activeclaw 2026.4.5 → 2026.4.6

package/dist/{audio-transcription-runner-Uz2dTIDx.js → audio-transcription-runner-B02iDYTW.js}

@@ -1,22 +1,22 @@
 import { S as logVerbose, T as shouldLogVerbose, V as resolvePreferredOpenClawTmpDir } from "./subsystem-Dk5WUhC2.js";
-import { A as resolveApiKeyForProvider, C as normalizeGoogleModelId, ao as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, co as resolveIMessageAttachmentRoots, d as normalizeProviderId, hi as normalizeChatType, k as requireApiKey, oo as isInboundPathAllowed, so as mergeInboundPathRoots } from "./model-selection-CftqhKNS.js";
-import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-Dv5h0qQE.js";
+import { A as resolveApiKeyForProvider, C as normalizeGoogleModelId, ao as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, co as resolveIMessageAttachmentRoots, d as normalizeProviderId, hi as normalizeChatType, k as requireApiKey, oo as isInboundPathAllowed, so as mergeInboundPathRoots } from "./model-selection-DU-DNNW7.js";
+import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-BrJT9Gf9.js";
 import { n as runExec } from "./exec-B8ip-O6u.js";
-import { t as describeImageWithModel } from "./image-DAEA1-oq.js";
+import { t as describeImageWithModel } from "./image-BUEhx-b4.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-oCOYl-9e.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-Dsd8UoGA.js";
-import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-Cyf-Q4MB.js";
-import { i as detectMime, l as kindFromMime, n as fetchRemoteMedia, o as getFileExtension, s as isAudioFileName, t as MediaFetchError } from "./fetch-C-yIjbz-.js";
-import { i as formatUncaughtError, n as extractErrorCode, s as readErrorName, t as collectErrorGraphCandidates } from "./errors-B27FlGCB.js";
-import { n as getDefaultMediaLocalRoots } from "./local-roots-B0MExwb7.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-C6EpVMgn.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-DGuF8Mhb.js";
+import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-DeP9Nazr.js";
+import { i as detectMime, l as kindFromMime, n as fetchRemoteMedia, o as getFileExtension, s as isAudioFileName, t as MediaFetchError } from "./fetch-DAiV9-bR.js";
+import { i as formatUncaughtError, n as extractErrorCode, s as readErrorName, t as collectErrorGraphCandidates } from "./errors-Bqf8bSUd.js";
+import { n as getDefaultMediaLocalRoots } from "./local-roots-BZvUgFKO.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-BtBiWr2U.js";
 import { r as resolveProxyFetchFromEnv } from "./proxy-fetch-Cbsa1-1O.js";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import crypto from "node:crypto";
 //#region src/auto-reply/templating.ts
 function formatTemplateValue(value) {
@@ -949,7 +949,7 @@ var MediaAttachmentCache = class {
 			const size = await this.ensureLocalStat(entry);
 			if (entry.resolvedPath) {
 				if (size !== void 0 && size > params.maxBytes) throw new MediaUnderstandingSkipError("maxBytes", `Attachment ${params.attachmentIndex + 1} exceeds maxBytes ${params.maxBytes}`);
-				const buffer = await fs$1.readFile(entry.resolvedPath);
+				const buffer = await fsPromises.readFile(entry.resolvedPath);
 				entry.buffer = buffer;
 				entry.bufferMime = entry.bufferMime ?? entry.attachment.mime ?? await detectMime({
 					buffer,
@@ -1019,10 +1019,10 @@ var MediaAttachmentCache = class {
 			prefix: "openclaw-media",
 			extension: path.extname(bufferResult.fileName || "") || ""
 		});
-		await fs$1.writeFile(tmpPath, bufferResult.buffer);
+		await fsPromises.writeFile(tmpPath, bufferResult.buffer);
 		entry.tempPath = tmpPath;
 		entry.tempCleanup = async () => {
-			await fs$1.unlink(tmpPath).catch(() => {});
+			await fsPromises.unlink(tmpPath).catch(() => {});
 		};
 		return {
 			path: tmpPath,
@@ -1069,12 +1069,12 @@ var MediaAttachmentCache = class {
 		if (entry.statSize !== void 0) return entry.statSize;
 		try {
 			const currentPath = entry.resolvedPath;
-			const stat = await fs$1.stat(currentPath);
+			const stat = await fsPromises.stat(currentPath);
 			if (!stat.isFile()) {
 				entry.resolvedPath = void 0;
 				return;
 			}
-			const canonicalPath = await fs$1.realpath(currentPath).catch(() => currentPath);
+			const canonicalPath = await fsPromises.realpath(currentPath).catch(() => currentPath);
 			if (!isInboundPathAllowed({
 				filePath: canonicalPath,
 				roots: await this.getCanonicalLocalPathRoots()
@@ -1096,7 +1096,7 @@ var MediaAttachmentCache = class {
 		if (this.canonicalLocalPathRoots) return await this.canonicalLocalPathRoots;
 		this.canonicalLocalPathRoots = (async () => mergeInboundPathRoots(this.localPathRoots, await Promise.all(this.localPathRoots.map(async (root) => {
 			if (root.includes("*")) return root;
-			return await fs$1.realpath(root).catch(() => root);
+			return await fsPromises.realpath(root).catch(() => root);
 		}))))();
 		return await this.canonicalLocalPathRoots;
 	}
@@ -1106,7 +1106,7 @@ var MediaAttachmentCache = class {
 async function fileExists(filePath) {
 	if (!filePath) return false;
 	try {
-		await fs$1.stat(filePath);
+		await fsPromises.stat(filePath);
 		return true;
 	} catch {
 		return false;
@@ -1220,7 +1220,7 @@ async function resolveCliOutput(params) {
 	const commandId = commandBase(params.command);
 	const fileOutput = commandId === "whisper-cli" ? resolveWhisperCppOutputPath(params.args) : commandId === "whisper" ? resolveWhisperOutputPath(params.args, params.mediaPath) : commandId === "parakeet-mlx" ? resolveParakeetOutputPath(params.args, params.mediaPath) : null;
 	if (fileOutput && await fileExists(fileOutput)) try {
-		const content = await fs$1.readFile(fileOutput, "utf8");
+		const content = await fsPromises.readFile(fileOutput, "utf8");
 		if (content.trim()) return content.trim();
 	} catch {}
 	if (commandId === "gemini") {
@@ -1529,10 +1529,10 @@ async function runCliEntry(params) {
 		timeoutMs
 	});
 	if (capability === "audio") assertMinAudioSize({
-		size: (await fs$1.stat(pathResult.path)).size,
+		size: (await fsPromises.stat(pathResult.path)).size,
 		attachmentIndex: params.attachmentIndex
 	});
-	const outputDir = await fs$1.mkdtemp(path.join(resolvePreferredOpenClawTmpDir(), "openclaw-media-cli-"));
+	const outputDir = await fsPromises.mkdtemp(path.join(resolvePreferredOpenClawTmpDir(), "openclaw-media-cli-"));
 	const mediaPath = pathResult.path;
 	const outputBase = path.join(outputDir, path.parse(mediaPath).name);
 	const templCtx = {
@@ -1566,7 +1566,7 @@ async function runCliEntry(params) {
 			model: command
 		};
 	} finally {
-		await fs$1.rm(outputDir, {
+		await fsPromises.rm(outputDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -1609,9 +1609,9 @@ function candidateBinaryNames(name) {
 }
 async function isExecutable(filePath) {
 	try {
-		if (!(await fs$1.stat(filePath)).isFile()) return false;
+		if (!(await fsPromises.stat(filePath)).isFile()) return false;
 		if (process.platform === "win32") return true;
-		await fs$1.access(filePath, constants.X_OK);
+		await fsPromises.access(filePath, constants.X_OK);
 		return true;
 	} catch {
 		return false;

package/dist/{audio-transcription-runner-CovQeJJ8.js → audio-transcription-runner-B8jxT-MB.js}

