith(os.homedir())) return `~${value.slice(os.homedir().length)}`;
+	return value;
+}
+
 //#endregion
 //#region src/agents/skills/bundled-dir.ts
 function looksLikeSkillsDir(dir) {
@@ -605,6 +683,36 @@ function resolveSkillsPromptForRun(params) {
 function loadWorkspaceSkillEntries(workspaceDir, opts) {
 	return loadSkillEntries(workspaceDir, opts);
 }
+function resolveUniqueSyncedSkillDirName(base, used) {
+	if (!used.has(base)) {
+		used.add(base);
+		return base;
+	}
+	for (let index = 2; index < 1e4; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!used.has(candidate)) {
+			used.add(candidate);
+			return candidate;
+		}
+	}
+	let fallbackIndex = 1e4;
+	let fallback = `${base}-${fallbackIndex}`;
+	while (used.has(fallback)) {
+		fallbackIndex += 1;
+		fallback = `${base}-${fallbackIndex}`;
+	}
+	used.add(fallback);
+	return fallback;
+}
+function resolveSyncedSkillDestinationPath(params) {
+	const sourceDirName = path.basename(params.entry.skill.baseDir).trim();
+	if (!sourceDirName || sourceDirName === "." || sourceDirName === "..") return null;
+	return resolveSandboxPath({
+		filePath: resolveUniqueSyncedSkillDirName(sourceDirName, params.usedDirNames),
+		cwd: params.targetSkillsDir,
+		root: params.targetSkillsDir
+	}).resolved;
+}
 async function syncSkillsToWorkspace(params) {
 	const sourceDir = resolveUserPath(params.sourceWorkspaceDir);
 	const targetDir = resolveUserPath(params.targetWorkspaceDir);
@@ -621,8 +729,24 @@ async function syncSkillsToWorkspace(params) {
 			force: true
 		});
 		await fsp.mkdir(targetSkillsDir, { recursive: true });
+		const usedDirNames = /* @__PURE__ */ new Set();
 		for (const entry of entries) {
-			const dest = path.join(targetSkillsDir, entry.skill.name);
+			let dest = null;
+			try {
+				dest = resolveSyncedSkillDestinationPath({
+					targetSkillsDir,
+					entry,
+					usedDirNames
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: ${message}`);
+				continue;
+			}
+			if (!dest) {
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: invalid source directory name`);
+				continue;
+			}
 			try {
 				await fsp.cp(entry.skill.baseDir, dest, {
 					recursive: true,
@@ -702,4 +826,4 @@ function resolveSkillsInstallPreferences(config) {
 }
 
 //#endregion
-export { resolveSkillKey as _, resolveSkillsPromptForRun as a, resolveBundledSkillsDir as c, hasBinary as d, isBundledSkillAllowed as f, resolveSkillConfig as g, resolveConfigPath as h, loadWorkspaceSkillEntries as i, applySkillEnvOverrides as l, resolveBundledAllowlist as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, isConfigPathTruthy as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, applySkillEnvOverridesFromSnapshot as u, parseFrontmatterBlock as v };
+export { resolveBundledAllowlist as _, resolveSkillsPromptForRun as a, resolveSkillKey as b, resolveBundledSkillsDir as c, resolveSandboxedMediaSource as d, applySkillEnvOverrides as f, isConfigPathTruthy as g, isBundledSkillAllowed as h, loadWorkspaceSkillEntries as i, assertMediaNotDataUrl as l, hasBinary as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, applySkillEnvOverridesFromSnapshot as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, assertSandboxPath as u, resolveConfigPath as v, parseFrontmatterBlock as x, resolveSkillConfig as y };

