activeclaw 2026.2.12 → 2026.2.13

package/dist/{client-B0_GiCjB.js → client-BrYfyoDK.js}

@@ -1,7 +1,7 @@
 import { g as resolveStateDir, r as STATE_DIR } from "./paths-DVBShlw6.js";
-import { a as logDebug, o as logError } from "./exec-DXtR2fhb.js";
+import { a as logDebug, o as logError } from "./exec-YIosokWE.js";
 import { t as rawDataToString } from "./ws-CHCQHs0F.js";
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES, p as GATEWAY_CLIENT_IDS } from "./message-channel-0717wOz-.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES, p as GATEWAY_CLIENT_IDS } from "./message-channel-BLi2a6Yw.js";
 import fs from "node:fs";
 import path from "node:path";
 import crypto, { randomUUID } from "node:crypto";
@@ -246,6 +246,49 @@ function buildDeviceAuthPayload(params) {
 	return base.join("|");
 }
 
+//#endregion
+//#region src/sessions/input-provenance.ts
+const INPUT_PROVENANCE_KIND_VALUES = [
+	"external_user",
+	"inter_session",
+	"internal_system"
+];
+function normalizeOptionalString(value) {
+	if (typeof value !== "string") return;
+	const trimmed = value.trim();
+	return trimmed ? trimmed : void 0;
+}
+function isInputProvenanceKind(value) {
+	return typeof value === "string" && INPUT_PROVENANCE_KIND_VALUES.includes(value);
+}
+function normalizeInputProvenance(value) {
+	if (!value || typeof value !== "object") return;
+	const record = value;
+	if (!isInputProvenanceKind(record.kind)) return;
+	return {
+		kind: record.kind,
+		sourceSessionKey: normalizeOptionalString(record.sourceSessionKey),
+		sourceChannel: normalizeOptionalString(record.sourceChannel),
+		sourceTool: normalizeOptionalString(record.sourceTool)
+	};
+}
+function applyInputProvenanceToUserMessage(message, inputProvenance) {
+	if (!inputProvenance) return message;
+	if (message.role !== "user") return message;
+	if (normalizeInputProvenance(message.provenance)) return message;
+	return {
+		...message,
+		provenance: inputProvenance
+	};
+}
+function isInterSessionInputProvenance(value) {
+	return normalizeInputProvenance(value)?.kind === "inter_session";
+}
+function hasInterSessionUserProvenance(message) {
+	if (!message || message.role !== "user") return false;
+	return isInterSessionInputProvenance(message.provenance);
+}
+
 //#endregion
 //#region src/sessions/session-label.ts
 const SESSION_LABEL_MAX_LENGTH = 64;
@@ -336,6 +379,12 @@ const AgentParamsSchema = Type.Object({
 	timeout: Type.Optional(Type.Integer({ minimum: 0 })),
 	lane: Type.Optional(Type.String()),
 	extraSystemPrompt: Type.Optional(Type.String()),
+	inputProvenance: Type.Optional(Type.Object({
+		kind: Type.String({ enum: [...INPUT_PROVENANCE_KIND_VALUES] }),
+		sourceSessionKey: Type.Optional(Type.String()),
+		sourceChannel: Type.Optional(Type.String()),
+		sourceTool: Type.Optional(Type.String())
+	}, { additionalProperties: false })),
 	idempotencyKey: NonEmptyString,
 	label: Type.Optional(SessionLabelString),
 	spawnedBy: Type.Optional(Type.String())
@@ -1661,4 +1710,4 @@ var GatewayClient = class {
 };
 