@@ -1,15 +1,15 @@
 import { S as logVerbose, T as shouldLogVerbose, V as resolvePreferredOpenClawTmpDir } from "./subsystem-BEF5zTJO.js";
-import { Es as resolveApiKeyForProvider, Ji as isInboundPathAllowed, Ts as requireApiKey, Xi as resolveIMessageAttachmentRoots, Yi as mergeInboundPathRoots, qi as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, rr as normalizeChatType, ss as normalizeProviderId, ys as normalizeGoogleModelId } from "./auth-profiles-B5hyImOM.js";
+import { Es as resolveApiKeyForProvider, Ji as isInboundPathAllowed, Ts as requireApiKey, Xi as resolveIMessageAttachmentRoots, Yi as mergeInboundPathRoots, qi as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, rr as normalizeChatType, ss as normalizeProviderId, ys as normalizeGoogleModelId } from "./auth-profiles-D9Wn945p.js";
 import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-OAwT1oHV.js";
 import { n as runExec } from "./exec-B-ZR6IBr.js";
-import { i as detectMime, l as kindFromMime, n as fetchRemoteMedia, o as getFileExtension, s as isAudioFileName, t as MediaFetchError } from "./fetch-3V1gxxYH.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-C8EYz2dm.js";
+import { i as detectMime, l as kindFromMime, n as fetchRemoteMedia, o as getFileExtension, s as isAudioFileName, t as MediaFetchError } from "./fetch-hiM4UODI.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-DlYPcFqP.js";
 import { n as getDefaultMediaLocalRoots } from "./local-roots-CY11yrWR.js";
 import { i as formatUncaughtError, n as extractErrorCode, s as readErrorName, t as collectErrorGraphCandidates } from "./errors-BaSZYLcU.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-B0N_Hvgw.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-DkMZHPzY.js";
-import { t as describeImageWithModel } from "./image-xmUgWF9P.js";
-import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-cqcPDbSb.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-dTCN4rW8.js";
+import { t as describeImageWithModel } from "./image-B4HCDVUj.js";
+import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation--yH6WXh1.js";
 import { r as resolveProxyFetchFromEnv } from "./proxy-fetch-DNrsTLo-.js";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";

package/dist/{audio-transcription-runner-BjxrFZhs.js → audio-transcription-runner-DIwGKsNI.js}

@@ -1,9 +1,9 @@
 import { Ft as resolveAgentModelPrimaryValue, Pt as resolveAgentModelFallbackValues, q as runExec } from "./paths-Mt14cg41.js";
 import { C as createSubsystemLogger, M as logVerbose, P as shouldLogVerbose, U as resolvePreferredOpenClawTmpDir } from "./logger-Bxlcwvue.js";
-import { _i as resolveIMessageAttachmentRoots, b as resolveApiKeyForProvider, c as normalizeProviderId, gi as mergeInboundPathRoots, h as normalizeGoogleModelId, hi as isInboundPathAllowed, ii as loadConfig, mi as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, or as normalizeChatType, so as resolveOpenClawAgentDir, y as requireApiKey } from "./model-selection-CS_9NrTE.js";
-import { D as ensureOpenClawModelsJson, t as describeImageWithModel } from "./image-Hryb3xjW.js";
+import { _i as resolveIMessageAttachmentRoots, b as resolveApiKeyForProvider, c as normalizeProviderId, gi as mergeInboundPathRoots, h as normalizeGoogleModelId, hi as isInboundPathAllowed, ii as loadConfig, mi as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, or as normalizeChatType, so as resolveOpenClawAgentDir, y as requireApiKey } from "./model-selection-PlvJPOJ9.js";
+import { D as ensureOpenClawModelsJson, t as describeImageWithModel } from "./image-kqy5P4_2.js";
 import { n as getDefaultMediaLocalRoots } from "./local-roots-RZoycic0.js";
-import { a as withStrictGuardedFetchMode, i as fetchWithSsrFGuard, n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-CpK2-BOi.js";
+import { a as withStrictGuardedFetchMode, i as fetchWithSsrFGuard, n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-ysMjkqBD.js";
 import { i as fetchWithTimeout } from "./proxy-env-CHLzkW5x.js";
 import { r as resolveProxyFetchFromEnv } from "./proxy-fetch-BG4Z45Re.js";
 import { constants } from "node:fs";
@@ -148,7 +148,7 @@ function kindFromMime(mime) {
 const log = createSubsystemLogger("model-catalog");
 let modelCatalogPromise = null;
 let hasLoggedModelCatalogError = false;
-const defaultImportPiSdk = () => import("./pi-model-discovery-BHnYQuJe.js").then((n) => n.r);
+const defaultImportPiSdk = () => import("./pi-model-discovery-DQwd8eWZ.js").then((n) => n.r);
 let importPiSdk = defaultImportPiSdk;
 const CODEX_PROVIDER = "openai-codex";
 const OPENAI_PROVIDER = "openai";

package/dist/{audio-transcription-runner-Bt0PplM9.js → audio-transcription-runner-TUBV75w0.js}

@@ -1,14 +1,14 @@
-import { B as resolveAgentModelPrimaryValue, z as resolveAgentModelFallbackValues } from "./paths-E3CbCLxE.js";
-import { d as logVerbose, m as shouldLogVerbose, t as createSubsystemLogger, w as resolvePreferredOpenClawTmpDir } from "./subsystem-Br253I8q.js";
-import { _ as runExec } from "./workspace-DRRA3YH5.js";
-import { Ci as resolveIMessageAttachmentRoots, Si as mergeInboundPathRoots, b as requireApiKey, bi as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, c as normalizeProviderId, g as normalizeGoogleModelId, li as loadConfig, uo as resolveOpenClawAgentDir, ur as normalizeChatType, x as resolveApiKeyForProvider, xi as isInboundPathAllowed } from "./model-selection-BrTh8v9L.js";
-import { i as detectMime, l as kindFromMime, n as fetchRemoteMedia, o as getFileExtension, s as isAudioFileName, t as MediaFetchError } from "./fetch-BXs0KCX9.js";
-import { D as ensureOpenClawModelsJson, t as describeImageWithModel } from "./image-B-QmrXyQ.js";
-import { n as getDefaultMediaLocalRoots } from "./local-roots-ysSrZ6CP.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-DDQrBzBv.js";
+import { B as resolveAgentModelPrimaryValue, z as resolveAgentModelFallbackValues } from "./paths-Bg_l6kdG.js";
+import { d as logVerbose, m as shouldLogVerbose, t as createSubsystemLogger, w as resolvePreferredOpenClawTmpDir } from "./subsystem-CDH9S_yW.js";
+import { _ as runExec } from "./workspace-DiYGwuGk.js";
+import { Ci as resolveIMessageAttachmentRoots, Si as mergeInboundPathRoots, b as requireApiKey, bi as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, c as normalizeProviderId, g as normalizeGoogleModelId, li as loadConfig, uo as resolveOpenClawAgentDir, ur as normalizeChatType, x as resolveApiKeyForProvider, xi as isInboundPathAllowed } from "./model-selection-CvKAj7nY.js";
+import { i as detectMime, l as kindFromMime, n as fetchRemoteMedia, o as getFileExtension, s as isAudioFileName, t as MediaFetchError } from "./fetch-LN1gb6p0.js";
+import { D as ensureOpenClawModelsJson, t as describeImageWithModel } from "./image-DHFliGoO.js";
+import { n as getDefaultMediaLocalRoots } from "./local-roots-CyRw91V8.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-Bd5oI7xu.js";
 import { i as fetchWithTimeout } from "./proxy-env-C-Ky4p9K.js";
-import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-BbIb9aas.js";
-import { r as resolveProxyFetchFromEnv } from "./proxy-fetch-CuFiQFud.js";
+import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-BHAUzS3H.js";
+import { r as resolveProxyFetchFromEnv } from "./proxy-fetch-Spr_UMJ3.js";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
@@ -20,7 +20,7 @@ import crypto from "node:crypto";
 const log = createSubsystemLogger("model-catalog");
 let modelCatalogPromise = null;
 let hasLoggedModelCatalogError = false;
-const defaultImportPiSdk = () => import("./pi-model-discovery-BfCU9u9n.js").then((n) => n.r);
+const defaultImportPiSdk = () => import("./pi-model-discovery-BOkx-R2x.js").then((n) => n.r);
 let importPiSdk = defaultImportPiSdk;
 const CODEX_PROVIDER = "openai-codex";
 const OPENAI_PROVIDER = "openai";