package/dist/{skills-cli-oWaTJzZd.js → skills-cli-9WO-C55s.js}

@@ -1,19 +1,19 @@
 import "./paths-DVBShlw6.js";
-import { R as theme, c as defaultRuntime } from "./subsystem-Bv7dGhES.js";
-import { C as shortenHomePath } from "./utils-BHPdZE4h.js";
-import "./exec-DXtR2fhb.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope---6LLHj0.js";
-import "./model-selection-unMJyUIE.js";
+import { R as theme, c as defaultRuntime } from "./subsystem-BoExtIHo.js";
+import { C as shortenHomePath } from "./utils-Cd9QdCHh.js";
+import "./exec-YIosokWE.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CQCus0rI.js";
+import "./model-selection-BLuqsGVB.js";
 import "./github-copilot-token-BW-SEg7E.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
 import "./boolean-BgXe2hyu.js";
-import "./env-DE9xvYOL.js";
-import { i as loadConfig } from "./config-DH9TLUNc.js";
-import "./manifest-registry-DFckk-L8.js";
-import "./skills-aFOsriMP.js";
-import { t as formatDocsLink } from "./links-CV4oki2u.js";
-import { t as renderTable } from "./table-DzBBIqHO.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-D4vbIMnz.js";
+import "./env-ONzUVAG2.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
+import "./manifest-registry-CQhdnDBZ.js";
+import "./skills-DprQj9X2.js";
+import { t as formatDocsLink } from "./links-Eax1UO3w.js";
+import { t as renderTable } from "./table-B8dx3v4v.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-5U3P3YfJ.js";
 
 //#region src/cli/skills-cli.ts
 function appendClawHubHint(output, json) {

package/dist/{skills-cli-E6shXpdd.js → skills-cli-B9eej-EW.js}

@@ -1,16 +1,16 @@
-import { k as theme, p as defaultRuntime } from "./entry.js";
-import "./auth-profiles-CcJ3hrog.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
-import { S as shortenHomePath } from "./utils-Dk86IbEs.js";
-import "./exec-B8JKbXKW.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-RCSw6gHy.js";
-import "./github-copilot-token-SLWintYd.js";
-import { i as loadConfig } from "./config-B7sno9eI.js";
-import "./manifest-registry-BTgLN_W2.js";
-import { t as formatDocsLink } from "./links-7M-j83As.js";
-import "./skills-BvPUNjxo.js";
-import { t as renderTable } from "./table-oJQPTUL6.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-DJDaA2Ur.js";
+import { A as theme, p as defaultRuntime } from "./entry.js";
+import "./auth-profiles-ByNs3eEm.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
+import { S as shortenHomePath } from "./utils-BLJAc3ZV.js";
+import "./exec-CACT5OAW.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CsRbLH4l.js";
+import "./github-copilot-token-Cfs0Wxr8.js";
+import { i as loadConfig } from "./config-Bdhomfei.js";
+import "./manifest-registry-u0okVSkU.js";
+import { t as formatDocsLink } from "./links-B8LAzWwg.js";
+import "./skills-DRjfSQT3.js";
+import { t as renderTable } from "./table-CwulTLQp.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-TDIgVd1K.js";
 
 //#region src/cli/skills-cli.ts
 function appendClawHubHint(output, json) {

package/dist/{skills-status-D4vbIMnz.js → skills-status-5U3P3YfJ.js}

@@ -1,6 +1,6 @@
-import { t as createSubsystemLogger } from "./subsystem-Bv7dGhES.js";
-import { t as CONFIG_DIR } from "./utils-BHPdZE4h.js";
-import { c as resolveBundledSkillsDir, d as hasBinary, f as isBundledSkillAllowed, g as resolveSkillConfig, h as resolveConfigPath, i as loadWorkspaceSkillEntries, m as resolveBundledAllowlist, p as isConfigPathTruthy, t as resolveSkillsInstallPreferences } from "./skills-aFOsriMP.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { t as CONFIG_DIR } from "./utils-Cd9QdCHh.js";
+import { _ as resolveBundledAllowlist, c as resolveBundledSkillsDir, g as isConfigPathTruthy, h as isBundledSkillAllowed, i as loadWorkspaceSkillEntries, m as hasBinary, t as resolveSkillsInstallPreferences, v as resolveConfigPath, y as resolveSkillConfig } from "./skills-DprQj9X2.js";
 import path from "node:path";
 import { loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 