 //#endregion
-export { validateNodePairRequestParams as $, validateCronStatusParams as A, parseSessionLabel as At, validateExecApprovalsNodeGetParams as B, validateConfigSetParams as C, validateWizardNextParams as Ct, validateCronRemoveParams as D, ErrorCodes as Dt, validateCronListParams as E, PROTOCOL_VERSION as Et, validateDeviceTokenRevokeParams as F, normalizeDevicePublicKeyBase64Url as Ft, validateNodeDescribeParams as G, validateExecApprovalsSetParams as H, validateDeviceTokenRotateParams as I, verifyDeviceSignature as It, validateNodeInvokeResultParams as J, validateNodeEventParams as K, validateExecApprovalRequestParams as L, validateDevicePairApproveParams as M, normalizeFingerprint as Mt, validateDevicePairListParams as N, deriveDeviceIdFromPublicKey as Nt, validateCronRunParams as O, errorShape as Ot, validateDevicePairRejectParams as P, loadOrCreateDeviceIdentity as Pt, validateNodePairRejectParams as Q, validateExecApprovalResolveParams as R, validateConfigSchemaParams as S, validateWizardCancelParams as St, validateCronAddParams as T, validateWizardStatusParams as Tt, validateLogsTailParams as U, validateExecApprovalsNodeSetParams as V, validateModelsListParams as W, validateNodePairApproveParams as X, validateNodeListParams as Y, validateNodePairListParams as Z, validateChatInjectParams as _, validateTalkModeParams as _t, validateAgentWaitParams as a, validateSessionsCompactParams as at, validateConfigGetParams as b, validateWebLoginStartParams as bt, validateAgentsFilesGetParams as c, validateSessionsPatchParams as ct, validateAgentsListParams as d, validateSessionsResolveParams as dt, validateNodePairVerifyParams as et, validateAgentsUpdateParams as f, validateSessionsUsageParams as ft, validateChatHistoryParams as g, validateSkillsUpdateParams as gt, validateChatAbortParams as h, validateSkillsStatusParams as ht, validateAgentParams as i, validateSendParams as it, validateCronUpdateParams as j, buildDeviceAuthPayload as jt, validateCronRunsParams as k, SESSION_LABEL_MAX_LENGTH as kt, validateAgentsFilesListParams as l, validateSessionsPreviewParams as lt, validateChannelsStatusParams as m, validateSkillsInstallParams as mt, formatValidationErrors as n, validatePollParams as nt, validateAgentsCreateParams as o, validateSessionsDeleteParams as ot, validateChannelsLogoutParams as p, validateSkillsBinsParams as pt, validateNodeInvokeParams as q, validateAgentIdentityParams as r, validateRequestFrame as rt, validateAgentsDeleteParams as s, validateSessionsListParams as st, GatewayClient as t, validateNodeRenameParams as tt, validateAgentsFilesSetParams as u, validateSessionsResetParams as ut, validateChatSendParams as v, validateUpdateRunParams as vt, validateConnectParams as w, validateWizardStartParams as wt, validateConfigPatchParams as x, validateWebLoginWaitParams as xt, validateConfigApplyParams as y, validateWakeParams as yt, validateExecApprovalsGetParams as z };
+export { validateNodePairRequestParams as $, validateCronStatusParams as A, parseSessionLabel as At, validateExecApprovalsNodeGetParams as B, validateConfigSetParams as C, validateWizardNextParams as Ct, validateCronRemoveParams as D, ErrorCodes as Dt, validateCronListParams as E, PROTOCOL_VERSION as Et, validateDeviceTokenRevokeParams as F, normalizeFingerprint as Ft, validateNodeDescribeParams as G, validateExecApprovalsSetParams as H, validateDeviceTokenRotateParams as I, deriveDeviceIdFromPublicKey as It, validateNodeInvokeResultParams as J, validateNodeEventParams as K, validateExecApprovalRequestParams as L, loadOrCreateDeviceIdentity as Lt, validateDevicePairApproveParams as M, hasInterSessionUserProvenance as Mt, validateDevicePairListParams as N, normalizeInputProvenance as Nt, validateCronRunParams as O, errorShape as Ot, validateDevicePairRejectParams as P, buildDeviceAuthPayload as Pt, validateNodePairRejectParams as Q, validateExecApprovalResolveParams as R, normalizeDevicePublicKeyBase64Url as Rt, validateConfigSchemaParams as S, validateWizardCancelParams as St, validateCronAddParams as T, validateWizardStatusParams as Tt, validateLogsTailParams as U, validateExecApprovalsNodeSetParams as V, validateModelsListParams as W, validateNodePairApproveParams as X, validateNodeListParams as Y, validateNodePairListParams as Z, validateChatInjectParams as _, validateTalkModeParams as _t, validateAgentWaitParams as a, validateSessionsCompactParams as at, validateConfigGetParams as b, validateWebLoginStartParams as bt, validateAgentsFilesGetParams as c, validateSessionsPatchParams as ct, validateAgentsListParams as d, validateSessionsResolveParams as dt, validateNodePairVerifyParams as et, validateAgentsUpdateParams as f, validateSessionsUsageParams as ft, validateChatHistoryParams as g, validateSkillsUpdateParams as gt, validateChatAbortParams as h, validateSkillsStatusParams as ht, validateAgentParams as i, validateSendParams as it, validateCronUpdateParams as j, applyInputProvenanceToUserMessage as jt, validateCronRunsParams as k, SESSION_LABEL_MAX_LENGTH as kt, validateAgentsFilesListParams as l, validateSessionsPreviewParams as lt, validateChannelsStatusParams as m, validateSkillsInstallParams as mt, formatValidationErrors as n, validatePollParams as nt, validateAgentsCreateParams as o, validateSessionsDeleteParams as ot, validateChannelsLogoutParams as p, validateSkillsBinsParams as pt, validateNodeInvokeParams as q, validateAgentIdentityParams as r, validateRequestFrame as rt, validateAgentsDeleteParams as s, validateSessionsListParams as st, GatewayClient as t, validateNodeRenameParams as tt, validateAgentsFilesSetParams as u, validateSessionsResetParams as ut, validateChatSendParams as v, validateUpdateRunParams as vt, validateConnectParams as w, validateWizardStartParams as wt, validateConfigPatchParams as x, validateWebLoginWaitParams as xt, validateConfigApplyParams as y, validateWakeParams as yt, validateExecApprovalsGetParams as z, verifyDeviceSignature as zt };

package/dist/{client-D7wrC1Ug.js → client-CTwXnRl7.js}

@@ -1,7 +1,7 @@
-import { L as STATE_DIR, X as resolveStateDir } from "./entry.js";
-import { a as logDebug, o as logError } from "./exec-B8JKbXKW.js";
+import { R as STATE_DIR, Z as resolveStateDir } from "./entry.js";
+import { a as logDebug, o as logError } from "./exec-CACT5OAW.js";
 import { t as rawDataToString } from "./ws-C0k_dhCP.js";
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES, p as GATEWAY_CLIENT_IDS } from "./message-channel-BlgPSDAh.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES, p as GATEWAY_CLIENT_IDS } from "./message-channel-C_MmebBt.js";
 import path from "node:path";
 import fs from "node:fs";
 import crypto, { randomUUID } from "node:crypto";
@@ -246,6 +246,49 @@ function buildDeviceAuthPayload(params) {
 	return base.join("|");
 }
 