package/dist/{audit-CmbdapG_.js → audit-Cg4EdF12.js}

@@ -1,28 +1,28 @@
 import { g as resolveStateDir, m as resolveOAuthDir, o as resolveConfigPath } from "./paths-BJV7vkaX.js";
-import { Co as isDangerousNetworkMode, Fa as formatPermissionRemediation, Ha as createConfigIO, Ia as inspectPathPermissions, La as safeStat, Ls as INCLUDE_KEY, Pa as formatPermissionDetail, Pi as getBlockedBindReason, Qi as resolveToolProfilePolicy, Ui as resolveSandboxToolPolicyForAgent, Vi as resolveSandboxConfigForAgent, ls as normalizeTrustedSafeBinDirs, pi as resolveChannelDefaultAccountId, wo as normalizeNetworkMode } from "./model-selection-CftqhKNS.js";
-import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-Dv5h0qQE.js";
+import { Co as isDangerousNetworkMode, Fa as formatPermissionRemediation, Ha as createConfigIO, Ia as inspectPathPermissions, La as safeStat, Ls as INCLUDE_KEY, Pa as formatPermissionDetail, Pi as getBlockedBindReason, Qi as resolveToolProfilePolicy, Ui as resolveSandboxToolPolicyForAgent, Vi as resolveSandboxConfigForAgent, ls as normalizeTrustedSafeBinDirs, pi as resolveChannelDefaultAccountId, wo as normalizeNetworkMode } from "./model-selection-DU-DNNW7.js";
+import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-BrJT9Gf9.js";
 import { s as normalizeAgentId } from "./session-key-VV3RvEri.js";
 import { r as normalizeStringEntries } from "./string-normalization-B7Qb9jnK.js";
 import { a as hasConfiguredSecretInput } from "./types.secrets-ZqKzSyNC.js";
 import { i as formatCliCommand, n as isPathInside, t as extensionUsesSkippedScannerPath } from "./scan-paths-meOkBmZg.js";
-import { S as normalizePluginsConfig, r as loadWorkspaceSkillEntries } from "./skills-Mq1GCIyL.js";
+import { S as normalizePluginsConfig, r as loadWorkspaceSkillEntries } from "./skills-D7xInzjY.js";
 import { m as MANIFEST_KEY } from "./frontmatter-DTFXPyoL.js";
 import { n as listChannelPlugins } from "./plugins-Delv1GbW.js";
 import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-CH9PY2Dm.js";
-import { t as buildGatewayConnectionDetails } from "./call-CKFLqNkw.js";
-import { _ as pickSandboxToolPolicy, a as resolveDmAllowState, f as isToolAllowedByPolicies, n as hasConfiguredUnavailableCredentialStatus, r as hasResolvedCredentialValue, t as inspectReadOnlyChannelAccount } from "./read-only-account-inspect-CWAyFOOe.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-CjDG3QJD.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-CGmLbKax.js";
+import { t as buildGatewayConnectionDetails } from "./call-7be5mSn_.js";
+import { _ as pickSandboxToolPolicy, a as resolveDmAllowState, f as isToolAllowedByPolicies, n as hasConfiguredUnavailableCredentialStatus, r as hasResolvedCredentialValue, t as inspectReadOnlyChannelAccount } from "./read-only-account-inspect-sMyuBIwr.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-DbbnAmrV.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-Dr8a_B6n.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BgP2XPPl.js";
-import { t as scanDirectoryWithSummary } from "./skill-scanner-B8J7JGHG.js";
-import { a as resolveGatewayAuth } from "./auth-Cp-1JzUb.js";
-import { r as probeGateway, t as resolveGatewayProbeAuthSafe } from "./probe-auth-ClUveUpg.js";
+import { t as scanDirectoryWithSummary } from "./skill-scanner-djTgcKux.js";
+import { a as resolveGatewayAuth } from "./auth-Bu24hYWH.js";
+import { r as probeGateway, t as resolveGatewayProbeAuthSafe } from "./probe-auth-BhN3PhE1.js";
 import { c as isDangerousNameMatchingEnabled, l as isNumericTelegramUserId, t as isDiscordMutableAllowEntry, u as normalizeTelegramAllowFromEntry } from "./mutable-allowlist-detectors-BZy6Qt78.js";
 import { t as inferParamBFromIdOrName } from "./model-param-b-ZEeJbsZk.js";
 import path from "node:path";
 import JSON5 from "json5";
-import * as fs$1 from "node:fs/promises";
-import fs from "node:fs/promises";
+import * as fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { isIP } from "node:net";
 //#region src/security/audit-channel.ts
 function normalizeAllowFromList$1(list) {
@@ -1124,7 +1124,7 @@ async function collectIncludePathsRecursive(params) {
 			if (visited.has(resolved)) continue;
 			visited.add(resolved);
 			result.push(resolved);
-			const rawText = await fs$1.readFile(resolved, "utf-8").catch(() => null);
+			const rawText = await fs.readFile(resolved, "utf-8").catch(() => null);
 			if (!rawText) continue;
 			const nestedParsed = (() => {
 				try {
@@ -1158,7 +1158,7 @@ function expandTilde(p, env) {
 }
 async function readPluginManifestExtensions(pluginPath) {
 	const manifestPath = path.join(pluginPath, "package.json");
-	const raw = await fs.readFile(manifestPath, "utf-8").catch(() => "");
+	const raw = await fsPromises.readFile(manifestPath, "utf-8").catch(() => "");
 	if (!raw.trim()) return [];
 	const extensions = JSON.parse(raw)?.[MANIFEST_KEY]?.extensions;
 	if (!Array.isArray(extensions)) return [];
@@ -1180,7 +1180,7 @@ async function listInstalledPluginDirs(params) {
 	};
 	return {
 		extensionsDir,
-		pluginDirs: (await fs.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
+		pluginDirs: (await fsPromises.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
 			params.onReadError?.(err);
 			return [];
 		})).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter(Boolean)
@@ -1243,7 +1243,7 @@ function isPinnedRegistrySpec(spec) {
 }
 async function readInstalledPackageVersion(dir) {
 	try {
-		const raw = await fs.readFile(path.join(dir, "package.json"), "utf-8");
+		const raw = await fsPromises.readFile(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.version === "string" ? parsed.version : void 0;
 	} catch {
@@ -1279,10 +1279,10 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 	const visitedDirs = /* @__PURE__ */ new Set();
 	while (queue.length > 0 && skillFiles.length < MAX_WORKSPACE_SKILL_SCAN_FILES_PER_WORKSPACE) {
 		const dir = queue.shift();
-		const dirRealPath = await fs.realpath(dir).catch(() => path.resolve(dir));
+		const dirRealPath = await fsPromises.realpath(dir).catch(() => path.resolve(dir));
 		if (visitedDirs.has(dirRealPath)) continue;
 		visitedDirs.add(dirRealPath);
-		const entries = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
+		const entries = await fsPromises.readdir(dir, { withFileTypes: true }).catch(() => []);
 		for (const entry of entries) {
 			if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
 			const fullPath = path.join(dir, entry.name);
@@ -1291,7 +1291,7 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 				continue;
 			}
 			if (entry.isSymbolicLink()) {
-				const stat = await fs.stat(fullPath).catch(() => null);
+				const stat = await fsPromises.stat(fullPath).catch(() => null);
 				if (!stat) continue;
 				if (stat.isDirectory()) {
 					queue.push(fullPath);
@@ -1469,13 +1469,13 @@ async function collectWorkspaceSkillSymlinkEscapeFindings(params) {
 	const seenSkillPaths = /* @__PURE__ */ new Set();
 	for (const workspaceDir of workspaceDirs) {
 		const workspacePath = path.resolve(workspaceDir);
-		const workspaceRealPath = await fs.realpath(workspacePath).catch(() => workspacePath);
+		const workspaceRealPath = await fsPromises.realpath(workspacePath).catch(() => workspacePath);
 		const skillFilePaths = await listWorkspaceSkillMarkdownFiles(workspacePath);
 		for (const skillFilePath of skillFilePaths) {
 			const canonicalSkillPath = path.resolve(skillFilePath);
 			if (seenSkillPaths.has(canonicalSkillPath)) continue;
 			seenSkillPaths.add(canonicalSkillPath);
-			const skillRealPath = await fs.realpath(canonicalSkillPath).catch(() => null);
+			const skillRealPath = await fsPromises.realpath(canonicalSkillPath).catch(() => null);
 			if (!skillRealPath) continue;
 			if (isPathInside(workspaceRealPath, skillRealPath)) continue;
 			escapedSkillFiles.push({