package/dist/{skills-status-DJDaA2Ur.js → skills-status-TDIgVd1K.js}

@@ -1,6 +1,6 @@
 import { o as createSubsystemLogger } from "./entry.js";
-import { t as CONFIG_DIR } from "./utils-Dk86IbEs.js";
-import { c as resolveBundledSkillsDir, d as hasBinary, f as isBundledSkillAllowed, g as resolveSkillConfig, h as resolveConfigPath, i as loadWorkspaceSkillEntries, m as resolveBundledAllowlist, p as isConfigPathTruthy, t as resolveSkillsInstallPreferences } from "./skills-BvPUNjxo.js";
+import { t as CONFIG_DIR } from "./utils-BLJAc3ZV.js";
+import { _ as resolveBundledAllowlist, c as resolveBundledSkillsDir, g as isConfigPathTruthy, h as isBundledSkillAllowed, i as loadWorkspaceSkillEntries, m as hasBinary, t as resolveSkillsInstallPreferences, v as resolveConfigPath, y as resolveSkillConfig } from "./skills-DRjfSQT3.js";
 import path from "node:path";
 import { loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 

package/dist/{sqlite-B7FPASCO.js → sqlite-BINzs1U0.js}

@@ -1,6 +1,6 @@
 import { o as createSubsystemLogger, t as installProcessWarningFilter } from "./entry.js";
-import { a as resolveSessionTranscriptsDirForAgent } from "./paths-IivnSNkP.js";
-import { n as redactSensitiveText } from "./redact-DuEEf1p1.js";
+import { o as resolveSessionTranscriptsDirForAgent } from "./paths-DLINmNFQ.js";
+import { n as redactSensitiveText } from "./redact-Br9GfacZ.js";
 import { createRequire } from "node:module";
 import path from "node:path";
 import fs from "node:fs";

package/dist/{sqlite-B4Z1_Ioc.js → sqlite-D4w5TejA.js}

@@ -1,5 +1,5 @@
-import { t as createSubsystemLogger } from "./subsystem-Bv7dGhES.js";
-import { a as resolveSessionTranscriptsDirForAgent } from "./paths-RITJT4UY.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { o as resolveSessionTranscriptsDirForAgent } from "./paths-B49s6UZQ.js";
 import { n as redactSensitiveText } from "./redact-BRsnXqwD.js";
 import { createRequire } from "node:module";
 import fs from "node:fs";

package/dist/{sqlite-BkYnxkQO.js → sqlite-DRRHmlug.js}

@@ -1,5 +1,5 @@
-import { l as createSubsystemLogger } from "./exec-4WHuOniw.js";
-import { i as resolveSessionTranscriptsDirForAgent } from "./paths-DwKNqk_S.js";
+import { l as createSubsystemLogger } from "./exec-B8lXct-k.js";
+import { i as resolveSessionTranscriptsDirForAgent } from "./paths-B0a4ywSO.js";
 import { t as redactSensitiveText } from "./redact-BrXLgslJ.js";
 import { createRequire } from "node:module";
 import fs from "node:fs/promises";

package/dist/{sqlite-EuQPVXvn.js → sqlite-F6PGkEm1.js}

@@ -1,5 +1,5 @@
-import { l as createSubsystemLogger } from "./exec-D12IZYtJ.js";
-import { i as resolveSessionTranscriptsDirForAgent } from "./paths-CB2fqqbX.js";
+import { l as createSubsystemLogger } from "./exec-CJFFoM7H.js";
+import { i as resolveSessionTranscriptsDirForAgent } from "./paths-D0O87MfH.js";
 import { t as redactSensitiveText } from "./redact-BIMJ3ntQ.js";
 import { createRequire } from "node:module";
 import path from "node:path";