+//#endregion
+//#region src/sessions/input-provenance.ts
+const INPUT_PROVENANCE_KIND_VALUES = [
+	"external_user",
+	"inter_session",
+	"internal_system"
+];
+function normalizeOptionalString(value) {
+	if (typeof value !== "string") return;
+	const trimmed = value.trim();
+	return trimmed ? trimmed : void 0;
+}
+function isInputProvenanceKind(value) {
+	return typeof value === "string" && INPUT_PROVENANCE_KIND_VALUES.includes(value);
+}
+function normalizeInputProvenance(value) {
+	if (!value || typeof value !== "object") return;
+	const record = value;
+	if (!isInputProvenanceKind(record.kind)) return;
+	return {
+		kind: record.kind,
+		sourceSessionKey: normalizeOptionalString(record.sourceSessionKey),
+		sourceChannel: normalizeOptionalString(record.sourceChannel),
+		sourceTool: normalizeOptionalString(record.sourceTool)
+	};
+}
+function applyInputProvenanceToUserMessage(message, inputProvenance) {
+	if (!inputProvenance) return message;
+	if (message.role !== "user") return message;
+	if (normalizeInputProvenance(message.provenance)) return message;
+	return {
+		...message,
+		provenance: inputProvenance
+	};
+}
+function isInterSessionInputProvenance(value) {
+	return normalizeInputProvenance(value)?.kind === "inter_session";
+}
+function hasInterSessionUserProvenance(message) {
+	if (!message || message.role !== "user") return false;
+	return isInterSessionInputProvenance(message.provenance);
+}
+
 //#endregion
 //#region src/sessions/session-label.ts
 const SESSION_LABEL_MAX_LENGTH = 64;
@@ -336,6 +379,12 @@ const AgentParamsSchema = Type.Object({
 	timeout: Type.Optional(Type.Integer({ minimum: 0 })),
 	lane: Type.Optional(Type.String()),
 	extraSystemPrompt: Type.Optional(Type.String()),
+	inputProvenance: Type.Optional(Type.Object({
+		kind: Type.String({ enum: [...INPUT_PROVENANCE_KIND_VALUES] }),
+		sourceSessionKey: Type.Optional(Type.String()),
+		sourceChannel: Type.Optional(Type.String()),
+		sourceTool: Type.Optional(Type.String())
+	}, { additionalProperties: false })),
 	idempotencyKey: NonEmptyString,
 	label: Type.Optional(SessionLabelString),
 	spawnedBy: Type.Optional(Type.String())
@@ -1661,4 +1710,4 @@ var GatewayClient = class {
 };
 
 //#endregion
-export { validateNodePairRequestParams as $, validateCronStatusParams as A, parseSessionLabel as At, validateExecApprovalsNodeGetParams as B, validateConfigSetParams as C, validateWizardNextParams as Ct, validateCronRemoveParams as D, ErrorCodes as Dt, validateCronListParams as E, PROTOCOL_VERSION as Et, validateDeviceTokenRevokeParams as F, normalizeDevicePublicKeyBase64Url as Ft, validateNodeDescribeParams as G, validateExecApprovalsSetParams as H, validateDeviceTokenRotateParams as I, verifyDeviceSignature as It, validateNodeInvokeResultParams as J, validateNodeEventParams as K, validateExecApprovalRequestParams as L, validateDevicePairApproveParams as M, normalizeFingerprint as Mt, validateDevicePairListParams as N, deriveDeviceIdFromPublicKey as Nt, validateCronRunParams as O, errorShape as Ot, validateDevicePairRejectParams as P, loadOrCreateDeviceIdentity as Pt, validateNodePairRejectParams as Q, validateExecApprovalResolveParams as R, validateConfigSchemaParams as S, validateWizardCancelParams as St, validateCronAddParams as T, validateWizardStatusParams as Tt, validateLogsTailParams as U, validateExecApprovalsNodeSetParams as V, validateModelsListParams as W, validateNodePairApproveParams as X, validateNodeListParams as Y, validateNodePairListParams as Z, validateChatInjectParams as _, validateTalkModeParams as _t, validateAgentWaitParams as a, validateSessionsCompactParams as at, validateConfigGetParams as b, validateWebLoginStartParams as bt, validateAgentsFilesGetParams as c, validateSessionsPatchParams as ct, validateAgentsListParams as d, validateSessionsResolveParams as dt, validateNodePairVerifyParams as et, validateAgentsUpdateParams as f, validateSessionsUsageParams as ft, validateChatHistoryParams as g, validateSkillsUpdateParams as gt, validateChatAbortParams as h, validateSkillsStatusParams as ht, validateAgentParams as i, validateSendParams as it, validateCronUpdateParams as j, buildDeviceAuthPayload as jt, validateCronRunsParams as k, SESSION_LABEL_MAX_LENGTH as kt, validateAgentsFilesListParams as l, validateSessionsPreviewParams as lt, validateChannelsStatusParams as m, validateSkillsInstallParams as mt, formatValidationErrors as n, validatePollParams as nt, validateAgentsCreateParams as o, validateSessionsDeleteParams as ot, validateChannelsLogoutParams as p, validateSkillsBinsParams as pt, validateNodeInvokeParams as q, validateAgentIdentityParams as r, validateRequestFrame as rt, validateAgentsDeleteParams as s, validateSessionsListParams as st, GatewayClient as t, validateNodeRenameParams as tt, validateAgentsFilesSetParams as u, validateSessionsResetParams as ut, validateChatSendParams as v, validateUpdateRunParams as vt, validateConnectParams as w, validateWizardStartParams as wt, validateConfigPatchParams as x, validateWebLoginWaitParams as xt, validateConfigApplyParams as y, validateWakeParams as yt, validateExecApprovalsGetParams as z };
+export { validateNodePairRequestParams as $, validateCronStatusParams as A, parseSessionLabel as At, validateExecApprovalsNodeGetParams as B, validateConfigSetParams as C, validateWizardNextParams as Ct, validateCronRemoveParams as D, ErrorCodes as Dt, validateCronListParams as E, PROTOCOL_VERSION as Et, validateDeviceTokenRevokeParams as F, normalizeFingerprint as Ft, validateNodeDescribeParams as G, validateExecApprovalsSetParams as H, validateDeviceTokenRotateParams as I, deriveDeviceIdFromPublicKey as It, validateNodeInvokeResultParams as J, validateNodeEventParams as K, validateExecApprovalRequestParams as L, loadOrCreateDeviceIdentity as Lt, validateDevicePairApproveParams as M, hasInterSessionUserProvenance as Mt, validateDevicePairListParams as N, normalizeInputProvenance as Nt, validateCronRunParams as O, errorShape as Ot, validateDevicePairRejectParams as P, buildDeviceAuthPayload as Pt, validateNodePairRejectParams as Q, validateExecApprovalResolveParams as R, normalizeDevicePublicKeyBase64Url as Rt, validateConfigSchemaParams as S, validateWizardCancelParams as St, validateCronAddParams as T, validateWizardStatusParams as Tt, validateLogsTailParams as U, validateExecApprovalsNodeSetParams as V, validateModelsListParams as W, validateNodePairApproveParams as X, validateNodeListParams as Y, validateNodePairListParams as Z, validateChatInjectParams as _, validateTalkModeParams as _t, validateAgentWaitParams as a, validateSessionsCompactParams as at, validateConfigGetParams as b, validateWebLoginStartParams as bt, validateAgentsFilesGetParams as c, validateSessionsPatchParams as ct, validateAgentsListParams as d, validateSessionsResolveParams as dt, validateNodePairVerifyParams as et, validateAgentsUpdateParams as f, validateSessionsUsageParams as ft, validateChatHistoryParams as g, validateSkillsUpdateParams as gt, validateChatAbortParams as h, validateSkillsStatusParams as ht, validateAgentParams as i, validateSendParams as it, validateCronUpdateParams as j, applyInputProvenanceToUserMessage as jt, validateCronRunsParams as k, SESSION_LABEL_MAX_LENGTH as kt, validateAgentsFilesListParams as l, validateSessionsPreviewParams as lt, validateChannelsStatusParams as m, validateSkillsInstallParams as mt, formatValidationErrors as n, validatePollParams as nt, validateAgentsCreateParams as o, validateSessionsDeleteParams as ot, validateChannelsLogoutParams as p, validateSkillsBinsParams as pt, validateNodeInvokeParams as q, validateAgentIdentityParams as r, validateRequestFrame as rt, validateAgentsDeleteParams as s, validateSessionsListParams as st, GatewayClient as t, validateNodeRenameParams as tt, validateAgentsFilesSetParams as u, validateSessionsResetParams as ut, validateChatSendParams as v, validateUpdateRunParams as vt, validateConnectParams as w, validateWizardStartParams as wt, validateConfigPatchParams as x, validateWebLoginWaitParams as xt, validateConfigApplyParams as y, validateWakeParams as yt, validateExecApprovalsGetParams as z, verifyDeviceSignature as zt };