package/dist/{audit-membership-runtime-D-ZeUv63.js → audit-membership-runtime-DK2vsxHN.js}

@@ -1,11 +1,11 @@
-import "./paths-DHNo4U8q.js";
-import "./subsystem-Br253I8q.js";
-import { d as isRecord } from "./logger-3NSI7j4D.js";
+import "./paths-L_hqOE5A.js";
+import "./subsystem-CDH9S_yW.js";
+import { d as isRecord } from "./logger-BA9koAaC.js";
 import "./boolean-C7Ct_klp.js";
-import "./env-DGWeP3w5.js";
+import "./env-Bhn5CLil.js";
 import { i as fetchWithTimeout } from "./proxy-env-C-Ky4p9K.js";
-import { n as makeProxyFetch } from "./proxy-fetch-CuFiQFud.js";
-import { t as resolveTelegramFetch } from "./fetch-aXWb4Ao5.js";
+import { n as makeProxyFetch } from "./proxy-fetch-Spr_UMJ3.js";
+import { t as resolveTelegramFetch } from "./fetch-BWClp-zV.js";
 //#region src/telegram/audit-membership-runtime.ts
 const TELEGRAM_API_BASE = "https://api.telegram.org";
 async function auditTelegramGroupMembershipImpl(params) {

package/dist/{audit-Dk_eftLe.js → audit-u873Aqoz.js}

@@ -1,5 +1,5 @@
 import { g as resolveStateDir, m as resolveOAuthDir, o as resolveConfigPath } from "./paths-BfR2LXbA.js";
-import { Ai as createConfigIO, Br as resolveToolProfilePolicy, Ci as formatPermissionRemediation, Co as INCLUDE_KEY, Si as formatPermissionDetail, Sr as getBlockedBindReason, Ti as safeStat, Xa as normalizeTrustedSafeBinDirs, da as isDangerousNetworkMode, fa as normalizeNetworkMode, jr as resolveSandboxToolPolicyForAgent, kr as resolveSandboxConfigForAgent, tr as resolveChannelDefaultAccountId, wi as inspectPathPermissions } from "./auth-profiles-B5hyImOM.js";
+import { Ai as createConfigIO, Br as resolveToolProfilePolicy, Ci as formatPermissionRemediation, Co as INCLUDE_KEY, Si as formatPermissionDetail, Sr as getBlockedBindReason, Ti as safeStat, Xa as normalizeTrustedSafeBinDirs, da as isDangerousNetworkMode, fa as normalizeNetworkMode, jr as resolveSandboxToolPolicyForAgent, kr as resolveSandboxConfigForAgent, tr as resolveChannelDefaultAccountId, wi as inspectPathPermissions } from "./auth-profiles-D9Wn945p.js";
 import { i as formatCliCommand, n as isPathInside, t as extensionUsesSkippedScannerPath } from "./scan-paths-1Ht0wvdC.js";
 import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-OAwT1oHV.js";
 import { s as normalizeAgentId } from "./session-key-9lbhEIb9.js";
@@ -8,15 +8,15 @@ import { a as hasConfiguredSecretInput } from "./types.secrets-CQ90JO4F.js";
 import { S as normalizePluginsConfig, r as loadWorkspaceSkillEntries } from "./skills-VQO3Anke.js";
 import { m as MANIFEST_KEY } from "./frontmatter-DAfBRAy7.js";
 import { n as listChannelPlugins } from "./plugins-DRDN4jFP.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-CObmLqq8.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-BnTNRx5O.js";
 import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-BWrE-bab.js";
-import { t as buildGatewayConnectionDetails } from "./call-5htJiVxi.js";
-import { c as resolveDmAllowState, g as hasResolvedCredentialValue, h as hasConfiguredUnavailableCredentialStatus, m as inspectReadOnlyChannelAccount, n as isToolAllowedByPolicies, s as pickSandboxToolPolicy } from "./pi-tools.policy-B8nfuYT3.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-4ajjzoih.js";
+import { t as buildGatewayConnectionDetails } from "./call-Ce8vjHmH.js";
+import { c as resolveDmAllowState, g as hasResolvedCredentialValue, h as hasConfiguredUnavailableCredentialStatus, m as inspectReadOnlyChannelAccount, n as isToolAllowedByPolicies, s as pickSandboxToolPolicy } from "./pi-tools.policy-D6UiE_gG.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-BeeSJLPy.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BZDxNIXz.js";
 import { t as scanDirectoryWithSummary } from "./skill-scanner-owyfHlsM.js";
-import { a as resolveGatewayAuth } from "./auth-CCGOm7j4.js";
-import { r as probeGateway, t as resolveGatewayProbeAuthSafe } from "./probe-auth-Dzz0uFIe.js";
+import { a as resolveGatewayAuth } from "./auth-B7N969mv.js";
+import { r as probeGateway, t as resolveGatewayProbeAuthSafe } from "./probe-auth-CBWjkGhd.js";
 import { c as isDangerousNameMatchingEnabled, l as isNumericTelegramUserId, t as isDiscordMutableAllowEntry, u as normalizeTelegramAllowFromEntry } from "./mutable-allowlist-detectors-CEdpFbt7.js";
 import { t as inferParamBFromIdOrName } from "./model-param-b-DtdfXLqw.js";
 import path from "node:path";