package/dist/{status-B2Yr-2J5.js → status-BKGkKC_v.js}

@@ -1,7 +1,7 @@
 import { o as createSubsystemLogger } from "./entry.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir, w as resolveDefaultAgentWorkspaceDir } from "./agent-scope-RCSw6gHy.js";
-import { i as loadConfig } from "./config-B7sno9eI.js";
-import { t as loadOpenClawPlugins } from "./loader-Caow9TPA.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir, w as resolveDefaultAgentWorkspaceDir } from "./agent-scope-CsRbLH4l.js";
+import { i as loadConfig } from "./config-Bdhomfei.js";
+import { t as loadOpenClawPlugins } from "./loader-KjT074JR.js";
 
 //#region src/plugins/status.ts
 const log = createSubsystemLogger("plugins");

package/dist/{status-DW7m5xUN.js → status-CiHtHdaa.js}

@@ -1,7 +1,7 @@
-import { t as createSubsystemLogger } from "./subsystem-Bv7dGhES.js";
-import { ut as loadOpenClawPlugins } from "./reply-m467_fOC.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir, w as resolveDefaultAgentWorkspaceDir } from "./agent-scope---6LLHj0.js";
-import { i as loadConfig } from "./config-DH9TLUNc.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { ut as loadOpenClawPlugins } from "./reply-DICXkh_C.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir, w as resolveDefaultAgentWorkspaceDir } from "./agent-scope-CQCus0rI.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
 
 //#region src/plugins/status.ts
 const log = createSubsystemLogger("plugins");