package/dist/{command-format-ayFsmwwz.js → command-format-Bxe0mWee.js}

@@ -1,4 +1,4 @@
-import { ut as normalizeProfileName } from "./entry.js";
+import { ft as normalizeProfileName } from "./entry.js";
 import path from "node:path";
 
 //#region src/cli/cli-name.ts

package/dist/{command-options-BSDiKuyX.js → command-options-BvgxzPbK.js}

@@ -1,7 +1,7 @@
-import { o as createSubsystemLogger, st as getActivePluginRegistry } from "./entry.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-RCSw6gHy.js";
-import { i as loadConfig } from "./config-B7sno9eI.js";
-import { t as loadOpenClawPlugins } from "./loader-Caow9TPA.js";
+import { lt as getActivePluginRegistry, o as createSubsystemLogger } from "./entry.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CsRbLH4l.js";
+import { i as loadConfig } from "./config-Bdhomfei.js";
+import { t as loadOpenClawPlugins } from "./loader-KjT074JR.js";
 
 //#region src/cli/plugin-registry.ts
 const log = createSubsystemLogger("plugins");

package/dist/{commands-BG25qku5.js → commands-BX_OIIVR.js}

@@ -1,8 +1,8 @@
 import { b as resolveThreadParentSessionKey, d as resolveAgentIdFromSessionKey } from "./session-key-DVvxnFKg.js";
-import { n as resolveAgentConfig } from "./agent-scope-RCSw6gHy.js";
-import { l as normalizeMessageChannel } from "./message-channel-BlgPSDAh.js";
-import { r as normalizeChannelId } from "./plugins-3GyCj5KL.js";
-import { X as expandToolGroups, Z as normalizeToolName, rt as getChannelDock, ut as resolveChannelGroupToolsPolicy } from "./sandbox-B0K9e6Fw.js";
+import { n as resolveAgentConfig } from "./agent-scope-CsRbLH4l.js";
+import { l as normalizeMessageChannel } from "./message-channel-C_MmebBt.js";
+import { r as normalizeChannelId } from "./plugins-4Hqd1WGf.js";
+import { X as expandToolGroups, Z as normalizeToolName, rt as getChannelDock, ut as resolveChannelGroupToolsPolicy } from "./sandbox-BKYnhYQH.js";
 
 //#region src/agents/pi-tools.policy.ts
 function compilePattern(pattern) {

package/dist/{completion-cli-C4zxjkC1.js → completion-cli-CR77-jyv.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { X as resolveStateDir } from "./entry.js";
-import { h as pathExists } from "./utils-Dk86IbEs.js";
-import { n as registerSubCliByName, t as getSubCliEntries } from "./register.subclis-BpX3ulH1.js";
+import { Z as resolveStateDir } from "./entry.js";
+import { h as pathExists } from "./utils-BLJAc3ZV.js";
+import { n as registerSubCliByName, t as getSubCliEntries } from "./register.subclis-C02e4zuJ.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";