package/dist/{auth-CCGOm7j4.js → auth-B7N969mv.js}

@@ -1,5 +1,5 @@
 import { d as resolveSecretInputRef } from "./types.secrets-CQ90JO4F.js";
-import { Kt as isLocalishHost, Xt as isTrustedProxyAddress, en as resolveClientIp, g as resolveGatewayCredentialsFromValues, qt as isLoopbackAddress } from "./call-5htJiVxi.js";
+import { Kt as isLocalishHost, Xt as isTrustedProxyAddress, en as resolveClientIp, g as resolveGatewayCredentialsFromValues, qt as isLoopbackAddress } from "./call-Ce8vjHmH.js";
 import { c as readTailscaleWhoisIdentity } from "./tailscale-aoZb27we.js";
 import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/security/secret-equal.ts

package/dist/{auth-Cp-1JzUb.js → auth-Bu24hYWH.js}

@@ -1,5 +1,5 @@
 import { d as resolveSecretInputRef } from "./types.secrets-ZqKzSyNC.js";
-import { Kt as isLocalishHost, Xt as isTrustedProxyAddress, en as resolveClientIp, g as resolveGatewayCredentialsFromValues, qt as isLoopbackAddress } from "./call-CKFLqNkw.js";
+import { Kt as isLocalishHost, Xt as isTrustedProxyAddress, en as resolveClientIp, g as resolveGatewayCredentialsFromValues, qt as isLoopbackAddress } from "./call-7be5mSn_.js";
 import { c as readTailscaleWhoisIdentity } from "./tailscale-BypHVf47.js";
 import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/security/secret-equal.ts

package/dist/{auth-choice-DMcjsacO.js → auth-choice-DKqoMQkv.js}

@@ -1,7 +1,7 @@
 import "./subsystem-BEF5zTJO.js";
 import "./paths-BfR2LXbA.js";
 import "./boolean-BHdNsbzF.js";
-import { Cc as normalizeSecretInput, Os as resolveEnvApiKey, Ro as upsertAuthProfile, Sc as normalizeOptionalSecretInput, Vo as ensureAuthProfileStore, la as resolveDefaultSecretProviderAlias, r as resolveAuthProfileOrder, ri as resolveApiKeyForProfile, ss as normalizeProviderId } from "./auth-profiles-B5hyImOM.js";
+import { Cc as normalizeSecretInput, Os as resolveEnvApiKey, Ro as upsertAuthProfile, Sc as normalizeOptionalSecretInput, Vo as ensureAuthProfileStore, la as resolveDefaultSecretProviderAlias, r as resolveAuthProfileOrder, ri as resolveApiKeyForProfile, ss as normalizeProviderId } from "./auth-profiles-D9Wn945p.js";
 import "./agent-scope-OAwT1oHV.js";
 import "./utils-qah6hFG0.js";
 import "./boundary-file-read-BAjRF13y.js";
@@ -19,21 +19,21 @@ import "./path-alias-guards-DHv0a8uY.js";
 import "./plugins-DRDN4jFP.js";
 import "./paths-B-JdyKTL.js";
 import "./chat-envelope-t_PEbhWC.js";
-import "./models-config-B9HFg-NI.js";
-import "./model-catalog-C8EYz2dm.js";
-import "./call-5htJiVxi.js";
-import "./tailnet-BII1rF_F.js";
+import "./models-config-Cg9vUkxp.js";
+import "./model-catalog-DlYPcFqP.js";
+import "./call-Ce8vjHmH.js";
+import "./tailnet-Dd530XEB.js";
 import "./provider-env-vars-Dx8rULyl.js";
 import "./prompt-style-BmwLwm5B.js";
-import { a as normalizeSecretInputModeInput } from "./auth-choice.apply-helpers-C0zKQkgn.js";
-import "./issue-format-BnnZmmHz.js";
-import "./onboard-helpers-B1g1N_R7.js";
-import "./openai-codex-model-default-CNxuNGcG.js";
-import { At as setXiaomiApiKey, B as applyVeniceConfig, Ct as setQianfanApiKey, Dt as setVercelAiGatewayApiKey, Et as setVeniceApiKey, H as applyXaiConfig, I as applySyntheticConfig, J as applyLitellmConfig, K as applyZaiConfig, M as applyOpenrouterConfig, O as applyMoonshotConfig, Ot as setVolcengineApiKey, P as applyQianfanConfig, Q as applyVercelAiGatewayConfig, R as applyTogetherConfig, S as applyMistralConfig, St as setOpenrouterApiKey, T as applyModelStudioConfigCn, Tt as setTogetherApiKey, W as applyXiaomiConfig, X as applyCloudflareAiGatewayConfig, _t as setModelStudioApiKey, b as applyKimiCodeConfig, bt as setOpencodeGoApiKey, ct as setByteplusApiKey, dt as setHuggingfaceApiKey, ft as setKilocodeApiKey, g as applyHuggingfaceConfig, gt as setMistralApiKey, h as applyAuthProfileConfig, ht as setMinimaxApiKey, jt as setZaiApiKey, k as applyMoonshotConfigCn, kt as setXaiApiKey, l as applyMinimaxApiConfig, lt as setCloudflareAiGatewayConfig, mt as setLitellmApiKey, n as validateAnthropicSetupToken, p as applyMinimaxConfig, pt as setKimiCodingApiKey, r as applyOpencodeGoConfig, s as applyOpencodeZenConfig, st as setAnthropicApiKey, t as buildTokenProfileId, u as applyMinimaxApiConfigCn, ut as setGeminiApiKey, v as applyKilocodeConfig, vt as setMoonshotApiKey, w as applyModelStudioConfig, wt as setSyntheticApiKey, xt as setOpencodeZenApiKey, yt as setOpenaiApiKey } from "./auth-token-BHnzfcUl.js";
-import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-CHxnrkRk.js";
-import { r as applyPrimaryModel } from "./model-picker-93hk8EPQ.js";
-import { t as configureOllamaNonInteractive } from "./ollama-setup-DrJZug5K.js";
-import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-CIE9LcFk.js";
+import { a as normalizeSecretInputModeInput } from "./auth-choice.apply-helpers-D_qbnasd.js";
+import "./issue-format-DbKknWy1.js";
+import "./onboard-helpers-Dt3bHndL.js";
+import "./openai-codex-model-default-BYIJH6vZ.js";
+import { At as setXiaomiApiKey, B as applyVeniceConfig, Ct as setQianfanApiKey, Dt as setVercelAiGatewayApiKey, Et as setVeniceApiKey, H as applyXaiConfig, I as applySyntheticConfig, J as applyLitellmConfig, K as applyZaiConfig, M as applyOpenrouterConfig, O as applyMoonshotConfig, Ot as setVolcengineApiKey, P as applyQianfanConfig, Q as applyVercelAiGatewayConfig, R as applyTogetherConfig, S as applyMistralConfig, St as setOpenrouterApiKey, T as applyModelStudioConfigCn, Tt as setTogetherApiKey, W as applyXiaomiConfig, X as applyCloudflareAiGatewayConfig, _t as setModelStudioApiKey, b as applyKimiCodeConfig, bt as setOpencodeGoApiKey, ct as setByteplusApiKey, dt as setHuggingfaceApiKey, ft as setKilocodeApiKey, g as applyHuggingfaceConfig, gt as setMistralApiKey, h as applyAuthProfileConfig, ht as setMinimaxApiKey, jt as setZaiApiKey, k as applyMoonshotConfigCn, kt as setXaiApiKey, l as applyMinimaxApiConfig, lt as setCloudflareAiGatewayConfig, mt as setLitellmApiKey, n as validateAnthropicSetupToken, p as applyMinimaxConfig, pt as setKimiCodingApiKey, r as applyOpencodeGoConfig, s as applyOpencodeZenConfig, st as setAnthropicApiKey, t as buildTokenProfileId, u as applyMinimaxApiConfigCn, ut as setGeminiApiKey, v as applyKilocodeConfig, vt as setMoonshotApiKey, w as applyModelStudioConfig, wt as setSyntheticApiKey, xt as setOpencodeZenApiKey, yt as setOpenaiApiKey } from "./auth-token-BE6nISKT.js";
+import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-GgDZhvmV.js";
+import { r as applyPrimaryModel } from "./model-picker-BdabNhjk.js";
+import { t as configureOllamaNonInteractive } from "./ollama-setup-bTrV2RqI.js";
+import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-W8wE0yre.js";
 //#region src/commands/onboard-non-interactive/api-keys.ts
 function parseEnvVarNameFromSourceLabel(source) {
 	if (!source) return;