package/dist/{status-CxhnUa5J.js → status-DDWoOpeB.js}

@@ -1,41 +1,41 @@
-import { I as DEFAULT_GATEWAY_PORT, O as isRich, W as resolveGatewayPort, k as theme, m as restoreTerminalState, p as defaultRuntime, y as info } from "./entry.js";
-import { Ct as DEFAULT_CONTEXT_TOKENS, N as resolveConfiguredModelRef, Tt as DEFAULT_PROVIDER, _ as ensureAuthProfileStore, wt as DEFAULT_MODEL } from "./auth-profiles-CcJ3hrog.js";
-import { r as resolveCliName, t as formatCliCommand } from "./command-format-ayFsmwwz.js";
+import { A as theme, G as resolveGatewayPort, L as DEFAULT_GATEWAY_PORT, k as isRich, m as restoreTerminalState, p as defaultRuntime, y as info } from "./entry.js";
+import { Ct as DEFAULT_CONTEXT_TOKENS, N as resolveConfiguredModelRef, Tt as DEFAULT_PROVIDER, _ as ensureAuthProfileStore, wt as DEFAULT_MODEL } from "./auth-profiles-ByNs3eEm.js";
+import { r as resolveCliName, t as formatCliCommand } from "./command-format-Bxe0mWee.js";
 import { l as normalizeAgentId, y as parseAgentSessionKey } from "./session-key-DVvxnFKg.js";
-import { h as pathExists, y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { n as runExec } from "./exec-B8JKbXKW.js";
+import { h as pathExists, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { n as runExec } from "./exec-CACT5OAW.js";
 import { t as resolveOpenClawPackageRoot } from "./openclaw-root-BNlEap4i.js";
-import { c as resolveDefaultAgentId, h as DEFAULT_IDENTITY_FILENAME, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir } from "./agent-scope-RCSw6gHy.js";
-import { M as VERSION, c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config-B7sno9eI.js";
-import { d as formatPortDiagnostics, l as inspectPortUsage } from "./chrome-yIKmOzCO.js";
-import { a as findTailscaleBinary, o as getTailnetHostname, s as readTailscaleStatusJson } from "./tailscale-DU6DgqVy.js";
-import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-Yxns4CVq.js";
-import { n as listChannelPlugins } from "./plugins-3GyCj5KL.js";
-import { $n as peekSystemEvents, Ln as readRestartSentinel, Nt as sha256HexPrefix, Pr as getMemorySearchManager, Rn as summarizeRestartSentinel, X as getRemoteSkillEligibility, Xt as loadProviderUsageSummary, Zt as formatUsageReportLines, _ as randomToken, a as applyWizardMetadata, b as summarizeExistingConfig, c as ensureWorkspaceAndSessions, d as handleReset, en as listAgentsForGateway, g as probeGatewayReachable, h as printWizardHeader, i as DEFAULT_WORKSPACE, l as formatControlUiSshHint, m as openUrl, p as normalizeGatewayTokenInput, pn as lookupContextTokens, q as buildChannelSummary, s as detectBrowserOpenSupport, v as resolveControlUiLinks, w as normalizeControlUiBasePath, x as waitForGatewayReachable } from "./loader-Caow9TPA.js";
-import { n as withProgress } from "./progress-Da1ehW-x.js";
+import { c as resolveDefaultAgentId, h as DEFAULT_IDENTITY_FILENAME, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir } from "./agent-scope-CsRbLH4l.js";
+import { M as VERSION, c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config-Bdhomfei.js";
+import { d as formatPortDiagnostics, l as inspectPortUsage } from "./chrome-foEwx3lN.js";
+import { d as getTailnetHostname, f as readTailscaleStatusJson, u as findTailscaleBinary } from "./auth-9x3lqfIY.js";
+import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-DVYCIV8m.js";
+import { n as listChannelPlugins } from "./plugins-4Hqd1WGf.js";
+import { $n as peekSystemEvents, Kt as loadProviderUsageSummary, Nn as readRestartSentinel, Nt as sha256HexPrefix, Pn as summarizeRestartSentinel, Pr as getMemorySearchManager, X as getRemoteSkillEligibility, Xt as listAgentsForGateway, _ as randomToken, a as applyWizardMetadata, b as summarizeExistingConfig, c as ensureWorkspaceAndSessions, d as handleReset, g as probeGatewayReachable, h as printWizardHeader, i as DEFAULT_WORKSPACE, l as formatControlUiSshHint, ln as lookupContextTokens, m as openUrl, p as normalizeGatewayTokenInput, q as buildChannelSummary, qt as formatUsageReportLines, s as detectBrowserOpenSupport, v as resolveControlUiLinks, w as normalizeControlUiBasePath, x as waitForGatewayReachable } from "./loader-KjT074JR.js";
+import { n as withProgress } from "./progress-DWqhRakV.js";
 import { t as WizardCancelledError } from "./prompts-CXLLIBwP.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-DdwqKAAS.js";
-import { n as setupChannels } from "./onboard-channels-DMcOT0dj.js";
-import { o as resolveStorePath } from "./paths-IivnSNkP.js";
-import { I as resolveMainSessionKey, d as loadSessionStore } from "./sandbox-B0K9e6Fw.js";
+import { n as setupChannels } from "./onboard-channels-C501x8GI.js";