package/dist/{completion-cli-DECEgBWR.js → completion-cli-DnjpxAag.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { g as resolveStateDir } from "./paths-DVBShlw6.js";
-import { g as pathExists } from "./utils-BHPdZE4h.js";
-import { t as isTruthyEnvValue } from "./env-DE9xvYOL.js";
+import { g as pathExists } from "./utils-Cd9QdCHh.js";
+import { t as isTruthyEnvValue } from "./env-ONzUVAG2.js";
 import { r as resolveActionArgs } from "./helpers-8O7IVGO-.js";
 import os from "node:os";
 import path from "node:path";
@@ -111,143 +111,143 @@ const shouldEagerRegisterSubcommands = (_argv) => {
 	return isTruthyEnvValue(process.env.OPENCLAW_DISABLE_LAZY_SUBCOMMANDS);
 };
 const loadConfig = async () => {
-	return (await import("./config-DH9TLUNc.js").then((n) => n.t)).loadConfig();
+	return (await import("./config-aFQssWKX.js").then((n) => n.t)).loadConfig();
 };
 const entries = [
 	{
 		name: "acp",
 		description: "Agent Control Protocol tools",
 		register: async (program) => {
-			(await import("./acp-cli-Cs1ai4XO.js")).registerAcpCli(program);
+			(await import("./acp-cli-CeYI4XRd.js")).registerAcpCli(program);
 		}
 	},
 	{
 		name: "gateway",
 		description: "Gateway control",
 		register: async (program) => {
-			(await import("./gateway-cli-PR1S0BTe.js")).registerGatewayCli(program);
+			(await import("./gateway-cli-DbvWmE-9.js")).registerGatewayCli(program);
 		}
 	},
 	{
 		name: "daemon",
 		description: "Gateway service (legacy alias)",
 		register: async (program) => {
-			(await import("./daemon-cli-CVNzObIF.js").then((n) => n.t)).registerDaemonCli(program);
+			(await import("./daemon-cli-BDkU2ocb.js").then((n) => n.t)).registerDaemonCli(program);
 		}
 	},
 	{
 		name: "logs",
 		description: "Gateway logs",
 		register: async (program) => {
-			(await import("./logs-cli-BQRUI_PO.js")).registerLogsCli(program);
+			(await import("./logs-cli-EiKzUFPa.js")).registerLogsCli(program);
 		}
 	},
 	{
 		name: "system",
 		description: "System events, heartbeat, and presence",
 		register: async (program) => {
-			(await import("./system-cli-0JXhJNWm.js")).registerSystemCli(program);
+			(await import("./system-cli-B6lr60Io.js")).registerSystemCli(program);
 		}
 	},
 	{
 		name: "models",
 		description: "Model configuration",
 		register: async (program) => {
-			(await import("./models-cli-D7sChCi6.js")).registerModelsCli(program);
+			(await import("./models-cli-zS9rtWz8.js")).registerModelsCli(program);
 		}
 	},
 	{
 		name: "approvals",
 		description: "Exec approvals",
 		register: async (program) => {
-			(await import("./exec-approvals-cli-GizapOX5.js")).registerExecApprovalsCli(program);
+			(await import("./exec-approvals-cli-7LH0lwhO.js")).registerExecApprovalsCli(program);
 		}
 	},
 	{
 		name: "nodes",
 		description: "Node commands",
 		register: async (program) => {
-			(await import("./nodes-cli-B1meaW7S.js")).registerNodesCli(program);
+			(await import("./nodes-cli-Dx23D72n.js")).registerNodesCli(program);
 		}
 	},
 	{
 		name: "devices",
 		description: "Device pairing + token management",
 		register: async (program) => {
-			(await import("./devices-cli-D8K3hZR5.js")).registerDevicesCli(program);
+			(await import("./devices-cli-VIQtOvt_.js")).registerDevicesCli(program);
 		}
 	},
 	{
 		name: "node",
 		description: "Node control",
 		register: async (program) => {
-			(await import("./node-cli-CS3KwBh1.js")).registerNodeCli(program);
+			(await import("./node-cli-wemUMCg-.js")).registerNodeCli(program);
 		}
 	},
 	{
 		name: "sandbox",
 		description: "Sandbox tools",
 		register: async (program) => {
-			(await import("./sandbox-cli-BD5LkZ0B.js")).registerSandboxCli(program);
+			(await import("./sandbox-cli-rV9LtFeu.js")).registerSandboxCli(program);
 		}
 	},
 	{
 		name: "tui",
 		description: "Terminal UI",
 		register: async (program) => {
-			(await import("./tui-cli-C9FEfG7C.js")).registerTuiCli(program);
+			(await import("./tui-cli-BLpTj1X9.js")).registerTuiCli(program);
 		}
 	},
 	{
 		name: "cron",
 		description: "Cron scheduler",
 		register: async (program) => {
-			(await import("./cron-cli-B2Zwhy_r.js")).registerCronCli(program);
+			(await import("./cron-cli-D7BRjDv2.js")).registerCronCli(program);
 		}
 	},
 	{
 		name: "dns",
 		description: "DNS helpers",
 		register: async (program) => {
-			(await import("./dns-cli-DmTHXgwU.js")).registerDnsCli(program);
+			(await import("./dns-cli-DHIiMJjS.js")).registerDnsCli(program);
 		}
 	},
 	{
 		name: "docs",
 		description: "Docs helpers",
 		register: async (program) => {
-			(await import("./docs-cli-DUcyw0X0.js")).registerDocsCli(program);
+			(await import("./docs-cli-BhkYqoIQ.js")).registerDocsCli(program);
 		}
 	},
 	{
 		name: "hooks",
 		description: "Hooks tooling",
 		register: async (program) => {
-			(await import("./hooks-cli-CEN1h1ya.js")).registerHooksCli(program);
+			(await import("./hooks-cli-CT8JCRkH.js")).registerHooksCli(program);
 		}
 	},
 	{
 		name: "webhooks",
 		description: "Webhook helpers",
 		register: async (program) => {
-			(await import("./webhooks-cli-wNfhfKqm.js")).registerWebhooksCli(program);
+			(await import("./webhooks-cli-aVzUcJY9.js")).registerWebhooksCli(program);
 		}
 	},
 	{
 		name: "pairing",
 		description: "Pairing helpers",
 		register: async (program) => {
-			const { registerPluginCliCommands } = await import("./cli-By331Q9f.js");
+			const { registerPluginCliCommands } = await import("./cli-miPe4Ujz.js");
 			registerPluginCliCommands(program, await loadConfig());
-			(await import("./pairing-cli-0wbU1u8d.js")).registerPairingCli(program);
+			(await import("./pairing-cli-CQP34Dlx.js")).registerPairingCli(program);
 		}
 	},
 	{
 		name: "plugins",
 		description: "Plugin management",
 		register: async (program) => {
-			(await import("./plugins-cli-e9gUebMd.js")).registerPluginsCli(program);
-			const { registerPluginCliCommands } = await import("./cli-By331Q9f.js");
+			(await import("./plugins-cli-CVToH3if.js")).registerPluginsCli(program);
+			const { registerPluginCliCommands } = await import("./cli-miPe4Ujz.js");
 			registerPluginCliCommands(program, await loadConfig());
 		}
 	},
@@ -255,35 +255,35 @@ const entries = [
 		name: "channels",
 		description: "Channel management",
 		register: async (program) => {
-			(await import("./channels-cli-BXMQPB4x.js")).registerChannelsCli(program);
+			(await import("./channels-cli-BJUppQll.js")).registerChannelsCli(program);
 		}
 	},
 	{
 		name: "directory",
 		description: "Directory commands",
 		register: async (program) => {
-			(await import("./directory-cli-OGBSVKAZ.js")).registerDirectoryCli(program);
+			(await import("./directory-cli-BCJwjVC0.js")).registerDirectoryCli(program);
 		}
 	},
 	{
 		name: "security",
 		description: "Security helpers",
 		register: async (program) => {
-			(await import("./security-cli-kz8TiyqU.js")).registerSecurityCli(program);
+			(await import("./security-cli-BRjny8Yu.js")).registerSecurityCli(program);
 		}
 	},
 	{
 		name: "skills",
 		description: "Skills management",
 		register: async (program) => {
-			(await import("./skills-cli-oWaTJzZd.js")).registerSkillsCli(program);
+			(await import("./skills-cli-9WO-C55s.js")).registerSkillsCli(program);
 		}
 	},
 	{
 		name: "update",
 		description: "CLI update helpers",
 		register: async (program) => {
-			(await import("./update-cli-cNd_G9E6.js")).registerUpdateCli(program);
+			(await import("./update-cli-C0hUvJWK.js")).registerUpdateCli(program);
 		}
 	},
 	{