package/dist/{auth-choice-tokGZmzT.js → auth-choice-DPZZulXs.js}

@@ -1,18 +1,18 @@
 import { t as __exportAll } from "./rolldown-runtime-DUslC3ob.js";
-import { K as SYNTHETIC_DEFAULT_MODEL_REF, M as resolveEnvApiKey, O as hasUsableCustomProviderApiKey, X as VENICE_DEFAULT_MODEL_REF, at as isHuggingfacePolicyLocked, ba as generateChutesPkce, g as resolveDefaultModelForAgent, ic as upsertAuthProfile, it as discoverHuggingfaceModels, mc as resolveOpenClawAgentDir, sc as ensureAuthProfileStore, tc as listProfilesForProvider, va as CHUTES_AUTHORIZE_ENDPOINT, vt as KILOCODE_DEFAULT_MODEL_REF, wt as resolveAuthProfileOrder, xa as parseOAuthCallbackInput, ya as exchangeChutesCodeForTokens, yt as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF } from "./model-selection-CftqhKNS.js";
-import { A as resolveDefaultAgentWorkspaceDir, P as toAgentModelListLike, a as resolveAgentDir, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-Dv5h0qQE.js";
-import { n as loadModelCatalog } from "./model-catalog-C6EpVMgn.js";
-import { Jt as isLoopbackHost } from "./call-CKFLqNkw.js";
-import { t as enablePluginInConfig } from "./enable-Cf9rGPag.js";
-import { a as normalizeSecretInputModeInput, c as resolveSecretInputModeForEnvSelection, d as normalizeApiKeyInput, f as validateApiKeyInput, i as ensureApiKeyFromOptionEnvOrPrompt, l as applyDefaultModelChoice, n as createAuthChoiceDefaultModelApplierForMutableState, o as normalizeTokenProviderInput, s as promptSecretRefForOnboarding, t as createAuthChoiceAgentModelNoter, u as ensureModelAllowlistEntry } from "./auth-choice.apply-helpers-alZH2ST_.js";
-import { u as openUrl } from "./onboard-helpers-xbYuvLLu.js";
-import { n as applyOpenAICodexModelDefault, t as OPENAI_CODEX_DEFAULT_MODEL } from "./openai-codex-model-default-CvwSM6Hd.js";
-import { $ as applyVercelAiGatewayProviderConfig, A as applyMoonshotProviderConfig, At as setXiaomiApiKey, B as applyVeniceConfig, C as applyMistralProviderConfig, Ct as setQianfanApiKey, D as applyModelStudioProviderConfigCn, Dt as setVercelAiGatewayApiKey, E as applyModelStudioProviderConfig, Et as setVeniceApiKey, F as applyQianfanProviderConfig, Ft as MODELSTUDIO_DEFAULT_MODEL_REF, G as applyXiaomiProviderConfig, H as applyXaiConfig, I as applySyntheticConfig, It as MOONSHOT_DEFAULT_MODEL_REF, J as applyLitellmConfig, K as applyZaiConfig, L as applySyntheticProviderConfig, Lt as QIANFAN_DEFAULT_MODEL_REF, M as applyOpenrouterConfig, Mt as writeOAuthCredentials, N as applyOpenrouterProviderConfig, Nt as KIMI_CODING_MODEL_REF, O as applyMoonshotConfig, Ot as setVolcengineApiKey, P as applyQianfanConfig, Pt as MISTRAL_DEFAULT_MODEL_REF, Q as applyVercelAiGatewayConfig, R as applyTogetherConfig, Rt as XAI_DEFAULT_MODEL_REF, S as applyMistralConfig, St as setOpenrouterApiKey, T as applyModelStudioConfigCn, Tt as setTogetherApiKey, U as applyXaiProviderConfig, V as applyVeniceProviderConfig, W as applyXiaomiConfig, X as applyCloudflareAiGatewayConfig, Y as applyLitellmProviderConfig, Z as applyCloudflareAiGatewayProviderConfig, _ as applyHuggingfaceProviderConfig, _t as setModelStudioApiKey, a as OPENCODE_GO_DEFAULT_MODEL_REF, at as XIAOMI_DEFAULT_MODEL_REF, b as applyKimiCodeConfig, bt as setOpencodeGoApiKey, c as applyOpencodeZenProviderConfig, ct as setByteplusApiKey, d as applyMinimaxApiProviderConfig, dt as setHuggingfaceApiKey, et as HUGGINGFACE_DEFAULT_MODEL_REF, f as applyMinimaxApiProviderConfigCn, ft as setKilocodeApiKey, gt as setMistralApiKey, h as applyAuthProfileConfig, ht as setMinimaxApiKey, i as applyOpencodeGoProviderConfig, it as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, j as applyMoonshotProviderConfigCn, jt as setZaiApiKey, k as applyMoonshotConfigCn, kt as setXaiApiKey, l as applyMinimaxApiConfig, lt as setCloudflareAiGatewayConfig, m as applyMinimaxProviderConfig, mt as setLitellmApiKey, n as validateAnthropicSetupToken, nt as OPENROUTER_DEFAULT_MODEL_REF, ot as ZAI_DEFAULT_MODEL_REF, p as applyMinimaxConfig, pt as setKimiCodingApiKey, q as applyZaiProviderConfig, r as applyOpencodeGoConfig, rt as TOGETHER_DEFAULT_MODEL_REF, s as applyOpencodeZenConfig, st as setAnthropicApiKey, t as buildTokenProfileId, tt as LITELLM_DEFAULT_MODEL_REF, u as applyMinimaxApiConfigCn, ut as setGeminiApiKey, v as applyKilocodeConfig, vt as setMoonshotApiKey, w as applyModelStudioConfig, wt as setSyntheticApiKey, x as applyKimiCodeProviderConfig, xt as setOpencodeZenApiKey, y as applyKilocodeProviderConfig, yt as setOpenaiApiKey, z as applyTogetherProviderConfig } from "./auth-token-Bzfws-T-.js";
+import { K as SYNTHETIC_DEFAULT_MODEL_REF, M as resolveEnvApiKey, O as hasUsableCustomProviderApiKey, X as VENICE_DEFAULT_MODEL_REF, at as isHuggingfacePolicyLocked, ba as generateChutesPkce, g as resolveDefaultModelForAgent, ic as upsertAuthProfile, it as discoverHuggingfaceModels, mc as resolveOpenClawAgentDir, sc as ensureAuthProfileStore, tc as listProfilesForProvider, va as CHUTES_AUTHORIZE_ENDPOINT, vt as KILOCODE_DEFAULT_MODEL_REF, wt as resolveAuthProfileOrder, xa as parseOAuthCallbackInput, ya as exchangeChutesCodeForTokens, yt as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF } from "./model-selection-DU-DNNW7.js";