+import { s as resolveStorePath } from "./paths-DLINmNFQ.js";
+import { I as resolveMainSessionKey, d as loadSessionStore } from "./sandbox-BKYnhYQH.js";
 import { r as formatDurationPrecise } from "./format-duration-Bo9zNKwO.js";
 import { n as formatTimeAgo } from "./format-relative-CZOlQ2pA.js";
-import { t as collectChannelStatusIssues } from "./channels-status-issues-Ca9--azp.js";
-import { r as installCompletion } from "./completion-cli-C4zxjkC1.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-BHF5NjQ7.js";
-import { o as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-DNcIZ5Kp.js";
-import { r as isSystemdUserServiceAvailable } from "./systemd-CNTodvCO.js";
-import { o as readLastGatewayErrorLine } from "./service-audit-uhZSlxeb.js";
-import { t as renderTable } from "./table-oJQPTUL6.js";
-import { i as probeGateway, t as runSecurityAudit } from "./audit-DMH3CSXY.js";
-import { d as applyPrimaryModel, f as promptDefaultModel, g as applyAuthChoice, h as warnIfModelConfigLooksOff, m as resolvePreferredProviderForAuthChoice, r as promptRemoteGatewayConfig, s as promptCustomApiConfig, t as setupSkills, x as promptAuthChoiceGrouped } from "./onboard-skills-DoxkpnEU.js";
-import { l as healthCommand, n as ensureControlUiAssetsBuilt, s as formatHealthChannelLines, t as formatHealthCheckFailure, u as resolveHeartbeatSummaryForAgent } from "./health-format-gLMfE2wf.js";
-import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, c as formatUpdateOneLiner, d as checkShellCompletionStatus, h as compareSemverStrings, l as getUpdateCheckResult, m as checkUpdateStatus, p as ensureCompletionCacheExists, s as formatUpdateAvailableHint, u as resolveUpdateAvailability, x as formatUpdateChannelLabel } from "./update-runner-BLsqC24J.js";
-import { n as logConfigUpdated } from "./logging-D0MyqUlV.js";
-import { t as buildWorkspaceHookStatus } from "./hooks-status-Cgy6AtQk.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-DJDaA2Ur.js";
-import { t as runTui } from "./tui-Biw7aqPj.js";
-import { t as resolveNodeService } from "./node-service-_vgO5xR-.js";
+import { t as collectChannelStatusIssues } from "./channels-status-issues-D7GSV1GS.js";
+import { r as installCompletion } from "./completion-cli-CR77-jyv.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-B0tg_LsX.js";
+import { o as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-99RDXwX4.js";
+import { r as isSystemdUserServiceAvailable } from "./systemd-C0VZriGM.js";
+import { o as readLastGatewayErrorLine } from "./service-audit-ckBaRCVC.js";
+import { t as renderTable } from "./table-CwulTLQp.js";
+import { i as probeGateway, t as runSecurityAudit } from "./audit-wPu26VMb.js";
+import { d as applyPrimaryModel, f as promptDefaultModel, g as applyAuthChoice, h as warnIfModelConfigLooksOff, m as resolvePreferredProviderForAuthChoice, r as promptRemoteGatewayConfig, s as promptCustomApiConfig, t as setupSkills, x as promptAuthChoiceGrouped } from "./onboard-skills-DV0Qzvjj.js";
+import { l as healthCommand, n as ensureControlUiAssetsBuilt, s as formatHealthChannelLines, t as formatHealthCheckFailure, u as resolveHeartbeatSummaryForAgent } from "./health-format-LZDxu3rv.js";
+import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, c as formatUpdateOneLiner, d as checkShellCompletionStatus, h as compareSemverStrings, l as getUpdateCheckResult, m as checkUpdateStatus, p as ensureCompletionCacheExists, s as formatUpdateAvailableHint, u as resolveUpdateAvailability, x as formatUpdateChannelLabel } from "./update-runner--ixK4J3W.js";
+import { n as logConfigUpdated } from "./logging-CRq4h04P.js";
+import { t as buildWorkspaceHookStatus } from "./hooks-status-Cw0xD8Lt.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-TDIgVd1K.js";
+import { t as runTui } from "./tui-Lu8FdrlK.js";
+import { t as resolveNodeService } from "./node-service-WQuEKz6W.js";
 import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-CNU-Zkrz.js";
 import { spawnSync } from "node:child_process";
 import path from "node:path";
@@ -152,7 +152,7 @@ async function finalizeOnboardingWizard(options) {
 	const systemdAvailable = process.platform === "linux" ? await isSystemdUserServiceAvailable() : true;
 	if (process.platform === "linux" && !systemdAvailable) await prompter.note("Systemd user services are unavailable. Skipping lingering checks and service install.", "Systemd");
 	if (process.platform === "linux" && systemdAvailable) {
-		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-CArPbmvv.js").then((n) => n.r);
+		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-xdn3BdPh.js").then((n) => n.r);
 		await ensureSystemdUserLingerInteractive({
 			runtime,
 			prompter: {