package/dist/{config-B7sno9eI.js → config-Bdhomfei.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { B as resolveConfigPath, F as CONFIG_PATH, G as resolveIsNixMode, H as resolveDefaultConfigCandidates, I as DEFAULT_GATEWAY_PORT, J as resolveOAuthDir, K as resolveLegacyStateDirs, L as STATE_DIR, R as isNixMode, U as resolveGatewayLockDir, V as resolveConfigPathCandidate, W as resolveGatewayPort, X as resolveStateDir, Y as resolveOAuthPath, Z as CHANNEL_IDS, ot as normalizeChatChannelId, pt as resolveRequiredHomeDir, q as resolveNewStateDir, z as resolveCanonicalConfigPath } from "./entry.js";
-import { A as parseModelRef, Ct as DEFAULT_CONTEXT_TOKENS, _t as resolveShellEnvFallbackTimeoutMs, gt as loadShellEnvFallback, vt as shouldDeferShellEnvFallback, yt as shouldEnableShellEnvFallback } from "./auth-profiles-CcJ3hrog.js";
+import { $ as CHANNEL_IDS, B as resolveCanonicalConfigPath, G as resolveGatewayPort, H as resolveConfigPathCandidate, I as CONFIG_PATH, J as resolveNewStateDir, K as resolveIsNixMode, L as DEFAULT_GATEWAY_PORT, R as STATE_DIR, U as resolveDefaultConfigCandidates, V as resolveConfigPath, W as resolveGatewayLockDir, X as resolveOAuthPath, Y as resolveOAuthDir, Z as resolveStateDir, ct as normalizeChatChannelId, ht as resolveRequiredHomeDir, q as resolveLegacyStateDirs, z as isNixMode } from "./entry.js";
+import { A as parseModelRef, Ct as DEFAULT_CONTEXT_TOKENS, _t as resolveShellEnvFallbackTimeoutMs, gt as loadShellEnvFallback, vt as shouldDeferShellEnvFallback, yt as shouldEnableShellEnvFallback } from "./auth-profiles-ByNs3eEm.js";
 import { l as normalizeAgentId, n as DEFAULT_AGENT_ID } from "./session-key-DVvxnFKg.js";
-import { d as isRecord, g as resolveConfigDir, u as isPlainObject, y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-RCSw6gHy.js";
-import { d as resolveMemorySlotDecision, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-BTgLN_W2.js";
+import { d as isRecord, g as resolveConfigDir, u as isPlainObject, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CsRbLH4l.js";
+import { d as resolveMemorySlotDecision, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-u0okVSkU.js";
 import { createRequire } from "node:module";
 import path from "node:path";
 import os from "node:os";
@@ -2762,7 +2762,8 @@ const BindingsSchema = z.array(z.object({
 			id: z.string()
 		}).strict().optional(),
 		guildId: z.string().optional(),
-		teamId: z.string().optional()
+		teamId: z.string().optional(),
+		roles: z.array(z.string()).optional()
 	}).strict()
 }).strict()).optional();
 const BroadcastStrategySchema = z.enum(["parallel", "sequential"]);
@@ -3148,6 +3149,7 @@ const DiscordGuildChannelSchema = z.object({
 	skills: z.array(z.string()).optional(),
 	enabled: z.boolean().optional(),
 	users: z.array(z.union([z.string(), z.number()])).optional(),
+	roles: z.array(z.union([z.string(), z.number()])).optional(),
 	systemPrompt: z.string().optional(),
 	includeThreadStarter: z.boolean().optional(),
 	autoThread: z.boolean().optional()
@@ -3164,6 +3166,7 @@ const DiscordGuildSchema = z.object({
 		"allowlist"
 	]).optional(),
 	users: z.array(z.union([z.string(), z.number()])).optional(),
+	roles: z.array(z.union([z.string(), z.number()])).optional(),
 	channels: z.record(z.string(), DiscordGuildChannelSchema.optional()).optional()
 }).strict();
 const DiscordAccountSchema = z.object({
@@ -4187,6 +4190,9 @@ const OpenClawSchema = z.object({
 		enabled: z.boolean().optional(),
 		path: z.string().optional(),
 		token: z.string().optional(),
+		defaultSessionKey: z.string().optional(),
+		allowRequestSessionKey: z.boolean().optional(),
+		allowedSessionKeyPrefixes: z.array(z.string()).optional(),
 		allowedAgentIds: z.array(z.string()).optional(),
 		maxBodyBytes: z.number().int().positive().optional(),
 		presets: z.array(z.string()).optional(),
@@ -4292,8 +4298,10 @@ const OpenClawSchema = z.object({
 			responses: z.object({
 				enabled: z.boolean().optional(),
 				maxBodyBytes: z.number().int().positive().optional(),
+				maxUrlParts: z.number().int().nonnegative().optional(),
 				files: z.object({
 					allowUrl: z.boolean().optional(),
+					urlAllowlist: z.array(z.string()).optional(),
 					allowedMimes: z.array(z.string()).optional(),
 					maxBytes: z.number().int().positive().optional(),
 					maxChars: z.number().int().positive().optional(),
@@ -4307,6 +4315,7 @@ const OpenClawSchema = z.object({
 				}).strict().optional(),
 				images: z.object({
 					allowUrl: z.boolean().optional(),
+					urlAllowlist: z.array(z.string()).optional(),
 					allowedMimes: z.array(z.string()).optional(),
 					maxBytes: z.number().int().positive().optional(),
 					maxRedirects: z.number().int().nonnegative().optional(),