+import { A as resolveDefaultAgentWorkspaceDir, P as toAgentModelListLike, a as resolveAgentDir, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-BrJT9Gf9.js";
+import { n as loadModelCatalog } from "./model-catalog-BtBiWr2U.js";
+import { Jt as isLoopbackHost } from "./call-7be5mSn_.js";
+import { t as enablePluginInConfig } from "./enable-DevEDLTp.js";
+import { a as normalizeSecretInputModeInput, c as resolveSecretInputModeForEnvSelection, d as normalizeApiKeyInput, f as validateApiKeyInput, i as ensureApiKeyFromOptionEnvOrPrompt, l as applyDefaultModelChoice, n as createAuthChoiceDefaultModelApplierForMutableState, o as normalizeTokenProviderInput, s as promptSecretRefForOnboarding, t as createAuthChoiceAgentModelNoter, u as ensureModelAllowlistEntry } from "./auth-choice.apply-helpers-CJra1kZX.js";
+import { u as openUrl } from "./onboard-helpers-C-tI0ORj.js";
+import { n as applyOpenAICodexModelDefault, t as OPENAI_CODEX_DEFAULT_MODEL } from "./openai-codex-model-default-5GXfiA_D.js";
+import { $ as applyVercelAiGatewayProviderConfig, A as applyMoonshotProviderConfig, At as setXiaomiApiKey, B as applyVeniceConfig, C as applyMistralProviderConfig, Ct as setQianfanApiKey, D as applyModelStudioProviderConfigCn, Dt as setVercelAiGatewayApiKey, E as applyModelStudioProviderConfig, Et as setVeniceApiKey, F as applyQianfanProviderConfig, Ft as MODELSTUDIO_DEFAULT_MODEL_REF, G as applyXiaomiProviderConfig, H as applyXaiConfig, I as applySyntheticConfig, It as MOONSHOT_DEFAULT_MODEL_REF, J as applyLitellmConfig, K as applyZaiConfig, L as applySyntheticProviderConfig, Lt as QIANFAN_DEFAULT_MODEL_REF, M as applyOpenrouterConfig, Mt as writeOAuthCredentials, N as applyOpenrouterProviderConfig, Nt as KIMI_CODING_MODEL_REF, O as applyMoonshotConfig, Ot as setVolcengineApiKey, P as applyQianfanConfig, Pt as MISTRAL_DEFAULT_MODEL_REF, Q as applyVercelAiGatewayConfig, R as applyTogetherConfig, Rt as XAI_DEFAULT_MODEL_REF, S as applyMistralConfig, St as setOpenrouterApiKey, T as applyModelStudioConfigCn, Tt as setTogetherApiKey, U as applyXaiProviderConfig, V as applyVeniceProviderConfig, W as applyXiaomiConfig, X as applyCloudflareAiGatewayConfig, Y as applyLitellmProviderConfig, Z as applyCloudflareAiGatewayProviderConfig, _ as applyHuggingfaceProviderConfig, _t as setModelStudioApiKey, a as OPENCODE_GO_DEFAULT_MODEL_REF, at as XIAOMI_DEFAULT_MODEL_REF, b as applyKimiCodeConfig, bt as setOpencodeGoApiKey, c as applyOpencodeZenProviderConfig, ct as setByteplusApiKey, d as applyMinimaxApiProviderConfig, dt as setHuggingfaceApiKey, et as HUGGINGFACE_DEFAULT_MODEL_REF, f as applyMinimaxApiProviderConfigCn, ft as setKilocodeApiKey, gt as setMistralApiKey, h as applyAuthProfileConfig, ht as setMinimaxApiKey, i as applyOpencodeGoProviderConfig, it as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, j as applyMoonshotProviderConfigCn, jt as setZaiApiKey, k as applyMoonshotConfigCn, kt as setXaiApiKey, l as applyMinimaxApiConfig, lt as setCloudflareAiGatewayConfig, m as applyMinimaxProviderConfig, mt as setLitellmApiKey, n as validateAnthropicSetupToken, nt as OPENROUTER_DEFAULT_MODEL_REF, ot as ZAI_DEFAULT_MODEL_REF, p as applyMinimaxConfig, pt as setKimiCodingApiKey, q as applyZaiProviderConfig, r as applyOpencodeGoConfig, rt as TOGETHER_DEFAULT_MODEL_REF, s as applyOpencodeZenConfig, st as setAnthropicApiKey, t as buildTokenProfileId, tt as LITELLM_DEFAULT_MODEL_REF, u as applyMinimaxApiConfigCn, ut as setGeminiApiKey, v as applyKilocodeConfig, vt as setMoonshotApiKey, w as applyModelStudioConfig, wt as setSyntheticApiKey, x as applyKimiCodeProviderConfig, xt as setOpencodeZenApiKey, y as applyKilocodeProviderConfig, yt as setOpenaiApiKey, z as applyTogetherProviderConfig } from "./auth-token-DeLPA2C5.js";
 import { n as applyAgentDefaultModelPrimary, t as isRemoteEnvironment } from "./oauth-env-B6Y28TeU.js";
-import { a as loginOpenAICodexOAuth, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as createVpsAwareOAuthHandlers, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-YFTUV89g.js";
-import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-BJAcSXF0.js";
-import { r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-C_xmxZQw.js";
-import { i as promptAndConfigureOllama, n as ensureOllamaModelPulled } from "./ollama-setup-Bhphyk4x.js";
+import { a as loginOpenAICodexOAuth, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as createVpsAwareOAuthHandlers, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-BosQdg02.js";
+import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-DvF5RAGp.js";
+import { r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-BZvJOgpa.js";
+import { i as promptAndConfigureOllama, n as ensureOllamaModelPulled } from "./ollama-setup-C0EKmICU.js";
 import { randomBytes } from "node:crypto";
 import { createServer } from "node:http";
 //#region src/commands/auth-choice.apply.anthropic.ts