package/dist/{config-BuF7vm-v.js → config-BvMsmctM.js}

@@ -1,7 +1,7 @@
 import { a as resolveOAuthDir, n as resolveConfigPath, r as resolveDefaultConfigCandidates, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-BZtyHNCi.js";
-import { M as normalizeAgentId, T as DEFAULT_AGENT_ID, c as resolveDefaultAgentId, j as normalizeAccountId, s as resolveAgentWorkspaceDir, w as DEFAULT_ACCOUNT_ID } from "./agent-scope-rXQ7WARN.js";
-import { J as info, L as resolveConfigDir, M as isRecord, P as jidToE164, Q as success, b as normalizeChatChannelId, j as isPlainObject, m as CHANNEL_IDS, rt as getChildLogger, u as defaultRuntime, z as resolveUserPath } from "./exec-4WHuOniw.js";
-import { B as loadShellEnvFallback, H as shouldDeferShellEnvFallback, P as DEFAULT_CONTEXT_TOKENS, U as shouldEnableShellEnvFallback, V as resolveShellEnvFallbackTimeoutMs, w as parseModelRef } from "./model-auth-CbqRVYRp.js";
+import { M as normalizeAgentId, T as DEFAULT_AGENT_ID, c as resolveDefaultAgentId, j as normalizeAccountId, s as resolveAgentWorkspaceDir, w as DEFAULT_ACCOUNT_ID } from "./agent-scope-BIEhVP4_.js";
+import { J as info, L as resolveConfigDir, M as isRecord, P as jidToE164, Q as success, b as normalizeChatChannelId, j as isPlainObject, m as CHANNEL_IDS, rt as getChildLogger, u as defaultRuntime, z as resolveUserPath } from "./exec-B8lXct-k.js";
+import { B as loadShellEnvFallback, H as shouldDeferShellEnvFallback, P as DEFAULT_CONTEXT_TOKENS, U as shouldEnableShellEnvFallback, V as resolveShellEnvFallbackTimeoutMs, w as parseModelRef } from "./model-auth-CabXIF6O.js";
 import { createRequire } from "node:module";
 import fs from "node:fs/promises";
 import os from "node:os";
@@ -3593,7 +3593,8 @@ const BindingsSchema = z.array(z.object({
 			id: z.string()
 		}).strict().optional(),
 		guildId: z.string().optional(),
-		teamId: z.string().optional()
+		teamId: z.string().optional(),
+		roles: z.array(z.string()).optional()
 	}).strict()
 }).strict()).optional();
 const BroadcastStrategySchema = z.enum(["parallel", "sequential"]);
@@ -3979,6 +3980,7 @@ const DiscordGuildChannelSchema = z.object({
 	skills: z.array(z.string()).optional(),
 	enabled: z.boolean().optional(),
 	users: z.array(z.union([z.string(), z.number()])).optional(),
+	roles: z.array(z.union([z.string(), z.number()])).optional(),
 	systemPrompt: z.string().optional(),
 	includeThreadStarter: z.boolean().optional(),
 	autoThread: z.boolean().optional()
@@ -3995,6 +3997,7 @@ const DiscordGuildSchema = z.object({
 		"allowlist"
 	]).optional(),
 	users: z.array(z.union([z.string(), z.number()])).optional(),
+	roles: z.array(z.union([z.string(), z.number()])).optional(),
 	channels: z.record(z.string(), DiscordGuildChannelSchema.optional()).optional()
 }).strict();
 const DiscordAccountSchema = z.object({
@@ -5018,6 +5021,9 @@ const OpenClawSchema = z.object({
 		enabled: z.boolean().optional(),
 		path: z.string().optional(),
 		token: z.string().optional(),
+		defaultSessionKey: z.string().optional(),
+		allowRequestSessionKey: z.boolean().optional(),
+		allowedSessionKeyPrefixes: z.array(z.string()).optional(),
 		allowedAgentIds: z.array(z.string()).optional(),
 		maxBodyBytes: z.number().int().positive().optional(),
 		presets: z.array(z.string()).optional(),
@@ -5123,8 +5129,10 @@ const OpenClawSchema = z.object({
 			responses: z.object({
 				enabled: z.boolean().optional(),
 				maxBodyBytes: z.number().int().positive().optional(),
+				maxUrlParts: z.number().int().nonnegative().optional(),
 				files: z.object({
 					allowUrl: z.boolean().optional(),
+					urlAllowlist: z.array(z.string()).optional(),
 					allowedMimes: z.array(z.string()).optional(),
 					maxBytes: z.number().int().positive().optional(),
 					maxChars: z.number().int().positive().optional(),
@@ -5138,6 +5146,7 @@ const OpenClawSchema = z.object({
 				}).strict().optional(),
 				images: z.object({
 					allowUrl: z.boolean().optional(),
+					urlAllowlist: z.array(z.string()).optional(),
 					allowedMimes: z.array(z.string()).optional(),
 					maxBytes: z.number().int().positive().optional(),
 					maxRedirects: z.number().int().nonnegative().optional(),

package/dist/{config-D50SQVar.js → config-QYrbd7x7.js}

@@ -1,7 +1,7 @@
 import { a as resolveOAuthDir, n as resolveConfigPath, r as resolveDefaultConfigCandidates, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-rb94mUrR.js";
-import { M as normalizeAgentId, T as DEFAULT_AGENT_ID, c as resolveDefaultAgentId, j as normalizeAccountId, s as resolveAgentWorkspaceDir, w as DEFAULT_ACCOUNT_ID } from "./agent-scope-CN8DM4Xb.js";
-import { A as isPlainObject, I as resolveConfigDir, N as jidToE164, R as resolveUserPath, Z as success, j as isRecord, m as CHANNEL_IDS, nt as getChildLogger, q as info, u as defaultRuntime, y as normalizeChatChannelId } from "./exec-D12IZYtJ.js";
-import { D as shouldEnableShellEnvFallback, E as shouldDeferShellEnvFallback, T as resolveShellEnvFallbackTimeoutMs, U as DEFAULT_CONTEXT_TOKENS, s as parseModelRef, w as loadShellEnvFallback } from "./model-selection-B9Y7dKQd.js";
+import { M as normalizeAgentId, T as DEFAULT_AGENT_ID, c as resolveDefaultAgentId, j as normalizeAccountId, s as resolveAgentWorkspaceDir, w as DEFAULT_ACCOUNT_ID } from "./agent-scope-DPIFau3f.js";
+import { A as isPlainObject, I as resolveConfigDir, N as jidToE164, R as resolveUserPath, Z as success, j as isRecord, m as CHANNEL_IDS, nt as getChildLogger, q as info, u as defaultRuntime, y as normalizeChatChannelId } from "./exec-CJFFoM7H.js";
+import { D as shouldEnableShellEnvFallback, E as shouldDeferShellEnvFallback, T as resolveShellEnvFallbackTimeoutMs, U as DEFAULT_CONTEXT_TOKENS, s as parseModelRef, w as loadShellEnvFallback } from "./model-selection-C1GmkTAV.js";
 import { createRequire } from "node:module";
 import path from "node:path";
 import fs from "node:fs";
@@ -3593,7 +3593,8 @@ const BindingsSchema = z.array(z.object({
 			id: z.string()
 		}).strict().optional(),
 		guildId: z.string().optional(),
-		teamId: z.string().optional()
+		teamId: z.string().optional(),
+		roles: z.array(z.string()).optional()
 	}).strict()
 }).strict()).optional();
 const BroadcastStrategySchema = z.enum(["parallel", "sequential"]);
@@ -3979,6 +3980,7 @@ const DiscordGuildChannelSchema = z.object({
 	skills: z.array(z.string()).optional(),
 	enabled: z.boolean().optional(),
 	users: z.array(z.union([z.string(), z.number()])).optional(),
+	roles: z.array(z.union([z.string(), z.number()])).optional(),
 	systemPrompt: z.string().optional(),
 	includeThreadStarter: z.boolean().optional(),
 	autoThread: z.boolean().optional()
@@ -3995,6 +3997,7 @@ const DiscordGuildSchema = z.object({
 		"allowlist"
 	]).optional(),
 	users: z.array(z.union([z.string(), z.number()])).optional(),
+	roles: z.array(z.union([z.string(), z.number()])).optional(),
 	channels: z.record(z.string(), DiscordGuildChannelSchema.optional()).optional()
 }).strict();
 const DiscordAccountSchema = z.object({
@@ -5018,6 +5021,9 @@ const OpenClawSchema = z.object({
 		enabled: z.boolean().optional(),
 		path: z.string().optional(),
 		token: z.string().optional(),
+		defaultSessionKey: z.string().optional(),
+		allowRequestSessionKey: z.boolean().optional(),
+		allowedSessionKeyPrefixes: z.array(z.string()).optional(),
 		allowedAgentIds: z.array(z.string()).optional(),
 		maxBodyBytes: z.number().int().positive().optional(),
 		presets: z.array(z.string()).optional(),
@@ -5123,8 +5129,10 @@ const OpenClawSchema = z.object({
 			responses: z.object({
 				enabled: z.boolean().optional(),
 				maxBodyBytes: z.number().int().positive().optional(),
+				maxUrlParts: z.number().int().nonnegative().optional(),
 				files: z.object({
 					allowUrl: z.boolean().optional(),
+					urlAllowlist: z.array(z.string()).optional(),
 					allowedMimes: z.array(z.string()).optional(),
 					maxBytes: z.number().int().positive().optional(),
 					maxChars: z.number().int().positive().optional(),
@@ -5138,6 +5146,7 @@ const OpenClawSchema = z.object({
 				}).strict().optional(),
 				images: z.object({
 					allowUrl: z.boolean().optional(),
+					urlAllowlist: z.array(z.string()).optional(),
 					allowedMimes: z.array(z.string()).optional(),
 					maxBytes: z.number().int().positive().optional(),
 					maxRedirects: z.number().int().nonnegative().optional(),