package/dist/{auth-choice-CzIHMC2n.js → auth-choice-DWfkvDEv.js}

@@ -1,9 +1,9 @@
 import "./paths-BJV7vkaX.js";
 import "./subsystem-Dk5WUhC2.js";
 import "./utils-CGU7Q77u.js";
-import { Do as parseDurationMs, M as resolveEnvApiKey, bc as normalizeOptionalSecretInput, d as normalizeProviderId, ha as resolveApiKeyForProfile, ic as upsertAuthProfile, sc as ensureAuthProfileStore, wt as resolveAuthProfileOrder, xc as normalizeSecretInput, xo as resolveDefaultSecretProviderAlias } from "./model-selection-CftqhKNS.js";
-import "./agent-scope-Dv5h0qQE.js";
-import "./openclaw-root-B6cGCDGF.js";
+import { Do as parseDurationMs, M as resolveEnvApiKey, bc as normalizeOptionalSecretInput, d as normalizeProviderId, ha as resolveApiKeyForProfile, ic as upsertAuthProfile, sc as ensureAuthProfileStore, wt as resolveAuthProfileOrder, xc as normalizeSecretInput, xo as resolveDefaultSecretProviderAlias } from "./model-selection-DU-DNNW7.js";
+import "./agent-scope-BrJT9Gf9.js";
+import "./openclaw-root-DbbVtnL2.js";
 import "./logger-m0MK99MT.js";
 import "./exec-B8ip-O6u.js";
 import "./github-copilot-token-D37fjdwy.js";
@@ -11,27 +11,27 @@ import "./boolean-CJxfhBkG.js";
 import "./env-6my-UEm4.js";
 import "./env-overrides-CSdE_DWV.js";
 import "./registry-BKJyEPHE.js";
-import "./skills-Mq1GCIyL.js";
+import "./skills-D7xInzjY.js";
 import "./frontmatter-DTFXPyoL.js";
-import "./path-alias-guards-DJQOJx9a.js";
+import "./path-alias-guards-DBFU_Tqb.js";
 import "./plugins-Delv1GbW.js";
 import "./paths-DHrunYJK.js";
 import "./chat-envelope-CKaJSmSH.js";
-import "./models-config-yo6Auh6b.js";
-import "./model-catalog-C6EpVMgn.js";
-import "./call-CKFLqNkw.js";
-import "./tailnet-GA0Saj6K.js";
+import "./models-config-xqqHZFkg.js";
+import "./model-catalog-BtBiWr2U.js";
+import "./call-7be5mSn_.js";
+import "./tailnet-lUwvztzP.js";
 import "./provider-env-vars-CyHs_bH9.js";
 import "./prompt-style-Dc8jJv7n.js";
-import { a as normalizeSecretInputModeInput } from "./auth-choice.apply-helpers-alZH2ST_.js";
-import "./issue-format-Dbw0ZKZU.js";
-import "./onboard-helpers-xbYuvLLu.js";
-import "./openai-codex-model-default-CvwSM6Hd.js";
-import { At as setXiaomiApiKey, B as applyVeniceConfig, Ct as setQianfanApiKey, Dt as setVercelAiGatewayApiKey, Et as setVeniceApiKey, H as applyXaiConfig, I as applySyntheticConfig, J as applyLitellmConfig, K as applyZaiConfig, M as applyOpenrouterConfig, O as applyMoonshotConfig, Ot as setVolcengineApiKey, P as applyQianfanConfig, Q as applyVercelAiGatewayConfig, R as applyTogetherConfig, S as applyMistralConfig, St as setOpenrouterApiKey, T as applyModelStudioConfigCn, Tt as setTogetherApiKey, W as applyXiaomiConfig, X as applyCloudflareAiGatewayConfig, _t as setModelStudioApiKey, b as applyKimiCodeConfig, bt as setOpencodeGoApiKey, ct as setByteplusApiKey, dt as setHuggingfaceApiKey, ft as setKilocodeApiKey, g as applyHuggingfaceConfig, gt as setMistralApiKey, h as applyAuthProfileConfig, ht as setMinimaxApiKey, jt as setZaiApiKey, k as applyMoonshotConfigCn, kt as setXaiApiKey, l as applyMinimaxApiConfig, lt as setCloudflareAiGatewayConfig, mt as setLitellmApiKey, n as validateAnthropicSetupToken, p as applyMinimaxConfig, pt as setKimiCodingApiKey, r as applyOpencodeGoConfig, s as applyOpencodeZenConfig, st as setAnthropicApiKey, t as buildTokenProfileId, u as applyMinimaxApiConfigCn, ut as setGeminiApiKey, v as applyKilocodeConfig, vt as setMoonshotApiKey, w as applyModelStudioConfig, wt as setSyntheticApiKey, xt as setOpencodeZenApiKey, yt as setOpenaiApiKey } from "./auth-token-Bzfws-T-.js";
-import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-BJAcSXF0.js";
-import { r as applyPrimaryModel } from "./model-picker-C_xmxZQw.js";
-import { t as configureOllamaNonInteractive } from "./ollama-setup-Bhphyk4x.js";
-import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-CaacLXtg.js";
+import { a as normalizeSecretInputModeInput } from "./auth-choice.apply-helpers-CJra1kZX.js";
+import "./issue-format-hszNX8Io.js";
+import "./onboard-helpers-C-tI0ORj.js";
+import "./openai-codex-model-default-5GXfiA_D.js";
+import { At as setXiaomiApiKey, B as applyVeniceConfig, Ct as setQianfanApiKey, Dt as setVercelAiGatewayApiKey, Et as setVeniceApiKey, H as applyXaiConfig, I as applySyntheticConfig, J as applyLitellmConfig, K as applyZaiConfig, M as applyOpenrouterConfig, O as applyMoonshotConfig, Ot as setVolcengineApiKey, P as applyQianfanConfig, Q as applyVercelAiGatewayConfig, R as applyTogetherConfig, S as applyMistralConfig, St as setOpenrouterApiKey, T as applyModelStudioConfigCn, Tt as setTogetherApiKey, W as applyXiaomiConfig, X as applyCloudflareAiGatewayConfig, _t as setModelStudioApiKey, b as applyKimiCodeConfig, bt as setOpencodeGoApiKey, ct as setByteplusApiKey, dt as setHuggingfaceApiKey, ft as setKilocodeApiKey, g as applyHuggingfaceConfig, gt as setMistralApiKey, h as applyAuthProfileConfig, ht as setMinimaxApiKey, jt as setZaiApiKey, k as applyMoonshotConfigCn, kt as setXaiApiKey, l as applyMinimaxApiConfig, lt as setCloudflareAiGatewayConfig, mt as setLitellmApiKey, n as validateAnthropicSetupToken, p as applyMinimaxConfig, pt as setKimiCodingApiKey, r as applyOpencodeGoConfig, s as applyOpencodeZenConfig, st as setAnthropicApiKey, t as buildTokenProfileId, u as applyMinimaxApiConfigCn, ut as setGeminiApiKey, v as applyKilocodeConfig, vt as setMoonshotApiKey, w as applyModelStudioConfig, wt as setSyntheticApiKey, xt as setOpencodeZenApiKey, yt as setOpenaiApiKey } from "./auth-token-DeLPA2C5.js";
+import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-DvF5RAGp.js";
+import { r as applyPrimaryModel } from "./model-picker-BZvJOgpa.js";
+import { t as configureOllamaNonInteractive } from "./ollama-setup-C0EKmICU.js";
+import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-C3vRGHsc.js";
 //#region src/commands/onboard-non-interactive/api-keys.ts
 function parseEnvVarNameFromSourceLabel(source) {
 	if (!source) return;